Sie sind auf Seite 1von 580

Telindus 1423 SHDSL Router 1 Reference manual

Reference manual

1 Telindus 1423 SHDSL Router User and reference manual

Table of contents

Table of contents

Reference manual .................................................................................. 1


MR-1Configuration attributes ...................................................................................4
MR-1.1Configuration attribute overview .............................................................................. 5 MR-1.2General configuration attributes............................................................................. 14 MR-1.3LAN interface configuration attributes.................................................................... 20 MR-1.4WAN interface configuration attributes .................................................................. 35 MR-1.5Encapsulation configuration attributes ................................................................... 37 MR-1.6SHDSL line configuration attributes ....................................................................... 66 MR-1.7End and repeater configuration attributes.............................................................. 77 MR-1.8BRI configuration attributes ................................................................................... 79 MR-1.9Profiles configuration attributes ............................................................................. 88 MR-1.10Dial maps configuration attributes ..................................................................... 116 MR-1.11Bundle configuration attributes .......................................................................... 121 MR-1.12Router configuration attributes........................................................................... 126 MR-1.13Bridge configuration attributes ........................................................................... 222 MR-1.14SNMP configuration attributes ........................................................................... 235 MR-1.15Management configuration attributes ................................................................ 237

MR-2Status attributes ............................................................................................248


MR-2.1Status attribute overview ..................................................................................... 249 MR-2.2General status attributes...................................................................................... 258 MR-2.3LAN interface status attributes............................................................................. 262 MR-2.4WAN interface status attributes ........................................................................... 271 MR-2.5Encapsulation status attributes ............................................................................ 274 MR-2.6SHDSL line status attributes ................................................................................ 297 MR-2.7End and repeater status attributes....................................................................... 302 MR-2.8BRI status attributes ............................................................................................ 306 MR-2.9AUX status attributes ........................................................................................... 318 MR-2.10Profile status attributes ...................................................................................... 321 MR-2.11Dial maps status attributes ................................................................................ 323 MR-2.12Bundle status attributes ..................................................................................... 326 MR-2.13Router status attributes...................................................................................... 334 MR-2.14Bridge status attributes ...................................................................................... 377 MR-2.15Management status attributes ........................................................................... 384 MR-2.16File system status attributes .............................................................................. 389 MR-2.17Operating system status attributes .................................................................... 399

Telindus 1423 SHDSL Router User and reference manual

Table of contents 2

MR-3Performance attributes .................................................................................402


MR-3.1Performance attributes overview ......................................................................... 403 MR-3.2General performance attributes ........................................................................... 410 MR-3.3LAN interface performance attributes .................................................................. 412 MR-3.4WAN interface performance attributes................................................................. 417 MR-3.5Encapsulation performance attributes ................................................................. 418 MR-3.6SHDSL line performance attributes ..................................................................... 431 MR-3.7End and repeater performance attributes ............................................................ 435 MR-3.8BRI performance attributes .................................................................................. 436 MR-3.9AUX performance attributes ................................................................................ 441 MR-3.10Dial maps performance attributes ...................................................................... 442 MR-3.11Bundle performance attributes........................................................................... 444 MR-3.12Router performance attributes ........................................................................... 447 MR-3.13IP traffic policy performance attributes .............................................................. 469 MR-3.14Bridge performance attributes ........................................................................... 471 MR-3.15Management performance attributes ................................................................. 477 MR-3.16Operating system performance attributes.......................................................... 480

MR-4Alarm attributes .............................................................................................484


MR-4.1Alarm attributes overview .................................................................................... 485 MR-4.2Introducing the alarm attributes ........................................................................... 488 MR-4.3General alarms .................................................................................................... 491 MR-4.4LAN interface alarms ........................................................................................... 493 MR-4.5WAN interface alarms .......................................................................................... 494 MR-4.6SHDSL line alarms .............................................................................................. 495 MR-4.7SHDSL line pair alarms ....................................................................................... 496 MR-4.8End and repeater alarms ..................................................................................... 498 MR-4.9BRI alarms ........................................................................................................... 500 MR-4.10B-channel alarms ............................................................................................... 501 MR-4.11AUX alarms........................................................................................................ 502 MR-4.12Bundle alarms .................................................................................................... 503 MR-4.13Router alarms .................................................................................................... 504

MR-5TMA sub-system picture...............................................................................506 MR-6Auto installing the Telindus 1423 SHDSL Router.......................................508
MR-6.1Introducing the auto-install protocols ................................................................... 509 MR-6.2Auto-install on the LAN interface ......................................................................... 511 MR-6.3Auto-install on the WAN interface ........................................................................ 516 MR-6.4Creating a configuration file ................................................................................. 523 MR-6.5Restoring a configuration file ............................................................................... 530

3 Telindus 1423 SHDSL Router User and reference manual

Table of contents

MR-7Downloading software ..................................................................................534


MR-7.1What is boot and application software? ............................................................... 535 MR-7.2Downloading application software using TMA ..................................................... 536 MR-7.3Downloading application software using TFTP.................................................... 537 MR-7.4Downloading application software using TML ..................................................... 538 MR-7.5Downloading application software using FTP ...................................................... 539 MR-7.6Downloading application software in boot mode ................................................. 540 MR-7.7Downloading files to the file system..................................................................... 541

MR-8Technical specifications ...............................................................................542


MR-8.1SHDSL line specifications.................................................................................... 543 MR-8.2Basic Rate ISDN interface specifications ............................................................ 545 MR-8.3LAN interface specifications ................................................................................ 546 MR-8.44 port Ethernet switch specifications ................................................................... 546 MR-8.5Control connector specifications .......................................................................... 547 MR-8.6IP address assignment and auto-provisioning ..................................................... 548 MR-8.7ATM encapsulation specifications ....................................................................... 549 MR-8.8Frame Relay encapsulation specifications .......................................................... 550 MR-8.9PPP encapsulation specifications ........................................................................ 550 MR-8.10Other WAN encapsulation specifications........................................................... 550 MR-8.11IP routing specifications ..................................................................................... 551 MR-8.12Bridging specifications ....................................................................................... 553 MR-8.13Network address translation specifications........................................................ 554 MR-8.14Tunnelling and VPN specifications .................................................................... 555 MR-8.15Priority and traffic policy specifications .............................................................. 556 MR-8.16Routing and bridging performance specifications .............................................. 558 MR-8.17Firewall specifications ........................................................................................ 558 MR-8.18Access security specifications ........................................................................... 559 MR-8.19Maintenance and management specifications................................................... 559 MR-8.20Memory specifications ....................................................................................... 560 MR-8.21Power requirements........................................................................................... 560 MR-8.22Dimensions ........................................................................................................ 560 MR-8.23Safety compliance ............................................................................................. 561 MR-8.24Over-voltage and over-current protection compliance ....................................... 561 MR-8.25EMC compliance................................................................................................ 561 MR-8.26Environmental compliance................................................................................. 561

Annex .................................................................................................. 562 Index .................................................................................................... 568

Telindus 1423 SHDSL Router User manual

Chapter MR-1 4 Configuration attributes

MR-1 Configuration attributes


This chapter discusses the configuration attributes of the Telindus 1423 SHDSL Router. The following gives an overview of this chapter: MR-1.1 - Configuration attribute overview on page 5 MR-1.2 - General configuration attributes on page 14 MR-1.3 - LAN interface configuration attributes on page 20 MR-1.4 - WAN interface configuration attributes on page 35 MR-1.5 - Encapsulation configuration attributes on page 37 MR-1.6 - SHDSL line configuration attributes on page 66 MR-1.7 - End and repeater configuration attributes on page 77 MR-1.8 - BRI configuration attributes on page 79 MR-1.9 - Profiles configuration attributes on page 88 MR-1.10 - Dial maps configuration attributes on page 116 MR-1.11 - Bundle configuration attributes on page 121 MR-1.12 - Router configuration attributes on page 126 MR-1.13 - Bridge configuration attributes on page 222 MR-1.14 - SNMP configuration attributes on page 235 MR-1.15 - Management configuration attributes on page 237

5 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.1 Configuration attribute overview


Refer to MU-4.3 - Les objets dans l'arborescence Routeur Telindus 1423 SHDSL on page 46 to find out which objects are present by default, which ones you can add yourself and which ones are added automatically. > telindus1423Router sysName sysContact sysLocation bootFromFlash security alarmMask alarmLevel Action: Activate Configuration Action: Load Default Configuration Action: Load Preconfiguration Action: Load Saved Configuration Action: Cold Boot >> lanInterface name mode ip bridging priorityPolicy arp adapter1 vlan switchMode2 ports2 bcastStormProtection2 alarmMask alarmLevel >> wanInterface name encapsulation priorityPolicy maxFifoQLen alarmMask alarmLevel >>> atm pvcTable vp atm 1. Only present on the single port LAN interface. 2. Only present on the 4 port LAN interface.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 6 Configuration attributes

>>> frameRelay ip dlciTable lmi modeLearnedDlci delayOptimisation fragmentation mru >>> ppp ip mode bridging delayOptimisation mru compression linkMonitoring authentication authenPeriod sessionName sessionSecret >>> hdlc bridging mru >>> errorTest testType blockSize programmablePattern

7 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

>>> line channel region timingMode retrain startupMargin minSpeed maxSpeed minSpeed2P3 maxSpeed2P3 mode3 dualPairMode linkAlarmThresholds numExpectedRepeaters eocHandling management alarmMask alarmLevel >>>> linePair[ ] alarmMask alarmLevel >>> repeater[ ] >>>> networkLinePair[ ] alarmMask alarmLevel >>>> customerLinePair[ ] alarmMask alarmLevel >>> end >>>> linePair[ ] alarmMask alarmLevel >> bri[1]4 tei teiValue telephoneNrs dialAllowed alarmMask alarmLevel 3. Only present in case of a 2 pair version. 4. Only present on the Telindus 1423 SHDSL Router ISDN version.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 8 Configuration attributes

>>> bChannel[1] alarmMask alarmLevel >>> bChannel[2] <Contains the same attributes as the bChannel[1] object.> >>> leasedLine[ ] encapsulation priorityPolicy maxFifoQLen channelAllocation alarmMask alarmLevel >>>> frameRelay ip mode dlciTable lmi modeLearnedDlci delayOptimisation fragmentation mru >>>> ppp ip mode bridging delayOptimisation mru compression linkMonitoring authentication authenPeriod sessionName sessionSecret >>>> hdlc bridging mru >>>> errorTest testType blockSize programmablePattern >> bri[2]5 <Contains the same attributes as the bri[1] object.>

9 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

>> profiles4 >>> dial >>>> defaultIsdn isdnInterfaces dialPktBufSize idleTimeOut fastIdleTimeOut callInterval callTimeOut 24hMaxCallTime dialTimeTable maxChannelsUsed minChannelsFree >>>> isdn[ ] <Contains the same attributes as the dial/defaultIsdn object.> >>> encapsulation >>>> defaultPpp linkMonitoring authentication authenPeriod compression connection multilink >>>> ppp[ ] <Contains the same attributes as the encapsulation/ppp object.> >>> forwardingMode >>>> defaultRouting ip priorityPolicy maxFifoQLen >>>> routing[ ] <Contains the same attributes as the forwardingMode/defaultRouting object.>

5. Only present on the Telindus 1423 SHDSL Router 2 port ISDN version.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 10 Configuration attributes

>>> policy >>>> traffic >>>>> ipTrafficPolicy[ ] method trafficShaping tos2QueueMapping dropLevels >>>>> bridgingTrafficPolicy[ ] vlanPriorityMap dropLevels >>>> priority >>>>> priorityPolicy[ ] algorithm countingPolicy queueConfigurations lowdelayQuotum bandwidth >> dialMaps4 mapping >> bundle >>> pppBundle[ ] members mode ip bridging fragmentation multiclassInterfaces alarmMask alarmLevel

11 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

>> router defaultRoute routingTable routingProtocol alternativeRoutes ripUpdateInterval ripHoldDownTime ripv2SecretTable sysSecret pppSecretTable helperProtocols sendTtlExceeded sendPortUnreachable sendAdminUnreachable dhcpStatic dhcpDynamic dhcpCheckAddress radius dns addrPools4 alarmMask alarmLevel >>> defaultNat patAddress portTranslations servicesAvailable addresses gateway tcpSocketTimeOut udpSocketTimeOut tcpSockets udpSockets dmzHost >>> nat[ ] <Contains the same objects as the defaultNat object.> >>> tunnels l2tpTunnels ipsecL2tpTunnels >>> manualSA[ ] espEncryptionAlgorithm espEncryptionKey espAuthenticationAlgorithm espAuthenticationKey spi

Telindus 1423 SHDSL Router User manual

Chapter MR-1 12 Configuration attributes

>>> ikeSA[ ] phase1 phase2 >>> routingFilter[ ] filter >>> ospf routerId refBandwidth keyChains >>>> area areaId stub networks virtualLinks ranges >>> firewall inspection outboundPolicies inboundPolicies outboundSelfPolicies inboundSelfPolicies attacks log >> bridge >>> bridgeGroup name ip arp bridgeCache bridgeTimeOut spanningTree localAccess macAddress vlan vlanSwitching

13 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

>>> vpnBridgeGroup[ ] ip arp bridgeCache bridgeTimeOut spanningTree localAccess macAddress vlan vlanSwitching >>> accessList[ ] macAddress >> snmp trapDestinations mib2Traps >> management cms2Address accessList snmp telnet tftp ftp accessPolicy consoleNoTrafficTimeOut alarmFilter atwinGraphics timedStatsAvailability timeServer timeZone sysLog loginControl ctrlPortProtocol >>> loopback ipAddress ipNetMask

Telindus 1423 SHDSL Router User manual

Chapter MR-1 14 Configuration attributes

MR-1.2 General configuration attributes


This section describes the following configuration attributes: telindus1423Router/sysName on page 15 telindus1423Router/sysContact on page 15 telindus1423Router/sysLocation on page 15 telindus1423Router/bootFromFlash on page 15 telindus1423Router/security on page 16 telindus1423Router/<alarmConfigurationAttributes> on page 17

This section describes the following actions: telindus1423Router/Activate Configuration on page 18 telindus1423Router/Load Default Configuration on page 18 telindus1423Router/Load Preconfiguration on page 18 telindus1423Router/Load Saved Configuration on page 19 telindus1423Router/Cold Boot on page 19

15 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/sysName Use this attribute to assign a name to the Telindus 1423 SHDSL Router. The sysName attribute is an SNMP MIB2 parameter.

Default:<empty> Range: 0 64 characters

This attribute is also used in the PPP authentication process. The PPP authenticator uses the sysName attribute in order to verify the peer its response. For more information on PPP authentication, refer to MU-7.4.6 - Configuration de PAP on page 171 MU-7.4.8 - Configuration de CHAP on page 175 Default:<empty> Range: 0 64 characters

telindus1423Router/sysContact

Use this attribute to add contact information. You could, for instance, enter the name and telephone number of the person to contact in case problem occur. The sysContact attribute is an SNMP MIB2 parameter. telindus1423Router/sysLocation Use this attribute to specify the physical location of the Telindus 1423 SHDSL Router. The sysLocation attribute is an SNMP MIB2 parameter. telindus1423Router/bootFromFlash

Default:<empty> Range: 0 64 characters

Part of the flash memory of the Telindus 1423 SHDSL Router is organised as a file system. In this file system, you can store two complete application software versions. You can use the bootFromFlash attribute to switch between these softwares. When you store two application software versions in the file system, they are automatically renamed as CONTROL1 and CONTROL2, respectively. You can check this with the status attribute telindus1423Router/ fileSystem/fileList. The bootFromFlash attribute has the following values: Value flash1 flash2 auto When the Telindus 1423 SHDSL Router boots the application software CONTROL1 is active. the application software CONTROL2 is active. the Telindus 1423 SHDSL Router automatically chooses the most recent application software. It does this by comparing the application software version numbers.

Default:auto Range: enumerated, see below

Telindus 1423 SHDSL Router User manual

Chapter MR-1 16 Configuration attributes

telindus1423Router/security

Use this attribute to create a list of passwords with associated access levels in order to avoid unauthorised access to the Telindus 1423 SHDSL Router and the network. The security table contains the following elements: Element password Description Use this element to set the password. You can then associate this password with a certain access level. Also see Important remarks on page 17. accessRights Use this element to set the access level associated with the password. It is a bit string of which each bit corresponds to an access level. The different access levels are listed below.

Default:<empty> Range: table, see below

Default:<empty> Range: 0 20 characters

Default:1111 Range: bit string, see below

The following table shows, for each access level, what you can or can not do: Access level readAccess writeAccess securityAccess fileSystemAccess Read attributes yes yes no no Change attributes no yes no no Read security attributes1 no no yes no Change security attributes no no yes no Execute actions2 no yes no no Access file system no no no yes

1. The Telindus 1423 SHDSL Router has the following security attributes: telindus1423Router/sysName telindus1423Router/security telindus1423Router/router/sysSecret, pppSecretTable and ripv2SecretTable telindus1423Router/router/priorityPolicy and trafficPolicy telindus1423Router/wanInterface/ppp/authentication and authenPeriod telindus1423Router/management/accessList, snmp, telnet and tftp 2. Actions are e.g. Cold Boot, clearArpCache, clearBridgeCache, etc

17 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Important remarks If you create no passwords, everybody has complete access. If you define at least one password, it is impossible to access the Telindus 1423 SHDSL Router with one of the management systems without entering the correct password. If you create a list of passwords, create at least one with write and security access. If not, you will be unable to make configuration and password changes after activation of the new configuration. If you access the Telindus 1423 SHDSL Router via RADIUS, then this requires that the password is associated with a user. So in that case, enter the username and password in the password element as follows: "username:password". Note that if the : is omitted, then the string is considered to be a password. Note that if you do not access the device via RADIUS, but you access it directly with e.g. TMA, then you have to enter the complete string, i.e. "username:password". Not just the password part of the string.

telindus1423Router/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the telindus1423Router object, refer to MR-4.3 - General alarms on page 491.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 18 Configuration attributes

telindus1423Router/Activate Configuration If you execute this action, then the editable non-active configuration becomes the active configuration. Refer to MU-5.6.1 - Quels sont les diffrents types de configuration ? on page 89 for more information. When use this action? If you configure the Telindus 1423 SHDSL Router using any other maintenance tool than the graphical user interface based TMA (e.g. ATWIN, CLI, Web Interface, EasyConnect terminal, TMA CLI), then execute the Activate Configuration action to activate the configuration after you finished configuring the Telindus 1423 SHDSL Router or after you executed the Load Saved Configuration or Load Default Configuration action. TMA, then do not just execute the Activate Configuration action to activate the configuration after you finished configuring the Telindus 1423 SHDSL Router, but use the TMA button Send all attributes to device instead. You must, however, execute the Activate Configuration action after you executed the Load Saved Configuration or Load Default Configuration action. The default or saved configuration will only be activated by the action Activate Configuration.

telindus1423Router/Load Default Configuration If you execute this action, then the non-active configuration is overwritten by the default configuration. Refer to MU-5.6.1 - Quels sont les diffrents types de configuration ? on page 89 for more information. When use this action? If you install the Telindus 1423 SHDSL Router for the first time, all configuration attributes have their default values. If the Telindus 1423 SHDSL Router has already been configured but you want to start from scratch, then use this action to revert to the default configuration. telindus1423Router/Load Preconfiguration If you execute this action, then the non-active configuration is overwritten by the preconfiguration (if present, else this action does nothing). Refer to MU-5.6.1 - Quels sont les diffrents types de configuration ? on page 89 for more information. When use this action? If you install the Telindus 1423 SHDSL Router for the first time and if a preconfiguration is present (i.e. a precfg.cms file is present on the file system), then some configuration attributes will be set to a preconfigured value. The rest of the attributes will be set to their default values. If the Telindus 1423 SHDSL Router has already been configured but you want to revert to the preconfiguration, then use this action.

19 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/Load Saved Configuration If you execute this action, then the non-active configuration is overwritten by the active configuration currently used by the Telindus 1423 SHDSL Router. Refer to MU-5.6.1 - Quels sont les diffrents types de configuration ? on page 89 for more information. When use this action? If you are in the progress of modifying the non-active configuration but made some mistakes, then use this action to revert to the active configuration. telindus1423Router/Cold Boot If you execute this action, then the Telindus 1423 SHDSL Router reboots. As a result, the Telindus 1423 SHDSL Router performs a self-test. checks the software. reads the saved configuration and restarts program execution.

When use this action? Use this action, for instance, to activate new application software.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 20 Configuration attributes

MR-1.3 LAN interface configuration attributes


This section describes the following configuration attributes: telindus1423Router/lanInterface/name on page 21 telindus1423Router/lanInterface/mode on page 21 telindus1423Router/lanInterface/ip on page 21 telindus1423Router/lanInterface/bridging on page 21 telindus1423Router/lanInterface/priorityPolicy on page 22 telindus1423Router/lanInterface/arp on page 22 telindus1423Router/lanInterface/adapter on page 23 telindus1423Router/lanInterface/vlan on page 24 telindus1423Router/lanInterface1/switchMode on page 30 telindus1423Router/lanInterface1/ports on page 30 telindus1423Router/lanInterface1/bcastStormProtection on page 33 telindus1423Router/lanInterface/<alarmConfigurationAttributes> on page 34

21 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/lanInterface/name Use this attribute to assign an administrative name to the LAN interface. telindus1423Router/lanInterface/mode Use this attribute to determine whether the packets are treated by the routing process, the bridging process or both. The mode attribute has the following values: Value bridging Description All packets are bridged.

Default:lan Range: 1 24 characters

Default:bridging Range: enumerated, see below

The settings of the IP configuration attributes of the LAN are ignored. If you want to manage the Telindus 1423 SHDSL Router via IP, you have to configure an IP address in the bridgeGroup object. Refer to telindus1423Router/bridge/ bridgeGroup/ip on page 224. routing routingAndBridging The IP packets are routed. All other protocols are discarded. IP packets are routed. Non-IP packets are bridged. The settings of the IP configuration attributes are taken into account.

telindus1423Router/lanInterface/ip Use this attribute to configure the IP related parameters of the LAN interface. Refer to

Default:Range: structure, see below

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure.

Important remark If you set the configuration attribute telindus1423Router/lanInterface/mode to bridging, then the settings of the configuration attribute telindus1423Router/lanInterface/ip are ignored. As a result, if you want to manage the Telindus 1423 SHDSL Router via IP, you have to configure an IP address in the bridgeGroup object instead: telindus1423Router/bridge/bridgeGroup/ip.

telindus1423Router/lanInterface/bridging Use this attribute to configure the bridging related parameters of the LAN interface. Refer to

Default:Range: structure, see below

MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 22 Configuration attributes

telindus1423Router/lanInterface/priorityPolicy Use this attribute to apply a priority policy on the LAN interface.

Default:<empty> Range: 0 24 characters

Do this by entering the index name of the priority policy you want to use. You can create the priority policy itself by adding a priorityPolicy object and by configuring the attributes in this object. Example If you created a priorityPolicy object with index name my_priority_policy (i.e. priorityPolicy[my_priority_policy]) and you want to apply this priority policy here, then enter the index name as value for the priorityPolicy attribute. Refer to MU-8.8.6 - Cration d'une politique de priorit on page 259 for more information on priority policies. telindus1423Router/lanInterface/arp Use this attribute to configure the Address Resolution Protocol (ARP) cache. The arp structure contains the following elements: Element timeOut Description Use this element to set the ageing time of the ARP cache entries. Refer to The ARP cache time-out. Default:00000d 02h 00m 00s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s Default:enabled Range: enabled / disabled Default:Range: structure, see below

proxyArp

Use this element to enable or disable the proxy ARP mechanism. Refer to What is proxy ARP?.

Note that when you want to access a proxied device via its IP address that is configured in the telindus1423Router/proxy/nmsGroup/objectTable, then the proxyArp element must be set to enabled.

What is the ARP cache? The LAN interface has been allocated a fixed Ethernet address, also called MAC (Medium Access Control) address. This MAC address is not user configurable. The IP address of the LAN interface, on the other hand, is user configurable. This means that the user associates an IP address with the predefined MAC address. The MAC address - IP address pairs are kept in a table, called the ARP cache. Refer to telindus1423Router/lanInterface/arpCache on page 265 for an example of such a table. How does the ARP cache work? Before the Telindus 1423 SHDSL Router sends an IP packet on the LAN interface, it has to know the MAC address of the destination device. If the address is not present in the ARP cache table yet, the Telindus 1423 SHDSL Router sends an ARP request on the Ethernet to learn the MAC address and associated IP address of the destination device. This address pair is then written in the ARP cache. Once the address pair is present, the Telindus 1423 SHDSL Router can reference to this pair if it has to send an IP packet to the same device later on.

23 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

The ARP cache time-out Summarised, all the MAC address - IP address pairs from ARP requests and replies received on the LAN interface are kept in the ARP cache. However, if devices on the network are reconfigured then this MAC address - IP address relation may change. Therefore, the ARP cache entries are automatically removed from the cache after a fixed time-out. This time-out period can be set with the timeOut element. What is proxy ARP? Proxy ARP is the technique in which one host, usually a router, answers ARP requests intended for another machine. By "faking" its identity, the router accepts responsibility for routing packets to the "real" destination. Proxy ARP can help machines on a subnet reach remote subnets without configuring routing or a default gateway. The advantages and disadvantages of proxy ARP are listed below: advantages The main advantage of using proxy ARP is that it can be added to a single router on a network without disturbing the routing tables of the other routers on the network. Proxy ARP should be used on the network where IP hosts are not configured with default gateway or does not have any routing intelligence. disadvantages Hosts have no idea of the physical details of their network and assume it to be a flat network in which they can reach any destination simply by sending an ARP request. But using ARP for everything has disadvantages, some of which are listed below: It increases the amount of ARP traffic on your segment. Hosts need larger ARP tables to handle IP-to-MAC address mappings. Security may be undermined. A machine can claim to be another in order to intercept packets, an act called "spoofing." It does not work for networks that do not use ARP for address resolution. It does not generalise to all network topologies (for example, more than one router connecting two physical networks).

telindus1423Router/lanInterface/adapter Only present on the single port LAN interface. Use this attribute to set the Ethernet mode of the LAN interface.

Default:autoDetect Range: enumerated, see below

The adapter attribute has the following values: autoDetect, 10Mb/halfDuplex, 10Mb/fullDuplex, 100Mb/halfDuplex, 100Mb/fullDuplex.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 24 Configuration attributes

telindus1423Router/lanInterface/vlan

Use this attribute to create and configure VLANs. Refer to MU-10.3 - Configurer les VLAN on page 325 for an introduction and a step-by-step procedure.

Default:<empty> Range: table, see below

As long as no VLANs are created in the vlan table, the LAN interface accepts both VLAN untagged and VLAN tagged frames. The VLAN untagged frames are bridged and/or routed (depending on the setting of the mode attribute). The VLAN tagged frames are bridged (in case the mode attribute is set to bridging or bridgingAndRouting, else they are discarded). As soon as a VLAN is created in the vlan table, the LAN interface still accepts VLAN untagged frames but only accepts those VLAN tagged frames of which the VLAN ID corresponds with the VLAN ID that has been configured in the vlan table (refer to the configuration element vid on page 26). Other VLAN tagged frames are discarded. Note that in case of the Telindus 1423 SHDSL Router 4 port Ethernet switch, the vlan table of the 4 port Ethernet switch has to be used only if you want that VLAN tagged packets inside the 4 port Ethernet switch are forwarded to the bridging or routing function of the Telindus 1423 SHDSL Router. Refer to for MU-10.4 - Configuration de VLAN sur le commutateur Ethernet 4 ports on page 334 more information. The vlan table contains the following elements: Element name Description Use this element to assign an administrative name to the VLAN. Use this element to activate (up) or deactivate (down) the VLAN. Default:<empty> Range: 0 24 characters Default:up Range: up / down

adminStatus

mode

Use this element to determine whether, for the corre- Default:bridging sponding VLAN, the packets are treated by the rout- Range: enumerated, see below ing process or the bridging process. The mode element has the following values: bridging. All packets received on the VLAN are bridged. routing. All packets received on the VLAN are routed. Default:Range: structure, see below

ip

Use this element to configure the IP related parameters of the VLAN. Refer to

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:Range: structure, see below

bridging

Use this element to configure the bridging related parameters of the VLAN. Refer to

MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure.

25 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element vlan

Description Use this element to configure the specific VLAN parameters. Default:Range: structure, see below

Refer to telindus1423Router/lanInterface/vlan/vlan on page 26 for a detailed description of the vlan structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 26 Configuration attributes

telindus1423Router/lanInterface/vlan/vlan Use the vlan structure in the vlan table to configure the VLAN related parameters of the corresponding VLAN.

Default:Range: structure, see below

Refer to MU-10.3 - Configurer les VLAN on page 325 for an introduction on VLANs. The vlan structure contains the following elements: Element vid Description Use this element to set the VLAN ID. Default:1 Range: 0 4095

Important remark You can also enter VLAN tag 0 as VLAN ID. This is not really a VLAN, but a way to reverse the filtering: all the untagged data is passed, internally, to VLAN 0. all the other, tagged, data for which no VLANs are defined, are handled by the main LAN interface.

This allows a set-up where a number of VLANs are VLAN switched, while other VLANs and untagged data are bridged. This is particularly interesting for VLAN based networks with Ethernet switch discovery protocols like Cisco CDP. Until now, this was not possible since the VLAN switching mode did not allow flooding packets over multiple interfaces (bridging), nor did it allow terminating management data in the device. In such set-up, the configuration looks as follows: - A first bridge group includes all VLANs that need to be switched. This bridge group is set in VLAN switching mode. A second bridge group includes VLAN 0 and possibly also a VLAN for management of the device. The interface VLAN table(s) include(s) entries for all switched VLANs, VLAN 0 and possibly a VLAN for management.

27 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element tagSignificance

Description This element is only relevant when you set the mode element to bridging. Default:global Range: local / global

Use this element to determine whether the VLAN tag has a local or a global significance. The tagSignificance element has the following values: local. The VLAN tag only has a local significance, i.e. it is only present on the LAN interface side. This means that when the data is moved from the LAN interface to the bridge group, the VLAN tag is removed. from the bridge group to the LAN interface, the VLAN tag is added. Keep in mind that when the VLAN tag is removed, you not only discard the VLAN ID but also the user priority. When you perform bridging between VLANs, then set the tagSignificance element to local. Else you get multiple VLAN tags in the Ethernet frames. global. The VLAN tag has a global significance, i.e. it is both present on the LAN interface and the bridge group side. This means that when the data is moved from the LAN interface to the bridge group or vice versa, the VLAN tag is always preserved.

Refer to the figure Local or global VLAN tag significance on page 29. txCos Use this element to set the default user priority (802.1P, also called COS) of the transmitted VLAN frames. Default:0 Range: 0 7

changeTos

Use this element to enable or disable the COS to TOS Default:disabled mapping. Range: enabled / disabled If you set the changeTos attribute to disabled, then the element cosTosMap is ignored. Note that the TOS to COS mapping is always enabled, irrespective with the setting of the changeTos attribute.

cosTosMap

Use this element to determine how the VLAN user pri- Default:ority (COS) maps onto the IP TOS byte value. Range: structure, see below Note that the COS to TOS mapping only occurs in case or the mode element is set to bridging, the changeTos element is set to enabled and the tagSignificance element is set to local. the mode element is set to routing and the changeTos element is set to enabled.

The cosTosMap structure contains the following elements: p0 p7. Use these elements to define which VLAN user priority (0 up to 7) maps onto which IP TOS byte value (0 up to 255). Default:0 Range: 0 7

Telindus 1423 SHDSL Router User manual

Chapter MR-1 28 Configuration attributes

Element tosCosMap

Description Use this element to determine how the IP TOS byte value maps onto the VLAN user priority (COS). Default:Range: table, see below

Note that the COS to TOS mapping only occurs in case or the mode element is set to bridging and the tagSignificance element is set to local. the mode element is set to routing.

The tosCosMap table contains the following elements: startTos and endTos. Use these elements to set the TOS byte value range that has to be mapped. cos. Use this element to set the VLAN user priority (COS) value on which the specified TOS byte value range has to be mapped. Default:0 Range: 0 255 Default:0 Range: 0 7

29 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Local or global VLAN tag significance The following figure shows how the tagSignificance element influences the VLAN tagging between the LAN interface and the bridge group:

Telindus 1423 SHDSL Router User manual

Chapter MR-1 30 Configuration attributes

telindus1423Router/lanInterface1/switchMode Only present on the 4 port Ethernet LAN interface.

Default:portSwitching Range: enumerated, see below

Use this attribute to select the switching mode of the 4 port Ethernet interface. The switchMode attribute has the following values: Value portSwitching dot1QSwitching Description The 4 port Ethernet interface behaves as a normal Ethernet switch. The 4 port Ethernet interface behaves as a VLAN switch.

telindus1423Router/lanInterface1/ports Only present on the 4 port Ethernet LAN interface. Use this attribute to set the Ethernet mode for each port of the 4 port Ethernet interface. set the VLAN tagging mode for each port of the 4 port Ethernet interface.

Default:Range: table, see below

The ports table contains 4 entries. Each entry corresponds with a port of the 4 port Ethernet interface. So you can configure the Ethernet and VLAN tagging mode for each port separately. The ports table contains the following elements: Element adapter Description Use this element to set the Ethernet mode for each port of the 4 port Ethernet interface. Default:autoNegotiate Range: choice, see below

The first part of the adapter element has the following values: autoNegotiate. The port automatically negotiates Default:all enabled with its link partner which Ethernet mode they are Range: structure, see below going to use. Using the second part of the adapter element, you can determine which capabilities the port may advertise in this negotiation process. Do this by setting the corresponding element in this structure to enabled. The structure contains the following elements: 10Mb/halfDuplex, 10Mb/fullDuplex, 100Mb/halfDuplex, 100Mb/fullDuplex, flowControl. By default, all these elements are set to enabled. fixed. The port is set to a fixed Ethernet mode. Default:10Mb/halfDuplex Using the second part of the adapter element, you Range: enumerated, see below can select the Ethernet mode. Possible values are: 10Mb/halfDuplex, 10Mb/fullDuplex, 100Mb/halfDuplex, 100Mb/fullDuplex.

31 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element vlanTagging

Description Use this element to set the VLAN tagging mode for each port of the 4 port Ethernet interface. Default:<untagged> 1 Range: choice, see below

Refer to MU-10.4.2 - Configuration de VLAN sur le commutateur Ethernet 4 ports on page 338 for more information and some examples. The first part of the vlanTagging element has the following values: untagged Incoming untagged packets and null-VID tagged packets are internally tagged with the configured VID before they are forwarded. Default:1 Range: 1 4094

tagged packets are forwarded unaltered if the VID corresponds with the one configured on the port. packets tagged with a different VID are discarded. untagged packets are forwarded unaltered. tagged packets their VLAN tag is removed before they are forwarded.

Outgoing

Use the second part of the vlanTagging element to set the VID value. tagged Incoming untagged packets and null-VID tagged packets are discarded. Default:1 Range: 1 4094

tagged packets are forwarded unaltered if the VID corresponds with the one configured on the port. packets tagged with a different VID are discarded. tagged packets are forwarded unaltered if the VID corresponds with the one configured on the port.

Outgoing

Use the second part of the vlanTagging element to set the VID value. trunk. The trunk port is a special kind of tagged port. Default:<empty> It can be seen as a concentrator for packets of all Range: table, see below other ports or as an uplink to a backbone LAN. On a trunk you can configure more than one VID. Incoming untagged packets and null-VID tagged packets are discarded. tagged packets are forwarded unaltered if the VID corresponds with the one configured on the port. packets tagged with a different VID are discarded. tagged packets are forwarded unaltered if the VID corresponds with the one configured on the port.

Outgoing

Use the second part of the vlanTagging element to set the different VID values.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 32 Configuration attributes

Element

Description portSniffing. If a port is configured as sniffing port, its Default:<empty> normal function is suspended and this port starts Range: table, see below to transmit all packets it has to monitor. So on a sniffing port the VLAN filtering and incoming and outgoing tagging rules are all disabled. All packets (including packets that do not successfully pass the validation process) entering or exiting a sniffed port are copied to the sniffing port and transmitted unaltered there. If you then connect a VLAN-enabled sniffing program to the sniffing port, you can monitor all traffic to and from the sniffed port. Refer to telindus1423Router/lanInterface1/ports/vlanTagging/<portSniffing> on page 33 for a detailed description of the portSniffing element.

33 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/lanInterface1/ports/vlanTagging/<portSniffing>

If you set the first part of the vlanTagging element to portSniffing, then a table appears in the second part. In this table you can determine which ports have to be sniffed and what has to be sniffed on these ports. Do this by adding one or more entries to this table and by configuring these entries. Each entry consists of a choice element. The first part of this choice element has the following values: Value txSniff Description Only the outgoing packets of a port are sniffed. Use the second part of the choice element to determine which port has to be sniffed. Possible values are: port1, port2, port3, port4, localPort. rxSniff Only the incoming packets of a port are sniffed. Use the second part of the choice element to determine which port has to be sniffed. Possible values are: port1, port2, port3, port4, localPort. txOrRxSniff Both outgoing and incoming packets of a port are sniffed. Use the second part of the choice element to determine which port has to be sniffed. Possible values are: port1, port2, port3, port4, localPort.

Default:<txSniff> localPort Range: choice, see below

If you want to enable port sniffing, the switchmode attribute has to be set to dot1QSwitching. Refer to telindus1423Router/lanInterface1/switchMode on page 30.

telindus1423Router/lanInterface1/bcastStormProtection Only present on the 4 port Ethernet LAN interface.

Default:Range: structure, see below

Use this attribute to protect the 4 port Ethernet interface against broadcast/multicast storms. Note that this configuration is done for all ports at once (including the local port). The bcastStormProtection structure contains the following elements: Element mode Description Use this element to enable or disable the broadcast/ multicast storm protection. The mode element has the following values: rate disabled. The broadcast/multicast storm protection is not active. enabled. The broadcast storm protection is active. However, there is no multicast storm protection! inclMulticastStormProt. The broadcast/multicast storm protection is active. Default:disabled Range: enumerated, see below

Use this element to set the percentage of 64-byte Default:1 blocks of packet data that is allowed on an input port Range: 1 27 during a fixed period. This period is 500 ms for a speed of 10 Mbps and 50 ms for a speed of 100 Mbps. For example, in case of the default of 1%: 148800 frames/sec * 50 ms/interval * 1% = 74 frames/interval

Telindus 1423 SHDSL Router User manual

Chapter MR-1 34 Configuration attributes

telindus1423Router/lanInterface/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the lanInterface object, refer to MR-4.4 - LAN interface alarms on page 493.

35 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.4 WAN interface configuration attributes


This section describes the following configuration attributes: telindus1423Router/wanInterface/name on page 36 telindus1423Router/wanInterface/encapsulation on page 36 telindus1423Router/wanInterface/priorityPolicy on page 36 telindus1423Router/wanInterface/maxFifoQLen on page 36 telindus1423Router/wanInterface/<alarmConfigurationAttributes> on page 36

Telindus 1423 SHDSL Router User manual

Chapter MR-1 36 Configuration attributes

telindus1423Router/wanInterface/name Use this attribute to assign an administrative name to the WAN interface. telindus1423Router/wanInterface/encapsulation Use this attribute to select the encapsulation protocol on the WAN interface.

Default:wan Range: 1 24 characters

Default:atm Range: enumerated, see below

The encapsulation attribute has the following values: atm, frameRelay, ppp and hdlc. Note that not all encapsulation protocols are present on all Telindus 1423 SHDSL Router versions. Refer to MU-1.3 - Aperu de la famille de routeurs Telindus SHDSL 1423 on page 7.

telindus1423Router/wanInterface/priorityPolicy Use this attribute to apply a priority policy on the WAN interface.

Default:<empty> Range: 0 24 characters

Do this by entering the index name of the priority policy you want to use. You can create the priority policy itself by adding a priorityPolicy object and by configuring the attributes in this object. Example If you created a priorityPolicy object with index name my_priority_policy (i.e. priorityPolicy[my_priority_policy]) and you want to apply this priority policy here, then enter the index name as value for the priorityPolicy attribute. Refer to MU-8.8.6 - Cration d'une politique de priorit on page 259 for more information on priority policies. telindus1423Router/wanInterface/maxFifoQLen Use this attribute to set the maximum length (number of packets) of the First In First Out queue. Default:200 Range: 1 4000

Refer to telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/algorithm on page 112 for more information on this queue. telindus1423Router/wanInterface/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the wanInterface object, refer to MR-4.5 - WAN interface alarms on page 494.

37 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.5 Encapsulation configuration attributes


This section discusses the configuration attributes of the encapsulation protocols that can be used on the Telindus 1423 SHDSL Router. Note that these encapsulation protocols cannot only be used on the xDSL line but, if your Telindus 1423 SHDSL Router is equipped with (an) ISDN interface(s), also on the ISDN interface(s). The protocols Frame Relay, PPP and HDLC are only relevant for TDM operation. Refer to MU-1.3 - Aperu de la famille de routeurs Telindus SHDSL 1423 on page 7 for more information about which protocols are available on which Telindus 1423 SHDSL Router version. The following gives an overview of this section: MR-1.5.1 - ATM configuration attributes on page 38 MR-1.5.2 - Frame Relay configuration attributes on page 47 MR-1.5.3 - PPP configuration attributes on page 56 MR-1.5.4 - HDLC configuration attributes on page 62 MR-1.5.5 - Error test configuration attributes on page 64

Telindus 1423 SHDSL Router User manual

Chapter MR-1 38 Configuration attributes

MR-1.5.1 ATM configuration attributes


This section describes the following configuration attributes: telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable on page 39 telindus1423Router/wanInterface/channel[wan_1]/atm/vp on page 45 telindus1423Router/wanInterface/channel[wan_1]/atm/atm on page 46

39 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable Use this attribute to configure the ATM Permanent Virtual Circuits (PVCs).

Default:<empty> Range: table, see below

Refer to MU-7.2.2 - Configuration des ATM PVC on page 127 for more information on PVCs. The pvcTable contains the following elements: Element name Description Use this element to assign an administrative name to the PVC. Use this element to activate (up) or deactivate (down) the PVC. Default:<empty> Range: 0 24 characters Default:up Range: up / down

adminStatus

mode

Use this element to determine whether, for the corre- Default:routing sponding PVC, the packets are treated by the routing Range: enumerated, see below process, the bridging process or both. The mode element has the following values: bridging. All packets received on the PVC are bridged. routing. All packets received on the PVC are routed. routingAndBridging. The SNAP header is checked to determine whether the packets have to be bridged or routed. Default:<empty> Range: 0 24 characters

priorityPolicy

Use this element to set a priority policy per PVC. Refer to telindus1423Router/wanInterface/priorityPolicy on page 36 for more information.

ip

Use this element to configure the IP related parameters of the PVC. Refer to

Default:Range: structure, see below

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:Range: structure, see below

bridging

Use this element to configure the bridging related parameters of the PVC. Refer to

MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure.

atm

Use this element to configure the specific PVC param- Default:eters. Range: structure, see below Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm on page 41 for a detailed description of the atm structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 40 Configuration attributes

Element ppp

Description Use this element to configure the PPP related param- Default:eters of the PVC in case you choose to map PPP onto Range: structure, see below AAL5 (refer to the elements higherLayerProtocol and multiProtocolMech on page 41). Refer to MR-1.5.3 - PPP configuration attributes on page 56 for a detailed description of the elements in the ppp structure.

41 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm Use the atm structure in the pvcTable to configure the ATM related parameters of the corresponding PVC.

Default:Range: structure, see below

Refer to MU-7.2.2 - Configuration des ATM PVC on page 127 for more information on PVCs. The atm structure contains the following elements: Element vpi Description Use this element to set the Virtual Path Identifier (VPI). Use this element to set the Virtual Channel Identifier (VCI). Default:0 Range: 0 255 Default:32 Range: 32 65535

vci

You can configure multiple virtual channels per virtual path. Refer to Quest-ce que VPI et VCI ? on page 118. higherLayerProtocol Use this attribute to select the protocol you want to run Default:rfc2684 over ATM. Range: enumerated, see below The higherLayerProtocol element has the following values: rfc2684. Select this value in case you want to run bridged/routed Ethernet/IP over ATM (RFC 2684). ppp. Select this value in case you want to run PPP over ATM (PPPoA, RFC 2364). pppOverEthernet. Select this value in case you want to run PPP over Ethernet (PPPoE, RFC 2516). -In the PPPoE context, the Telindus 1423 SHDSL Router can only act as a client. If you use PPPoE on your computer, then the IP MTU size has to be limited to 1492 bytes. This is a general rule defined in the PPPoE protocol.

multiProtocolMech

Use this element to define how you want to encapsu- Default:llcEncapsulation late the higher layer protocol data in ATM. Range: enumerated, see below The multiProtocolMech element has the following values: llcEncapsulation. Logical Link Control (LLC) encapsulation multiplexes multiple protocols over a single virtual connection. The protocol type of each protocol data unit (PDU) is identified by a prefixed IEEE 802.2 Logical Link Control (LLC) header. In general, LLC encapsulation tends to require fewer VCs in a multi-protocol environment but has more fragmentation overhead. vcMultiplexing. Virtual Circuit (VC) multiplexing uses one virtual connection to carry the PDUs of exactly one protocol type. When multiple protocols need to be transported, there is a separate VC for each. VC multiplexing tends to reduce fragmentation overhead (e.g. an IPV4 datagram containing a TCP control packet with neither IP nor TCP options exactly fits into a single cell) but needs more VCs.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 42 Configuration attributes

Element serviceCategory

Description Use this element to specify the ATM service category. Default:ubr The serviceCategory element has the following values: Range: enumerated, see below cbr, vbr-rt, vbr-nrt, ubr. For more information on ATM service categories, refer to MU-7.2.1 - Introduction ATM on page 118.

peakCellRate

Use this element to set the Peak Cell Rate (PCR) of the PVC.

Default:auto Range: auto, 64000

The peakCellRate is expressed in bps. Enter a multiple of 64000 bps as peakCellRate value (e.g. 2048000). The maximum value is the physical connection towards the ATM network. In auto mode, the PVC will try to get the maximum bandwidth, i.e. the speed of the physical connection towards the ATM network. This is the line speed on which the Telindus 1423 SHDSL Router is trained. For more information on PCR and how to configure it, refer to MU-7.2.1 - Introduction ATM on page 118 MU-7.2.6 - Configuration de UBR on page 132 MU-7.2.7 - Configuration de VBR-nrt on page 133 MU-7.2.8 - Configuration de VBR-rt on page 134 MU-7.2.9 - Configuration de CBR on page 135

sustCellRate

Use this element to set the Sustainable Cell Rate (SCR) of the PVC.

Default:<opt> Range: 0

The sustCellRate is expressed in bps. Enter a multiple of 64000 bps as sustCellRate value (e.g. 2048000). The maximum value is the physical connection towards the ATM network. For more information on SCR and how to configure it, refer to maxBurstSize MU-7.2.1 - Introduction ATM on page 118 MU-7.2.7 - Configuration de VBR-nrt on page 133 MU-7.2.8 - Configuration de VBR-rt on page 134 Default:<opt> Range: 0 2147483647

Use this element to set the Maximum Burst Size (MBS) of the PVC.

The maxBurstSize is expressed in a number of cells (cell times). For more information on MBS and how to configure it, refer to inArpTimeOut MU-7.2.1 - Introduction ATM on page 118 MU-7.2.7 - Configuration de VBR-nrt on page 133 MU-7.2.8 - Configuration de VBR-rt on page 134 Default:00000d 00h 00m 30s Range: 00000d 00h 00m 01s 00000d 01h 00m 00s

Use this element to set the time between the transmission of two consecutive Inverse ARP frames.

43 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element oamF5Loopback

Description Use this element to configure the transmission of OAM F5 LoopBack cells. Refer to Que sont les cellules OAM LoopBack (LB) ? on page 126. Default:Range: structure, see below

Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm/oamF5Loopback on page 44 for a detailed description of the oamF5Loopback structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 44 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm/ oamF5Loopback

Default:Range: structure, see below

Use the oamF5Loopback structure to configure the transmission of OAM F5 loopback cells. The oamF5Loopback structure contains the following elements: Element operation Description Use this element to enable or disable loopback oper- Default:disabled ation. Range: enabled / disabled The operation element has the following values: disabled. Loopback operation is disabled, i.e. the loopback cells are not sent. This means that the ifOperStatus of the PVC becomes up when the ATM is synchronised globally. However, this does not guarantee that the PVC is configured (correctly) on the remote side. enabled. Loopback operation is enabled, i.e. the Telindus 1423 SHDSL Router sends loopback cells at regular intervals. If consecutive cells are not returned by the remote side, then the ifOperStatus of the PVC becomes down.

The Telindus 1423 SHDSL Router always responds to OAM LB cells received from the peer ATM device (both segment and end-to-end cells). However, when OAM LB is activated, the Telindus 1423 SHDSL Router only sends end-to-end OAM LB request cells. interval Use this element to set the time interval between the sending of two consecutive loopback cells. Default:00000d 00h 00m 10s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s Default:4 Range: 1 30

failsPermitted

Use this element to set the number of non-returned loopback cells after which the Telindus 1423 SHDSL Router declares the PVC down. Example

Suppose failsPermitted is set to 10. If 10 consecutive loopback cells are not returned by the remote side, then the Telindus 1423 SHDSL Router declares the PVC down.

45 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/vp Use this attribute to configure the transmission of OAM F4 loopback cells. The vp table contains the following elements: Element vpi Description Use this element to enter the Virtual Path Identifier (VPI) of the Virtual Path for which you want to send the OAM F4 loopback cells. Use this element to configure the transmission of OAM F4 LoopBack cells. Refer to Que sont les cellules OAM LoopBack (LB) ? on page 126.

Default:<empty> Range: table, see below

Default:0 Range: 0 255 Default:Range: structure, see below

oamF4Loopback

The elements contained in this structure are the same as those in the oamF5Loopback structure. For a detailed description of these elements refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm/oamF5Loopback on page 44.

All entries in the vp configuration table are considered, even if for a certain VPI number no corresponding PVC has been configured. In the vp status and performance tables only the information about VPs that are configured in the vp configuration table is shown. However, the Telindus 1423 SHDSL Router does respond to loopback requests for VPs that are not configured in the vp configuration table but for which a PVC has been configured.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 46 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/atm Use this attribute to configure the general ATM parameters. The atm structure contains the following elements: Element idleCellFormat Description Use this element to set the format of the ATM idle cells. These cells are transmitted when no data is transmitted over the line. I.e. the line is idle. The idleCellFormat element has the following values:

Default:Range: structure, see below

Default:itu Range: enumerated, see below

itu. Sets the cells according to the ITU-T format. In this case they are effectively called idle cells. atmForum. Sets the cells according to the ATM forum format. In this case they are actually called unassigned cells.

Some devices use the ITU-T format, others the ATM forum format. Should the performance attribute telindus1423Router/wanInterface/channel[wan_1]/atm/unknownCells increase rapidly, then try selecting a different format. However, the default value suffices in most cases. scrambling Use this element to enable or disable scrambling. Default:enabled Scrambling is designed to randomise the pattern of 1s Range: enabled / disabled and 0s carried in ATM cells or the physical layer frame. Randomising the digital bits can prevent continuous, non-variable bit patterns, in other words long strings of all 1s or all 0s. Several physical layer protocols rely on transitions between 1s and 0s to maintain clocking. Use this element to enable or disable coset polynomial algorithm. Default:enabled Range: enabled / disabled

coset

The coset polynomial algorithm is used to do header error check calculations.

The atm attribute is only relevant when the Telindus 1423 SHDSL Router operates in plesiochronous SHDSL timing mode.

47 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.5.2 Frame Relay configuration attributes


This section describes the following configuration attributes: telindus1423Router/wanInterface/channel[wan_1]/frameRelay/ip on page 48 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable on page 49 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi on page 52 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/modeLearnedDlci on page 55 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/delayOptimisation on page 55 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/fragmentation on page 55 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/mru on page 55

These attributes are not present on the on the Telindus 1423 SHDSL Router versions without HWA.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 48 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/ip

Use this attribute to globally configure the IP parameters of the DLCIs. More specifically, use this attribute to configure the IP related parameters of all the DLCIs for which in the dlciTable no IP address is defined for that specific DLCI, and the mode element is set to routing or routingAndBridgning.

Default:<empty> Range: structure, see below

If you want to configure the IP related parameters for one specific DLCI, then configure for that DLCI the ip structure in the dlciTable. Refer to MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. MU-7.3.4 - Configuration dadresses IP dans Frame Relay on page 152 for more specific information on configuring IP addresses in Frame Relay.

49 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable Use this attribute to configure the Frame Relay Data Link Connection Identifiers (DLCIs).

Default:<empty> Range: table, see below

Refer to MU-7.3.2 - Configuration des DLCI Frame Relay on page 149 for more information on DLCIs. The dlciTable contains the following elements: Element name Description Use this element to assign an administrative name to the DLCI. Use this element to activate (up) or deactivate (down) the DLCI. Default:<empty> Range: 0 24 characters Default:up Range: up / down

adminStatus

mode

Use this element to determine whether, for the corre- Default:routing sponding DLCI, the packets are treated by the routing Range: enumerated, see below process, the bridging process or both. The mode element has the following values: bridging. All packets received on the DLCI are bridged. routing. All packets received on the DLCI are routed. routingAndBridging. The SNAP header is checked to determine whether the packets have to be bridged or routed. Default:<empty> Range: 0 24 characters

priorityPolicy

Use this element to set a priority policy per DLCI. Refer to telindus1423Router/wanInterface/priorityPolicy on page 36 for more information.

ip

Use this element to configure the IP related parameters of the corresponding DLCI. Refer to

Default:Range: structure, see below

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. MU-7.3.4 - Configuration dadresses IP dans Frame Relay on page 152 for more specific information on configuring IP addresses in Frame Relay. Default:Range: structure, see below

bridging

Use this element to configure the bridging related parameters of the DLCI. Refer to

MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure. Default:Range: structure, see below

frameRelay

Use this element to configure the specific DLCI parameters.

Refer to telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable/frameRelay on page 50, for a detailed description of the frameRelay structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 50 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable/frameRelay Use the frameRelay structure in the dlciTable to configure the Frame Relay related parameters of the corresponding DLCI. Refer to

Default:Range: structure, see below

MU-7.3.2 - Configuration des DLCI Frame Relay on page 149 for more information on DLCIs. MU-7.3.6 - Configuration de CIR et EIR on page 156 for more information on CIR and EIR.

The frameRelay structure contains the following elements: Element dlci Description Use this element to set the Data Link Connection Identifier (DLCI). Default:16 Range: 16 1022

The DLCI number may have any value between 16 and 1022. However, if you set the type element of the lmi structure to q933-Annex-A, you should only use DLCIs up to 1007. cir Use this element to set the Committed Information Rate for the DLCI. Default:0 Range: 0

The cir is expressed in bps. Enter a multiple of 64000 bps as cir value (e.g. 2048000). The maximum value is the physical connection towards the Frame Relay network. If the cir value is set to 0 (default), it means the complete bandwidth may be used (no flow control). eir Use this element to set the Excess Information Rate for the DLCI. Default:0 Range: 0

The eir is expressed in bps. Enter a multiple of 64000 bps as eir value (e.g. 2048000). The maximum value is the physical connection towards the Frame Relay network. If the eir value is set to 0 (default), it means no excess burst is allowed. The bursts of data that are allowed are the CIR value + EIR value. I.e. If you want a CIR of 1 Mbps and you want to allow bursts up to 1.5 Mbps, then set the CIR to 1024000 bps and the EIR to 512000 bps. overhead Use this element to set the amount of overhead you want to add to the configured CIR value. The overhead element is expressed in bytes. Default:0 Range: 0 50

Normally when you specify CIR, you have to make sure that the CIR value you enter includes the user data (i.e. the payload) and the Frame Relay headers (i.e. the overhead). However, you could choose to only specify the amount of payload as CIR value. In that case use the overhead element to specify the amount of overhead. tc Use this element to set the measurement interval (TC). The TC interval is expressed in milliseconds. Default:200 Range: 50 1000

TC is the time over which rates and burst sizes are measured. In general, the duration of TC is proportional to the burstiness of traffic.

51 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element slidingWindow

Description Use this element to enable or disable sliding window. Default:disabled Range: enabled / disabled If the slidingWindow element is set to disabled (default), then TC is a periodic time interval. enabled, then TC is a sliding window. This means that data triggers the TC interval which continues until it completes its commuted duration.

deBitSet

Use this element to determine, in case the CIR is Default:enabled exceeded, whether all subsequent frames get marked Range: enabled / disabled Discard Eligible (deBitSet = enabled) or not (deBitSet = disabled). If congestion occurs at a node in the Frame Relay network, packets marked DE are the first to be dropped.

defaultQueue

Use this element to select a default queue.

This allows you to easily set up a traffic policy without having to create and apply traffic policy profiles. However, you still have to create and apply a priority policy profile to empty the queues. Refer to MU-8.8.9 - Attribut de la file par dfaut ou profil de politique de trafic on page 265 for more information. fragmentation Use this element to enable or disable Frame Relay fragmentation on an end-to-end level. Refer to Quest-ce que la fragmentation Frame Relay de bout en bout ? on page 147. Default:Range: structure, see below

Default:queue1 Range: enumerated, see below

The fragmentation structure contains the following elements: endToEndFormat. Use this element to enable or dis- Default:disabled able Frame Relay fragmentation on an end-to-end Range: enabled / disabled level. When end-to-end Frame Relay fragmentation is enabled, long frames are fragmented into a sequence of shorter frames. At the remote side they are reassembled into the original frame.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 52 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi Use this attribute to select the Local Management Interface (LMI) protocol and to fine-tune the LMI operation.

Default:Range: structure, see below

Refer to MU-7.3.5 - Configuration de LMI on page 155 for more information on LMI. The lmi structure contains the following elements: Element mode Description Use this element to set the Frame Relay mode. The mode element has the following values: noLmi. No LMI is used. user. In the LMI context, the Telindus 1423 SHDSL Router is defined as Frame Relay user. This means it only sends Status Enquiries and receives Status Responses. network. In the LMI context, the Telindus 1423 SHDSL Router is defined as Frame Relay network. This means it only receives Status Enquiries and sends Status Responses. auto. In the LMI context, the Telindus 1423 SHDSL Router is both Frame Relay user and Frame Relay network. This means it can both send and receive Status Enquiries and Status Responses. At initialisation, the Telindus 1423 SHDSL Router sends the first Full Status Enquiry. As soon as it gets a Full Status Response, it declares that LMI is up. If you use the Telindus 1423 SHDSL Router in combination with equipment from another vendor and you set the LMI mode to auto, then the LMI mode on the other equipment may only be set to user or network to insure valid operation. nni. In the LMI context, the Telindus 1423 SHDSL Router is both Frame Relay user and Frame Relay network. This means it can both send and receive Status Enquiries and Status Responses. In a Network-to-Network Interface (NNI) it is important for the connected Frame Relay devices that they know which DLCIs are configured on each side. Therefore, in comparison with the auto setting, one extra step is required before LMI is declared to be up. So at initialisation, the Telindus 1423 SHDSL Router sends the first Full Status Enquiry and receives a Full Status Response. Then it waits until it receives a Full Status Enquiry from the remote before it declares that LMI is up. Default:auto Range: enumerated, see below

Refer to Interaction between the LMI modes on page 54 for an overview of how the different LMI modes work together.

53 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element type

Description Use this element to set the LMI variant. There are sev- Default:q933-Annex-A eral standards for the LMI protocol with small variaRange: enumerated, see below tions between them. Therefore you should configure the Telindus 1423 SHDSL Router according to the standard that is used by your service provider. The type element has the following values: lmiRev1. Set this value only for compatibility with older equipment. ansiT1-617-d. Set this value for ANSI LMI compliance. q933-Annex-A. Set this value for ITU-T LMI compliance. frf1-2. Set this value for FRF.1-2 compliance. Default:00000d 00h 00m 10s Range: 00000d 00h 00m 05s 00000d 00h 00m 30s

pollingInterval

Use this element to set the time between consecutive Status Enquiry messages.

errorThreshold

Use this element to set the maximum number of unan- Default:3 swered Status Enquiry messages that the Telindus Range: 1 10 1423 SHDSL Router will accept before declaring the DLCI down. Also see the monitoredEvents element. Use this element to set the number of status polling intervals over which the error threshold is counted. Default:4 Range: 1 10

monitoredEvents

In other words, if the station receives an errorThreshold number of unanswered Status Enquiry messages within a monitoredEvents number of pollingInterval intervals, then the interface is declared down. Example If the station receives 3 unanswered Status Enquiry messages within 4 x 10s = 40s, then the interface is declared down. expectedPollInterval Use this element to set the maximum time between two consecutive incoming Status Enquiry messages. Select the value 0 in order to disable verification. Default:00000d 00h 00m 15s Range: 00000d 00h 00m 00s 00000d 00h 00m 30s

This element is only relevant when using Frame Relay over a point-to-point link (no Frame Relay network). In Frame Relay language, a router is normally considered as a Frame Relay user or DTE. However, if two routers are connected to each other in Frame Relay but without a real Frame Relay network in between, then the routers also have to take the role of a Frame Relay network or DCE (refer to the mode element). In that case the Status Enquiry messages are sent in both directions. fullEnquiryInterval Use this element to set the number of Status Enquiry Default:6 intervals that have to pass before sending a Full Sta- Range: 1 255 tus Enquiry message.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 54 Configuration attributes

Interaction between the LMI modes The following table shows how the different LMI modes work together when two routers are connected to each other over a Frame Relay network: LMI mode Router A noLmi Router B noLmi user network nni auto user user network nni auto network network nni auto nni nni auto auto auto LMI status Router A up up up up up down up up up down up up up up up Router B up down down down down down up down up down down up up up up DLCI status Router A up up up up up down up up up down up up up up up Router B up down down down down down up down up down down up up up up Router learns DLCIs? Router A no no no no no no learns (user) learns (user) learns (user) no no no learns learns learns Router B no no no no no no no no no no learns (nni) learns (auto) learns learns learns

55 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/modeLearnedDlci

If the Frame Relay network supports LMI, then the Telindus 1423 SHDSL Router can learn its active and inactive DLCIs. Use this attribute to determine whether, for learned DLCIs, the packets are treated by the routing process, the bridging process or both. The modeLearnedDlci attribute has the following values: Value bridging routing routingAndBridging Description All packets received on the DLCI are bridged. All packets received on the DLCI are routed.

Default:routing Range: enumerated, see below

The SNAP header is checked to determine whether the packets have to be bridged or routed.

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/delayOptimisation Use this attribute to reduce the delay on low speed links. Especially if these links have to transport delay sensitive data (e.g. voice over IP). telindus1423Router/wanInterface/channel[wan_1]/frameRelay/fragmentation

Default:none Range: none / lowSpeedLinks

Use this attribute to enable or disable Frame Relay fragmentation on (physical) interface level. Refer to What is interface Frame Relay fragmentation? on page 145. The fragmentation structure contains the following elements: Element interfaceFormat Description Use this element to enable or disable Frame Relay fragmentation on (physical) interface level.

Default:Range: structure, see below

Default:disabled Range: enabled / disabled

When interface Frame Relay fragmentation is enabled, long frames are fragmented into a sequence of shorter frames. At the remote side they are reassembled into the original frame. telindus1423Router/wanInterface/channel[wan_1]/frameRelay/mru Use this attribute to set the Maximum Receive Unit (MRU) of the interface. What is MRU? The Maximum Receive Unit (MRU) is the largest size packet or frame, specified in octets (eight-bit bytes), that can be received in a packet- or frame-based network (e.g. the Internet).

Default:1560 Range: 500 1650

Telindus 1423 SHDSL Router User manual

Chapter MR-1 56 Configuration attributes

MR-1.5.3 PPP configuration attributes


This section describes the following configuration attributes: telindus1423Router/wanInterface/channel[wan_1]/ppp/ip on page 57 telindus1423Router/wanInterface/channel[wan_1]/ppp/mode on page 57 telindus1423Router/wanInterface/channel[wan_1]/ppp/bridging on page 57 telindus1423Router/wanInterface/channel[wan_1]/ppp/delayOptimisation on page 57 telindus1423Router/wanInterface/channel[wan_1]/ppp/mru on page 57 telindus1423Router/wanInterface/channel[wan_1]/ppp/compression on page 58 telindus1423Router/wanInterface/channel[wan_1]/ppp/linkMonitoring on page 59 telindus1423Router/wanInterface/channel[wan_1]/ppp/authentication on page 60 telindus1423Router/wanInterface/channel[wan_1]/ppp/authenPeriod on page 60 telindus1423Router/wanInterface/channel[wan_1]/ppp/sessionName on page 61 telindus1423Router/wanInterface/channel[wan_1]/ppp/sessionSecret on page 61

These attributes are not present on the on the Telindus 1423 SHDSL Router versions without HWA.

57 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/ip Use this attribute to configure the IP related parameters of the PPP link. Refer to

Default:<empty> Range: structure, see below

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:bridging Range: enumerated, see below

telindus1423Router/wanInterface/channel[wan_1]/ppp/mode Use this attribute to determine whether the packets are treated by the routing process, the bridging process or both. The mode attribute has the following values: Value bridging routing routingAndBridging multiLink Description

All packets received on the PPP link are bridged. BCP is set up. All packets received on the PPP link are routed. IPCP is set up. The SNAP header is checked to determine whether the packets have to be bridged or routed. IPCP and BCP are set up. Select this value if the PPP link is part of a bundle of PPP links (multi-link PPP or MLPPP).

telindus1423Router/wanInterface/channel[wan_1]/ppp/bridging Use this attribute to configure the bridging related parameters of the PPP link. Refer to

Default:Range: structure, see below

MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure. Default:none Range: none / lowSpeedLinks

telindus1423Router/wanInterface/channel[wan_1]/ppp/delayOptimisation Use this attribute to reduce the delay on low speed links. Especially if these links have to transport delay sensitive data (e.g. voice over IP). telindus1423Router/wanInterface/channel[wan_1]/ppp/mru Use this attribute to set the Maximum Receive Unit (MRU) of the interface. What is MRU?

Default:1560 Range: 1510 1650

The Maximum Receive Unit (MRU) is the largest size packet or frame, specified in octets (eight-bit bytes), that can be received in a packet- or frame-based network (e.g. the Internet).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 58 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/compression Use this attribute to enable or disable the compression of PPP encapsulated packets. The compression attribute has the following values: Value disabled predictor1 Description No PPP compression is done.

Default:disabled Range: enumerated, see below

PPP compression is done using the Predictor type 1 compression algorithm (RFC 1978). Using compression you can increase the throughput on PPP links.

Important remark The PPP compression algorithm uses a lot of memory (64 KB for compression and 64 KB for decompression, per PPP session). Since it is possible to have multiple PPP sessions (when using ATM PVCs up to 31 simultaneous sessions are allowed, which can all be configured to use PPP compression), the memory can turn out to be insufficient. In this case the compression is switched off on the interfaces that could not allocate enough memory, a message is dumped in the message table, containing the relevant interface and a warning that the router must be rebooted to reactivate compression on that specific interface.

It is also possible that, when looking at the statistics, enough memory seems to be available but that the allocation problem remains. This means that the memory is fragmented and no block as big as 64 KB is found.

59 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/linkMonitoring Use this attribute to enable or disable link monitoring and to fine-tune it.

