Perle IRG5000 Series Router CLI Reference Guide · 2020-02-03 · command mode it takes you to down...

Perle IRG5000 Series Router

CLI Reference Guide

Modified: Jan 2020Version 01.21.2020

Document Part# 5500446

Copyright Statement

This document must not be reproduced in any way whatsoever, either printed or electronically, without the consent of:

Perle Systems Limited,60 Renfrew DriveMarkham, ONCanada L3R 0E1

Perle reserves the right to make changes without further notice, to any products to improve reliability, function, ordesign.

.

(c)Perle Systems Limited, 2020.

Preface ...............................................................................14About This Book ........................................................................ 14

Intended Audience..................................................................... 14

Typeface Conventions............................................................... 14

Chapter 1 Using the Command-Line Interface ...............15Command Modes.................................................................................... 15Command Shortcuts .............................................................................. 16Command Options ................................................................................. 16Common Commands ............................................................................. 16default..................................................................................... 16disable .................................................................................... 16do-exec................................................................................... 16enable ..................................................................................... 17exit .......................................................................................... 17help ......................................................................................... 17login........................................................................................ 17logout ..................................................................................... 17no ............................................................................................ 17

Chapter 2 User Exec Mode ...............................................20clear ip dhcp binding................................................................. 20

enable.......................................................................................... 20

logout .......................................................................................... 21

ping ............................................................................................. 21

release dhcp | dhcpv6 ............................................................... 22

renew dhcp | dhcpv6 ................................................................. 23

show alarm ................................................................................. 23

show arp ..................................................................................... 24

show clock.................................................................................. 25

Table of Contents

show crypto................................................................................ 25

show dot1x ................................................................................. 26

show eap..................................................................................... 28

show environment ..................................................................... 28

show facility-alarm..................................................................... 29

show flash: ................................................................................. 30

show hosts ................................................................................. 31

show ip arp ................................................................................. 31

show ip ddns .............................................................................. 31

show dhcp .................................................................................. 32

show ip host-group.................................................................... 33

show ip http................................................................................ 33

show ip interface........................................................................ 34

show ip ssh ................................................................................ 35

show ipv6.................................................................................... 35

show line..................................................................................... 36

show mab ................................................................................... 36

show ntp ..................................................................................... 37

show radius ................................................................................ 38

show snmp ................................................................................. 39

show ssh..................................................................................... 39

show tacacs................................................................................ 40

show terminal............................................................................. 40

show users ................................................................................. 41

show version .............................................................................. 41

ssh............................................................................................... 42

telnet ........................................................................................... 42

terminal ....................................................................................... 43

traceroute ................................................................................... 43

Chapter 3 Privileged EXEC mode ....................................45archive ........................................................................................ 45

boot ............................................................................................. 49

cd................................................................................................. 49

cellular ........................................................................................ 50

clear aaa...................................................................................... 50

clear arp-cache........................................................................... 51

clear contact............................................................................... 51

clear counters ............................................................................ 52

clear ip ........................................................................................ 52

clear ipv6 .................................................................................... 53

clear line ..................................................................................... 54

clear logging............................................................................... 54

clear radius................................................................................. 55

clear tacacs ................................................................................ 55

clock............................................................................................ 56

configure..................................................................................... 57

copy............................................................................................. 57

debug .......................................................................................... 58

delete........................................................................................... 60

dir ................................................................................................ 61

disable......................................................................................... 62

disconnect .................................................................................. 62

dot1x ........................................................................................... 62

exit............................................................................................... 63

kill ................................................................................................ 64

logout .......................................................................................... 64

mkdir ........................................................................................... 64

more ............................................................................................ 65

ping ............................................................................................. 66

pwd.............................................................................................. 67

release dhcp | dhcpv6 ............................................................... 67

reload .......................................................................................... 68

rename ........................................................................................ 69

renew........................................................................................... 69

reset ............................................................................................ 70

rmdir............................................................................................ 70

serialt .......................................................................................... 71

show aaa..................................................................................... 71

show alarm ................................................................................. 72

show archive .............................................................................. 73

show arp ..................................................................................... 73

show bgp .................................................................................... 74

show cellular .............................................................................. 76

show clock.................................................................................. 78

show crypto................................................................................ 78

show debugging ........................................................................ 79

show dhcp .................................................................................. 79

show dot11 ................................................................................. 80

show dot1x ................................................................................. 81

show eap..................................................................................... 82

show eee..................................................................................... 83

show email.................................................................................. 84

show environment ..................................................................... 85

show facility-alarm..................................................................... 85

show flash: ................................................................................. 86

show gnss .................................................................................. 87

show hosts ................................................................................. 88

show interfaces.......................................................................... 89

show ip access-lists .................................................................. 90

show ip alg ................................................................................. 91

show ip arp ................................................................................. 91

show ip as-path-access-list ...................................................... 92

show ip bgp ................................................................................ 92

show ip community-list ............................................................. 92

show ip ddns .............................................................................. 93

show ip dhcp .............................................................................. 94

show ip dns ................................................................................ 94

show ip extcommunity-list........................................................ 95

show ip firewall .......................................................................... 95

show ip health ............................................................................ 96

show ip host-group.................................................................... 97

show ip http................................................................................ 98

show ip interfaces...................................................................... 98

show ip nat ................................................................................. 99

show ip ospf ............................................................................... 99

show ip prefix-list .................................................................... 101

show ip rip ................................................................................ 101

show ip route............................................................................ 102

show ip route-policy ................................................................ 102

show ip ssh .............................................................................. 103

show ipv6.................................................................................. 103

show line................................................................................... 105

show logging............................................................................ 107

show mab ................................................................................. 108

show management-access ..................................................... 109

show nat66 ............................................................................... 109

show ntp ....................................................................................110

show nvram:..............................................................................111

show processes ........................................................................111

show radius ...............................................................................112

show reload ...............................................................................113

show route.................................................................................113

show running-config ................................................................115

show sdm ..................................................................................117

show serial ................................................................................118

show snmp ................................................................................119

show ssh................................................................................... 120

show startup-config................................................................. 120

show system ............................................................................ 122

show tacacs.............................................................................. 123

show task-status...................................................................... 123

show tech-support................................................................... 124

show terminal........................................................................... 124

show users ............................................................................... 125

show version ............................................................................ 126

show wan.................................................................................. 126

show zone-policy ..................................................................... 127

ssh............................................................................................. 128

standby ..................................................................................... 128

telnet ......................................................................................... 129

terminal ..................................................................................... 129

traceroute ................................................................................. 130

undebug.................................................................................... 130