Default:Range: structure, see below

Refer to MU-7.4.5 - Configuration de la surveillance de liaison on page 170 for more information on link monitoring. The linkMonitoring structure contains the following elements: Element operation Description Use this element to enable or disable link monitoring. Default:disabled Range: enabled / disabled Use this element to set the time interval between two consecutive echo requests. Default:00000d 00h 00m 10s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s

interval

replyTimeOut

Use this element to set the time the Telindus 1423 Default:00000d 00h 00m 02s SHDSL Router waits for a reply on the echo request. Range: 00000d 00h 00m 00s 00000d 00h 04m 15s If no reply has been received within this time-out, then the Telindus 1423 SHDSL Router considers this as a failed echo request. Use this element to set the number of failed echo requests after which the Telindus 1423 SHDSL Router declares the PPP link down. Example Suppose failsPermitted is set to 10. If on 10 consecutive echo requests no reply is given, then the Telindus 1423 SHDSL Router declares the PPP link down and the PPP handshake is started again. Default:4 Range: 1 30

failsPermitted

Telindus 1423 SHDSL Router User manual

Chapter MR-1 60 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/authentication Use this attribute to enable or disable authentication on the PPP link. For more information on PPP authentication, refer to MU-7.4.6 - Configuration de PAP on page 171. MU-7.4.8 - Configuration de CHAP on page 175.

Default:disabled Range: enumerated, see below

The authentication attribute has the following values: Value disabled pap chap chapOrPap Description Authentication is disabled. However, the Telindus 1423 SHDSL Router will answer to authentication requests received from the remote side. This side of the link requests a PAP authentication from the remote router. This side of the link requests a CHAP authentication from the remote router. This side of the link requests a CHAP or PAP authentication from the remote router. If the remote router supports msChap msChapV2 only PAP, then PAP is used. only CHAP, then CHAP is used. both CHAP and PAP, then CHAP is used.

This side of the link requests an MS CHAP version 1 authentication from the remote router. This side of the link requests an MS CHAP version 2 authentication from the remote router.

telindus1423Router/wanInterface/channel[wan_1]/ppp/authenPeriod Use this attribute to set the PPP authentication interval.

Default:00000d 00h 10m 00s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s

Normally on an authenticated PPP link, authentication is not only performed at link set-up but also at regular intervals during the data transfer. You can set this interval using the authenPeriod attribute. If you set the authenPeriod attribute to 00000d 00h 00m 00s, then authentication is only performed at link set-up and not during the data transfer. For more information on PPP authentication, refer to MU-7.4.6 - Configuration de PAP on page 171. MU-7.4.8 - Configuration de CHAP on page 175.

61 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/sessionName Use this attribute to set the PPP authentication name of the Telindus 1423 SHDSL Router. For more information on PPP authentication, refer to MU-7.4.6 - Configuration de PAP on page 171 MU-7.4.8 - Configuration de CHAP on page 175

Default:<empty> Range: 0 64 characters

telindus1423Router/wanInterface/channel[wan_1]/ppp/sessionSecret Use this element to set the PPP authentication secret of the Telindus 1423 SHDSL Router. For more information on PPP authentication, refer to MU-7.4.6 - Configuration de PAP on page 171 MU-7.4.8 - Configuration de CHAP on page 175

Default:<empty> Range: 0 64 characters

Telindus 1423 SHDSL Router User manual

Chapter MR-1 62 Configuration attributes

MR-1.5.4 HDLC configuration attributes


This section describes the following configuration attributes: telindus1423Router/wanInterface/channel[wan_1]/hdlc/bridging on page 63 telindus1423Router/wanInterface/channel[wan_1]/hdlc/mru on page 63

These attributes are not present on the on the Telindus 1423 SHDSL Router versions without HWA.

63 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/hdlc/bridging Use this attribute to configure the bridging related parameters of the HDLC link. Refer to

Default:Range: structure, see below

MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure. Default:1560 Range: 500 1650

telindus1423Router/wanInterface/channel[wan_1]/hdlc/mru Use this attribute to set the Maximum Receive Unit (MRU) of the interface. What is MRU?

The Maximum Receive Unit (MRU) is the largest size packet or frame, specified in octets (eight-bit bytes), that can be received in a packet- or frame-based network (e.g. the Internet).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 64 Configuration attributes

MR-1.5.5 Error test configuration attributes


This section describes the following configuration attributes: telindus1423Router/wanInterface/channel[wan_1]/errorTest/testType on page 65 telindus1423Router/wanInterface/channel[wan_1]/errorTest/blockSize on page 65 telindus1423Router/wanInterface/channel[wan_1]/errorTest/programmablePattern on page 65

These attributes are not present on the on the Telindus 1423 SHDSL Router versions without HWA.

65 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/channel[wan_1]/errorTest/testType Use this attribute to select a test pattern.

Default:itu32767(2^15) Range: enumerated, see below

Possible patterns are: itu511(2^9), ituInv511(2^9), tls1023(2^10), tlsInv1023(2^10), itu2047(2^11), ituInv2047(2^11), itu32767(2^15), ituInv32767(2^15), itu1048575(2^20), ituInv1048575(2^20), itu8388607(2^23), ituInv8388607(2^23), space, mark, dot, programmablePattern. If you set the testType attribute to programmablePattern, then you can generate your own test pattern by typing a test pattern in the programmablePattern attribute (refer to telindus1423Router/wanInterface/channel[wan_1]/ errorTest/programmablePattern on page 65). Refer to MU-7.6 - Configuration d'un test d'erreur on page 189 for more information on setting up an error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/blockSize Use this attribute to set the size of the test blocks. telindus1423Router/wanInterface/channel[wan_1]/errorTest/programmablePattern Use this attribute to generate your own test pattern. Default:512 Range: 256, 512, 1024

Default:<empty> Range: 32 bit string

Do this by typing a test pattern in the programmablePattern attribute and by setting the testType attribute to programmablePattern (refer to telindus1423Router/wanInterface/channel[wan_1]/errorTest/testType on page 65).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 66 Configuration attributes

MR-1.6 SHDSL line configuration attributes


This section describes the following line configuration attributes: telindus1423Router/wanInterface/line/channel on page 67 telindus1423Router/wanInterface/line/region on page 67 telindus1423Router/wanInterface/line/timingMode on page 68 telindus1423Router/wanInterface/line/retrain on page 69 telindus1423Router/wanInterface/line/startupMargin on page 71 telindus1423Router/wanInterface/line/minSpeed on page 71 telindus1423Router/wanInterface/line/maxSpeed on page 71 telindus1423Router/wanInterface/line/minSpeed2P on page 72 telindus1423Router/wanInterface/line/maxSpeed2P on page 72 telindus1423Router/wanInterface/line/mode on page 72 telindus1423Router/wanInterface/line/dualPairMode on page 72 telindus1423Router/wanInterface/line/linkAlarmThresholds on page 74 telindus1423Router/wanInterface/line/numExpectedRepeaters on page 75 telindus1423Router/wanInterface/line/eocHandling on page 75 telindus1423Router/wanInterface/line/management on page 75 telindus1423Router/wanInterface/line/<alarmConfigurationAttributes> on page 76

This section describes the following line pair configuration attributes: telindus1423Router/wanInterface/line/linePair[ ]/<alarmConfigurationAttributes> on page 76

67 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/line/channel

Use this attribute to determine which unit is the central unit and which the remote unit. I.e. it determines which unit acts as master and which as slave during the synchronisation procedure. Therefore set one device to central and its remote counterpart to remote. On the Telindus 1423 SHDSL Router, the clocking follows the channel attribute: If the channel attribute is set to central remote Important remark Note that also the timingMode attribute influences the clocking. Refer to telindus1423Router/wanInterface/line/ timingMode on page 68. then the clocking is set to internal. slave-receive.

Default:remote Range: central / remote

telindus1423Router/wanInterface/line/region Use this attribute to determine which SHDSL standard is used. The region attribute has the following values: Value annexA annexB auto Description The North-American SHDSL standard is used. The European SHDSL standard is used.

Default:auto Range: enumerated, see below

The Telindus 1423 SHDSL Router itself determines which standard it has to use.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 68 Configuration attributes

telindus1423Router/wanInterface/line/timingMode

Use this attribute to set the timing mode. It is important to set the timingMode attribute correct when using the Telindus 1423 SHDSL Router in combination with other SHDSL devices. For more information on compatibility issues, refer to the document Interoperability for OneAccess SHDSL products (PDF). This attribute is not present on the Telindus 1423 SHDSL Router equiped with ISDN ports. The timingMode attribute is only available on the 1423 SHDSL 1P 2ETH4P HWA and 1423 SHDSL 2P 2ETH4P HWA. Refer to MU-1.3 - Aperu de la famille de routeurs Telindus SHDSL 1423 on page 7 for a complete overview of the OneAccess 1423 SHDSL Router family.

Default:synchronous Range: enumerated, see below

The timingMode attribute has the following values: Value synchronous Description The Telindus 1423 SHDSL Router operates in synchronous mode. In this case the clocking follows the setting of the channel attribute. Refer to telindus1423Router/wanInterface/line/channel on page 67. The Telindus 1423 SHDSL Router operates in plesiochronous mode. In this case the clocking is always slave-receive, independently of the setting of the channel attribute. This means that the remote device (e.g. a Crocus SHDSL) has to supply the clock.

plesiochronous

Important remarks The timingMode attribute is only relevant for TDM operation. If you have two Telindus 1423 SHDSL Routers on which you set the timingMode attribute to plesiochronous, then you can not connect them with each other point-to-point because they both operate in slave-receive clocking. Plesiochronous mode can only work when the speed falls within the range of 192 kbps and 2048 kbps (i.e. minSpeed = 192kbps or minSpeed2P = 384kbps and maxSpeed(2P) = 2048kbps). If a speed is selected which is lower than 192 kbps, the actual speed is automatically increased to 192 kbps (or 384 kbps in case of a 2 pair version). higher than 2048 kbps, the actual speed is automatically limited to 2048 kbps.

69 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/line/retrain Use this attribute to determine when the Telindus 1423 SHDSL Router should retrain. The retrain criteria The following criteria determine when to retrain: Criterion no SHDSL frame synchronisation SHDSL frame CRC error threshold exceeded Description

Default:Range: structure, see below

When the Telindus 1423 SHDSL Router cannot synchronise on the SHDSL framing, it retrains. SHDSL framing sends 166 blocks per second over the line, independently of the speed. Each block has a CRC check. When a certain percentage of frames has a CRC error, the Telindus 1423 SHDSL Router retrains. When the signal to noise ratio becomes too low during a certain period of time, the Telindus 1423 SHDSL Router retrains. When you connect the Telindus 1423 SHDSL Router with a remote SHDSL device, the Telindus 1423 SHDSL Router trains and establishes a layer 1 link with the remote SHDSL device. Then the Telindus 1423 SHDSL Router tries to establish a layer 2 link (e.g. PPP, FR, ATM). If the layer 2 handshake does not succeed within 1 minute, then the Telindus 1423 SHDSL Router retrains and the whole process restarts. Also the following message is dumped in the message table: Retrain due to framer-out-of-sync. However, once the layer 2 handshake succeeds (layer 2 is up), then a drop of the layer 2 link will not cause a retrain.

signal to noise ratio too low layer 2 protocol not yet up

Telindus 1423 SHDSL Router User manual

Chapter MR-1 70 Configuration attributes

Configuring the retrain criteria The retrain structure contains the following elements: Element enabled Description Use this attribute to enable (yes) or disable (no) retraining. So when selecting no, the Telindus 1423 SHDSL Router will never retrain (even not when the line is disconnected). Default:yes Range: yes / no

errorPersistenceTime

Use this element to set the period, in seconds, during Default:10 which each retrain criterion is measured. If within this Range: 1 30 period the predefined criterion value is equalled or exceeded, the Telindus 1423 SHDSL Router retrains. Use this element to set the amount of CRC errors, in Default:10 promille, at which the Telindus 1423 SHDSL Router Range: 1 1000 should retrain. If the amount of CRC errors exceeds this value, then the Telindus 1423 SHDSL Router retrains. The erroneous SHDSL frames can be monitored using the performance attribute codeViolations.

errorThreshold

snrThreshold

Use this element to set the signal to noise ratio, in dB, Default:23 which has to be maintained. If the measured signal to Range: 20 25 noise ratio drops below this value, then the Telindus 1423 SHDSL Router retrains. It will retrain at a lower speed (because of the deteriorated line conditions). In case the Telindus 1423 SHDSL Router retrains Default:disabled because the measured signal to noise ratio drops Range: 3 15 below the snrThreshold value, then it will retrain at a lower speed (because of the deteriorated line conditions). If after this retrain the measured signal to noise value increases again with a value as configured in the stepupMargin element, then the Telindus 1423 SHDSL Router retrains again in order to achieve a higher speed.

stepupMargin

71 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/line/startupMargin Use this attribute to set the target margin in function of which a line speed has to be selected during the ITU-T G.994.1 auto speed negotiation.

Default:2dB Range: enumerated, see below

The startupMargin attribute is only relevant in case on both the central and remote Telindus 1423 SHDSL Router (or any other compatible SHDSL device) a speed range is selected. In other words, the startupMargin attribute has no function in case a fixed speed is selected (i.e. minSpeed(2P) = maxSpeed(2P)). The higher the startupMargin, the lower the selected line speed but the more stable the line will be. The startupMargin attribute has the following values: disabled, 0dB, 1dB, 2dB, 3dB, 4dB, 5dB, 6dB, 7dB, 8dB, 9dB, 10dB. When you set the startupMargin to disabled, the target margin is not considered during the ITU-T G.994.1 auto speed negotiation. I.e. all the speeds in the range as set with the attributes minSpeed(2P) and maxSpeed(2P) are available. What is the target margin? The target margin is the amount of received signal power in excess of that required to achieve the DSL target bit error rate of 10-7. telindus1423Router/wanInterface/line/minSpeed Default:64kbps Range: enumerated, see below

Use this attribute to set the lowest line speed the Telindus 1423 SHDSL Router may select. The minSpeed attribute has the following values: 64kbps up to 2304kbps in steps of 64kbps.

Refer to MU-5.3.2 - Slection d'une vitesse de ligne SHDSL (gamme) on page 77 for more information. telindus1423Router/wanInterface/line/maxSpeed Default:2304kbps Range: enumerated, see below

Use this attribute to set the highest line speed the Telindus 1423 SHDSL Router may select. The maxSpeed attribute has the following values: 64kbps up to 2304kbps in steps of 64kbps.

Refer to MU-5.3.2 - Slection d'une vitesse de ligne SHDSL (gamme) on page 77 for more information.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 72 Configuration attributes

telindus1423Router/wanInterface/line/minSpeed2P This attribute is only present on the Telindus 1423 SHDSL Router 2 pair version.

Default:128kbps Range: enumerated, see below

Use this attribute to set the lowest line speed the Telindus 1423 SHDSL Router 2 pair version may select (if it is truly in 2 pair operation, refer to telindus1423Router/wanInterface/line/mode). The minSpeed2P attribute has the following values: 128kbps up to 4608kbps in steps of 128kbps. Refer to MU-5.3.2 - Slection d'une vitesse de ligne SHDSL (gamme) on page 77 for more information. telindus1423Router/wanInterface/line/maxSpeed2P This attribute is only present on the Telindus 1423 SHDSL Router 2 pair version. Default:2304kbps Range: enumerated, see below

Use this attribute to set the highest line speed the Telindus 1423 SHDSL Router 2 pair version may select (if it is truly in 2 pair operation, refer to telindus1423Router/wanInterface/line/mode). The maxSpeed2P attribute has the following values: 128kbps up to 4608kbps in steps of 128kbps. Refer to MU-5.3.2 - Slection d'une vitesse de ligne SHDSL (gamme) on page 77 for more information. telindus1423Router/wanInterface/line/mode This attribute is only present on the Telindus 1423 SHDSL Router 2 pair version. Default:dualPair Range: singlePair / dualPair

Use this attribute to select between single pair or dual pair operation. When you change the mode attribute, then make sure that you use the correct speed attributes to set the speed: If the mode attribute is set to singlePair, dualPair, then configure the speed using the attributes minSpeed and maxSpeed. minSpeed2P and maxSpeed2P.

telindus1423Router/wanInterface/line/dualPairMode This attribute is only present on the Telindus 1423 SHDSL Router 2 pair version.

Default:standard Range: standard / enhanced

If the mode attribute is set to dualPair, then use the dualPairMode attribute to set the dual pair operation mode. The dualPairMode attribute has the following possible values: Value standard Description The dual pair SHDSL line operates strictly as described in the SHDSL standard. If the Telindus 1423 SHDSL Router is connected to a remote device that operates strictly according to the SHDSL standard, then select the standard value. The dual pair SHDSL line operates slightly different than described in the SHDSL standard (some enhancements are present). If you select the enhanced value, then it is possible that you experience problems when connecting to third party SHDSL devices. In that case, select the standard value.

enhanced

73 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

If you have two Telindus 1423 SHDSL Routers connected to each other in a point-to-point set-up, then make sure that you set the dualPairMode attribute to the same value at both sides!

Telindus 1423 SHDSL Router User manual

Chapter MR-1 74 Configuration attributes

telindus1423Router/wanInterface/line/linkAlarmThresholds

Use this attribute to set the alarm threshold values of the most important line parameters. If this predefined threshold value is exceeded, then a corresponding alarm is generated. The linkAlarmThresholds structure contains the following elements: Element lineAttenuationOn Description Use this element to set the alarm threshold value of the line attenuation in dB. If the line attenuation signalNoiseOn Default:0.0 Range: 0.0 63.5

Default:Range: structure, see below

exceeds this value during at least 10 seconds, then the lineAttenuation alarm is raised. drops below this value during at least 10 seconds, then the lineAttenuation alarm is cleared. Default:0.0 Range: 0.0 58.4

Use this element to set the alarm threshold value of the signal noise in dB. If the signal noise

drops below this value during at least 10 seconds, then the signalNoise alarm is raised. exceeds this value during at least 10 seconds, then the signalNoise alarm is cleared. Default:00000d 00h 00m 36s Range: 00000d 00h 00m 00s 00000d 18h 12m 15s

errSecOn

Use this element to set the alarm threshold value of the erroneous seconds in days, hours, minutes and seconds. If the amount of erroneous seconds

exceeds this value within a 15 minutes period1, then the errSecExceeded alarm is raised. drops below this value within a 15 minutes period, then the errSecExceeded alarm is cleared. Default:00000d 00h 00m 02s Range: 00000d 00h 00m 00s 00000d 18h 12m 15s

sevErrSecOn

Use this element to set the alarm threshold value of the severely erroneous seconds in days, hours, minutes and seconds. If the amount of severely erroneous seconds

exceeds this value within a 15 minutes period1, then the sevErrSecExceeded alarm is raised. drops below this value within a 15 minutes period, then the sevErrSecExceeded alarm is cleared.

1. The 15 minutes periods run synchronous with the 15 minutes periods of the telindus1423Router/ wanInterface/line/h2Line performance attribute. Because alarms are raised or cleared within 15 minutes periods, there is a delay in the alarm status. For example, suppose that in the first minute of a 15 minutes period the errSecOn value is exceeded, then the errSecRatioExceeded alarm is raised. The alarm stays on for the remainder of the 15 minutes period. The alarm is only cleared if also in the next 15 minutes period the errSecOn value is not exceeded.

75 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/wanInterface/line/numExpectedRepeaters

Use this attribute to set the number of Crocus SHDSL Repeaters that the Telindus 1423 SHDSL Router can expect to find on the SHDSL line. If the actual number of repeaters does not match the number you entered in the numExpectedRepeaters attribute, then the invalidNumRepeaters alarm is raised. telindus1423Router/wanInterface/line/eocHandling Default:none Range: enumerated, see below

Default:0 Range: 0 8

SHDSL devices can communicate with each other through the Embedded Operations Channel (EOC). Use the eocHandling attribute to define the handling of the EOC messages.

Refer to MU-5.4.3 - Contrle dchange de messages EOC standard on page 80 for more information. telindus1423Router/wanInterface/line/management Use this attribute to determine whether and which management data is forwarded over the SHDSL line. Default:o10-PathManagement Range: enumerated, see below

Refer to MU-5.4.2 - Contrle dchange de messages EOC propritaire on page 79 for more information.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 76 Configuration attributes

telindus1423Router/wanInterface/line/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the line object, refer to MR-4.6 - SHDSL line alarms on page 495.

telindus1423Router/wanInterface/line/linePair[ ]/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the linePair[ ] object, refer to MR-4.7 - SHDSL line pair alarms on page 496.

77 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.7 End and repeater configuration attributes


This section describes the following configuration attributes: telindus1423Router/wanInterface/repeater[ ]/<alarmConfigurationAttributes> on page 78 telindus1423Router/wanInterface/end/<alarmConfigurationAttributes> on page 78

The repeater[ ] and the end objects are not present in the containment tree by default. They are added automatically when you configure the eocHandling attribute. Refer to MU-5.4.3 - Contrle dchange de messages EOC standard on page 80.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 78 Configuration attributes

telindus1423Router/wanInterface/repeater[ ]/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the repeater[ ] object, refer to MR-4.8 - End and repeater alarms on page 498.

telindus1423Router/wanInterface/end/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the end object, refer to MR-4.8 - End and repeater alarms on page 498.

79 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.8 BRI configuration attributes


This section discusses the configuration attributes of the BRI interface. First it describes the configuration attributes of the BRI interface in general. Then it describes more specifically the configuration attributes of the B-channels and of the leasedLine[ ] object that can be added under the bri[ ] object. The following gives an overview of this section: MR-1.8.1 - General BRI configuration attributes on page 80 MR-1.8.2 - B-channel configuration attributes on page 83 MR-1.8.3 - ISDN leased line configuration attributes on page 85

Telindus 1423 SHDSL Router User manual

Chapter MR-1 80 Configuration attributes

MR-1.8.1 General BRI configuration attributes


This section describes the following configuration attributes: telindus1423Router/bri[ ]/tei on page 81 telindus1423Router/bri[ ]/teiValue on page 81 telindus1423Router/bri[ ]/telephoneNrs on page 82 telindus1423Router/bri[ ]/dialAllowed on page 82 telindus1423Router/bri[ ]/<alarmConfigurationAttributes> on page 82

81 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/bri[ ]/tei

Use this attribute to determine how a Terminal Endpoint Identifier (TEI) is assigned to the Basic Rate ISDN interface. TEIs are used to distinguish between several different devices using the same ISDN links. The tei attribute has the following values: Value fixed Description

Default:auto Range: enumerated, see below

The TEI value of the Basic Rate ISDN interface has to be set by the user using the configuration attribute telindus1423Router/bri[ ]/teiValue. In this case the TEI value can range from 1 up to 63.

auto

The TEI value of the Basic Rate ISDN interface is set automatically by the Network Terminator (NT) to which the interface is attached to. The setting of the configuration attribute telindus1423Router/bri[ ]/teiValue is ignored. In this case the TEI value can range from 64 up to 126.

permanent

The TEI value of the Basic Rate ISDN interface is set to 0. The setting of the configuration attribute telindus1423Router/bri[ ]/teiValue is ignored. In this case both layer 1 and layer 2 are permanently up.

telindus1423Router/bri[ ]/teiValue

Use this attribute to set the Terminal Endpoint Identifier (TEI) of the Basic Rate ISDN interface in case you set the configuration attribute telindus1423Router/bri[ ]/tei to fixed.

Default:1 Range: 1 63

Telindus 1423 SHDSL Router User manual

Chapter MR-1 82 Configuration attributes

telindus1423Router/bri[ ]/telephoneNrs

Use this attribute to assign (a) telephone number(s) to the Basic Rate ISDN interface. These numbers are only relevant in case BAP is enabled. The following tries to explains this. When BAP is activated and when the local router decides that it needs to add a member to the existing ISDN bundle (because the tx or rx throughput threshold was exceeded), then it sends a request to the remote router asking for the addition of a link to the bundle. If the remote router agrees (based on its throughput threshold settings), the remote router will acknowledge the request. In this acknowledgement message, the remote router adds the telephone number to which the central router has to call to. This telephone number is one defined on a BRI that still has available channels. The central router then will establish a new call using the telephone number it received from the remote router. This whole procedure ensures that the central calls a BRI that is still available (i.e. for which not all B-channels are assigned to ISDN calls). Note however that is not mandatory to enter telephone numbers in the telephoneNrs table. If you leave this table empty and the remote ISDN device wants to add an extra B-channel to the bundle, then any available B-channel on any available BRI interface of the local ISDN interface will be taken. The telephoneNrs table contains the following elements: Element telNr Description Use this element to enter the telephone number. Default:<empty> Range: 0 36 tel. characters Default:0 Range: 0 35

Default:<empty> Range: table, see below

uniqueDigits

Use this element to set the number of unique digits. Refer to What are unique digits?.

Setting the uniqueDigits to 0 means that the complete telephone number as entered in the telNr element should be considered as unique digits. telindus1423Router/bri[ ]/dialAllowed Use this attribute allow (yes) or deny (no) dial-up calls (both in and out) on the BRI interface.

Default:yes Range: yes / no

If the dialAllowed attribute is set to yes, then you can use the BRI interface both in dial-up operation as leased line operation. If, however, the dialAllowed attribute is set to no, then you can use the BRI interface only in leased line operation. telindus1423Router/bri[ ]/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the bri[ ] object, refer to MR-4.9 - BRI alarms on page 500.

83 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.8.2 B-channel configuration attributes


This section describes the following configuration attributes: telindus1423Router/bri[ ]/bChannel[ ]/<alarmConfigurationAttributes> on page 84

Telindus 1423 SHDSL Router User manual

Chapter MR-1 84 Configuration attributes

telindus1423Router/bri[ ]/bChannel[ ]/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the bChannel[ ] object, refer to MR-4.10 - B-channel alarms on page 501.

85 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.8.3 ISDN leased line configuration attributes


This section describes the following configuration attributes: telindus1423Router/bri[ ]/leasedLine[ ]/encapsulation on page 86 telindus1423Router/bri[ ]/leasedLine[ ]/priorityPolicy on page 86 telindus1423Router/bri[ ]/leasedLine[ ]/maxFifoQLen on page 86 telindus1423Router/bri[ ]/leasedLine[ ]/channelAllocation on page 87 telindus1423Router/bri[ ]/leasedLine[ ]/<alarmConfigurationAttributes> on page 87

For the configuration attributes of the encapsulation objects (frameRelay, ppp, hdlc and errorTest) which are located under the leasedLine[ ] object, refer to MR-1.5 - Encapsulation configuration attributes on page 37.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 86 Configuration attributes

telindus1423Router/bri[ ]/leasedLine[ ]/encapsulation Use this attribute to select the encapsulation protocol on the leased line ISDN connection.

Default:frameRelay Range: enumerated, see below

The encapsulation attribute has the following values: frameRelay, ppp, hdlc and errorTest. Refer to 6.6 - How to configure a leased line ISDN connection on a BRI interface?_ (Telindus 1034 Router only)_ on page 203 for more information on how to set up a leased line ISDN. telindus1423Router/bri[ ]/leasedLine[ ]/priorityPolicy Use this attribute to apply a priority policy on the leased line ISDN connection. Default:<empty> Range: 0 24 characters

Do this by entering the index name of the priority policy you want to use. You can create the priority policy itself by adding a priorityPolicy object and by configuring the attributes in this object. Example If you created a priorityPolicy object with index name my_priority_policy (i.e. priorityPolicy[my_priority_policy]) and you want to apply this priority policy here, then enter the index name as value for the priorityPolicy attribute. Refer to MU-8.8.6 - Cration d'une politique de priorit on page 259 for more information on priority policies. telindus1423Router/bri[ ]/leasedLine[ ]/maxFifoQLen Use this attribute to set the maximum length (number of packets) of the First In First Out queue. Default:200 Range: 1 4000

Refer to telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/algorithm on page 112 for more information on this queue.

87 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/bri[ ]/leasedLine[ ]/channelAllocation Use this attribute to activate the BRI channels of the leased line ISDN connection. The channelAllocation structure contains the elements: Element d Description Use this element to activate (on) or deactivate (off) the D-channel. Use this element to activate (on) or deactivate (off) the B1-channel. Use this element to activate (on) or deactivate (off) the B2-channel.

Default:Range: structure, see below

Default:off Range: on / off Default:off Range: on / off Default:off Range: on / off

b1

b2

Depending which channels you activate, you can comply with the following standards: 64S: B1 channel 64S2: B1+B2 channel TS01: B1+D channel TS02: B1+B2+D channel

Refer to 6.6 - How to configure a leased line ISDN connection on a BRI interface?_ (Telindus 1034 Router only)_ on page 203 for more information on how to set up a leased line ISDN. telindus1423Router/bri[ ]/leasedLine[ ]/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the bri[ ]/leasedLine[ ] object, refer to MR-4.10 - B-channel alarms on page 501.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 88 Configuration attributes

MR-1.9 Profiles configuration attributes

If you want to establish an ISDN dial-up connection, then you first have to set up dial, encapsulation and forwarding profiles. Then you have to configure the dial map in which you combine the different profiles. Refer to MU-6 - Configuration des connexions ISDN on page 95 for more information. Also setting up traffic and priority policies involves creating and applying profiles. Refer to MU-8.8 - Configuration de la politique de trafic et de priorit sur le routeur on page 249 and MU-9.3 - Configuration de la politique de trafic et de priorit sur le pont on page 300 for more information. This section lists the configuration attributes that are present in the different profiles. The following gives an overview of this section: MR-1.9.1 - ISDN dial profile configuration attributes on page 89 MR-1.9.2 - Encapsulation profile configuration attributes on page 94 MR-1.9.3 - Forwarding profile configuration attributes on page 98 MR-1.9.4 - IP traffic policy configuration attributes on page 100 MR-1.9.5 - Bridging traffic policy configuration attributes on page 109 MR-1.9.6 - Priority policy configuration attributes on page 111

Default:all time slots enabled, except 0 and 16 Range: bit string

89 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.9.1 ISDN dial profile configuration attributes


This section describes the following configuration attributes: telindus1423Router/profiles/dial/defaultIsdn/isdnInterfaces on page 90 telindus1423Router/profiles/dial/defaultIsdn/dialPktBufSize on page 90 telindus1423Router/profiles/dial/defaultIsdn/idleTimeOut on page 90 telindus1423Router/profiles/dial/defaultIsdn/fastIdleTimeOut on page 90 telindus1423Router/profiles/dial/defaultIsdn/callInterval on page 90 telindus1423Router/profiles/dial/defaultIsdn/callTimeOut on page 90 telindus1423Router/profiles/dial/defaultIsdn/24hMaxCallTime on page 91 telindus1423Router/profiles/dial/defaultIsdn/dialTimeTable on page 91 telindus1423Router/profiles/dial/defaultIsdn/maxChannelsUsed on page 93 telindus1423Router/profiles/dial/defaultIsdn/minChannelsFree on page 93

Telindus 1423 SHDSL Router User manual

Chapter MR-1 90 Configuration attributes

telindus1423Router/profiles/dial/defaultIsdn/isdnInterfaces Use this attribute to determine through which BRI interface the ISDN connection has to be set up.

Default:<empty> Range: table, see below

The isdnInterfaces table only contains one element: interface. This element has possible values bri[1] and bri[2]. If you leave the isdnInterfaces table empty, then both BRI interfaces are used (this would be the same as entering bri[1] and bri[2]). If both BRI interfaces can be used (i.e. the isdnInterfaces table is empty or contains both bri[1] and bri[2]), then it is not possible for the Telindus 1423 SHDSL Router to know which interface is active because sometimes layer 1 is kept down by the Network Termination device until a call is set up. So in this particular case, when a call has to be set up, BRI 1 is always tried first. If BRI 1 fails, then BRI 2 is tried. Switching between BRI 1 and BRI 2 takes about 10 seconds. telindus1423Router/profiles/dial/defaultIsdn/dialPktBufSize Use this attribute to set the size of the buffer, in packets, that is used to buffer the data when the ISDN connection is being set up. telindus1423Router/profiles/dial/defaultIsdn/idleTimeOut Default:20 Range: 0 100

Default:00000d 00h 05m 00s Range: 00000d 00h 00m 00s Use this attribute to set the time during which an incoming or outgoing ISDN 00000d 01h 00m 00s call may be idle (i.e. the connection is up, but no data is sent) before it is terminated. Both incoming and outgoing traffic is considered. I.e. the ISDN line goes idle only if during the idle timer no packets have been transmitted nor received. telindus1423Router/profiles/dial/defaultIsdn/fastIdleTimeOut Default:00000d 00h 01m 00s Range: 00000d 00h 00m 00s Use this attribute to set the time during which an incoming or outgoing ISDN 00000d 01h 00m 00s call may be idle (i.e. the connection is up, but no data is sent) before it is terminated, in case another application needs an ISDN connection but when all B-channels are in use. telindus1423Router/profiles/dial/defaultIsdn/callInterval Use this attribute to set the minimum time between two consecutive outgoing ISDN calls. callback time-out. This is the time-out period in which the device that calls back must have done so in order for a callback to be accepted. Callback attempts that fall out of this period are no longer accepted. Refer to 6.8 - How to configure callback? on page 206. Default:00000d 00h 00m 30s Range: 00000d 00h 00m 00s 00000d 01h 00m 00s Default:00000d 00h 00m 05s Range: 00000d 00h 00m 00s 00000d 01h 00m 00s

telindus1423Router/profiles/dial/defaultIsdn/callTimeOut Use this attribute to set the time after which the Telindus 1423 SHDSL Router should cancel the connection attempt. Note that the connection is considered as up only if the PPP negotiation was successful.

91 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/profiles/dial/defaultIsdn/24hMaxCallTime

Use this attribute to determine how long (an) outgoing ISDN call(s) may last in a 24 hour time span, starting from midnight. In other words, this attribute defines the total up time per day of the sum of all connections initiated by the dial map that refers to this profile. If the maximum time is exceeded then the call is terminated.

Default:00001d 00h 00m 00s Range: 00000d 00h 00m 00s 00001d 00h 00m 00s

E.g. suppose you have a dial profile in which you set the 24hMaxCallTime to 3 hours and you have a dial map that refers to this profile and, furthermore, this dial map causes 2 connections to be set up. Then in a time span of 24 hours (starting from midnight) the total time call for the 2 connections set up by the dial map can be maximum 3 hours (e.g. 1,5 hour per connection, or 2 hours for one connection and 1 hour for the other connection, etc.). telindus1423Router/profiles/dial/defaultIsdn/dialTimeTable Default:<empty> Range: table, see below

Use this attribute to determine when exactly ISDN calls are allowed. In other words, this attribute allows you to control the up-time of your outgoing ISDN call. The dialTimeTable contains the following elements: Element start Description

Use this attribute to set the beginning of the period during which outgoing ISDN calls are allowed. The start structure contains the following elements: month. Use this element to set the month. Possible values are: jan, feb, mar, apr, may, jun, jul, aug, sep, oct, nov, dec. dayOfMonth. Use this element to set the day of the month. Either set a dayOfMonth or dayOfWeek, not both. Default:<opt> Range: enumerated, see below Default:<opt> Range: 1 31

dayOfWeek. Use this element to set the day of the Default:<opt> week. Possible values are: monday, tuesday, wednes- Range: enumerated, see below day, thursday, friday, saturday, sunday. Either set a dayOfMonth or dayOfWeek, not both. hour. Use this element to set the hour. minute. Use this element to set the minute. Default:<opt> Range: 0 23 Default:<opt> Range: 0 59

end

Use this attribute to set the end of the period during which outgoing ISDN calls are allowed. The end structure contains the same elements as the start structure. See above.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 92 Configuration attributes

Remarks Leaving an element at its <opt> (optional) value means it is not considered (wild card). The ranges that you define are inclusive. This means that if you define a range from e.g. start hour = 7 up to end hour = 19, you actually end at 19 hours and 59 minutes. It is possible that you make invalid entries in the dialTimeTable. An invalid entry could be: You define a start value, but no end value or vice versa. The start value is bigger than the end value. Both dayOfMonth and dayOfWeek are filled in (you can only set one of both).

If you made an invalid entry, an error message appears in the message table (refer to telindus1423Router/messages on page 260). Moreover, the invalid entry is ignored.

Example You could specify that outgoing ISDN calls are only allowed on working days, during office hours. In that case, the dialTimeTable looks as follows:

93 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/profiles/dial/defaultIsdn/maxChannelsUsed

Use this attribute to determine the maximum amount of B-channels that may be used by an ISDN call. This to avoid that the dial map entries that refer to this ISDN profile use all available B-channels. If you set the maxChannelsUsed attribute to 0, then no B-channels may be used. 1 or 2, then maximum 1 or 2 B-channels may be used. 3 or 4, then maximum 3 or 4 B-channels may be used. Since there are only 2 B-channels per BRI interface, using 3 or 4 B-channels is only possible if you entered both BRI interfaces in the configuration attribute telindus1423Router/profiles/dial/defaultIsdn/isdnInterfaces on page 90. <opt> (optional), then the attribute is ignored. In this case, all available B-channels may be used (i.e. 2 B-channels in case you use 1 BRI interface, 4 B-channels in case you use 2 BRI interfaces). Default:<opt> Range: 0 4

Default:<opt> Range: 0 4

telindus1423Router/profiles/dial/defaultIsdn/minChannelsFree Use this attribute to determine the minimum amount of B-channels that has to be kept free. This to keep channels free for e.g. incoming ISDN calls. If you set the minChannelsFree attribute to

0, then no B-channels are kept free. In this case, all available B-channels may be used (i.e. 2 B-channels in case you use 1 BRI interface, 4 B-channels in case you use 2 BRI interfaces). 1, 2 or 3, then minimum 1, 2 or 3 B-channels are kept free. 4, then all B-channels are kept free. <opt> (optional), then the attribute is ignored. In this case, no B-channels are kept free. This means all available B-channels may be used (i.e. 2 B-channels in case you use 1 BRI interface, 4 B-channels in case you use 2 BRI interfaces).

As opposed to the maxChannelsUsed attribute, the minChannelsFree attribute is actually profile independent. As soon as one profile specifies that e.g. 2 channels should be kept free, then 2 channels are kept free even if another profile specifies that only 1 channel should be kept free.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 94 Configuration attributes

MR-1.9.2 Encapsulation profile configuration attributes


This section describes the following configuration attributes: telindus1423Router/profiles/encapsulation/defaultPpp/linkMonitoring on page 95 telindus1423Router/profiles/encapsulation/defaultPpp/authentication on page 95 telindus1423Router/profiles/encapsulation/defaultPpp/authenPeriod on page 95 telindus1423Router/profiles/encapsulation/defaultPpp/compression on page 95 telindus1423Router/profiles/encapsulation/defaultPpp/connection on page 95 telindus1423Router/profiles/encapsulation/defaultPpp/multiLink on page 96 telindus1423Router/profiles/encapsulation/defaultPpp/callback on page 97

95 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/profiles/encapsulation/defaultPpp/linkMonitoring Use this attribute to enable or disable link monitoring and to fine-tune it.

Default:Range: structure, see below

Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/linkMonitoring on page 59 for more information. telindus1423Router/profiles/encapsulation/defaultPpp/authentication Use this attribute to enable or disable authentication on the PPP link. Default:disabled Range: enumerated, see below

Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/authentication on page 60 for more information. telindus1423Router/profiles/encapsulation/defaultPpp/authenPeriod Use this attribute to set the PPP authentication interval. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/authenPeriod on page 60 for more information. telindus1423Router/profiles/encapsulation/defaultPpp/compression Use this attribute to enable or disable the compression of PPP encapsulated packets. Default:disabled Range: disabled / predictor1 Default:00000d 00h 10m 00s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s

Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/compression on page 58 for more information. telindus1423Router/profiles/encapsulation/defaultPpp/connection Use this attribute to determine whether you want set up a single link or multilink PPP connection. Default:multiLink Range: enumerated, see below

Refer to MU-7.4.14 - Configuration de MLPPP sur une interface BRI en mode de numrotation on page 186 for more information. The connection attribute has the following values: Value singleLink multiLink Description One PPP link only uses one B-channel. One PPP link uses several B-channels. I.e. different B-channels are bundled to create one PPP link. In this way you can bundle up to 4 B-channels.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 96 Configuration attributes

telindus1423Router/profiles/encapsulation/defaultPpp/multiLink

If you set the telindus1423Router/profiles/encapsulation/defaultPpp/connection attribute to multiLink, then use the multiLink attribute to configure the channel usage of the multi-link PPP connection. The multiLink structure the following elements: Element initialChannels Description Use this element to set the number of B-channels you Default:1 would like the multi-link PPP connection to contain ini- Range: 1 4 tially. For example, if you set the initialChannels element to e.g. 2 and e.g. 4 B-channels are available, then the Telindus 1423 SHDSL Router only activates 2 channels. Another example, if you set the initialChannels element to e.g. 2 and 2 B-channels are available, then the Telindus 1423 SHDSL Router activates these 2 channels. Suppose that after that 1 channel drops, then the Telindus 1423 SHDSL Router continuous to operate on this 1 channel. However, if the channel comes up again, then the Telindus 1423 SHDSL Router will not reactivate the channel (at least, not if BAP is disabled). bap Use this element to enable, disable and fine-tune the Bandwidth Allocation Protocol (BAP). Default:Range: structure, see below

Default:Range: structure, see below

Refer to telindus1423Router/profiles/encapsulation/defaultPpp/multiLink/bap on page 96 for a detailed description of the elements in the bap structure. telindus1423Router/profiles/encapsulation/defaultPpp/multiLink/bap

Use the bap structure in the multiLink structure to enable, disable and finetune the Bandwidth Allocation Protocol (BAP). Refer to Qu'est-ce que le BAP ? on page 164. The bap structure contains the following elements: Element operation Description Use this element to enable or disable BAP.

Default:Range: structure, see below

Default:disabled Range: enabled / disabled Default:4 Range: 1 4

maxChannels

Use this element to set the maximum number of Bchannels the multi-link PPP connection may contain.

removeTimeout

Use this element to set the period, in seconds, over Default:60 which the load of the multi-link PPP connection is cal- Range: 1 3600 culated and which determines, together with the removeThresholdIn and removeThresholdOut attributes, when a channel is removed from the multi-link PPP connection. Use this element to set the period, in seconds, over Default:60 which the load of the multi-link PPP connection is cal- Range: 1 3600 culated and which determines, together with the addThresholdIn and addThresholdOut attributes, when a channel is added to the multilink PPP connection.

addTimeout

97 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element removeThresholdIn

Description Use this element to determine the load, in percents, that has to be reached over the removeTimeout period before a channel is removed from the multi-link PPP connection in the receive direction. Use this element to determine the load, in percents, that has to be reached over the removeTimeout period before a channel is removed from the multi-link PPP connection in the transmit direction. Use this element to determine the load, in percents, that has to be reached over the addTimeout period before a channel is added to the multi-link PPP connection in the receive direction. Use this element to determine the load, in percents, that has to be reached over the addTimeout period before a channel is added to the multi-link PPP connection in the transmit direction. Default:40 Range: 0 100

removeThresholdOut

Default:40 Range: 0 100

addThresholdIn

Default:80 Range: 0 100

addThresholdOut

Default:80 Range: 0 100

callBackRequests

Use this element to allow (accept) or deny (reject) that Default:reject the remote side triggers the adding of channels to the Range: reject / accept multi-link PPP connection at the local side. Default:Range: structure, see below

telindus1423Router/profiles/encapsulation/defaultPpp/callback Use this attribute to enable or disable callback. Refer to 6.8 - How to configure callback? on page 206 for more information. The callback structure contains the following elements: Element type Description Use this element to enable or disable callback. The type element has the following values: disabled. No callback is done.

Default:disabled Range: enumerated, see below

authentication. The callback is based on PPP authentication. Refer to What is authentication callback? on page 207. e164Number. The callback number is communicated during the callback negotiation. Refer to What is E.164 number callback? on page 208.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 98 Configuration attributes

MR-1.9.3 Forwarding profile configuration attributes


On the ISDN interfaces, only a routing forwarding profile can be set up. This means that the ISDN interfaces can only operate in routing mode, not in bridging mode. The reason for not supporting bridging mode is that the risk is too high that the ISDN connections stay up permanently due to broadcasts and multicasts. This section describes the following configuration attributes: telindus1423Router/profiles/forwardingMode/defaultRouting/ip on page 99 telindus1423Router/profiles/forwardingMode/defaultRouting/priorityPolicy on page 99 telindus1423Router/profiles/forwardingMode/defaultRouting/maxFifoQLen on page 99

99 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/profiles/forwardingMode/defaultRouting/ip Use this attribute to configure the IP related parameters of the PPP links that can be set up on the BRI interfaces. Refer to

Default:Range: structure, see below

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:<empty> Range: 0 24 characters

telindus1423Router/profiles/forwardingMode/defaultRouting/priorityPolicy Use this attribute to apply a priority policy on the interface.

Refer to telindus1423Router/wanInterface/priorityPolicy on page 36 for more information. telindus1423Router/profiles/forwardingMode/defaultRouting/maxFifoQLen Use this attribute to set the maximum length (number of packets) of the First In First Out queue. Default:200 Range: 1 4000

Refer to telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/algorithm on page 112 for more information on this queue.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 100 Configuration attributes

MR-1.9.4 IP traffic policy configuration attributes


This section describes the following configuration attributes: telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method on page 101 telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/trafficShaping on page 103 telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/dropLevels on page 106 telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/tos2QueueMapping on page 108

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

101 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method Use this attribute to choose an IP traffic policy method. This IP traffic policy is then used to

Default:trafficShaping Range: enumerated, see below

determine, on traffic overload conditions, how and which queues are filled with the excess data. Refer to MU-8.8 - Configuration de la politique de trafic et de priorit sur le routeur on page 249. do policy based routing. Refer to MU-8.4 - Configuration d'acheminement en fonction de la politique on page 204. filter data on an interface. Refer to MU-10.2 - Configuration des restrictions d'accs on page 312.

The method attribute has the following values: Value trafficShaping Description The data is redirected to the queues based on the settings of the trafficShaping attribute (queueing). redirected to an interface or a gateway based on the settings of the trafficShaping attribute (policy based routing). filtered based on the settings of the trafficShaping attribute (extended access list).

Refer to telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/trafficShaping on page 103 for more information on traffic shaping. tosDiffServ The data is redirected to the queues based on DiffServ (refer to RFC 2597) regarding class and drop precedence. Refer to Qu'est-ce que AF PHB ? on page 252. This means that, depending on their DSCP field in the TOS byte, some packets are moved to other queues and/or dropped sooner than other packets in case the queue is full. The highest 3 bits of the DSCP field are mapped as follows: Bit values 000 up to 100 101 and higher are mapped to queues 1 up to 5, respectively. the low delay queue.

The next 2 bits of the DSCP field define the drop levels: Bit values 00 and 01 10 11 correspond with dropLevel1 dropLevel2 dropLevel3

Refer to the attribute telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/dropLevels on page 106 for more information on drop levels.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 102 Configuration attributes

Value tosMapped

Description The data is redirected to the queues based on the settings of the tos2QueueMapping attribute (queueing). an interface or a gateway based on the settings of the tos2QueueMapping attribute (policy based routing).

Refer to the attribute telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/ tos2QueueMapping on page 108 for more information on TOS to queue mapping.

103 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/trafficShaping The function of this attribute is threefold:

Default:<empty> Range: table, see below

Traffic and priority policing In case you have set the telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method attribute to trafficShaping, then use the trafficShaping table to specify which data has to be redirected to which queue. If an overload condition occurs, then a packet is redirected to the specified queue when the criteria as specified in the trafficShaping table are met. Refer to MU-8.8 - Configuration de la politique de trafic et de priorit sur le routeur on page 249. Policy based routing In case you have set the telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method attribute to trafficShaping, then use the trafficShaping table to specify which data has to be redirected to which interface or gateway. Packets are redirected to the specified interface or gateway when the criteria as specified in the trafficShaping table are met. Refer to MU-8.4 - Configuration d'acheminement en fonction de la politique on page 204. Extended access list In case you have set the telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method attribute to trafficShaping, then use the trafficShaping table to specify which data is forwarded. Packets are forwarded when the criteria as specified in the trafficShaping table are met. If more than one entry applies to the same packet, then the entry which has the narrowest filter range (when looking at the filter criteria from left to right) is chosen. Refer to MU-10.2 - Configuration des restrictions d'accs on page 312.

Important remarks By default, the entries in the trafficShaping table are allow rules. I.e. only the traffic defined in the table is permitted, all other traffic is discarded (independent whether the traffic shaping table is used as an access list, for priority policing or policy based routing). However, you can inverse an entry making it a deny rule by entering discard as value of the interface element. If more than one entry applies to the same packet, then the entry which has the narrowest filter range (when looking at the filter criteria from left to right) is chosen. For example: two rows in the trafficShaping table apply to the same packet, but row 1 wants to forward packets to queue 3 and row 2 wants to forward packets to the low delay queue. In that case, first the IP source address is considered. The row with the smallest range wins. If the ranges are exactly the same, then the IP destination address is considered. And so on. Should the two rows be completely identical except for the queue, then one of the rows is chosen at random. You do not necessarily have to fill in IP addresses in the trafficShaping table. It is perfectly valid to filter on IP protocol, IP protocol/port combination or TOS values only. However, you can not filter on port numbers only. What is more, you can only filter on port numbers when the IP protocol is set to TCP or UDP. So in other words, if the IP protocol element is set to a value different from TCP or UDP, then all the port elements are ignored.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 104 Configuration attributes

The trafficShaping table contains the following elements: Element sourceIpStartAddress sourceIpEndAddress destinationIpStartAddress destinationIpEndAddress tosStartValue tosEndValue ipProtocol Description Use these elements to set the IP source address as specified in the IP header. Default:0.0.0.0 Range: up to 255.255.255.255

Packets that fall within the specified range are forwarded and queued if applicable. Use these elements to set the IP destination address as specified in the IP header. Default:0.0.0.0 Range: up to 255.255.255.255

Packets that fall within the specified range are forwarded and queued if applicable. Use these elements to set the TOS byte value. Packets that fall within the specified range are forwarded and queued if applicable. Use this element to set the protocol field from the IP header. Default:any(start)/optional(end) Range: 0 256

Default:any Range: 0 255

Packets that have the specified protocol field are forwarded and queued if applicable. You can specify the protocol by typing the protocol number. For ease of use, some common protocols can be selected from a drop-down box: any (0), ICMP (1), IGMP (2), IPinIP (4), TCP (6), EGP (8), IGP (9), UDP (17), RSVP (46), IGRP (88), OSPFIGP (89), TCPestablished (255). sourcePortStart sourcePortEnd Use these elements to set the source port as specified Default:any(start)/optional(end) in the UDP / TCP headers. Range: 0 65535 Packets that fall within the specified range are forwarded and queued if applicable. You can specify the port by typing the protocol number. For ease of use, some common port numbers can be selected from a drop-down box: any or optional (0), echo (7), discard (9), ftp-data (20), ftp (21), telnet (23), smtp (25), domain (53), www-http (80), pop3 (110), nntp (119), snmp (161), snmptrap (162), z39.50 (210), syslog (514), router (520), socks (1080), I2tp (1701), telindus (1728). Note that the predefined echo value is a UDP port. It has nothing to do with ICMP echo. destinationPortStart destinationPortEnd Use these elements to set the destination port as specified in the UDP / TCP headers. Default:any(start)/optional(end) Range: 0 65535

Packets that fall within the specified range are forwarded and queued if applicable. You can specify the port by typing the protocol number. For ease of use, some common port numbers can be selected from a drop-down box: see above. newTosValue Default:unchanged When you select a new TOS byte value, then a packet Range: 0 256 that matches an entry in the trafficShaping table its TOS byte value is changed. Selecting unchanged, leaves the TOS byte value as it is. Use this element to set the new TOS byte value.

105 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element priority

Description Use this element to set the destination queue for a packet matching an entry in the trafficShaping table. Default:queue1 Range: enumerated, see below

In case an overload condition occurs, then a packet that matches an entry in the trafficShaping table is sent to the specified queue. The priority element has the following values: queue1, queue2, queue3, queue4, queue5, lowDelayQueue. interface Use this element to set the destination interface for a packet matching an entry in the trafficShaping table. This is policy based routing. Default:<empty> Range: 0 24 characters

Type the name of the interface in the interface element, e.g. lan. Note that by default, the entries in the trafficShaping table are allow rules. I.e. only the traffic defined in the table is permitted, all other traffic is discarded (independent whether the traffic shaping table is used as an access list, for priority policing or policy based routing). However, you can inverse an entry making it a deny rule by entering discard as value of the interface element. gateway Use this element to set the gateway for a packet Default:<opt> matching an entry in the trafficShaping table. This is pol- Range: up to 255.255.255.255 icy based routing.

Start and end values Except for the ipProtocol, newTosValue and priority elements, it is possible to specify ranges using the start and end values. There are two special cases: A start value is entered, but no end value an exact match is needed for the start value. Neither a start nor an end value is entered the field is not checked.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 106 Configuration attributes

telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/dropLevels Use this attribute to define for each user configurable queue, how many packets may be queued before they are dropped. The dropLevels table contains the following elements: Element dropLevel1 Description

Default:Range: table, see below

Use this element to set the maximum length (drop Default:100 level 1), in packets, of each user configurable queue. Range: 1 3000 In case you set the attribute telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method to trafficShaping or tosMapped, then only this drop level is relevant. tosDiffServ, then this drop level corresponds with the drop level bits value 00 and 01.

dropLevel2

Use this element to set the maximum length (drop Default:100 level 2), in packets, of each user configurable queue. Range: 1 3000 In case you set the attribute telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method to trafficShaping or tosMapped, then this drop level is not relevant. tosDiffServ, then this drop level corresponds with the drop level bits value 10.

dropLevel3

Use this element to set the maximum length (drop Default:100 level 3), in packets, of each user configurable queue. Range: 1 3000 In case you set the attribute telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method to trafficShaping or tosMapped, then this drop level is not relevant. tosDiffServ, then this drop level corresponds with the drop level bits value 11.

Examples Suppose telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method is set to trafficShaping or tosMapped. for queue 1 you set maxLength1 = 1000, for queue 2 to 500, for queue 3 to 3000, for queue 4 to 1000 and for queue 5 to 200.

In this case, packets are dropped when the amount of packets in the queue exceeds the amount as specified with the maxLength1 element.

107 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Suppose telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method is set to tosDiffServ. for queue 1 you set maxLength1 = 100, maxLength2 = 200 and maxLength3 = 50.

In this case, the following applies: Queue 1 contains data packets. less than 50 more than 50, less than 100 more than 100, less than 200 more than 200 An incoming data packet with is drop level1 1 accepted accepted dropped dropped drop level 2 accepted accepted accepted dropped drop level 3 accepted dropped dropped dropped

1. As defined in the TOS byte.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 108 Configuration attributes

telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/tos2QueueMapping

Traffic and priority policing In case you have set the telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method attribute to tosMapped, then use the tos2QueueMapping table to specify which data has to be redirected to which queue. If an overload condition occurs, then a packet is redirected to the specified queue when the criteria as specified in the tos2QueueMapping table are met. Refer to MU-8.8 - Configuration de la politique de trafic et de priorit sur le routeur on page 249 and MU-9.3.2 - Configuration d'une politique de trafic sur le pont on page 302. Policy based routing In case you have set the telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/method attribute to tosMapped, then use the tos2QueueMapping table to specify which data has to be redirected to which interface or gateway. Packets are redirected to the specified interface or gateway when the criteria as specified in the tos2QueueMapping table are met. Refer to MU-8.4 - Configuration d'acheminement en fonction de la politique on page 204.

Default:<empty> Range: table, see below

The tos2QueueMapping table contains the following elements: Element startTos endTos targetQueue Description Use these elements to set the TOS byte value. Default:0 (start) / 255 (end) Packets that have a TOS byte value within the speci- Range: 0 255 fied range are redirected to the targetQueue. Use this element to set the destination queue. The targetQueue element has the following values: Queue1, Queue2, Queue3, Queue4, Queue5, lowDelayQueue. interface Use this element to set the destination interface for a packet matching an entry in the tos2QueueMapping table. This is policy based routing. Default:Queue1 Range: enumerated, see below

Default:<empty> Range: 0 24 characters

Type the name of the interface in the interface element, e.g. lan. gateway Use this element to set the gateway for a packet matching an entry in the tos2QueueMapping table. This is policy based routing. Default:<opt> Range: up to 255.255.255.255

109 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.9.5 Bridging traffic policy configuration attributes


This section describes the following configuration attributes: telindus1423Router/profiles/policy/traffic/bridgingTrafficPolicy[ ]/vlanPriorityMap on page 110 telindus1423Router/profiles/policy/traffic/bridgingTrafficPolicy[ ]/dropLevels on page 110

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 110 Configuration attributes

telindus1423Router/profiles/policy/traffic/bridgingTrafficPolicy[ ]/vlanPriorityMap Use this attribute to impose a bridging traffic policy on the bridged VLAN frames received by the Telindus 1423 SHDSL Router.

Default:Range: structure, see below

Each VLAN frame has a certain priority (this is specified in the 802.1P part of the 802.1Q header of the VLAN frame). In case a traffic overload condition occurs and in case you imposed this traffic policy on a certain interface, then the VLAN frames are sent to a queue. Using the vlanPriorityMap attribute, you can specify which VLAN frame is sent to which queue based on the priority of the VLAN frame. The vlanPriorityMap structure contains the following elements: Element priority0 priority7 Description Use these elements to define which priority corresponds with which queue. The possible queues are: queue1 up to queue5 and lowDelayQueue. To empty these queues, specify a priority policy. Frames that are not tagged are all considered to have priority 0.
$

Refer to MU-9.3.2 - Configuration d'une politique de trafic sur le pont on page 302 for more information on traffic policy, priority policy and priority queuing. telindus1423Router/profiles/policy/traffic/bridgingTrafficPolicy[ ]/dropLevels Use this attribute to define for each user configurable queue, how many packets may be queued before they are dropped. The dropLevels table contains the following element: Element dropLevel1 Description Use this element to set the maximum length, in pack- Default:100 ets, of each user configurable queue. Range: 1 3000

Default:Range: table, see below

111 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.9.6 Priority policy configuration attributes


This section describes the following configuration attributes: telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/algorithm on page 112 telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/countingPolicy on page 114 telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/queueConfigurations on page 114 telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/lowdelayQuotum on page 114 telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/bandwidth on page 115

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 112 Configuration attributes

telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/algorithm Use this attribute to determine how and which queues are emptied. The algorithm attribute has the following values: Value fifo Description

Default:fifo Range: enumerated, see below

This is a First In First Out queue. The data that enters the queue first, also leaves the queue first. This is the fastest but most superficial queuing mechanism. You can change the maximum length of the FIFO queue on an interface using the configuration attribute maxFifoQLen.

roundRobin

This is a priority queuing mechanism. In this case, all user configurable queues containing data have an equal weight. In other words, if all the user configurable queues contain data, they are addressed in turns. The low delay has a higher priority, it is addressed between every user configurable queue. The system queue has absolute priority, it is emptied as soon as it contains data. Queues 1 up to 5: user configurable queues. These queues are addressed in turns. Queue 6: low delay queue. This queue is addressed between every user configurable queue. Queue 7: system queue. This queue has absolute priority over all other queues. As soon as it contains data, it is emptied.

absolutePriority

This is a priority queuing mechanism. In this case, queues with a high priority have absolute priority over queues with a low priority. In other words, no lower priority queue is emptied as long as a higher priority queue contains data. The priority of the queues runs parallel to the queue number. I.e. the user configurable queue number 1 has the lowest priority, whereas the system queue (number 7) has the highest priority. Queues 1 up to 5: user configurable queues. Queue 1 has the lowest priority whereas queue 5 has the highest priority. A lower priority queue is only emptied in case no higher priority queue contains data. Queue 6: low delay queue. This queue is only emptied in case the system queue contains no data. Queue 7: system queue. This queue has absolute priority over all other queues. As soon as it contains data, it is emptied. Note that there is a risk of starvation. This means that it is possible that the lower priority queues are never emptied because a higher priority queue continuously receives data.

113 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Value weightedFairQueueing

Description This is a priority queuing mechanism. In this case, the user configurable queues are addressed based on their weight. The low delay has a higher priority, it is addressed between every user configurable queue. The system queue has absolute priority, it is emptied as soon as it contains data. Queues 1 up to 5: user configurable queues. These queues are addressed based on their weight. The weight can be configured in the telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/queueConfigurations attribute. Queue 6: low delay queue. This queue is addressed between every user configurable queue. Queue 7: system queue. This queue has absolute priority over all other queues. As soon as it contains data, it is emptied.

lowDelayWeightedFairQueueing

This is a priority queuing mechanism. It is a combination of absolute priority and weighted fair queueing. In this case, the user configurable queues are addressed based on their weight. The low delay queue has absolute priority over all user configurable queues and the system queue has absolute priority over all queues. Queues 1 up to 5: user configurable queues. These queues are addressed based on their weight. The weight can be configured in the telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/queueConfigurations attribute. Queue 6: low delay queue. This queue has absolute priority over all user configurable queues. If the system queue does not contain data but the low delay queue and the user configurable queues do, then it is the low delay queue that is emptied. Queue 7: system queue. This queue has absolute priority over all other queues. As soon as it contains data, it is emptied.

In a network that carries both voice and data, the lowDelayWeightedFairQueueing algorithm is the most suited mechanism to get the voice over the network with a minimum delay. In this case, the voice has to be queued in the low delay queue.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 114 Configuration attributes

telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/countingPolicy Use this attribute to define whether the quotum of the queues is expressed in bytes or packets. telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/queueConfigurations Use this attribute to

Default:bytes Range: enumerated, see below

Default:<empty> Range: table, see below

set the number of bytes/packets that is dequeued from the user configurable queue when the queue is addressed. set the relative importance of the user configurable queues.

The queueConfigurations table contains the following elements: Element quotum Description Use this element to set the number of bytes/packets that is dequeued from the user configurable queue when the queue is addressed. Default:1500 Range: 1 25000

The unit of the quotum (bytes or packets) can be set with the telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/countingPolicy attribute. weight Use this element to set the relative importance of the user configurable queues. Default:1 Range: 1 10

The weight element is only relevant in case the telindus1423Router/profiles/policy/priority/ priorityPolicy[ ]/algorithm attribute is set to weightedFairQueueing. Example Suppose queue 1 has weight 2, queue 2 has weight 1 and both queues contain data. In that case the queues are emptied in the following order: queue 1 queue 1 queue 2 queue 1 queue 1 queue 2 etc. Refer to MU-8.8.1 - Prsentation de la politique de trafic et de priorit on page 250 for more information on queues. telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/lowdelayQuotum Default:1500 Range: 1 25000

Use this attribute to set the number of bytes/packets that is dequeued from the low delay queue when the queue is addressed. The unit of the quotum (bytes or packets) can be set with the telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/countingPolicy attribute. Refer to MU-8.8.1 - Prsentation de la politique de trafic et de priorit on page 250 for more information on queues.

115 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/profiles/policy/priority/priorityPolicy[ ]/bandwidth Use this attribute to set the bandwidth per queue. The bandwidth table contains the following elements: Element cir Description

Default:Range: table, see below

Use this element to set the Committed Information Default:0 Rate (CIR), in bits per second, of the different queues. Range: 0 2147483647 Using entry 1 up to 5 in the bandwidth table you can set the CIR for queues 1 up to 5, respectively. Using entry 6 in the bandwidth table you can set the CIR for the low delay queue. If the CIR is exceeded, then the data is first queued. The amount of data that is queued can be set using the maxFifoQLen attribute. If the queue is completely filled up, then the data is discarded.

Refer to MU-8.8.1 - Prsentation de la politique de trafic et de priorit on page 250 for more information on queues.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 116 Configuration attributes

MR-1.10 Dial maps configuration attributes


If you want to establish an ISDN dial-up connection, then you first have to set up dial, encapsulation and forwarding profiles. Then you have to configure the dial map in which you combine the different profiles. Refer to MU-6 - Configuration des connexions ISDN on page 95 for more information. This section describes the following configuration attributes: telindus1423Router/dialMaps/mapping on page 117

117 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/dialMaps/mapping

Use this attribute to configure dial maps. This means that you can create entries in this table (called dial maps) which actually make up an ISDN dial-up connection.

Default:<empty> Range: table, see below

Refer to MU-6 - Configuration des connexions ISDN on page 95 for an elaborate explanation on setting up ISDN dial-up connections using profiles and dial maps. The mapping table contains the following elements: Element name Description Use this element to specify a name for the dial map. This name has to be used in the routing table in order to point to a specific dial map. Default:map Range: 1 24 characters

Refer to 6.3.3 - How to create a route that points to a dial map? on page 200 for more information. localTelNrs Use this element to enter the local telephone number. This is the telephone number a remote ISDN device has to use to dial in. The localTelNrs table contains the following elements: telNr. Use this element to enter the telephone number. Default:<empty> Range: 0 36 tel. characters Default:<empty> Range: table, see below

uniqueDigits. Use this element to set the number of Default:0 unique digits. Refer to What are unique digits?. Range: 0 35 Setting the uniqueDigits to 0 means that the complete telephone number as entered in the telNr element should be considered as unique digits.

It is not mandatory to fill in the localTelNrs table. If you leave the localTelNrs table empty, then all incoming calls are accepted. However, if you do specify a telephone number in the localTelNrs table, then only the calls to this specific telephone number are accepted.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 118 Configuration attributes

Element remoteTelNrs

Description Use this element to enter the remote telephone number(s). The remoteTelNrs table contains the following elements: telNr. Use this element to enter the telephone number. Default:<empty> Range: 0 36 tel. characters Default:<empty> Range: table, see below

uniqueDigits. Use this element to set the number of Default:0 unique digits. Refer to What are unique digits?. Range: 0 35 Setting the uniqueDigits to 0 means that the complete telephone number as entered in the telNr element should be considered as unique digits.

In case of an outgoing call, these numbers are used to dial out. incoming call, these numbers are used to authenticate the remote caller.

Since the remoteTelNrs element is a table, you can enter several remote telephone numbers. In case of an outgoing call, the first number in the list is taken to dial out. If for this number the call set-up fails (due to network problems, e.g. busy, dial time-out, etc.), then the next telephone number in the list is tried. incoming call, if the telephone number of the remote caller is present somewhere in the list, then the call is accepted.