Chapter 4 Global Configuration Mode...........................132aaa ............................................................................................. 132

alarm ......................................................................................... 133(config-alarm-profile) .......................................................... 134

archive ...................................................................................... 135(config-archive) ................................................................... 135

arp ............................................................................................. 137

banner ....................................................................................... 137

bridge ........................................................................................ 138

cellular ...................................................................................... 138

clock.......................................................................................... 139

configure................................................................................... 140

controller .................................................................................. 141(config-controller) ............................................................... 141

crypto ........................................................................................ 142(config-client)....................................................................... 144(config-connection)............................................................. 145(config-esp).......................................................................... 147(config-ike) ........................................................................... 148(config-12tp)......................................................................... 149

dot11.......................................................................................... 149(config-ssid)......................................................................... 150

dot1x ......................................................................................... 151dot1x(config-dot1x-creden)................................................ 152

eap............................................................................................. 153eap(config-eap-profile) ....................................................... 153

email.......................................................................................... 154

enable........................................................................................ 155

gnss........................................................................................... 155(config-gnss-profile) ........................................................... 156(config-gnss-client) ............................................................. 157(config-gnss-server)............................................................ 158

hostname .................................................................................. 159

interface .................................................................................... 159(config-if)# bvi...................................................................... 160(config-if)# cellular .............................................................. 163(config-if)# dialer ................................................................. 165(config-if)# dot11Radio ....................................................... 168

(config-if-ssid)# ................................................................... 170(config-if) ethernet............................................................... 172(config-if)# loopback ........................................................... 176(config-if)# OpenVPN-Tunnel ............................................. 177(config-if)# tunnel ................................................................ 179(config-if)# range ................................................................. 184

ip................................................................................................ 187(config-DDNS-update-method)#......................................... 193(config-std-nacl)# ................................................................ 193(config-dhcp)# ..................................................................... 194

ipv6............................................................................................ 196(config--ipv6-acl)# ............................................................... 198(dhcp-ipv6)# ......................................................................... 198(config-fw6)# ........................................................................ 200(config-pbr6)# ...................................................................... 202(config-pbr6-rules)# ............................................................ 202

key ............................................................................................. 205(config-key)# key ................................................................. 205(config-keychain-key)# ....................................................... 206

line............................................................................................. 206

logging ...................................................................................... 207

login .......................................................................................... 209

low-power-mode ...................................................................... 210

management-access................................................................ 210(management-access-LAN)# ...............................................211(management-access-WAN)# ............................................. 212

nat66.......................................................................................... 213

ntp ............................................................................................. 214

power ........................................................................................ 217(config-smrt-stdby)# ........................................................... 218

radius ........................................................................................ 219

(config-radius-server)# ....................................................... 219

radius-server ............................................................................ 220

router......................................................................................... 220(config-router)#.................................................................... 221(config-router)#.................................................................... 224(config-router)#.................................................................... 226(config-router-af)# ............................................................... 227

router-map ................................................................................ 229

sdm............................................................................................ 230

serial.......................................................................................... 230

service....................................................................................... 232

snmp-server ............................................................................. 232

standby ..................................................................................... 234

tacacs........................................................................................ 234(config-tacacs-server)#....................................................... 235

tty............................................................................................... 236

usb............................................................................................. 236

username .................................................................................. 236(config-user-serial)#............................................................ 237

zone ....................................................................................................................................................... 239

(config-sec-zone)#............................................................... 239

zone-pair ................................................................................... 240

Chapter 5 Interface configuration .................................241interface .................................................................................... 241

(config-if)# bvi...................................................................... 242(config-if)# cellular .............................................................. 245(config-if)# dot11Radio ....................................................... 247(config-if-ssid)# ................................................................... 250(config-if)# dialer ................................................................. 252

(config-if) ethernet............................................................... 255(config-if)# loopback ........................................................... 260(config-if)# OpenVPN-Tunnel ............................................. 260(config-if)# tunnel ................................................................ 262

Chapter 6 Interface line mode........................................268line............................................................................................. 268

(config-line)#console .......................................................... 268(config-line)#tty ................................................................... 270(config-line)#vty................................................................... 286

Perle IRG5000 Router Series, CLI Reference Guide 14

PrefaceAbout This Book

This guide provides the information you need to: configure the Router using the Command Line Interface (CLI) Some CLI commands are not available, on some models

Intended AudienceThis guide is for administrators who will be configuring the Perle IRG5000 Router Series, hereafter knows as the router.Some prerequisite knowledge is needed to understand the concepts and examples in this guide:

If you are using an external authentication application(s), working knowledge of the authentication application(s).

Knowledge of the transfer protocols the router uses.

Typeface ConventionsMost text is presented in the typeface used in this paragraph. Other typefaces are used to help you identify certain types of information. The other typefaces are:

Typeface Example Usage

clear {[ip dhcp binding]} Commands are in bold blue text and keywords for those command use bold green text.

<name-of-tacacs-server> Arguments in which you supply the values are in purple italics.

[nopassword] | [privilege 1] | 15] | [secret 0 <cleartext-password>] | 5 <hidden-user-secret> | line <cleartext-password>]

Square brackets means optional elements, but not required to complete the command. Such as command username does not require nopassword, privilege or secret for completion. Vertical bars within this example separate alternative choices and can be viewed as an or between parameters.

smnp-server {[contact <contact-name>]}

Curly braces surround the entire command.

Perle IRG5000 Router Series, CLI Reference Guide

This typeface indicates a book or document title.

See About This Book for more information.

This indicates a cross-reference to another chapter or section that you can click on to jump to that section.


Using the Command-Line Interface Chapter 1

This book provides the command line interface (CLI) options available for the Perle series of Routers. This chapter describes how to use the command-line interface (CLI) to configure software features. Commands are grouped by Command modes.

Command Modes

Each command is broken down into several categories: Description—Provides a brief explanation of how the command is used. Syntax—Shows the actual command line options. The options can be typed in

any order on the command line. The syntax explanation will use the following command to break down the command syntax:For example: telnet 172.16.4.92This command will open a telnet session to the host with the IP address of 172.16.4.92. If you use a name rather than an IP address, you can use the /ipv4 option to force the connection to use an IPv4 format for the network address.

For example: sdm [default|dual-ipv4-and-ipv6]This command sdm has an option of either default or dual ipv4 and ipv6. You can specify either option but not both.

Braces ({}) group required choices and vertical bars (|) separate the alternative choices. Square brackets ([]) show the options that are available for the command. You can type a command with each option individually, or string options together in any order you want. Brace and vertical bars within square brackets {[]} means requires a choice within and optional element. The pipe (|) within a square bracket means a choice between the elements.

Command Mode Prompt Exit Mode Access Next Mode

User EXEC mode PerleRouter> logout command

enable command

Privileged EXEC mode PerleRouter# disable command

configure command

Global configuration mode PerleRouter(config)# end or exit command

interface command

Interface configuration mode

PerleRouter(config-if)#PerleRouter(config-if-range)#

end command interface command, interface type, interface number

Line configuration mode PerleRouter(config-line)# end command interface command, interface type, interface number

1


Using the Command-Line Interface

For example, valid values for (config)#ip {community-list [expanded | standard]}. Valid values are expanded or standard but you cannot select both at the same time. Options—Provides an explanation of each of the options for a command and the

default value if there is one. Some commands do not have any options, so this category is absent.

UP arrow—show a history of the previous commands entered.

Command ShortcutsWhen you type a command, you can specify the shortest unique version of that command or you can press the TAB key to complete the command. For example, the following command:

PerleRouter(config)#service dhcp<cr>

can be typed as:PerleRouter(config)#se d <cr>

or, you can use the TAB key to complete the lines as you go along:se<TAB>d<TAB><cr>

where the TAB key was pressed to complete the option as it was typed.

Command OptionsWhen you are typing commands on the command line (while connected to the Router, you can view the options by typing a question mark (?), after any part of the command to see what options are available/valid. For example: PerleRouter# config?

confirmrRevertterminal

Common Commands

defaultUse the default command to set a command back to it’s defaults.

disableUse the disable command to de-elevate from Privilege EXEC mode to User Exec mode.

do-execRun exec commands while in config mode.



enable Use the enable command to elevate to Privilege EXEC mode from User Exec mode.

exitThe exit command in User EXEC mode logs you out of the Perle router. In command mode it takes you to down one level of authority.

helpThe help command gives you full help or partial help depending on your needs.

Usage GuidelinesHelp may be requested at any point in a command by entering a question mark '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows available options.Two styles of help are provided:1. Full help is available when you are ready to enter a command argument (e.g. show?.)2. Partial help is provided when an abbreviated argument and you want to know what arguments match the input (e.g. 'show pr?'.)login

loginLog into the Router. Default user name is admin and password is perle1.

logoutLog out of the Router.

noUse the no command to negate a command.



PerleRouter>? (User EXEC mode)Exec commands: clear Reset functions enable Switch to privilege mode exit exit from EXEC help Description of the interactive help logout Logout of current user ping Send echo messages release Release a resource renew Renew a resource show Display internal settings ssh Open a secure shell client connection telnet Open a telnet connection terminal Set terminal characteristics traceroute Trace route to destination

PerleRouter>clear ? (User EXEC mode) clear ip dhcp binding * PerleRouter#? (Privilege EXEC mode) archive Manage archive files boot Modify system boot parameters cd Change current directory cellular Cellular commands clear Reset functions clock Manage system clock configure Switch to (config)# copy Copy from one file to another debug Debugging functions (see also ’undebug’) delete Delete a file dir List files on a file system disable Leave privileged mode disconnect Disconnect an existing network connection dot1x IEEE 802.1X Exec commands exit Exit from the EXEC help Description of interactive help kill Reset the serial line logout Logout of current user mkdir Create a new directory more Display the contents of a file no Negate a command or set its defaults



ping Send echo messages pwd Display present working directory release Release a resource reload Reboot the router rename Rename a file renew Renew a Resource reset Reset commands rmdir Remove a directoy serialt Take a serial trace show Display internal settings shutdown Shutdown the router, the reset button will bring the router back up. ssh Open a secure shell client connection standby Power standby mode operations telnet Open a telnet connection terminal Set terminal characteristics traceroute Trace route to destination undebug Disable debugging function (see also ’debug’ PerleRouter#cellular ?? (Privilege EXEC mode) <0-0> Cellular interface number

PerleRouter#configure <cr>Configuring from terminal <cr>PerleRouter(config)# ((config)#)PerleRouter(config)#interface eth 1<cr>PerleRouter(config-if)#(Config interface mode)


User Exec Mode Chapter 2

Once you have accessed the Router, you are automatically in User Exec mode. The following commands are valid in User EXEC mode.

clear ip dhcp binding clear ip dhcp binding {[* | A.B.C.D]}

enable

Syntax Description clear ip dhcp binding

[* | A.B.C.D]} Type * to clear all automatic bindings.Type the ip address of the specific binding to clear.

Command Modes PerleRouter>

Usage GuidelinesYou can clear all DHCP client bindings using the * parameter or clear only the binding for a specific IP address by entering in the IP address to clear.

ExamplesThis example show how to clear all DHCP client bindings.PerleRouter> clear ip dhcp binding * <cr>This example shows you how to clear DHCP bindings for a specified IP address. PerleRouter> clear ip dhcp binding 172.16.113.44 <cr>

Related Commandsshow ip ddnsrenew dhcp | dhcpv6release dhcp | dhcpv6

Syntax Description enable

Command Modes PerleRouter>enable<cr>

Usage GuidelinesTakes the user from user exec level to privileged level.

ExamplesThis example show how to go from user level to privileged level.PerleRouter> enable <cr>Password:PerleRouter#

Related Commandsdisable

2


User Exec Mode

logout

pingping {[<WORD> data <HEX DIGITS>| repeat <1–2147483647> | size <36–18024>]}

Syntax Description logout

logout Logout of the router.


Usage GuidelinesLogs out of the Router.

ExamplesThis example shows you how to logout of the Router.PerleRouter> logout

Syntax Description ping

{[<WORD> data <HEX DIGITS>| repeat <1–2147483647> | size <36–18024>]}

Type the destination. IPv4 address or IPv6 address Host name (pre-configured in your Router

host table or a DNS server needs to be reachable

Data - input in hex data to repeat Repeat - how many time to run the ping

command Size - specify the size of the packet to

ping with

Command Default 56 (84) bytes of data 10 times


Usage GuidelinesHost name must be predefined in your host table or you need to use DNS lookup.


User Exec Mode

release dhcp | dhcpv6release dhcp | dhcpv6 {[bvi <1–9999>] | [dot11radio <0–4>] | [ethernet <1–4> . <1–4000>]}

This example shows you how to ping a host with an ip address of 172.16.113.44 and repeat the ping 10 times.PerleRouter> ping 172.16.113.44 repeat 10<cr> 64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=2.91 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=1.17 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=2.93 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=1.666 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=0.921 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=1.05 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=1.118 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=1.00 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=1.50 ms64 bytes from 172.16.4.90: icmp_seq=1 ttl=64 time=0.897 ms

Related Commandsdebugtracerouterenew dhcp | dhcpv6release dhcp | dhcpv6

Syntax Description release dhcp | dhcpv6

[bvi <1–9999>] | Type the bridge number (and sub interface) that you want to release the IP address. Values: bvi is 1–9999

[dot11radio <0–4>] | Type the dot11radio interface (and sub interface) that you want to release the IP address. Values: dot11radio 0–4

[ethernet <1–4>. <1–4000>]} Type the Ethernet interface that you want to release the DHCP IP address. Values 1–4 sub-interfaces 1–4000


Usage GuidelinesThis command will release the DHCP/DHCPV6 IP address that has been given to the router by a DHCP/DHCPV6 server. To obtain a new DHCP/DHCPV6 IP address lease, use the renew command.