119 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element

Description What are unique digits? The unique digits are, as the word says, that part of the telephone number that is truly unique. Once a call reaches the ISDN network itself, things such as access codes and country access codes have no significance anymore and hence are discarded. However, should you use the telephone number for verification purposes, then you have to specify which part of the number you entered should be used. Typically, the part after the access code is considered to be the unique number. For example: telephone number 00 32 16 124578, where 00 32 16 124578 00 is the access code, 32 is the country code, 16 is the 8 unique digits regional code and 124578 is the actual telephone number. Typically, the 00 and 32 are dropped once the call reaches the ISDN network. If you want that only the numbers 16 124578 are considered as unique digits, then enter 8 as value for the uniqueDigits element.

callDirection

Use this element to determine whether a call can be Default:incalls+outcalls an incoming, outgoing or an incoming + outgoing call. Range: enumerated, see below Use this attribute to set the PPP authentication name of the remote router. Default:<empty> Range: 1 24 characters

sessionName

Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/sessionName on page 61 for more information. sessionSecret Use this element to set the PPP authentication secret of the remote router. Default:<empty> Range: 1 24 characters

Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/sessionSecret on page 61 for more information.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 120 Configuration attributes

Element dial

Description Use this element to determine which dial profile you want to use for this dial map. The dial element value consists of two parts: Use the first part of the dial element value to select the dial profile type: isdn. Use the second part of the dial element value to select the actual profile. If you want to use the default profile, then enter, in the second field of the dial element value, the string default. a custom profile, then enter, in the second field of the dial element value, the index name of the custom profile you want to use. You can create the profile itself by adding an isdn[ ] object under the profiles/dial object and by configuring the attributes in this object. Default:<isdn> default Range: isdn

Example If you created an isdn object with index name my_isdn (i.e. isdn[my_isdn]) and you want to apply this profile here, then enter the index name as value for the dial element. Refer to 6.3.1 - How to create a profile? on page 196 for more information on creating profiles. encapsulation Use this element to determine which encapsulation profile you want to use for this dial map. Do this in the same way as for the dial element. forwardingMode Use this element to determine which forwarding profile you want to use for this dial map. Do this in the same way as for the dial element. Default:<routing> default Range: choice, see below Default:<ppp> default Range: choice, see below

121 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.11 Bundle configuration attributes


This section describes the configuration attributes of the different bundles that you can set up on the Telindus 1423 SHDSL Router. The following gives an overview of this section: MR-1.11.1 - PPP bundle configuration attributes on page 122

Telindus 1423 SHDSL Router User manual

Chapter MR-1 122 Configuration attributes

MR-1.11.1 PPP bundle configuration attributes


This section describes the following configuration attributes: telindus1423Router/bundle/pppBundle[ ]/members on page 123 telindus1423Router/bundle/pppBundle[ ]/mode on page 123 telindus1423Router/bundle/pppBundle[ ]/ip on page 123 telindus1423Router/bundle/pppBundle[ ]/bridging on page 123 telindus1423Router/bundle/pppBundle[ ]/fragmentation on page 124 telindus1423Router/bundle/pppBundle[ ]/multiclassInterfaces on page 124 telindus1423Router/bundle/pppBundle[ ]/<alarmConfigurationAttributes> on page 125

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

123 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/bundle/pppBundle[ ]/members

Use this attribute to make the WAN interface a part of the PPP bundle. Do this by adding one entry to the members table and by typing wan as value of the interface element.

Default:<empty> Range: table, see below

Note that in case you run PPP over ATM (PPPoA) you can also create PPP bundles. In that case, just type the name of the ATM PVC as value of the interface element in the members table.

Refer to MU-7.4.11 - Configuration PPP multiliaisons on page 179 for more information on how to set up a PPP bundle. telindus1423Router/bundle/pppBundle[ ]/mode Use this attribute to determine whether the packets are treated by the routing process, the bridging process or both. The mode attribute has the following values: Value bridging routing routingAndBridging Description All packets received on the PPP bundle are bridged. BCP is set up. All packets received on the PPP bundle are routed. IPCP is set up. The SNAP header is checked to determine whether the packets have to be bridged or routed. IPCP and BCP are set up. Default:bridging Range: enumerated, see below

telindus1423Router/bundle/pppBundle[ ]/ip Use this attribute to configure the IP related parameters of the PPP bundle. Refer to

Default:<empty> Range: structure, see below

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:Range: structure, see below

telindus1423Router/bundle/pppBundle[ ]/bridging Use this attribute to configure the bridging related parameters of the PPP bundle. Refer to

MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 124 Configuration attributes

telindus1423Router/bundle/pppBundle[ ]/fragmentation Use this attribute to enable or disable PPP fragmentation. Refer to Qu'estce que la fragmentation PPP ? on page 164.

Default:enabled Range: enabled / disabled

When PPP fragmentation is enabled, long frames are fragmented into a sequence of shorter frames. At the remote side they are reassembled into the original frame. telindus1423Router/bundle/pppBundle[ ]/multiclassInterfaces Default:<empty> Range: table, see below

Use this attribute to set up multiclass PPP links. So you have to add an entry to the multiclassInterfaces table for every multiclass PPP link that you want to create.

Refer to MU-7.4.13 - Configuration PPP multiclasses on page 183 for more information. The multiclassInterfaces table contains the following elements: Element name Description Use this element to assign an administrative name to the multiclass PPP link. Use this element to activate (up) or deactivate (down) the multiclass PPP link. Default:<empty> Range: 0 24 characters Default:up Range: up / down

adminStatus

mode

Use this element to determine whether, for the corre- Default:routing sponding multiclass PPP link, the packets are treated Range: enumerated, see below by the routing process, the bridging process or both. The mode element has the following values: bridging. All packets received on the multiclass PPP link are bridged. routing. All packets received on the multiclass PPP link are routed. routingAndBridging. The SNAP header is checked to determine whether the packets have to be bridged or routed. Default:Range: structure, see below

ip

Use this element to configure the IP related parameters of the multiclass PPP link. Refer to

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure.

bridging

Use this element to configure the bridging related Default:parameters of the multiclass PPP link in case the mul- Range: structure, see below ticlass PPP link is in bridging mode (i.e. in case the mode element is set to bridging). Refer to MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure.

125 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element multiclass

Description Use this element to configure the multiclass specific parameters of the multiclass PPP link. Default:Range: structure, see below

Refer to telindus1423Router/bundle/pppBundle[ ]/multiclassInterfaces/multiclass on page 125 for a detailed description of the multiclass structure. telindus1423Router/bundle/pppBundle[ ]/multiclassInterfaces/multiclass Use this structure to configure the multiclass specific parameters of the multiclass PPP link. The multiclass structure contains the following elements: Element multiclass Description Use this element to set a multiclass identifier for the multiclass PPP link. Use this element to select a default queue. Default:1 Range: 1 7 Default:queue1 Range: enumerated, see below Default:Range: structure, see below

defaultQueue

This allows you to easily set up a traffic policy without having to create and apply traffic policy profiles. However, you still have to create and apply a priority policy profile to empty the queues. Refer to MU-8.8.9 - Attribut de la file par dfaut ou profil de politique de trafic on page 265 for more information. telindus1423Router/bundle/pppBundle[ ]/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask, alarmLevel, alarmContactHighMask and alarmContactLowMask and on the alarms in general, refer to MR-4.2 - Introducing the alarm attributes on page 488. the alarms of the pppBundle[ ] object, refer to MR-4.12 - Bundle alarms on page 503.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 126 Configuration attributes

MR-1.12 Router configuration attributes


This section discusses the configuration attributes concerned with routing. First it describes the general routing configuration attributes. Then it explains the configuration attributes of the extra features as there are NAT, L2TP tunnelling, filtering, traffic and priority policy, etc The following gives an overview of this section: MR-1.12.1 - General router configuration attributes on page 127 MR-1.12.2 - NAT configuration attributes on page 152 MR-1.12.3 - L2TP tunnel configuration attributes on page 156 MR-1.12.4 - Manual SA configuration attributes on page 166 MR-1.12.5 - IKE SA configuration attributes on page 170 MR-1.12.6 - OSPF configuration attributes on page 178 MR-1.12.7 - Routing filter configuration attributes on page 192 MR-1.12.8 - VRRP configuration attributes on page 194 MR-1.12.9 - Firewall configuration attributes on page 198

127 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.12.1 General router configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/defaultRoute on page 128 telindus1423Router/ip/router/routingTable on page 129 telindus1423Router/ip/router/routingProtocol on page 130 telindus1423Router/ip/router/alternativeRoutes on page 130 telindus1423Router/ip/router/ripUpdateInterval on page 130 telindus1423Router/ip/router/ripHoldDownTime on page 131 telindus1423Router/ip/router/ripv2SecretTable on page 132 telindus1423Router/ip/router/sysSecret on page 133 telindus1423Router/ip/router/pppSecretTable on page 133 telindus1423Router/ip/router/helperProtocols on page 134 telindus1423Router/ip/router/sendTtlExceeded on page 135 telindus1423Router/ip/router/sendPortUnreachable on page 136 telindus1423Router/ip/router/sendAdminUnreachable on page 136 telindus1423Router/ip/router/dhcpStatic on page 137 telindus1423Router/ip/router/dhcpDynamic on page 139 telindus1423Router/ip/router/dhcpCheckAddress on page 141 telindus1423Router/ip/router/radius on page 142 telindus1423Router/ip/router/dns on page 144 telindus1423Router/ip/router/addrPools on page 145 telindus1423Router/ip/router/<alarmConfigurationAttributes> on page 151

Telindus 1423 SHDSL Router User manual

Chapter MR-1 128 Configuration attributes

telindus1423Router/ip/router/defaultRoute Use this attribute to set the default route, also called gateway address.

Default:Range: structure, see below

Refer to MU-8.3 - Configuration de chemins statiques on page 195 for more information on static routes. The defaultRoute structure contains the following elements: Element gateway Description Use this element to specify the IP address of the next router that will route all packets for which no specific (static or dynamic) route exists in the routing table. Default:0.0.0.0 Range: up to 255.255.255.255

Whether you can omit the gateway element or not, is linked to the following conditions: If the interface element specifies the LAN interface, the WAN interface, a DLCI, PVC or tunnel, interface then you can not omit the gateway element. you can omit the gateway element only when using PPP encapsulation. you can omit the gateway element. Default:<empty> Range: 0 24 characters

Use this element to specify the interface through which the gateway can be reached.

Do this by typing the name of the interface as you assigned it using the configuration attribute name (e.g. telindus1423Router/lanInterface/name). Note that this interface can also be a DLCI, PVC, tunnel, etc. If you do not specify a value for the interface element, then it is deduced by checking all interfaces (including DLCIs, PVCs and tunnels) and finding an interface for which the gateway lies in the subnet defined by the IP address and net mask of that interface. Typing the string discard, discards all packets for the corresponding destination. preference Use this element to set the level of importance of the default route with respect to routes learnt via RIP. Default:10 Range: 1 200

RIP routes always have a preference of 60. Routes with a lower preference value are chosen over routes with higher preference value. metric Use this element to set with how much the metric parameter of a route has to be incremented. Default:1 Range: 1 15

If two routes exist with the same preference, then the route with the lowest metric value is chosen. This element is only important when combining static routes and RIP routes. Refer to MU-8.5.3 - Explication de la structure rip on page 214 for more information on the metric parameter.

129 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/routingTable Use this attribute to configure the static IP routes.

Default:<empty> Range: table, see below

Refer to MU-8.3 - Configuration de chemins statiques on page 195 for more information on static routes. The routingTable table contains the following elements: Element network Description Use this element to specify the IP address of the des- Default:0.0.0.0 tination network. Range: up to 255.255.255.255 Use this element to specify the network mask of the destination network. Use this element to specify the IP address of the next router on the path to the destination network. Default:255.255.255.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

mask

gateway

Whether you can omit the gateway element or not, is linked to the following conditions: If the interface element specifies the LAN interface, the WAN interface, a DLCI, PVC or tunnel, interface then you can not omit the gateway element. you can omit the gateway element only when using PPP encapsulation. you can omit the gateway element. Default:<empty> Range: 0 24 characters

Use this element to specify the interface through which the destination network can be reached.

Do this by typing the name of the interface as you assigned it using the configuration attribute name (e.g. telindus1423Router/lanInterface/name on page 21). Note that the interface can also be a DLCI, PVC, tunnel, etc. If you do not specify a value for the interface element, then it is deduced by checking all interfaces (including DLCIs, PVCs and tunnels) and finding an interface for which the gateway lies in the subnet defined by the IP address and net mask of that interface. Typing the string discard, discards all packets for the corresponding destination. preference Use this element to set the level of importance of the route. Default:10 Range: 1 200

Routes with a lower preference value are chosen over routes with higher preference value. Note that routes learned through RIP always have a preference of 60. metric Use this element to set with how much the metric parameter of a route has to be incremented. Default:1 Range: 1 15

If two routes exist with the same preference, then the route with the lowest metric value is chosen. Refer to MU-8.5.3 - Explication de la structure rip on page 214 for more information on the metric parameter.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 130 Configuration attributes

telindus1423Router/ip/router/routingProtocol Use this attribute to activate or deactivate the Routing Information Protocol (RIP).

Default:none Range: enumerated, see below

Refer to MU-8.5 - Configuration de RIP on page 209 for more information on RIP. The routingProtocol attribute has the following values: Value none rip Description No routing protocol is used. Only static routes are used. The RIP routing protocol is active. You can set the RIP version per interface. Refer to the elements txVersion and rxVersion in the rip structure (refer to MU-8.5.3 - Explication de la structure rip on page 214).

telindus1423Router/ip/router/alternativeRoutes Use this attribute to determine how the Telindus 1423 SHDSL Router deals with identical routes.

Default:backup Range: enumerated, see below

If more than one route to a (sub-)network is defined in the routing table, and these routes have identical destination addresses, masks, preferences and metrics, a different gateway,

then you can use the alternativeRoutes attribute to determine which route the Telindus 1423 SHDSL Router uses to reach the (sub-)network. The alternativeRoutes attribute has the following values: Value backup roundRobin Description The Telindus 1423 SHDSL Router always uses the same route to reach the (sub)network. Only when this route goes down, it uses the alternative route. The Telindus 1423 SHDSL Router alternately uses the two possible routes to reach the (sub-)network. However, once a certain route is used to reach a specific address, this same route is always used to reach this specific address.

telindus1423Router/ip/router/ripUpdateInterval

Default:00000d 00h 00m 30s Range: 00000d 00h 00m 05s Use this attribute to set the interval the Telindus 1423 SHDSL Router trans00000d 00h 10m 00s mits RIP update messages. Normally, RIP update messages are transmitted every 30 seconds. It is possible to change this interval. However, changing this interval will also change the lifetime of routes learnt through RIP. If a RIP route is received for the last time, it is declared down after 6 times the ripUpdateInterval. After the route is down, it is deleted after 4 times the ripUpdateInterval.

131 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/ripHoldDownTime Use this attribute to set the time during which routing information regarding better paths is suppressed.

Default:00000d 00h 03m 00s Range: 00000d 00h 00m 00s 00000d 00h 10m 00s

It should be at least three times the value of the ripUpdateInterval attribute. A route enters into a hold-down state when an update packet is received that indicates the route is unreachable. The route is marked inaccessible and advertised as unreachable. However, the route is still used for forwarding packets. When hold-down expires, routes advertised by other sources are accepted and the route is no longer inaccessible. What is the RIP hold-down time? Suppose you have a situation as depicted in the figure alongside. Now suppose the following happens: 1. Route X goes down.

Router A sends a RIP update message to router B


declaring route X down. 2. Only a few moments later, route X goes up for a while after which it goes down again. This continues for a certain time. In other words, the route status toggles between up and down.

Every time the status of route X changes, Router A sends a RIP update message to router B. Also
router B propagates these RIP update messages. In other words, the toggling of route X causes that a lot of RIP update messages are sent. The ripHoldDownTime attribute tries to avoid situations as described above. Suppose router B has a ripHoldDownTime attribute. In that case, the situation is as follows: 1. Route X goes down.

Router A sends a RIP update message to router B declaring route X down. Router B starts the RIP
hold-down timer. 2. The status of route X starts toggling between up and down.

Router A sends several RIP update messages concerning route X to router B. Router B holds the
status of route X down, as longs as the RIP hold-down timer has not expired. When the RIP hold-down timer expires and the route is down, then the route status stays down. up, then the route status changes to up.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 132 Configuration attributes

telindus1423Router/ip/router/ripv2SecretTable Use this attribute to define the secrets used for the RIP authentication.

Default:<empty> Range: table, see below

Refer to MU-8.5.4 - Activation de l'authentification RIP sur une interface on page 218 for more information on RIP authentication. The ripv2SecretTable table contains the following elements: Element keyId Description Use this element to set a unique identifier for each secret. Use this element to define the secret. Default:0 Range: 0 255

secret

Default:<empty> This secret is sent with the RIP updates on the speci- Range: 0 16 characters fied interface. It is also used to authenticate incoming RIP updates. Use this element to specify on which interface the secret is used. Default:all Range: 0 24 characters

interface

Entering the string all (default) means the secret is used on all the interfaces. Remarks If authentication is enabled (either text or md5), then only updates using that authentication are processed. All other updates on that interface are discarded. If you use md5 and if for a certain interface multiple secrets are present in the ripv2SecretTable, then the first entry in the ripv2SecretTable is used to transmit RIP updates. Authentication of the received RIP updates is done by looking for the first secret with a matching key. If you use text and if for a certain interface multiple secrets are present in the ripv2SecretTable, then only the first entry in the ripv2SecretTable is used to transmit and receive RIP updates.

133 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/sysSecret Use this attribute for the PPP authentication process. The PPP authenticator uses the sysSecret attribute in order to verify the peer its response. For more information on PPP authentication, refer to MU-7.4.6 - Configuration de PAP on page 171 MU-7.4.8 - Configuration de CHAP on page 175

Default:<empty> Range: 0 64 characters

telindus1423Router/ip/router/pppSecretTable Use this attribute for the PPP authentication process. Enter the authentication name and secret of the remote router in this table. For more information on PPP authentication, refer to MU-7.4.6 - Configuration de PAP on page 171 MU-7.4.8 - Configuration de CHAP on page 175

Default:<empty> Range: table, see below

The pppSecretTable contains the following elements: Element name Description Use this element to set the PPP authentication name of the remote router. Default:<empty> Range: 0 64 characters

If the remote router is a Telindus 1423 SHDSL Router, then the name element should correspond with the remote Telindus 1423 SHDSL Router its sysName or sessionName attribute. Refer to MU-7.4.10 - Quels attributs de nom et de secret utiliser en vue de lauthentification PPP ? on page 178. secret Use this element to set the PPP authentication secret of the remote router. Default:<empty> Range: 0 64 characters

If the remote router is a Telindus 1423 SHDSL Router, then the secret element should correspond with the remote Telindus 1423 SHDSL Router its sysSecret or sessionSecret attribute. Refer to MU-7.4.10 - Quels attributs de nom et de secret utiliser en vue de lauthentification PPP ? on page 178.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 134 Configuration attributes

telindus1423Router/ip/router/helperProtocols

Use this attribute to define the TCP and UDP port numbers for which broadcast forwarding is required. Use this attribute if you specified helper IP addresses using the helpers element in the ip structure of the LAN interface. Refer to MU-5.2.3 - Explication de la structure ip on page 63. If the helperProtocols table is empty (default), then address substitution is applied for the following protocols: Protocol name Time Server IEN-116 Host Name Server Domain Name Server TACACS database service Boot Protocol (BootP) / DHCP server NetBIOS Name Server NetBIOS Datagram Server Important remark Specifying at least one value in the helperProtocols table clears the default helper list automatically. In that case, if you want that for instance NetBios Datagram Server broadcast is forwarded, you have to specify port number 138 again. For BootP / DHCP broadcast packets, the Telindus 1423 SHDSL Router is also a BootP / DHCP Relay Agent. If the protocol is selected, then the Telindus 1423 SHDSL Router will write the IP address of its Ethernet interface in the BootP or DHCP gateway field and increment the hops field in addition to the address substitution. TCP/UDP port number 37 42 53 65 68 137 138

Default:<empty> Range: table, see below

135 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/sendTtlExceeded Use this attribute to enable or disable the sending of ICMP TTL exceeded messages. The sendTtlExceeded attribute has the following values: Value enabled disabled Description

Default:enabled Range: enabled / disabled

The Telindus 1423 SHDSL Router sends ICMP TTL exceeded" messages. The Telindus 1423 SHDSL Router does not send ICMP TTL exceeded messages. This also implies that the router is not recognised by the UNIX or Windows traceroute feature.

What is Time To Live (TTL)? Each IP packet has a Time To Live (TTL) value in its header. Each device that sends an IP packet sets this parameter at some fixed or predefined value. When the packet enters a router, the router decrements the TTL value. If a router finds a value 0 after decrementing the TTL, it discards the packet. This because a value 0 means the packet has passed too many routers. Probably the packet is looping between a number of routers. This mechanism avoids that routers with configuration errors bring down a complete network. The ICMP message TTL exceeded If a router discards a packet because its TTL is exceeded, it normally sends an ICMP TTL exceeded message to the originator of the packet. With the sendTtlExceeded attribute you can define whether you want the Telindus 1423 SHDSL Router to send such ICMP messages or not. It has been chosen to allow TTL exceeded messages in case of PPP. However, this has the effect that TTL exceeded is also transmitted on some Ethernet broadcasts.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 136 Configuration attributes

telindus1423Router/ip/router/sendPortUnreachable Use this attribute to enable or disable the sending of ICMP Destination unreachable: Port unreachable messages. The sendPortUnreachable attribute has the following values: Value enabled disabled Description

Default:enabled Range: enabled / disabled

The Telindus 1423 SHDSL Router sends ICMP port unreachable" messages. The Telindus 1423 SHDSL Router does not send ICMP port unreachable messages. This also implies that the router is not recognised by the UNIX or Windows traceroute feature.

The ICMP message port unreachable The Telindus 1423 SHDSL Router supports a number of higher-layer IP protocols (Telnet, SNMP and TMA) for management purposes. If an IP packet is sent to the Telindus 1423 SHDSL Router for a higherlayer protocol that it does not support, it normally sends an ICMP Destination unreachable: Port unreachable message to the originator of the packet. With the sendPortUnreachable attribute you can define whether you want the Telindus 1423 SHDSL Router to send such an ICMP message or not. telindus1423Router/ip/router/sendAdminUnreachable Default:enabled Range: enabled / disabled

Use this attribute to enable or disable the sending of ICMP "Destination unreachable: Communication with destination is administratively prohibited messages. The sendAdminUnreachable attribute has the following values: Value enabled disabled Description

The Telindus 1423 SHDSL Router sends ICMP communication prohibited messages. The Telindus 1423 SHDSL Router does not send ICMP communication prohibited messages.

The ICMP message communication prohibited If the Telindus 1423 SHDSL Router receives an IP packet that is destined for a prohibited destination (because this destination is defined in an access list), then it sends an ICMP "Destination unreachable: Communication with destination is administratively prohibited message to the originator of the packet. With the sendAdminUnreachable attribute you can define whether you want the Telindus 1423 SHDSL Router to send such an ICMP message or not.

137 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/dhcpStatic

This attribute activates the DHCP server on the Telindus 1423 SHDSL Router. Use this attribute to assign a fixed IP address to a client its MAC address and this for an infinite time. The dhcpStatic table contains the following elements: Element ipAddress Description Use this element to assign an IP address to a certain client. This client is identified with its MAC address. Default:0.0.0.0 Range: up to 255.255.255.255

Default:<empty> Range: table, see below

If no IP address is specified, then there is no connection to the client. In that case, all other attributes in the table are ignored for this client. mask Use this element to set the client its subnet mask. Default:255.255.255.0 Range: up to 255.255.255.255

gateway

Use this element to set the default gateway for the cli- Default:0.0.0.0 ent its subnet. Range: up to 255.255.255.255 If the interface element is left empty (default), then it is the gateway element that determines on which interface the Telindus 1423 SHDSL Router will act as DHCP server. Namely the interface through which the IP address as entered in the gateway element can be reached. If no gateway is specified, then the Telindus 1423 SHDSL Router gives its own address. This address lies in the subnet of the interface through which the Telindus 1423 SHDSL Router sends out the DHCP reply.

interface

Use this element to specify the name of the interface on which you want the Telindus 1423 SHDSL Router to act as DHCP server.

Default:<empty> Range: 0 36 characters

dnsSetting

Use this element to determine which DNS servers are Default:learned used for handling the DNS requests. Range: enumerated, see below The dnsSetting element has the following values: configured. The Telindus 1423 SHDSL Router sends all DNS requests to the DNS servers that have been configured in the attribute telindus1423Router/ip/router/ dns on page 144. learned. If DNS servers have been configured in the attribute telindus1423Router/ip/ router/dns, then all DNS requests are sent to these servers. However, if no DNS servers have been configured, then the Telindus 1423 SHDSL Router tries to learn the DNS servers from the network. During the time the Telindus 1423 SHDSL Router has not learned the DNS servers yet, DNS relay is active allowing DNS between the clients that already have been given an IP address. relay. The Telindus 1423 SHDSL Router acts as a DNS server for its clients, caching all DNS requests. It answers to DNS requests if possible. However, if an entry is not present in its cache, then it relays this request to the DNS servers that have been configured in the attribute telindus1423Router/ip/router/dns. Default:0.0.0.0 Range: up to 255.255.255.255

nameServer

Use this element to set the IP address of the name server that is available to the client.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 138 Configuration attributes

Element nameServer2

Description Use this element to set the IP address of the second name server that is available to the client. Use this element to set the IP address of the TFTP server that is available to the client. It is the next server to use in boottrap. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

tftpServer

macAddress

Use this element to enter the client its MAC address. Default:0.0.0.0.0.0 If no MAC address is specified, then there is no con- Range: up to ff.ff.ff.ff.ff.ff nection to the client. Therefore, all other attributes in the table are ignored for this client.

bootFile

Use this element to set the location of the boot file.

Default:<empty> Range: 0 128 characters Default:<empty> Range: 0 20 characters

hostName

Use this element to set the name of the client.

domainName

Use this element to set the name the client should use Default:<empty> when resolving hostnames via the Domain Name Range: 0 20 characters System (DNS). Use this element to set the IP address of the NetBios server. Use this element to set the IP address of the second NetBios server. Use this element to configure the client as described in RFC 1001 / RFC 1002. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255 Default:<opt> Range: enumerated, see below

netbiosNameServer

netbiosNameServer 2 netbiosNodeType

The netbiosNodeType element has the following values: no-node, B-node, P-node, Mnode, H-node.

139 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/dhcpDynamic

This attribute activates the DHCP server on the Telindus 1423 SHDSL Router. Use this attribute to specify the IP address range from which an IP address may be dynamically assigned to a client its MAC address. The dhcpDynamic table contains the following elements: Element ipStartAddress Description Use this element to define the start address of the IP Default:192.168.1.100 address range. It is from this range that an IP address Range: up to 255.255.255.255 will be dynamically assigned to a client. If no IP start address is specified, all other attributes on the same line in the table are ignored. ipEndAddress Use this element to define the end address of the IP Default:192.168.1.254 address range. It is from this range that an IP address Range: up to 255.255.255.255 will be dynamically assigned to a client. The IP address range will only contain the ipStartAddress in case no ipEndAddress is specified, the specified ipEndAddress is the same as the ipStartAddress, the specified ipEndAddress is smaller than the ipStartAddress, the specified ipEndAddress belongs to another subnet than the ipStartAddress. Do not include the Telindus 1423 SHDSL Router its own IP address in this range! mask Use this element to set the client its subnet mask for the specified IP address range. Default:255.255.255.0 Range: up to 255.255.255.255

Default:<empty> Range: table, see below

gateway

Use this element to set the default gateway for the cli- Default:0.0.0.0 ent its subnet. Range: up to 255.255.255.255 If the interface element is left empty (default), then it is the gateway element that determines on which interface the Telindus 1423 SHDSL Router will act as DHCP server. Namely the interface through which the IP address as entered in the gateway element can be reached. If no gateway is specified, then the Telindus 1423 SHDSL Router gives its own address. This address lies in the subnet of the interface through which the Telindus 1423 SHDSL Router sends out the DHCP reply.

interface

Use this element to specify the name of the interface on which you want the Telindus 1423 SHDSL Router to act as DHCP server.

Default:<empty> Range: 0 36 characters

Telindus 1423 SHDSL Router User manual

Chapter MR-1 140 Configuration attributes

Element dnsSetting

Description Use this element to determine which DNS servers are Default:learned used for handling the DNS requests. Range: enumerated, see below The dnsSetting element has the following values: configured. The Telindus 1423 SHDSL Router sends all DNS requests to the DNS servers that have been configured in the attribute telindus1423Router/ip/router/ dns on page 144. learned. If DNS servers have been configured in the attribute telindus1423Router/ip/ router/dns, then all DNS requests are sent to these servers. However, if no DNS servers have been configured, then the Telindus 1423 SHDSL Router tries to learn the DNS servers from the network. During the time the Telindus 1423 SHDSL Router has not learned the DNS servers yet, DNS relay is active allowing DNS between the clients that already have been given an IP address. relay. The Telindus 1423 SHDSL Router acts as a DNS server for its clients, caching all DNS requests. It answers to DNS requests if possible. However, if an entry is not present in its cache, then it relays this request to the DNS servers that have been configured in the attribute telindus1423Router/ip/router/dns. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

nameServer

Use this element to set the IP address of the name server that is available to the client. Use this element to set the IP address of the second name server that is available to the client. Use this element to set the IP address of the TFTP server that is available to the client. It is the next server to use in boottrap.

nameServer2

tftpServer

leaseTime

Use this element to set the maximum time a client can Default:00000d 00h 00m 00s lease an IP address from the specified IP address Range: 00000d 00h 00m 00s 24855d 03h 14m 07s range. If 00000d 00h 00m 00s (default) is specified, then the lease time is infinite.

holdTime

Use this element to set the time between two consec- Default:00000d 00h 00m 00s utive leases of an IP address. I.e. if a client has just let Range: 00000d 00h 00m 00s 24855d 03h 14m 07s go of its dynamically assigned IP address, then this same IP address can not be reassigned before the holdTime has elapsed. Use this element to set the location of the boot file. Default:<empty> Range: 0 128 characters Default:<empty> Range: 0 20 characters

bootFile

hostName

Use this element to set the name of the client.

Because the DHCP server can not give the same name to all clients of this IP address range, a number is added to the hostname from the second IP address onwards. The number goes up to 99. Example Suppose the hostname is OneAccess. In that case the name for the start IP address is OneAccess, for the second IP address OneAccess1, and so on.

141 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element domainName

Description Use this element to set the name the client should use Default:<empty> when resolving hostnames via the Domain Name Range: 0 20 characters System (DNS). Use this element to set the IP address of the NetBios server. Use this element to set the IP address of the second NetBios server. Use this element to configure the client as described in RFC 1001 / RFC 1002. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255 Default:<opt> Range: enumerated, see below

netbiosNameServer

netbiosNameServer 2 netbiosNodeType

The netbiosNodeType element has the following values: no-node, B-node, P-node, Mnode, H-node. telindus1423Router/ip/router/dhcpCheckAddress Default:disabled Range: enumerated, see below

Use this attribute to allow that the IP address assigned by the DHCP server is probed with an ARP request (Ethernet) or ICMP Echo Request (IP). This checks and prevents the double use of IP addresses. The dhcpCheckAddress attribute has the following values: Value disabled enabled Description No probing is done when an IP address is leased by a client. Probing is done when an IP address is leased by a client. In case of Ethernet, the probing is done with an ARP request. IP, the probing is done with an ICMP Echo Request (ping).

If a reply is received, it means the IP address is already in use. Therefore, another IP address is assigned. arpOnly Probing is done when an IP address is leased by a client. However, the probing is only done by means of an ARP request (Ethernet).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 142 Configuration attributes

telindus1423Router/ip/router/radius Use this attribute to configure the Telindus 1423 SHDSL Router for RADIUS. Also see MU-10.7 - Configuration RADIUS on page 375.

Default:Range: structure, see below

To enable the use of RADIUS in PPP, PAP or CHAP should be enabled on the Telindus 1423 SHDSL Router. The local configuration of the username and password is ignored if a table of RADIUS servers exist. Furthermore, remote IP address and remote netmask are ignored if a RADIUS server imposes these attributes. The radius structure contains the following elements: Element authServers Description Use this element to select an authentication server. Default:<empty> You can create a list of several authentication servers. Range: table, see below The authServers table contains the following elements: address. Use this element to specify the IP address of the authentication server. secret. Use this element to set the shared secret to authenticate the transaction with the authentication server. Default:0.0.0.0 Range: up to 255.255.255.255 Default:<empty> Range: 0 64 characters

timeOut. Use this element to specify the authentica- Default:00000d 00h 00m 05s tion time-out. Range: 00000d 00h 00m 01s 00000d 00h 00m 10s Default:Range: structure, see below

acctServer

Use this element to select an accounting server. You can only select one accounting server.

The acctServer structure contains the following elements: address. Use this element to specify the IP address of the accounting server. secret. Use this element to set the shared secret to authenticate the transaction with the accounting server. timeOut. Use this element to specify the accounting time-out. Default:0.0.0.0 Range: up to 255.255.255.255 Default:<empty> Range: 0 64 characters Default:00000d 00h 00m 05s Range: 00000d 00h 00m 01s 00000d 00h 00m 10s Default:1 Range: 0 10 Default:00000d 00h 00m 00s Range: 00000d 00h 00m 00s 00000d 00h 01m 00s

retries

Use this element to specify the number of retries before selecting the next authentication server in the authServers table. Use this element to specify the time at which an update of the accounting data should be send to the server.

acctUpdate

Set this element to 0 (default) if no update is required. Note that this is not always supported by the accounting server.

143 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element login

Description Use this element to set the authentication of access to Default:disabled the Telindus 1423 SHDSL Router using Telnet, FTP, Range: enumerated, see below TFTP or TMA. No accounting data is sent to the server. The login element has the following values: disabled. No RADIUS login authentication is done. enabled. Login authentication is always done using a RADIUS server. The username and password have to be entered as follows: "username:password". If the : is omitted, then the string is considered to be a password. Multiple passwords can be added using the same username. Access rights are sent using the RADIUS attribute CLASS (25) encoded as a string carrying a binary value. The bit definitions are: readAccess = 00000001B writeAccess = 00000010B securityAccess = 00000100B countryAccess = 00001000B (only used on aster4/5) fileAccess = 00010000B

Caution should be taken since all access to the device has to be authenticated by a RADIUS server. fallback. Login authentication is done using a RADIUS server. However, if the server is not available, then authentication is done using the local security table of the device. Default:enabled Range: enumerated, see below

ppp

Use this element to set the authentication of a PPP connection that uses PAP or CHAP. The ppp element has the following values:

disabled. PPP authentication is done using the local sysName/sysSecret or sessionName/sessionSecret of the device. enabled. PPP authentication is always done using a RADIUS server.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 144 Configuration attributes

telindus1423Router/ip/router/dns Use this attribute to enter the DNS server addresses. Also see What is DNS? on page 509. The dns structure contains the following elements: Element primaryDns Description Use this element to specify the IP address of the primary DNS server.

Default:Range: structure, see below

Default:0.0.0.0 Range: up to 255.255.255.255

secondaryDns

Use this element to specify the IP address of the sec- Default:0.0.0.0 ondary DNS server. Range: up to 255.255.255.255 Use this element to enter the domain name to which the Telindus 1423 SHDSL Router belongs. Default:<empty> Range: 0 32 characters

domainName

What is DNS? The Domain Name Service (DNS) is an Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they are easier to remember. The Internet however, is really based on IP addresses. Therefore, every time you use a domain name, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.mywebsite.com might translate to 198.105.232.4. The DNS system is, in fact, its own network. If one DNS server doesn't know how to translate a particular domain name, it asks another one, and so on, until the correct IP address is returned. What is DNS proxy? The Telindus 1423 SHDSL Router is a DNS proxy. This means that if the Telindus 1423 SHDSL Router has not received a DNS address (as DHCP client), then it gives its own address in DHCP requests (as DHCP server). The Telindus 1423 SHDSL Router relays DNS requests it receives to configured or learned DNS servers.

145 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/addrPools This attribute is only present on the Telindus 1423 SHDSL Router ISDN version.

Default:<empty> Range: table, see below

Use this attribute to create a list or an interval of IP addresses from which the Telindus 1423 SHDSL Router can pick IP addresses and use them on a PPP link6. The addrPool table contains the following elements: Element name Description Use this element to assign a name to the IP pool. Default:<empty> Range: 0 24 characters Default:<empty> Range: choice, see below

pool

Use this element to select between an IP pool type and to add IP addresses to the pool. You can select between the following IP pool types:

an IP list pool. Refer to telindus1423Router/ip/router/addrPools/pool/list on page 146. an IP interval pool. Refer to telindus1423Router/ip/router/addrPool/pool/interval on page 149.

6. The ip structure in the forwardingMode profile applies on the PPP link(s) that you can set up on the ISDN interface(s).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 146 Configuration attributes

telindus1423Router/ip/router/addrPools/pool/list

Use this element to create one or more lists of IP addresses from which the Telindus 1423 SHDSL Router can pick IP addresses and use them as local and remote IP address for a PPP link. Use the addrPool element in the ip structure to determine from which IP list pool the Telindus 1423 SHDSL Router has to pick IP addresses. Refer to MU-5.2.3 - Explication de la structure ip on page 63 for more information. The list table contains the following elements: Element name Description Use this element to assign a name to the IP list pool. Default:<empty> Range: 0 24 characters Use this element to create a list of IP addresses from Default:<empty> which the Telindus 1423 SHDSL Router can pick one. Range: table, see below The pool table contains the following elements: local. Use this element to set the local IP address. remote. Use this element to set the remote IP address. netmask. Use this element to set the subnet mask. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

Default:<empty> Range: table, see below

pool

Important remark Note again that an IP list pool is for both local and remote IP addresses.

147 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Example Suppose you want to create two IP list pools: myList1 and myList2. you want that the Telindus 1423 SHDSL Router picks local and remote IP addresses from myList2.

Configure this as follows: Step 1 Action Create two entries in the router/addrPools table and specify a name for each entry.

In the pool element select the value list.

Expand the pool element by clicking on the black triangle of the pool element.

Double-click on the <Table> string situated in the pool/list column.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 148 Configuration attributes

Step 5

Action Create entries in the pool/list tables and enter a local IP address, remote IP address and a netmask for each entry.

In the addrPool element of the ip structure, select the value list and enter the name of the IP list pool from which you want to pick IP addresses. In our example, this is myList2.

149 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/addrPool/pool/interval

Use this element to create one or more ranges of IP addresses from which the Telindus 1423 SHDSL Router can pick IP addresses and use them as remote IP address for a PPP link. Use the addrPool element in the ip structure to determine from which IP interval pool the Telindus 1423 SHDSL Router has to pick IP addresses. Refer to MU-5.2.3 - Explication de la structure ip on page 63 for more information. The interval structure contains the following elements: Element name Description Use this element to assign a name to the IP interval pool. Default:<empty> Range: 0 24 characters

Default:<empty> Range: structure, see below

from to

Use these elements to create a range of IP addresses Default:0.0.0.0 from which the Telindus 1423 SHDSL Router can pick Range: up to 255.255.255.255 one.

Important remark Note again that an IP interval pool is for remote IP addresses only.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 150 Configuration attributes

Example Suppose you want to create two IP interval pools: myInterval1 and myInterval2. you want that the Telindus 1423 SHDSL Router picks a remote IP addresses from myInterval2.

Configure this as follows: Step 1 Action Create two entries in the router/addrPools table and specify a name for each entry.

In the pool element select the value interval.

Expand the pool element by clicking on the black triangle of the pool element.

Double-click on the <Struct> string situated in the pool/interval column.

151 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Step 5

Action Configure the pool/interval structures. I.e. create an IP address range using the elements from and to.

In the addrPool element of the ip structure, select the value interval and enter the name of the IP interval pool from which you want to pick IP addresses. In our example, this is myInterval2.

telindus1423Router/ip/router/<alarmConfigurationAttributes> For more information on the alarm configuration attributes alarmMask and alarmLevel and on the alarms in general, refer to MR4.2 - Introducing the alarm attributes on page 488. the alarms of the router object, refer to MR-4.13 - Router alarms on page 504.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 152 Configuration attributes

MR-1.12.2 NAT configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/defaultNat/patAddress on page 153 telindus1423Router/ip/router/defaultNat/portTranslations on page 153 telindus1423Router/ip/router/defaultNat/servicesAvailable on page 154 telindus1423Router/ip/router/defaultNat/addresses on page 154 telindus1423Router/ip/router/defaultNat/gateway on page 155 telindus1423Router/ip/router/defaultNat/tcpSocketTimeOut on page 155 telindus1423Router/ip/router/defaultNat/udpSocketTimeOut on page 155 telindus1423Router/ip/router/defaultNat/tcpSockets on page 155 telindus1423Router/ip/router/defaultNat/udpSockets on page 155 telindus1423Router/ip/router/defaultNat/dmzHost on page 155

153 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/defaultNat/patAddress

Use this attribute to enter the official IP address that has to be used for the Port Address Translation. Entering an address different from the default value 0.0.0.0 automatically enables PAT. Refer to MU-8.7 - Configuration de translation d'adresses on page 229 for more information on PAT. telindus1423Router/ip/router/defaultNat/portTranslations Use this attribute to define specific port number ranges that should not be translated. Default:<empty> Range: table, see below

Default:0.0.0.0 Range: up to 255.255.255.255

Some TCP or UDP applications do not allow port translations: these applications require a dedicated source port number. In the portTranslations table you can define UDP and TCP port ranges that should not be translated. If a packet with a source port number in such a range is received, PAT replaces only the source IP address provided it is the first device using this port number. When other devices using the same application (hence the same port number) try to send traffic to the same Internet destination address, PAT discards this traffic. It is also possible to define port ranges that PAT should always discard. The port translation range PAT uses goes from 60928 up to 65535. The portTranslations table contains the following elements: Element protocol Description Use this element to select the protocol: tcp or udp. Default:tcp Range: tcp / udp Default:0 Range: 0 65535 Default:<opt> Range: 0 65535

startPort

Use this element to set the lowest value of the TCP or UDP port range. Use this element to set the highest value of the TCP or UDP port range.

endPort

If no endPort value is defined (<opt>), then the port range is limited to the startPort value only. action Use this element to set the action in case a packet is received with a source port number that falls within the specified port range. The action element has the following values: noTranslation. The port numbers that fall within the specified port range are not translated. deny. Packets with port numbers that fall within the specified port range are discarded. Default:noTranslation Range: enumerated, see below

Telindus 1423 SHDSL Router User manual

Chapter MR-1 154 Configuration attributes

telindus1423Router/ip/router/defaultNat/servicesAvailable

Use this attribute to define specific port number ranges for incoming Internet traffic that should not be translated. Instead it is sent to the corresponding private IP address.

Default:<empty> Range: table, see below

The servicesAvailable table makes it possible to have a server on the local network that can be accessed from the Internet, although it has no official IP address. The servicesAvailable table contains the following elements: Element protocol Description Use this element to select the protocol: tcp or udp. Default:tcp Range: tcp / udp Default:0 Range: 0 65535 Default:<opt> Range: 0 65535

startPort

Use this element to set the lowest value of the TCP or UDP port range. Use this element to set the highest value of the TCP or UDP port range.

endPort

If no endPort value is defined (<opt>), then the port range is limited to the startPort value only. serverAddress Use this element to set the private server address. Default:0.0.0.0 Range: up to 255.255.255.255

If a packet is received with a source port number that falls within the specified port range, then it is sent to the private server address. telindus1423Router/ip/router/defaultNat/addresses

Use this attribute to enter all the official IP addresses that have to be used for Network Address Translation. Entering an address in the addresses table automatically enables the general NAT process. Now you can activate or deactivate NAT per IP interface. Note that by default NAT is deactivated on all IP interfaces. Refer to MU-8.7 - Configuration de translation d'adresses on page 229 for more information on NAT. The addresses table contains the following elements: Element officialAddress Description Use this element to set the official IP address. These addresses are used in the reverse order as they appear in the list. privateAddress Use this element to set the private IP address, i.e. to permanently assign an official IP address to a private address. Default:0.0.0.0 Range: up to 255.255.255.255

Default:<empty> Range: table, see below

Default:<opt> Range: up to 255.255.255.255

If you do not specify a private IP address, then NAT is applied dynamically. I.e. the official IP address is used for any private source IP address.

155 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/defaultNat/gateway

Use this attribute to define the gateway addresses of routes on which NAT or PAT should be applied. If you do not configure the gateway attribute, then NAT or PAT is applied on all routes through this interface. telindus1423Router/ip/router/defaultNat/tcpSocketTimeOut Use this attribute to define the time-out for TCP sessions that are not closed by the application. Default:00001d 00h 00m 00s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s

Default:0.0.0.0 Range: up to 255.255.255.255

Such sessions, whether PAT or NAT is in use, remain active for one day by default. Only decrease this attribute if some TCP applications do not close properly, filling up the available translation sessions. telindus1423Router/ip/router/defaultNat/udpSocketTimeOut Default:00000d 00h 03m 00s Range: 00000d 00h 00m 00s Use this attribute to define the time-out for UDP sessions that are not closed 24855d 03h 14m 07s by the application. Such sessions, whether PAT or NAT is in use, remain active for 3 minutes by default. Only decrease this attribute if some UDP applications do not close properly, filling up the available translation sessions. telindus1423Router/ip/router/defaultNat/tcpSockets Use this attribute to set the maximum number of TCP session that may be used simultaneously for address translation. telindus1423Router/ip/router/defaultNat/udpSockets Use this attribute to set the maximum number of UDP session that may be used simultaneously for address translation. telindus1423Router/ip/router/defaultNat/dmzHost Use this attribute to set the address of the DMZ (demilitarised zone) host. What is a DMZ? In computer networks, a DMZ (demilitarised zone) is a computer host or small network inserted as a "neutral zone" between a company's private network and the outside public network. It prevents outside users from getting direct access to a server that has company data. A DMZ is an optional and more secure approach to a firewall and effectively acts as a proxy server as well. In a typical DMZ configuration for a small company, a separate computer receives requests from users within the private network for access to Web sites or other companies accessible on the public network. The DMZ host then initiates sessions for these requests on the public network. However, the DMZ host is not able to initiate a session back into the private network. It can only forward packets that have already been requested. Users of the public network outside the company can access only the DMZ host. The DMZ may typically also have the company's Web pages so these could be served to the outside world. However, the DMZ provides access to no other company data. In the event that an outside user penetrated the DMZ host's security, the Web pages might be corrupted but no other company information would be exposed. Default:1024 Range: 500 4500

Default:1024 Range: 500 4500

Default:0.0.0.0 Range: up to 255.255.255.255

Telindus 1423 SHDSL Router User manual

Chapter MR-1 156 Configuration attributes

MR-1.12.3 L2TP tunnel configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/tunnels/l2tpTunnels on page 157 telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels on page 162

157 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/tunnels/l2tpTunnels

Use this attribute to configure the Layer 2 Tunnelling Protocol tunnels you want to set up. Add a row to the l2tpTunnels table for each L2TP tunnel you want to set up. The l2tpTunnels table contains the following elements: Element name Description Use this element to assign an administrative name to the tunnel.

Default:<empty> Range: table, see below

Default:<empty> Range: 0 24 characters

adminStatus

Use this element to activate (up) or deactivate the tun- Default:down nel (down). Range: up / down Use this element to determine whether for the corre- Default:routing sponding tunnel, IP packets are treated by the routing Range: enumerated, see below process, the bridging process or both. The mode element has the following values: bridging. All packets received on the tunnel are bridged. routing. All packets received on the tunnel are routed. routingAndBridging. The SNAP header is checked to determine whether the packets have to be bridged or routed. Default:Range: structure, see below

mode

ip

Use this element to configure the IP related parameters of the tunnel. Refer to

MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:Range: structure, see below

bridging

Use this element to configure the bridging related parameters of the tunnel.

When bridging is enabled on a tunnel interface, the tunnel acts exactly as a bridge port for a physical PPP connection. Refer to l2tp MU-9 - Configuration du pontage on page 277 for more information on bridging. MU-9.2.6 - Explication de la structure bridging on page 296 for a detailed description of the bridging structure. Default:Range: structure, see below

Use this element to configure the L2TP related parameters of the tunnel.

Refer to telindus1423Router/ip/router/tunnels/l2tpTunnels/l2tp on page 158 for a detailed description of the l2tp structure. backup Use this element to configure the back-up related parameters of the tunnel. Default:Range: structure, see below

Refer to telindus1423Router/ip/router/tunnels/l2tpTunnels/backup on page 161 for a detailed description of the backup structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 158 Configuration attributes

telindus1423Router/ip/router/tunnels/l2tpTunnels/l2tp Use the l2tp structure in the l2tpTunnels table to configure the L2TP related parameters of the tunnel. The l2tp structure contains the following elements: Element localIpAddress Description Use this element to set the official IP address that serves as start point of the L2TP connection. Use this element to set the official IP address that serves as end point of the L2TP connection.

Default:Range: structure, see below

Default:<opt> Range: up to 255.255.255.255 Default:<opt> Range: up to 255.255.255.255

remoteIpAddress

Both localIpAddress and remoteIpAddress together with the well-known port number for L2TP (i.e. 1701), make up the socket used for the L2TP session. At the moment, only one L2TP session can exist between one localIpAddress and remoteIpAddress combination. remoteDnsName Instead of specifying a remoteIpAddress, you can specify Default:<empty> the DNS name of the end point of the L2TP connec- Range: 0 64 characters tion. In that case, the DNS name will be resolved to an IP address. Note that in this case, DNS has to be configured on the Telindus 1423 SHDSL Router. Refer to telindus1423Router/ip/router/dns on page 144. pppAuthentication Use this element to enable or disable authentication on the PPP link in the tunnel. Default:disabled Range: enumerated, see below

Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/authentication on page 60 for more information. pppSesionName Use this element to set the PPP authentication name of the PPP link in the tunnel. Use this element to set the PPP authentication secret of the PPP link in the tunnel. Use this element to enable or disable link monitoring on the PPP link in the tunnel and to fine-tune it. Default:<empty> Range: 0 64 characters Default:<empty> Range: 0 64 characters Default:Range: structure, see below

pppSesionSecret

linkMonitoring

Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/linkMonitoring on page 59 for more information.

159 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element type

Description Use this element to specify the tunnel type. The type element has the following values: Default:outgoingDial Range: enumerated, see below

outgoingDial. The outgoing tunnel is not continuously open. It is opened whenever data has to be sent through the tunnel, and closed when no data is detected for a certain time. outgoingLeasedLine. The outgoing tunnel is opened as soon as the Telindus 1423 SHDSL Router is up, and it stays open. incoming. The tunnel is an incoming tunnel. Important remark

Make sure that if the type element is set to outgoingDial or outgoingLeasedLine at one end of the tunnel, that at the other end of the tunnel the type element is set to incoming. dataChannelSequenceNumbering Use this element to enable (on) or disable (off) Default:off sequence numbering on the data messages. These Range: on / off sequence numbers are used to detect lost packets and/or restore the original sequence of packets that may have been reordered during transport. On control messages, sequence numbering is always enabled. It is recommended that for connections where reordering or packet loss may occur, dataChannelSequenceNumbering is enabled. keepAliveTimeOut Use this element to set the amount of time (in seconds) the tunnel waits before it sends a keep alive message in case it receives no data. Default:30 Range: 1 3600

If the tunnel does not receive incoming data during a certain time, it sends a keep alive message to the other side and waits for an acknowledgement. noTrafficTimeOut This element applies on dial tunnels only (i.e. for which the type element is set to outgoingDial). Default:120 Range: 1 3600

Use this element to set the amount of time (in seconds) the tunnel waits before it closes in case it receives no data. l2tpMode Use this element to set the L2TP function of the Telindus 1423 SHDSL Router. The l2tpMode element has the following values: lac. The Telindus 1423 SHDSL Router acts as an L2TP Access Concentrator. lns. The Telindus 1423 SHDSL Router acts as an L2TP Network Server. auto. If both local and remote Telindus 1423 SHDSL Router are set to auto, they mutually decide who will be the LAC and who the LNS. Important remark Only select auto if you use a OneAccess router at both sides of the tunnel. In conjunction with routers from other vendors (e.g. Cisco), specifically select an L2TP mode (lac or lns).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 160 Configuration attributes

Element tunnelAuthentication

Description Use this element to enable (on) or disable (off) tunnel authentication. Default:off Range: on / off

L2TP incorporates a simple, optional, CHAP-like tunnel authentication system during control connection establishment. If the LAC or LNS wishes to authenticate the identity of the peer it is contacting or being contacted by, it sends a challenge packet. If the expected response and response received from a peer does not match, the tunnel is not opened. To participate in tunnel authentication, a single shared secret has to exist between the LAC and LNS. tunnelSecret Use this element to set the tunnel secret. This secret is used in the tunnel authentication in order to verify the peer its response. Default:<empty> Range: 0 64 characters

copyTos

Use this element to enable (on) or disable (off) the cop- Default:on ying of the TOS byte value from the payload its IP Range: on / off header to the L2TP header. Use this element to set the number of times a control Default:4 message has to be retransmitted in case no acknowl- Range: 0 10 edgement follows, before the tunnel is closed. Use this element to set the window size for transmitting control messages. Use this element to set the window size for receiving control messages. Use this element to enable (on) or disable (off) the UDP checksum. Default:4 Range: 1 30 Default:4 Range: 1 30 Default:off Range: on / off

maxNrOfRetransmissions transmitWindowSize

receiveWindowSize

udpChecksum

It is recommended to enable the UDP checksum on lower quality links. calledNr Use this element to set the called number. This ele- Default:<empty> ment is present for compatibility with other vendors Range: 0 48 characters that support this feature. If you set up a tunnel between two OneAccess devices, then you can leave this element empty. The called number is an indication to the receiver of a call as to what (telephone) number the caller used to reach it. It encodes the (telephone) number to be called for an outgoing call request (OCRQ) and the called number for an incoming call request (ICRQ). The called number is an ASCII string. Contact between the administrator of the LAC and the LNS may be necessary to coordinate interpretation of the value needed in this element. speed Use this element to make an indication of the expected speed for the tunnel in case of MLPPP. Default:64000 Range: 0 2147483647

In case you use MLPPP, the Bandwidth Allocation Protocol adds or deletes PPP links from the bundle depending on the actual amount of traffic. However, somehow you have to be able to specify the normally required speed. Do this using the speed element.

161 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/tunnels/l2tpTunnels/backup Use the backup structure in the l2tpTunnels table to configure the back-up related parameters of the tunnel.

Default:Range: structure, see below

In a main/back-up tunnel mechanism, configuring the backup element allows you to quickly set up a backup tunnel as soon as the main tunnel goes down, instead of waiting on several time-outs before the backup tunnel is set up. Refer to MU-10.5.4 - Configuration dun tunnel principal et de secours on page 351. The backup structure contains the following elements: Element interface Description Use this element to enter the name of the tunnel that will act as back-up in a main/back-up mechanism. Default:<empty> Range: 0 24 characters

Alternatively, if the string "discard" is entered as a backup interface, then the backup functionality is executed for the main tunnel even if no backup tunnel is present. So the main tunnel is reset and the route to the main tunnel is closed (so the route status goes down instead of spoofing). In that case, if an alternative route is present, then this route will be taken. timeOut Use this element to set the set-up time-out in seconds. If the tunnel is not set up within the specified time-out, then the back-up tunnel is set up. This element is only relevant in case the type element of the tunnel is set to outgoingLeasedLine. Default:30 Range: 1 3600 Default:no Range: yes / no

autoRetry

Use this element to determine, if a leased line tunnel does not come up, whether it has to keep trying to come up (yes) or quit after one try (no).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 162 Configuration attributes

telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels

Use this attribute to configure the IP secured Layer 2 Tunnelling Protocol tunnels you want to set up. Add a row to the IpsecL2tpTunnels table for each IPSEC L2TP tunnel you want to set up. The elements of the ipsecL2tpTunnel are basically the same as the elements of the l2tpTunnel (refer to telindus1423Router/ip/router/tunnels/l2tpTunnels on page 157). The only difference is the presence of the ipsec element within the l2tp structure. Refer to telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels/l2tp/ipsec on page 162 for more information on the ipsec element. telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels/l2tp/ipsec Use this element to apply a security association on the IPSEC L2TP tunnel. Default:Range: choice, see below

Default:<empty> Range: table, see below

Do this by typing the index name of the security association you want to use. You can create the security association itself by adding a manualSA or ikeSA object and by configuring the attributes in this object. Refer to MU-10.6 - Configuration d'une scurit IP on page 354 for more information on IP security. The ipsec element offers you the following choice: Choice fdxManualSA Description Select this value if you want to apply a manual security association on both the inbound and outbound traffic of the IPSEC L2TP tunnel. Default:<empty> Range: 0 24 characters

If you select this value, then a field appears behind the value. Type the manualSA object its index name in this field. Example If you created a manualSA object with index name my_SA (i.e. manualSA[my_SA]) and you want to apply this security association on an IPSEC L2TP tunnel, then enter the index name as value of the ipsec element.

163 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Choice hdxManualSA

Description Select this value if you want to apply a manual security association on the inbound traffic and another manual security association on the outbound traffic of the IPSEC L2TP tunnel. Default:Range: structure, see below

If you select this value, then a structure appears behind the value. This structure contains the following elements: inbound. To apply a security association on the inbound traffic, type the manualSA object its index name in this field. outbound. To apply a security association on the outbound traffic, type the manualSA object its index name in this field. Default:<empty> Range: 0 24 characters Default:<empty> Range: 0 24 characters

Example If you created a manualSA object with index name my_SA_in (i.e. manualSA[my_SA_in]) and one with index name my_SA_out (i.e. manualSA[my_SA_out]) and you want to apply the first on the inbound and the latter on the outbound traffic, then enter the index names of the manualSA objects as follows:

ikePresharedSA

Select this value if you want to apply an IKE preshared key security association on both the inbound and outbound traffic of the IPSEC L2TP tunnel.

Default:Range: structure, see below

If you select this value, then a structure appears behind the value. Refer to telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels/l2tp/ipsec/ikePresharedSA on page 164 for a detailed description of the ikePresharedSA structure. ikeCertificateSA Select this value if you want to apply an IKE certificate Default:security association on both the inbound and outRange: structure, see below bound traffic of the IPSEC L2TP tunnel. If you select this value, then a structure appears behind the value. Refer to telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels/l2tp/ipsec/ikeCertificateSA on page 165 for a detailed description of the ikeCertificateSA structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 164 Configuration attributes

telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels/l2tp/ipsec/ikePresharedSA

Use the ikePresharedSA structure in the ipsec structure to apply an IKE preshared key security association on both the inbound and outbound traffic of the IPSEC L2TP tunnel. The ikePresharedSA structure contains the following elements: Element ikeSA Description Use this element to apply a certain IKE preshared key Default:<empty> security association on the IPSEC L2TP tunnel. Range: 0 24 characters Do this by typing the ikeSA object its index name in this field. Example If you created an ikeSA object with index name mySA (i.e. ikeSA[mySA]) and you want to apply this security association on an IPSEC L2TP tunnel, then enter the index name as value of the ikeSA element. localId Use this element to set the local identifier for use in IKE phase 1 negotiation. The localId element has the following values: ipAddress. Set the IP address that will be used as local ID. If you leave the ipAddress element at its default value (0.0.0.0), then the local IP address of the L2TP tunnel is used as local ID. hostname. Set the hostname that will be used as local ID. The hostname has to be of the form host.domain.com. user. Set the username that will be used as local ID. The username has to be of the form my.name@company.com. Default:<ipAddress> 0.0.0.0 Range: choice, see below Default:<ipAddress> 0.0.0.0 Range: choice, see below

Default:Range: structure, see below

remoteId

Use this element to set the remote identifier for use in IKE phase 1 negotiation. The remoteId element has the following values:

ipAddress. Sets the IP address that will be used as remote ID. If you leave the ipAddress element at its default value (0.0.0.0), then the remote IP address of the L2TP tunnel is used as remote ID. hostname. Sets the hostname that will be used as remote ID. The hostname has to be of the form host.domain.com. user. Sets the username that will be used as remote ID. The username has to be of the form my.name@company.com. Default:presharedkey Range: 12 49 characters

preSharedKey

Use this element to set the pre-shared key string.

This key string in combination with the selected IKE DH group is used to calculate the key during the key exchange in phase 1 of the IKE negotiation. Refer to diffieHelmanGroup on page 173.

165 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels/l2tp/ipsec/ikeCertificateSA

Use the ikeCertificateSA structure in the ipsec structure to apply an IKE certificate security association on both the inbound and outbound traffic of the IPSEC L2TP tunnel. The ikeCertificateSA structure contains the following elements: Element ikeSA Description Use this element to apply a certain IKE certificate security association on the IPSEC L2TP tunnel.

Default:Range: structure, see below

Default:<empty> Range: 0 24 characters

Do this by typing the ikeSA object its index name in this field. Example If you created an ikeSA object with index name mySA (i.e. ikeSA[mySA]) and you want to apply this security association on an IPSEC L2TP tunnel, then enter the index name as value of the ikeSA element. localId Use this element to set the local identifier for use in IKE phase 1 negotiation. The localId element has the following values: ipAddress. Set the IP address that will be used as local ID. If you leave the ipAddress element at its default value (0.0.0.0), then the local IP address of the L2TP tunnel is used as local ID. hostname. Set the hostname that will be used as local ID. The hostname has to be of the form host.domain.com. user. Set the username that will be used as local ID. The username has to be of the form my.name@company.com. Default:<ipAddress> 0.0.0.0 Range: choice, see below

The localId element has to be the same as the IP address / hostname / username in the certificate of the local device. remoteId Use this element to set the remote identifier for use in IKE phase 1 negotiation. The remoteId element has the following values: ipAddress. Sets the IP address that will be used as remote ID. If you leave the ipAddress element at its default value (0.0.0.0), then the remote IP address of the L2TP tunnel is used as remote ID. hostname. Sets the hostname that will be used as remote ID. The hostname has to be of the form host.domain.com. user. Sets the username that will be used as remote ID. The username has to be of the form my.name@company.com. Default:<ipAddress> 0.0.0.0 Range: choice, see below

The remoteId element has to be the same as the IP address / hostname / username in the certificate of the remote device.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 166 Configuration attributes

MR-1.12.4 Manual SA configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/manualSA[ ]/espEncryptionAlgorithm on page 167 telindus1423Router/ip/router/manualSA[ ]/espEncryptionKey on page 168 telindus1423Router/ip/router/manualSA[ ]/espAuthenticationAlgorithm on page 169 telindus1423Router/ip/router/manualSA[ ]/espAuthenticationKey on page 169 telindus1423Router/ip/router/manualSA[ ]/spi on page 169

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

167 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/manualSA[ ]/espEncryptionAlgorithm Use this attribute to select the algorithm that will be used to encrypt the data when using IPSEC. The espEncryptionAlgorithm attribute has the following values: Value null Description No encryption is done.

Default:des Range: enumerated, see below

The null encryption algorithm is simply a convenient way to represent the optional use of applying encryption within ESP. ESP can then be used to provide authentication and integrity without confidentiality. des 3des DES is used to encrypt / decrypt the data. The DES key has to be entered in the espEncryptionKey attribute. Triple DES is used to encrypt / decrypt the data. The 3DES key has to be entered in the espEncryptionKey attribute.

Make sure that for the same security association on both the local and remote router the same ESP encryption algorithm is selected.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 168 Configuration attributes

telindus1423Router/ip/router/manualSA[ ]/espEncryptionKey Use this attribute to define the key that will be used in the encryption / decryption process when using IPSEC. The algorithm can be selected using the espEncryptionAlgorithm attribute. If you use null encryption DES encryption then the setting of the espEncryptionKey attribute is irrelevant.

Default:<empty> Range: octet string, 0 24

only the first 8 octets of the key are used. All other octets are ignored. 11 11 11 11 11 11 11 11 22 22 22 22 22 22 22 22 33 33 33 33 33 33 33 33

used in the encryption / decryption process 3DES encryption

not used in the encryption / decryption process

at the transmitter side, the first set of 8 octets of the key are used to encrypt the data, the second set of 8 octets to decrypt the data and the third set of 8 octets to encrypt the data again. 11 11 11 11 11 11 11 11 22 22 22 22 22 22 22 22 33 33 33 33 33 33 33 33

encryption

decryption

encryption

At the receiver side, the opposite occurs.

Make sure that for the same security association on both the local and remote router the same ESP encryption key is used.

169 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/manualSA[ ]/espAuthenticationAlgorithm Use this attribute to select the algorithm that will be used to authenticate the data when using IPSEC. The espAuthenticationAlgorithm attribute has the following values: Value null hmac_md5 hmac_sha-1 Description No authentication is done.

Default:hmac_md5 Range: enumerated, see below

The MD5 hash function is used to authenticate the data. The MD5 key has to be entered in the espAuthenticationKey attribute. The SHA-1 hash function is used to authenticate the data. The SHA-1 key has to be entered in the espAuthenticationKey attribute.

Make sure that for the same security association on both the local and remote router the same ESP authentication algorithm is selected.

telindus1423Router/ip/router/manualSA[ ]/espAuthenticationKey

Use this attribute to define the key that will be used in the authentication process when using IPSEC. The algorithm can be selected using the espAuthenticationAlgorithm attribute. If you use null authentication MD5 authentication then the setting of the espAuthenticationKey attribute is irrelevant. only the first 16 octets of the key are used. All other octets are ignored. 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20

Default:<empty> Range: octet string, 0 20

used in the authentication process SHA-1 authentication all 20 octets of the key are used.

not used in the authentication process

Make sure that on both the local and remote router the same ESP authentication key is used.

telindus1423Router/ip/router/manualSA[ ]/spi

Use this attribute to set the SPI value. Each security association must have a unique SPI value because this value is used to identify the security association.

Default:256 Range: 256 2147483647

Make sure that for the same security association on both the local and remote router the same SPI value is used.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 170 Configuration attributes

MR-1.12.5 IKE SA configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/ikeSA[ ]/phase1 on page 171 telindus1423Router/ip/router/ikeSA[ ]/phase2 on page 175

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

171 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/ikeSA[ ]/phase1

Use this attribute to configure the parameters of phase 1 in the IKE negotiation process. IKE phase 1 negotiations are used to establish IKE SAs. These SAs protect the IKE phase 2 negotiations. The phase1 structure contains the following elements: Element type Description Use this element to determine who initiates phase 1 of Default:client the IKE negotiation. Range: enumerated, see below The type element has the following values: mode client: This side initiates phase 1. server: This side waits until the remote side initiates phase 1. peerToPeer: Both sides can initiate phase 1. Default:aggressive Range: enumerated, see below

Default:Range: structure, see below

Use this element to set the IKE mode. The choice between these modes is a matter of trade-offs. The mode element has the following values:

main: Main mode is selected. Some characteristics of main mode are: Protects the identities of the peers during negotiations and is therefore more secure. Allows greater proposal flexibility than aggressive mode. Is more time consuming than aggressive mode because more messages are exchanged between peers. (Six messages are exchanged in main mode.)

aggressive: Aggressive mode is selected. Some characteristics of aggressive mode are: Exposes identities of the peers to eavesdropping, making it less secure than main mode. Takes half the number of messages of main mode, has less negotiation power, and does not provide identity protection. Is faster than main mode because fewer messages are exchanged between peers. (Three messages are exchanged in aggressive mode.)

Telindus 1423 SHDSL Router User manual

Chapter MR-1 172 Configuration attributes

Element encryptionAlgorithm

Description Use this element to select the IKE encryption algorithm. Default:des Range: enumerated, see below

The encryption key is calculated using the selected diffieHelmanGroup algorithm in combination with the value of the preSharedKey element. The encryptionAlgorithm element has the following values: des: DES (56 bits) is used to encrypt / decrypt the data. 3des: Triple DES (168 bits) is used to encrypt / decrypt the data. aes128: AES128 (128 bits) is used to encrypt / decrypt the data. aes192: AES192 (192 bits) is used to encrypt / decrypt the data. aes256: AES256 (256 bits) is used to encrypt / decrypt the data. Make sure that for the same security association on both the local and remote router the same encryption algorithm is selected. authenticationAlgorithm Use this element to select the IKE authentication algo- Default:hmac_sha-1 rithm. Range: enumerated, see below The authentication key is calculated using the selected diffieHelmanGroup algorithm in combination with the value of the preSharedKey element. The authenticationAlgorithm element has the following values: hmac_md5: The MD5 hash function is used to authenticate the data. hmac_sha-1: The SHA-1 hash function is used to authenticate the data. Make sure that for the same security association on both the local and remote router the same authentication algorithm is selected.