User Exec Mode

renew dhcp | dhcpv6renew dhcp | dhcpv6 {[bvi <1–9999>] | [dot11radio <0–4>] | [ethernet <1–4> . <1–4000>]}

show alarmshow alarm {[description port] |[profile <WORD>] |[settings enabled]}

ExamplesThis example shows how to release the DHCP IP address for Ethernet interface 3.PerleRouter> release dhcp ethernet 3<cr>

Related Commandsrenew dhcp | dhcpv6

Syntax Description renew dhcp

[bvi <1–9999>] | Type the bridge number that you want to renew the DHCP IP address. Values: bvi –1–9999

[dot11radio <0–4>>] | Type the dot11radio interface that you want to renew the DHCP IP address. Values 0–4.

[ethernet <1–4> .<1–4000>] } Type the Ethernet interface ( and sub interface) that you want to renew the DHCP IP address. Values 1– 4, subinterface 1– 4000


Usage GuidelinesThis command will renew the DHCP IP address lease for your router from a DHCP server.

ExamplesThis example shows how to renew the DHCP lP address lease on ethernet 1.PerleRouter> renew dhcp eth 1<cr>

Related Commandsrelease dhcp | dhcpv6


User Exec Mode

show arpshow arp {[<A.B.C.D>]}

Syntax Description show alarm

{[description port] | 1 – Link has failed2 – Port not operating

[profile <WORD>] | Enter the alarm profile name to view.

[settings]} Show setting only for enabled alarms.


Usage GuidelinesShows you alarm descriptions, profile and alarms enabled.

ExamplesTo show alarm descriptions.PerleRouter> show alarms descriptions <cr>1 Link Fault2 Port Not Operating

PerleRouter> show alarms profiles<cr>

DefaultPort: Interfaces wlm0, eth1, eth2 Alarms link fault, not operating Syslog link fault, not operating Notifies link fault, not operating Relay Major link fault, not operatingtestalr: Interfaces eth1 Alarms link fault, not operating Syslog link fault, not operating Notifies link fault, not operating Relay Major link fault, not operating

Related Commandsalarm(config-alarm-profile)

Syntax Description show arp

{[<A.B.C.D>]} Show arp entry in arp table.



User Exec Mode

show clockshow clock

show cryptoshow crypto {[[ipsec client <WORD>] | [esp-group <WORD>] | [ike-group <WORD> | [ipsec.conf] | status] | [openvpn ca <NAME> | cert <NAME> | connection <WORD> | dh <WORD> | key <NAME> | secret <NAME> | status | template <NAME>] | [pki client [trustpoint] | [openvpn ca <NAME> cert | key] | server trustpoints <WORD> | status] | [ssl] }

Usage GuidelinesShows you the arp table.

ExamplesTo show arp table.PerleRouter> show arp <cr>Address HWtype HWaddress Flag Mask Iface172.16.113.216 ether 87:2b:cb:a5:b4:0c C eth1

Related Commandsarp

Syntax Description show clock


Usage GuidelinesShows you current clock information.

ExamplesTo show clock, typePerleRouter> show clock <cr>Thu Nov 22 3:18:17:17 UTC 2019

Related Commandsclock

Syntax Description show crypto


User Exec Mode

show dot1xshow dot1x {[all | details | statistics] | [credential <WORD>] | [interface ethernet <1–4> details | statistics] | [radius statistics interface ethernet <1–4>]}

{[[ipsec client <WORD>] | [esp-group <WORD>] | [ike-group <WORD> | [ipsec.conf] | status] |

IPsec client (peer) – typically @leftside or a hostname.Show details for esp-group, ike-group and ipsec.conf.Show status.

[openvpn ca <NAME> | cert <NAME> | connection <WORD> | dh <WORD> | key <NAME> | secret <NAME> | status | template <NAME>] |

Shows details about ca name, connection etc.

[pki client [trustpoint] | [openvpn ca <NAME> cert | key] | server trustpoints <WORD> | status] |

Shows details for pki client trustpoints and openvpn.

[ssl] } Show ssl information.


Usage GuidelinesThis command is used to show sessions information for services that use encryption.

ExamplesTo show the version of ssl installed on the Router.PerleRouter# show crypto sslSSL cipher suite: TLS v1.2

Related Commandscrypto

Syntax Description show dot1x

[all | details | statistics] | Type all for details for all dot1x connections. Select all statistics to view statistics for each dot1x connection.

[credential <WORD>] | Type credential to show the credential profile for the user.


User Exec Mode

[interface ethernet <1–4> details | statistics] |

Type Ethernet interface to show connections authenticated with dot1x.

[radius statistics interface ethernet <1–4>]}

Type radius to show radius statistics for authenticator mode.


Usage GuidelinesShows the connection information for suppliant and authenticator dot1x connections.

ExamplesThis example shows all dot1x devices.PerleRouter>show dot1x allSysauthcontrol EnabledDot1x Protocol Version 3

Dot1x Info for Ethernet2 ====================================PAE = AUTHENTICATORQuietPeriod = 60SuppTimeout = 30ReAuthMax = 2MaxReq = 2TxPeriod = 30

Dot1x Info for Ethernet3====================================PAE = SUPPLICANTStartPeriod = 30 (fixed)AuthPeriod = 30 (fixed)HeldPeriod = 60 (fixed)MaxStart = 3 (fixed)Credentials profile = lfeltonEAP profile = md5chap

PerleRouter#show dot1x credentialDot1x Credential Profile: lfelton-------------------------------------------- Username: lfelton Password:*******

Related Commandsdot1xdot1x(config-dot1x-creden)


User Exec Mode

show eapshow eap {[profile <WORD>] | [registration]}

show environmentshow environment {[alarm-contact] | [all] |

Syntax Description show eap

[profile <WORD>] | Shows details for pre-defined eap profiles.

registrations]} Shows registered EAP methods.


Usage GuidelinesShows configured methods and pki-trustpoints for eap configured profiles. EAP profiles are configured using the eap profile <name> command. The registration show command shows the EAP methods supported by your Router.