173 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element diffieHelmanGroup

Description Use this element to select the algorithm that will be Default:1_modp768 used to calculate the phase 1 IKE key. This key is Range: enumerated, see below then used to encrypt and authenticate the data. The calculation of the IKE key is based on the value of the preSharedKey element (refer to preSharedKey on page 164). The diffieHelmanGroup element has the following values: 1_modp768: The Diffie-Hellman group 1 (768 bits) is used to calculate the IKE key. 2_modp1024: The Diffie-Hellman group 2 (1024 bits) is used to calculate the IKE key. 5_modp1536: The Diffie-Hellman group 5 (1536 bits) is used to calculate the IKE key. Important remarks Note that the heavier the algorithm, the more processing power is required. E.g. when selecting the Diffie-Hellman group 5, up to 30 seconds may be needed to generate a key. Make sure that for the same security association on both the local and remote router the same Diffie-Hellman algorithm is selected.

lifeTime

Use this element to set the life time, in seconds, of the Default:28800 IKE SA. Range: 120 86400 When the life time expires, it is replaced by a new SA (and SPI) or terminated.

keepAlive

Use this element to configure the IKE keep alive mes- Default:sages. Keep alive messages are sent to check and Range: structure, see below maintain, or keep alive, the connection between local and remote. Refer to telindus1423Router/ip/router/ikeSA[ ]/phase1/keepAlive on page 174 for a detailed description of the keepAlive structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 174 Configuration attributes

telindus1423Router/ip/router/ikeSA[ ]/phase1/keepAlive Use the keepAlive structure in the phase1 structure to configure the IKE keep alive messages. The keepAlive structure contains the following elements: Element mode Description Use this element to set the keep alive mode. The mode element has the following values:

Default:Range: structure, see below

Default:onDemand Range: enumerated, see below

disabled: Keep alive is disabled, i.e. no keep alive messages are sent. onDemand: Keep alive messages are sent on the basis of traffic patterns. For example, if a router has to send outbound traffic and the liveliness of the peer is questionable, the router sends a keep alive message to query the status of the peer. If a router has no traffic to send, it never sends a keep alive message. periodic: Keep alive messages are sent at the interval specified by the delay element.

delay

Use this element to set the interval at which keep alive Default:00000d 00h 00m 30s messages are sent in case the mode element is set to Range: 00000d 00h 00m 00s 24855d 03h 14m 07s periodic. Use this element to set the number of times a keep alive message is resent in case no answer was received on the original keep alive message. Default:3 Range: 0

failsPermitted

interval

Use this element to set the delay between the retries. Default:00000d 00h 00m 10s Range: 00000d 00h 00m 00s For example, considering the default values, if no 24855d 03h 14m 07s answer is received on a keep alive message, then the router retries 3 times to resent the keep alive message with an interval of 10 seconds.

175 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/ikeSA[ ]/phase2 Use this attribute to configure the parameters of phase 2 in the IKE negotiation process. The phase2 structure contains the following elements: Element pfsGroup Description Use this element to select the Perfect Forward Secrecy algorithm. The pfsGroup element has the following values:

Default:Range: structure, see below

Default:none Range: enumerated, see below

none: No Perfect Forward Secrecy is performed. The IKE key is calculated based on the previous key. 1_modp768: A completely new key is calculated using the Diffie-Hellman group 1 (768 bits). 2_modp1024: A completely new key is calculated using the Diffie-Hellman group 2 (1024 bits). 5_modp1536: A completely new key is calculated using the Diffie-Hellman group 5 (1536 bits). Important remarks

Note that the heavier the algorithm, the more processing power is required. E.g. when selecting the Diffie-Hellman group 5, up to 30 seconds may be needed to generate a key. Make sure that for the same security association on both the local and remote router the same PFS algorithm is selected.

natTraversal

Use this element to enable or disable NAT traversal.

If natTraversal is enabled, then IPSEC traffic flows transparently through a NAT device, thereby allowing one or more remote hosts located behind the NAT device to use secure L2TP/IPSec tunnel connections to access the router. natVendorId Use this element to determine which vendor identification string is exchanged with the remote in order to detect NAT support. Default:rfc3947 Range: rfc3947 / draft

Default:enabled Range: enabled / disabled

proposal

Use this element to configure the IKE proposal. A pro- Default:posal is a list of IKE attributes to protect the IKE con- Range: structure, see below nection between the IKE host and its peer. Refer to telindus1423Router/ip/router/ikeSA[ ]/phase2/proposal on page 176 for a detailed description of the proposal structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 176 Configuration attributes

telindus1423Router/ip/router/ikeSA[ ]/phase2/proposal

Use the proposal structure in the phase2 structure to configure the IKE proposal. A proposal is a list of IKE attributes to protect the IKE connection between the IKE host and its peer. The proposal structure contains the following elements: Element espEncryptionAlgorithm Description Use this element to select the IPSEC encryption algo- Default:des rithm (in case of ESP). Range: enumerated, see below The espEncryptionAlgorithm element has the following values: null: No encryption is done. The null encryption algorithm is simply a convenient way to represent the optional use of applying encryption within ESP. ESP can then be used to provide authentication and integrity without confidentiality. des: DES (56 bits) is used to encrypt / decrypt the data. 3des: Triple DES (168 bits) is used to encrypt / decrypt the data. disabled: No encryption is done. Make sure that for the same security association on both the local and remote router the same encryption algorithm is selected. espAuthenticationAlgorithm Use this element to select the IPSEC authentication algorithm (in case of ESP). Default:hmac_md5 Range: enumerated, see below

Default:Range: structure, see below

The epsAuthenticationAlgorithm element has the following values: hmac_md5: The MD5 hash function is used to authenticate the data. hmac_sha-1: The SHA-1 hash function is used to authenticate the data. disabled: No authentication is done. Make sure that for the same security association on both the local and remote router the same authentication algorithm is selected. ahAuthenticationAlgorithm Use this element to select the IPSEC authentication algorithm (in case of AH). Default:disabled Range: enumerated, see below

The ahAuthenticationAlgorithm element has the following values: hmac_md5: The MD5 hash function is used to authenticate the data. hmac_sha-1: The SHA-1 hash function is used to authenticate the data. disabled: No authentication is done. Make sure that for the same security association on both the local and remote router the same authentication algorithm is selected.

177 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element lifeTime

Description Use this element to set the life time of the IPSEC SA. Default:When the life time expires, it is replaced by a new SA Range: structure, see below (and SPI) or terminated. The lifeTime structure contains the following elements: time. Use this element to set the life time, in seconds, of the IPSEC SA. Default:3600 Range: 120 86400

kBytes. Use this element to set the life time, in kilo- Default:4250000 bytes, of the IPSEC SA. Range: 2500 4250000

As soon as one of the two criteria is exceeded (i.e. either the time or the number of kilobytes), the IPSEC SA is timed out.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 178 Configuration attributes

MR-1.12.6 OSPF configuration attributes


This section discusses the configuration attributes concerned with OSPF. First it describes the general OSPF configuration attributes. Then it explains the OSPF area configuration attributes. The following gives an overview of this section: General OSPF configuration attributes on page 179 Area configuration attributes on page 183

179 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

General OSPF configuration attributes This section describes the following configuration attributes: telindus1423Router/ip/router/ospf/routerId on page 180 telindus1423Router/ip/router/ospf/refBandwidth on page 180 telindus1423Router/ip/router/ospf/keyChains on page 180 telindus1423Router/ip/router/ospf/importMetrics on page 181 telindus1423Router/ip/router/ospf/importFilter on page 182

Telindus 1423 SHDSL Router User manual

Chapter MR-1 180 Configuration attributes

telindus1423Router/ip/router/ospf/routerId Use this attribute to set the unique sequence number for the router in the OSPF network. telindus1423Router/ip/router/ospf/refBandwidth

Default:0.0.0.0 Range: up to 255.255.255.255

Use this attribute to set the reference bandwidth. It is used to calculate the cost of an interface in OSPF. Refer to MU-8.6.1 - Introduction OSPF on page 220 for more information about cost. telindus1423Router/ip/router/ospf/keyChains Use this attribute to set the key chains that will be used in the MD-5 authentication process. For more information on authentication, refer to MU-8.6.3 - Activation de l'authentification OSPF on page 227 telindus1423Router/ip/router/ospf/area[ ]/networks/authentication on page 188 telindus1423Router/ip/router/ospf/area[ ]/virtualLinks/authentication on page 190 Default:<empty> Range: table, see below

Default:100000 bps Range: 0 2147483647

The keyChains table contains the following elements: Element name Description Use this element to assign an administrative name to the key chain. Use this element to set the properties of each key chain. Default:chain Range: 0 24 characters Default:<empty> Range: table, see below

chain

Refer to telindus1423Router/ip/router/ospf/keyChains/chain on page 181 for a detailed description of this element.

181 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/ospf/keyChains/chain The chain table contains the following elements: Element keyId Description Use this element to set a unique identifier for each secret. Use this element to define the secret.

Default:<empty> Range: table, see below

Default:0 Range: 0 255 Default:<empty> Range: 0 16 characters Default:01/01/01 Range: 01/01/01 31/12/99 Default:00:00:00 Range: 00:00:00 23:59:59

secret

sendDate

Use this element to set the start date from which the secret is allowed to be sent. Enter the date as argument value in the format dd/mm/yy (e.g. 01/01/05) Use this element to set the time from which the secret is allowed to be sent. Enter the time as argument value in the format hh:mm:ss (e.g. 12:30:45).

sendTime

sendDuration

Use this element to set the period of time during which Default:00000d 00h 00m 00s the secret is allowed to be sent. Range: 00000d 00h 00m 00s 24855d 03h 14m 07s Use this element to set the start date from which the secret is allowed to be accepted by the other routers in the OSPF network. Enter the date as argument value in the format dd/mm/yy (e.g. 01/01/05) Use this element to set the time from which the secret is allowed to be accepted by the other routers in the OSPF network. Enter the time as argument value in the format hh:mm:ss (e.g. 12:30:45). Default:01/01/01 Range: 01/01/01 31/12/99

acceptDate

acceptTime

Default:00:00:00 Range: 00:00:00 23:59:59

acceptDuration

Use this element to set the period of time during which Default:00000d 00h 00m 00s the secret is allowed to be accepted by the other rout- Range: 00000d 00h 00m 00s 24855d 03h 14m 07s ers in the OSPF network. Enter this value in seconds.

telindus1423Router/ip/router/ospf/importMetrics Use this attribute to configure the default cost for importing RIP and static routes into OSPF. The importMetrics structure contains following elements: Element static Description Use this element to set the default cost of a static route which will be imported into OSPF. Use this element to set the default cost of a RIP route which will be imported into OSPF.

Default:Range: structure, see below

Default:20 Range: 0 2147483647 Default:20 Range: 0 2147483647

rip

Telindus 1423 SHDSL Router User manual

Chapter MR-1 182 Configuration attributes

telindus1423Router/ip/router/ospf/importFilter Use this attribute to configure the import filter which allows or denies the import of external routes into OSPF. The importFilter table contains following elements: Element type Description

Default:<empty> Range: table, see below

Use this element to select the type of routes which will Default:all be allowed or denied into OSPF. Range: static / rip / all Whether a route is allowed into OSPF or denied access to OSPF, is set by the element mode which is described further on in this table. The type element has the following values: all. All routes are allowed into OSPF / denied access to OSPF. static. Static routes are allowed into OSPF / denied access to OSPF. rip. Rip routes are allowed into OSPF / denied access to OSPF. Default:0.0.0.0 Range: up to 255.255.255.255

address

Use this element to set the IP address the external route has to comply to.

mask

Use this element to set the netmask the external route Default:0.0.0.0 has to comply to. Range: up to 255.255.255.255 Address and mask define the address range the external route has to comply to.

mode

Use this element to allow or deny the import of exter- Default:allow nal routes into OSPF. Range: deny / allow Use this element to set the type of cost of the external route. The costType element has the following values: type1. The external cost is expressed in the same units as OSPF interface cost (i.e. in terms of the link state metric). type2. The external cost is an order of magnitude larger; any type 2 cost is considered greater than the cost of any path internal to the OSPF routing domain. Use of type 2 external cost assumes that routing outside the OSPF domain is the major cost of routing a packet, and eliminates the need for conversion of external costs to internal link state costs. Default:type2 Range: type1 / type2

costType

cost

Use this element to set the cost of the external route. Default:0 Range: 0 65535 Each external route can be tagged, enabling the Default:0 passing of additional information between AS bound- Range: 0 2147483647 ary routers.

tag

183 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Area configuration attributes This section describes the following configuration attributes: telindus1423Router/ip/router/ospf/area[ ]/areaId on page 184 telindus1423Router/ip/router/ospf/area[ ]/stub on page 184 telindus1423Router/ip/router/ospf/area[ ]/networks on page 186 telindus1423Router/ip/router/ospf/area[ ]/virtualLinks on page 189 telindus1423Router/ip/router/ospf/area[ ]/ranges on page 191

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 184 Configuration attributes

telindus1423Router/ip/router/ospf/area[ ]/areaId Use this attribute to set the unique sequence number for the area. The back bone area must always be area 0. telindus1423Router/ip/router/ospf/area[ ]/stub Use this attribute to define an area as a stub area. Refer to MU-8.6.1 - Introduction OSPF on page 220 for the definition of a stub area. The stub structure contains the following elements: Element mode Description Use this element to enable or disable the area as a stub area. Use this element to assign a default cost to the area. This is the cost of the default route of the area. Use this element to enable or disable the import of summary links into the stub area.

Default:0.0.0.0 Range: up to 255.255.255.255

Default:Range: structure, see below

Default:disabled Range: enabled / disabled Default:0 Range: 0 2147483647 Default:enabled Range: disabled / enabled

defaultCost

importSummaries

When this attribute is disabled, only the default route will be injected into the area (by the Area Border Router). When it is enabled, also the summary links are injected into the area. Refer to MU-8.6.1 - Introduction OSPF on page 220 for the definition of a summary link. translatorRole Use this element to specify whether or not the Telin- Default:candidate dus 1423 SHDSL Router will unconditionally translate Range: candidate / always Type-7 LSAs into Type-5 LSAs. The translatorRole element has the following values: always. The Telindus 1423 SHDSL Router always translates Type-7 LSAs into Type-5 LSAs regardless of the translator state of other NSSA border routers. candidate. The Telindus 1423 SHDSL Router participates in the translator election process. I.e. only one NSSA border router is elected as Type-7 translator among all the NSSA border routers that were set as candidate.

185 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element translatorInterval

Description Use this element to define the length of time the Tel- Default:00000d 00h 00m 40s indus 1423 SHDSL Router, if it is an elected Type-7 Range: 00000d 00h 00m 00s 00000d 18h 12m 15s translator, will continue to perform its translator duties once it has determined that its translator status has been deposed by another NSSA border router translator. If an NSSA border router is elected as Type-7 translator among all the NSSA border routers that were set as candidate, then it will continue to perform translation duties until supplanted by a reachable NSSA border router whose Nt bit is set or whose router ID is greater. Such an event may happen when an NSSA router with translatorRole set to always regains border router status, or when a partitioned NSSA becomes whole. If an elected translator determines its services are no longer required, it continues to perform its translation duties for the additional time interval defined by the translatorInterval. This minimizes excessive flushing of translated Type-7 LSAs and provides for a more stable translator transition.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 186 Configuration attributes

telindus1423Router/ip/router/ospf/area[ ]/networks Use this attribute to identify the interfaces which are part of the area. The networks table contains following elements: Element name Description Use this element to assign an administrative name to a network.

Default:<empty> Range: table, see below

Default:<network> Range: 0 24 characters

address

Use this element to specify the IP address of the net- Default:0.0.0.0 work. Range: up to 255.255.255.255 Use this element to specify the IP address mask of the Default:255.255.255.0 attached network (Network Mask). Range: up to 255.255.255.255 Address and mask define the network address to select the interfaces that will be part of the OSPF network (with the OSPF parameters defined in this network).

mask

cost

Use this element to specify the cost of the link. When Default:0 the cost is set to 0, the actual cost is calculated auto- Range: 0 65535 matically. Refer to MU-8.6.1 - Introduction OSPF on page 220 for more information about cost.

priority

Use this element to set the priority of the link. On the Default:0 basis of this element, the designated router in the net- Range: 0 255 work is elected. Refer to MU-8.6.1 - Introduction OSPF on page 220 for more information about designated routers. This element is only important for broadcast networks. It must not be set for P2P links.

helloInterval

Use this element to specify the length of time, in sec- Default:00000d 00h 00m 30s onds, between the hello packets that a router sends Range: 00000d 00h 00m 00s 00000d 18h 12m 15s on an OSPF interface. OSPF requires the hello interval and dead interval to be exactly the same for all routers attached to a common network.

187 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element deadInterval

Description Use this element to specify the maximum length of time, in seconds, before the neighbours declare the OSPF router down when they stop hearing the router's Hello Packets. Default:00000d 00h 02m 00s Range: 00000d 00h 00m 00s 24855d 3h 14m 07s

retransmitinterval

Use this element to specify the length of time, in sec- Default:00000d 00h 00m 05s onds, after which an hello packet is retransmitted. Range: 00000d 00h 00m 00s 00000d 00h 4m 15s Use this element to authenticate OSPF packets. Default:Range: structure, see below

authentication

OSPF packets can be authenticated so that routers can be part of routing domains based on predefined passwords. By default, a router uses a Null authentication which means that routing exchanges over a network are not authenticated. There are two other authentication methods: Simple Password authentication and Message Digest authentication (MD-5). Refer to telindus1423Router/ip/router/ospf/area[ ]/networks/authentication on page 188 for a detailed description of this element. mode Use this element to activate or disable an interface in the OSPF network. Default:active Range: active / disabled

When an interface is active it is known in the OSPF network, and will pass OSPF data through the OSPF network. When it is disabled the interface is known in the OSPF network, but OSPF data will not be passed through (e.g. if an interface is connected to the outside world using RIP, the other routers in the area will know this interface, but there is no OSPF link to the outside world).

Telindus 1423 SHDSL Router User manual

Chapter MR-1 188 Configuration attributes

telindus1423Router/ip/router/ospf/area[ ]/networks/authentication The authentication structure contains the following elements: Element type Description Use this element to set the type of authentication. The type element has the following values: disabled. No authentication is done.

Default:Range: structure, see below

Default:disabled Range: disabled / text/ md5

test. This allows a password (key) to be configured per interface. Interfaces of different routers that want to exchange OSPF information will have to be configured with the same key. md5. Message Digest authentication. This is a cryptographic authentication. A key (password) and key-id are configured on each router. The router uses an algorithm based on the OSPF packet, the key, and the key-id to generate an "authentication secret" that gets added to the packet. Unlike the simple authentication, the key is not exchanged over the wire. Default:Range: 0 8 characters Default:chain Range: 0 24 characters

text

Use this element to set the password when using text authentication. Use this element to set the key chain which will be used in this network when using md5 authentication.

keyChain

189 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/ospf/area[ ]/virtualLinks Use this attribute to set up a virtual link between the current area and a remote area which is not physically connected to the backbone area.

Default:<empty> Range: table, see below

Refer to MU-8.6.1 - Introduction OSPF on page 220 for more information on the back bone area. The virtual links table contains following elements: Element remoteId Description Use this element to set the IP address of the remote router with which the virtual link is established. Default:0.0.0.0 Range: up to 255.255.255.255

helloInterval

Use this element to specify the length of time, in sec- Default:00000d 00h 00m 30s onds, between the hello packets that a router sends Range: 00000d 00h 00m 00s 00000d 18h 12m 15s on an OSPF interface. Use this element to specify the maximum length of Default:00000d 00h 02m 00s time, in seconds, between the sent hello packets after Range: 00000d 00h 00m 00s 24855d 3h 14m 07s which the neighbours declare the virtual link down. Use this element to specify the length of time, in sec- Default:00000d 00h 00m 05s onds, after which an hello packet is retransmitted. Range: 00000d 00h 00m 00s 00000d 00h 4m 15s Use this element to authenticate OSPF packets. Default:Range: structure, see below

deadInterval

retransmitinterval

authentication

OSPF packets can be authenticated so that routers can be part of routing domains based on predefined passwords. By default, a router uses a Null authentication which means that routing exchanges over a network are not authenticated. There are two other authentication methods: Simple Password authentication and Message Digest authentication (MD-5). Refer to telindus1423Router/ip/router/ospf/area[ ]/virtualLinks/authentication on page 190 for more information.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 190 Configuration attributes

telindus1423Router/ip/router/ospf/area[ ]/virtualLinks/authentication The authentication structure contains the following elements: Element type Description Use this element to set the type of authentication. The type element has the following values: disabled. No authentication is done.

Default:Range: structure, see below

Default:disabled Range: disabled / text/ md5

test. This allows a password (key) to be configured per interface. Interfaces of different routers that want to exchange OSPF information will have to be configured with the same key. md5. Message Digest authentication. This is a cryptographic authentication. A key (password) and key-id are configured on each router. The router uses an algorithm based on the OSPF packet, the key, and the key-id to generate an "authentication secret" that gets added to the packet. Unlike the simple authentication, the key is not exchanged over the wire. Default:-Range: 0 8 characters

text

Use this element to set the password when using text authentication.

keyChain

Use this element to set the key chain which will be Default:chain used in the virtual link when using md5 authentication. Range: 0 24 characters

191 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/ospf/area[ ]/ranges By defining ranges in an area, Summary-LSAs can be condensed before being injected in an other area (by defining a larger subnet mask).

Default:<empty> Range: table, see below

Refer to MU-8.6.1 - Introduction OSPF on page 220 for more information about Summary-LSAs. Each address range is defined as an address-mask pair. Many separate networks may then be contained in a single address range, just as a subnetted network is composed of many separate subnets. Area border routers then summarize the area contents (for distribution to the backbone) by advertising a single route for each address range. The cost of the route is the maximum cost to any of the networks falling in the specified range. The ranges table contains following elements: Element type Description Use this element to set the type of Summary-LSA that Default:all has to be created. Range: enumerated, see below The type element has the following values: network summary. The area's routing information is condensed. nssa. In case of an NNSA, multiple Type-7 LSAs are aggregated into a single Type-5 LSA. all. Both tasks are performed.

Use this element to set the IP address of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Use this element to set the subnet mask. Default:255.255.255.0 Range: up to 255.255.255.255 Default:enabled Range: enabled / disabled

mask

advertise

Use this element to enable or disable the advertisement of the Summary-LSAs into the other areas.

When this element is disabled, the Summary-LSAs which are part of this range, will not be known in the other areas in the OSPF network. When this element is enabled, the summaries are injected in the other areas of the OSPF network. tag This element is only relevant in case of NSSAs. Default:0 Use this element to retag the summary of the external Range: 0 2147483647 routes entering the NSSA.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 192 Configuration attributes

MR-1.12.7 Routing filter configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/routingFilter[ ]/filter on page 193

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

193 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/routingFilter[ ]/filter Use this attribute to set up a routing update filter.

Default:<empty> Range: table, see below

Only the routes to networks that are specified in the filter table are forwarded. All other routes are blocked. If the filter table is empty, then all routes are forwarded. The filter table contains the following elements: Element network Description This is the IP address of the network. The address may be a (sub-)network address. It should match an entry in the telindus1423Router/ip/router/routingTable status attribute of the Telindus 1423 SHDSL Router. Default:0.0.0.0 Range: up to 255.255.255.255

mask

This is the IP subnet mask of the network. By combin- Default:255.255.255.0 ing an IP address with a mask you can uniquely iden- Range: up to 255.255.255.255 tify a range of addresses.

Currently, the Telindus 1423 SHDSL Router supports up to 5 routing update filters. Although you can add more than 5 routingFilter[ ] objects to the containment tree, no more than 5 will be active. Example This example shows a filter that only forwards the route to subnet 192.168.48.0.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 194 Configuration attributes

MR-1.12.8 VRRP configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/vrrp[ ]/vrId on page 195 telindus1423Router/ip/router/vrrp[ ]/ipAddresses on page 195 telindus1423Router/ip/router/vrrp[ ]/interfaces on page 196 telindus1423Router/ip/router/vrrp[ ]/criticals on page 196 telindus1423Router/ip/router/vrrp[ ]/advertiseInterval on page 197 telindus1423Router/ip/router/vrrp[ ]/preemptMode on page 197

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

195 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/vrrp[ ]/vrId

Use this attribute to set the identification of the virtual router. Specify a number between 1 and 255. The VRID has to be set the same on all participating routers. Setting the vrId to 0 (default) disables this virtual router instance. telindus1423Router/ip/router/vrrp[ ]/ipAddresses Use this attribute to configure one or more IP addresses on the virtual router. The ipAddresses table contains the following element: Element address Description

Default:0 Range: 0 255

Default:<empty> Range: table, see below

Use this element to configure the IP address of the vir- Default:0.0.0.0 tual router. This address must be the same on all rout- Range: up to 255.255.255.255 ers participating in this virtual router. By adding several IP addresses, several IP addresses can be configured on a single virtual router. This can be used to ensure redundancy while migrating from one address scheme to another. It cannot be used for load balancing purposes, in this case multiple virtual routers must be used. If no IP address is configured, this virtual router instance is not active.

It is important that all VRRP routers have a physical interface configured with an IP address in the same subnet as the virtual router. The VRRP protocol sends only IP addresses and not subnet information. Without the corresponding subnet information, the VRRP router will add the virtual router address as a single IP address with a host (255.255.255.255) netmask. This will prevent routing from working properly, as the virtual router will not listen to broadcasts from the local network.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 196 Configuration attributes

telindus1423Router/ip/router/vrrp[ ]/interfaces

Use this attribute to add Ethernet-alike interfaces7 to the virtual router and assign a priority to them. This priority is used in the master virtual router election process. The interfaces table contains the following element: Element name Description Use this element to specify the name of the interface that you want to add to the virtual router.

Default:<empty> Range: table, see below

Default:<empty> Range: 0 36 characters

priority

Use this element to specify the priority of the interface. Default:100 Specify a number between 1 and 254. The higher the Range: 1 254 number, the higher the priority. The numbers 0 and 255 are reserved numbers and cannot be set by the user: 0 specifies that the master has stopped working and that the backup router needs to transition to master state. 255 specifies that the VRRP router is the IP address owner and therefore is master, independently from the priority settings.

Refer to MU-8.9.1 - Introduction VRRP on page 271 for more information on how the priority plays a role in the election of a master virtual router. telindus1423Router/ip/router/vrrp[ ]/criticals Use this attribute to specify which interfaces must be up before a router may be elected as master virtual router. The criticals table contains the following element: Element name Description Use this element to specify the name of the interface that must be up before the router may be elected as master. Default:<empty> Range: 0 36 characters

Default:<empty> Range: table, see below

So as soon as an interface that is defined in the criticals table goes down, the complete router is considered to be down (on VRRP level that is). In that case, a new master has to be elected. So this adds an extra condition to the election process as shown in Comment le routeur virtuel matre est-il choisi ? on page 272.

7. Ethernet-alike interfaces are e.g. an Ethernet interface, a VLAN on an Ethernet interface, a bridge group, a VLAN on a bridge group, etc.

197 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/vrrp[ ]/advertiseInterval Use this attribute to set the time between VRRP advertisement transmissions.

Default:00000d 00h 00m 01s Range: 00000d 00h 00m 00s 00000d 18h 12m 15s

Actually, only the master virtual router sends VRRP advertisements. However, the advertisement interval has to be set the same on all participating routers. telindus1423Router/ip/router/vrrp[ ]/preemptMode Default:enabled Range: enabled / disabled

Use this attribute to allow a backup virtual router to take over from the master virtual router in case the backup virtual router has a higher priority on the enclosing virtual router. The preemptMode attribute has the following values: Value enabled Description If after a router is elected as master a backup appears which has a higher priority than the master, then the backup begins to send its own advertisements. The current master will see that the backup has higher priority and stop functioning as the master. The backup will then see that the master has stopped sending advertisements and assume the role of master. Once a router is elected as master, it stays master until it goes down. So the appearance of a backup with a higher priority after the master has been elected does not cause a new election process.

disabled

While preemption can ensure that a primary router will return to master status once it returns to service, preemption also causes a brief outage while the election process takes place. Disabling preemption will ensure maximum up-time on the network, but will not always result in the primary or highest priority router acting as master. Note that, regardless of the setting of the preemptMode attribute, the VRRP IP address owner will always preempt.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 198 Configuration attributes

MR-1.12.9 Firewall configuration attributes


This section describes the following configuration attributes: telindus1423Router/ip/router/firewall/inspection on page 199 telindus1423Router/ip/router/firewall/outboundPolicies on page 199 telindus1423Router/ip/router/firewall/inboundPolicies on page 204 telindus1423Router/ip/router/firewall/outboundSelfPolicies on page 209 telindus1423Router/ip/router/firewall/inboundSelfPolicies on page 213 telindus1423Router/ip/router/firewall/attacks on page 217 telindus1423Router/ip/router/firewall/log on page 219

199 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/firewall/inspection Use this attribute to enable or disable the firewall. telindus1423Router/ip/router/firewall/outboundPolicies Use this attribute to define outbound SNet policies. Refer to MU-10.9.4 Dfinition dune politique SNet sortante on page 407 for more information. The outboundPolicies table contains the following elements: Element sNet Description Use this element to specify the name of the source SNet for which you want to create an outbound SNet policy.

Default:disabled Range: enabled / disabled

Default:<empty> Range: table, see below

Default:<name> corp Range: choice, see below

The sNet element is a choice element. The first part of the sNet element has the following values: name. Select this value if the source SNet is one of the standard SNets. In the second part of the sNet element, use the drop-down box to select one of the standard SNets: Default:corp Range: corp / dmz

corp. The source SNet is corporate. If you select this value, then you create a policy for the traffic from the corporate SNet to any SNet except the self SNet. dmz. The source SNet is DMZ. If you select this value, then you create a policy for the traffic from the DMZ SNet to any SNet except the self SNet. Default:<empty> Range: 0 16 characters

custom. Currently, you can only select standard SNets. In future releases of the TDRE, it will be possible to select custom created SNets.

Note that you only have to set the source SNet. The destination SNet is always any SNet except the self SNet.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 200 Configuration attributes

Element sourceIp

Description Use this element to specify the source IP address(es) Default:<opt> for which you want to create an outbound SNet policy. Range: choice, see below The sourceIp element is a choice element. The first part of the sourceIp element has the following values: network. Select this value if you want to create a policy for the traffic coming from a specific network. In the second part of the sourceIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic coming from a specific (range of) IP address(es). In the second part of the sourceIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the source IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the source IP address range. Range: up to 255.255.255.255 Note that you can specify one single source IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the sourceIp element at its default value (<opt>), then no source IP address(es) is/are specified.

201 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element destIp

Description Use this element to specify the destination IP Default:<opt> address(es) for which you want to create an outbound Range: choice, see below SNet policy. The destIp element is a choice element. The first part of the destIp element has the following values: network. Select this value if you want to create a policy for the traffic destined for a specific network. In the second part of the destIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic destined for a specific (range of) IP address(es). In the second part of the destIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the destination IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the destination IP address range. Range: up to 255.255.255.255 Note that you can specify one single destination IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the destIp element at its default value (<opt>), then no destination IP address(es) is/are specified.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 202 Configuration attributes

Element application

Description Use this element to specify the application for which you want to create an outbound SNet policy. Default:<opt> Range: choice, see below

The application element is a choice element. Currently, the first part of the application element is always custom. The custom structure contains the following elements: protocol. Use this element to specify the protocol. Default:any The protocol element has the following values: any, Range: enumerated, see below icmp, tcp, udp, ah, esp. Note that if you leave the protocol element at its default value (any), then no protocol is specified. startPort. Use this element to specify the start of the Default:0 (any) port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that if you leave the port element at its default value (any), then no port is specified. endPort. Use this element to specify the end of the Default:<opt> port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that you can specify one single port by filling in the startPort element and leaving the endPort element at its default value (<opt>). Note that if you leave the application element at its default value (<opt>), then no application is specified. action Use this element to determine whether the outbound SNet policy allows or denies traffic. The action element has the following values: allow. Packets that fall within the specification of the policy are passed on. deny. Packets that fall within the specification of the policy are dropped. Default:allow Range: allow / deny

203 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element nat

Description Use this element to determine whether address trans- Default:<opt> lation has to be done for the outbound SNet policy Range: choice, see below and, if so, which translation address has to be taken. The nat element is a choice element. The first part of the nat element has the following values: ipAddress. Select this value if you want to specify a fixed IP address for the address translation. In the second part of the nat element, specify the IP address. Default:0.0.0.0 Range: up to 255.255.255.255

interface. Select this value if you want to that the IP Default:<empty> address that is used for the address translation is Range: 0 24 characters taken from another interface. In the second part of the nat element, specify the name of the interface.

Note that if you leave the nat element at its default value (<opt>), then no address translation is done.

Important remark If you want to enable NAT on an interface but you also want that the interface is inspected by the firewall, then enable NAT in the policies of the firewall and not in the ip structure of the interface. log Use this element to determine whether limited (disaDefault:disabled bled) or extended (enabled) logging is done for this pol- Range: enabled / disabled icy. Use this element to assign a name (description) to the Default:<empty> outbound SNet policy. By doing so, you can easily Range: 0 24 characters identify the policy when it is listed in status and performance tables.

name

Telindus 1423 SHDSL Router User manual

Chapter MR-1 204 Configuration attributes

telindus1423Router/ip/router/firewall/inboundPolicies Use this attribute to define inbound SNet policies. Refer to MU-10.9.5 - Dfinition dune politique SNet entrante on page 410 for more information. The inboundPolicies table contains the following elements: Element sNet Description Use this element to specify the name of the destination SNet for which you want to create an inbound SNet policy.

Default:<empty> Range: table, see below

Default:<name> corp Range: choice, see below

The sNet element is a choice element. The first part of the sNet element has the following values: name. Select this value if the destination SNet is one of the standard SNets. In the second part of the sNet element, use the drop-down box to select one of the standard SNets: Default:corp Range: corp / dmz

corp. The destination SNet is corporate. If you select this value, then you create a policy for the traffic from any SNet except the self SNet to the corporate SNet. dmz. The destination SNet is DMZ. If you select this value, then you create a policy for the traffic from any SNet except the self SNet to the DMZ SNet. Default:<empty> Range: 0 16 characters

custom. Currently, you can only select standard SNets. In future releases of the TDRE, it will be possible to select custom created SNets.

Note that you only have to set the destination SNet. The source SNet is always any SNet except the self SNet.

205 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element sourceIp

Description Use this element to specify the source IP address(es) Default:<opt> for which you want to create an inbound SNet policy. Range: choice, see below The sourceIp element is a choice element. The first part of the sourceIp element has the following values: network. Select this value if you want to create a policy for the traffic coming from a specific network. In the second part of the sourceIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic coming from a specific (range of) IP address(es). In the second part of the sourceIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the source IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the source IP address range. Range: up to 255.255.255.255 Note that you can specify one single source IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the sourceIp element at its default value (<opt>), then no source IP address(es) is/are specified.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 206 Configuration attributes

Element destIp

Description Use this element to specify the destination IP address(es) for which you want to create an inbound SNet policy. Default:<opt> Range: choice, see below

The destIp element is a choice element. The first part of the destIp element has the following values: network. Select this value if you want to create a policy for the traffic destined for a specific network. In the second part of the destIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic destined for a specific (range of) IP address(es). In the second part of the destIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the destination IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the destination IP address range. Range: up to 255.255.255.255 Note that you can specify one single destination IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the destIp element at its default value (<opt>), then no destination IP address(es) is/are specified.

207 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element application

Description Use this element to specify the application for which you want to create an inbound SNet policy. Default:<opt> Range: choice, see below

The application element is a choice element. Currently, the first part of the application element is always custom. The custom structure contains the following elements: protocol. Use this element to specify the protocol. Default:any The protocol element has the following values: any, Range: enumerated, see below icmp, tcp, udp, ah, esp. Note that if you leave the protocol element at its default value (any), then no protocol is specified. startPort. Use this element to specify the start of the Default:0 (any) port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that if you leave the port element at its default value (any), then no port is specified. endPort. Use this element to specify the end of the Default:<opt> port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that you can specify one single port by filling in the startPort element and leaving the endPort element at its default value (<opt>). Note that if you leave the application element at its default value (<opt>), then no application is specified. action Use this element to determine whether the inbound SNet policy allows or denies traffic. The action element has the following values: allow. Packets that fall within the specification of the policy are passed on. deny. Packets that fall within the specification of the policy are dropped. Default:allow Range: allow / deny

Telindus 1423 SHDSL Router User manual

Chapter MR-1 208 Configuration attributes

Element nat

Description Use this element to determine whether address trans- Default:<opt> lation has to be done for the inbound SNet policy and, Range: choice, see below if so, which translation address has to be taken. The nat element is a choice element. Currently, the first part of the nat element is always custom. The custom structure contains the following elements: ipAddress. Use this element to specify the IP address of the server that will handle the application specified in the policy. port. Use this element to specify the new port number. Note that if you leave the port element at its default value (<opt>), then no port translation is done. Default:0.0.0.0 Range: up to 255.255.255.255 Default:<opt> Range: 0 65535

Note that if you leave the nat element at its default value (<opt>), then no address translation is done.

Important remark If you want to enable NAT on an interface but you also want that the interface is inspected by the firewall, then enable NAT in the policies of the firewall and not in the ip structure of the interface. log Use this element to determine whether limited (disaDefault:disabled bled) or extended (enabled) logging is done for this pol- Range: enabled / disabled icy. Use this element to assign a name (description) to the Default:<empty> inbound SNet policy. By doing so, you can easily iden- Range: 0 24 characters tify the policy when it is listed in status and performance tables.

name

209 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/firewall/outboundSelfPolicies Use this attribute to define outbound self policies. Refer to MU-10.9.6 - Dfinition dune politique self sortante on page 413 for more information. The outboundSelfPolicies table contains the following elements: Element sNet Description Use this element to specify the name of the destination SNet for which you want to create an outbound self policy.

Default:<empty> Range: table, see below

Default:<name> corp Range: choice, see below

The sNet element is a choice element. The first part of the sNet element has the following values: name. Select this value if the destination SNet is one of the standard SNets. In the second part of the sNet element, use the drop-down box to select one of the standard SNets: Default:corp Range: corp / dmz

corp. The destination SNet is corporate. If you select this value, then you create a policy for the traffic from the device itself (self SNet) to the corporate SNet. dmz. The destination SNet is DMZ. If you select this value, then you create a policy for the traffic from the device itself (self SNet) to the DMZ SNet. internet. The destination SNet is internet. If you select this value, then you create a policy for the traffic from the device itself (self SNet) to the internet SNet. Default:<empty> Range: 0 16 characters

custom. Currently, you can only select standard SNets. In future releases of the TDRE, it will be possible to select custom created SNets.

Note that you only have to set the destination SNet. The source SNet is always the self SNet.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 210 Configuration attributes

Element sourceIp

Description Use this element to specify the source IP address(es) for which you want to create an outbound self policy. Default:<opt> Range: choice, see below

The sourceIp element is a choice element. The first part of the sourceIp element has the following values: network. Select this value if you want to create a policy for the traffic coming from a specific network. In the second part of the sourceIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic coming from a specific (range of) IP address(es). In the second part of the sourceIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the source IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the source IP address range. Range: up to 255.255.255.255 Note that you can specify one single source IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the sourceIp element at its default value (<opt>), then no source IP address(es) is/are specified.

211 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element destIp

Description Use this element to specify the destination IP Default:<opt> address(es) for which you want to create an outbound Range: choice, see below self policy. The destIp element is a choice element. The first part of the destIp element has the following values: network. Select this value if you want to create a policy for the traffic destined for a specific network. In the second part of the destIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic destined for a specific (range of) IP address(es). In the second part of the destIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the destination IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the destination IP address range. Range: up to 255.255.255.255 Note that you can specify one single destination IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the destIp element at its default value (<opt>), then no destination IP address(es) is/are specified.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 212 Configuration attributes

Element application

Description Use this element to specify the application for which you want to create an outbound self policy. Default:<opt> Range: choice, see below

The application element is a choice element. Currently, the first part of the application element is always custom. The custom structure contains the following elements: protocol. Use this element to specify the protocol. Default:any The protocol element has the following values: any, Range: enumerated, see below icmp, tcp, udp, ah, esp. Note that if you leave the protocol element at its default value (any), then no protocol is specified. startPort. Use this element to specify the start of the Default:0 (any) port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that if you leave the port element at its default value (any), then no port is specified. endPort. Use this element to specify the end of the Default:<opt> port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that you can specify one single port by filling in the startPort element and leaving the endPort element at its default value (<opt>). Note that if you leave the application element at its default value (<opt>), then no application is specified. action Use this element to determine whether the outbound self policy allows or denies traffic. The action element has the following values: log allow. Packets that fall within the specification of the policy are passed on. deny. Packets that fall within the specification of the policy are dropped. Default:allow Range: allow / deny

Use this element to determine whether limited (disaDefault:disabled bled) or extended (enabled) logging is done for this pol- Range: enabled / disabled icy. Use this element to assign a name (description) to the Default:<empty> outbound self policy. By doing so, you can easily iden- Range: 0 24 characters tify the policy when it is listed in status and performance tables.

name

213 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/firewall/inboundSelfPolicies Use this attribute to define inbound self policies. Refer to MU-10.9.4 - Dfinition dune politique SNet sortante on page 407 for more information. The inboundSelfPolicies table contains the following elements: Element sNet Description

Default:<empty> Range: table, see below

Use this element to specify the name of the source Default:<name> corp SNet for which you want to create an inbound self pol- Range: choice, see below icy. The sNet element is a choice element. The first part of the sNet element has the following values: name. Select this value if the source SNet is one of the standard SNets. In the second part of the sNet element, use the drop-down box to select one of the standard SNets: Default:corp Range: corp / dmz

corp. The source SNet is corporate. If you select this value, then you create a policy for the traffic from the corporate SNet to the device itself (self SNet). dmz. The source SNet is DMZ. If you select this value, then you create a policy for the traffic from the DMZ SNet to the device itself (self SNet). internet. The source SNet is internet. If you select this value, then you create a policy for the traffic from the internet SNet to the device itself (self SNet). Default:<empty> Range: 0 16 characters

custom. Currently, you can only select standard SNets. In future releases of the TDRE, it will be possible to select custom created SNets.

Note that you only have to set the source SNet. The destination SNet is always the self SNet.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 214 Configuration attributes

Element sourceIp

Description Use this element to specify the source IP address(es) for which you want to create an inbound self policy. Default:<opt> Range: choice, see below

The sourceIp element is a choice element. The first part of the sourceIp element has the following values: network. Select this value if you want to create a policy for the traffic coming from a specific network. In the second part of the sourceIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic coming from a specific (range of) IP address(es). In the second part of the sourceIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the source IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the source IP address range. Range: up to 255.255.255.255 Note that you can specify one single source IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the sourceIp element at its default value (<opt>), then no source IP address(es) is/are specified.

215 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element destIp

Description Use this element to specify the destination IP address(es) for which you want to create an inbound self policy. Default:<opt> Range: choice, see below

The destIp element is a choice element. The first part of the destIp element has the following values: network. Select this value if you want to create a policy for the traffic destined for a specific network. In the second part of the destIp element, specify the address of that network. The network structure contains the following elements: address. Use this element to specify the IP address of the network. netmask. Use this element to specify the netmask of the network. Default:0.0.0.0 Range: up to 255.255.255.255 Default:0.0.0.0 Range: up to 255.255.255.255

custom. Select this value if you want to create a policy for the traffic destined for a specific (range of) IP address(es). In the second part of the destIp element, specify the IP address (range). The custom structure contains the following elements: startAddress. Use this element to specify the start Default:0.0.0.0 of the destination IP address range. Range: up to 255.255.255.255 endAddress. Use this element to specify the end Default:<opt> of the destination IP address range. Range: up to 255.255.255.255 Note that you can specify one single destination IP address by filling in the startAddress element and leaving the endAddress element at its default value (<opt>). Note that if you leave the destIp element at its default value (<opt>), then no destination IP address(es) is/are specified.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 216 Configuration attributes

Element application

Description Use this element to specify the application for which you want to create an inbound self policy. Default:<opt> Range: choice, see below

The application element is a choice element. Currently, the first part of the application element is always custom. The custom structure contains the following elements: protocol. Use this element to specify the protocol. Default:any The protocol element has the following values: any, Range: enumerated, see below icmp, tcp, udp, ah, esp. Note that if you leave the protocol element at its default value (any), then no protocol is specified. startPort. Use this element to specify the start of the Default:0 (any) port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that if you leave the port element at its default value (any), then no port is specified. endPort. Use this element to specify the end of the Default:<opt> port range. Specify the port by typing the port Range: 0 65535 number. For ease of use, some common port numbers can be selected from a drop-down box. Note that you can specify one single port by filling in the startPort element and leaving the endPort element at its default value (<opt>). Note that if you leave the application element at its default value (<opt>), then no application is specified. action Use this element to determine whether the inbound self policy allows or denies traffic. The action element has the following values: log allow. Packets that fall within the specification of the policy are passed on. deny. Packets that fall within the specification of the policy are dropped. Default:allow Range: allow / deny

Use this element to determine whether limited (disaDefault:disabled bled) or extended (enabled) logging is done for this pol- Range: enabled / disabled icy. Use this element to assign a name (description) to the Default:<empty> inbound self policy. By doing so, you can easily iden- Range: 0 24 characters tify the policy when it is listed in status and performance tables.

name

217 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/firewall/attacks Use this attribute to determine, per type of attack, whether the firewall has to check for this type of attack and neutralise it. The attacks structure contains the following elements: Element synFlooding Description Use this element to enable or disable the detection and neutralisation of the SYN Flooding attack. Refer to Qu'est-ce que l'attaque SYN Flooding ? on page 401.

Default:Range: structure, see below

Default:disabled Range: enabled / disabled

If you set the synFlooding element to enabled, then the firewall filters out forged service requests while allowing legitimate requests to pass through. sourceRouting Use this element to enable or disable the detection and neutralisation of Source Routing attack. Refer to Quest-ce quune attaque Source Routing ? on page 401. Default:disabled Range: enabled / disabled

If you set the sourceRouting element to enabled, then the firewall filters out all datagrams with strict or loose source routing option enabled. winNuke Use this element to enable or disable the detection and neutralisation of the WinNuke attack. Refer to Qu'est-ce que l'attaque WinNuke ? on page 402. Default:disabled Range: enabled / disabled

If you set the winNuke element to enabled, then the firewall filters out this attack. ftpBounce Use this element to enable or disable the detection and neutralisation of the FTP Bounce attack. Refer to Qu'est-ce que l'attaque FTP Bounce ? on page 402. Default:disabled Range: enabled / disabled

If you set the ftpBounce element to enabled, then the firewall checks that the data connection is to the same system as that of the control connection. ipUnalignedTimeStamp Use this element to enable or disable the detection and neutralisation of the IP Unaligned Timestamp attack. Refer to Qu'est-ce que l'attaque IP Unaligned Timestamp ? on page 402. Default:disabled Range: enabled / disabled

If you set the ipUnalignedTimeStamp element to enabled, then the firewall checks whether the IP packets received have the timestamp option set. If so, it checks that it is aligned on a 32-bit boundary and drops the packet if it is not.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 218 Configuration attributes

Element mime

Description Use this element to enable or disable the detection and neutralisation of the MIME attack. Refer to Qu'est-ce que l'attaque MIME ? on page 402. Default:Range: structure, see below

By configuring the mime structure, you can close the connection if the number of received MIME headers exceeds the number of MIME headers you configured. The mime structure contains the following elements: flood. Use this element to enable or disable the detection and neutralisation of the MIME attack. Default:disabled Range: enabled / disabled

maxHeaderLength. Use this element to determine the Default:8192 maximum length of the MIME header that may be Range: 256 65535 included in the HTTP request. maxHeaders. Use this element to determine the maximum number of MIME headers that may be included in the HTTP request. Default:16 Range: 12 65535 Default:disabled Range: enabled / disabled

seqNumPrediction

Use this element to enable or disable the detection and neutralisation of the Sequence Number Prediction attack. Refer to Quest-ce que lattaque Sequence Number Prediction ? on page 402.

If you set the seqNumPrediction element to enabled, then the firewall manipulates the initial sequence number with a new sequence number generated by the firewall making it difficult to guess the sequence number for the attacker. seqNumOutOfRange Use this element to enable or disable the detection and neutralisation of the Sequence Number Out Of Range attack. Refer to Quest-ce que lattaque Sequence Number Out Of Range ? on page 402. Default:disabled Range: enabled / disabled

If you set the seqNumOutOfRange element to enabled, then the firewall drops the packets with sequence numbers that are out of range. icmpErrorMessages Use this element to enable or disable the detection and neutralisation of the ICMP Error Message attack. Refer to Qu'est-ce que l'attaque ICMP Error Message ? on page 402. Default:disabled Range: enabled / disabled

If you set the icmpErrorMessages element to enabled, then the firewall drops ICMP error packets with a destination different from the internet SNet.

219 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/ip/router/firewall/log Use this attribute to enable or disable logging and to determine what is logged. The log structure contains the following elements: Element mode Description Use this element to enable or disable logging.

Default:Range: structure, see below

The log information can be checked in the log status attribute. Refer to telindus1423Router/ip/router/firewall/log on page 376. attacks Use this element to enable or disable, per type of attack, whether it is logged or not. The attacks structure contains the following elements: synFlooding. Use this element to enable or disable the logging of a SYN Flooding attack. Refer to Qu'est-ce que l'attaque SYN Flooding ? on page 401. pingOfDeath. Use this element to enable or disable the logging of a Ping Of Death attack. Refer to Quest-ce quune attaque Ping Of Death ? on page 403.

Default:enabled Range: enabled / disabled

Default:Range: structure, see below

Default:disabled Range: enabled / disabled

Default:disabled Range: enabled / disabled

ipSpoofing. Use this element to enable or disable the Default:disabled logging of an IP Spoofing attack. Refer to Qu'est- Range: enabled / disabled ce que l'attaque IP Spoofing ? on page 403. winNuke. Use this element to enable or disable the logging of a WinNuke attack. Refer to Qu'est-ce que l'attaque WinNuke ? on page 402. Default:disabled Range: enabled / disabled

ipOptionAttack. Use this element to enable or disable Default:disabled the logging of an IP Option attack. Refer to Qu'est- Range: enabled / disabled ce que l'attaque IP Option ? on page 403.

All these attacks are logged with the priority alert.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 220 Configuration attributes

Element general

Description Use this element to enable or disable some general loggings. The general structure contains the following elements: systemErrorMessages. Use this element to enable or Default:enabled disable the logging of system error messages. E.g. Range: enabled / disabled memory allocation problems, module initialisation problems, resource allocation problems. This is logged with the priority notice. denyPolicies. Use this element to enable or disable Default:enabled the logging of deny policies. I.e. a policy of which Range: enabled / disabled the action is set to deny. This is logged with the priority alert. Note that this is only logged if for this policy, the log element is set to enabled. allowPolicies. Use this element to enable or disable Default:disabled the logging of allow policies. I.e. a policy of which Range: enabled / disabled the action is set to allow. This is logged with the priority info. Note that this is only logged if for this policy, the log element is set to enabled. dataInspection. Use this element to enable or disable Default:disabled the logging of data that is not allowed. E.g. due to Range: enabled / disabled memory allocation problems, buffer limits, invalid requests. This is logged with the priority warning. generalAttacks. Use this element to enable or disable Default:enabled the general logging of attacks. You can then spec- Range: enabled / disabled ify per attack whether it is logged or not. Refer to the attacks element. This is logged with the priority alert. unavailablePolicies. Use this element to enable or dis- Default:disabled able the logging of unavailable policies. I.e. when Range: enabled / disabled no matching policy could be found. This is logged with the priority warning. accessStatistics. Use this element to enable or disa- Default:disabled ble the logging of access statistics. E.g. logs about Range: enabled / disabled connection termination, closing, time-out, transferred bytes. This is logged with the priority info. Note that this is only logged if for this policy, the log element is set to enabled. verbose. Use this element to enable or disable the logging of ICMP messages, DNS requests and replies. This is logged with the priority info. Default:disabled Range: enabled / disabled Default:Range: structure, see below

221 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element thresholds

Description Use this element to set the threshold to trigger the log- Default:ging. The threshold is set per log entry type, except for Range: structure, see below denyPolicies and allowPolicies. In that case the threshold is set per policy. Logging thresholds are provided so that the logging system does not get flooded with a huge number of duplicate logs in case the firewall or the corporate network connected to it is under attack. The thresholds structure contains the following elements: attack. Use this element to determine the number of Default:50 attacks that should occur before they are logged. Range: 1 300 general. Use this element to determine the number of general events that should occur before they are logged. Default:20 Range: 1 300 Default:200 Range: 10 500

tableLength

Use this element to set the length of the log table. Note that changing this value clears the table.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 222 Configuration attributes

MR-1.13 Bridge configuration attributes


This section discusses the configuration attributes concerned with bridging. First it describes the general bridging configuration attributes. Then it explains the configuration attributes of the extra features as there are access listing, user priority mapping, etc The following gives an overview of this section: MR-1.13.1 - Bridge group configuration attributes on page 223 MR-1.13.2 - Bridge access list configuration attributes on page 233

223 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.13.1 Bridge group configuration attributes


This section describes the following configuration attributes: telindus1423Router/bridge/bridgeGroup/name on page 224 telindus1423Router/bridge/bridgeGroup/ip on page 224 telindus1423Router/bridge/bridgeGroup/arp on page 224 telindus1423Router/bridge/bridgeGroup/bridgeCache on page 225 telindus1423Router/bridge/bridgeGroup/bridgeTimeOut on page 226 telindus1423Router/bridge/bridgeGroup/spanningTree on page 226 telindus1423Router/bridge/bridgeGroup/localAccess on page 227 telindus1423Router/bridge/bridgeGroup/macAddress on page 228 telindus1423Router/bridge/bridgeGroup/vlan on page 229 telindus1423Router/bridge/bridgeGroup/vlanSwitching on page 231

Telindus 1423 SHDSL Router User manual

Chapter MR-1 224 Configuration attributes

telindus1423Router/bridge/bridgeGroup/name Use this attribute to assign an administrative name to the bridge.

Default:bridge Range: 1 24 characters

This attribute is only present on the default bridge group (bridgeGroup), not on the user instantiatable bridge groups (vpnBridgeGroup[ ]). The user instantiatable bridge groups their name is the index name that you have to specify when you add the bridge group object to the containment tree (refer to MU-9.2.3 Ajout d'un groupe de pontage on page 292). telindus1423Router/bridge/bridgeGroup/ip Use this attribute to configure the IP related parameters of the bridge. Refer to MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:<empty> Range: structure, see below

Important remark If you set the configuration attribute telindus1423Router/lanInterface/mode to bridging, then the settings of the configuration attribute telindus1423Router/lanInterface/ip are ignored. As a result, if you want to manage the Telindus 1423 SHDSL Router via IP, you have to configure an IP address in the bridgeGroup object instead: telindus1423Router/bridge/bridgeGroup/ip.

telindus1423Router/bridge/bridgeGroup/arp Use this attribute to configure the Address Resolution Protocol (ARP) cache of the bridge.

Default:Range: structure, see below

Refer to telindus1423Router/lanInterface/arp on page 22 for a detailed description of the arp structure.

225 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/bridge/bridgeGroup/bridgeCache Use this attribute to determine how the bridge group should act: as a repeater, a filter or a switch. The bridgeCache attribute has the following values: Value disabled Description The bridge group acts as a repeater. All the data which originates from network 1 will be let through to network 2. Even if the data is not destined for that network.

Default:learning Range: enumerated, see below

learning

The bridge group acts as a filter. Data coming from network 1, will only be let through by the bridge if this data has a destination outside network 1 or if it has a broadcast or multicast address. This means the bridge filters the data and decreases the amount of data traffic on the separated LAN segments.

switching

The bridge group acts as a VLAN switch. VLANs on network 1 are switched to VLANs on network 2. Use the vlanSwitching attribute to specify which VLANs you want to switch. Refer to telindus1423Router/bridge/bridgeGroup/vlanSwitching on page 231 MU-10.3.4 - Configuration de la commutation VLAN on page 331

What is the bridge cache? Whereas the ARP cache keeps MAC address - IP address pairs, the bridge cache (also called address database) keeps MAC address - interface pairs. This allows the bridge to know which device is reachable through which interface. Refer to telindus1423Router/bridge/bridgeGroup/bridgeCache on page 380 for an example of such a table.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 226 Configuration attributes

telindus1423Router/bridge/bridgeGroup/bridgeTimeOut Use this attribute to set the ageing time of the bridge cache entries. The bridge cache time-out

Default:00000d 00h 05m 00s Range: 00000d 00h 00m 00s24855d 03h 14m 07s

If devices on the network are (re)moved then the MAC address - interface relation changes (refer to What is the bridge cache?). Therefore, the bridge cache entries are automatically removed from the cache after a fixed time-out. This time-out period can be set with the bridgeTimeOut attribute. This in case no topology change is detected, otherwise the time-out is equal to the value of the bridgeForwardDelay element of the spanningTree attribute. When checking the bridgeCache it may appear that some entries are present for a longer time than is configured with the bridgeTimeOut attribute. This because the entries in the bridgeCache are not monitored continuously, but once per minute. As a result, some entries may appear to be overtime. However, this should be no more than 75 seconds. telindus1423Router/bridge/bridgeGroup/spanningTree Use this attribute to configure the bridging related parameters.

Default:Range: structure, see below

Whereas the bridging attribute groups the bridging related parameters per interface, the spanningTree attribute groups the bridging related parameters of the bridge as a whole. The spanningTree structure contains the following elements: Element protocol Description Use this element to select the bridging protocol. The protocol element has the following values: Default:none Range: enumerated, see below

none. The Telindus 1423 SHDSL Router uses the self-learning principle. This means that the bridge itself learns which data it has to forward and which data it has to block. I.e. it builds its own bridging table. p802.1D. The Telindus 1423 SHDSL Router uses the self-learning principle in conjunction with the Spanning Tree protocol. Because Spanning Tree bridging is somewhat more complicated than selflearning bridging, an introduction is given in MU-9.1.2 - Le pont auto-apprentissage et le Transparent Spanning Tree on page 280.

When using Frame Relay or ATM encapsulation on the WAN interface together with the Spanning Tree protocol, every DLCI or PVC link is considered as a separate bridge port. Each link is than considered as a special kind of LAN with only both end points connected.

227 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

Element bridgePriority

Description Use this element to set the priority of the bridge. Default:32768 Range: 0 65535

The bridge its MAC address together with the bridgePriority element form a unique bridge identifier. This identifier is used to determine which bridge becomes the root bridge. The bridge with the lowest bridgePriority value becomes the root bridge. If two bridges have the same bridgePriority value, then the bridge with the lowest MAC address becomes the root bridge. bridgeMaxAge Use this element to set the time the bridge retains bridging information before discarding it. Default:00000d 00h 00m 20s Range: 00000d 00h 00m 06s 00000d 00h 00m 40s Default:00000d 00h 00m 02s Range: 00000d 00h 00m 01s 00000d 00h 00m 10s

bridgeHelloTime

Use this element to set the interval by which the root bridge sends Configuration BPDUs, also called Hello messages. Use this element to set

bridgeForwardDelay

Default:00000d 00h 00m 15s the delay a bridge port applies to move from listen- Range: 00000d 00h 00m 04s 00000d 00h 00m 30s ing state to learning state or from learning state to forwarding state. Refer to MU-9.1.5 - Etats des ports de pontage du Spanning Tree on page 283 for more information on the possible states of a bridge port.

the time-out (or ageing) for purging MAC addresses from the bridge cache in case a topology change is detected.

telindus1423Router/bridge/bridgeGroup/localAccess Use this attribute to allow or deny access to the bridge group itself. The localAccess attribute has the following values: Value permitted restricted Description

Default:permitted Range: enumerated, see below

Bridged packets can be delivered to the bridge group itself. No bridged packets can be delivered to the bridge group itself. This adds some security, because the Telindus 1423 SHDSL Router can not be accessed through the bridge group. You could for instance create one bridge group specifically for management purposes. In this bridge group, set the localAccess attribute to perimitted. the actual data coming from the customers. In this bridge group, set the localAccess attribute to restricted. In this way, the customer can never access the Telindus 1423 SHDSL Router itself.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 228 Configuration attributes

telindus1423Router/bridge/bridgeGroup/macAddress Use this attribute to determine whether a fixed, a random or a user defined MAC address is associated with the bridge group. The macAddress attribute has the following values: Value deviceMac Description

Default:<deviceMac> lan Range: choice, see below

A MAC address from the Telindus 1423 SHDSL Router itself is associated with the bridge group. Use the second part of the macAddress attribute to define which MAC address has to be selected: lan. The LAN interface its MAC address is associated with the bridge group. random. The Telindus 1423 SHDSL Router generates a random MAC address and this is associated with the bridge group.

userMac

A user defined MAC address is associated with the bridge group. Use the second part of the macAddress attribute to enter the MAC address.

229 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/bridge/bridgeGroup/vlan Use this attribute to set up (a) VLAN(s) on the bridge group in case you want to manage the Telindus 1423 SHDSL Router over (a) VLAN(s).

Default:<empty> Range: table, see below

Although the Telindus 1423 SHDSL Router bridges VLAN tagged frames when connected to a VLAN aware switch, the Telindus 1423 SHDSL Router itself can only be managed via IP if a VLAN is configured on the bridge group. In other words, if you want that the data carried by a VLAN can be delivered to the protocol stack of the Telindus 1423 SHDSL Router (e.g. so that it can be routed), then you have to configure the VLAN on the bridge group. The vlan table contains the following elements: Element name Description Use this element to assign an administrative name to the VLAN. Use this element to activate (up) or deactivate (down) the VLAN. Use this element to configure the IP related parameters of the VLAN. Refer to vlan MU-5.2 - Configuration d'adresses IP on page 59 for general information on configuring IP addresses. MU-5.2.3 - Explication de la structure ip on page 63 for a detailed description of the ip structure. Default:Range: structure, see below Default:<empty> Range: 0 24 characters Default:up Range: up / down Default:Range: structure, see below

adminStatus

ip

Use this element to configure the specific VLAN parameters.

Refer to telindus1423Router/bridge/bridgeGroup/vlan/vlan on page 230 for a detailed description of the vlan structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 230 Configuration attributes

telindus1423Router/bridge/bridgeGroup/vlan/vlan Use this structure to configure the specific VLAN related parameters of a VLAN. The vlan structure contains the following elements: Element vid Description Use this element to set the VLAN ID.

Default:Range: structure, see below

Default:1 Range: 1 4095 Default:0 Range: 0 7

txCos

Use this element to set the default user priority (802.1P, also called COS) of the transmitted VLAN frames.

changeTos

Use this element to enable or disable the COS to TOS Default:disabled mapping. Range: enabled / disabled If you set the changeTos attribute to disabled, then the element cosTosMap is ignored. Note that the TOS to COS mapping is always enabled, irrespective with the setting of the changeTos attribute.

cosTosMap

Use this element to determine how the VLAN user pri- Default:ority (COS) maps onto the IP TOS byte value. Range: structure, see below The cosTosMap structure contains the following elements: p0 p7. Use these elements to define which VLAN user priority (0 up to 7) maps onto which IP TOS byte value (0 up to 255). Default:0 Range: 0 7 Default:Range: table, see below

tosCosMap

Use this element to determine how the IP TOS byte value maps onto the VLAN user priority (COS). The tosCosMap table contains the following elements: startTos and endTos. Use these elements to set the TOS byte value range that has to be mapped. cos. Use this element to set the VLAN user priority (COS) value on which the specified TOS byte value range has to be mapped.

Default:0 Range: 0 255 Default:0 Range: 0 7 Default:Range: structure, see below

arp

Use this element to configure the Address Resolution Protocol (ARP) cache.

Refer to telindus1423Router/lanInterface/arp on page 22 for more information.

231 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/bridge/bridgeGroup/vlanSwitching

Use this attribute specify which VLANs you want to switch in case the bridge group is used as a VLAN switch. Note that you have to enable VLAN switching on the bridge group by setting the bridgeCache attribute to switching. Refer to telindus1423Router/bridge/bridgeGroup/bridgeCache on page 225 MU-10.3.4 - Configuration de la commutation VLAN on page 331

Default:<empty> Range: table, see below

The vlanSwitching attribute contains the following elements: Element sourceIntf Description Use this element to enter the name of the (physical) source interface which carries the VLAN that has to be switched. Use this element to enter the VLAN ID of the VLAN that has to be switched. Stripping the VLAN tag Entering 0 as VLAN ID strips the VLAN tag of the Ethernet frame. Example: suppose you enter 1 as srcVlan and 0 as dstVlan. So VLAN 1 is switched from the source interface to the destination interface. But before it is sent out on the destination interface, the VLAN tag is stripped. So instead of VLAN tagged Ethernet frames, plain Ethernet frames are sent out. In the opposite direction however, the VLAN tag is added again. sourcePMap Use this element to, if desired, remap the VLAN prior- Default:ities. The priorities defined in the sourcePMap are Range: structure, see below applied after the VLAN is switched from destinationVlan to sourceVlan. The structure contains the elements p0 up to p7, which represent priority 0 up to priority 7. If you want to remap priorities, then enter the new priority value under one of these priority elements. Example: suppose you want to remap priority 5 to priority 7, then enter 7 as value of the p5 element. destinationIntf Use this element to enter the name of the (physical) destination interface which carries the VLAN when it has been switched. Default:<empty> Range: 0 24 characters Default:<empty> Range: 0 24 characters Default:1 Range: 0 4094

sourceVlan

The destination interface can also be a bridge group, in that case just enter the name of the bridge group. destinationVlan Use this element to enter the VLAN ID of the VLAN when it has been switched. Default:1 Range: 0 4094

Entering 0 as VLAN ID strips the VLAN tag of the Ethernet frame. Refer to Stripping the VLAN tag for more information.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 232 Configuration attributes

Element destinationPMap

Description Use this element to, if desired, remap the VLAN prior- Default:ities. The priorities defined in the destinationPMap are Range: structure, see below applied after the VLAN is switched from sourceVlan to destinationVlan. Refer to the sourcePMap element for more information on this structure.

Note that the switching always happens in both directions (bidirectional, i.e. from source to destination and vice versa).

233 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.13.2 Bridge access list configuration attributes


This section describes the following configuration attributes: telindus1423Router/bridge/accessList[ ]/macAddress on page 234

This object is not present in the containment tree by default. If you want to use the feature associated with this object, then add the object first. Refer to MU-4.4 - Ajout d'un objet dans l'arborescence on page 50.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 234 Configuration attributes

telindus1423Router/bridge/accessList[ ]/macAddress Use this attribute to filter bridged frames based on the source MAC address.

Default:<empty> Range: table, see below

This is an outbound access list. Packets coming from MAC addresses that are specified in the access list are not sent out on the interface on which the access list is applied. To apply the access list on a bridge interface, type the index name of the accessList[ ] object as value of the accessList element in the bridging structure. Example If you created an accessList object with index name my_access_list (i.e. accessList[my_access_list]) and you want to apply this access list on a bridge interface, then enter the index name as value for the accessList element in the bridging structure.

235 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.14 SNMP configuration attributes


This section describes the following configuration attributes: telindus1423Router/snmp/trapDestinations on page 236 telindus1423Router/snmp/mib2Traps on page 236

Telindus 1423 SHDSL Router User manual

Chapter MR-1 236 Configuration attributes

telindus1423Router/snmp/trapDestinations Use this attribute to define to which IP address the SNMP traps have to be sent.