ExamplesPerleRouter>show eap registrations <cr>

Registered EAP Methods:======================= Method Type Name 4 Auth and Peer MD5 6 Auth and Peer GTC 13 Auth and Peer TLS 21 Auth and Peer TTLS 25 Auth and Peer PEAP 26 Auth and Peer MSCHAPV2..........PerleRouter>show eap profile <cr>EAP Profile: md5chap---------------------------------------- PKI-Trustpoint: None Allowed Phase 1 methods:----------------------------------------- MD5 MSCHAPV2

Related Commands(config-eap-profile)#show eapeap


User Exec Mode

[temperature status]}

show facility-alarmshow facility-alarm {[relay major] |[status]}

Syntax Description show environment

{[alarm-contact] | Show alarm contact status.

[all] | Show all environment status.

[temperature status]} Show temperature status.


Usage GuidelinesShow Router’s environment.

ExamplesPerleRouter>show environment alarm-contact <cr>External alarm contact A: Description: AUX-IO: Digital Input A Digital Input: Value: Closed Transitions: 0 Pulses: 0 External alarm contact B: Description: AUX-IO: Digital Input B Digital Input: Value: Closed Transitions: 0 Pulses: 0 External alarm contact 1: Description: DC-POWER: IGN Analog Input: Value: 0.17 Volts Transposed Value: 9.962 celcius External alarm contact 2: Description: DC-POWER: GPIO Digital Input: Value: Closed Transitions: 0 Pulses: 0 Analog Input: Value: 1.15 Volts Transposed Value: 1.148 kelvin

Related Commandsalarm(config-alarm-profile)

Syntax Description show facility-alarm

{[relay major] | Shows alarms on major relay.

status]} Show the source and severity of alarm.


Usage GuidelinesShows alarm statuses.


User Exec Mode

show flash:show flash:

ExamplesPerleRouter>show facility-alarm<cr>Source Severity Description Actions ---------------------------------------------------------------------------------------------------------------------------------PerleRouter Minor Temperature below min secondary LOG,NOT,LTE-D MAJ Time-----------------------------May 21 2019 11:23:06

Related Commands(config-alarm-profile)alarm

Syntax Description show flash:


Usage GuidelinesShow files on the internal flash drive.

ExamplesPerleRouter> show flash:83 drwx 4096 Sep 27 2019 10:39 -04:00 testcd 57 -rw- 2504 Jan 2 2019 20:58 -04:00 test-Jan-02-20-58-34-113 78 -rw- 3332 Sep 16 2019 11:58 -04:00 test-Sep-16-11-58-38-8462 37 -rw- 2124 Jan 2 2019 00:28 -04:00 test-Jan-02-00-28-14-37 49 -rw- 2124 Jan 2 2019 01:21 -04:00 test-Jan-02-01-21-17-23 70 -rw- 2513 Jan 3 2019 00:33 -04:00 test-Jan-03-00-33-56-69 39 -rw- 2124 Jan 2 2019 00:30 -04:00 test-Jan-02-00-30-16-39 74 -rw- 3509 Sep 10 2019 13:29 -04:00 test-Sep-10-13-29-21-5469 64 -rw- 2515 Jan 2 2019 23:16 -04:00 test-Jan-02-23-16-52-42 61 -rw- 2504 Jan 2 2019 22:27 -04:00 test-Jan-02-22-27-57-83 71 -rw- 3509 Sep 10 2019 13:26 -04:00 test-Sep-10-13-26-19-5466 43 -rw- 2124 Jan 2 2019 00:51 -04:00 test-Jan-02-00-51-17-17 20 -rw- 0 Dec 31 2018 22:13 -04:00 gnss.txt 68 -rw- 2513 Jan 3 2019 00:36 -04:00 test-Jan-03-00-36-58-72

Related Commandscopydeletemkdirpwd


User Exec Mode

show hostsshow hosts

show ip arpshow ip arp

show ip ddnsshow ip ddns {[service interfaces bvi [<1–9999>] | [cellular <0–0>] | [dialer <0–15>] | [dot11radio <0–4>] | [ethernet <1–4] | [openvpn-tunnel <0–999] | [tunnel <0–999]] | [update interfaces bvi [<1–9999>] | [cellular <0–0>] | [dialer <0–15>] | [dot11radio <0–4>] | [ethernet <1–4] | [openvpn-tunnel <0–999] | [tunnel <0–999] | method] | [use-web interfaces bvi [<1–9999>] | [cellular <0–0>] | [dialer <0–15>] | [dot11radio <0–4>] | [ethernet <1–4] | [openvpn-tunnel <0–999] | [tunnel <0–999]]}

Syntax Description show hosts


Usage GuidelinesShows hosts that were added to the host table.

ExamplesThis example shows all configured hosts.PerleRouter>show hosts<cr>Default domain name is PerleDNS lookup is enabledName servers are not configured

Host Table:accounting-host 172.16.77.99banking-host 172.16.88.99test-host 172.16.55.44

Related Commandshostname

Syntax Description show ip arp


Usage GuidelinesShows arp entries..

Related Commandsarp

Syntax Description ip ddns


User Exec Mode

show dhcp show dhcp {[bindings |pool]}

{[service interfaces bvi [<1–9999>] | [cellular <0–0>] | [dialer <0–15>] | [dot11radio <0–4>] | [ethernet <1–4] | [openvpn-tunnel <0–999] | [tunnel <0–999]] |

Show interfaces with DDNS service enabled.

[update interfaces bvi [<1–9999>] | [cellular <0–0>] | [dialer <0–15>] | [dot11radio <0–4>] | [ethernet <1–4] | [openvpn-tunnel <0–999] | [tunnel <0–999] | method] |

Show interface update method name.

[use-web interfaces bvi [<1–9999>] | [cellular <0–0>] | [dialer <0–15>] | [dot11radio <0–4>] | [ethernet <1–4] | [openvpn-tunnel <0–999] | [tunnel <0–999]]}

Web check used for obtaining the external, IP address.


Usage GuidelinesDisplay information for DDNS.

ExamplesThis example shows the DDNS update method configured.PerleRouter> show ip ddns update method <cr>Update name test Key File Not Configured Server testddns Zone Not Configured TTL 600 Record Not Configured

Related Commands

Syntax Description show dhcp

{[bindings | Shows current bindings.

| pool]} Shows current DHCP configured pools.



User Exec Mode

show ip host-groupshow ip host-group {[<WORD>]}

show ip httpshow ip http {[server status]}

Usage GuidelinesShows DHCP information.

ExamplesThis example will show all information about configured DHCP pools.PerleRouter# show dhcp pool <cr>Pool pooltest : Total addresses: 11 Leased addresses : 2 Exluded addresses: 0 IP address Range: 172.16.113.60 - 172.16.113.70

Related Commandsinterfaceshow ip ddns

Syntax Description show ip host-list

{[<WORD>]} Show IP host group.


Usage GuidelinesShows the IP Host Group.

ExamplesThis example shows how to display all IP host groups.PerleRouter> show ip host-group <cr>Host list: PerleRouter 172.16.66.99 radius Rad2

Related Commandsip

Syntax Description show ip http

{[server status]} Show configured parameters for http server.



User Exec Mode

show ip interfaceshow ip interface

Usage GuidelinesShows the status of the HTTP server

ExamplesThis example displays the parameters for http server.PerleRouter> show ip http server status <cr>HTTP server status: EnabledHTTP server port:80User session idle timeout: 1440 secondsHTTP secure server status: EnabledHTTP secure server port: 443

Related Commandsip

Syntax Description show ip interface


Usage GuidelinesShows all interfaces on the Router.

ExamplesThis example displays all interfaces on the Router.PerleRouter> show ip interfaces <cr>Interface IP Address Mask Admin Status Link Status Description --------- ----------------- ----------------- ------------ ----------- ----------- eth1 172.16.113.215 255.255.0.0 up up eth2 - - up down wlm0 25.109.27.52 255.255.255.248 up up wlan0 - - up down br1 192.168.0.1 255.255.255.0 up up wlan1 - - up up pppoe10 10.64.64.64 255.255.255.255 up up vtun10 - - admin down down pppoe1 10.64.64.65 255.255.255.255 up up vtun0 - - admin down down

Related Commandsip


User Exec Mode

show ip sshshow ip ssh

show ipv6show ipv6 {[dhcp bindings | [interface client-mode] | pool] | interface client-mode]

Syntax Description show ip ssh


Usage GuidelinesShows ip ssh information.

ExamplesThis example shows you ssh information. PerleRouter# show ip interface <cr> SSH version: 2SSH server: EnabledAuthentication timeout: 120 secondsAuthentication retries: 3SSH public key:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgAtvWaaM0CeMWoZV1H00sni2J8TYalvSyysQGyBDIOAydaaKv1+s1Imj00FL2Boi3ke/SoKhvuLJQ+bMVFXD7kXw2fk71Mo8f8Dd/rOuuF4kE6hKV+LLl44kJKwCUC2w2m4L1lH8Zn8HuX89Qcv2oqPUdkBfO1nelU3gc6gN4v1ckC069Tgg9hrhghCiBECCCYxmAJUhIy4dQcPwO1DQ6Acp2p3lW2RYdgUvRAlr8oLiVdrEvT7zZECpYgCMYWmfsTtUhvv8yZpvNAhV9nRm5E93Yl0V2J15qlmIlSGKn0iiLRW42xjQ4MT5XmWdlXj+NpuMlQRtFzyYPkR2HMf+9

Related Commandsip

Syntax Description show ipv6

{[dhcp bindings | interface client-mode client-mode | pool] |

Show IPV6 DHCP information

interface] | Shows ipv6 interface details.

neighbors]} Shows ipv6 neighbors.

ExamplesThis example shows you configured IPv6 DHCP pools.PerleRouter# show ipv6 dhcp pool <cr> DHCPV6 pool: ipv6pool Address allocation prefix: 1:2:3:4:5::6/16


User Exec Mode

show lineshow line {[console <0–0>]}

show mabshow mab {[all details | statistics] | [interface ethernet <1–4> details | statistics] | [radius statistics interface ethernet <1–4>]}

Related Commandsipv6release dhcp | dhcpv6renew dhcp | dhcpv6clear ip dhcp binding

Syntax Description show line

{[console <0–0>]} Show whether the console is using the USB or serial port for console mode.


Usage GuidelinesShows what mode the console is in.

ExamplesShows the mode of the console. PerleRouter# show console 0 <cr> Console in use: USB

Related Commands(config-line)#consoleline

Syntax Description show mab

{[all details | statistics] | Specify all, interface or radius to view MAB information.

[interface ethernet <1–4> details | statistics] |

Specify interface MAB details.

[radius statistics interface ethernet <1–4>]}

Specify Radius MAB details.


Usage GuidelinesShow MAB (Mac Authentication Bypass) for the Ethernet interfaces or RADIUS.


User Exec Mode

show ntpshow {[ntp associations] | [status]}

Examples:PerleRouter# show mab interface ethernet 2 details <cr>

Interface Mac-Auth-Bypass ------------------------------------ Ethernet3 Enabled MAC Auth Bypass Client List --------------------------- Supplicant = 00:16:d3:2f:62:bb EAP Method = None Port Control State = Auto Auth SM State = AUTHENTICATED Auth BkEnd SM State = IDLE Session ID = B8B01A9D-00000001 Session Time = 855 Identity = 0016d32f62bb Eapol Frame Counters: Frames Rx = 2 Frames Tx = 0 Start Frames Rx = 2 Logoff Frames Rx = 0 RespId Frames Rx = 0 Resp Frames Rx = 0 ReqId Frames Tx = 0 Req Frames Tx = 0 Invalid Frames Rx = 0 Length Error Rx = 0 Last Frame Version = 1 Last Frame Source = 00:16:d3:2f 62:bb

Related Commandsinterface

Syntax Description show ntp

{[ntp associations] | Shows where the router is getting clock from.

[status]} Show the status of NTP.


Usage GuidelinesShows ntp associations and status.


User Exec Mode

show radiusshow {[statistics details]}

show snmpshow snmp {[contact] |

ExamplesPerleRouter>show ntp associations> remote refid st t when poll reach delay offset jitter============================================================================== 172.16.55.77 .INIT. 16 u - 1024 0 0.000 0.000 0.000 172.16.113.55 .INIT. 16 s - 32 0 0.000 0.000 0.000PerleRouter>show ntp status<cr>Clock is not synchronized, stratum 16, no reference clockPrecision is 2**-18 sReference time is 00000000.00000000 (Thu, Feb 7 2036 2:28:16.000)Clock offset is 0.000000 msec, root delay is 0.000 msecRoot dispersion is 1265.970 msecSystem poll interval is 8 s

Related Commandsntp

Syntax Description show radius

{[statistics details]} Shows radius server statistics.


Usage GuidelinesShow radius details.

ExamplesShows the radius statistics. PerleRouter# show radius statistics <cr> All: Auth. Acct. Requests 3 3Responses 3 3Access Requests 3

Related Commandsclear radiusradiusradius-server


User Exec Mode

[location]}

show sshshow ssh

show tacacsshow tacacs {[statistics details]}

Syntax Description show snmp

{[contact] | Show the contact information for your router.

[location]} Shows the location information for your router.


Usage GuidelinesShows mib object sysConact and mib object sysLocation.