Default:<empty> Range: table, see below

The Telindus 1423 SHDSL Router translates all alarm status changes into SNMP traps. These traps can then be sent to a management system. To enable this, configure in the trapDestinations table the IP addresses to which the traps have to be sent. If the trapDestinations table is empty then no traps are sent. The trapDestinations table contains the following elements: Element address Description Use this element to set the IP address of the manage- Default:0.0.0.0 ment station to which the SNMP trap messages have Range: up to 255.255.255.255 to be sent. Use this element to set the community string which is Default:public included in the SNMP traps that are sent to the man- Range: 0 20 characters agement station. It is used as a password in the SNMP communication. Give it the same value as on your SNMP management station.

community

telindus1423Router/snmp/mib2Traps Use this attribute to enable (on) or disable (off) the sending of SNMP traps as MIB2 traps. If you want to send the SNMP traps as MIB2 traps, proceed as follows: Step 1 Action

Default:off Range: on / off

Select the snmp/trapDestinations attribute. Add an entry to this table for each network management station that should receive SNMP traps. Refer to telindus1423Router/snmp/trapDestinations on page 236. Configure the mib2Traps attribute: on. The alarms coldBoot, warmBoot and linkDown are sent as MIB2 traps instead of enterprise specific (private) MIB traps. off. All alarms are sent as enterprise specific (private) MIB traps.

Set for each object of the Telindus 1423 SHDSL Router: the alarms that you want to send using the attribute alarmMask. the importance of each alarm using the attribute alarmLevel.

By default only the most important alarms are enabled.

237 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

MR-1.15 Management configuration attributes


This section describes the following configuration attributes: telindus1423Router/management/sysLog on page 238 telindus1423Router/management/timeServer on page 240 telindus1423Router/management/timeZone on page 240 telindus1423Router/management/cms2Address on page 241 telindus1423Router/management/accessList on page 242 telindus1423Router/management/snmp on page 243 telindus1423Router/management/telnet on page 243 telindus1423Router/management/tftp on page 243 telindus1423Router/management/ftp on page 243 telindus1423Router/management/accessPolicy on page 243 telindus1423Router/management/consoleNoTrafficTimeOut on page 244 telindus1423Router/management/alarmFilter on page 244 telindus1423Router/management/timedStatsAvailability on page 244 telindus1423Router/management/atwinGraphics on page 245 telindus1423Router/management/loginControl on page 246 telindus1423Router/management/ctrlPortProtocol on page 247 telindus1423Router/management/loopback/ipAddress on page 247 telindus1423Router/management/loopback/ipNetMask on page 247

Telindus 1423 SHDSL Router User manual

Chapter MR-1 238 Configuration attributes

telindus1423Router/management/sysLog Use this attribute to configure the sending of syslog messages. The sysLog structure contains the following elements: Element separator Description Use this element to specify the separator character in the syslog messages. Refer to What is syslog? on page 238 for more information on the syslog mesages. Use this element to enter the IP address(es) of the syslog server(s). Up to 3 addresses can be entered.

Default:Range: structure, see below

Default:; Range: 1 character

destinations

Default:<empty> Range: table, see below

As soon a valid syslog server address is entered, a syslog message is sent to this server for each (unmasked) alarm that occurs. If multiple syslog server addresses are sent, then the syslog messages are sent to all servers. The syslog messages are not sent in case the interface or the route through which they have to be sent is down. In this case, the syslog messages are kept in a history list (maximum 31 messages). These pending messages are sent as soon as the interface and/or route comes up again. What is syslog? The syslog protocol (RFC 3164) is used for the transmission of event notification messages across networks. A syslog message is sent on UDP port 514. It has the following format:
"<facility*8+severity> date hostname message"

where the priority value is the number contained within the angle brackets, i.e. <facility*8+severity>.
facility is a part of the priority value: facility = 23 * 8 = 184

In this case no facility has been explicitly assigned and therefore a "local use" facility is used (numerical code value 23).
severity is a part of the priority value: severity = 6 - <alarmLevel of the alarm>

The severity only ranges from 0 up to 6. So in case the alarm level of an alarm is bigger than 6, the severity is limited to 0.
date is the date the syslog message was generated: Mmm dd hh:mm:ss (e.g. Jan 01 12:45:55). hostname is the IP address of the interface through which the syslog message was sent (e.g. 10.0.28.3). message is the alarm message. It has the following format: "alarm:<sysName>;<realTimeClock>;<sysUpTime>;<devSeverityLevel>;<severityLevel>;<alarmMessage>"

where <sysName> is the sysName configured in the Telindus 1423 SHDSL Router. <realTimeClock> is the value of the real time clock at the moment the alarm was generated: dd/ mm/yy hh:mm:ss (e.g. 25/12/02 22:45:55). <sysUpTime> is the system up-time of the Telindus 1423 SHDSL Router at the moment the alarm

was generated: xxxxxd xxh xxm xxs (e.g. 00025d 08h 45m 55s).

239 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

<devSeverityLvl> is the device severity level: devSeverityLvl = 6 - <totalAlarmLevel of the device>. The device severity level only ranges from 0 up to 6. So in case the total alarm level

of the Telindus 1423 SHDSL Router is bigger than 6, the device severity level is limited to 0. <severityLvl> is the alarm severity level: severityLvl = 6 - <alarmLevel of the alarm>.

The alarm severity level only ranges from 0 up to 6. So in case the alarm level of an alarm is bigger than 6, the alarm severity level is limited to 0. <alarmMessage> is the alarm itself: path.alarmName on|off (e.g. telindus1423Router/lanInterface.linkDown on). ; is the separator character. If desired, you can specify another separator character. Refer to the configuration element separator on page 238.

Example: The following gives an example of a complete syslog message. In this case, the separator is the ^ character.
"<189>Feb 28 16:56:15 10.0.28.2 alarm:telindus1423Router^28/02/03 16:56:15^130^3^5^ telindus1423Router.configChanged on"

Telindus 1423 SHDSL Router User manual

Chapter MR-1 240 Configuration attributes

telindus1423Router/management/timeServer

Use this attribute to enter the IP address of the SNTP time server with which the Telindus 1423 SHDSL Router can synchronise its clock. Date and time are displayed in the status attributes telindus1423Router/date and telindus1423Router/time. You can also set the time zone and the daylight saving time using the configuration attribute telindus1423Router/management/timeZone on page 240. What is SNTP? Short for Simple Network Time Protocol, a simplified version of NTP. SNTP is used when the ultimate performance of the full NTP implementation described in RFC 1305 is not needed or justified. The Telindus 1423 SHDSL Router can only act as an SNTP client, not as an SNTP server. telindus1423Router/management/timeZone Use this attribute to set the time zone when using an SNTP time server. Refer to telindus1423Router/management/timeServer on page 240. The timeZone structure contains the following elements: Element timeZone Description Use this element to set the time zone. The timeZone element has the following values: utc, utc+1 up to utc+12 and utc-1 up to utc-12. What is UTC? UTC is the coordinated universal time, formerly known as Greenwich mean time (GMT). It is the international time standard. daylightSaving Use this element to set the daylight saving time. The daylightSaving element has the following values: europeanUnion and none. Default:europeanUnion Range: europeanUnion / none Default:utc+1 Range: enumerated, see below Default:Range: structure, see below

Default:0.0.0.0 Range: up to 255.255.255.255

241 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/management/cms2Address Use this attribute to assign an absolute address to the Telindus 1423 SHDSL Router. What is relative and absolute addressing?

Default:0 Range: 0 65535

If you want to connect with TMA to a OneAccess device, you have to specify the address of the device in the Connect window. Refer to MU-4 - Maintenance du Routeur Telindus 1423 SHDSL on page 35. There are two different address types: relative and absolute. The following table explains the difference between these address types: Type relative Description This type of addressing is meant for a network topology where the OneAccess devices are connected in-line on management level. I.e. with extended management connections between two OneAccess devices. An extended management connection is realised with a crossed cable between the control connectors of two OneAccess devices.

To enable relative addressing, no address has to be specified in the OneAccess device. In other words, leave the cms2Address attribute at its default value, being 0. absolute This type of addressing is meant for a network topology where the OneAccess devices are not connected in-line on management level. I.e. when there is a digital multipoint device present (e.g. an Orchid DM).

To enable absolute addressing, an address has to be specified in the OneAccess device. Do this using the cms2Address attribute. The absolute addressing range goes from 1 up to 65535.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 242 Configuration attributes

telindus1423Router/management/accessList

Use this attribute to set up an inbound simple access list on the protocol stack. Refer to MU-10.2 - Configuration des restrictions d'accs on page 312 for more information on inbound access lists. The access list filters incoming traffic, based on the source IP address. You can specify multiple entries within the access list. When more than one entry applies to the same packet, then only the most specific one is taken in consideration. I.e. the entry covering the smallest range. If not one entry matches, then the packet is dropped. If the access list is empty, then all packets are forwarded. The accessList table contains the following elements: Element sourceAddress Description Use this element to set the IP source address of the Default:0.0.0.0 packet. The address may be a (sub)network address. Range: up to 255.255.255.255 Use this element to set the IP subnet mask for the Default:255.255.255.255 sourceAddress. By combining an IP address with a Range: up to 255.255.255.255 mask you can uniquely identify a range of addresses. Use this element to set the action when a packet arrives with a source IP address that falls within the specified address range. The possible actions are: deny. The packet is dropped. allow. The packet is forwarded. Default:deny Range: enumerated, see below

Default:<empty> Range: table, see below

mask

action

If you specify one entry or multiple entries for which the action is set to deny, then also specify at least one entry for which the action is set to allow. Else all packets are dropped! Example 1 This example shows an access list that only allows traffic from subnet 192.168.48.0, except for packets from station 192.168.48.10. Example 2 The next example shows an access list that allows all traffic, except the traffic from subnet 192.168.48.0. The second entry is the rule to add if you want all packets that do not match the previous entries to be allowed.

243 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/management/accessPolicy Use this attribute to apply an inbound extended access list on the protocol stack.

Default:<empty> Range: 0 24 characters

Do this by entering the index name of the traffic policy you want to apply. You can create the traffic policy itself by adding a trafficPolicy object and by configuring the attributes in this object. Important remark It is possible that the Telindus 1423 SHDSL Router has to answer to DHCP requests or terminate L2TP and IPSec tunnels. In that case, if you set up an access list on the protocol stack, then make sure that these protocols are allowed access to the protocol stack. Refer to MU-10.2 - Configuration des restrictions d'accs on page 312 for more information on inbound access lists. Example If you created a trafficPolicy object with index name my_traffic_policy (i.e. trafficPolicy[my_traffic_policy]) and you want to apply this traffic policy here, then enter the index name as value for the trafficPolicy element. telindus1423Router/management/snmp Use this attribute to accept (enabled) or discard (disabled) SNMP requests. telindus1423Router/management/telnet Use this attribute to accept (enabled) or discard (disabled) Telnet sessions. Default:enabled Range: enabled / disabled

Default:enabled Range: enabled / disabled

Use this attribute also to accept (enabled) or discard (disabled) HTTP (Web Interface) sessions.

telindus1423Router/management/tftp Use this attribute to accept (enabled) or discard (disabled) TFTP sessions. telindus1423Router/management/ftp Use this attribute to accept (enabled) or discard (disabled) FTP sessions.

Default:enabled Range: enabled / disabled

Default:enabled Range: enabled / disabled

Telindus 1423 SHDSL Router User manual

Chapter MR-1 244 Configuration attributes

telindus1423Router/management/consoleNoTrafficTimeOut

Default:00000d 00h 30m 00s Range: 00000d 00h 00m 00s Use this attribute to set the time-out period after which a management ses24855d 03h 14m 07s sion is closed when there is no user interaction. The purpose of such a timer is to protect the Telindus 1423 SHDSL Router against unauthorised access in case the last user did not close his session. This timer applies on terminal (emulation) sessions (through the control port). Telnet and HTTP sessions (over IP).

It does not apply on TMA or TMA CLI sessions (nor through the control port, nor over IP). They have a fixed time-out of 15 minutes. telindus1423Router/management/alarmFilter Use this attribute to selectively ignore / drop alarms in TMA for HP OpenView if these alarms are below a certain level. Default:0 Range: 0 50000

The filter number that you define using the alarmFilter attribute, has to correspond with a filter that you have to define in the Alarm Manager of TMA for HP OpenView. In the Alarm Manager, it is possible to specify a minimum alarm level that is needed before alarms are logged in HP OpenView. This can be specified for each filter number. telindus1423Router/management/timedStatsAvailability Default:basic Range: enumerated, see below

Use this attribute to determine whether the nested tables in the timed performance statistics (i.e. 2 hour, 24 hour and 7 days performance statistics) are visible or not. The timedStatsAvailability attribute has the following values: Value none Description

Only the first level timed performance statistics are available. In other words, the nested tables (i.e. a table in a table) in the timed performance statistics are not displayed. The full performance statistics are available on the physical interfaces only (e.g. the LAN interface, etc.). Not on the logical interfaces (e.g. a PVC, a VLAN, etc.). The full performance statistics are available on both the physical (e.g. the LAN interface, etc.) and logical (e.g. a PVC, a VLAN, etc.) interfaces If you have a lot of PVCs this may require quite some memory space and processing power.

basic full

245 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/management/atwinGraphics Use this attribute to enable or disable the graphical symbols in the ATWIN user interface.

Default:enabled Range: enabled / disabled

One of the tools that allows you to manage the Telindus 1423 SHDSL Router is ATWIN (refer to MU-1.4 - Outils de gestion et de maintenance on page 8). ATWIN is a basic, menu-driven user interface. You can start it using a terminal (emulation program) on the control port or using Telnet on an IP interface (e.g. the LAN interface) and by typing atwin at the command prompt (refer to the Maintenance tools manual (PDF) for more information). By default, ATWIN uses graphical symbols to draw the borders of the windows. In some cases however, these graphical symbols are displayed incorrectly. In that case you can choose to disable the graphical symbols. By doing so, the window borders are drawn using + and - signs. The atwinGraphics attribute has the following values: Value enabled Description The ATWIN window borders are drawn using graphical symbols.

disabled

The ATWIN window borders are drawn using + and - signs.

Telindus 1423 SHDSL Router User manual

Chapter MR-1 246 Configuration attributes

telindus1423Router/management/loginControl Use this attribute to configure the monitoring of management access to the device. The loginControl structure contains the following elements: Element alarm Description

Default:Range: structure, see below

Use this element to determine when the access failure Default:alarm should be logged in the accessLog table and a Range: structure, see below syslog message is sent. The alarm structure contains the following elements: maxFailCnt. Use this element to set the access failure alarm threshold. If this value is exceeded within the access failure alarm period, then the access failure alarm is raised. Default:3 Range: 0 100

period. Use this element to set the access failure Default:00000d 00h 15m 00s alarm period. If within this period the access failure Range: 00000d 00h 00m 00s 00001d 00h 00m 00s alarm threshold is exceeded, then the access failure alarm is raised.

Example By default, if within a period of 15 minutes 3 access attempts fail, then the access failure alarm is logged in the accessLog table as follows:
Jul 13 11:00:00 00000d 00h 15m 58s accessFailureOn

If within the consecutive period of 15 minutes no or less than 3 access attempts fail, then the access failure alarm is cleared in the accessLog table as follows:
Jul 13 11:15:00 00000d 00h 30m 58s accessFailureOff

Also see telindus1423Router/management/accessLog on page 386.

247 Telindus 1423 SHDSL Router User manual

Chapter MR-1 Configuration attributes

telindus1423Router/management/ctrlPortProtocol Use this attribute to set the function of the control connector. The ctrlPortProtocol attribute has the following values: Value management Description

Default:console Range: enumerated, see below

Select this value if you want to connect the control connector of the Telindus 1423 SHDSL Router to a management concentrator for management purposes. the control connector of another OneAccess device using a crossed cable (i.e. they are connected back-to-back) in order to create an extended management link. Refer to What is relative and absolute addressing? on page 241 for more information on extended management links.

When connecting the control connector of the Telindus 1423 SHDSL Router to a COM port of your computer, you can still open a TMA session on the Telindus 1423 SHDSL Router. You can however not open a CLI or ATWIN session. console Select this value if you want to connect the control connector of the Telindus 1423 SHDSL Router to a COM port of your computer in order to manage the Telindus 1423 SHDSL Router using TMA, CLI, ATWIN, etc.

telindus1423Router/management/loopback/ipAddress Use this attribute to assign an IP address to the loopback interface.

Default:0.0.0.0 Range: up to 255.255.255.255

The loopback interface is a software interface which can be used for management purposes. This interface is always up, regardless of the state of the physical interfaces. This means the router will always respond to ICMP echo requests sent to this address. In every other respect the loopback address behaves the same as an IP address of a physical interface. If the loopback address is used and RIP is active, then a host route to the loopback address is included in the RIP updates. telindus1423Router/management/loopback/ipNetMask Use this attribute to assign an IP netmask to the loopback interface. Also see telindus1423Router/management/loopback/ipAddress on page 247. Default:0.0.0.0 Range: up to 255.255.255.255

Telindus 1423 SHDSL Router User manual

Chapter MR-2 248 Status attributes

MR-2 Status attributes


This chapter discusses the status attributes of the Telindus 1423 SHDSL Router. The following gives an overview of this chapter: MR-2.1 - Status attribute overview on page 249 MR-2.2 - General status attributes on page 258 MR-2.3 - LAN interface status attributes on page 262 MR-2.4 - WAN interface status attributes on page 271 MR-2.5 - Encapsulation status attributes on page 274 MR-2.6 - SHDSL line status attributes on page 297 MR-2.7 - End and repeater status attributes on page 302 MR-2.8 - BRI status attributes on page 306 MR-2.9 - AUX status attributes on page 318 MR-2.10 - Profile status attributes on page 321 MR-2.11 - Dial maps status attributes on page 323 MR-2.12 - Bundle status attributes on page 326 MR-2.13 - Router status attributes on page 334 MR-2.14 - Bridge status attributes on page 377 MR-2.15 - Management status attributes on page 384 MR-2.16 - File system status attributes on page 389 MR-2.17 - Operating system status attributes on page 399

249 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.1 Status attribute overview


Refer to MU-4.3 - Les objets dans l'arborescence Routeur Telindus 1423 SHDSL on page 46 to find out which objects are present by default, which ones you can add yourself and which ones are added automatically. > telindus1423Router sysDescr sysObjectID sysUpTime sysServices flash1Version flash2Version activeFlash flashVersions bootVersion tdreVersion messages deviceId configurationSaving date time Action: Set Date Action: Set Time >> lanInterface ifDescr ifType ifOperStatus ifLastChange ifSpeed ifMtu ip macAddress arpCache bridging adapter1 vlan ports2 ipAdEntBcastAddr ipAdEntReasmMaxSize Action: clearArpCache

1. Only present on the single port LAN interface. 2. Only present on the 4 port LAN interface.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 250 Status attributes

>> wanInterface ifDescr ifType ifOperStatus ifLastChange ifSpeed ifMtu >>> atm atmSync pvcTable vp >>> frameRelay ip dlciTable lmi cllmLastCongestionCause >>> ppp ip bridging lcpState ipcpState bcpState ccpState lcpMyOptions lcpHisOptions ipcpMyOptions ipcpHisOptions bcpMyOptions bcpHisOptions ccpMyOptions ccpHisOptions myCompressionRatio hisCompressionRatio myAuthenticationStatus hisAuthenticationStatus >>> hdlc bridging

251 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

>>> errorTest status type startSysUpTime duration blockSize programmablePattern receiveSample >>> line ifDescr ifType ifOperStatus ifSpeed region maxSpeedSearch maxSpeedResult linePairsSwapped numDiscoveredRepeaters eocAlarmThresholds Action: maximumSpeedSearch >>>> linePair[ ] ifSpeed ifOperStatus status timeSinceLastRetrain lineAttenuation signalNoise actualBitRate >>> repeater[ ] vendorId vendorModel vendorSerial vendorSoftVersion eocSoftVersion shdslVersion eocState eocAlarmThresholds Action: loopbackActivation >>>> networkLinePair[ ] lineAttenuation signalNoise >>>> customerLinePair[ ] lineAttenuation signalNoise

Telindus 1423 SHDSL Router User manual

Chapter MR-2 252 Status attributes

>>> end vendorId vendorModel vendorSerial vendorSoftVersion eocSoftVersion shdslVersion eocState eocAlarmThresholds >>>> linePair[ ] lineAttenuation signalNoise >> bri[1]3 ifDescr ifType ifOperStatus ifLastChange ifMtu l1Status lapdLinks bChannelUsage testType testStatus Action: loopbackActivation Action: clearIsdnCall >>> bChannel[1] ifDescr ifType ifOperStatus ifLastChange ifMtu dialMapEntry localPhoneNr remotePhoneNr callDirection

3. Only present on the Telindus 1423 SHDSL Router ISDN version.

253 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

>>>> ppp ip lcpState ipcpState ccpState lcpMyOptions lcpHisOptions ipcpMyOptions ipcpHisOptions ccpMyOptions ccpHisOptions myCompressionRatio hisCompressionRatio myAuthenticationStatus hisAuthenticationStatus >>> leasedLine[ ] ifDescr ifType ifOperStatus ifLastChange ifSpeed ifMtu >>>> frameRelay ip dlciTable lmi cllmLastCongestionCause >>>> ppp ip bridging lcpState ipcpState bcpState ccpState lcpMyOptions lcpHisOptions ipcpMyOptions ipcpHisOptions bcpMyOptions bcpHisOptions ccpMyOptions ccpHisOptions myCompressionRatio hisCompressionRatio myAuthenticationStatus hisAuthenticationStatus

Telindus 1423 SHDSL Router User manual

Chapter MR-2 254 Status attributes

>>>> hdlc bridging >>>> errorTest status type startSysUpTime duration blockSize programmablePattern receiveSample >>> bChannel[2] <Contains the same attributes as the bChannel[1] object.> >> bri[2]3 <Contains the same attributes as the bri[1] object.> >> profiles3 >>> dial >>>> defaultIsdn profileUsers >>>> isdn[ ] profileUsers >>> encapsulation >>>> defaultPpp profileUsers >>>> ppp[ ] profileUsers >>> forwardingMode >>>> defaultRouting profileUsers >>>> routing[ ] profileUsers >> dialMaps3 mapping

255 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

>> bundle >>> pppBundle[ ]4 ifDescr ifType ifOperStatus ifSpeed members ip bridging ipcpState ipcpMyOptions ipcpHisOptions bcpState bcpMyOptions bcpHisOptions multiclassInterfaces >>> isdnBundle[ ]5 ifDescr ifType ifOperStatus ifSpeed members ip ipcpState ipcpMyOptions ipcpHisOptions bacpState bacpMyOptions bacpHisOptions inBandwidth outBandwidth >> router routingTable igmpTable dhcpBinding dhcpStatistics dhcpBlackList radius dns dnsServers addrPools3 Action: unBlacklist

4. This is the PPP bundle in case of MLPPP on the WAN interface. 5. This is the PPP bundle in case of MLPPP on the ISDN interfaces.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 256 Status attributes

>>> defaultNat addresses >>> tunnels l2tpTunnels ipsecL2tpTunnels >>> ikeSA[ ] phase1 phase2 >>> ospf type routers externalRoutes asExtLsas >>>> area interfaces hosts neighbors routers stub routerLsas networkLsas summLsas asbrLsas nssaLsas >>> vrrp[ ] macAddress interfaces criticals >>> firewall sessions reverseSessions log sNet

257 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

>> bridge >>> bridgeGroup ifDescr ifType ifOperStatus ifMtu ip arpCache bridgeCache bridging spanningTree Action: clearArpCache Action: clearBridgeCache >> management cms2Address timeServer alarmLog accessLog >>> loopback ifDescr ifType ifOperStatus ifMtu ipAddress >> fileSystem fileList freeSpace status corruptBlocks trustedCertificates selfCertificates Action: Delete File Action: Rename File Action: loadTrustedCertificate Action: generateSelfCertificateRequest Action: loadSelfCertificate Action: getTrustedCertificateScep Action: getSelfCertificateScep Action: getCrlScep Action: saveCertificates >> operatingSystem taskInfo

Telindus 1423 SHDSL Router User manual

Chapter MR-2 258 Status attributes

MR-2.2 General status attributes


This section describes the following status attributes: telindus1423Router/sysDescr on page 259 telindus1423Router/sysObjectID on page 259 telindus1423Router/sysUpTime on page 259 telindus1423Router/sysServices on page 259 telindus1423Router/flash1Version on page 259 telindus1423Router/flash2Version on page 259 telindus1423Router/activeFlash on page 260 telindus1423Router/flashVersions on page 260 telindus1423Router/bootVersion on page 260 telindus1423Router/tdreVersion on page 260 telindus1423Router/messages on page 260 telindus1423Router/deviceId on page 261 telindus1423Router/configurationSaving on page 261 telindus1423Router/date on page 261 telindus1423Router/time on page 261

This section describes the following actions: telindus1423Router/Set Date on page 261 telindus1423Router/Set Time on page 261

259 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/sysDescr This attribute displays a textual description of the device. Example: Telindus 1423 SHDSL Router Txxxx/xxxxx 01/01/00 12:00 In this example the following parameters are visible: Telindus 1423 SHDSL Router is the device name. Txxxx/xxxxx is the application software code and version. 01/01/00 12:00 is the application software release date and time.

telindus1423Router/sysObjectID This attribute displays the identification string. telindus1423Router/sysUpTime This attribute displays the elapsed time since the last power-on or cold boot of the Telindus 1423 SHDSL Router. telindus1423Router/sysServices This attribute displays the service identification. telindus1423Router/flash1Version This attribute displays the code and version of the application software stored as CONTROL1. Example: Txxxx/xxxxx 01/01/00 12:00 In this example the following parameters are visible: Txxxx is the application software code for this device. /xxxxx is the application software version. 01/01/00 is the application software release date. 12:00 is the application software release time.

telindus1423Router/flash2Version This attribute displays the code and version of the application software stored as CONTROL2. Example: Txxxx/xxxxx 01/01/00 12:00 In this example the following parameters are visible: Txxxx is the application software code for this device. /xxxxx is the application software version. 01/01/00 is the application software release date. 12:00 is the application software release time.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 260 Status attributes

telindus1423Router/activeFlash This attribute displays which application software is currently active. Possible values are: Value flash1 flash2 Description The application software CONTROL1 is active. The application software CONTROL2 is active.

telindus1423Router/flashVersions This attribute displays how many application software versions can be stored in the file system. telindus1423Router/bootVersion This attribute displays the code, version, release date and time of the boot software currently used in the Telindus 1423 SHDSL Router. telindus1423Router/tdreVersion This attribute displays the version of the TDRE (OneAccess Dynamic Routing Engine) currently used in the Telindus 1423 SHDSL Router. Example: xxx.yyy.zzz In this example the following parameters are visible: xxx is the major TDRE version. This number is incremented only when a complete new version of the TDRE is released. yyy is the minor TDRE version. This number is incremented every time new features are added to the TDRE. zzz is the build version. This number is incremented every time a new TDRE version is built (also in case of bug fixes etc.).

telindus1423Router/messages This attribute displays informative and error messages, e.g. Reconfigured, Cold Boot, The messages table displays maximum 20 messages. If you open a TMA session on the Telindus 1423 SHDSL Router over IP, i.e. not through the control port, then the messages are also sent to the control port. This means that if you open a terminal emulation session on the control port, you can monitor these messages. If you hit the ENTER key, the messages stop and you get the (CLI) password prompt.

261 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/deviceId This attribute displays a unique code. This code is programmed into the Telindus 1423 SHDSL Router before it leaves the factory. You can use this code for inventory purposes. telindus1423Router/configurationSaving This attribute indicates when the Telindus 1423 SHDSL Router is writing its (new) configuration to the flash memory. Possible values are: Value busy Description The Telindus 1423 SHDSL Router is busy writing its configuration to the flash memory. During this state, do not power-down or reboot the Telindus 1423 SHDSL Router else the new configuration will be lost. The Telindus 1423 SHDSL Router has finished writing its configuration to the flash memory.

done

telindus1423Router/date This attribute displays the current date in the format dd/mm/yy (e.g. 01/01/00). telindus1423Router/time This attribute displays the current time in the format hh:mm:ss (e.g. 12:30:45). telindus1423Router/Set Date Use this action to set the current date. Enter the date as argument value in the format dd/mm/yy (e.g. 01/ 01/00). Then execute the action. telindus1423Router/Set Time Use this action to set the current time. Enter the time as argument value in the format hh:mm:ss (e.g. 12:30:45). Then execute the action.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 262 Status attributes

MR-2.3 LAN interface status attributes


This section describes the following status attributes: telindus1423Router/lanInterface/ifDescr on page 263 telindus1423Router/lanInterface/ifType on page 263 telindus1423Router/lanInterface/ifOperStatus on page 263 telindus1423Router/lanInterface/ifLastChange on page 263 telindus1423Router/lanInterface/ifSpeed on page 263 telindus1423Router/lanInterface/ifMtu on page 263 telindus1423Router/lanInterface/ip on page 264 telindus1423Router/lanInterface/macAddress on page 264 telindus1423Router/lanInterface/arpCache on page 265 telindus1423Router/lanInterface/bridging on page 266 telindus1423Router/lanInterface/adapter on page 268 telindus1423Router/lanInterface/vlan on page 268 telindus1423Router/lanInterface/ports on page 269 telindus1423Router/lanInterface/ipAdEntBcastAddr on page 269 telindus1423Router/lanInterface/ipAdEntReasmMaxSize on page 269

This section describes the following actions: telindus1423Router/lanInterface/clearArpCache on page 270

263 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/lanInterface/ifDescr This attribute displays the interface description. telindus1423Router/lanInterface/ifType This attribute displays the interface type. telindus1423Router/lanInterface/ifOperStatus This attribute displays the current operational status of the interface. telindus1423Router/lanInterface/ifLastChange This attribute shows the system-up time on the moment the interface entered its current operational state. I.e. the moment the value of the ifOperStatus status attribute changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status attribute. telindus1423Router/lanInterface/ifSpeed This attribute displays the interface speed in bits per second (bps). telindus1423Router/lanInterface/ifMtu This attribute displays the interface its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this interface.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 264 Status attributes

telindus1423Router/lanInterface/ip This attribute displays the IP information of the interface. The ip structure contains the following elements: Element status address netMask Description This is the current operational status of the IP layer (layer 3). This is the IP address of the interface. It is either configured or retrieved automatically. This is the IP subnet mask of the interface. It is either configured or retrieved automatically.

telindus1423Router/lanInterface/macAddress This attribute displays the MAC address of the Telindus 1423 SHDSL Router its LAN interface. The LAN interface has been allocated a fixed Ethernet address, also called MAC (Medium Access Control) address. The MAC address is globally unique and can not be modified. It is a 6 byte code, represented in hexadecimal format. Each byte in the code is separated by a colon. Refer to What is the ARP cache? on page 22 for more information on the MAC addresses.

265 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/lanInterface/arpCache This attribute displays all the MAC address - IP address pairs from ARP requests and replies received on the LAN interface. Refer to What is the ARP cache? on page 22 for more information. The arpCache table contains the following elements: Element macAddress ipAddress type Description This is the MAC address. This is the associated IP address. This is the ARP cache entry type. Possible values are: dynamic. The MAC - IP address pair is retrieved from an ARP request or reply message. static. The MAC - IP address pair is configured. There is only one static entry, i.e. the Telindus 1423 SHDSL Router its own IP and MAC address.

timeOut

This is the time the entry will remain in the ARP cache. For the static entry, this value is 0.

Example The following figure shows part of an ARP cache table as an example:

Telindus 1423 SHDSL Router User manual

Chapter MR-2 266 Status attributes

telindus1423Router/lanInterface/bridging This attribute displays the bridging status of the interface. The bridging structure contains the following elements: Element state Description This displays the current state of the port. Possible values are: disabled1. The port is not in use because of a management action. blocking. The port does not participate in frame forwarding. listening. The port prepares to participate in frame forwarding, but it does not update its MAC address database (also called bridge cache). learning. The port prepares to participate in frame forwarding, and it learns the present MAC addresses. forwarding1. The port participates in frame forwarding.

Refer to MU-9.1.5 - Etats des ports de pontage du Spanning Tree on page 283 for more information on port states2. subState2 This gives additional information on the port state. Possible values are: root. This is the port through which the root bridge can be reached. Consequently, the root bridge itself does not have a root port. All other bridges must have a root port. designated. This is the designated port for this (virtual) LAN. All ports of the root bridge are designated ports. alternate. This port is not active. Either because of a management action, or through protocol intervention.

designatedPriority2 designatedMac2

Together, these two elements form a unique bridge identifier. Depending whether the current port is a designated port or not, these two elements display the unique bridge identifier of the bridge to which this port belongs, in case of a designated port. the bridge believed to be the designated bridge for the LAN that is currently connected to this port, in all other cases.

This bridge identifier is used together with the designatedPortPriority and designatedPortId attributes to determine whether this port should be the designated port for the LAN that is currently connected to this port. to test the value of the bridge identifier parameter conveyed in received Configuration BPDUs.

267 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Element designatedPortPriority2 designatedPortId2

Description Together, these two elements form a unique port identifier. They display the unique port identifier of the bridge port through which the designated bridge transmits the configuration message information stored by this port. This port identifier is used together with the designatedPriority and designatedMac attributes to determine whether this port should be the designated port for the LAN that is currently connected to this port. by the management system to determine the topology of the bridged LAN.

topologyChangeAck
2

This displays the value of the Topology Change Acknowledgement flag in the next Configuration BPDU that will be transmitted on this port. This element is used to assess the need to set the Topology Change Acknowledgement flag in response to a received Topology Change Notification BPDU.

configurationPending2

This is used to determine whether a Configuration BPDU should be transmitted on this port after expiry of the hold timer. This avoids that Configuration BPDUs are transmitted too often, although ensuring that up-to-date information is transmitted.

1. These are the only possible port states for a bridge that is not running the Spanning Tree protocol (IEEE p802.1D). 2. Only relevant when the bridge uses the Spanning Tree Protocol.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 268 Status attributes

telindus1423Router/lanInterface/adapter Only present on the single port LAN interface. This attribute displays the Ethernet mode of the LAN interface as set using the telindus1423Router/lanInterface/adapter attribute. The adapter structure contains the following elements: Element speed duplex Description This is the Ethernet speed in Mbps. Possible values are: 10 and 100. This is the Ethernet duplex mode. Possible values are: halfDuplex and fullDuplex.

telindus1423Router/lanInterface/vlan This attribute displays the status of the VLAN(s) on this interface. The vlan table contains the following elements: Element name Description This is the name of the VLAN as you configured it. If you did not configure a name, then this element displays: <LAN interface name> vlan <VLAN ID>. E.g. lan vlan 2 ifOperStatus ifLastChange This is the current operational status of the VLAN. This is the system-up time on the moment the VLAN entered its current operational state. I.e. the moment the value of the ifOperStatus element changes (from up to down or vice versa), the system-up time value is written into the ifLastChange element. This displays the IP address and subnet mask of the VLAN. This displays the bridging information of the VLAN. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure. vlan This displays the specific VLAN related status information. The vlan structure contains the following elements: identifier. This element displays the VLAN identifier. arpCache. This element displays all the MAC address - IP address pairs from ARP requests and replies received on the VLAN. Refer to telindus1423Router/lanInterface/arpCache on page 265 for a detailed description of the arpCache table.

ip bridging

269 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/lanInterface/ports Only present on the 4 port Ethernet LAN interface. This attribute displays the status of each port of the 4 port Ethernet interface (including the local port, refer to Quest-ce que le commutateur Ethernet 4 ports ? on page 335). The ports table contains the following elements: Element portName Description This element displays the port name. Possible values are port1, port2, port3, port4 or localPort. Refer to Quest-ce que le commutateur Ethernet 4 ports ? on page 335 for more information on what the local port is. This element displays the current operational status of the port. This element displays the port speed in megabits per second (Mbps). This element displays the duplex mode of the port. Possible values are: fullDuplex or halfDuplex. This element displays the status of the Ethernet mode auto negotiation process. Possible values are: linkPartnerCaps disabled. The adapter element in ports configuration attribute is set to fixed. I.e. the auto negotiation process is disabled. done. The adapter element in ports configuration attribute is set to autoNegotiate and the auto negotiation process is finished. notDone. The adapter element in ports configuration attribute is set to autoNegotiate but the auto negotiation process is not finished (yet).

ifOperStatus speed duplex autoNegotiate

This element displays the Ethernet mode capabilities of the port its link partner. So this structure contains the following elements: 10Mb/halfDuplex, 10Mb/fullDuplex, 100Mb/ halfDuplex, 100Mb/fullDuplex, flowControl. Each element can have the value capable or notCapable. This element displays the VLAN membership of the port. The vlanMembership table contains the following elements: vid. This element displays the VLAN ID. portMembership. This element displays which port is a member (yes) or no member (no) of the corresponding VLAN.

vlanMembership

telindus1423Router/lanInterface/ipAdEntBcastAddr This attribute displays the value of the least-significant bit in the IP broadcast address. This address is used for sending packets on the interface which is associated with the IP address of this entry. The value applies to the general broadcast, the subnet and network broadcasts. telindus1423Router/lanInterface/ipAdEntReasmMaxSize This attribute displays the size of the largest IP packet which this entity can re-assemble from incoming IP fragmented packets received on this interface.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 270 Status attributes

telindus1423Router/lanInterface/clearArpCache Use this action to clear the ARP cache table.

271 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.4 WAN interface status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/ifDescr on page 272 telindus1423Router/wanInterface/ifType on page 272 telindus1423Router/wanInterface/ifSpeed on page 272 telindus1423Router/wanInterface/ifMtu on page 272 telindus1423Router/wanInterface/ifLastChange on page 272 telindus1423Router/wanInterface/ifOperStatus on page 272

Telindus 1423 SHDSL Router User manual

Chapter MR-2 272 Status attributes

telindus1423Router/wanInterface/ifDescr This attribute displays the interface description. telindus1423Router/wanInterface/ifType This attribute displays the interface type. telindus1423Router/wanInterface/ifSpeed This attribute displays the interface speed in bits per second (bps). telindus1423Router/wanInterface/ifMtu This attribute displays the interface its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this interface. telindus1423Router/wanInterface/ifLastChange This attribute shows the system-up time on the moment the interface entered its current operational state. I.e. the moment the value of the ifOperStatus status attribute changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status attribute. telindus1423Router/wanInterface/ifOperStatus This attribute displays the current operational status of the interface. Possible values are: Value up down Description The WAN interface is up, data transfer is possible. The WAN interface is down, data transfer is not possible. The ifOperStatus attribute is down in case of ATM, when the ATM synchronisation status is not synched. the line is not in data state. the bit pump is not synchronised.

PPP(oA), when LCP is not open. the line is not in data state. the bit pump is not synchronised.

Frame Relay, when LMI is not up. the line is not in data state. the bit pump is not synchronised.

273 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Important remarks Whether the Telindus 1423 SHDSL Router is configured in bridging or routing has no effect on the value of the attributes wanInterface/ifOperStatus:Status and wanInterface/alarmInfo/linkDown:Alarms. In case of ATM, if the configuration element pvcTable/atm/oamF5Loopback is set to disabled, then the ifOperStatus of the PVC becomes up when the ATM is synchronised globally. However, this does not guarantee that the PVC is configured (correctly) on the remote side. However, the other conditions as stated in the table above remain. In case of PPP(oA), if the configuration element linkMonitoring/operation is set to disabled, then it is possible that the wanInterface/ifOperStatus value does not go down even if the link quality is too bad for a proper data link. This because the link monitoring mechanism is the only PPP mechanism that will start a renegotiation of the LCP layer. In case of Frame Relay, if the configuration element lmi/auto is set to noLmi, then the value of the status element lmi/status:Status is always up. However, the other conditions as stated in the table above remain.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 274 Status attributes

MR-2.5 Encapsulation status attributes


This section discusses the status attributes of the encapsulation protocols that can be used on the Telindus 1423 SHDSL Router. Note that these encapsulation protocols cannot only be used on the xDSL line but, if your Telindus 1423 SHDSL Router is equipped with (an) ISDN interface(s), also on the ISDN interface(s). The protocols Frame Relay, PPP and HDLC are only relevant for TDM operation. Refer to MU-1.3 - Aperu de la famille de routeurs Telindus SHDSL 1423 on page 7 for more information about which protocols are available on which Telindus 1423 SHDSL Router version. The following gives an overview of this section: MR-2.5.1 - ATM status attributes on page 275 MR-2.5.2 - Frame Relay status attributes on page 280 MR-2.5.3 - PPP status attributes on page 285 MR-2.5.4 - HDLC status attributes on page 293 MR-2.5.5 - Error test status attributes on page 295

275 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.5.1 ATM status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/channel[wan_1]/atm/atmSync on page 276 telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable on page 276 telindus1423Router/wanInterface/channel[wan_1]/atm/vp on page 279

Telindus 1423 SHDSL Router User manual

Chapter MR-2 276 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/atmSync This attribute displays the ATM synchronisation status. Possible values are: synced, notSynced. telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable This attribute gives the complete status information of all known PVCs. The pvcTable table contains the following elements: Element name Description This is the name of the PVC as you configured it. If you did not configure a name, then this element displays: <interface name> vpi <vpi number> vci <vci number>. E.g. wan vpi 102 vci 102 ifOperStatus This is the current operational status of the PVC. In case OAM F5 LoopBack (LB) or Continuity Check (CC) is disabled, i.e. no OAM F4 LB/CC cells are sent, then the ifOperStatus of the PVC becomes up when the ATM is synchronised globally. However, this does not guarantee that the PVC is configured (correctly) on the remote side. LoopBack (LB) is enabled, i.e. OAM F5 loopback cells are sent at regular intervals, then the ifOperStatus of the PVC becomes up when the loopback cells are returned and down when the loopback cells are not returned by the remote side.

ifLastChange

This is the system-up time on the moment the PVC entered its current operational state. I.e. the moment the value of the ifOperStatus element changes (from up to down or vice versa), the system-up time value is written into the ifLastChange element. This displays the IP information of the PVC. Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/ip on page 277 for a detailed description of the ip structure.

ip

bridging

This displays the bridging information of the PVC. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure.

atm

This displays the specific ATM related status information of the PVC. Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm on page 278 for a detailed description of the atm structure.

277 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/ip The ip structure in the pvcTable displays the IP information of the PVC. The ip structure contains the following elements: Element address netMask remote Description This is the IP address of the PVC. It is either configured or retrieved automatically. This is the IP subnet mask of the PVC. It is either configured or retrieved automatically. This is the IP address of the remote end of the PVC. It is either configured or retrieved automatically.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 278 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm The atm structure in the pvcTable displays the specific ATM related status information of the PVC. The atm structure contains the following elements: Element vpi vci Description This displays the Virtual Path Identifier (VPI). This displays the Virtual Channel Identifier (VCI). The VPI in conjunction with the VCI identifies the next destination of a cell as it passes through a series of ATM switches on the way to its destination. peakCellRate sustCellRate maxBurstSize pppOverEth This displays the Peak Cell Rate (PCR) of the PVC in bps. This displays the Sustainable Cell Rate (SCR) of the PVC in bps. This displays the Maximum Burst Size (MBS) of the PVC in cell times. When the Telindus 1423 SHDSL Router wants to initiate a PPP over Ethernet (PPPoE) session, it must first perform a discovery to identify the Ethernet MAC address of the host and to establish a PPPoE session ID. The pppOverEth structure displays information on the PPPoE discovery. The pppOverEth structure contains the following elements: discState. This is the state of the discovery. The discovery goes as follows: The Telindus 1423 SHDSL Router sends a PADI packet (PPPoE Active Discovery Initiation). When the host receives a PADI that it can serve, it replies by sending a PADO packet (PPPoE Active Discovery Offer). The Telindus 1423 SHDSL Router then sends one PADR packet (PPPoE Active Discovery Request) to the host that it has chosen. When the host receives a PADR packet, it prepares to begin a PPP session. It generates a unique session ID for the PPPoE session and replies to the Telindus 1423 SHDSL Router with a PADS packet (PPPoE Active Discovery Session-confirmation).

So possible discState values are: idle, waitForPADO, waitForPADS, established. ppp remoteMacAddress. This is the MAC address of the remote system as learned during the discovery.

This displays the PPP information of the PVC. Refer to MR-2.5.3 - PPP status attributes on page 285 for a detailed description of the elements in the ppp structure.

279 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/vp Whereas the pvcTable gives the current operational status for each Virtual Channel, the vp table gives the current operational status of a complete Virtual Path. The vp table contains the following elements: Element vpi ifOperStatus Description This is the Virtual Path Identifier (VPI). This is the current operational status of the Virtual Path. In case OAM F4 LoopBack (LB) or Continuity Check (CC) is disabled, i.e. no OAM F4 LB/CC cells are sent, then the ifOperStatus of the VP becomes up when the ATM is synchronised globally. However, this does not guarantee that the VP is configured (correctly) on the remote side. LoopBack (LB) is enabled, i.e. OAM F4 loopback cells are sent at regular intervals, then the ifOperStatus of the VP becomes up when the loopback cells are returned and down when the loopback cells are not returned by the remote side. In case a VP goes down, also all VCs belonging to the VP go down.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 280 Status attributes

MR-2.5.2 Frame Relay status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/channel[wan_1]/frameRelay/ip on page 281 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable on page 281 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi on page 283 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/cllmLastCongestionCause on page 284

281 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/ip This attribute displays the IP information of the Frame Relay link. Refer to telindus1423Router/lanInterface/ip on page 264 for a detailed description of the ip structure. telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable This attribute gives the complete status information of all known DLCIs. The dlciTable table contains the following elements: Element name Description This is the name of the DLCI as you configured it. If you did not configure a name, then this element displays: <interface name> dlci <dlci number>. E.g. wan dlci 16 ifOperStatus ifLastChange This is the current operational status of the DLCI. This is the system-up time on the moment the DLCI entered its current operational state. I.e. the moment the value of the ifOperStatus element changes (from up to down or vice versa), the system-up time value is written into the ifLastChange element. This displays the IP information of the DLCI. Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/ip on page 277 for a detailed description of the ip structure. bridging This displays the bridging information of the DLCI. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure. frameRelay This displays the specific Frame Relay related status information of the DLCI. Refer to telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable/frameRelay on page 282 for a detailed description of the frameRelay structure.

ip

Telindus 1423 SHDSL Router User manual

Chapter MR-2 282 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable/frameRelay The frameRelay structure in the dlciTable displays the specific Frame Relay related status information of the DLCI. The frameRelay structure contains the following elements: Element dlci active new deleted rr bandwidth cllmLastCongestionCause Description This is the DLCI identification number. This indicates whether the corresponding DLCI is active (on) or not (off). This is set to on if the DLCI has just been created, else it is off. This is set to on if the DLCI has been deleted, else it is off. This element is only relevant for LMI revision 1. It is the flow control flag. If it is on, then no traffic can be sent on this DLCI. Else it is off. This element is only relevant for LMI revision 1 (in all other cases this value is 0). It is the CIR value, in bps, as it is configured on the remote. CLLM (Consolidated Link Layer Management) is a Frame Relay protocol used for traffic management. The cllmLastCongestionCause element indicates the last reason, which was received from the network, for congestion on the corresponding DLCI. Refer to telindus1423Router/wanInterface/channel[wan_1]/frameRelay/cllmLastCongestionCause on page 284 for the possible values of the cllmLastCongestionCause element.

283 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi This attribute gives a complete LMI status information overview. The lmi structure contains the following elements: Element mode Description This displays the Frame Relay mode. Possible values are: noLmi, user, network, auto. Refer to telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi on page 52 for more information on these values. type This displays the LMI variant. Possible values are: lmiRev1, ansiT1-617-d, q933-AnnexA, frf1-2. Refer to telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi on page 52 for more information on these values. status This displays the current state of LMI. Possible values are: lastStatusChange up. LMI messages can and are exchanged. down. No LMI messages can be exchanged.

This is the system-up time when the LMI status entered its current state. I.e. the moment the value of the status element changes (from up to down or vice versa), the system-up time value is written into the lastStatusChange element. This displays the last error condition reported by LMI. Possible values are: none, protocol error, unknown information element, sequence error, unknown report, timer expired, invalid report type, unsolicited status. This is the sequence number of the last LMI Status Response frame that was sent. Since only a Frame Relay network or DCE can transmit Status Responses, the value of this element only changes in case the Telindus 1423 SHDSL Router is defined as a Frame Relay network or both user and network. I.e. in case the mode element is set to network, auto or nni.

lastError

netTxSeqNum

netRxSeqNum

This is the sequence number of the last LMI Status Enquiry frame that was received. Since only a Frame Relay network or DCE can receive Status Enquiries, the value of this element only changes in case the Telindus 1423 SHDSL Router is defined as a Frame Relay network or both user and network. I.e. in case the mode element is set to network, auto or nni.

netErrors userTxSeqNum

This is the number of errors on LMI commands issued by the Frame Relay network or DCE during the last monitoredEvents period. This is the sequence number of the last LMI Status Enquiry frame that was sent. Since only a Frame Relay user or DTE can transmit Status Enquiries, the value of this element only changes in case the Telindus 1423 SHDSL Router is defined as a Frame Relay user or both user and network. I.e. in case the mode element is set to user, auto or nni.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 284 Status attributes

Element userRxSeqNum

Description This is the sequence number of the last LMI Status Response frame that was received. Since only a Frame Relay user or DTE can receive Status Responses, the value of this element only changes in case the Telindus 1423 SHDSL Router is defined as a Frame Relay user or both user and network. I.e. in case the mode element is set to user, auto or nni.

userErrors userWaitFullEnquiry userLastReportTypeSent

This is the number of errors on LMI commands issued by the Frame Relay user or DTE during the last monitoredEvents period. This is the number of LMI frames still to be sent before a Full Status Enquiry will be requested. This displays the type of the most recent report that was sent. Possible values are: full status. The last report contained the full status. link integrity. The last report only contained the link integrity information.

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/cllmLastCongestionCause This attribute indicates the last reason, which was received from the network, for congestion on any of the DLCIs. Possible values are: none short term, excessive traffic long term, excessive traffic short term, equipment failure long term, equipment failure short term, maintenance action long term, maintenance action short term, unknown cause long term, unknown cause unknown cause

285 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.5.3 PPP status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/channel[wan_1]/ppp/ip on page 286 telindus1423Router/wanInterface/channel[wan_1]/ppp/bridging on page 286 telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpState on page 287 telindus1423Router/wanInterface/channel[wan_1]/ppp/ipcpState on page 287 telindus1423Router/wanInterface/channel[wan_1]/ppp/bcpState on page 287 telindus1423Router/wanInterface/channel[wan_1]/ppp/ccpState on page 287 telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpMyOptions on page 288 telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpHisOptions on page 288 telindus1423Router/wanInterface/channel[wan_1]/ppp/ipcpMyOptions on page 289 telindus1423Router/wanInterface/channel[wan_1]/ppp/ipcpHisOptions on page 289 telindus1423Router/wanInterface/channel[wan_1]/ppp/bcpMyOptions on page 290 telindus1423Router/wanInterface/channel[wan_1]/ppp/bcpHisOptions on page 290 telindus1423Router/wanInterface/channel[wan_1]/ppp/ccpMyOptions on page 291 telindus1423Router/wanInterface/channel[wan_1]/ppp/ccpHisOptions on page 291 telindus1423Router/wanInterface/channel[wan_1]/ppp/myCompressionRatio on page 291 telindus1423Router/wanInterface/channel[wan_1]/ppp/hisCompressionRatio on page 291 telindus1423Router/wanInterface/channel[wan_1]/ppp/myAuthenticationStatus on page 292 telindus1423Router/wanInterface/channel[wan_1]/ppp/hisAuthenticationStatus on page 292

Telindus 1423 SHDSL Router User manual

Chapter MR-2 286 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/ip This attribute displays the IP information of the PPP link. The ip structure contains the following elements: Element status address netMask remote Description This is the current operational status of the IP layer (layer 3) of the PPP link. This is the IP address of the PPP link. It is either configured or retrieved automatically. This is the IP subnet mask of the PPP link. It is either configured or retrieved automatically. This is the IP address of the remote end of the PPP link. It is either configured or retrieved automatically.

telindus1423Router/wanInterface/channel[wan_1]/ppp/bridging This attribute displays the bridging status of the PPP link. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure.

287 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpState This attribute reflects the status of the LCP (Link Control Protocol) protocol. Possible values are: Value Initial Starting, Closed, Stopped, Closing, Stopping Req-Sent Ack-Rcvd Ack-Sent Opened Description LCP handshake has not started yet. These values correspond with the transient states in the LCP state diagram.

The local side of the PPP link has sent an LCP request. The remote side did not answer yet. The local side of the PPP link has received an LCP acknowledge from the remote side. This is a transient state. The local side of the PPP link has acknowledged the LCP request from the remote side. The LCP handshake succeeded.

telindus1423Router/wanInterface/channel[wan_1]/ppp/ipcpState This attribute reflects the status of the IPCP (Internet Protocol Control Protocol) protocol. The possible values are the same as those of the lcpState attribute. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpState on page 287. telindus1423Router/wanInterface/channel[wan_1]/ppp/bcpState This attribute reflects the status of the BCP (Bridging Control Protocol) protocol. The possible values are the same as those of the lcpState attribute. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpState on page 287. telindus1423Router/wanInterface/channel[wan_1]/ppp/ccpState This attribute reflects the status of the CCP (Compression Control Protocol) protocol. The possible values are the same as those of the lcpState attribute. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpState on page 287.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 288 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpMyOptions During the LCP handshake, a number of options can be exchanged between the local and remote side of the link. This attribute lists the LCP options for the router at this side (local side) of the link. The lcpMyOptions table contains the following elements: Element option Description The Telindus 1423 SHDSL Router supports the following LCP options: 3: the Authentication-Protocol option. 5: the Magic-Number option.

For more information on the LCP configuration options, refer to RFC 1661. length value This is the length of the option field. This is the option value represented as an octet string (hexadecimal ASCII representation).

telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpHisOptions This attribute lists the LCP options for the router at the other side (remote side) of the link. The lcpHisOptions table contains the same elements as the lcpMyOptions table. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/lcpMyOptions on page 288. Other option values than the ones supported by the Telindus 1423 SHDSL Router may be present.

289 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/ipcpMyOptions During the IPCP handshake, a number of options can be exchanged between the local and remote side of the link. This attribute lists the IPCP options for the router at this side (local side) of the link. The ipcpMyOptions table contains the following elements: Element option Description The Telindus 1423 SHDSL Router supports the following IPCP option: 3: the IP-Address option. ip-vso: the IP-Vendor Specific option. This is used to negotiate the netmask.

For more information on the IPCP configuration options, refer to RFC 1332. length value This is the length of the option field. This is the option value represented as an octet string (hexadecimal ASCII representation).

telindus1423Router/wanInterface/channel[wan_1]/ppp/ipcpHisOptions This attribute lists the IPCP options for the router at the other side (remote side) of the link. The ipcpHisOptions table contains the same elements as the ipcpMyOptions table. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/ipcpMyOptions on page 289. Other option values than the ones supported by the Telindus 1423 SHDSL Router may be present.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 290 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/bcpMyOptions During the BCP handshake, a number of options can be exchanged between the local and remote side of the link. This attribute lists the BCP options for the router at this side (local side) of the link. The bcpMyOptions table contains the following elements: Element option Description The Telindus 1423 SHDSL Router supports the following BCP options: 1: the Bridge-Identification option. 2: the Line-Identification option. 3: the MAC-Support option. 4: the Tinygram-Compression option. 5: the LAN-Identification option. 6: the MAC-Address option. 7: the Spanning-Tree-Protocol option.

For more information on the BCP configuration options, refer to RFC 2878. length value This is the length of the option field. This is the option value represented as an octet string (hexadecimal ASCII representation).

telindus1423Router/wanInterface/channel[wan_1]/ppp/bcpHisOptions This attribute lists the BCP options for the router at the other side (remote side) of the link. The bcpHisOptions table contains the same elements as the bcpMyOptions table. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/bcpMyOptions on page 290. Other option values than the ones supported by the Telindus 1423 SHDSL Router may be present.

291 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/ccpMyOptions During the CCP handshake, a number of options can be exchanged between the local and remote side of the link. This attribute lists the CCP options for the router at this side (local side) of the link. The ccpMyOptions table contains the following elements: Element option Description The Telindus 1423 SHDSL Router supports the following CCP option: 1: the Predictor1 option.

For more information on the CCP configuration options, refer to RFC 1962. length value This is the length of the option field. This is the option value represented as an octet string (hexadecimal ASCII representation).

telindus1423Router/wanInterface/channel[wan_1]/ppp/ccpHisOptions This attribute lists the CCP options for the router at the other side (remote side) of the link. The ccpHisOptions table contains the same elements as the ccpMyOptions table. Refer to telindus1423Router/wanInterface/channel[wan_1]/ppp/ccpMyOptions on page 291. Other option values than the ones supported by the Telindus 1423 SHDSL Router may be present. telindus1423Router/wanInterface/channel[wan_1]/ppp/myCompressionRatio When PPP compression is enabled, this attribute displays the compression ratio achieved by the router at this side (local side) of the link. telindus1423Router/wanInterface/channel[wan_1]/ppp/hisCompressionRatio When PPP compression is enabled, this attribute displays the compression ratio achieved by the router at the other side (remote side) of the link.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 292 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/ppp/myAuthenticationStatus This attribute displays the authentication state of the router at this side (local side) of the link. I.e. the state of the authenticator. Possible values are: Value No-Authentication Wait-On-Response Authen-Successful Authen-Failure Description The local side does not request PPP authentication or still has to start the CHAP authentication (LCP handshake is busy). The local side has sent a challenge packet and is waiting for an answer. The response packet is found to be correct. This is the state when authentication succeeded. The response packet is found to be incorrect. This is a transient state since the router starts the LCP handshake again after a failing authentication.

telindus1423Router/wanInterface/channel[wan_1]/ppp/hisAuthenticationStatus This attribute displays the authentication state of the router at the other side (remote side) of the link. I.e. the state of the peer. Possible values are: Value No-Authentication Wait-On-Challenge Wait-On-Success Authen-Successful Authen-Failure Authen-Not-Allowed Description This is the start-up state. During the LCP handshake the authenticator already indicates it wants to authenticate. From that moment on, the peer awaits a challenge packet. Once the peer has sent a response, it awaits a success or failure message. The peer has received a success packet. It remains in this state during data transfer. The peer has received a failure packet. This is a transient state since the router starts the LCP handshake again after a failing authentication. This state only occurs when the peer does not accept the authentication request during the LCP handshake. A possible reason might be that the peer router does not support CHAP.

293 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.5.4 HDLC status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/channel[wan_1]/hdlc/bridging on page 294

Telindus 1423 SHDSL Router User manual

Chapter MR-2 294 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/hdlc/bridging This attribute displays the bridging status of the HDLC link. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure.

295 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.5.5 Error test status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/channel[wan_1]/errorTest/status on page 296 telindus1423Router/wanInterface/channel[wan_1]/errorTest/type on page 296 telindus1423Router/wanInterface/channel[wan_1]/errorTest/startSysUpTime on page 296 telindus1423Router/wanInterface/channel[wan_1]/errorTest/duration on page 296 telindus1423Router/wanInterface/channel[wan_1]/errorTest/blockSize on page 296 telindus1423Router/wanInterface/channel[wan_1]/errorTest/programmablePattern on page 296 telindus1423Router/wanInterface/channel[wan_1]/errorTest/receiveSample on page 296

This section describes the following actions: telindus1423Router/wanInterface/channel[wan_1]/errorTest/startTest on page 296 telindus1423Router/wanInterface/channel[wan_1]/errorTest/stopTest on page 296

Telindus 1423 SHDSL Router User manual

Chapter MR-2 296 Status attributes

telindus1423Router/wanInterface/channel[wan_1]/errorTest/status This attribute displays the status of the error test. Due to RAM limitations, it is possible that not all test patterns are supported. In that case the string ramLimit is displayed as value of the status attribute telindus1423Router/wanInterface/channel[wan_1]/errorTest/status.

telindus1423Router/wanInterface/channel[wan_1]/errorTest/type This attribute displays the type of error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/startSysUpTime This attribute displays the value of the sysUpTime attribute at the moment the error test was started. telindus1423Router/wanInterface/channel[wan_1]/errorTest/duration This attribute displays the duration of the error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/blockSize This attribute displays the size of the test blocks. telindus1423Router/wanInterface/channel[wan_1]/errorTest/programmablePattern This attribute displays the bit string pattern as you configured it in the programmablePattern configuration attribute. telindus1423Router/wanInterface/channel[wan_1]/errorTest/receiveSample This attribute displays the received test pattern. telindus1423Router/wanInterface/channel[wan_1]/errorTest/startTest Use this action to start an error test. Refer to MU-7.6 - Configuration d'un test d'erreur on page 189 for more information on setting up an error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/stopTest Use this action to stop an error test.

297 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.6 SHDSL line status attributes


This section describes the following line status attributes: telindus1423Router/wanInterface/line/ifDescr on page 298 telindus1423Router/wanInterface/line/ifType on page 298 telindus1423Router/wanInterface/line/ifOperStatus on page 298 telindus1423Router/wanInterface/line/ifSpeed on page 298 telindus1423Router/wanInterface/line/region on page 298 telindus1423Router/wanInterface/line/maxSpeedSearch on page 298 telindus1423Router/wanInterface/line/maxSpeedResult on page 298 telindus1423Router/wanInterface/line/linePairsSwapped on page 299 telindus1423Router/wanInterface/line/numDiscoveredRepeaters on page 299 telindus1423Router/wanInterface/line/eocAlarmThresholds on page 299

This section describes the following line pair status attributes: telindus1423Router/wanInterface/line/linePair[ ]/ifOperStatus on page 301 telindus1423Router/wanInterface/line/linePair[ ]/ifSpeed on page 301 telindus1423Router/wanInterface/line/linePair[ ]/status on page 301 telindus1423Router/wanInterface/line/linePair[ ]/timeSinceLastRetrain on page 301 telindus1423Router/wanInterface/line/linePair[ ]/lineAttenuation on page 301 telindus1423Router/wanInterface/line/linePair[ ]/signalNoise on page 301 telindus1423Router/wanInterface/line/linePair[ ]/actualBitRate on page 301

This section describes the following actions: telindus1423Router/wanInterface/line/maximumSpeedSearch on page 300

Telindus 1423 SHDSL Router User manual

Chapter MR-2 298 Status attributes

telindus1423Router/wanInterface/line/ifDescr This attribute displays the interface description. telindus1423Router/wanInterface/line/ifType This attribute displays the interface type. telindus1423Router/wanInterface/line/ifOperStatus This attribute displays the current operational status of the line. Possible values are: Value up down testing Description The line is up, data transfer is possible. The line is down, data transfer is not possible. A line test is active.

telindus1423Router/wanInterface/line/ifSpeed This attribute displays the current line speed in bits per second (bps). In case of a Telindus 1423 SHDSL Router 2 pair version, the line/ifSpeed attribute displays the sum of the speed of line pair 1 and 2. telindus1423Router/wanInterface/line/region This attribute displays the SHDSL standard currently used. Possible values are: auto, annexA, annexB. Refer to telindus1423Router/wanInterface/line/region on page 67 for more information on these values. telindus1423Router/wanInterface/line/maxSpeedSearch This attribute displays the status of the maximumSpeedSearch action. Possible values are: Value idle progressing aborted completed Description No maximumSpeedSearch action has been performed. The maximumSpeedSearch action is running. The maximumSpeedSearch action stopped without result. The maximumSpeedSearch action is finished. The result is displayed in the maxSpeedResult attribute.

telindus1423Router/wanInterface/line/maxSpeedResult This attribute displays the maximum speed, in bits per second (bps), that was achieved during the execution of the maximumSpeedSearch action.

299 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/line/linePairsSwapped This attribute is only present on the Telindus 1423 SHDSL Router 2 pair version. This attribute indicates whether the line pairs have been swapped when connecting the central with the remote device. Possible values are: Value yes no unknown Description The line pairs are swapped. The line pairs are not swapped. The Telindus 1423 SHDSL Router is unable to determine whether the line pairs have been swapped (e.g. because it is still training).

telindus1423Router/wanInterface/line/numDiscoveredRepeaters This attribute displays the number of Crocus SHDSL repeaters that the Telindus 1423 SHDSL Router discovered on the SHDSL line. telindus1423Router/wanInterface/line/eocAlarmThresholds What this attribute displays depends on the setting of the telindus1423Router/wanInterface/line/eocHandling attribute: If eocHandling is set to none discovery inventory info alarmConfiguration then the eocAlarmThresholds attribute does not display relevant information. It always displays 0.0. on the central1 device, the eocAlarmThresholds attribute displays the values as set in the telindus1423Router/wanInterface/line/linkAlarmThresholds attribute. on the remote2 device, the eocAlarmThresholds attribute does not display relevant information. It always displays 0.0.

the eocAlarmThresholds attribute displays the values as set in the telindus1423Router/ wanInterface/line/linkAlarmThresholds attribute on the central device.

1. The central device is the device on which the channel attribute is set to central. 2. The remote device is the device on which the channel attribute is set to remote. The eocAlarmThresholds structure contains the following elements: lineAttenuation signalNoise

Telindus 1423 SHDSL Router User manual

Chapter MR-2 300 Status attributes

telindus1423Router/wanInterface/line/maximumSpeedSearch Use this action to determine the highest possible line speed that can be achieved between the central and remote Telindus 1423 SHDSL Router. When you execute this test, the following happens: Phase 1 2 Action The Telindus 1423 SHDSL Router interrupts the normal data transfer. Both local and remote Telindus 1423 SHDSL Router go to auto speed mode in order to determine the highest possible line speed. Meanwhile, the status of the test can be monitored with the maxSpeedSearch attribute. When the test ends, the result is displayed by the maxSpeedResult attribute. The Telindus 1423 SHDSL Router resumes normal data transfer at the speed that was selected before the test.

3 4

Important remarks The Telindus 1423 SHDSL Router has to be in data state (i.e. after a successful training sequence and when the data connection is up) before you can execute the maximumSpeedSearch action. While the maximumSpeedSearch action is running, no data transmission is possible. In case of a Telindus 1423 SHDSL Router 2 pair version, you can not execute the maximumSpeedSearch action because you can not define a speed range on both the central and remote Telindus 1423 SHDSL Router.

301 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/line/linePair[ ]/ifOperStatus This attribute displays the current operational status of the line pair. Possible values are: Value up down testing Description The line pair is up, data transfer is possible. This is the case when the value of the linePair[ ]/status attribute is dataState. The line pair is down, data transfer is not possible. A line test is active.

telindus1423Router/wanInterface/line/linePair[ ]/ifSpeed This attribute displays the line pair speed, in bits per second (bps), when the line pair is in data state. telindus1423Router/wanInterface/line/linePair[ ]/status This attribute displays the current status of the line pair. Possible values are: Value idle training dataState Description No link is present. A training cycle is in progress. A data link is present.

telindus1423Router/wanInterface/line/linePair[ ]/timeSinceLastRetrain This attribute displays the elapsed time since the last retrain cycle. telindus1423Router/wanInterface/line/linePair[ ]/lineAttenuation This attribute displays the current line pair attenuation in dB. The lineAttenuation attribute does not display meaningful information when the line is not trained. It is only relevant for a line that is in data state for at least 5 minutes.

telindus1423Router/wanInterface/line/linePair[ ]/signalNoise This attribute displays the current signal to noise ratio on the line pair in dB. The signalNoise attribute does not display meaningful information when the line is not trained. It is only relevant for a line that is in data state for at least 5 minutes.

telindus1423Router/wanInterface/line/linePair[ ]/actualBitRate This attribute displays the maximum speed, in bits per second (bps), that could be negotiated on the line pair during the training sequence.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 302 Status attributes

MR-2.7 End and repeater status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/end/vendorId on page 303 telindus1423Router/wanInterface/end/vendorModel on page 303 telindus1423Router/wanInterface/end/vendorSerial on page 303 telindus1423Router/wanInterface/end/vendorSoftVersion on page 303 telindus1423Router/wanInterface/end/eocSoftVersion on page 303 telindus1423Router/wanInterface/end/shdslVersion on page 303 telindus1423Router/wanInterface/end/eocState on page 304 telindus1423Router/wanInterface/end/eocAlarmThresholds on page 304 telindus1423Router/wanInterface/end/linePair[ ]/lineAttenuation on page 304 telindus1423Router/wanInterface/end/linePair[ ]/signalNoise on page 304

This section describes the following actions: telindus1423Router/wanInterface/repeater/loopbackActivation on page 305 Exactly which information is retrieved from the remote SHDSL device(s) through the EOC channel depends on the setting of the eocHandling attribute. Refer to MU-5.4.4 - eocHandlingQuelles informations EOC standard sont-elles rcupres ? on page 82 for an overview. The repeater[ ] and end objects contain the same attributes, therefore only the attributes of the end object are listed here.