ExamplesPerleRouter>show snmp contact<cr>Perle-lynPerleRouter>show location<cr>60 Renrew Dr.

Related Commandssnmp-server

Syntax Description

show ssh


Usage GuidelinesShow users connected via ssh.

ExamplesThis example show which users are connected.PerleRouter> show ssh<cr> Line User Host Idle Location 1 vty 0 admin idle 00:28:26 172.16.113.31 2 vty 1 admin idle 00:00:03 172.16.113.31

Related Commandsshow ip ssh

Syntax Description show tacacs

{[statistics details]} Shows statistics for TACACS+ server.


User Exec Mode

show terminalshow terminal

show usersshow users {[all] | [console] | [vty] |


Usage GuidelinesShow details about your TACACS server.

ExamplesShows the tacacs statistics. PerleRouter# show tacacs statistics <cr> All: Auth. Acct. Requests 3 3Responses 3 3Access Requests 3

Related Commandstacacs(config-tacacs-server)#

Syntax Description show terminal


Usage GuidelinesShows the terminal parameters of length, width, history enabled, history size and logging monitor.

ExamplesThis examples displays the parameter for terminal.PerleRouter> show terminal<cr> Terminal length = 24 Terminal width = 79 Terminal history is enabled Terminal history size = 11 Terminal logging monitor is OFF

Related Commands(config-line)#console


User Exec Mode

[web]}

show versionshow {[backup] | [flash:] |[startup] | verbose]}

Syntax Description show users

{[all | All users.

[console] | Users connected to the console.

[vty] | Users connected via ssh or telnet.

[web]} Show web users for HTTP and connections.


Usage GuidelinesShows the active users on the Router

ExamplesThis examples displays all attached web users.PerleRouter>show users web<cr>User IP Address IdleLyn 172.16.113.215 00:11:59

Related Commandsusername

Syntax Description show version

{[backup] | Backup version of software.

[flash: | Version of software in on flash:

[startup | Version of software used for startup.

[verbose]} Details about software running on your router.

Command Default None


Usage GuidelinesShows information about versions of software running on your Router.


User Exec Mode

sshssh{[-c | -h | -l | -p <A.B.C.D> | <X:X:X:X::X>]}

telnettelnet {[<A.B.C.D> | <X:X:X:X::X>]}

ExamplesThis example shows the startup version of software.PerleRouter> show version<cr>Name: IRG5000 Series Routers Version: 4.1 (Tues Sept 10 03:54:36 EDT 2019)

Syntax Description ssh

{[-c | -h | -l | -p | <A.B.C.D> | <X:X:X:X::X>]}

-c select the encryption method) -h select HMAC algorithm -l log in using this user name) -p connect to this port <A.B.C.D> <X:X:X:X::X> IPv4 or IPv6

address or hostname to connect to


Usage GuidelinesSSH from your router to a host supporting the SSH protocol.

ExamplesThis example shows how to connect to host (172.16.4.90) using lyn as the user.PerleRouter> ssh -l lyn 172.16.4.90<cr>

Related Commandstelnet

Syntax Description telnet

{[<A.B.C.D>| <X:X:X:X::X>]}

IP address or hostname to connect to.


Usage GuidelinesTelnet from your Router into a host that supports the telnet protocol.



User Exec Mode

terminalterminal{[history size <0–256>] | [length <0–512>] | [monitor <0–512>] | [width <0–512>]}

traceroutetraceroute {[<A.B.C.D>]}

Related Commandsssh

Syntax Description terminal

{[history size <0–256>] | Specify size of the history buffer.

[length <0–512>] | Specify length of the screen

[monitor <0–512>] | Copy debugging logging output to the current terminal line.

[width <0–512>]} Specify width of the screen

Command Default length – 24width – 132


Usage GuidelinesConfigure parameters for your terminal session.

ExamplesPerleRouter> show terminalTerminal length = 24Terminal width = 132Terminal history is enabledTerminal history size =20Terminal logging monitor is Off

Syntax Description traceroute

{[<A.B.C.D>]} Destination hostname or address.


Usage GuidelinesTraceroute will list all the routers it passes through until it reaches its destination, or fails to and is discarded. In addition to this, it will tell you how long each 'hop' from router to router takes.


User Exec Mode

ExamplesThis example shows the hops it takes from router to router to reach its destination of host 172.16.4.90.PerleRouter>traceroute 172.16.4.90<cr.> (172.16.4.90), 30 hop max, 60 bytes packets1 172.16.4.90 (172.16.4.90) 2.094ms 1.113 ms 0.826 ms

Related Commandsping


Privileged EXEC mode Chapter 3

This chapter contains the CLI commands for Privileged EXEC mode.

archivearchive {[config] | [download-sw [/force-reload] | [/no-version-check] | [/reload]] [flash:perle-image-name.img] | [ftp:///[[username:password]@location]/directory]/perle-image-name.img] | [http://[[username:password]@][hostname | host-ip] [directory] /perle-image-name.img] | [https://[[username:password]@][hostname | host-ip] [directory] /perle-image-name.img] [scp://[[username@location]/directory]/perle-image-name.img] | [sftp://[[//username:password]@location]/directory]/perle-image-name.img] | [tftp:[[//location]/directory]/perle-image-name.img]] |

[upload-sw /force-reload] | [/reload | check] | [upload-sw][flash:image-file] | [ftp:[[//username[:password]@location]/directory]/perle-image-name.img] |[http://[[username:password]@][hostname | host-ip] [directory]/perle-image-name.img] |[https://[[username:password]@][hostname | host-ip] [directory] /perle-image-name.img] |[scp://[[username:password@location]/directory]/perle-image-name.img] | [sftp:[[//username[:password]@location]/directory]/perle-image-name.img] | [tftp:[[//location]/directory]/perle-image-name.img]] |[lte-update | download [list | <file>] | update check | download <carrier>] |[download-sw |[flash:perle-image-name.img] | [ftp:///[[username:password]@location]/directory]/perle-image-name.img] | [http://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] | [https://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] [scp://[[username:password@location]/directory]/perle-image-name.img] | [sftp://[[//username:password]@location]/directory]/perle-image-name.img] | [tftp:[[//location]/directory]/perle-image-name.img]] |

[lte-firmware | download [<list> | <WORD>] | install <WORD> | update check <WORD>] |

[[upload-sw flash:image-file] | [ftp:[[//username[:password]@location]/directory]/perle-image-name.img] |[http://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img ] |[https://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] |[scp:[[username@location]/directory]/perle-image-name.img] |

3


Privileged EXEC mode

[sftp:[[//username[:password]@location]/directory]/perle-image-name.img] | [tftp:[[//location]/directory]/perle-image-name.img]]}

Syntax Description archive

{[config] | Archive the running configuration. This configuration will be saved to a predefined location as specified in the archive command. See (config-archive) to set up the path to where the config will be stored.