303 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/end/vendorId This attribute is only retrieved in case the eocHandling attribute is set to discovery, inventory, info or alarmConfiguration. This attribute displays information about the vendor of the repeater or end device. The vendorId structure contains the following elements: countryCode E.g. 65295 for Belgium. providerCode E.g. TLS_ for OneAccess. vendorSpecific

telindus1423Router/wanInterface/end/vendorModel This attribute is only retrieved in case the eocHandling attribute is set to inventory, info or alarmConfiguration. This attribute displays the model of the repeater or end device. E.g. SHDSL TT 2P for a Crocus SHDSL Table Top 2 pair version. telindus1423Router/wanInterface/end/vendorSerial This attribute is only retrieved in case the eocHandling attribute is set to inventory, info or alarmConfiguration. This attribute displays the serial number of the repeater or end device. For a OneAccess devices this is the deviceId attribute (refer to telindus1423Router/deviceId on page 261). telindus1423Router/wanInterface/end/vendorSoftVersion This attribute is only retrieved in case the eocHandling attribute is set to inventory, info or alarmConfiguration. This attribute displays the version of the firmware used on the repeater or end device. For a OneAccess device this is the part after / of the T-code string displayed in the flashVersion attribute (refer to telindus1423Router/flash1Version on page 259). telindus1423Router/wanInterface/end/eocSoftVersion This attribute is only retrieved in case the eocHandling attribute is set to discovery, inventory, info or alarmConfiguration. This attribute displays the EOC software version used on the repeater or end device. telindus1423Router/wanInterface/end/shdslVersion This attribute is only retrieved in case the eocHandling attribute is set to discovery, inventory, info or alarmConfiguration. This attribute displays the SHDSL version used on the repeater or end device.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 304 Status attributes

telindus1423Router/wanInterface/end/eocState This attribute is only retrieved in case the eocHandling attribute is set to discovery, inventory, info or alarmConfiguration. This attribute displays the state of the EOC channel. telindus1423Router/wanInterface/end/eocAlarmThresholds This attribute is only retrieved in case the eocHandling attribute is set to info or alarmConfiguration. What this attribute displays depends on the setting of the telindus1423Router/wanInterface/line/eocHandling attribute: If eocHandling is set to info alarmConfiguration then the eocAlarmThresholds attribute displays the values as set in the telindus1423Router/ wanInterface/line/linkAlarmThresholds attribute on the remote1 device. the eocAlarmThresholds attribute displays the values as set in the telindus1423Router/ wanInterface/line/linkAlarmThresholds attribute on the central2 device.

1. The remote device is the device on which the channel attribute is set to remote. 2. The central device is the device on which the channel attribute is set to central. The eocAlarmThresholds structure contains the following elements: lineAttenuation signalNoise

telindus1423Router/wanInterface/end/linePair[ ]/lineAttenuation This attribute is only retrieved in case the eocHandling attribute is set to info or alarmConfiguration. This attribute displays the line attenuation, in dB, as it is measured on the line pair of the repeater or end device. telindus1423Router/wanInterface/end/linePair[ ]/signalNoise This attribute is only retrieved in case the eocHandling attribute is set to info or alarmConfiguration. This attribute displays the noise margin, in dB, as it is measured on the line pair of the repeater or end device.

305 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/wanInterface/repeater/loopbackActivation This action is only present in the repeater[ ] object. Use this action to set up a loop at the network side of the Crocus SHDSL Repeater: network side central device loopback repeater customer side

Set the loop by selecting the action argument value initiateNetworkLoopback and executing the action (in TMA, double-click the loopbackActivation string). Stop the loop by selecting the action argument value clearAllMaintenanceStates and executing the action (in TMA, double-click the loopbackActivation string). Important remarks You can only set up a loop at the network side of the Crocus SHDSL Repeater. Not at the customer side. You can only start the loopbackActivation action on the central device. Not on the remote device. You can only start the loopbackActivation action in case the telindus1423Router/wanInterface/line/eocHandling attribute is set to alarmConfiguration.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 306 Status attributes

MR-2.8 BRI status attributes


This section discusses the status attributes of the BRI interface. First it describes the status attributes of the BRI interface in general. Then it describes more specifically the status attributes of the B-channels and of the leasedLine[ ] object that can be added under the bri[ ] object. The following gives an overview of this section: MR-2.8.1 - General BRI status attributes on page 307 MR-2.8.2 - B-channel status attributes on page 313 MR-2.8.3 - ISDN leased line status attributes on page 315

307 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.8.1 General BRI status attributes


This section describes the following status attributes: telindus1423Router/bri[ ]/ifDescr on page 308 telindus1423Router/bri[ ]/ifType on page 308 telindus1423Router/bri[ ]/ifOperStatus on page 308 telindus1423Router/bri[ ]/ifLastChange on page 308 telindus1423Router/bri[ ]/ifMtu on page 308 telindus1423Router/bri[ ]/l1Status on page 309 telindus1423Router/bri[ ]/lapdLinks on page 310 telindus1423Router/bri[ ]/bChannelUsage on page 311 telindus1423Router/bri[ ]/testType on page 311 telindus1423Router/bri[ ]/testStatus on page 311

This section describes the following actions: telindus1423Router/bri[ ]/loopbackActivation on page 312 telindus1423Router/bri[ ]/clearIsdnCall on page 312

Telindus 1423 SHDSL Router User manual

Chapter MR-2 308 Status attributes

telindus1423Router/bri[ ]/ifDescr This attribute displays the interface description of the BRI interface. telindus1423Router/bri[ ]/ifType This attribute displays the interface type of the BRI interface. telindus1423Router/bri[ ]/ifOperStatus This attribute displays the current operational status of the LAPD (Link Access Protocol - Channel D, which is layer 2) of the BRI interface. Possible values are: Value up down Description LAPD is up. LAPD is down.

telindus1423Router/bri[ ]/ifLastChange This attribute shows the system-up time on the moment the interface entered its current operational state. I.e. the moment the value of the ifOperStatus status attribute changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status attribute. telindus1423Router/bri[ ]/ifMtu This attribute displays the BRI interface its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this interface.

309 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bri[ ]/l1Status This attribute displays the status of ISDN layer 1, i.e. the physical connection with the telecom operator ISDN switch, of the BRI interface. The most common states are f7Activated and f3Deacivated. Possible values are: Value f1Inactive f2Sensing f3Deacivated f4AwaitingSignal f5IdentifyingInput f6Synchronized f7Activated Description In this inactive (powered-off) state, the TE1 is not transmitting and cannot detect the presence of any input signals. This state is entered after the TE has been powered on but has not determined the type of signal (if any) that the TE is receiving. This is the deactivated state of the physical protocol. Neither the NT2 nor the TE is transmitting. When the TE wishes to initiate activation, it sends an activation signal to the NT and awaits a response. At first receipt of any signal from the NT, the TE ceases sending activation signals and awaits the activation signal or synchronized frame from the NT. When the TE has received an activation signal from the NT, it responds with a synchronized frame and is awaiting a synchronized frame from the NT. This is the normal active state with the protocol activated in both directions. Both the NT and TE are transmitting normal frames. State F7 is the only state where Band D-channel contain operational data. This is the condition when the TE has lost frame synchronization and is awaiting re-synchronization.

f8LostFraming

1. TE: Terminal Equipment 2. NT: Network Termination device

Telindus 1423 SHDSL Router User manual

Chapter MR-2 310 Status attributes

telindus1423Router/bri[ ]/lapdLinks This attribute displays the status of ISDN layer 2 with Terminal Endpoint Identifier (TEI) number and multi-frame structure state of the BRI interface. The lapdLinks table contains the following elements: Element l2State Description This is the multi-frame structure state. The most common states are multipleFrameEstablished and teiAssigned: multipleFrameEstablished. This indicates there is data link connectivity to the telecom operator ISDN switch. This is the state that you should see under normal operations. Any other state usually indicates a problem on the circuit. teiAssigned. This indicates that the router has lost connectivity to the switch. This is normal if the telecom operator deactivates layers 1 and 2 when there are no active calls.

Refer to ITU Q.921 Annex B for more information on all the other possible layer 2 states such as: teiUnassigned, assignAwaitingTei, establishAwaitingTei, awaitingEstablishment, awaitingRelease, timerRecovery. tei This is the Terminal Endpoint Identifier.

311 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bri[ ]/bChannelUsage This attribute displays the usage of the B-channels on the BRI interface. The bChannelUsage table contains the following elements: Element channel dialMapEntry localTelNr remoteTelNr callDirection Description This displays the B-channel number: 1 or 2. This indicates which dial map uses this B-channel. This displays which local telephone number is entered in the dial map for this Bchannel. This displays which remote telephone number is entered in the dial map for this Bchannel. This displays the call direction of the B-channel. Possible values are: incall, outcall or undefined.

telindus1423Router/bri[ ]/testType This attribute displays which BRI loop is currently active. Refer to telindus1423Router/bri[ ]/loopbackActivation on page 312 for more information on BRI loops. telindus1423Router/bri[ ]/testStatus This attribute displays the status of the active BRI loop. Possible values are: Value progressing running ending unknown Description The loop is started. The loop is active. The loop is ended. There are two possibilities: No loop is active. For some reason it is not possible to retrieve the status of the loop.

Refer to telindus1423Router/bri[ ]/loopbackActivation on page 312 for more information on BRI loops.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 312 Status attributes

telindus1423Router/bri[ ]/loopbackActivation Use this action to activate a loop on the BRI interface of the Telindus 1423 SHDSL Router. These loops are useful to trace possible problems. First select a loop type (i.e. an argument value), then execute the loopbackActivation action. The loopbackActivation action has the following argument values: Value noLoopback internalLoopback externalLoopback Description No loop is activated. In case you want to stop a loop, then select this value and execute the loopbackActivation action. The data coming from the remote side is looped back to the remote side on the BRI interface. The data coming from the Telindus 1423 SHDSL Router is looped back into the Telindus 1423 SHDSL Router on the BRI interface.

If a loop is active, then deactivate this loop before starting a new loop. The following figure gives an overview of the different loops:

telindus1423Router/bri[ ]/clearIsdnCall Use this action to break off an ISDN call. Do this by typing the dial map name of the corresponding ISDN call as argument value and executing the action. For example, suppose the ISDN call is initiated by an entry in the dialMaps/mapping table called myMap, then type myMap as argument value of the clearIsdnCall action and execute the action.

313 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.8.2 B-channel status attributes


This section describes the following status attributes: telindus1423Router/bri[ ]/bChannel[ ]/ifDescr on page 314 telindus1423Router/bri[ ]/bChannel[ ]/ifType on page 314 telindus1423Router/bri[ ]/bChannel[ ]/ifOperStatus on page 314 telindus1423Router/bri[ ]/bChannel[ ]/ifLastChange on page 314 telindus1423Router/bri[ ]/bChannel[ ]/ifMtu on page 314 telindus1423Router/bri[ ]/bChannel[ ]/dialMapEntry on page 314 telindus1423Router/bri[ ]/bChannel[ ]/localPhoneNr on page 314 telindus1423Router/bri[ ]/bChannel[ ]/remotePhoneNr on page 314 telindus1423Router/bri[ ]/bChannel[ ]/callDirection on page 314

For the status attributes of the ppp object which is located under the bChannel object, refer to MR-2.5.3 PPP status attributes on page 285.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 314 Status attributes

telindus1423Router/bri[ ]/bChannel[ ]/ifDescr This attribute displays the interface description of the B-channel. telindus1423Router/bri[ ]/bChannel[ ]/ifType This attribute displays the interface type of the B-channel. telindus1423Router/bri[ ]/bChannel[ ]/ifOperStatus This attribute displays the current operational status of the B-channel. Possible values are: Value up down Description The B-channel is up, data transfer is possible. The B-channel is down, data transfer is not possible.

telindus1423Router/bri[ ]/bChannel[ ]/ifLastChange This attribute shows the system-up time on the moment the B-channel entered its current operational state. I.e. the moment the value of the ifOperStatus status attribute changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status attribute. telindus1423Router/bri[ ]/bChannel[ ]/ifMtu This attribute displays the B-channel its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this B-channel. telindus1423Router/bri[ ]/bChannel[ ]/dialMapEntry This attribute displays which dial map uses this B-channel. telindus1423Router/bri[ ]/bChannel[ ]/localPhoneNr This attribute displays which local telephone number is entered in the dial map for this B-channel. telindus1423Router/bri[ ]/bChannel[ ]/remotePhoneNr This attribute displays which remote telephone number is entered in the dial map for this B-channel. telindus1423Router/bri[ ]/bChannel[ ]/callDirection This attribute displays the call direction of the B-channel. Possible values are: incall, outcall or undefined.

315 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.8.3 ISDN leased line status attributes


This section describes the following status attributes: telindus1423Router/wanInterface/ifDescr on page 272 telindus1423Router/wanInterface/ifType on page 272 telindus1423Router/wanInterface/ifSpeed on page 272 telindus1423Router/wanInterface/ifMtu on page 272 telindus1423Router/wanInterface/ifLastChange on page 272 telindus1423Router/wanInterface/ifOperStatus on page 272

For the status attributes of the encapsulation objects (frameRelay, ppp, hdlc and errorTest) which are located under the leasedLine[ ] object, refer to MR-2.5 - Encapsulation status attributes on page 274.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 316 Status attributes

telindus1423Router/bri[ ]/leasedLine[ ]/ifDescr This attribute displays the interface description. telindus1423Router/bri[ ]/leasedLine[ ]/ifType This attribute displays the interface type. telindus1423Router/bri[ ]/leasedLine[ ]/ifSpeed This attribute displays the interface speed in bits per second (bps). telindus1423Router/bri[ ]/leasedLine[ ]/ifMtu This attribute displays the interface its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this interface. telindus1423Router/bri[ ]/leasedLine[ ]/ifLastChange This attribute shows the system-up time on the moment the interface entered its current operational state. I.e. the moment the value of the ifOperStatus status attribute changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status attribute. telindus1423Router/bri[ ]/leasedLine[ ]/ifOperStatus This attribute displays the current operational status of the interface. Possible values are: Value up down Description The leased line ISDN connection is up, data transfer is possible. The leased line ISDN connection is down, data transfer is not possible. The ifOperStatus attribute is down in case of Frame Relay, when LMI is not up. the line is not in data state. the bit pump is not synchronised.

PPP, when LCP is not open. the line is not in data state. the bit pump is not synchronised.

317 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Important remarks Whether the Telindus 1423 SHDSL Router is configured in bridging or routing has no effect on the value of the attributes wanInterface/ifOperStatus:Status and wanInterface/alarmInfo/linkDown:Alarms. In case of PPP, if the configuration element linkMonitoring/operation is set to disabled, then it is possible that the wanInterface/ifOperStatus value does not go down even if the link quality is too bad for a proper data link. This because the link monitoring mechanism is the only PPP mechanism that will start a renegotiation of the LCP layer. In case of Frame Relay, if the configuration element lmi/auto is set to noLmi, then the value of the status element lmi/status:Status is always up. However, the other conditions as stated in the table above remain.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 318 Status attributes

MR-2.9 AUX status attributes


This section describes the following status attributes: telindus1423Router/aux/ifDescr on page 319 telindus1423Router/aux/ifType on page 319 telindus1423Router/aux/ifOperStatus on page 319 telindus1423Router/aux/ifLastChange on page 319 telindus1423Router/aux/ifSpeed on page 319 telindus1423Router/aux/ifMtu on page 319 telindus1423Router/aux/txdItu103 on page 319 telindus1423Router/aux/rxdItu104 on page 319 telindus1423Router/aux/rtsItu105 on page 319 telindus1423Router/aux/ctsItu106 on page 319 telindus1423Router/aux/dsrItu107 on page 319 telindus1423Router/aux/dtrItu108 on page 319 telindus1423Router/aux/dcdItu109 on page 320 telindus1423Router/aux/riItu125 on page 320

For the status attributes of the dialPpp object which is located under the aux object, refer to MR-2.5.3 PPP status attributes on page 285.

319 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/aux/ifDescr This attribute displays the interface description. telindus1423Router/aux/ifType This attribute displays the interface type. telindus1423Router/aux/ifOperStatus This attribute displays the current operational status of the interface. telindus1423Router/aux/ifLastChange This attribute shows the system-up time on the moment the interface entered its current operational state. I.e. the moment the value of the ifOperStatus status attribute changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status attribute. telindus1423Router/aux/ifSpeed This attribute displays the interface speed in bits per second (bps). telindus1423Router/aux/ifMtu This attribute displays the interface its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this interface. telindus1423Router/aux/txdItu103 This attribute displays the status (on / off) of the transmit data signal (circuit 103). The txdItu103 attribute only indicates the presence of the TxD signal, it does not monitor the real data signal. telindus1423Router/aux/rxdItu104 This attribute displays the status (on / off) of the receive data signal (circuit 104). The rxdItu104 attribute only indicates the presence of the RxD signal, it does not monitor the real data signal. telindus1423Router/aux/rtsItu105 This attribute displays the status (on / off) of the request to send signal (circuit 105). telindus1423Router/aux/ctsItu106 This attribute displays the status (on / off) of the clear to send signal (circuit 106). telindus1423Router/aux/dsrItu107 This attribute displays the status (on / off) of the data set ready signal (circuit 107). telindus1423Router/aux/dtrItu108 This attribute displays the status (on / off) of the data terminal ready signal (circuit 108).

Telindus 1423 SHDSL Router User manual

Chapter MR-2 320 Status attributes

telindus1423Router/aux/dcdItu109 This attribute displays the status (on / off) of the data carrier detect signal (circuit 109). telindus1423Router/aux/riItu125 This attribute displays the status (on / off) of the Ring Indicator signal (circuit 125).

321 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.10 Profile status attributes


This section describes the following status attributes: telindus1423Router/profiles/<profile>/profileUsers on page 322

Telindus 1423 SHDSL Router User manual

Chapter MR-2 322 Status attributes

telindus1423Router/profiles/<profile>/profileUsers This attribute shows which profile is applied on which dial map. The profileUsers table contains the following elements: Element type name Description This always displays dialmap. This is the dial map name. It is the name as you configured it in the name element of the dial map.

Example Suppose you created an ISDN dial profile (myIsdn) and you applied this profile on 3 dial maps (myMap, yourMap and ourMap), then the profileUsers attribute of the ISDN dial profile displays the following:

323 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.11 Dial maps status attributes


This section describes the following status attributes: telindus1423Router/dialMaps/mapping on page 324

Telindus 1423 SHDSL Router User manual

Chapter MR-2 324 Status attributes

telindus1423Router/dialMaps/mapping This attribute displays the status of all the dial maps. The mapping table contains the following elements: Element name status Description This displays the dial map name. It is the name as you configured it in the name element of the dial map. This displays the dial map status. Possible values are: invalidProfile. This means that the dial map refers to a nonexistent profile. In this case, the dial map is not activated. standBy. This means the dial map its configuration is valid.

Note that the status element says something about the configuration of the dial map, not about the status of the connections that are defined by this dial map! connections This displays the status of the active ISDN connection(s) that are defined by the dial map. Refer to telindus1423Router/dialMaps/mapping/connections on page 325 for a detailed description of the connections table.

325 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/dialMaps/mapping/connections The connections table in the mapping table displays the status of the active ISDN connection(s) that are defined by the dial map. The connections table contains the following elements: Element interface localTelNr remoteTelNr callDirection connectState Description This displays on which interface the connection has been set up. E.g. bri1-bChannel1. This displays the local telephone number of the connection. This displays the remote telephone number of the connection. This displays the call direction of the connection. Possible values are: incall, outcall or undefined. This displays the status of the connection. Possible values are: notConnected. There is no connection. callSetup. The call is being set up. connected. The call was set up successfully. encapsUp. The encapsulation protocol was set up successfully. callClear. The call is being cleared.

When a connection is established, the normal procedure is: notConnected callSetup connected encapsUp. terminated, the normal procedure is: encapsUp callClear notConnected.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 326 Status attributes

MR-2.12 Bundle status attributes


This section describes the status attributes of the different bundles that can be set up on the Telindus 1423 SHDSL Router. The following gives an overview of this section: MR-2.12.1 - PPP bundle status attributes on page 327

327 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.12.1 PPP bundle status attributes


This section describes the following status attributes: telindus1423Router/bundle/pppBundle[ ]/ifDescr on page 328 telindus1423Router/bundle/pppBundle[ ]/ifType on page 328 telindus1423Router/bundle/pppBundle[ ]/ifOperStatus on page 328 telindus1423Router/bundle/pppBundle[ ]/ifSpeed on page 328 telindus1423Router/bundle/pppBundle[ ]/members on page 328 telindus1423Router/bundle/pppBundle[ ]/ip on page 329 telindus1423Router/bundle/pppBundle[ ]/ipcpState on page 329 telindus1423Router/bundle/pppBundle[ ]/ipcpMyOptions on page 330 telindus1423Router/bundle/pppBundle[ ]/ipcpHisOptions on page 330 telindus1423Router/bundle/pppBundle[ ]/bridging on page 331 telindus1423Router/bundle/pppBundle[ ]/bcpState on page 331 telindus1423Router/bundle/pppBundle[ ]/bcpMyOptions on page 331 telindus1423Router/bundle/pppBundle[ ]/bcpHisOptions on page 331 telindus1423Router/bundle/isdnBundle[ ]/bacpState on page 332 telindus1423Router/bundle/isdnBundle[ ]/bacpMyOptions on page 332 telindus1423Router/bundle/isdnBundle[ ]/bacpHisOptions on page 332 telindus1423Router/bundle/isdnBundle[ ]/inBandwidth on page 332 telindus1423Router/bundle/isdnBundle[ ]/outBandwidth on page 332 telindus1423Router/bundle/pppBundle[ ]/multiclassInterfaces on page 333

Telindus 1423 SHDSL Router User manual

Chapter MR-2 328 Status attributes

telindus1423Router/bundle/pppBundle[ ]/ifDescr This attribute displays the interface description of the PPP bundle. telindus1423Router/bundle/pppBundle[ ]/ifType This attribute displays the interface type of the PPP bundle. telindus1423Router/bundle/pppBundle[ ]/ifOperStatus This attribute displays the current operational status of the PPP bundle. telindus1423Router/bundle/pppBundle[ ]/ifSpeed This attribute displays the current speed of the PPP bundle in bits per second (bps). It is the sum of the speeds of all the bundle links in the bundle. telindus1423Router/bundle/pppBundle[ ]/members This attribute displays the status of the different bundle links in the PPP bundle. The members table contains the following elements: Element ifDescr Description This element displays the name of the bundle link as you entered it in the members configuration attribute. Refer to MU-7.4.11 - Configuration PPP multiliaisons on page 179 for more information. memberStatus This element displays the member status of the bundle link in the bundle. Possible values are: notJoined. The bundle link is currently not an active member of the bundle. E.g. because the bundle link is down. joined. The bundle link is currently an active member of the bundle. notFound. The bundle link that you specified in the members configuration attribute could not be found. E.g. because you entered a wrong channel index name or because you did not create a channel yet. Refer to MU-7.4.11 - Configuration PPP multiliaisons on page 179 for more information on the channels and channel index names.

ifLastChange

This element displays the system-up time on the moment the bundle link entered its current operational state. I.e. the moment the value of the memberStatus status element changes (from notJoined to joined or vice versa), the system-up time value is written into the ifLastChange status element. This element displays the current speed of the bundle link in bits per second (bps).

ifSpeed

329 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bundle/pppBundle[ ]/ip This attribute displays the IP information of the PPP bundle. The ip structure contains the following elements: Element status address netMask remote Description This is the current operational status of the IP layer (layer 3) of the PPP bundle. This is the IP address of the PPP bundle. It is either configured or retrieved automatically. This is the IP subnet mask of the PPP bundle. It is either configured or retrieved automatically. This is the IP address of the remote end of the PPP bundle. It is either configured or retrieved automatically.

telindus1423Router/bundle/pppBundle[ ]/ipcpState This attribute reflects the status of the IPCP (Internet Protocol Control Protocol) protocol. Possible values are: Value Initial Starting, Closed, Stopped, Closing, Stopping Req-Sent Ack-Rcvd Ack-Sent Opened Description IPCP handshake has not started yet. These values correspond with the transient states in the IPCP state diagram.

The local side of the PPP link has sent an IPCP request. The remote side did not answer yet. The local side of the PPP link has received an IPCP acknowledge from the remote side. This is a transient state. The local side of the PPP link has acknowledged the IPCP request from the remote side. The IPCP handshake succeeded.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 330 Status attributes

telindus1423Router/bundle/pppBundle[ ]/ipcpMyOptions During the IPCP handshake, a number of options can be exchanged between the local and remote side of the link. This attribute lists the IPCP options for the router at this side (local side) of the link. The ipcpMyOptions table contains the following elements: Element option Description The Telindus 1423 SHDSL Router supports the following IPCP option: 3: the IP-Address option. ip-vso: the IP-Vendor Specific Option. This is used to negotiate the netmask.

For more information on the IPCP configuration options, refer to RFC 1332. length value This is the length of the option field. This is the option value represented as an octet string (hexadecimal ASCII representation).

telindus1423Router/bundle/pppBundle[ ]/ipcpHisOptions This attribute lists the IPCP options for the router at the other side (remote side) of the link. The ipcpHisOptions table contains the same elements as the ipcpMyOptions table. Refer to telindus1423Router/bundle/pppBundle[ ]/ipcpMyOptions on page 330. Other option values than the ones supported by the Telindus 1423 SHDSL Router may be present.

331 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bundle/pppBundle[ ]/bridging This attribute is not present in the PPP bundle of the ISDN interfaces. This attribute displays the bridging status of the PPP bundle. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure. telindus1423Router/bundle/pppBundle[ ]/bcpState This attribute is not present in the PPP bundle of the ISDN interfaces. This attribute reflects the status of the BCP (Bridging Control Protocol) protocol. The possible values are the same as those of ipcpState attribute. Refer to telindus1423Router/bundle/pppBundle[ ]/ipcpState on page 329. telindus1423Router/bundle/pppBundle[ ]/bcpMyOptions This attribute is not present in the PPP bundle of the ISDN interfaces. During the BCP handshake, a number of options can be exchanged between the local and remote side of the link. This attribute lists the BCP options for the router at this side (local side) of the link. The bcpMyOptions table contains the following elements: Element option Description The Telindus 1423 SHDSL Router supports the following BCP options: 1: the Bridge-Identification option. 2: the Line-Identification option. 3: the MAC-Support option. 4: the Tinygram-Compression option. 5: the LAN-Identification option. 6: the MAC-Address option. 7: the Spanning-Tree-Protocol option.

For more information on the BCP configuration options, refer to RFC 2878. length value This is the length of the option field. This is the option value represented as an octet string (hexadecimal ASCII representation).

telindus1423Router/bundle/pppBundle[ ]/bcpHisOptions This attribute is not present in the PPP bundle of the ISDN interfaces. This attribute lists the BCP options for the router at the other side (remote side) of the link. The bcpHisOptions table contains the same elements as the bcpMyOptions table. Refer to telindus1423Router/bundle/ pppBundle[ ]/bcpMyOptions on page 331. Other option values than the ones supported by the Telindus 1423 SHDSL Router may be present.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 332 Status attributes

telindus1423Router/bundle/isdnBundle[ ]/bacpState This attribute is only present in the PPP bundle of the ISDN interfaces. This attribute reflects the status of the BACP (Bandwidth Allocation Control Protocol) protocol. The possible values are the same as those of ipcpState attribute. Refer to telindus1423Router/bundle/pppBundle[ ]/ipcpState on page 329. telindus1423Router/bundle/isdnBundle[ ]/bacpMyOptions This attribute is only present in the PPP bundle of the ISDN interfaces. During the BACP handshake, a number of options can be exchanged between the local and remote side of the link. This attribute lists the BACP options for the router at this side (local side) of the link. The bacpMyOptions table contains the following elements: Element option Description The Telindus 1423 SHDSL Router supports the following BACP options: 1: the Favored-Peer option.

For more information on the BACP configuration options, refer to RFC 2125. length value This is the length of the option field. This is the option value represented as an octet string (hexadecimal ASCII representation).

telindus1423Router/bundle/isdnBundle[ ]/bacpHisOptions This attribute is only present in the PPP bundle of the ISDN interfaces. This attribute lists the BACP options for the router at the other side (remote side) of the link. The bacpHisOptions table contains the same elements as the bacpMyOptions table. Refer to telindus1423Router/bundle/isdnBundle[ ]/bacpMyOptions on page 332. Other option values than the ones supported by the Telindus 1423 SHDSL Router may be present. telindus1423Router/bundle/isdnBundle[ ]/inBandwidth This attribute is only present in the PPP bundle of the ISDN interfaces. In case BAP is enabled, this attribute shows the amount of bandwidth, in percent, of the total amount of available bandwidth that is currently used. telindus1423Router/bundle/isdnBundle[ ]/outBandwidth This attribute is only present in the PPP bundle of the ISDN interfaces. In case BAP is enabled, this attribute shows the amount of bandwidth, in percent, of the total amount of available bandwidth that is currently not used.

333 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bundle/pppBundle[ ]/multiclassInterfaces This attribute is not present in the PPP bundle of the ISDN interfaces. This attribute displays the status of the different multiclass PPP links in the PPP bundle. The multiclassInterfaces table contains the following elements: Element name ifOperStatus ifLastChange Description This element displays the name of the multiclass PPP link as you defined it in the multiclassInterfaces configuration attribute. This element displays the current operational status of the multiclass PPP link. This element shows the system-up time on the moment the multiclass PPP link entered its current operational state. I.e. the moment the value of the ifOperStatus status attribute changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status attribute. This element displays the IP information of the multiclass PPP link. Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/ip on page 277 for a detailed description of the ip structure. bridging This element displays the bridging information of the multiclass PPP link. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure. ppp This element displays the PPP information of the multiclass PPP link. Refer to for a detailed description of the elements in the ppp structure. multiclass This element displays the multiclass identifier of the multiclass PPP link.

ip

Telindus 1423 SHDSL Router User manual

Chapter MR-2 334 Status attributes

MR-2.13 Router status attributes


This section discusses the status attributes concerned with routing. First it describes the general routing status attributes. Then it explains the status attributes of the extra features as there are NAT, L2TP tunnelling, etc The following gives an overview of this section: MR-2.13.1 - General router status attributes on page 335 MR-2.13.2 - NAT status attributes on page 345 MR-2.13.3 - L2TP tunnel status attributes on page 347 MR-2.13.4 - IKE SA status attributes on page 352 MR-2.13.5 - OSPF status attributes on page 354 MR-2.13.6 - VRRP status attributes on page 372 MR-2.13.7 - Firewall status attributes on page 374

335 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.13.1 General router status attributes


This section describes the following status attributes: telindus1423Router/ip/router/routingTable on page 336 telindus1423Router/ip/router/igmpTable on page 339 telindus1423Router/ip/router/dhcpBinding on page 341 telindus1423Router/ip/router/dhcpStatistics on page 341 telindus1423Router/ip/router/dhcpRelayInfo on page 342 telindus1423Router/ip/router/dhcpBlackList on page 342 telindus1423Router/ip/router/radius on page 343 telindus1423Router/ip/router/dns on page 343 telindus1423Router/ip/router/dnsServers on page 343 telindus1423Router/ip/router/addrPools on page 344

This section describes the following actions: telindus1423Router/ip/router/unBlacklist on page 344

Telindus 1423 SHDSL Router User manual

Chapter MR-2 336 Status attributes

telindus1423Router/ip/router/routingTable This attribute lists all known routes (both static and learned routes) with their operating status. The routingTable contains the following elements: Element network mask gateway interface Description This is the IP address of the destination network. This is the network mask of the destination network. This is the IP address of the next router on the path to the destination network. This is the interface through which the destination network can be reached. Possible values are: internal. The own protocol stack is used. <name>. The destination network can be reached through this particular interface. The <name> of the interface is the name as you configured it. Note that the interface can also be a DLCI, an ATM PVC, a tunnel, etc. discard. Packets for this destination are discarded.

encapsulation

This is the used encapsulation. It is related to the interface for this route. Possible values are: none. The IP packets are not encapsulated. ethernet. The IP packets are encapsulated with the ARPA MAC header. frameRelay. The IP packets are encapsulated in Frame Relay. ppp. The IP packets are encapsulated in PPP. atm. The IP packets are encapsulated in ATM.

337 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Element status

Description This is the route status. Possible values are: up. The route is up, data transfer is possible. down. The route is down, data transfer is not possible. discard. Packets for this destination are discarded. spoofing. This applies on routes over an ISDN dial-up connection or through an L2TP outgoing dial tunnel. It means that the route is available, but that it is not truly up (yet). I.e. the (dial) connection can be made, but is currently not up. As soon as a connection is established, then the status of the route changes from spoofing to up. holdDown. This applies on RIP routes. A route enters into a hold-down state when an update packet is received that indicates the route is unreachable. The route is marked inaccessible and advertised as unreachable. However, the route is still used for forwarding packets. When hold-down expires, routes advertised by other sources are accepted and the route is no longer inaccessible. Refer to telindus1423Router/ip/router/ripHoldDownTime on page 131 for more information. closed. This applies on L2TP tunnels and VRRP. In case of L2TP tunnels where you configure a main and a backup tunnel (refer to MU10.5.4 - Configuration dun tunnel principal et de secours on page 351) and the main tunnel goes down, then it is not desirable that the route to the main tunnel its status returns from up to spoofing because in that case the Telindus 1423 SHDSL Router will keep trying to send data across the main route/tunnel. That is why in such a case the route to the main tunnel is artificially blocked. I.e. its status is set to closed. VRRP (refer to MU-8.9 - Configuration de VRRP on page 270), it is sometimes desirable that the IP address on an Ethernet interface no longer answers to pings, even if the Ethernet interface is up. That is why in such a case the host route is artificially blocked. I.e. its status is set to closed.

preference

This displays the route preference. If more than one route matches the IP destination address, this attribute determines which route is used. The route with the lowest preference value will be used. This is the type of the route. Possible values are: host. This is a host route, i.e. a route to a single IP address instead of a complete network. This is also used for the router its own IP address. internal. A route with this status is irrelevant. local. This is a route to a directly connected network. rip. This is a route that has been received via a RIP update. static. This is a route that has been configured, i.e. it is a static route. float. This is a route that has been added for a PPP link for which no local or remote IP address was configured. These were learned from the other side. Refer to MU-7.4.4 - Imposition dadresses IP au terminal distant dans PPP on page 169 for more information.

type

Telindus 1423 SHDSL Router User manual

Chapter MR-2 338 Status attributes

Element metric

Description If two routes exist with the same preference, then the route with the lowest metric value is chosen. The metric attribute serves as a cost for using the route. In most cases it indicates the number of hops (= routers) required to reach a destination. In case of a RIP route, the timeOut attribute displays the time the route will remain in the routing table if no RIP updates are received anymore. For other routes this attribute always displays 00000d 00h 00m 00s.

timeOut

Example The following figure displays an example of a routing table:

The lines in the routing table depicted above represent the following: Line 1 represents the default gateway, which is not defined. Lines 2 and 5 represent the subnets on the LAN and WAN interface respectively. Lines 3 and 6 represent the interface its IP addresses. Line 7 represents the static route to the remote LAN. Finally, line 4 represents the multicast address for RIP version 2.

Remark If the LAN is not connected to the Telindus 1423 SHDSL Router, it is still possible to contact the Telindus 1423 SHDSL Router with e.g. TMA or Telnet over the WAN link by using the IP address of the LAN interface. This means that the status attribute telindus1423Router/lanInterface/ip/status still indicates up, although in the routingTable the corresponding route to the network is down. This implementation seems not logical but is necessary to insure correct operation with HP OpenView.

339 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/igmpTable This attribute shows the multicast address, reported by one or more clients. The igmpTable is always updated, even if no proxy is configured. The igmpTable contains the following elements: Element multicast interface Description This is the multicast address. This is the interface name of the client(s). In case of multiple interface names, they are separated from each other by a comma.

What is IGMP? Internet Group Management Protocol (IGMP) is defined in RFC 1112 as the standard for IP multicasting in the Internet. It is used to establish host memberships in particular multicast groups on a single network. The mechanisms of the protocol allow a host to inform its local router, using Host Membership Reports, that it wants to receive messages addressed to a specific multicast group. All hosts conforming to level 2 of the IP multicasting specification require IGMP. IGMP topology Consider the following multicasting topology:

In this topology Client 1 and Client 2 are multicast clients. Router 1, 2 and 3 are multicast enabled routers. Server 1 is a multicast server.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 340 Status attributes

The following are some characteristics of an IGMP topology: Only 1 IGMP proxy can be defined per device. The TTL of an IGMP frame is always 1. IGMP messages are never forwarded. An IGMP frame contains an IP router alert option. IGMPv1 routers may be present in the network.

The multicasting IGMP protocol can be configured on every IP interface. Refer to the igmp element in MU-5.2.3 - Explication de la structure ip on page 63. A client can leave or join a multicast group by erasing or adding a multicast address from a table, defined in the client application. A list of multicast group addresses is maintained in the routers. The reported multicast addresses can be seen in the igmpTable. Refer to telindus1423Router/ip/router/igmpTable on page 339. On a router interface, IGMP join and leave messages are interpreted and the multicast member list is adapted accordingly. Multicast frames are forwarded if they are present in the multicast member list. On a proxy interface, IGMP join and leave messages are transmitted according to the multicast member list. Multicast frames are always forwarded. Since IGMP is send in UDP (join/leave can be lost), the clients (proxies) are polled every 125 seconds: A general query is send to 224.0.0.1 (poll all systems). A leave group message is send to 224.0.0.2 (all routers).

341 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/dhcpBinding This attribute contains a list of dynamically assigned (i.e. leased) IP addresses. The dhcpBinding table contains the following elements: Element ipAddress macAddress leaseTime hostName interface state Description This is the IP address that is dynamically assigned to a client. This is the MAC address of the client. This is the remaining lease time. This is the hostname of the client. This is the name of the interface on which the client has been bound. This is the state of the lease. Possible values are leased and onHold.

telindus1423Router/ip/router/dhcpStatistics This attribute contains the statistics of all IP address ranges that have been specified in the configuration attribute telindus1423Router/ip/router/dhcpDynamic. The dhcpStatistics table contains the following elements: Element startRange endRange interface free leased hold Description Displays the IP start address of an IP address range. Displays the IP end address of an IP address range. For the corresponding IP address range, this is the name of the interface on which the clients have been bound. For the corresponding IP address range, this displays the number of IP addresses that are still free. For the corresponding IP address range, this displays the number of IP addresses that are leased. For the corresponding IP address range, this displays the number of IP addresses that are on hold.

During power-down of the DHCP server, some leased IP addresses can still be active. Because the duration of the power-down can not be known, all timer information about lease and hold time becomes meaningless. Therefore, the DHCP server incorporated in the Telindus 1423 SHDSL Router sends a ping to all leased addresses after a warm boot. When the client responds to this ping, the DHCP server resets all timers to their default value and keeps the lease with this client.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 342 Status attributes

telindus1423Router/ip/router/dhcpRelayInfo This attribute displays the status information of the DHCP relay process in case the Telindus 1423 SHDSL Router is configured to act as DHCP relay agent. The dhcpRelayInfo table contains the following elements: Element sourceIntf mac assignedIp serverIp dhcpStatus leaseTime Description This is the name of the interface on which the DHCP request has been received. This is the MAC address of the client. This is the IP address that has been dynamically assigned to the client by the remote DHCP server. This is the IP address of the remote DHCP server. This is the status of the DHCP process. Possible values are: discover, offer, request, decline, ack, nack, release, inform, idle. This is the remaining lease time.

telindus1423Router/ip/router/dhcpBlackList This attribute displays the MAC and IP address of blacklisted clients and the reason why they are on the black list. The dhcpBlackList table contains the following elements: Element ipAddress macAddress reason Description This is the IP address of the blacklisted client. This is the MAC address of the blacklisted client. This is the reason why the client is on the black list. Possible values are: arp. The ARP request probing indicated that the IP address is already in use by a client on the network. Refer to telindus1423Router/ip/router/dhcpCheckAddress on page 141. ping. The ICMP Echo Request (ping) probing indicated that the IP address is already in use by a client on the network. Refer to telindus1423Router/ip/router/dhcpCheckAddress on page 141. alienAck. Another DHCP server assigned an IP address to the client. declined. The client explicitly declined the IP address that was assigned. networkOrBroadcast. The DHCP server tried to assign a network or broadcast address to a client. This indicates that the IP address ranges in the DHCP server have been misconfigured.

343 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/radius This attribute shows some RADIUS status information. Refer to Qu'est-ce que le RADIUS ? on page 376 for more information. The radius structure contains the following elements: Element authServer acctServer pendingRequests Description This is the IP address of the authentication server the Telindus 1423 SHDSL Router is connected to. This is the IP address of the accounting server the Telindus 1423 SHDSL Router is connected to. This is the amount of pending requests on these servers.

telindus1423Router/ip/router/dns This attribute shows some DNS status information. Refer to What is DNS? on page 509 for more information. The dns table contains the following elements: Element ipAddress hostname ttl infiniteTimeOut Description This is the IP address of the DNS server. This is the hostname of the DNS server. This is the time-to-live of the cached DNS data. This indicates that the DNS record has an infinite TTL or at least longer than 24 days.

telindus1423Router/ip/router/dnsServers This attribute displays the IP address(es) of the DNS server(s) that have been configured or learned. The dns table contains the following elements: Element primaryDns secondaryDns Description This is the IP address of the primary DNS server. This is the IP address of the secondary DNS server.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 344 Status attributes

telindus1423Router/ip/router/addrPools This attribute shows which IP addresses have already been picked out of the IP address pool. Refer to Qu'est-ce qu'un pool d'adresses IP ? on page 65 for more information. The addrPools table contains the following elements: Element name type local remote netMask interface Description This is the name of the IP address pool, as you configured it, from which the IP addresses have been picked. This is the type of IP address pool from which the IP addresses have been picked. Possible values are: list or interval. This is the local IP address that has been picked out of the IP address pool. This is the remote IP address that has been picked out of the IP address pool. This is the subnet mask that has been picked out of the IP address pool. This is the name of the interface on which the IP addresses are used.

telindus1423Router/ip/router/unBlacklist This action removes an entry from the blacklist. The unBlacklist action contains the following argument values: Element startIp Description Use this element to specify an IP address (range) that has to be removed from the blacklist. If you want to specify stopIp mac a single IP address, then just enter the IP address in the startIp element and leave the stopIp element at its default value (<opt>). an IP address range, then enter the first IP address of the range in the startIp element and the last IP address of the range in the stopIp element.

Use this element to specify the last IP address of an IP address range that has to be removed from the blacklist. Use this element to specify a MAC address of an entry that has to be removed from the blacklist.

345 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.13.2 NAT status attributes


This section describes the following status attributes: telindus1423Router/ip/router/defaultNat/addresses on page 346

Telindus 1423 SHDSL Router User manual

Chapter MR-2 346 Status attributes

telindus1423Router/ip/router/defaultNat/addresses This attribute displays the status of each official IP address that is configured in the configuration attribute telindus1423Router/ip/router/defaultNat/addresses. The addresses table contains the following elements: Element officialAddress privateAddress status Description This is the official IP address as you entered it in the addresses configuration attribute. This is the private IP address that is currently linked with the official IP address. This is the status of the official IP address. Possible values are: uses free. This official IP address is currently not in use. fixed. This address has a pre-configured mapping between the official and private IP address. allocated. This official IP address is currently assigned to a private IP address, but it is not fixed.

This indicates how many sessions are currently used by this official IP address. If the attribute value becomes zero, the assigned official IP address becomes free again and can be assigned to another private IP address.

347 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.13.3 L2TP tunnel status attributes


This section describes the following status attributes: telindus1423Router/ip/router/tunnels/l2tpTunnels on page 348 telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels on page 349

Telindus 1423 SHDSL Router User manual

Chapter MR-2 348 Status attributes

telindus1423Router/ip/router/tunnels/l2tpTunnels This attribute displays status information of the L2TP tunnels. The l2tpTunnels table contains the following elements: Element name Description This is the name of the tunnel as you configured it. If you did not configure a name, then this element displays: tunnel <local IP address of the tunnel>. E.g. tunnel 192.168.5.1 ifOperStatus This displays the operational status of the tunnel. Possible values are: up. The tunnel is up, data transfer is possible. down. The tunnel is down, data transfer is not possible. dormant. The tunnel is "stand-by". As soon as data has to be sent over the tunnel, control connect messages are exchanged and the operational status of the tunnel becomes up.

ifLastChange

This is the system-up time on the moment the tunnel entered its current operational state. I.e. the moment the value of the ifOperStatus status element changes (from up to down or vice versa), the system-up time value is written into the ifLastChange status element. This displays the IP information of the tunnel. Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/ip on page 277 for a detailed description of the ip structure.

ip

bridging

This displays the bridging information of the tunnel. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure.

l2tp

This displays the specific L2TP related status information of the tunnel. Refer to the telindus1423Router/ip/router/tunnels/l2tpTunnels/l2tp on page 349 for a detailed description of the l2tp structure.

ppp

This displays the PPP information of the tunnel. Refer to MR-2.5.3 - PPP status attributes on page 285 for a detailed description of the elements in the ppp structure.

349 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/tunnels/l2tpTunnels/l2tp The l2tp structure in the l2tpTunnels table displays the specific L2TP related status information of the tunnel. The l2tp structure contains the following elements: Element sendingSeqNum receivingSeqNum l2tpType Description In case sequence numbering on the data messages is enabled (dataChannelSequenceNumbering = on), then this displays the transmit data sequence numbers. In case sequence numbering on the data messages is enabled (dataChannelSequenceNumbering = on), then this displays the receive data sequence numbers. This displays which L2TP server type the Telindus 1423 SHDSL Router currently is: LAC or LNS. If you set the configuration attribute l2tpMode to auto, then the status attribute l2tpType displays the auto value until the Telindus 1423 SHDSL Routers have mutually decided who will be the LAC and who the LNS. controlState callState deliveryState authenState This displays the states associated with the LNS or LAC control connection establishment. Refer to L2TP status - control states on page 350 for more information. This displays the states associated with the LNS or LAC incoming or outgoing calls. Refer to L2TP status - call states on page 350 for more information. This displays the states associated with the LNS or LAC packet delivery. Refer to L2TP status - delivery states on page 351 for more information. This displays the states associated with the LNS or LAC authentication. Refer to L2TP status - authentication states on page 351 for more information.

telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels This attribute displays status information of the IPSEC L2TP tunnels. The ipsecL2tpTunnels table contains the same elements as the l2tpTunnels table. Refer to telindus1423Router/ ip/router/tunnels/l2tpTunnels on page 348.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 350 Status attributes

L2TP status - control states


The states associated with the LNS or LAC for control connection establishment are: Value idle Description No control connection is present. Both initiator and recipient start from this state. An initiator transmits a Start Control Connection Request, while a recipient remains in the idle state until receiving a Start Control Connection Request. waitCtlReply waitCtlConn This is the state where a Start Control Connection Reply is awaited. This is the state where a Start Control Connection Connected is awaited. Upon receipt, the challenge response is checked. The tunnel either is established, or is torn down if an authorisation failure is detected. The control connection is established. An established connection may be terminated by either a local condition or the receipt of a Stop Control Connection Notification. The session then returns to the idle state.

established

L2TP status - call states


The states associated with the LNS or LAC incoming or outgoing calls are: Value idle waitTunnel Description No data is exchanged over the tunnel. This is the state in which is waited either for the control connection to be opened, or for verification that the tunnel is already open.

Once an indication is received that the tunnel has/was opened, session control messages may be exchanged. The first of these is the Incoming Call Request. waitReply This is the state where an Incoming or Outgoing Call Reply message is awaited. If an Incoming or Outgoing Call Reply message is received, an incoming or Outgoing Call Connected message is sent and the session moves to the established state. This is the state where an Incoming or Outgoing Call Connected message is awaited. If an Incoming or Outgoing Call Connected message is received, the call was successful and the session moves to the established state. Data is exchanged over the tunnel. The session is terminated when receiving or sending a Call Disconnect Notify message. The session then returns to the idle state.

waitConnect

established

351 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

L2TP status - delivery states


The states associated with the packet delivery are: Value operating idle Description The Telindus 1423 SHDSL Router has sent a packet, but has not received an acknowledgement on this packet yet. All transmitted packets have been acknowledged.

L2TP status - authentication states


The states associated with the LNS or LAC authentication are: Value noAuthentication authenSuccessful authenFailure Description Authentication is not enabled. This is also the start-up state for the authentication process. Authentication was successful. The Telindus 1423 SHDSL Router remains in this state during data transfer. Authentication failed. This is a transient state since the Telindus 1423 SHDSL Router starts the handshake again after a failing authentication.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 352 Status attributes

MR-2.13.4 IKE SA status attributes


This section describes the following status attributes: telindus1423Router/ip/router/ikeSA[ ]/phase1 on page 353 telindus1423Router/ip/router/ikeSA[ ]/phase2 on page 353

This section describes the following actions: telindus1423Router/ip/router/ikeSA[ ]/clearSAs on page 353

353 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ikeSA[ ]/phase1 This attribute displays status information of phase 1 in the IKE negotiation process. The phase1 table contains the following elements: Element remoteIp remainingSecs Description This element displays the IP address of the remote. This element displays the time the IKE SA will remain active for.

telindus1423Router/ip/router/ikeSA[ ]/phase2 This attribute displays status information of phase 2 in the IKE negotiation process. The phase2 table contains the following elements: Element tunnel direction spi protocol localIp remoteIp encryptionAlgorithm authenticationAlgorithm age softLifeTime Description This element displays the L2TP tunnel name. This element displays the direction of the IPSEC SA. Possible values are: inbound or outbound. This element displays the Security Parameter Index of the IPSEC SA. This element displays which protocol is used in the IPSEC SA. Possible values are: esp or ah. This element displays the local IP address. This element displays the remote IP address. This element displays which encryption algorithm is used on the IPSEC SA. Possible values are: null, des, 3des or disabled. This element displays which authentication algorithm is used on the IPSEC SA. Possible values are: hmac_md5, hmac_sha-1 or disabled. This element displays the age of the IPSEC SA. This element displays the soft life time of the IPSEC SA. When the soft life time expires, the IKE peers know that the hard lifetime is about to expire. This gives them the time to rekey the SA without disrupting communication before the hard lifetime expires. hardLifeTime This element displays the hard life time of the IPSEC SA. When the hard life time expires, the IPSEC SA is actually disconnected. telindus1423Router/ip/router/ikeSA[ ]/clearSAs Use this action to clear all SAs.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 354 Status attributes

MR-2.13.5 OSPF status attributes


This section discusses the status attributes concerned with OSPF. First it describes the general OSPF status attributes. Then it explains the OSPF area status attributes. The following gives an overview of this section: General OSPF status attributes on page 355 Area status attributes on page 360

355 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

General OSPF status attributes This section describes the following status attributes: telindus1423Router/ip/router/ospf/type on page 356 telindus1423Router/ip/router/ospf/routes on page 357 telindus1423Router/ip/router/ospf/externalRoutes on page 358 telindus1423Router/ip/router/ospf/asExtLsas on page 359

Telindus 1423 SHDSL Router User manual

Chapter MR-2 356 Status attributes

telindus1423Router/ip/router/ospf/type This attribute indicates the kind of router link being described. The type structure contains the following elements Element areaBorder asbr Description This element indicates whether the router is an Area Border Router. This element indicates whether the router is an Autonomous System Border Router. Refer to MU-8.6.1 - Introduction OSPF on page 220 for more information. virtualLink wildCardMulticast This element indicates whether a virtual link is present on the router. This element indicates whether multicast extensions are supported by the router. Note that wildcard multicast is not yet supported by the Telindus 1423 SHDSL Router. nssaTranslator This element indicates whether the router is an NSSA border router translator.

357 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ospf/routes This attribute displays all detected routes in the OSPF network. All detected routes are transferred to the routing table of this router as type OSPF. The routes table contains the following elements: Element network mask type Description This element displays the IP address of the sub network. This element displays the network mask. This element displays the type of the network. Possible values are: cost direct. This value indicates a direct route. This is a route to a host connected directly to the router. intra. This value indicates an intra-area route. This is a route with destinations belonging to one of the router's attached areas. inter. This value indicates an inter-area route.This is a route with destinations in other OSPF areas. extType1. This value indicates an external route of type 1. extType2. This value indicates an external route of type 2. reject. This value indicates a rejected route. static. This value indicates a static route. none. This value indicates a non-existing route.

This element displays the cost of the route. There are two exceptions, when another value is displayed. These are: unknown. This value indicates that the cost of the route is unknown. infinite. This value indicates that the route is not available.

gateway outgoingIp interface

This element displays the IP address of the next interface on the path to the destination network. This element displays the IP address of the outgoing router interface. This element displays the administrative name of the interface.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 358 Status attributes

telindus1423Router/ip/router/ospf/externalRoutes This attribute displays all external routes which are injected into the OSPF network by this router. The externalRoutes table contains following elements: Element network mask gateway interface costType Description This element displays the IP address of the sub network. This element displays the network mask. This element displays the IP address of the next interface on the path to the destination network. This element displays the administrative name of the interface. This element displays the type of cost of the external route. Possible values are: type1. The type of cost of the external route is type 1. type2. The type of cost of the external route is type 2.

Also refer to telindus1423Router/ip/router/ospf/importFilter on page 182. cost This element displays the cost of the route. There are two exceptions, when another value is displayed. These are: tag unknown. This value indicates that the cost of the route is unknown. infinite. This value indicates that the route is not available.

This element displays the 32-bit field attached to each external route. This is not used by the OSPF protocol itself. It is used to communicate information between AS boundary routers. This element displays whether the router advertises the external route to the rest of the OPSF network. Possible values are: yes. The router advertises the external route to the rest of the OPSF network. no. The router does not advertise the external route to the rest of the OPSF network.

advertise

routeType

This element displays how the external route is injected into OSPF. Possible values are: static. Static route configured by the user. rip. This route was learned through the rip protocol.

359 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ospf/asExtLsas This attribute displays the database entries for all external routes in the OSPF network. The asExtLsas table contains following elements: Element linkStateId advRouterId age sequenceNr options Description This element displays the portion of the network that is being described by the LSA. The contents of this field depend on the type of LSA. This element displays the router ID of the router that originated the LSA. This element displays the time in seconds since the LSA was originated. This element displays the LS sequence number (successive instances of an LSA are given successive LS sequence numbers). This element indicates if the advertising router supports optional OSPF capabilities. Routers of differing capabilities can be mixed within an OSPF routing domain. The options structure contains the following elements: floodExternal. Entire OSPF areas can be configured as "stubs". AS-externalLSAs will not be flooded into stub areas. This capability is represented by the element floodExternal. multicast. This element indicates whether IP multicast datagrams are forwarded. nssa. This element indicates whether the router supports nssa areas. externalAttributes. This element indicates the router's willingness to receive and forward external LSAs. demandCircuit. This element indicates the router's handling of demand circuits. opaque. This element indicates if the router can handle opaque-LSAs.

netMask costType

This element displays the IP address mask for the advertised destination. This element displays the type of cost of the external route. Possible values are: type1. The type of cost of the external route is type 1. type2. The type of cost of the external route is type 2.

Also refer to telindus1423Router/ip/router/ospf/importFilter on page 182. cost tag This element displays the cost of this route. This element displays a 32-bit field attached to each external route. This is not used by the OSPF protocol itself. It is used to communicate information between AS boundary routers. This element displays the address to which data traffic for the advertised destination is forwarded to.

forwardAddress

Telindus 1423 SHDSL Router User manual

Chapter MR-2 360 Status attributes

Area status attributes This section describes the following status attributes: telindus1423Router/ip/router/ospf/area[ ]/interfaces on page 361 telindus1423Router/ip/router/ospf/area[ ]/hosts on page 363 telindus1423Router/ip/router/ospf/area[ ]/neighbors on page 363 telindus1423Router/ip/router/ospf/area[ ]/routers on page 365 telindus1423Router/ip/router/ospf/area[ ]/routerLsas on page 366 telindus1423Router/ip/router/ospf/area[ ]/networkLsas on page 368 telindus1423Router/ip/router/ospf/area[ ]/summLsas on page 369 telindus1423Router/ip/router/ospf/area[ ]/asbrLsas on page 370 telindus1423Router/ip/router/ospf/area[ ]/nssaLsas on page 371

361 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/interfaces This attribute displays all interfaces available in the area. If an interface is part of more than one network, the interface belongs to the network with the most significant subnet mask. The interfaces table contains following elements: Element name address netMask network type Description This element displays the name of the interface. This element displays the IP address of the interface. This element displays the subnet mask. This element displays the name of the sub network the interface is part of. This element displays the interface type. Possible values are: pointToPoint: The interface is a point-to-point interface. broadcast: The interface is a broadcast interface. virtualLink: The interface is a virtual link interface. loopback: The interface is a loopback interface.

cost priority status

This element displays the cost of the link. This element displays the priority of the network. This element displays the status of the router interface. Refer to telindus1423Router/ip/router/ospf/area[ ]/interfaces/status on page 362 for more information.

dr backupDr neighbors adjNeighbors bandwidth

This element displays the IP address of the Designated Router of the sub network. This element displays the IP address of the Backup Designated Router. This element displays the amount of neighbors of the router. This element displays the amount of adjacent neighbors of the router. This element displays the bandwidth of the link.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 362 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/interfaces/status The states are listed in order of progressing functionality. For example, the inoperative state is listed first, followed by a list of intermediate states before the final, fully functional state is achieved. Possible values are: Value unknown down loopback waiting Description The router status is unknown. This is the initial interface state. No protocol traffic at all will be sent or received. The router's interface to the network is looped back. The interface will be unavailable for regular data traffic. The router is trying to determine the identity of the (Backup) Designated Router for the network. To do this, the router monitors the Hello Packets it receives. The router is not allowed to elect a Backup Designated Router nor a Designated Router until it transitions out of Waiting state. This prevents unnecessary changes of (Backup) Designated Router. The interface is operational, and connects either to a physical point-to-point network or to a virtual link. Upon entering this state, the router attempts to form an adjacency with the neighbouring router. Hello Packets are sent to the neighbour every helloInterval seconds. The interface is connected to a broadcast or NBMA network on which another router has been selected to be the Designated Router. In this state, the router itself has not been selected Backup Designated Router either. The router forms adjacencies to both the Designated Router and the Backup Designated Router (if they exist). The router itself is the Backup Designated Router on the attached network. It will be promoted to Designated Router when the present Designated Router fails. The router establishes adjacencies to all other routers attached to the network. In this state, this router itself is the Designated Router on the attached network. Adjacencies are established to all other routers attached to the network. The router must also originate a network-LSA for the network node.

pointToPoint

drOther

backupDr

dr

363 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/hosts This attribute displays all hosts in the OSPF network. Loopback interfaces that are added to the OSPF network are referred to as hosts. The loop-back interface is a software interface which can be used for management purposes. This interface is always up, regardless of the state of the physical interfaces. The hosts table contains following elements Element intfName address netMask network cost Description This element displays the administrative name of the loop-back interface. This element displays the IP address of the loop-back interface. This element displays the subnet mask of the loop-back interface. This element displays the administrative name of the network that the loop-back interface is part of. This element displays the cost of the loop-back interface link.

telindus1423Router/ip/router/ospf/area[ ]/neighbors This attribute displays the neighbours of the router. Routers that share a common segment become neighbours on that segment. Neighbours are discovered via the Hello protocol. Bidirectional communication is indicated when the router sees itself listed in the neighbours Hello Packet. The neighbors table contains following elements: Element interface routerId routerPriority ipAddress status Description This element displays the administrative name of the neighbouring interface. This element displays the unique sequence number for the router in the OSPF network. This element displays the priority of the neighbouring router. This element displays the IP address of the neighbouring interface. This element displays the status of the neighbouring router. Refer to telindus1423Router/ip/router/ospf/area[ ]/neighbors/status on page 364 for more information.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 364 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/neighbors/status The states are listed in order of progressing functionality. For example, the inoperative state is listed first, followed by a list of intermediate states before the final, fully functional state is achieved. Possible values are: Value down attempt Description This is the initial state of a neighbour conversation. It indicates that there has been no recent information received from the neighbour. This state is only valid for neighbors attached to NBMA networks. It indicates that no recent information has been received from the neighbour, but that a more concerted effort should be made to contact the neighbour. This is done by sending the neighbour Hello packets at intervals of helloInterval An Hello packet has recently been seen from the neighbour. However, bidirectional communication has not yet been established with the neighbour (i.e., the router itself did not appear in the neighbours Hello packet). All neighbors in this state (or higher) are listed in the Hello packets sent from the associated interface. Communication between the two routers is bidirectional. This has been assured by the operation of the Hello Protocol. This is the first step in creating an adjacency between the two neighbouring routers. The goal of this step is to decide which router is the master. Neighbour conversations in this state or greater are called adjacencies. The router is describing its entire link state database by sending Database Description packets to the neighbour. Link State Request Packets may also be sent asking for the neighbours more recent LSAs. Link State Request packets are sent to the neighbour asking for the more recent LSAs that have been discovered (but not yet received) in the Exchange state. The neighbouring routers are fully adjacent. These adjacencies will now appear in router-LSAs and network-LSAs.

init

2way exchangeStart

exchange

loading fullAdjacency

365 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/routers This attribute displays all routers in the current area. The routers table contains following elements: Element routerId gateway cost routerType Description This element displays the unique sequence number for the router in this OSPF autonomous system. This element displays the IP address of the next interface on the path to reach this router. This element displays the cost of the route. This element indicates which type of router is detected. The routerType structure contains the following elements: areaBorder. This element indicates that the detected router is an Area Border Router (ABR). asbr. This element indicates that the detected router is an Autonomous System Border Router (ASBR). virtualLink. This element indicates that the link to the detected router is a virtual link. wildCardMulticast. This element indicates if multicast extensions are supported by the router.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 366 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/routerLsas This attribute displays the router-LSAs. Each router in an area originates router-LSAs. The LSA describes the state and cost of the router's links (i.e., interfaces) to the area. All of the router's links to the area must be described in a single router-LSA. The routerLsas table contains following elements: Element linkStateId Description This element displays the router's OSPF Router ID. It displays the portion of the network that is being described by the LSA. The contents of this field depend on the type of LSA. advRouterId age sequenceNr options This element displays the router ID of the router that originated the LSA. This element displays the time in seconds since the LSA was originated. This element displays the LS sequence number (successive instances of an LSA are given successive LS sequence numbers). This element indicates if the advertising router supports optional OSPF capabilities. Routers of differing capabilities can be mixed within an OSPF routing domain. The options structure contains following elements: floodExternal. Entire OSPF areas can be configured as "stubs". AS-externalLSAs will not be flooded into stub areas. This capability is represented by the element floodExternal. multicast. This element indicates whether IP multicast datagrams are forwarded. nssa. This element indicates whether the router supports nssa areas. externalAttributes. This element indicates the router's willingness to receive and forward external LSAs. demandCircuit. This element indicates the router's handling of demand circuits. opaque. This element indicates if the router can handle opaque-LSAs.

routerType

This element indicates the kind of router link being described. The routerType structure contains following elements: areaBorder. This element indicates a link to an ABR. asbr. This element indicates a link to an ASBR. virtualLink. This element indicates a virtual link. wildCardMulticast. This element indicates a multicast link.

linkNr linkId

This element displays the number of router links described in this LSA. This element identifies the object that this router link connects to. When connecting to an object that also originates an LSA (i.e., another router or a transit network) the Link ID is equal to the neighbouring LSAs Link State ID. This provides the key for looking up the neighbouring LSA in the link state database during the routing table calculation.

367 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Element linkData

Description The value of this element depends on the linkType: For connections to stub networks, linkData specifies the network's IP address mask. For unnumbered point-to-point connections, it specifies the interface's MIB-II interface Index value. For the other link types it specifies the router interface's IP address.

This latter piece of information is needed during the routing table build process, when calculating the IP address of the next hop. linkType This element displays the type of the link. Possible values are: cost pointToPoint. The link is a point-to-point connection. transit. The link is a transit connection. stub. The link is a connection within a stub area. virtualLink. The link is a virtual link.

This element displays the cost of this link.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 368 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/networkLsas This attribute displays the network-LSAs. A network-LSA is originated for each network in the area which supports two or more routers. The network-LSA is originated by the network's Designated Router. The LSA describes all routers attached to the network, including the Designated Router itself. The networkLsas table contains following elements: Element linkStateId Description This element displays the IP interface address of the Designated Router. It displays the portion of the network that is being described by the LSA. The contents of this field depend on the type of LSA. AdvRouterId age sequenceNr options This element displays the router ID of the router that originated the LSA. This element displays the time in seconds since the LSA was originated. This element displays the LS sequence number (successive instances of an LSA are given successive LS sequence numbers). This element indicates if the advertising router supports optional OSPF capabilities. Routers of differing capabilities can be mixed within an OSPF routing domain. The options structure contains the following elements: floodExternal. Entire OSPF areas can be configured as "stubs". AS-externalLSAs will not be flooded into stub areas. This capability is represented by the element floodExternal. multicast. This element indicates whether IP multicast datagrams are forwarded. nssa. This element indicates whether the router supports nssa areas. externalAttributes. This element indicates the router's willingness to receive and forward external LSAs. demandCircuit. This element indicates the router's handling of demand circuits. opaque. This element indicates if the router can handle opaque-LSAs.

netMask linkNr routerId

This element displays the IP address mask for the network. This element displays the number of router links described in this LSA. This element displays the router IDs of each of the routers attached to the network. Only those routers that are fully adjacent to the Designated Router are listed. The Designated Router itself is included in this list.

369 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/summLsas This attribute displays the Summary-LSAs. Summary-LSAs are originated by area border routers and describe inter-area destinations. The summLsas table contains following elements: Element linkStateId Description If the destination is an IP network, then the linkStateId element is an IP network number. If the destination is an AS boundary router, then the linkStateId element is the AS boundary router's OSPF Router ID. This element displays the portion of the network that is being described by the LSA. The contents of this field depend on the type of LSA. AdvRouterId age sequenceNr options This element displays the router ID of the router that originated the LSA. This element displays the time in seconds since the LSA was originated. This element displays the LS sequence number (successive instances of an LSA are given successive LS sequence numbers). This element indicates if the advertising router supports optional OSPF capabilities. Routers of differing capabilities can be mixed within an OSPF routing domain. The options structure contains the following elements: floodExternal. Entire OSPF areas can be configured as "stubs". AS-externalLSAs will not be flooded into stub areas. This capability is represented by the element floodExternal. multicast. This element indicates whether IP multicast datagrams are forwarded. nssa. This element indicates whether the router supports nssa areas. externalAttributes. This element indicates the router's willingness to receive and forward external LSAs. demandCircuit. This element indicates the router's handling of demand circuits. opaque. This element indicates if the router can handle opaque-LSAs.

netMask cost

This element displays the IP address mask for the destination network. This element displays the cost of this route.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 370 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/asbrLsas This attribute displays the ASBR-LSAs. The asbrLsas table contains following elements: Element linkStateId AdvRouterId age sequenceNr options Description This element displays the portion of the network that is being described by the LSA. The contents of this field depend on the type of LSA. This element displays the router ID of the router that originated the LSA. This element displays the time in seconds since the LSA was originated. This element displays the LS sequence number (successive instances of an LSA are given successive LS sequence numbers). This element indicates if the advertising router supports optional OSPF capabilities. Routers of differing capabilities can be mixed within an OSPF routing domain. The options structure contains the following elements: floodExternal. Entire OSPF areas can be configured as "stubs". AS-externalLSAs will not be flooded into stub areas. This capability is represented by the element floodExternal. multicast. This element indicates whether IP multicast datagrams are forwarded. nssa. This element indicates whether the router supports nssa areas. externalAttributes. This element indicates the router's willingness to receive and forward external LSAs. demandCircuit. This element indicates the router's handling of demand circuits. opaque. This element indicates if the router can handle opaque-LSAs.

cost

This element displays the cost of this route.

371 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/ospf/area[ ]/nssaLsas This attribute displays the NSSA-LSAs. The nssaLsas table contains following elements: Element linkStateId AdvRouterId age sequenceNr options Description This element displays the portion of the network that is being described by the LSA. The contents of this field depend on the type of LSA. This element displays the router ID of the router that originated the LSA. This element displays the time in seconds since the LSA was originated. This element displays the LS sequence number (successive instances of an LSA are given successive LS sequence numbers). This element indicates if the advertising router supports optional OSPF capabilities. Routers of differing capabilities can be mixed within an OSPF routing domain. The options structure contains the following elements: floodExternal. Entire OSPF areas can be configured as "stubs". AS-externalLSAs will not be flooded into stub areas. This capability is represented by the element floodExternal. multicast. This element indicates whether IP multicast datagrams are forwarded. nssa. This element indicates whether the router supports nssa areas. externalAttributes. This element indicates the router's willingness to receive and forward external LSAs. demandCircuit. This element indicates the router's handling of demand circuits. opaque. This element indicates if the router can handle opaque-LSAs.

netMask costType

This element displays the IP address mask for the advertised destination. This element displays the type of cost of the external route. Possible values are: type1. The type of cost of the external route is type 1. type2. The type of cost of the external route is type 2.

cost tag

This element displays the cost of this route. This element displays a 32-bit field attached to each external route. This is not used by the OSPF protocol itself. It is used to communicate information between AS boundary routers. This element displays the address to which data traffic for the advertised destination is forwarded to.

forwardAddress

Telindus 1423 SHDSL Router User manual

Chapter MR-2 372 Status attributes

MR-2.13.6 VRRP status attributes


This section describes the following status attributes: telindus1423Router/ip/router/vrrp[ ]/macAddress on page 373 telindus1423Router/ip/router/vrrp[ ]/interfaces on page 373 telindus1423Router/ip/router/vrrp[ ]/criticals on page 373

373 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/vrrp[ ]/macAddress This attribute displays the for VRRP reserved MAC address. The first 5 bytes are fixed (00:00:5e:00:01). The last byte is the virtual router ID. telindus1423Router/ip/router/vrrp[ ]/interfaces This attribute displays the status of the virtual router its interfaces. The interfaces table contains the following elements: Element name priority status Description This element displays the interface name. This element displays the interface priority. This element displays the interface status. Possible values are: initial: The virtual router interface is in an initial state (e.g. during the master/ backup election process). master: The virtual router interface is elected master after the master/backup election process. backup: The virtual router interface is elected backup after the master/backup election process. inactive: The virtual router interface is inactive (e.g. because VRRP is not active).

telindus1423Router/ip/router/vrrp[ ]/criticals This attribute displays the status of the virtual router interfaces that you defined as critical (refer to telindus1423Router/ip/router/vrrp[ ]/criticals on page 196). The criticals table contains the following elements: Element interface status Description This element displays the name of the critical interface. This element displays the operational status (e.g. up, down, etc.) of the critical interface.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 374 Status attributes

MR-2.13.7 Firewall status attributes


This section describes the following status attributes: telindus1423Router/ip/router/firewall/sessions on page 375 telindus1423Router/ip/router/firewall/reverseSessions on page 375 telindus1423Router/ip/router/firewall/log on page 376 telindus1423Router/ip/router/firewall/sNet on page 376

This section describes the following actions: telindus1423Router/ip/router/firewall/clearLog on page 376

375 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/ip/router/firewall/sessions This attribute displays the status of the sessions that are currently going through the firewall. The sessions table contains the following elements: Element sNet policyDirection sourceIp destIp protocol destPort bytesTransferred natIp name Description This element displays the name of the source SNet. I.e. the SNet in which the originator of the session is located. This element displays the direction of the policy that applies on the session. Possible values are: inbound or outbound. This element displays the source IP address. This element displays the destination IP address. This element displays the protocol that is used. Possible values are: icmp, tcp, udp, esp, ah, other. This element displays the destination port number. This element displays the number of bytes transferred in this session. This element displays the IP address of the NAT gateway (if NAT is enabled for this session). This element displays the name of the policy that applies on the session.

telindus1423Router/ip/router/firewall/reverseSessions This attribute displays the status of the reverse sessions that are currently going through the firewall. You do not have to set up policies to allow the reverse session (i.e. the return path) of a session that was initiated. These reverse sessions are set up and allowed automatically. For example, if you define an outbound policy from the corporate network to the Internet to allow web browsing (HTTP) and if a HTTP session from the corporate network to the Internet is set up, then a reverse session from the Internet to the corporate network is set up and allowed automatically. The reverseSessions table contains the same elements as the sessions table. Refer to telindus1423Router/ip/ router/firewall/sessions on page 375.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 376 Status attributes

telindus1423Router/ip/router/firewall/log This attribute displays the firewall log. The sessions table contains the following elements: Element date sysUpTime priority event Description This element displays the date and time the event was logged. This element displays the system-up time at the moment the event was logged. This element displays the priority of the event. Possible values are: debug, info, notice, warning, error, critical, alert, emergency. This element displays a description of the event. E.g. access policy not found, dropping packet from corp n/w. sourceIp destIp sourcePort destPort protocol This element displays the source IP address. This element displays the destination IP address. This element displays the source port number. This element displays the destination port number. This element displays the protocol that is used. Possible values are: icmp, tcp, udp, esp, ah, other.

telindus1423Router/ip/router/firewall/sNet This attribute displays the SNets that are available (standard and custom). However, it says nothing about which SNets are actually in use (i.e. assigned to an interface). telindus1423Router/ip/router/firewall/clearLog Use this action to clear the log.

377 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.14 Bridge status attributes


This section describes the following status attributes: telindus1423Router/bridge/bridgeGroup/ifDescr on page 378 telindus1423Router/bridge/bridgeGroup/ifType on page 378 telindus1423Router/bridge/bridgeGroup/ifOperStatus on page 378 telindus1423Router/bridge/bridgeGroup/ifMtu on page 378 telindus1423Router/bridge/bridgeGroup/ip on page 378 telindus1423Router/bridge/bridgeGroup/macAddress on page 378 telindus1423Router/bridge/bridgeGroup/arpCache on page 379 telindus1423Router/bridge/bridgeGroup/bridgeCache on page 380 telindus1423Router/bridge/bridgeGroup/bridging on page 381 telindus1423Router/bridge/bridgeGroup/spanningTree on page 381

This section describes the following actions: telindus1423Router/bridge/bridgeGroup/clearArpCache on page 383 telindus1423Router/bridge/bridgeGroup/clearBridgeCache on page 383

Telindus 1423 SHDSL Router User manual

Chapter MR-2 378 Status attributes

telindus1423Router/bridge/bridgeGroup/ifDescr This attribute displays the interface description. telindus1423Router/bridge/bridgeGroup/ifType This attribute displays the interface type. telindus1423Router/bridge/bridgeGroup/ifOperStatus This attribute displays the current operational status of the bridge group. telindus1423Router/bridge/bridgeGroup/ifMtu This attribute displays the interface its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this interface. telindus1423Router/bridge/bridgeGroup/ip This attribute displays the IP information of the bridge. The ip structure contains the following elements: Element address netMask Description This is the IP address of the bridge. It is either configured or retrieved automatically. This is the IP subnet mask of the interface. It is either configured or retrieved automatically.

telindus1423Router/bridge/bridgeGroup/macAddress This attribute displays the MAC address of the bridge group.

379 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bridge/bridgeGroup/arpCache This attribute displays all the MAC address - IP address pairs from ARP requests and replies received on the LAN interface. Refer to What is the ARP cache? on page 22 for more information. The arpCache table contains the following elements: Element macAddress ipAddress type Description This is the MAC address. This is the associated IP address. This is the ARP cache entry type. Possible values are: dynamic. The MAC - IP address pair is retrieved from an ARP request or reply message. static. The MAC - IP address pair is configured. There is only one static entry, i.e. the Telindus 1423 SHDSL Router its own IP and MAC address.

timeOut

This is the time the entry will remain in the ARP cache. For the static entry, this value is 0.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 380 Status attributes

telindus1423Router/bridge/bridgeGroup/bridgeCache When a port of the bridge enters the learning state, it stores the MAC addresses of the stations situated on the network that is connected to this port. The MAC addresses are stored in a MAC address database or bridge cache. The bridgeCache attribute visualises this address database. Refer to What is the bridge cache? on page 225 for more information. The bridgeCache table contains the following elements: Element interface macAddress type Description This is the interface through which the station can be reached. This is the MAC address of the station situated on the network connected to the interface. This displays whether the MAC address entry is static or dynamic: dynamic. The corresponding MAC address is learned on one of the interfaces. static. There are only two static entries: age Example The following figure shows part of a bridge cache table as an example: the Telindus 1423 SHDSL Router its own MAC address. a MAC address used for Spanning Tree.

This is the elapsed time since a frame was received from the station.

381 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bridge/bridgeGroup/bridging The bridging attributes or elements in the individual interface objects display the bridging information for that particular interface. This bridging attribute, however, displays the bridging information of all the (bridged) interfaces of the Telindus 1423 SHDSL Router. Refer to telindus1423Router/lanInterface/bridging on page 266 for a detailed description of the bridging structure. Note however that the bridge group bridging structure contains one extra element: name. This is the name of the interface as you configured it. Note that the interface can also be a DLCI, an ATM PVC, a tunnel, etc. telindus1423Router/bridge/bridgeGroup/spanningTree This attribute gives you the Spanning Tree status information of the bridge. The spanningTree structure contains the following elements: Element designatedPriority designatedMAC Description Together, these two elements form the unique bridge identifier. They display the unique bridge identifier of the root bridge as it is indicated in the root identifier parameter of the Configuration BPDUs. These BPDUs are transmitted by the designated bridge for the LAN that is currently connected to this port. This bridge identifier is used to test the value of the root identifier parameter conveyed in received Configuration BPDUs. rootPathCost This is the cost of the path from this bridge to the root bridge. If this bridge is the root bridge, the rootPathCost value equals 0. Else, the rootPathCost value equals the sum of the path cost as it is up to the designated bridge for the LAN that is currently connected to this port (this cost is transmitted in Configuration BPDUs by the designated bridge)

and the path cost as it is configured for the root port. The rootPathCost element is used to test the value of the root path cost parameter conveyed in received Configuration BPDUs. as the value of the root path cost parameter in transmitted Configuration BPDUs. The total cost of the path to the root bridge should not exceed 65500. rootPort This is the port identifier of the port that offers the lowest cost path to the root. If two or more ports offer equal least cost paths to the root bridge, then the root port is selected to be that with the highest designatedPriority (i.e. the lowest numerical value). If two or more ports offer equal least cost paths to the root bridge and the same designatedPriority, then the root port is selected to be that with the highest designatedPortPriority (i.e. the lowest numerical value).

Telindus 1423 SHDSL Router User manual

Chapter MR-2 382 Status attributes

Element bridgePriority bridgeMAC maxAge

Description Together, these two attributes form the unique bridge identifier of this bridge.

This is the time-out value to be used by all bridges in the bridged LAN for discarding bridging information. The maxAge element displays the value as it is set by the root bridge. This information is conveyed by the root bridge to ensure that each bridge in the bridged LAN has a consistent value against which to test the age of stored configuration information.

helloTime

This is the interval between the generation of Configuration BPDUs by the root bridge. The helloTime element displays the value as it is set by the root bridge. This attribute is not directly used by the Spanning Tree algorithm, but it is conveyed by the root bridge to facilitate the monitoring of protocol performance by the management system.

forwardDelay

This is the time-out value to be used by all bridges in the bridged LAN for a bridge port applies to move from listening state to learning state or from learning state to forwarding state. time-out (or ageing) for purging MAC addresses from the bridge cache in case a topology change is detected.

The forwardDelay element displays the value as it is set by the root bridge. This information is conveyed by the root bridge to ensure that each bridge in the bridged LAN has a consistent value for the forward delay timer. topologyChange This is a Boolean value (0 or 1) to report for a bridge that is not a root bridge, whether or not the most recently accepted Configuration BPDU indicates a change in the active topology. for the root bridge, whether or not a change in topology has been detected within the preceding topologyChangeTime period.

The topologyChange element is used to propagate the topology change indication in transmitted Configuration BPDUs. determine whether the short (bridgeForwardDelay) or long (bridgeTimeOut) time-out (or ageing) value is used to purge dynamic MAC addresses from the bridge cache.

topologyChangeDetection topologyChangeTime

This is a Boolean value (0 or 1) to report that a topology change has been detected by or notified to the bridge. This displays the time during which the root bridge transmits Configuration BPDUs indicating a topology change, after it detected this topology change. The topologyChangeTime element value is equal to the sum of the root bridge its bridgeMaxAge element value and bridgeForwardDelay element value. Refer to telindus1423Router/bridge/bridgeGroup/spanningTree on page 226 for more information on the latter two elements.

383 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/bridge/bridgeGroup/clearArpCache Use this action to clear the ARP cache table. telindus1423Router/bridge/bridgeGroup/clearBridgeCache Use this action to clear the bridge cache table.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 384 Status attributes

MR-2.15 Management status attributes


This section describes the following status attributes: telindus1423Router/management/cms2Address on page 385 telindus1423Router/management/timeServer on page 385 telindus1423Router/management/alarmLog on page 385 telindus1423Router/management/accessLog on page 386 telindus1423Router/management/loopback/ifDescr on page 388 telindus1423Router/management/loopback/ifType on page 388 telindus1423Router/management/loopback/ifOperStatus on page 388 telindus1423Router/management/loopback/ifMtu on page 388 telindus1423Router/management/loopback/ipAddress on page 388 telindus1423Router/management/loopback/mask on page 388

385 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/management/cms2Address This attribute displays the absolute device address as you configured it. telindus1423Router/management/timeServer This attribute displays the status of the SNTP function. The timeServer structure contains the following elements: Element state Description This is the state of the Telindus 1423 SHDSL Router its clock. Possible values are: connection notConfigured. The Telindus 1423 SHDSL Router is not configured for SNTP. notSynchronised. The Telindus 1423 SHDSL Router its clock is not synchronised with the time server. synchronised. The Telindus 1423 SHDSL Router its clock is synchronised with the time server.

This is the state of the connection with the time server. Possible values are: notConfigured. The Telindus 1423 SHDSL Router is not configured for SNTP. notSynchronised. The connection with the time server is not synchronised. synchronised. The connection with the time server is synchronised. noContact. The connection with the time server is lost.

stratum

This is the stratum level of the time server its reference clock. Possible values are: 0: unspecified or unavailable 1: primary reference (e.g. radio clock) 2 - 15: secondary reference (via SNTP)

delay

This is the total roundtrip delay of the time server with its reference clock.

telindus1423Router/management/alarmLog This attribute displays the alarm log. It displays the 32 most recent alarms that occurred on the Telindus 1423 SHDSL Router. The alarmLog table contains the following elements: Element timeStamp sysUpTime totalAlarmLevel alarmLevel alarm Description This is the value of the real time clock at the moment the alarm was generated. This is the system up-time of the Telindus 1423 SHDSL Router at the moment the alarm was generated. This is the total alarm level of the Telindus 1423 SHDSL Router. This is the alarm level of the alarm. This is the alarm itself in the format path.alarmName on|off (e.g. telindus1423Router/lanInterface.linkDown on).

Telindus 1423 SHDSL Router User manual

Chapter MR-2 386 Status attributes

telindus1423Router/management/accessLog This attribute displays the access log. It displays the 32 most recent login events that occurred on the Telindus 1423 SHDSL Router. The accessLog table contains the following elements: Element timeStamp sysUpTime type Description This element displays the value of the real time clock at the moment the access event occurred. This element displays the system up-time of the Telindus 1423 SHDSL Router at the moment the access event occurred. This element displays the type of access event. Possible values are: login. A successful login was detected. loginFailure. A failed login was detected. accessFailureOn. The number of failed logins exceeded the access failure threshold within the access failure period. Refer to telindus1423Router/management/loginControl on page 246. accessFailureOff. After an accessFailureOn event was logged, the number of failed logins dropped below the access failure threshold within the access failure period. Refer to telindus1423Router/management/loginControl on page 246.

user

This element displays the name of the user who caused the access event. If you entered a password string only in the password element of the security table, then the user element displays nothing. user/password string in the password element of the security table (of the type "username:password"), then the user element displays the username part of the user/password string. Also see telindus1423Router/security on page 16.

application

This element displays the type of application that caused the access event. Possible values are: cms2. The access event is caused by any maintenance application. For example, TMA, TMA CLI, CLI or ATWIN (via a Telnet or terminal session), WebInterface, etc. ftp. The access event is caused by FTP. fileSystem. The access event is caused by any maintenance application accessing the file system. For example, FTP, TFTP, TML, etc. when downloading firmware. snmp. The access event is caused by SNMP. Note that since SNMP is not session oriented, each successful SNMP request would result in an access event. So an SNMP walk would result in thousands of access events being logged. Therefore, in case of SNMP, only the failed requests are logged. proxy. The access event is caused by any maintenance application accessing a CMS device through the Telindus 1423 SHDSL Router (i.e. the Telindus 1423 SHDSL Router acts as proxy). This since the password of the Telindus 1423 SHDSL Router is used to control the access to the CMS devices.

387 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Element accessRights

Description This element displays the access rights that are associated with the access event.

Note that some applications may cause more than one access event. For example, suppose you access the Telindus 1423 SHDSL Router with FTP and download a file to the file system. In that case two events are logged in the accessLog table: 1. One event logging the access of the FTP application to the Telindus 1423 SHDSL Router. 2. One event logging the access of the FTP application to the file system when downloading the file.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 388 Status attributes

telindus1423Router/management/loopback/ifDescr This attribute displays the interface description. telindus1423Router/management/loopback/ifType This attribute displays the interface type. telindus1423Router/management/loopback/ifOperStatus This attribute displays the current operational status of the loopback interface. The loopback interface is always up.

telindus1423Router/management/loopback/ifMtu This attribute displays the interface its Maximum Transfer Unit, i.e. the maximum number of bytes that one packet can contain on this interface. telindus1423Router/management/loopback/ipAddress This attribute displays the IP address of the loopback interface as you configured it. telindus1423Router/management/loopback/mask This attribute displays the subnet mask of the loopback interface as you configured it.

389 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.16 File system status attributes


This section describes the following status attributes: telindus1423Router/fileSystem/fileList on page 390 telindus1423Router/fileSystem/freeSpace on page 390 telindus1423Router/fileSystem/status on page 390 telindus1423Router/fileSystem/corruptBlocks on page 390 telindus1423Router/fileSystem/trustedCertificates on page 391 telindus1423Router/fileSystem/selfCertificates on page 391

This section describes the following actions: telindus1423Router/fileSystem/Delete File on page 392 telindus1423Router/fileSystem/Rename File on page 392 telindus1423Router/fileSystem/loadTrustedCertificate on page 392 telindus1423Router/fileSystem/generateSelfCertificateRequest on page 393 telindus1423Router/fileSystem/loadSelfCertificate on page 394 telindus1423Router/fileSystem/getTrustedCertificateScep on page 395 telindus1423Router/fileSystem/getSelfCertificateScep on page 396 telindus1423Router/fileSystem/getCrlScep on page 398 telindus1423Router/fileSystem/saveCertificates on page 398

Telindus 1423 SHDSL Router User manual

Chapter MR-2 390 Status attributes

telindus1423Router/fileSystem/fileList Part of the flash memory of the Telindus 1423 SHDSL Router is organised as a file system and a number of files are stored in it. The fileList attribute shows all the files that are present on the file system. Usually, the following files are present: The configuration file of the Telindus 1423 SHDSL Router (file config1.db). Up to two application software files of the Telindus 1423 SHDSL Router (files CONTROL1 and CONTROL 2).

The fileList table contains the following elements: Element name length Description This is the filename. Maximum length of the filename is 24 characters. All characters are allowed (including spaces). The filename is case sensitive. This is the length of the file in bytes.

telindus1423Router/fileSystem/freeSpace This attribute displays the number of free bytes on the file system. telindus1423Router/fileSystem/status This attribute displays the status of the file system. Possible values are: Value ready formatting corrupt corruptBlocks Description Normal situation. The file system is being formatted. This can be triggered when the file system is found to be corrupt at boot. The file system is in a state were no guarantee can be given about the correct operation of the file system. The file system will be formatted at the following boot. A certain block can not be erased.

telindus1423Router/fileSystem/corruptBlocks The file system of the Telindus 1423 SHDSL Router consists of several blocks. When a block can not be erased, the corruptBlocks count is incremented. This block can no longer be used to store data.

391 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/fileSystem/trustedCertificates This attribute displays the trusted certificates that are currently loaded. The trustedCertificates table contains the following elements: Element name expiry issuer subject Description This element displays the certificate name. Possible values are: ca-0, ca-1, ca-2. This element displays when the certificate expires. This element displays who issued the certificate. This element displays the subject information of the certificate. In case of a trusted certificate this is information of the CA.

telindus1423Router/fileSystem/selfCertificates This attribute displays the signed self-certificates that are currently loaded. The selfCertificates table contains the following elements: Element name expiry issuer subject Description This element displays the certificate name. In this case, this is the same string as entered in the privateKeyName element of the loadSelfCert action. This element displays when the certificate expires. This element displays who issued the certificate. This element displays subject information of the certificate. In case of a self-certificate this is information of the device (e.g. the IP address).

Telindus 1423 SHDSL Router User manual

Chapter MR-2 392 Status attributes

telindus1423Router/fileSystem/Delete File Use this action to remove obsolete files from the file system. You have to enter the filename you want to delete as argument value. Filenames are case sensitive!

telindus1423Router/fileSystem/Rename File Use this action to rename a file on the file system. You have to enter the old and new filename in a structure. Filenames are case sensitive!

telindus1423Router/fileSystem/loadTrustedCertificate This action is used in the procedure where security certificates are obtained and loaded manually in order to set up an L2TP tunnel secured with IPSEC using an IKE certificate SA. Refer to MU-10.6.3 Configuration dun tunnel L2TP scuris IPSEC en utilisant une SA manuelle on page 362. Use this action to load the trusted certificate you obtained from your Certificate Authority (CA) into the memory of the Telindus 1423 SHDSL Router. Enter the filename of the trusted certificate as argument value and execute the action. The trusted certificate file has to be present on the file system of the Telindus 1423 SHDSL Router. The filename is case sensitive. The saveCerts action has to be executed after the loadTrustedCert action so that the trusted certificate is also loaded every time the Telindus 1423 SHDSL Router reboots.

393 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/fileSystem/generateSelfCertificateRequest This action is used in the procedure where security certificates are obtained and loaded manually in order to set up an L2TP tunnel secured with IPSEC using an IKE certificate SA. Refer to MU-10.6.3 Configuration dun tunnel L2TP scuris IPSEC en utilisant une SA manuelle on page 362. Use this action to create a request for a signed self-certificate. Then this request has to be submitted to your Certificate Authority (CA) which signs it and returns a signed self-certificate. Fill in the elements in the argument value structure and execute the action. The argument value structure of the generateCertReq action contains the following elements: Element fileName Description Use this element to specify the name of the self-certif- Default:<empty> icate request file. Range: 0 24 characters After you filled in all the elements and executed the generateCertReq action, a file is written to the file system of the Telindus 1423 SHDSL Router. The name of this file is the name you specified using the fileName element. type Use this element to set the authentication algorithm. Default:rsa-md5 The type element has the following values: rsa-md5, rsa- Range: enumerated, see below sha1, dss-sha1. Use this element to specify the subject name. Default:<empty> Range: 0 24 characters Default:<empty> Range: 0 8 characters

subjectName

privateKeyName

Use this element to specify the name of the private key.

Remember the private key name. You need it to load the associated signed selfcertificate into the memory of the Telindus 1423 SHDSL Router. Refer to telindus1423Router/fileSystem/loadSelfCertificate on page 394. ipAddress Use this element to specify the IP address that will be used in the self-certificate. This is then used for authentication purposes. Use this element to specify the hostname that will be used in the self-certificate. This is then used for authentication purposes. Default:0.0.0.0 Range: up to 255.255.255.255 Default:<empty> Range: 0 32 characters

hostname

The hostname has to be of the form host.domain.com. user Use this element to specify the username that will be used in the self-certificate. This is then used for authentication purposes. Default:<empty> Range: 0 32 characters

The username has to be of the form my.name@company.com. keyLength Use this element to specify the length of the public/pri- Default:512 vate keys. Note that the longer the key length, the Range: 512 / 1024 / 2048 longer it takes to generate the keys.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 394 Status attributes

telindus1423Router/fileSystem/loadSelfCertificate This action is used in the procedure where security certificates are obtained and loaded manually in order to set up an L2TP tunnel secured with IPSEC using an IKE certificate SA. Refer to MU-10.6.3 Configuration dun tunnel L2TP scuris IPSEC en utilisant une SA manuelle on page 362. Use this action to load the signed self-certificate you first submitted and then retrieved from your Certificate Authority (CA) into the memory of the Telindus 1423 SHDSL Router. Fill in the elements in the argument value structure and execute the action. The argument value structure of the loadSelfCert action contains the following elements: Element fileName Description Use this element to specify the name of the signed self-certificate file. Use this element to specify the name of the private key. Default:<empty> Range: 0 24 characters Default:<empty> Range: 0 8 characters

privateKeyName

This has to be exact the same name as you specified in the privateKeyName element of the generateCertReq action. Refer to telindus1423Router/fileSystem/generateSelfCertificateRequest on page 393. The signed self-certificate file has to be present on the file system of the Telindus 1423 SHDSL Router. The filename is case sensitive. The saveCerts action has to be executed after the loadSelfCert action so that the signed self-certificate is also loaded every time the Telindus 1423 SHDSL Router reboots.

395 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

telindus1423Router/fileSystem/getTrustedCertificateScep This action is used in the procedure where security certificates are obtained and loaded through SCEP in order to set up an L2TP tunnel secured with IPSEC using an IKE certificate SA. Refer to MU-10.6.3 Configuration dun tunnel L2TP scuris IPSEC en utilisant une SA manuelle on page 362. Use this action to obtain and load the trusted certificate from a SCEP server. Fill in the elements in the argument value structure and execute the action. The argument value structure of the getTrustedCertScep action contains the following elements: Element server Description Use this element to specify the IP address of the SCEP server. Default:0.0.0.0 Range: up to 255.255.255.255

Together with the url element this makes up the complete path to which the SCEP requests are submitted. url Use this element to specify the URL to which the SCEP requests have to be submitted. Default:<empty> Range: 0 40 characters

Together with the server element this makes up the complete path to which the SCEP requests are submitted. Consult the manual of your SCEP server to find out which URL you have to specify. Example Suppose you set the server element to 172.31.127.6 and the url element to certsrv/ mscep/mscep.dll, then the SCEP requests are submitted to http://172.31.127.6/certsrv/ mscep/mscep.dll. caName Use this element to set the name of the CA. This element is more for information purposes. It may be omitted. port Use this element to set the port on which the SCEP requests are sent. By default, this is port 80. Default:<empty> Range: 0 20 characters

Default:<opt> Range: 1 65535

The saveCerts action has to be executed after the getTrustedCertScep action so that the trusted certificate is also loaded every time the Telindus 1423 SHDSL Router reboots.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 396 Status attributes

telindus1423Router/fileSystem/getSelfCertificateScep This action is used in the procedure where security certificates are obtained and loaded through SCEP in order to set up an L2TP tunnel secured with IPSEC using an IKE certificate SA. Refer to MU-10.6.3 Configuration dun tunnel L2TP scuris IPSEC en utilisant une SA manuelle on page 362. Use this action to obtain and load the self-certificate from a SCEP server. Fill in the elements in the argument value structure and execute the action. The argument value structure of the getSelfCertScep action contains the following elements: Element server Description Use this element to specify the IP address of the SCEP server. Default:0.0.0.0 Range: up to 255.255.255.255

Together with the url element this makes up the complete path to which the SCEP requests are submitted. url Use this element to specify the URL to which the SCEP requests have to be submitted. Default:<empty> Range: 0 40 characters

Together with the server element this makes up the complete path to which the SCEP requests are submitted. Example Suppose you set the server element to 172.31.127.6 and the url element to certsrv/ mscep/mscep.dll, then the SCEP requests are submitted to http://172.31.127.6/certsrv/ mscep/mscep.dll. type Use this element to set the authentication algorithm. Default:rsa-md5 Range: rsa-md5 / rsa-sha1 Default:<empty> Range: 0 20 characters Default:<empty> Range: 0 20 characters

subjectName

Use this element to specify the subject name.

challenge

Use this element to specify the challenge phrase.

When installing a SCEP server, you usually have the possibility to specify a challenge phrase. If you specify a challenge phrase on the SCEP server, then also enter this phrase in the challenge element. If you do not specify a challenge phrase, then any user can enrol for a certificate. caName Use this element to select a certificate. Default:ca-0 Range: ca-0 / ca-1 / ca-2 Default:<empty> Range: 0 8 characters Default:0.0.0.0 Range: up to 255.255.255.255

privateKeyName

Use this element to specify the name of the private key. Use this element to specify the IP address that will be used in the self-certificate. This is then used for authentication purposes.

ipAddress

397 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Element hostname

Description Use this element to specify the hostname that will be used in the self-certificate. This is then used for authentication purposes. Default:<empty> Range: 0 32 characters

The hostname has to be of the form host.domain.com. user Use this element to specify the username that will be used in the self-certificate. This is then used for authentication purposes. Default:<empty> Range: 0 32 characters

The username has to be of the form my.name@company.com. port Use this element to set the port on which the SCEP requests are sent. By default, this is port 80. Default:<opt> Range: 1 65535

keyLength

Use this element to specify the length of the public/pri- Default:512 vate keys. Note that the longer the key length, the Range: 512 / 1024 / 2048 longer it takes to generate the keys.

The saveCerts action has to be executed after the getSelfCertScep action so that the signed self-certificate is also loaded every time the Telindus 1423 SHDSL Router reboots.

Telindus 1423 SHDSL Router User manual

Chapter MR-2 398 Status attributes

telindus1423Router/fileSystem/getCrlScep Use this action to get the Certificate Revocation List (CRL). A CRL is a list of certificates that have been revoked before their scheduled expiration date. Fill in the elements in the argument value structure and execute the action. The argument value structure of the getCertRevListScep action contains the following elements: Element server Description Use this element to specify the IP address of the SCEP server. Default:0.0.0.0 Range: up to 255.255.255.255

Together with the url element this makes up the complete path to which the SCEP requests are submitted. url Use this element to specify the URL to which the SCEP requests have to be submitted. Default:<empty> Range: 0 40 characters

Together with the server element this makes up the complete path to which the SCEP requests are submitted. Example Suppose you set the server element to 172.31.127.6 and the url element to certsrv/ mscep/mscep.dll, then the SCEP requests are submitted to http://172.31.127.6/certsrv/ mscep/mscep.dll. caName Use this element to select a certificate. Default:ca-0 Range: ca-0 / ca-1 / ca-2 Default:<opt> Range: 1 65535

port

Use this element to set the port on which the SCEP requests are sent. By default, this is port 80.

telindus1423Router/fileSystem/saveCertificates This action is used in the procedure where security certificates are obtained and loaded in order to set up an L2TP tunnel secured with IPSEC using an IKE certificate SA. Refer to MU-10.6.3 - Configuration dun tunnel L2TP scuris IPSEC en utilisant une SA manuelle on page 362. Use this action to save the trusted certificate and the signed self-certificate that were either obtained and loaded manually or by using SCEP. Saving the certificates ensures that they are loaded every time the Telindus 1423 SHDSL Router reboots.

399 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

MR-2.17 Operating system status attributes


This section describes the following status attributes: telindus1423Router/operatingSystem/taskInfo on page 400

Telindus 1423 SHDSL Router User manual

Chapter MR-2 400 Status attributes

telindus1423Router/operatingSystem/taskInfo This attribute displays status information about the operating system. The taskInfo table contains the following elements: Element taskName taskStatus Description This is the name of the task. This is the current status of the task. Possible values are: load30s load5m runningInMedium awake. This task is actually running. asleep. This task is waiting on an event. inactive. This task slot is not active, i.e. no task has been assigned to this slot.

This is the load on the processor, in percent, during the last 30 seconds. This is the load on the processor, in percent, during the last 5 minutes. Each task can be running with a low, medium or high priority. This element gives the percentage of time this task has been running with medium priority during the last 30 seconds. Each task can be running with a low, medium or high priority. This element gives the percentage of time this task has been running with high priority during the last 30 seconds. The percentage of time this task has been running with low priority can be calculated using the following formula: running in low priority = 100% - runningInMedium - runningInHigh

runningInHigh

programCounter

This is the current value of the program counter. The program counter is the memory address for the current instruction of this task.

401 Telindus 1423 SHDSL Router User manual

Chapter MR-2 Status attributes

Telindus 1423 SHDSL Router User manual

Chapter MR-3 402 Performance attributes

MR-3 Performance attributes


This chapter discusses the performance attributes of the Telindus 1423 SHDSL Router. The following gives an overview of this chapter: MR-3.1 - Performance attributes overview on page 403 MR-3.2 - General performance attributes on page 410 MR-3.3 - LAN interface performance attributes on page 412 MR-3.4 - WAN interface performance attributes on page 417 MR-3.5 - Encapsulation performance attributes on page 418 MR-3.6 - SHDSL line performance attributes on page 431 MR-3.7 - End and repeater performance attributes on page 435 MR-3.8 - BRI performance attributes on page 436 MR-3.9 - AUX performance attributes on page 441 MR-3.10 - Dial maps performance attributes on page 442 MR-3.11 - Bundle performance attributes on page 444 MR-3.12 - Router performance attributes on page 447 MR-3.13 - IP traffic policy performance attributes on page 469 MR-3.14 - Bridge performance attributes on page 471 MR-3.15 - Management performance attributes on page 477 MR-3.16 - Operating system performance attributes on page 480

403 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.1 Performance attributes overview


> telindus1423Router Action: resetAllCounters >> lanInterface ifInOctets ifInUcastPkts ifInNUcastPkts ifInDiscards ifInErrors ifInUnknownProtos ifOutOctets ifOutUcastPkts ifOutNUcastPkts ifOutDiscards ifOutErrors ifOutQLen h2Performance h24Performance ifOutPQLen ifDropLevelExceeded vlan mibCounters1 Action: resetCounters >> wanInterface ifInOctets ifInUcastPkts ifInNUcastPkts ifInDiscards ifInErrors ifInUnknownProtos ifOutOctets ifOutUcastPkts ifOutNUcastPkts ifOutDiscards ifOutErrors ifOutQLen ifOutPQLen ifDropLevelExceeded h2Performance h24Performance Action: resetCounters

1. Only present on the 4 port LAN interface.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 404 Performance attributes

>>> atm pvcTable unknownCells vp Action: resetCounters >>> frameRelay dlciTable lmi cllmInFrames Action: resetCounters >>> errorTest status duration ifUpTime ifDownCount rxBitErrors rxBlockErrors rxBlocks rxAllOneBlocks rxAllZeroBlocks rxPatternSlip rxShiftCount rxSyncLoss txBlocks txInjectErrors Action: startTest Action: stopTest Action: injectError Action: clearCounters >>> line h2Line h24Line d7Line line Action: retrain Action: resetCounters >>>> linePair[ ] h2LineParameters h2Performance h24LineParameters h24Performance d7LineParameters d7Performance lineParameters performance Action: resetCounters

405 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

>>> repeater[ ] >>>> networkLinePair[ ] h2LineParameters h2Performance h24LineParameters h24Performance d7LineParameters d7Performance lineParameters performance Action: resetCounters >>>> customerLinePair[ ] h2LineParameters h2Performance h24LineParameters h24Performance d7LineParameters d7Performance lineParameters performance Action: resetCounters >>> end >>>> linePair[ ] h2LineParameters h2Performance h24LineParameters h24Performance d7LineParameters d7Performance lineParameters performance Action: resetCounters >> bri[1]2 h2DialupStats h24DialupStats d7DialupStats Action: resetCounters

2. Only present on the Telindus 1423 SHDSL Router ISDN version.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 406 Performance attributes

>>> bChannel[1] ifInOctets ifInUcastPkts ifInNUcastPkts ifInDiscards ifInErrors ifInUnknownProtos ifOutOctets ifOutUcastPkts ifOutNUcastPkts ifOutDiscards ifOutErrors ifOutQLen ifOutPQLen ifDropLevelExceeded h2Performance h24Performance Action: resetCounters >>> bChannel[2] <Contains the same attributes as the bChannel[1] object.> >> bri[2]2 <Contains the same attributes as the bri[1] object.> >> dialMaps2 mapping Action: resetCounters >> profiles >>> policy >>>> traffic >>>>> ipTrafficPolicy[ ] discards trafficShaping Action: resetCounters

407 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

>> bundle >>> pppBundle[ ]3 ifInOctets ifInUcastPkts ifInNUcastPkts ifInDiscards ifInErrors ifInUnknownProtos ifOutOctets ifOutUcastPkts ifOutNUcastPkts ifOutDiscards ifOutErrors ifOutQLen h2Performance h24Performance multiclassinterfaces Action: resetCounters >>> isdnBundle[ ]4 ifInOctets ifInUcastPkts ifInNUcastPkts ifInDiscards ifInErrors ifInUnknownProtos ifOutOctets ifOutUcastPkts ifOutNUcastPkts ifOutDiscards ifOutErrors ifOutQLen h2Performance h24Performance Action: resetCounters

3. This is the PPP bundle in case of MLPPP on the WAN interface. 4. This is the PPP bundle in case of MLPPP on the ISDN interfaces.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 408 Performance attributes

>> router routingTable radiusAuth radiusAcct pingResults tracertResults Action: startPing Action: stopPing Action: startTracert Action: stopTracert Action: clearTracert Action: resetCounters >>> defaultNat socketsFree allocFails discards addressesAvailable tcpSocketsUsed udpSocketsUsed icmpSocketsUsed tcpAllocs udpAllocs icmpAllocs Action: reset Action: resetCounters >>> tunnels l2tpTunnels ipsecL2tpTunnels Action: resetCounters >>> manualSA[ ] inPackets outPackets espAuthenticationFailure espDecryptionFailure espSequenceNrReplay espDroppedFrames Action: resetCounters >>> ikeSA[ ] phase2Negotiations phase2Sessions Action: resetCounters

409 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

>>> firewall h24General d7General h24Attack d7Attack Action: resetCounters >> bridge >>> bridgeGroup bridgeCache bridgeDiscards bridgeFloods multiVlans Action: resetCounters >>> accessList[ ] bridgeAccessList Action: resetCounters >> management cms2SessionCount tftpSessionCount cliSessionCount tcpSessionCount ipStackEvents Action: resetCounters >> operatingSystem currUsedProcPower usedProcPower freeDataBuffers totalDataBuffers largestFreeBlockSize freeBlockCount freeMemory totalMemory taskInfo Action: resetCounters

Telindus 1423 SHDSL Router User manual

Chapter MR-3 410 Performance attributes

MR-3.2 General performance attributes


There are no general performance attributes. However, there is one general performance action: telindus1423Router/resetAllCounters on page 411

411 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/resetAllCounters Use this action to reset all counters in all objects in the containment tree of the Telindus 1423 SHDSL Router. You can also reset the counters per object. To do so, use the resetCounters action located in the corresponding object.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 412 Performance attributes

MR-3.3 LAN interface performance attributes


This section describes the following performance attributes: telindus1423Router/lanInterface/ifInOctets on page 413 telindus1423Router/lanInterface/ifInUcastPkts on page 413 telindus1423Router/lanInterface/ifInNUcastPkts on page 413 telindus1423Router/lanInterface/ifInDiscards on page 413 telindus1423Router/lanInterface/ifInErrors on page 413 telindus1423Router/lanInterface/ifInUnknownProtos on page 413 telindus1423Router/lanInterface/ifOutOctets on page 414 telindus1423Router/lanInterface/ifOutUcastPkts on page 414 telindus1423Router/lanInterface/ifOutNUcastPkts on page 414 telindus1423Router/lanInterface/ifOutDiscards on page 414 telindus1423Router/lanInterface/ifOutErrors on page 414 telindus1423Router/lanInterface/ifOutQLen on page 414 telindus1423Router/lanInterface/h2Performance on page 415 telindus1423Router/lanInterface/h24Performance on page 415 telindus1423Router/lanInterface/ifOutPQLen on page 415 telindus1423Router/lanInterface/ifDropLevelExceeded on page 415 telindus1423Router/lanInterface/vlan on page 416 telindus1423Router/lanInterface/mibCounters on page 416

413 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/lanInterface/ifInOctets This attribute displays the number of octets (bytes) received on this interface. telindus1423Router/lanInterface/ifInUcastPkts This attribute displays the number of unicast packets received on this interface and delivered to a higherlayer protocol. Unicast packets are all non-multicast and non-broadcast packets. telindus1423Router/lanInterface/ifInNUcastPkts This attribute displays the number of non-unicast packets received on this interface and delivered to a higher-layer protocol. Non-unicast packets are all the multicast and broadcast packets. telindus1423Router/lanInterface/ifInDiscards This attribute displays the number of incoming packets that were discarded, to prevent their deliverance to a higher-layer protocol. This even though no errors were detected in these packets. telindus1423Router/lanInterface/ifInErrors This attribute displays the number of incoming packets that could not be delivered to a higher-layer protocol because they contained errors. telindus1423Router/lanInterface/ifInUnknownProtos This attribute displays the number of incoming packets that were discarded because they contained an unknown or unsupported protocol.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 414 Performance attributes

telindus1423Router/lanInterface/ifOutOctets This attribute displays the total number of octets (bytes) transmitted by the interface, including framing characters. telindus1423Router/lanInterface/ifOutUcastPkts This attribute displays the total number of packets that higher-level protocols requested to be transmitted to a unicast address, including those that were discarded or not sent. telindus1423Router/lanInterface/ifOutNUcastPkts This attribute displays the number of non-unicast packets that higher-level protocols requested to be transmitted to a non-unicast (i.e. a broadcast or multicast) address, including those that were discarded or not sent. telindus1423Router/lanInterface/ifOutDiscards This attribute displays the number of outgoing packets that were discarded, to prevent they are transmitted by the interface. This could be due to, for instance, the presence of an access list. telindus1423Router/lanInterface/ifOutErrors This attribute displays the number of outgoing packets that could not be transmitted by the interface because they contained errors. On the LAN interface ifOutErrors are also generated in case of extensive collisions. telindus1423Router/lanInterface/ifOutQLen This attribute displays the length, expressed in packets, of the output packet queue on the interface.

415 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/lanInterface/h2Performance This attribute displays the 2 hours performance summary of the LAN interface. The h2Performance table contains the following elements: Element sysUpTime ifUpTime ifStatusChanges ifInOctets ifInPackets ifInErrors ifOutOctets ifOutPackets ifOutDiscards For the corresponding period, this element displays the elapsed time since the last cold boot. the time during which the interface was up. the number of times the ifOperStatus value of the interface changed (from up to down or vice versa). the number of octets (bytes) received on this interface. the number of packets received on this interface. the number of packets received on this interface that could not be delivered to a higher-layer protocol because they contained errors. the number of octets (bytes) transmitted by the interface, including framing characters. the number of packets transmitted by the interface. the number of outgoing packets that were discarded, to prevent they were transmitted by the interface. This could be due to, for instance, the presence of an access list. the number of packets that could not be transmitted by the interface because they contained errors.

ifOutErrors

telindus1423Router/lanInterface/h24Performance This attribute displays the 24 hours performance summary of the LAN interface. The h24Performance table contains the same elements as the telindus1423Router/lanInterface/h2Performance table. telindus1423Router/lanInterface/ifOutPQLen In case an overload condition occurs and priority queuing is activated, then this attribute displays how many packets the different queues contain. Refer to MU-8.8.1 - Prsentation de la politique de trafic et de priorit on page 250 for more information on the priority queues. telindus1423Router/lanInterface/ifDropLevelExceeded This attribute displays how many times the drop levels of the user configurable queues have been exceeded (and hence packets have been dropped). Refer to telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/dropLevels on page 106 for more information on the drop levels.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 416 Performance attributes

telindus1423Router/lanInterface/vlan This attribute displays the SNMP MIB2 performance parameters of the VLANs that are present on the LAN interface. The vlan table contains the following elements: Element name vlan mibCounters Description This element displays the name of the VLAN as you configured it. This element displays the VLAN ID. This element displays the SNMP MIB2 performance parameters of the VLAN. Refer to MR-3.3 - LAN interface performance attributes on page 412 for an explanation of the individual SNMP MIB2 performance parameters. telindus1423Router/lanInterface/mibCounters Only present on the 4 port Ethernet LAN interface. Whereas the previous performance attributes show the SNMP MIB2 performance parameters of the complete 4 port Ethernet interface, this attribute displays the SNMP MIB2 performance parameters for each port (including the local port, refer to Quest-ce que le commutateur Ethernet 4 ports ? on page 335).

417 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.4 WAN interface performance attributes


All performance attributes of the WAN interface are the same as on the LAN interface. Therefore, they are not explained here again. Refer to MR-3.3 - LAN interface performance attributes on page 412 for a complete description of these attributes.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 418 Performance attributes

MR-3.5 Encapsulation performance attributes


This section discusses the performance attributes of the encapsulation protocols that can be used on the Telindus 1423 SHDSL Router. Note that these encapsulation protocols cannot only be used on the xDSL line but, if your Telindus 1423 SHDSL Router is equipped with (an) ISDN interface(s), also on the ISDN interface(s). The protocols Frame Relay, PPP and HDLC are only relevant for TDM operation. Refer to MU-1.3 - Aperu de la famille de routeurs Telindus SHDSL 1423 on page 7 for more information about which protocols are available on which Telindus 1423 SHDSL Router version. The following gives an overview of this section: MR-3.5.1 - ATM performance attributes on page 419 MR-3.5.2 - Frame Relay performance attributes on page 424 MR-3.5.3 - Error test performance attributes on page 428

419 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.5.1 ATM performance attributes


This section describes the following performance attributes: telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable on page 420 telindus1423Router/wanInterface/channel[wan_1]/atm/unknownCells on page 423 telindus1423Router/wanInterface/channel[wan_1]/atm/vp on page 423

Telindus 1423 SHDSL Router User manual

Chapter MR-3 420 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable This attribute lists the complete performance information of all known PVCs. The pvcTable table contains the following elements: Element name mibCounters Description This is the name of the PVC as you configured it. This displays the SNMP MIB2 parameters of the PVC. These are the same as the SNMP MIB2 parameters on the LAN interface. Refer to MR-3.3 - LAN interface performance attributes on page 412.

priorityQLengths

In case an overload condition occurs and priority queuing is activated, then this elements displays how many packets the different queues contain. Refer to MU-8.8.1 - Prsentation de la politique de trafic et de priorit on page 250 for more information on the priority queues.

atm

This displays the specific ATM related performance information of the PVC. Refer to telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm on page 421 for a detailed description of the atm structure

421 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/pvcTable/atm The atm structure in the pvcTable displays the specific ATM related performance information of the PVC. The atm structure contains the following elements: Element vpi vci Description This displays the Virtual Path Identifier (VPI). This displays the Virtual Channel Identifier (VCI). The VPI in conjunction with the VCI identifies the next destination of a cell as it passes through a series of ATM switches on the way to its destination. oamF5 This displays the performance information of the OAM F5 loopback cells. The oamF5 structure contains the following elements: rxLoopback. This displays the number of received loopback cells. txLoopback. This displays the number of transmitted loopback cells. rxCC. This displays the number of received continuity check cells. txCC. This displays the number of transmitted continuity check cells. rxAD. This displays the number of received and accepted continuity check activator/deactivator cells. rxADdrop. This displays the number of received continuity check activator/deactivator cells that were dropped (e.g. because the correlation tag was wrong). txAD. This displays the number of transmitted continuity check activator/deactivator cells. rxSegAis. This displays the number of received segment Alarm Indication Signals. txSegAis. This displays the number of transmitted segment Alarm Indication Signals. rxSegRdi. This displays the number of received segment Remote Defect Indications. txSegRdi. This displays the number of transmitted segment Remote Defect Indications. rxEteAis. This displays the number of received end-to-end Alarm Indication Signals. txEteAis. This displays the number of transmitted end-to-end Alarm Indication Signals. rxEteRdi. This displays the number of received end-to-end Remote Defect Indications. txEteRdi. This displays the number of transmitted end-to-end Remote Defect Indications.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 422 Performance attributes

Element

Description What is OAM segment/end-to-end VP/VC AIS and RDI? OAM VP/VC AIS (Alarm Indication Signal) and RDI (Remote Defect Indication) are cells that are used for identifying and reporting VP/VC defects on a segment/endto-end level. When a physical link or interface failure occurs, intermediate nodes insert AIS cells into all the downstream VP/VCs affected by the failure. Upon receiving an AIS cell on a VP/VC, the router marks the logical interface down and sends an RDI cell on the same VP/VC to let the remote end know the error status. When an RDI cell is received on a VP/VC, the router sets the logical interface status to down.

423 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/atm/unknownCells This attribute displays the number of received cells that are not in-band for a certain PVC. Example Suppose router A sends OAM F4 loopback cells on VPI 5. On router B no VPI 5 is configured or no OAM F4 loopback cells are configured for VPI 5. In that case, the unknownCells value on router B will increase. telindus1423Router/wanInterface/channel[wan_1]/atm/vp Whereas the atm structure in the pvcTable displays the OAM F5 loopback cell performance information for each Virtual Channel, the vp table displays the OAM F4 loopback cell performance information of a complete Virtual Path. The vp table contains the following elements: Element vpi oamF4 Description This is the Virtual Path Identifier (VPI). This displays the performance information of the OAM F4 loopback cells. The oamF4 structure contains the following elements: rxLoopback. This displays the number of received OAM F4 loopback cells. txLoopback. This displays the number of transmitted OAM F4 loopback cells.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 424 Performance attributes

MR-3.5.2 Frame Relay performance attributes


This section describes the following performance attributes: telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable on page 425 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi on page 427 telindus1423Router/wanInterface/channel[wan_1]/frameRelay/cllmInFrames on page 427

425 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable This attribute lists the complete performance information of all known DLCIs. The dlciTable table contains the following elements: Element name mibCounters Description This is the name of the DLCI as you configured it. This displays the SNMP MIB2 parameters of the DLCI. These are the same as the SNMP MIB2 parameters on the LAN interface. Refer to MR-3.3 - LAN interface performance attributes on page 412. frameRelay This displays the specific Frame Relay related performance information of the DLCI. Refer to telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable/frameRelay on page 426 for a detailed description of the frameRelay structure.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 426 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/dlciTable/frameRelay The frameRelay structure in the dlciTable displays the specific Frame Relay related performance information of the DLCI. The frameRelay structure contains the following elements: Element dlci inFecn inBecn inDe inOctets inFrames outFecn outBecn outDe outOctets outFrames Description This is the DLCI identification number. This is the number of frames received from the network indicating forward congestion and this since the virtual circuit was created. This is the number of frames received from the network indicating backward congestion and this since the virtual circuit was created. This is the number of frames received with the Discard Eligibility bit set. This is the number of octets received over this virtual circuit since it was created. This is the number of frames received over this virtual circuit since it was created. This is the number of frames sent to the network indicating forward congestion and this since the virtual circuit was created. This is the number of frames sent to the network indicating backward congestion and this since the virtual circuit was created. This is the number of frames sent to the network with the Discard Eligibility bit set. This is the number of octets sent over this virtual circuit since it was created. This is the number of frames sent over this virtual circuit since it was created.

427 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/lmi This attribute gives a complete LMI performance overview. The lmi structure contains the following elements: Element inStatusEnquiry inStatus inStatusUpdate outStatusEnquiry outStatus outStatusUpdate netPollNotRcvd userNoResponseRcvd userBadResponsesRcvd Description This is the number of Status Enquiries received from the network. This is the number of Status Reports received from the network. This is the number of unsolicited Status Updates received from the network. This is the number of Status Enquiries sent to the network. This is the number of Status Reports sent to the network. This is the number of unsolicited Status Updates sent to the network. This is the number of times the expectedPollInterval expired without an incoming status enquiry. This is the number of times a response was not received. This is the number of times an invalid response was received.

telindus1423Router/wanInterface/channel[wan_1]/frameRelay/cllmInFrames This attribute displays the total number of received CLLM (Consolidated Link Layer Management) frames.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 428 Performance attributes

MR-3.5.3 Error test performance attributes


This section describes the following performance attributes: telindus1423Router/wanInterface/channel[wan_1]/errorTest/status on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/duration on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/ifUpTime on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/ifDownCount on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxBitErrors on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxBlockErrors on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxBlocks on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxAllOneBlocks on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxAllZeroBlocks on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxPatternSlip on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxShiftCount on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxSyncLoss on page 429 telindus1423Router/wanInterface/channel[wan_1]/errorTest/txBlocks on page 430 telindus1423Router/wanInterface/channel[wan_1]/errorTest/txInjectErrors on page 430

This section describes the following actions: telindus1423Router/wanInterface/channel[wan_1]/errorTest/startTest on page 430 telindus1423Router/wanInterface/channel[wan_1]/errorTest/stopTest on page 430 telindus1423Router/wanInterface/channel[wan_1]/errorTest/injectError on page 430 telindus1423Router/wanInterface/channel[wan_1]/errorTest/clearCounters on page 430

429 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/errorTest/status This attribute displays the status of the error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/duration This attribute displays the duration of the error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/ifUpTime This attribute displays the time during which the interface was up, since the start of the error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/ifDownCount This attribute displays the amount of times the interface went down, since the start of the error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxBitErrors This attribute displays the amount of received bit errors. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxBlockErrors This attribute displays the amount of received block errors. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxBlocks This attribute displays the amount of received test blocks. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxAllOneBlocks This attribute displays the amount of received blocks in which all bits were set to 1. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxAllZeroBlocks This attribute displays the amount of received blocks in which all bits were set to 0. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxPatternSlip This attribute displays the amount of received pattern slips. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxShiftCount This attribute displays the amount of received shifts. telindus1423Router/wanInterface/channel[wan_1]/errorTest/rxSyncLoss This attribute displays the amount of received synchronisation losses.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 430 Performance attributes

telindus1423Router/wanInterface/channel[wan_1]/errorTest/txBlocks This attribute displays the amount of transmitted test blocks. telindus1423Router/wanInterface/channel[wan_1]/errorTest/txInjectErrors This attribute displays the amount of transmitted errors that were injected using the injectError action. telindus1423Router/wanInterface/channel[wan_1]/errorTest/startTest Use this action to start an error test. Refer to MU-7.6 - Configuration d'un test d'erreur on page 189 for more information on setting up an error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/stopTest Use this action to stop an error test. telindus1423Router/wanInterface/channel[wan_1]/errorTest/injectError Use this action to inject an error. telindus1423Router/wanInterface/channel[wan_1]/errorTest/clearCounters Use this action to clear the counters.

431 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.6 SHDSL line performance attributes


This section describes the following line performance attributes: telindus1423Router/wanInterface/line/h2Line on page 432 telindus1423Router/wanInterface/line/h24Line on page 432 telindus1423Router/wanInterface/line/d7Line on page 432 telindus1423Router/wanInterface/line/line on page 432

This section describes the following line pair performance attributes: telindus1423Router/wanInterface/line/linePair[ ]/h2LineParameters on page 433 telindus1423Router/wanInterface/line/linePair[ ]/h24LineParameters on page 433 telindus1423Router/wanInterface/line/linePair[ ]/d7LineParameters on page 433 telindus1423Router/wanInterface/line/linePair[ ]/lineParameters on page 433 telindus1423Router/wanInterface/line/linePair[ ]/h2Performance on page 434 telindus1423Router/wanInterface/line/linePair[ ]/h24Performance on page 434 telindus1423Router/wanInterface/line/linePair[ ]/d7Performance on page 434 telindus1423Router/wanInterface/line/linePair[ ]/performance on page 434

This section describes the following actions: telindus1423Router/wanInterface/line/retrain on page 432

Telindus 1423 SHDSL Router User manual

Chapter MR-3 432 Performance attributes

telindus1423Router/wanInterface/line/h2Line This attribute displays the 2 hours performance information summary of the line. The h2Line table contains the following elements: Element sysUpTime linkDownCount linkDownTime For the corresponding period, this element displays the elapsed time since the last cold boot. the number of times the link went down. the total amount of time the link was down.

telindus1423Router/wanInterface/line/h24Line This attribute displays the 24 hours performance information summary of the line. The h24Line table contains the same elements as the telindus1423Router/wanInterface/line/h2Line table. telindus1423Router/wanInterface/line/d7Line This attribute displays the 7 days performance information summary of the line. The d7Line table contains the same elements as the telindus1423Router/wanInterface/line/h2Line table. telindus1423Router/wanInterface/line/line This attribute displays the performance information summary of the line since the last cold boot. Except for the sysUpTime, the line structure contains the same elements as the telindus1423Router/wanInterface/line/ h2Line table. telindus1423Router/wanInterface/line/retrain Use this action to force a retrain on the line.

433 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/wanInterface/line/linePair[ ]/h2LineParameters This attribute displays the 2 hours line parameter summary. The h2LineParameters table contains the following elements: Element sysUpTime lineAttenuationMin lineAttenuationAvrg lineAttenuationMax signalNoiseMin signalNoiseAvrg signalNoiseMax For the corresponding period, this element displays the elapsed time since the last cold boot. the minimum line attenuation that was measured. the average line attenuation that was calculated the maximum line attenuation that was measured. the minimum signal to noise ratio that was measured. the average signal to noise ratio that was calculated. the maximum signal to noise ratio that was measured.

telindus1423Router/wanInterface/line/linePair[ ]/h24LineParameters This attribute displays the 24 hours line parameter summary. The h24LineParameters table contains the same elements as the telindus1423Router/wanInterface/line/linePair[ ]/h2LineParameters table. telindus1423Router/wanInterface/line/linePair[ ]/d7LineParameters This attribute displays the 7 days line parameter summary. The d7LineParameters table contains the same elements as the telindus1423Router/wanInterface/line/linePair[ ]/h2LineParameters table. telindus1423Router/wanInterface/line/linePair[ ]/lineParameters This attribute displays the line parameter summary since the last cold boot. Except for the sysUpTime, the lineParameters table contains the same elements as the telindus1423Router/wanInterface/line/linePair[ ]/ h2LineParameters table.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 434 Performance attributes

telindus1423Router/wanInterface/line/linePair[ ]/h2Performance This attribute displays the 2 hours performance summary of the line. The h2Performance table contains the following elements: Element sysUpTime codeViolations errSec sevErrSec unavailSec loswSec moniSec For the corresponding period, this element displays the elapsed time since the last cold boot. the number of line errors that was counted. the number of erroneous seconds that was counted. the number of severely erroneous seconds that was counted. the number of unavailable seconds that was counted. the number of lost synchronisation words seconds that was counted. the number of monitored seconds.

Errors are counted based on the SHDSL frame CRC. For the correct and unambiguous definition of code violations, errored and severely errored seconds, unavailability and lost synchronisation words seconds, refer to the recommendation G.826.

telindus1423Router/wanInterface/line/linePair[ ]/h24Performance This attribute displays the 24 hours performance summary of the line. The h24Performance table contains the same elements as the telindus1423Router/wanInterface/line/linePair[ ]/h2Performance table. telindus1423Router/wanInterface/line/linePair[ ]/d7Performance This attribute displays the 7 days performance summary of the line. The d7Performance table contains the same elements as the telindus1423Router/wanInterface/line/linePair[ ]/h2Performance table. telindus1423Router/wanInterface/line/linePair[ ]/performance This attribute displays the performance summary of the line since the last cold boot. Except for the sysUpTime, the performance table contains the same elements as the telindus1423Router/wanInterface/line/linePair[ ]/ h2Performance table.

435 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.7 End and repeater performance attributes


Exactly which information is retrieved from the remote SHDSL device(s) through the EOC channel depends on the setting of the eocHandling attribute. Refer to MU-5.4.4 - eocHandlingQuelles informations EOC standard sont-elles rcupres ? on page 82 for an overview. The performance information of the line pairs of the repeater and end device is only retrieved in case the eocHandling attribute is set to info or alarmConfiguration. Other than that, the repeater[ ]/linePair[ ] and end/linePair[ ] objects contain the same performance attributes as the line/linePair[ ] object. Refer to MR-3.6 - SHDSL line performance attributes on page 431 for more information on these attributes. Note that the sysUpTime in the performance attributes of the repeater[ ]/linePair[ ] and end/linePair[ ] objects is not the elapsed time since the last cold boot, but the elapsed time since the creation of the repeater[ ] or end object.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 436 Performance attributes

MR-3.8 BRI performance attributes


This section discusses the performance attributes of the BRI interface. First it describes the performance attributes of the BRI interface in general. Then it describes more specifically the performance attributes of the B-channels and of the leasedLine[ ] object that can be added under the bri[ ] object. The following gives an overview of this section: MR-3.8.1 - General BRI performance attributes on page 437 MR-3.8.2 - B-channel performance attributes on page 439 MR-3.8.3 - ISDN leased line performance attributes on page 440

437 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.8.1 General BRI performance attributes


This section describes the following performance attributes: telindus1423Router/bri[ ]/h2DialupStats on page 438 telindus1423Router/bri[ ]/h24DialupStats on page 438 telindus1423Router/bri[ ]/d7DialupStats on page 438

Telindus 1423 SHDSL Router User manual

Chapter MR-3 438 Performance attributes

telindus1423Router/bri[ ]/h2DialupStats This attribute displays the 2 hours dial-up statistics of the BRI interface. The h2DialupStats table contains the following elements: Element sysUpTime sucDialOuts sucDialIns failDialOuts failDialIns onlineSec outOnlineSec For the corresponding period, this element displays the elapsed time since the last cold boot. the number of successful dial-out calls. the number of successful dial-in calls. the number of failed dial-out calls. the number of failed dial-in calls. the number of seconds that both the dial-in and dial-out calls were active. the number of seconds that the dial-out calls were active.

telindus1423Router/bri[ ]/h24DialupStats This attribute displays the 24 hours dial-up statistics of the BRI interface. The h24DialupStats table contains the same elements as the telindus1423Router/bri[ ]/h2DialupStats table. telindus1423Router/bri[ ]/d7DialupStats This attribute displays the 7 days dial-up statistics of the BRI interface. The d7DialupStats table contains the same elements as the telindus1423Router/bri[ ]/h2DialupStats table.

439 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.8.2 B-channel performance attributes


The performance attributes of the B-channels are the same as on the LAN interface. Therefore, they are not explained here again. Refer to MR-3.3 - LAN interface performance attributes on page 412 for a complete description of these attributes.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 440 Performance attributes

MR-3.8.3 ISDN leased line performance attributes


The performance attributes of the ISDN leased line are the same as on the LAN interface. Therefore, they are not explained here again. Refer to MR-3.3 - LAN interface performance attributes on page 412 for a complete description of these attributes. The performance attributes of the encapsulation objects (frameRelay, ppp, hdlc and errorTest) which are located under the leasedLine[ ] object are explained in MR-3.5 - Encapsulation performance attributes on page 418.

441 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.9 AUX performance attributes


All performance attributes of the AUX interface are the same as on the LAN interface. Therefore, they are not explained here again. Refer to MR-3.3 - LAN interface performance attributes on page 412 for a complete description of these attributes.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 442 Performance attributes

MR-3.10 Dial maps performance attributes


This section describes the following performance attributes: telindus1423Router/dialMaps/mapping on page 443

443 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/dialMaps/mapping This attribute displays the dial-up statistics of all the dial maps. The mapping table contains the following elements: Element name h2DialupStats Description This displays the dial map name. It is the name as you configured it in the name element of the dial map. This displays the 2 hour dial-up statistics of the dial map. Refer to telindus1423Router/bri[ ]/h2DialupStats on page 438 for a detailed description of the h2DialupStats table. h24DialupStats This displays the 24 hour dial-up statistics of the dial map. Refer to telindus1423Router/bri[ ]/h24DialupStats on page 438 for a detailed description of the h24DialupStats table. d7DialupStats This displays the 7 days dial-up statistics of the dial map. Refer to telindus1423Router/bri[ ]/d7DialupStats on page 438 for a detailed description of the d7DialupStats table.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 444 Performance attributes

MR-3.11 Bundle performance attributes


This section describes the performance attributes of the different bundles that can be set up on the Telindus 1423 SHDSL Router. The following gives an overview of this section: MR-3.11.1 - PPP bundle performance attributes on page 445

445 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.11.1 PPP bundle performance attributes


All performance attributes, except one, of the PPP bundle are the same as those of the LAN interface. Therefore, they are not explained here again. Refer to MR-3.3 - LAN interface performance attributes on page 412 for a complete description of these attributes. However, the following attribute is only present in the PPP bundle object and therefore explained in this section: telindus1423Router/bundle/pppBundle[ ]/multiclassinterfaces on page 446

Telindus 1423 SHDSL Router User manual

Chapter MR-3 446 Performance attributes

telindus1423Router/bundle/pppBundle[ ]/multiclassinterfaces This attribute displays the performance of the different multiclass PPP links in the PPP bundle. The multiclassinterfaces table contains following elements: Element name mibCounters Description This element displays the name of the multiclass PPP link as you defined it in the multiclassInterfaces configuration attribute. This element displays the SNMP MIB2 parameters of the multiclass PPP link. These are the same as the SNMP MIB2 parameters of the LAN interface. Refer to MR-3.3 - LAN interface performance attributes on page 412.

447 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.12 Router performance attributes


This section discusses the performance attributes concerned with routing. First it describes the general routing performance attributes. Then it explains the performance attributes of the extra features as there are NAT, filtering, L2TP tunnelling, etc The following gives an overview of this section: MR-3.12.1 - General router performance attributes on page 448 MR-3.12.2 - NAT performance attributes on page 455 MR-3.12.3 - L2TP tunnel performance attributes on page 458 MR-3.12.4 - Manual SA performance attributes on page 460 MR-3.12.5 - IKE SA performance attributes on page 462 MR-3.12.6 - Firewall performance attributes on page 465

Telindus 1423 SHDSL Router User manual

Chapter MR-3 448 Performance attributes

MR-3.12.1 General router performance attributes


This section describes the following performance attributes: telindus1423Router/ip/router/routingTable on page 449 telindus1423Router/ip/router/radiusAuth on page 450 telindus1423Router/ip/router/radiusAcct on page 450 telindus1423Router/ip/router/pingResults on page 451 telindus1423Router/ip/router/tracertResults on page 451

This section describes the following actions: telindus1423Router/ip/router/startPing on page 452 telindus1423Router/ip/router/stopPing on page 452 telindus1423Router/ip/router/startTracert on page 453 telindus1423Router/ip/router/stopTracert on page 454 telindus1423Router/ip/router/clearTracert on page 454

449 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/routingTable This attribute lists all known routes and how many times they are used. The routingTable contains the following elements: Element network mask gateway interface Description This element displays the IP address of the destination network. This element displays the network mask of the destination network. This element displays the IP address of the next router on the path to the destination network. This element displays the interface through which the destination network can be reached. Possible values are: internal. The own protocol stack is used. <name>. The destination network can be reached through this particular interface. The <name> of the interface is the name as you configured it. Note that the interface can also be a DLCI, an ATM PVC, a tunnel, etc. discard. Packets for this destination are discarded.

uses

This element displays how many times the route has been used since it is listed in the routing table. For each IP packet that matches this route, the attribute value is incremented by one. RIP routes may disappear from the routing table, and re-appear afterwards. The attribute value is reset when a RIP route disappears from the routing table.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 450 Performance attributes

telindus1423Router/ip/router/radiusAuth This attribute lists the RADIUS authentication server performance information. The radiusAuth table contains the following elements: Element server requests accepts rejects challenges badAuthenticators timeOuts droppedPackets Description This element displays the IP address of the authentication server. This element displays the number of access requests that is sent to the authentication server. This element displays the number of access accepts that is received from the authentication server. This element displays the number of access rejects that is received from the authentication server. This element displays the number of access challenges that is received from the authentication server. This element displays the total number of packets that contained invalid MessageAuthenticator attributes. This element displays the authentication time-out. This element displays the number of incoming packets dropped for reasons other than being malformed, bad authenticators, or unknown types.

telindus1423Router/ip/router/radiusAcct This attribute lists the RADIUS accounting server performance information. The radiusAcct structure contains the following elements: Element server requests responses badAuthenticators timeOuts droppedPackets Description This element displays the IP address of the accounting server. This element displays the number of accounting requests that is sent to the accounting server. This element displays the number of accounting responses that is received from the accounting server. This element displays the number of packets that contained invalid Signature attributes. This element displays the accounting time-out. This element displays the number of incoming packets dropped for reasons other than being malformed, bad authenticators, or unknown types.

451 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/pingResults This attribute displays the results of a ping to an IP address started with the startPing action. The pingResults structure contains the following elements: Element ipAddress numOfTxPackets numOfRxPackets minReplyTime maxReplyTime avrgReplyTime Description This element displays the IP address of the host that is being pinged. This element displays the number of transmitted pings. This element displays the number of correct answers on the transmitted pings. This element displays the lowest reply time of all correct answers. This element displays the highest reply time of all correct answers. This element displays the average reply time of all correct answers.

telindus1423Router/ip/router/tracertResults This attribute displays the results of a traceroute to an IP address/host started with the startTracert action. The tracertResults table contains the following elements: Element ttl ipAddress hostName nrTx nrRx minRtt maxRtt avrgRtt successRate comment Description This element displays the Time To Live. This element displays the IP address of the hop that has been passed. This element displays the hostname of the hop that has been passed. Note that this only displays This element displays the number of traceroute queries that have been transmitted to the hop. This element displays the number of correct answers on the transmitted traceroute queries that have been received from the hop. This element displays the minimum Round-Trip Time that has been measured. This element displays the maximum Round-Trip Time that has been measured. This element displays the average Round-Trip Time that has been calculated. This element displays the success rate. It is the ratio of nrRx/nrTx expressed in percents. This element displays some comments. E.g. Destination reached, Maximum number of hops reached, etc.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 452 Performance attributes

telindus1423Router/ip/router/startPing Use this action to start transmitting pings to an IP address or host. The result of the ping can be seen in the pingResults attribute. Refer to telindus1423Router/ip/router/pingResults on page 451. The argument value structure of the startPing action contains the following elements: Argument ipAddress Description Use this element to specify the IP address of the host you want to ping. Default:0.0.0.0 Range: up to 255.255.255.255

If you fill in the ipAddress element you may omit the hostName element. hostName Use this element to specify the hostname of the host you want to ping. Default:<empty> Range: 0 255 characters

If you fill in the hostName element you may omit the ipAddress element. sourceIp Use this element to specify the source IP address. Default:0.0.0.0 Range: up to 255.255.255.255

This can be used to force the source address to be something other than the IP address of the interface on which the traceroute query is sent. If this IP address is not one of the Telindus 1423 SHDSL Router interface addresses, then nothing is sent. iterations Use this element to specify the number of pings. Default:5 Range: 0

If you set the iterations element to 0, then the host is pinged an indefinite number of times. The only way to stop the ping session is by executing the stopPing action. interval Use this element to specify the interval, in seconds, between consecutive pings. Use this element to specify the length, in bytes, of the data transmitted in a ping. Use this element to specify the time-out period. If a ping is sent, the Telindus 1423 SHDSL Router waits during this time-out period on the answer. If the answer is received Default:1 Range: 0 100 Default:31 Range: 0 1300 Default:00000d 00h 00m 05s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s

dataLength

timeOut

within this time-out period, then ping is considered successful. outside this time-out period, then the ping is considered unsuccessful.

telindus1423Router/ip/router/stopPing Use this action to stop pending pings.

453 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/startTracert Use this action to start a traceroute to an IP address or host. The result of the traceroute can be seen in the tracertResults attribute. Refer to telindus1423Router/ip/router/tracertResults on page 451. The argument value structure of the startTracert action contains the following elements: Argument ipAddress Description Use this element to specify the IP address of the host you want to trace. Default:0.0.0.0 Range: up to 255.255.255.255

If you fill in the ipAddress element you may omit the hostName element. hostName Use this element to specify the hostname of the host you want to trace. Default:<empty> Range: 0 255 characters

If you fill in the hostName element you may omit the ipAddress element. sourceIp Use this element to specify the source IP address. Default:0.0.0.0 Range: up to 255.255.255.255

This can be used to force the source address to be something other than the IP address of the interface on which the traceroute query is sent. If this IP address is not one of the Telindus 1423 SHDSL Router interface addresses, then nothing is sent. startTtl Use this element to specify from which TTL onwards you want to see the traceroute results. Default:1 Range: 1 255

For example, if you set the startTtl element to 5, then the traceroute result displayed in the tracertResult attribute starts from TTL number 5. 1 up to 4 is not displayed. maxHops Use this element to specify the maximum number of hops. Default:30 Range: 1 255

If the maximum number of hops is reached but the destination host is still not reached, then the last traceroute result displays the comment Maximum number of hops reached. The default of 30 hops is the same default used for TCP connections. queriesPerHop Use this element to specify how many traceroute que- Default:3 ries have to be sent to each hop. Range: 1 65536 Use this element to enable or disable the resolving of hop IP addresses to hostnames. If you set the resolveHosts elements to dnsTimeOut enabled (default), then the hostName element in the tracertResults attribute displays the hostname of the hop. disabled, then the hostName element in the tracertResults attribute remains empty. Default:00000d 00h 00m 03s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s Default:enabled Range: enabled / disabled

resolveHosts

Use this element to set the DNS time-out. When hop IP addresses are resolved to hostnames, then the DNS replies are expected within this time-out period. Else they are no longer accepted.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 454 Performance attributes

Argument icmpTimeOut

Description Use this element to set the ICMP time-out. When a hop is queried, then the ICMP replies are expected within this time-out period. Else they are no longer accepted. Default:00000d 00h 00m 03s Range: 00000d 00h 00m 00s 24855d 03h 14m 07s

tos

Use this element to set the Type Of Service in the traceroute query.

Default:0 Range: 0 255

This can be used to investigate whether different service types result in different paths. Useful values are 16 (low delay) and 8 (high throughput). packetLength Use this element to set the traceroute query datagram Default:32 length in bytes. Range: 32 1300

telindus1423Router/ip/router/stopTracert Use this action to stop pending traceroute queries. telindus1423Router/ip/router/clearTracert Use this action to clear the tracertResults table.

455 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.12.2 NAT performance attributes


This section describes the following performance attributes: telindus1423Router/ip/router/defaultNat/socketsFree on page 456 telindus1423Router/ip/router/defaultNat/allocFails on page 456 telindus1423Router/ip/router/defaultNat/discards on page 456 telindus1423Router/ip/router/defaultNat/addressesAvailable on page 456 telindus1423Router/ip/router/defaultNat/tcpSocketsUsed on page 456 telindus1423Router/ip/router/defaultNat/udpSocketsUsed on page 456 telindus1423Router/ip/router/defaultNat/icmpSocketsUsed on page 456 telindus1423Router/ip/router/defaultNat/tcpAllocs on page 457 telindus1423Router/ip/router/defaultNat/udpAllocs on page 457 telindus1423Router/ip/router/defaultNat/icmpAllocs on page 457

This section describes the following actions: telindus1423Router/ip/router/defaultNat/reset on page 457

Telindus 1423 SHDSL Router User manual

Chapter MR-3 456 Performance attributes

telindus1423Router/ip/router/defaultNat/socketsFree This attribute shows the remaining number of new connections (i.e. sockets) that can be initiated. A socket is a set of source and destination IP addresses and port numbers. Initially, 2048 simultaneous sockets can be initiated. Sockets are freed using a garbage mechanism. This means that every five minutes all sockets are checked. If a socket has been released by PAT or NAT, then this socket is returned to the pool of free sockets. ICMP and UDP sockets are released when they have no data traffic during five minutes. TCP sockets are released after the TCP session has been closed or when the session has been idle for 24 hours. telindus1423Router/ip/router/defaultNat/allocFails If no sockets are available anymore but an attempt to set up a new connection is being made, then the natAllocFails attribute value is incremented by 1. Because the sockets are distributed using a hashing function, it is possible that natAllocFails increases even though natSocketsFree still indicates free sockets. ICMP requires a new socket for each transmitted packet. This implies that, for instance, a permanent ping or trace-route command may eventually use all free sockets. telindus1423Router/ip/router/defaultNat/discards This attribute indicates how many times a packet has been discarded for reasons other than a lack of free sockets. This could be, for instance, because an attempt was made to connect from the Internet to a service that was not present in the servicesAvailable table. telindus1423Router/ip/router/defaultNat/addressesAvailable This attribute displays the number of NAT addresses that are currently free. telindus1423Router/ip/router/defaultNat/tcpSocketsUsed This attribute displays the number of sockets currently in use by PAT and NAT for TCP applications. telindus1423Router/ip/router/defaultNat/udpSocketsUsed This attribute displays the number of sockets currently in use by PAT and NAT for UDP applications. telindus1423Router/ip/router/defaultNat/icmpSocketsUsed This attribute displays the number of sockets currently in use by PAT and NAT for ICMP applications.

457 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/defaultNat/tcpAllocs This attribute indicates how many TCP sockets have been allocated since cold boot. Together with the performance attributes natUdpAllocs and natIcmpAllocs it gives an indication of the type of traffic that is being routed. telindus1423Router/ip/router/defaultNat/udpAllocs This attribute indicates how many UDP sockets have been allocated since cold boot. Together with the performance attributes natTcpAllocs and natIcmpAllocs it gives an indication of the type of traffic that is being routed. telindus1423Router/ip/router/defaultNat/icmpAllocs This attribute indicates how many ICMP sockets have been allocated since cold boot. Together with the performance attributes natTcpAllocs and natUdpAllocs it gives an indication of the type of traffic that is being routed. telindus1423Router/ip/router/defaultNat/reset Use this action to release all sockets currently in use and return them to the free socket pool. In other words, executing this action resets all NAT/PAT sessions that are currently established. It also releases all official IP addresses that are dynamically assigned to a private IP address. If any TCP sessions are still active, these sessions will be aborted. Take care when using this action! All TCP information is lost when the sockets are released with this action. Any TCP sessions in use at the time of the reset will go into a hang-up state. These applications will need to restart.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 458 Performance attributes

MR-3.12.3 L2TP tunnel performance attributes


This section describes the following performance attributes: telindus1423Router/ip/router/tunnels/l2tpTunnels on page 459 telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels on page 459

459 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/tunnels/l2tpTunnels This attribute displays the performance information of the L2TP tunnels. The l2tpTunnels table contains the following elements: Element name mibCounters Description This is the name of the tunnel as you configured it. This displays the SNMP MIB2 parameters of the tunnel. These are the same as the SNMP MIB2 parameters on the LAN interface. Refer to MR-3.3 - LAN interface performance attributes on page 412. telindus1423Router/ip/router/tunnels/ipsecL2tpTunnels This attribute displays the performance information of the L2TP tunnels. The ipsecL2tpTunnels table contains the same elements as the l2tpTunnels table. Refer to telindus1423Router/ ip/router/tunnels/l2tpTunnels on page 459.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 460 Performance attributes

MR-3.12.4 Manual SA performance attributes


This section describes the following performance attributes: telindus1423Router/ip/router/manualSA[ ]/inPackets on page 461 telindus1423Router/ip/router/manualSA[ ]/outPackets on page 461 telindus1423Router/ip/router/manualSA[ ]/espDecryptionFailure on page 461 telindus1423Router/ip/router/manualSA[ ]/espAuthenticationFailure on page 461 telindus1423Router/ip/router/manualSA[ ]/espSequenceNrReplay on page 461 telindus1423Router/ip/router/manualSA[ ]/espDroppedFrames on page 461

461 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/manualSA[ ]/inPackets Upon receipt of a (reassembled) packet containing an ESP Header, the receiver determines the appropriate SA, based on the destination IP address, security protocol (ESP), and the SPI. Once the appropriate SA is determined, the inPackets attribute is incremented for this SA. telindus1423Router/ip/router/manualSA[ ]/outPackets ESP is applied to an outbound packet only after it is determined that the packet is associated with an SA that calls for ESP processing. Once the appropriate SA is determined, the outPackets attribute is incremented for this SA. telindus1423Router/ip/router/manualSA[ ]/espDecryptionFailure This attribute displays the number of times the decryption of an incoming ESP packet failed. telindus1423Router/ip/router/manualSA[ ]/espAuthenticationFailure This attribute displays the number of times the authentication of an incoming ESP packet failed. telindus1423Router/ip/router/manualSA[ ]/espSequenceNrReplay For each incoming ESP packet, the receiver verifies that the packet contains a sequence number that does not duplicate the sequence number of any other packets received during the life of this SA. Should this be the case, then these packets are dropped and the espSequenceNrReplay attribute is incremented for this SA. telindus1423Router/ip/router/manualSA[ ]/espDroppedFrames This attribute displays the number of ESP packets that were successfully decrypted and authenticated, but that could not be delivered to the L2TP tunnel (e.g. because the tunnel was down) and had to be dropped.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 462 Performance attributes

MR-3.12.5 IKE SA performance attributes


This section describes the following performance attributes: telindus1423Router/ip/router/ikeSA[ ]/phase2Negotiations on page 463 telindus1423Router/ip/router/ikeSA[ ]/phase2Sessions on page 463

463 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/ikeSA[ ]/phase2Negotiations This attribute displays performance information of the IKE phase 2 negotiation process. The phase2Negotiations table contains the following elements: Element tunnel initStarted respStarted succeeded failed expiredSA Description This element displays the L2TP tunnel name. This element displays the number of IKE phase 2 negotiation initiations that were started. This element displays the number of IKE phase 2 negotiation responses that were started. This element displays the number of IKE phase 2 negotiations that succeeded. This element displays the number of IKE phase 2 negotiations that failed. This element displays the number of IKE SAs that expired.

telindus1423Router/ip/router/ikeSA[ ]/phase2Sessions This attribute displays performance information of the IKE phase 2 sessions. The phase2 table contains the following elements: Element tunnel direction spi protocol outPackets Description This element displays the L2TP tunnel name. This element displays the direction of the IPSEC SA. Possible values are: inbound or outbound. This element displays the Security Parameter Index of the IPSEC SA. This element displays which protocol is used in the IPSEC SA. Possible values are: esp or ah. This element displays the number of outbound packets for which an appropriate SA could be determined. Only after an appropriate SA could be determined, the security protocol (ESP or AH) is applied to the outbound packet. outOctets inPackets This element displays the number of outbound octets (bytes) for which an appropriate SA could be determined. This element displays the number of inbound packets for which an appropriate SA could be determined. Only after an appropriate SA could be determined, the inbound packet is accepted. inOctets authenticationFailure This element displays the number of inbound octets (bytes) for which an appropriate SA could be determined. This element displays the number of times the authentication of an incoming packet failed.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 464 Performance attributes

Element decryptionFailure sequenceNrReplay

Description This element displays the number of times the decryption of an incoming packet failed. For each incoming packet, the receiver verifies that the packet contains a sequence number that does not duplicate the sequence number of any other packets received during the life of this SA. Should this be the case, then these packets are dropped and the sequenceNrReplay attribute is incremented for this SA. This element displays the number of packets that were successfully decrypted and authenticated, but that could not be delivered to the L2TP tunnel (e.g. because the tunnel was down) and had to be dropped.

droppedFrames

465 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.12.6 Firewall performance attributes


This section describes the following performance attributes: telindus1423Router/ip/router/firewall/h24General on page 466 telindus1423Router/ip/router/firewall/d7General on page 466 telindus1423Router/ip/router/firewall/h24Attack on page 467 telindus1423Router/ip/router/firewall/d7Attack on page 468

Telindus 1423 SHDSL Router User manual

Chapter MR-3 466 Performance attributes

telindus1423Router/ip/router/firewall/h24General This attribute displays the 24 hours general performance summary. The h24General table contains the following elements: Element sysUpTime maxConn maxResource serviceAcc noSrcRoute srcBcast synUnable finalAckFail denyPolicy connLimit srcRouteOpt policyDeleted noDestRoute rejToSelf destBcast noInPol noOutPol For the corresponding period, this element displays the elapsed time since the last cold boot. the number of times that the maximum number of connections was reached. the number of times that the used resources exceeded 80%. This could indicate flooding. the number of service access requests that were successful. the number of times that no route to the source could be found. the number of source address broadcasts. the number of times that no SYN packet could be sent. the number of times that no final ACK could be sent. the number of times that a deny policy matched. the number of times that the maximum number of connections was reached. the number of times that the source routing option was set for an IP packet. the number of times that the policy was already deleted. the number of times that no route to the destination could be found. the number of times that packets to self were rejected. the number of destination address broadcasts. the number of times that no inbound policy could be found. the number of times that no outbound policy could be found.

telindus1423Router/ip/router/firewall/d7General This attribute displays the 7 days general performance summary. The d7General table contains same elements as the h24General table. Refer to telindus1423Router/ip/router/firewall/h24General on page 466.

467 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/ip/router/firewall/h24Attack This attribute displays the 24 hours attack summary. The h24Attack table contains the following elements: Element sysUpTime landAttack spoofedPacket badTcpConnReq badTcpAck unexpUdpEchoResp unexpIcmpEchoResp genAttack minIpHdrLen emptyPacket badTcpLen shortTcpHdr tcpNullScan badUdpLen shortUdpHdr shortIcmpLen synAttack postTcpRst blindSpoofing zeroBytes seqNumOutOfRange winNuke badTcpSeqNumRst zeroLenIpOpt badIpTimeStamp unexpData unexpIcmpErr badSrcIf For the corresponding period, this element displays the elapsed time since the last cold boot. the number of (possible) land attacks. the number of spoofed packets. the number of invalid TCP connection requests. the number of invalid TCP ACKs. the number of received UDP echo responses for uninitiated requests. the number of received ICMP echo responses for uninitiated requests. the number of general attacks. the number of packets with an IP header length less than the minimum length. the number of packets without data. the number of times the TCP packet length was invalid. the number of packets with short TCP header length. the number of TCP null scan attacks. the number of times the UDP packet length was invalid. the number of packets with short UDP header length. the number of packets with short ICMP length. the number of SYN attacks. the number of data packets received after reset. the number of blind spoofing attacks. the number of times zero bytes were transferred for a connection. the number of packets with an out-of-range sequence number. the number of WinNuke attacks. the number of invalid sequence numbers with reset. the number of zero length IP options detected. the number of unaligned timestamp options detected. the number of times unexpected data was received for uninitiated traffic. the number of received ICMP error messages for uninitiated requests. the number of times the source interface was invalid.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 468 Performance attributes

telindus1423Router/ip/router/firewall/d7Attack This attribute displays the 7 days attack summary. The d7Attack table contains same elements as the h24Attack table. Refer to telindus1423Router/ip/router/firewall/ h24Attack on page 467.

469 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.13 IP traffic policy performance attributes


This section describes the following performance attributes: telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/discards on page 470 telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/trafficShaping on page 470

Telindus 1423 SHDSL Router User manual

Chapter MR-3 470 Performance attributes

telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/discards This attribute indicates how many packets have been discarded based on the criteria that are defined by the IP traffic policy. telindus1423Router/profiles/policy/traffic/ipTrafficPolicy[ ]/trafficShaping This attribute shows the usage of each line in the traffic shaping table. The trafficShaping table contains the following elements: Element name uses sourceIpStartAddress sourceIpEndAddress destinationIpStartAddress destinationIpEndAddress tosStartValue tosEndValue ipProtocol This is the TOS range as you configured it. Packets that fall within the specified range are forwarded and queued if applicable. This is the protocol field as you configured it. Packets that have the specified protocol field are forwarded and queued if applicable. sourcePortStart sourcePortEnd destinationPortStart destinationPortEnd newTosValue priority This is the source port range as you configured it. Packets that fall within the specified range are forwarded and queued if applicable. This is the destination port range as you configured it. Packets that fall within the specified range are forwarded and queued if applicable. This is the new TOS value as you configured it. This is the destination queue as you configured it. In case an overload condition occurs, then a packet that matches an entry in the trafficShaping table is sent to the specified queue. This is the IP destination address range as you configured it. Packets that fall within the specified range are forwarded and queued if applicable. Description This is the name of the line in the traffic shaping table as you configured it. This is the number of times this line in the traffic shaping table is used. This is the IP source address range as you configured it. Packets that fall within the specified range are forwarded and queued if applicable.

471 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.14 Bridge performance attributes


This section discusses the performance attributes concerned with bridging. First it describes the general bridging performance attributes. Then it explains the performance attributes of the extra features as there are access listing, etc The following gives an overview of this section: MR-3.14.1 - Bridge group performance attributes on page 472 MR-3.14.2 - Bridge access list performance attributes on page 475

Telindus 1423 SHDSL Router User manual

Chapter MR-3 472 Performance attributes

MR-3.14.1 Bridge group performance attributes


This section describes the following performance attributes: telindus1423Router/bridge/bridgeGroup/bridgeCache on page 473 telindus1423Router/bridge/bridgeGroup/bridgeDiscards on page 473 telindus1423Router/bridge/bridgeGroup/bridgeFloods on page 473 telindus1423Router/bridge/bridgeGroup/multiVlans on page 473 telindus1423Router/bridge/bridgeGroup/vlanSwitching on page 474

473 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/bridge/bridgeGroup/bridgeCache When a port of the bridge enters the learning state, it stores the MAC addresses of the stations situated on the network that is connected to this port. The MAC addresses are stored in a MAC address database or bridge cache. The bridgeCache attribute visualises this address database. Refer to What is the bridge cache? on page 225 for more information. The bridgeCache table contains the following elements: Element interface macAddress rxCount txCount Description This is the interface through which the station can be reached. This is the MAC address of the station situated on the network connected to the interface. This is the number of frames received from the corresponding MAC address. This is the number of frames forwarded to the corresponding MAC address.

telindus1423Router/bridge/bridgeGroup/bridgeDiscards This attribute displays the number of times a frame was discarded because it was received on the same interface as the one through which the destination address can be reached. it was received on an interface that is not in the forwarding state.

telindus1423Router/bridge/bridgeGroup/bridgeFloods This attribute displays the number of times a frame was flooded on all interfaces because it was a broadcast / multicast. the position of the station with the destination MAC address was not known (yet).

telindus1423Router/bridge/bridgeGroup/multiVlans This attribute displays the SNMP MIB2 performance parameters of the VLANs that are present on the bridge group. The multiVlans table contains the following elements: Element name vlan mibCounters Description This element displays the name of the VLAN as you configured it. This element displays the VLAN ID. This element displays the SNMP MIB2 performance parameters of the VLAN. Refer to MR-3.3 - LAN interface performance attributes on page 412 for an explanation of the individual SNMP MIB2 performance parameters.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 474 Performance attributes

telindus1423Router/bridge/bridgeGroup/vlanSwitching This attribute displays the performance information of the VLAN switching process. The vlanSwitching table contains the following elements: Element sourceIntf sourceVlan destinationIntf destinationVlan uses Description This element displays the name of the source interface. This element displays the VLAN ID of the source VLAN. This element displays the name of the destination interface. This element displays the VLAN ID of the destination VLAN. This element displays the number of packets that have been switched.

475 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.14.2 Bridge access list performance attributes


This section describes the following performance attributes: telindus1423Router/bridge/accessList[ ]/bridgeAccessList on page 476

Telindus 1423 SHDSL Router User manual

Chapter MR-3 476 Performance attributes

telindus1423Router/bridge/accessList[ ]/bridgeAccessList This attribute shows information on the use of the bridge access list. The bridgeAccessList table contains the following elements: Element macAddress uses Description This is the MAC address as configured in the configuration attribute telindus1423Router/bridge/accessList[ ]/bridgeAccessList. This indicates the number of times a packet has been discarded for the corresponding MAC address.

477 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

MR-3.15 Management performance attributes


This section describes the following performance attributes: telindus1423Router/management/cms2SessionCount on page 478 telindus1423Router/management/cliSessionCount on page 478 telindus1423Router/management/tftpSessionCount on page 479 telindus1423Router/management/tcpSessionCount on page 479 telindus1423Router/management/ipStackEvents on page 479

Telindus 1423 SHDSL Router User manual

Chapter MR-3 478 Performance attributes

telindus1423Router/management/cms2SessionCount This attribute displays the number of CMS2 sessions that are currently active on the Telindus 1423 SHDSL Router. There are always minimum two fixed sessions active. Connecting with TMA, TMA CLI, Telnet, etc. opens additional sessions. This is explained in the following table: Session count 1 fixed session 1 fixed session + 2 sessions + 1 session + 1 session + 2 sessions + 1 session + 1 session + 1 session Purpose A fixed session for SNMP. A fixed session for O10. When connecting with TMA. When connecting with TMA for HP OpenView or the Alarm Manager. When connecting with TMA CLI. When downloading a config.cli or config.cms file. When connecting with Telnet. When downloading software. When connecting with the Web Interface.

telindus1423Router/management/cliSessionCount This attribute displays the number of CLI sessions that are currently active on the Telindus 1423 SHDSL Router. There are always minimum two fixed sessions active. Connecting with TMA CLI, the Web Interface, etc. opens additional sessions. This is explained in the following table: Session count 1 fixed session 1 fixed session + 1 session + 1 session Purpose A fixed session for the control port. A fixed session for Web Interface. When connecting with TMA CLI or starting a CLI session. When connecting with the Web Interface.

479 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/management/tftpSessionCount This attribute displays the number of TFTP sessions that are currently active on the Telindus 1423 SHDSL Router. telindus1423Router/management/tcpSessionCount This attribute displays the number of TCP sessions that are currently active on the Telindus 1423 SHDSL Router. The following table shows when a TCP session opens: Session count + 1 session + 1 session Purpose When connecting with Telnet. When connecting with the Web Interface.

telindus1423Router/management/ipStackEvents This attribute gives an indication of the internal load of the protocol stack.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 480 Performance attributes

MR-3.16 Operating system performance attributes


This section describes the following performance attributes: telindus1423Router/operatingSystem/currUsedProcPower on page 481 telindus1423Router/operatingSystem/usedProcPower on page 481 telindus1423Router/operatingSystem/freeDataBuffers on page 481 telindus1423Router/operatingSystem/totalDataBuffers on page 481 telindus1423Router/operatingSystem/largestFreeBlockSize on page 481 telindus1423Router/operatingSystem/freeBlockCount on page 481 telindus1423Router/operatingSystem/freeMemory on page 482 telindus1423Router/operatingSystem/totalMemory on page 482 telindus1423Router/operatingSystem/taskInfo on page 482

481 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

telindus1423Router/operatingSystem/currUsedProcPower This attribute displays the amount of processing power used during the last 650 milliseconds, expressed as a percentage of the total available processing power. telindus1423Router/operatingSystem/usedProcPower This attribute lists the used processing power for the 11 most recent 30 seconds intervals. The processing power is expressed as a percentage of the total processing power. The usedProcPower table contains the following elements: Element sysUpTime min average max Description This is the elapsed time since the last cold boot. The next values are for the 30 seconds period before this relative time stamp. This is the minimum percentage of processing power in use during the last 30 seconds. This is the average percentage of processing power in use during the last 30 seconds. This is the maximum percentage of processing power in use during the last 30 seconds.

telindus1423Router/operatingSystem/freeDataBuffers The processor uses buffers for storing the packets during processing and/or queuing. Each buffer has a 256 byte size, headers included. This attribute is the number of data buffers currently not in use and available for e.g. incoming data. telindus1423Router/operatingSystem/totalDataBuffers This attribute displays the total number of available data buffers. telindus1423Router/operatingSystem/largestFreeBlockSize The processor uses RAM memory for storing internal information and buffering. The different tasks allocate RAM memory on request. Tasks may also free memory again. In this way the total RAM memory becomes fragmented. This attribute gives the size of the largest contiguous free memory block expressed in bytes. telindus1423Router/operatingSystem/freeBlockCount This attribute displays the number of free contiguous memory blocks.

Telindus 1423 SHDSL Router User manual

Chapter MR-3 482 Performance attributes

telindus1423Router/operatingSystem/freeMemory This attribute displays the total free memory expressed in bytes. telindus1423Router/operatingSystem/totalMemory This attribute displays the total RAM memory expressed in bytes. telindus1423Router/operatingSystem/taskInfo This attribute contains status information concerning the different tasks running on the processor. It is a table grouping up to 31 task slots, which is the maximum number of parallel tasks running on the processor's operating system. This attribute contains the same elements as the status attribute telindus1423Router/operatingSystem/taskInfo on page 400.

483 Telindus 1423 SHDSL Router User manual

Chapter MR-3 Performance attributes

Telindus 1423 SHDSL Router User manual

Chapter MR-4 484 Alarm attributes

MR-4 Alarm attributes


This chapter discusses the alarm attributes of the Telindus 1423 SHDSL Router. The following gives an overview of this chapter: MR-4.1 - Alarm attributes overview on page 485 MR-4.2 - Introducing the alarm attributes on page 488 MR-4.3 - General alarms on page 491 MR-4.4 - LAN interface alarms on page 493 MR-4.5 - WAN interface alarms on page 494 MR-4.6 - SHDSL line alarms on page 495 MR-4.7 - SHDSL line pair alarms on page 496 MR-4.8 - End and repeater alarms on page 498 MR-4.9 - BRI alarms on page 500 MR-4.10 - B-channel alarms on page 501 MR-4.11 - AUX alarms on page 502 MR-4.12 - Bundle alarms on page 503 MR-4.13 - Router alarms on page 504

485 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

MR-4.1 Alarm attributes overview


> telindus1423Router totalAlarmLevel alarmInfo notResponding alarmSyncLoss configChanged access unknownStatus coldBoot warmBoot codeConsistencyFail configConsistencyFail >> lanInterface alarmInfo linkDown >> wanInterface alarmInfo linkDown >>> line alarmInfo linkDown invalidNumRepeaters >>>> linePair[ ] alarmInfo linkDown lineAttenuation signalNoise errSecRatioExceeded sevErrSecRatioExceeded bbErrRatioExceeded >>> repeater[ ] >>>> networkLinePair[ ] alarmInfo lineAttenuation signalNoise errSecRatioExceeded sevErrSecRatioExceeded bbErrRatioExceeded

Telindus 1423 SHDSL Router User manual

Chapter MR-4 486 Alarm attributes

>>>> customerLinePair[ ] alarmInfo lineAttenuation signalNoise errSecRatioExceeded sevErrSecRatioExceeded bbErrRatioExceeded >>> end >>>> linePair[ ] alarmInfo lineAttenuation signalNoise errSecRatioExceeded sevErrSecRatioExceeded bbErrRatioExceeded >> bri[1]1 alarmInfo linkDown sucDialOut sucDialIn failDialOut failDialIn >>> bChannel[1] alarmInfo linkDown >>> bChannel[1] <Contains the same attributes as the bChannel[1] object.> >>> leasedLine[ ] alarmInfo linkDown >> bri[2]1 <Contains the same attributes as the bri[1] object.> >> bundle >>> pppBundle alarmInfo linkDown

1. Only present on the Telindus 1423 SHDSL Router ISDN version.

487 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

>> router alarmInfo pingActive

Telindus 1423 SHDSL Router User manual

Chapter MR-4 488 Alarm attributes

MR-4.2 Introducing the alarm attributes


Before discussing the alarm attributes of the Telindus 1423 SHDSL Router in detail, some general information on the alarm attributes of the Telindus 1423 SHDSL Router is given. The following gives an overview of this chapter: MR-4.2.1 - Configuration alarm attributes on page 489 MR-4.2.2 - General alarm attributes on page 490

489 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

MR-4.2.1 Configuration alarm attributes


This section describes the following alarm attributes: telindus1423Router//alarmMask telindus1423Router//alarmLevel

telindus1423Router//alarmMask Use this attribute to mask or unmask the alarms of an object. This determines whether an active alarm is forwarded to the central management system (e.g. HP OpenView) or not. The alarms in the alarmMask attribute have the following values: Value enabled disabled Is the active alarm being forwarded to the central management system? Yes. So the alarm is unmasked. No. So the alarm is masked.

Alarms are always seen in the alarmInfo alarm attribute of an object, regardless of the masking of the alarm. I.e. even if an alarm is set to disabled in the alarmMask of an object, if the alarm condition is fulfilled then the alarm will be set to on in the alarmInfo of that object. However, because this alarm is disabled it will not be sent to the central management system (e.g. HP OpenView). Only the most important alarms are unmasked (i.e. enabled) by default. All other alarms are masked (i.e. disabled). telindus1423Router//alarmLevel Use this attribute to assign a priority level to each alarm of the corresponding object. The alarm level range goes from 0 to 254, where 0 is the lowest and 254 is the highest priority level. The alarmLevel of an unmasked, active alarm is sent to the totalAlarmLevel alarm attribute of the top object telindus1423Router.

Telindus 1423 SHDSL Router User manual

Chapter MR-4 490 Alarm attributes

MR-4.2.2 General alarm attributes


This section describes the following alarm attributes: telindus1423Router/totalAlarmLevel telindus1423Router//alarmInfo

telindus1423Router/totalAlarmLevel This attribute is only present in the top object of the containment tree of the Telindus 1423 SHDSL Router, being telindus1423Router. It displays the priority level of an unmasked, active alarm. When several alarms are generated at the same time, the highest priority level is shown. If the alarm levels are set in a structured manner, one look at the totalAlarmLevel attribute enables the operator to make a quick estimation of the problem. The value of the totalAlarmLevel attribute is also communicated to the central management system (e.g. HP OpenView) where it determines the colour of the icon. This colour is an indication of the severity of the alarm. telindus1423Router//alarmInfo This attribute contains the actual alarm information of the corresponding object. The alarmInfo structure contains the following elements: Element discriminator currentAlarms previousAlarms alarmMask alarmLevel This element displays for the corresponding object the total alarm count since the last cold boot. the current alarms. the second most recent alarms. the alarmMask as you configured it. the alarmLevel as you configured it.

491 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

MR-4.3 General alarms


This section describes the alarms of the alarm attribute telindus1423Router/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/alarmInfo The different alarms related to the telindus1423Router object together with their explanation and default alarmMask and alarmLevel value are given in the following table: The alarm is generated Default value alarmMask notResponding by the management concentrator when the Telindus 1423 SHDSL Router does not respond on its polling session. when the internal alarm buffer overflows. when the local configuration has been changed. when a management session is started on the Telindus 1423 SHDSL Router itself. This alarm is not activated when the management session is established through a management concentrator. Example The alarm is activated in case of a TMA, TMA CLI, terminal (CLI or ATWIN) or EasyConnect session via the control connector of the Telindus 1423 SHDSL Router. a TMA, TMA CLI, TMA for HP OpenView, Telnet (CLI or ATWIN), HTTP (Web Interface) or TFTP session using the LAN / WAN IP address of the Telindus 1423 SHDSL Router. enabled alarmLevel 4

alarmSyncLoss configChanged access

enabled disabled disabled

4 1 1

The alarm is not activated in case of any management session (TMA, terminal, Telnet, HTTP, etc.) established through a management concentrator on the Telindus 1423 SHDSL Router. SNMP management. disabled 0

unknownState

each time a new Telindus 1423 SHDSL Router is added to the network and before the management concentrator has completed a first successful polling session. each time the Telindus 1423 SHDSL Router performs a cold boot. each time the Telindus 1423 SHDSL Router performs a warm boot.

coldBoot warmBoot

disabled disabled

1 1

Telindus 1423 SHDSL Router User manual

Chapter MR-4 492 Alarm attributes

The alarm

is generated

Default value alarmMask alarmLevel 1

codeConsistencyFail

when the software consistency imposed by the management concentrator on the Telindus 1423 SHDSL Router fails. For example, because of a loss of contact. In the management concentrator that manages the Telindus 1423 SHDSL Router (e.g. the Orchid 1003 LAN, Telindus 1035 Orchid, etc.), check the status attribute nmsgroup/softConsistencyStatus to determine the problem.

disabled

configConsistencyFail

when the configuration consistency imposed by the management concentrator on the Telindus 1423 SHDSL Router fails. For example, because of a loss of contact. In the management concentrator that manages the Telindus 1423 SHDSL Router (e.g. the Orchid 1003 LAN, Telindus 1035 Orchid, etc.), check the status attribute status attributes nmsgroup/objectTable/configState and configDiag to determine the problem.

disabled

493 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

MR-4.4 LAN interface alarms


This section describes the alarms of the alarm attribute telindus1423Router/lanInterface/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/lanInterface/alarmInfo The alarm related to the lanInterface object together with its explanation and default alarmMask and alarmLevel value is given in the following table: The alarm is generated Default value alarmMask linkDown when no valid LAN data is detected. I.e. when the connection between the interface and the LAN is down. enabled alarmLevel 3

Telindus 1423 SHDSL Router User manual

Chapter MR-4 494 Alarm attributes

MR-4.5 WAN interface alarms


This section describes the alarms of the alarm attribute telindus1423Router/wanInterface/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/wanInterface/alarmInfo The alarm related to the wanInterface object together with its explanation and default alarmMask and alarmLevel value is given in the following table: The alarm is generated Default value alarmMask linkDown when an error situation is detected in the encapsulation protocol. For instance, no ATM synchronisation, a failed PPP authentication, enabled alarmLevel 3

495 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

MR-4.6 SHDSL line alarms


This section describes the alarms of the alarm attribute telindus1423Router/wanInterface/line/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/wanInterface/line/alarmInfo The alarms related to the line object together with their explanation and default alarmMask and alarmLevel value are given in the following table: The alarm is generated Default value alarmMask linkDown invalidNumRepeaters when the line is down. I.e. no data can be transmitted over the line. if the number of repeaters you entered in the telindus1423Router/wanInterface/line/numExpectedRepeaters attribute does not match the actual number of repeaters discovered by the Telindus 1423 SHDSL Router. The actual number of repeaters discovered by the Telindus 1423 SHDSL Router can be seen in the telindus1423Router/wanInterface/line/numDiscoveredRepeaters attribute. enabled disabled alarmLevel 3 1

Telindus 1423 SHDSL Router User manual

Chapter MR-4 496 Alarm attributes

MR-4.7 SHDSL line pair alarms


This section describes the alarms of the alarm attribute telindus1423Router/wanInterface/line/linePair[ ]/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/wanInterface/line/linePair[ ]/alarmInfo The alarms related to the linePair[ ] object together with their explanation and default alarmMask and alarmLevel value are given in the following table: The alarm is generated Default value alarmMask linkDown lineAttenuation when the line pair is down. I.e. no data can be transmitted over the line pair. when the line attenuation exceeds the value configured in the telindus1423Router/wanInterface/line/linkAlarmThresholds for at least 10 seconds. The alarm is cleared when the line attenuation drops below this value for at least 10 seconds. Note that in case the telindus1423Router/wanInterface/line/ eocHandling attribute is set to alarmConfiguration, the central SHDSL device forces the remote SHDSL device to use the linkAlarmThresholds/lineAttenuation as configured on the central device. For more information, refer to signalNoise MU-5.4.3 - Contrle dchange de messages EOC standard on page 80 MU-5.4.4 - eocHandlingQuelles informations EOC standard sont-elles rcupres ? on page 82 disabled 1 disabled disabled alarmLevel 3 1

when the signal noise exceeds the value configured in the telindus1423Router/wanInterface/line/linkAlarmThresholds for at least 10 seconds. The alarm is cleared when the signal noise drops below this value for at least 10 seconds. Note that in case the telindus1423Router/wanInterface/line/ eocHandling attribute is set to alarmConfiguration, the central SHDSL device forces the remote SHDSL device to use the linkAlarmThresholds/signalNoise as configured on the central device. For more information, refer to MU-5.4.3 - Contrle dchange de messages EOC standard on page 80 MU-5.4.4 - eocHandlingQuelles informations EOC standard sont-elles rcupres ? on page 82

497 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

The alarm

is generated

Default value alarmMask alarmLevel 1

errSecRatioExceeded

when the amount of erroneous seconds exceeds the value configured in the telindus1423Router/wanInterface/line/ linkAlarmThresholds within a 15 minutes period1. The alarm is cleared when the amount of erroneous seconds drops below this value within a 15 minutes period. when the amount of severely erroneous seconds exceeds the value configured in the telindus1423Router/ wanInterface/line/linkAlarmThresholds within a 15 minutes period1. The alarm is cleared when the amount of severely erroneous seconds drops below this value within a 15 minutes period. when the background block error ratio exceeds the value configured in the telindus1423Router/wanInterface/line/ linkAlarmThresholds configuration attribute within a 15 minute period1. The alarm is cleared when the background block error ratio drops below this value within a 15 minute period.

disabled

sevErrSecRatioExceeded

disabled

bbErrRatioExceeded

disabled

1. The 15 minutes periods run synchronous with the 15 minutes periods of the telindus1423Router/ wanInterface/line/h2Line performance attribute. Because alarms are raised or cleared within 15 minutes periods, there is a delay in the alarm status. For example, suppose that in the first minute of a 15 minutes period the errSecOn value is exceeded, then the errSecExceeded alarm is raised. The alarm stays on for the remainder of the 15 minutes period. The alarm is only cleared if also in the next 15 minutes period the errSecOn value is not exceeded.

Telindus 1423 SHDSL Router User manual

Chapter MR-4 498 Alarm attributes

MR-4.8 End and repeater alarms


This section describes the alarms of the alarm attribute telindus1423Router/wanInterface/end/linePair[ ]/alarmInfo. The repeater[ ] and end objects contain the same attributes, therefore only the alarms of the end object are described. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/wanInterface/end/linePair[ ]/alarmInfo The alarm related to the end/linePair[ ] object together with its explanation and default alarmMask and alarmLevel value is given in the following table: The alarm is generated Default value alarmMask lineAttenuation when the lineAttenuation value configured in the telindus1423Router/wanInterface/line/linkAlarmThresholds of the local device is exceeded for at least 10 seconds. The alarm is cleared when the line attenuation drops below this value for at least 10 seconds. Note however that in case the telindus1423Router/wanInterface/line/eocHandling attribute is set to alarmConfiguration, the central SHDSL device forces the remote SHDSL device to use the linkAlarmThresholds/lineAttenuation as configured on the central device. For more information, refer to signalNoise MU-5.4.3 - Contrle dchange de messages EOC standard on page 80 MU-5.4.4 - eocHandlingQuelles informations EOC standard sont-elles rcupres ? on page 82 disabled 1 disabled alarmLevel 1

when the signalNoise value configured in the telindus1423Router/wanInterface/line/linkAlarmThresholds of the local device is exceeded for at least 10 seconds. The alarm is cleared when the signal noise drops below this value for at least 10 seconds. Note however that in case the telindus1423Router/wanInterface/line/eocHandling attribute is set to alarmConfiguration, the central SHDSL device forces the remote SHDSL device to use the linkAlarmThresholds/signalNoise as configured on the central device. For more information, refer to MU-5.4.3 - Contrle dchange de messages EOC standard on page 80 MU-5.4.4 - eocHandlingQuelles informations EOC standard sont-elles rcupres ? on page 82

499 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

The alarm

is generated

Default value alarmMask alarmLevel 1

errSecRatioExceeded

when the errSecOn value configured in the telindus1423Router/wanInterface/line/linkAlarmThresholds of the local device is exceeded within a 15 minutes period1. The alarm is cleared when the amount of erroneous seconds drops below this value within a 15 minutes period. when the sevErrSecOn value configured in the telindus1423Router/wanInterface/line/linkAlarmThresholds of the local device is exceeded within a 15 minutes period1. The alarm is cleared when the amount of severely erroneous seconds drops below this value within a 15 minutes period. when the background block error ratio exceeds the value configured in the telindus1423Router/wanInterface/line/ linkAlarmThresholds configuration attribute within a 15 minute period1. The alarm is cleared when the background block error ratio drops below this value within a 15 minute period.

disabled

sevErrSecRatioExceeded

disabled

bbErrRatioExceeded

disabled

1. The 15 minutes periods run synchronous with the 15 minutes periods of the telindus1423Router/ wanInterface/line/h2Line performance attribute. Because alarms are raised or cleared within 15 minutes periods, there is a delay in the alarm status. For example, suppose that in the first minute of a 15 minutes period the errSecOn value is exceeded, then the errSecExceeded alarm is raised. The alarm stays on for the remainder of the 15 minutes period. The alarm is only cleared if also in the next 15 minutes period the errSecOn value is not exceeded.

Telindus 1423 SHDSL Router User manual

Chapter MR-4 500 Alarm attributes

MR-4.9 BRI alarms


This section describes the alarms of the alarm attribute telindus1423Router/bri[ ]/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/bri[ ]/alarmInfo The alarms related to the bri[ ] object together with their explanation and default alarmMask and alarmLevel value are given in the following table: The alarm is generated Default value alarmMask linkDown when ISDN layer 1 is down, i.e. there is no physical connection between the BRI interface and the telecom operator ISDN switch. when a dial-out call is established successfully. when a dial-in call is established successfully. when a dial-out call failed. This can be due to a problem on the dial-up interface itself (e.g. no physical connection, no answer to a call, etc.) or an error situation in the encapsulation protocol. when a dial-in call failed. This can be due to a problem on the dial-up interface itself (e.g. no physical connection, no answer to a call, etc.) or an error situation in the encapsulation protocol. disabled alarmLevel 2

sucDialOut sucDialIn failDialOut

disabled disabled disabled

1 1 2

failDialIn

disabled

501 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

MR-4.10 B-channel alarms


This section describes the alarms of the alarm attribute telindus1423Router/bri[ ]/bChannel[ ]/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/bri[ ]/bChannel[ ]/alarmInfo The alarm related to the bChannel[ ] object together with its explanation and default alarmMask and alarmLevel value is given in the following table: The alarm is generated Default value alarmMask linkDown when ISDN layer 2 is down, i.e. the B-channel is down. disabled alarmLevel 2

Telindus 1423 SHDSL Router User manual

Chapter MR-4 502 Alarm attributes

MR-4.11 AUX alarms


This section describes the alarms of the alarm attribute telindus1423Router/aux/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/aux/alarmInfo The alarms related to the aux object together with their explanation and default alarmMask and alarmLevel values are given in the following table: The alarm is generated Default value alarmMask linkDown sucDialOut sucDialIn failDialOut when layer 1 is down. when a dial-out call is established successfully. when a dial-in call is established successfully. when a dial-out call failed. This can be due to a problem on the dial-up interface itself (e.g. no physical connection, no answer to a call, etc.) or an error situation in the encapsulation protocol. when a dial-in call failed. This can be due to a problem on the dial-up interface itself (e.g. no physical connection, no answer to a call, etc.) or an error situation in the encapsulation protocol. disabled disabled disabled disabled alarmLevel 2 1 1 2

failDialIn

disabled

503 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

MR-4.12 Bundle alarms


This section describes the alarms of the alarm attribute telindus1423Router/bundle/xxxBundle[ ]/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/bundle/xxxBundle[ ]/alarmInfo The alarm related to the xxxBundle[ ] object together with its explanation and default alarmMask and alarmLevel value is given in the following table: The alarm is generated Default value alarmMask linkDown when all the bundle links in the bundle are down. enabled alarmLevel 3

Telindus 1423 SHDSL Router User manual

Chapter MR-4 504 Alarm attributes

MR-4.13 Router alarms


This section describes the alarms of the alarm attribute telindus1423Router/ip/router/alarmInfo. Refer to MR-4.2 - Introducing the alarm attributes on page 488 for general information on the alarm attributes.

telindus1423Router/ip/router/alarmInfo The alarm related to the router object together with its explanation and default alarmMask and alarmLevel value is given in the following table: The alarm is generated Default value alarmMask pingActive when a ping is pending (for example, an indefinite ping). This notification is necessary because you can only transmit one ping at a time. Furthermore, there is no protection when a new ping is started before the previous is stopped. enabled alarmLevel 3

505 Telindus 1423 SHDSL Router User manual

Chapter MR-4 Alarm attributes

Telindus 1423 SHDSL Router User manual

Chapter MR-5 506 TMA sub-system picture

MR-5 TMA sub-system picture


The sub-system picture is a TMA tool that visualises the status information of the Telindus 1423 SHDSL Router. This chapter explains how to display the sub-system picture, and how to interpret the visual indications. How to display the sub-system picture? To display the sub-system picture of the Telindus 1423 SHDSL Router, click on the sub-system picture button located in the TMA toolbar: . Structure of the sub-system picture This paragraph displays and labels the different elements of the sub-system picture. It also explains how the visual indications should be interpreted. Below, the Telindus 1423 SHDSL Router sub-system picture is displayed:

The following table gives an overview of the sub-system picture elements and what they indicate: Element LEDs Description These reflect the actual status of the device. The LED indication on the sub-system picture corresponds with the LED indication on the Telindus 1423 SHDSL Router itself. Refer to MU-2.7 - Tmoins DEL du panneau avant on page 24 for more information on the interpretation of the LEDs. LAN This reflects the status of the LAN interface. The possible indications are: green. There is no alarm active in the corresponding lanInterface object. red. An alarm is active in the corresponding lanInterface object. The colour of the LAN interface only changes if the alarms related to the lanInterface object are set to enabled in the alarmMask.

507 Telindus 1423 SHDSL Router User manual

Chapter MR-5 TMA sub-system picture

Element LINE

Description This reflects the status of the WAN interface and of the line pair(s). The possible indications are: green outside. There is no alarm active in the corresponding wanInterface object. red outside. An alarm is active in the corresponding wanInterface object. green inside, left. There is no alarm active in the corresponding linePair[1] object. red inside, left. An alarm is active in the corresponding linePair[1] object. green inside, right. There is no alarm active in the corresponding linePair[2] object. red inside, right. An alarm is active in the corresponding linePair[2] object. The colours of the WAN interface / line pair(s) only change if the alarms related to the wanInterface / linePair[ ] objects are set to enabled in the alarmMask.

Telindus 1423 SHDSL Router User manual

Chapter MR-6 508 Auto installing the Telindus 1423 SHDSL Router

MR-6 Auto installing the Telindus 1423 SHDSL Router


Auto-install includes a number of features that allow you to partially or completely configure the Telindus 1423 SHDSL Router without on-site intervention. This is shown in this chapter. The following gives an overview of this chapter: MR-6.1 - Introducing the auto-install protocols on page 509 MR-6.2 - Auto-install on the LAN interface on page 511 MR-6.3 - Auto-install on the WAN interface on page 516 MR-6.4 - Creating a configuration file on page 523 MR-6.5 - Restoring a configuration file on page 530

509 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.1 Introducing the auto-install protocols


The Telindus 1423 SHDSL Router uses several protocols during its auto-install sequence. These are introduced below. What is BootP? BootP (RFC 951) is used by IP devices that have no IP address to obtain one. The client IP device sends a limited broadcast request on its interfaces requesting an IP address. The request contains the client its MAC address, which is a unique identifier (refer to What is the ARP cache? on page 22 for more information). A workstation with a BootP server interprets incoming BootP requests. You can configure a file on the server with MAC address and IP address/subnet mask pairs for all devices in the network you want to service. If the MAC address in the BootP request matches a MAC address in this file, the BootP server replies with the corresponding IP address and subnet mask. Assigning an IP address in this way is done through a simple request - response handshake. The Telindus 1423 SHDSL Router, being a router, always requests a static IP address. What is DHCP? DHCP (RFC 2131 and RFC 2132) is used by IP devices that have no IP address to obtain one. The client IP device sends a limited broadcast request on its interfaces requesting an IP address. The request contains the client its MAC address, which is a unique identifier (refer to What is the ARP cache? on page 22 for more information). A workstation with a DHCP server works in a similar way as with a BootP server. The difference with BootP is that you can additionally configure a list of IP addresses on the server. These IP addresses are dynamically assigned to the IP devices requesting an IP address, independently of their MAC address. Those address assignments are limited in time. Assigning an IP address in this way is done through a 4-way handshake and with regular renewals. The Telindus 1423 SHDSL Router, being a router, always requests a static IP address. What is DNS? The Domain Name Service (DNS) is an Internet service that translates domain names into IP addresses. Because domain names are alphabetic, they are easier to remember. The Internet however, is really based on IP addresses. Therefore, every time you use a domain name, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.mywebsite.com might translate to 198.105.232.4. The DNS system is, in fact, its own network. If one DNS server doesn't know how to translate a particular domain name, it asks another one, and so on, until the correct IP address is returned.

Telindus 1423 SHDSL Router User manual

Chapter MR-6 510 Auto installing the Telindus 1423 SHDSL Router

What is TFTP? Trivial File Transfer Protocol (TFTP) is an Internet software utility for transferring files that is simpler to use than the File Transfer Protocol (FTP) but less capable. It is used where user authentication and directory visibility are not required. TFTP uses the User Datagram Protocol (UDP) rather than the Transmission Control Protocol (TCP). TFTP is described formally in Request for Comments (RFC) 1350. TFTP is typically used in combination with BootP or DHCP to obtain the configuration of a device from a TFTP server. The configuration file on this TFTP can be in a binary or an ASCII (CLI) format. How to build such files is explained in MR-6.4 - Creating a configuration file on page 523. The Telindus 1423 SHDSL Router as relay agent Being broadcast packets, BootP, DHCP, DNS and TFTP requests can cross a router using IP helper addresses. The Telindus 1423 SHDSL Router is a relay agent for these protocols. This means it adds additional information to the request packets allowing servers on distant networks to send back the answer.

511 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.2 Auto-install on the LAN interface


This section shows the auto-install sequence on the Telindus 1423 SHDSL Router its LAN interface. The following gives an overview of this section: MR-6.2.1 - Set-up for auto-install on the LAN interface on page 512 MR-6.2.2 - Auto-install in case of Ethernet on page 513 MR-6.2.3 - Example of auto-install on the LAN interface on page 514

Telindus 1423 SHDSL Router User manual

Chapter MR-6 512 Auto installing the Telindus 1423 SHDSL Router

MR-6.2.1 Set-up for auto-install on the LAN interface


The following figure shows the set-up for auto-install on the LAN interface:

513 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.2.2 Auto-install in case of Ethernet

Telindus 1423 SHDSL Router User manual

Chapter MR-6 514 Auto installing the Telindus 1423 SHDSL Router

MR-6.2.3 Example of auto-install on the LAN interface


Suppose you have the following situation: The Telindus 1423 SHDSL Router is still in its default configuration (absolutely nothing is configured). This means that the LAN interface is in bridging mode. no IP address is configured on the LAN interface. no IP address is configured on the bridge group. bridge group, not to the LAN interface itself (since it is in bridging mode)! A BootP server is present on the LAN, containing the Telindus 1423 SHDSL Router MAC address (00:C0:89:00:94:6F) and a corresponding IP address (192.168.47.1). A DNS server is present on the LAN, containing the Telindus 1423 SHDSL Router its hostname TlsRouter. A TFTP server is present on the LAN, containing the Telindus 1423 SHDSL Router its binary configuration file TlsRouter.cms. The Telindus 1423 SHDSL Router is plugged on to the LAN.

This means that if an IP address is obtained through BootP/DHCP, then it will be assigned to the

515 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

The following shows how the Telindus 1423 SHDSL Router obtains an IP address and its configuration file:

Note again that the obtained IP address is assigned to the bridge group, not to the LAN interface itself (since it is in bridging mode)! So if you check the status of the bridge group, you will see the IP address there:

Telindus 1423 SHDSL Router User manual

Chapter MR-6 516 Auto installing the Telindus 1423 SHDSL Router

MR-6.3 Auto-install on the WAN interface


This section shows the auto-install sequence on the Telindus 1423 SHDSL Router its WAN interface. The following gives an overview of this section: MR-6.3.1 - Set-up for auto-install on the WAN interface on page 517 MR-6.3.2 - Auto-install in case of ATM on page 518 MR-6.3.3 - Auto-install in case of Frame-Relay on page 519 MR-6.3.4 - Example of auto-install on the WAN interface running ATM on page 520

517 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.3.1 Set-up for auto-install on the WAN interface


The following figure shows the set-up for auto-install on the WAN interface:

Telindus 1423 SHDSL Router User manual

Chapter MR-6 518 Auto installing the Telindus 1423 SHDSL Router

MR-6.3.2 Auto-install in case of ATM

519 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.3.3 Auto-install in case of Frame-Relay

Telindus 1423 SHDSL Router User manual

Chapter MR-6 520 Auto installing the Telindus 1423 SHDSL Router

MR-6.3.4 Example of auto-install on the WAN interface running ATM


Suppose you have the following situation: On the local OneAccess Router you add an ATM PVC to the atm/pvcTable. For this ATM PVC you specify the VPI/VCI values 1/100. All other elements of the ATM PVC remain at their default value. On the central OneAccess Router you also add an ATM PVC to the atm/pvcTable. For this ATM PVC you specify the VPI/VCI values 1/100. the helper IP addresses 192.168.47.251 (DHCP server) and 192.168.47.252 (TFTP server). the helper protocols DHCP (68) and TFTP (69).

A DHCP server is present on the remote network, containing the Telindus 1423 SHDSL Router MAC address (00:C0:89:00:94:6F), a corresponding IP address (192.168.100.1) and a corresponding configuration filename TlsRouterConfig.cms. A TFTP server is present on the remote network, containing the Telindus 1423 SHDSL Router its binary configuration file TlsRouterConfig.cms. The OneAccess Router is plugged on to the WAN.

So the initial configuration on the local OneAccess Router is as shown below:

521 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

In order for the auto-install of the local OneAccess Router to be successful, the following must be configured on the central OneAccess Router:

Telindus 1423 SHDSL Router User manual

Chapter MR-6 522 Auto installing the Telindus 1423 SHDSL Router

The following shows how the local OneAccess Router obtains an IP address and its configuration file:

523 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.4 Creating a configuration file


In MR-6.2 - Auto-install on the LAN interface on page 511 and MR-6.3 - Auto-install on the WAN interface on page 516, you can see how the configuration file is retrieved using TFTP during the auto-install sequence. This section explains which two configuration file formats can be used for this purpose and how to create such a configuration file. The following gives an overview of this section: MR-6.4.1 - The different configuration file formats on page 524 MR-6.4.2 - Creating a binary file using TMA on page 525 MR-6.4.3 - Creating an ASCII CLI file using TMA on page 526 MR-6.4.4 - Creating an ASCII CLI file using TFTP on page 528 MR-6.4.5 - Creating an ASCII CLI file using Telnet on page 529

Telindus 1423 SHDSL Router User manual

Chapter MR-6 524 Auto installing the Telindus 1423 SHDSL Router

MR-6.4.1 The different configuration file formats


In MR-6.2 - Auto-install on the LAN interface on page 511 and MR-6.3 - Auto-install on the WAN interface on page 516, you can see how the configuration file is retrieved using TFTP during the auto-install sequence. The two possible configuration file formats used for this purpose are: File type binary Extension .cms How to create the configuration file Use the TMA export utility and choose the CMS file type. This is the most compact format. Refer to MR-6.4.2 - Creating a binary file using TMA on page 525. ASCII CLI .cli Use the TMA export utility and choose the CLI file type. Use the TFTP get command. Use the CLI get command.

Refer to MR-6.4.3 - Creating an ASCII CLI file using TMA on page 526 MR-6.4.4 - Creating an ASCII CLI file using TFTP on page 528 MR-6.4.5 - Creating an ASCII CLI file using Telnet on page 529 When you download an ASCII CLI (*.cli) configuration file to the Telindus 1423 SHDSL Router, make sure that each line in this file contains no more than 500 characters.

525 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.4.2 Creating a binary file using TMA


To create a configuration file in binary (*.cms) format using TMA, proceed as follows: Step 1 2 3 Action Start a TMA session on the Telindus 1423 SHDSL Router. Make changes to its configuration (if necessary) in order to obtain the desired configuration. Click on the Export data to file button: .

In the Export configuration parameters window, select the following: Choose a directory where to save the file. Enter a name for the file. Make sure the file type is CMS. Make sure the Full configuration option is selected.

Click on the Save button. The edited configuration of the Telindus 1423 SHDSL Router is stored on the PC in binary format. The file contains the complete configuration including the Activate Configuration command. As a result, the configuration is immediately activated if you download it to the device again.

Telindus 1423 SHDSL Router User manual

Chapter MR-6 526 Auto installing the Telindus 1423 SHDSL Router

MR-6.4.3 Creating an ASCII CLI file using TMA


To create a configuration file in ASCII CLI (*.cli) format using TMA, proceed as follows: Step 1 2 3 Action Start a TMA session on the Telindus 1423 SHDSL Router. Make changes to its configuration (if necessary) in order to obtain the desired configuration. Click on the Export data to file button: .

In the Export configuration parameters window, select the following: Choose a directory where to save the file. Enter a name for the file. Make sure the file type is CLI. Make sure the Full configuration option is selected.

Do not select the file extension for ASCII text (*.txt)! This is for documentation purposes only, not for configuration purposes.

527 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

Step 5

Action Click on the Save button.

The edited configuration of the Telindus 1423 SHDSL Router is stored on the PC
in ASCII CLI format. The file contains the configuration attributes that differ from their default value including the Load Default Configuration command at the beginning of the file and the Activate Configuration command at the end of the file. As a result, the configuration is immediately activated if you download it to the device again.

Telindus 1423 SHDSL Router User manual

Chapter MR-6 528 Auto installing the Telindus 1423 SHDSL Router

MR-6.4.4 Creating an ASCII CLI file using TFTP


To create a configuration file in ASCII CLI (*.cli) format using TFTP, proceed as follows: Step 1 Action Start a TFTP session on the Telindus 1423 SHDSL Router. For example by typing tftp 10.0.11.1 at the command prompt of your workstation, where 10.0.11.1 is the IP address of the Telindus 1423 SHDSL Router. 2 Get the configuration file of the Telindus 1423 SHDSL Router. Example
tftp> get CONFIG.CLI dest_file.cli

Where 3
get is the TFTP command to retrieve a file. CONFIG.CLI (in capitals!) is the source file (i.e. the Telindus 1423 SHDSL Router configuration file). dest_file.cli is the destination file.

When the file transfer is finished, close the TFTP session.

Note that the procedure described above does not work with FTP.

529 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.4.5 Creating an ASCII CLI file using Telnet


To create a configuration file in ASCII CLI (*.cli) format using Telnet logging and the CLI get command, proceed as follows: Step 1 2 3 4 Action Start a Telnet session on the Telindus 1423 SHDSL Router. You are automatically in CLI mode. You are automatically located in the top object (telindus1423Router) and in the "Edit Configuration" group. Check to make sure (just press the Enter key). Log the CLI output to a file. Refer to the documentation of your Telnet software how to do so. Execute the get -r -d command.
>get -r -d

5 6

Stop the logging. The log file you now obtained, modify it as follows: At the beginning of the log file remove all logging before the get -r -d command. remove the get -r -d command itself. change the string GET into SET. type the string action Load Default Configuration (case sensitive!) on the line above the SET command. remove all logging until the last character is a closing curled bracket }. type the string action Activate Configuration (case sensitive!) on the line below the closing curled bracket }.

At the end of the log file -

Save this file to a file with an extension *.cli.

Telindus 1423 SHDSL Router User manual

Chapter MR-6 530 Auto installing the Telindus 1423 SHDSL Router

MR-6.5 Restoring a configuration file


In MR-6.2 - Auto-install on the LAN interface on page 511 and MR-6.3 - Auto-install on the WAN interface on page 516, you can see how the configuration file is retrieved using TFTP during the auto-install sequence. It is, however, also possible to restore previously saved configuration files by downloading them yourself to the Telindus 1423 SHDSL Router. You can do this by using various applications. This is explained in this section. The following gives an overview of this section: MR-6.5.1 - Downloading a configuration file using TMA on page 531 MR-6.5.2 - Downloading a configuration file using (T)FTP on page 532 MR-6.5.3 - Downloading a configuration file using Telnet on page 533

531 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.5.1 Downloading a configuration file using TMA


To download a configuration file using TMA, proceed as follows: Step 1 2 Action Start a TMA session on the Telindus 1423 SHDSL Router. Click on the Import data from file button: .

In the Import configuration window, select the following: Select the directory where the configuration file is located. Select which type of configuration file you want to import: CMS or CLI. Select the configuration file you want to import.

Click on the Open button.

The configuration is downloaded to the Telindus 1423 SHDSL Router.

Telindus 1423 SHDSL Router User manual

Chapter MR-6 532 Auto installing the Telindus 1423 SHDSL Router

MR-6.5.2 Downloading a configuration file using (T)FTP


To download a configuration file using (T)FTP, proceed as follows: Step 1 Action Start a (T)FTP session on the Telindus 1423 SHDSL Router. For example by typing (t)ftp 10.0.11.1 at the command prompt of your computer, where 10.0.11.1 is the IP address of the Telindus 1423 SHDSL Router. If a write access password is configured on the Telindus 1423 SHDSL Router, then enter it as well. 2 3 Set the transfer mode to binary (octet) format. The syntax to do this is typically binary or octet. Type the following command:
(t)ftp> put source_file.cli CONFIG.CLI

or
(t)ftp> put source_file.cms CONFIG.CMS

Where 4
put is the (T)FTP command to send a file. source_file.* is the source file. This may either be a CLI or CMS file1. CONFIG.* (in capitals!) is the destination file (i.e. the Telindus 1423 SHDSL Router configuration file). This may either be a CLI or CMS file1.

When the file transfer is finished, close the (T)FTP session.

1. However, make sure that source and destination file format are both the same!

533 Telindus 1423 SHDSL Router User manual

Chapter MR-6 Auto installing the Telindus 1423 SHDSL Router

MR-6.5.3 Downloading a configuration file using Telnet


To download a configuration file using Telnet, proceed as follows: Step 1 2 3 Action Start a