[download-sw |[flash:perle-image-name.img] | [ftp:///[[username:password]@location]/directory]/perle-image-name.img] | [http://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] | [https://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] [scp://[[username:password@location]/directory]/perle-image-name.img] | [sftp://[[//username:password]@location]/directory]/perle-image-name.img] | [tftp:[[//location]/directory]/perle-image-name.img]] |

Download firmware to your Router./force-reload – unconditionally forces a system reload after successfully downloading the software image./reload – reloads the system (if no unsaved configuration changes have been made) after a successful upgrade./no-version-check – download the software without verifying it’s version compatibility with the image that is running.

[lte-firmware | download [<list> | <WORD>] | install <WORD> | update check <WORD>] |

LTE firmware files are stored on flash at /product/flash/lte-firmware/EM7455 and //EM7565.Download list shows the available LTE firmware files. Specify download file to download a specific file to the LTE modem chip.Install – Install LTE firmware file operations.Update – check if any updates are available for all installed LTE firmware files.



[download-sw |[flash:perle-image-name.img] | [ftp:///[[username:password]@location]/directory]/perle-image-name.img] | [http://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] | [https://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] [scp://[[username:password@location]/directory]/perle-image-name.img] | [sftp://[[//username:password]@location]/directory]/perle-image-name.img] | [tftp:[[//location]/directory]/perle-image-name.img]] |

Download firmware to your Router./force-reload – unconditionally forces a system reload after successfully downloading the software image./reload – reloads the system (if no unsaved configuration changes have been made) after a successful upgrade./no-version-check – download the software without verifying it’s version compatibility with the image that is running.

[[upload-sw flash:image-file] | [ftp:[[//username[:password]@location]/directory]/perle-image-name.img] |[http://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img ] |[https://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img] |[scp:[[username@location]/directory]/perle-image-name.img] |[sftp:[[//username[:password]@location]/directory]/perle-image-name.img] | [tftp:[[//location]/directory]/perle-image-name.img]]}

Upload the firmware on the Router to a server.

Command Modes PerleRouter#archive



Usage GuidelinesWhere a username or password is required it can be specified in the Router configuration using the "scp| ftp |sftp |http" command to configure the username and password to use instead of specifying it on the archive command. The syntax for the local flash file system for downloads and uploads:flash:image-file The syntax for FTP:[ftp:///[[username:password]@location]/directory]/perle-image-name.img] |The syntax for an HTTP server:http://[[username:password]@][hostname | host-ip] [directory]/perle-image-name.img The syntax for an HTTPS server:https://[[username:password]@][hostname | host-ip [directory]/perle-image-name.img The syntax for an SCP server:[scp://[[username:password@location]/directory]/perle-image-name.img] | The syntax for an SFTP server:[sftp://[[//username:password]@location]/directory]/perle-image-name.img] | The syntax for an TFTP server:[tftp:[[//location]/directory]/perle-image-name.img] |ExamplesThis example shows you how to download software from a server with an IP address of 172.16.4.182 to your Router using secure HTTP (https) and certificate named apache.crtStep 1) You need to download a secure certificate to the Router.PerleRouter#crypto pki import server apache pem url tftp://172.16.4.182/apach.crt

Step 2)Configure the Router to use the certificate you just downloaded.PerleRouter#ip http client secure-trustpoint apache

Step 3)Set validation off if you do not want to valid the certificate. (You must have created the certificate with validation if you want to valid the certificate)PerleRouter# archive download-sw https://172.16.4.182/public/Router-software.fit<cr>

The software will now download using secure https.

This example shows you how to upload software from a server with an IP address of 172.16.4.92 using scp.PerleRouter#archive upload-sw scp://lyn:[email protected]/public/Router.img

Related Commandsshow archive(config-archive)



bootboot {[system backup]}

cdcd {[flash: | nvram:]}

Syntax Description boot

{[system backup]} Copies backup software to startup software. Next reload will use backup software as startup software.

Command Modes PerleRouter#boot

Usage GuidelinesThis command allows you to go back to older saved software. Software can be stored as backup software using the archive command.

ExamplesThis example shows you how to make boot your router using the backup software. <cr>PerleRouter#boot system backup<cr>

Syntax Description cd

{[flash: | nvram:]} Change directory on flash: or nvram:


Command Modes PerleRouter#cd

Usage GuidelinesThe change directory (cd) command is part of the file management system commands.The cd command is used to change directories within the flash or nvram file systems.

ExamplesThis example shows you how to make a directory under the flash file system then change directory to that new directory.PerleRouter#mkdir flash:testdir <cr>Created directory name testdir.

PerleRouter# cd flash:/testdir <cr>

Related Commandscopybootdeletepwdrenew



cellularcellular {[<0-0> [data-usage clear] | [lte active-profile alternative-profile | primary-profile] | connect] | [reset] | [sms-log clear]]}

clear aaaclear {[aaa local user fail-attempts all | username <WORD> | lockout all] |[username <WORD>]}

Syntax Description cellular

{[<0-0> [data-usage clear] | Clears the data usage on sim in slot 1 or 2.

[lte active-profile alternative-profile | primary-profile] | connect

Select the profile to be the active profile or select connect.

[reset] Resets the cellular module.

[sms-log clear]} Clears the sms-log.

Command Modes PerleRouter#cellular

Usage GuidelinesThis command is used to setup cellular parameters and clear the sms-log.

ExamplesThis example shows you clear data usage counts. PerleRouter#cellular 0 data-usage clear <cr>

Related Commandsshow cellularcellular(config-if)# cellular

Syntax Description clear aaa

{[aaa local user fail-attempts all | username <WORD> | lockout all] |

Reset a locked out user.Reset this locked out user.Reset all locked out users.

[username <WORD>]} Rests this user by username.

Command Modes PerleRouter#clear aaa

Usage GuidelinesThis command allows you to reset locked out users.



clear arp-cacheclear arp-cache {[<A.B.C.D> | bvi <0-999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> | tunnel <0-999>]}

clear contactclear contact {[<2-2 > pulse-counter] | [<A-B> pulse-counter]}

ExamplesThis example will reset user Marie that is currently locked out from the Router.PerleRouter#clear aaa local user lockout username Marie<cr>


Syntax Description clear arp-cache

{[<A.B.C.D> | bvi <0-999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> |tunnel <0-999>]}

Clear arp cache on IP address or interface.

Command Modes PerleRouter# clear arp-cache

Usage GuidelinesClears arp entries from the arp table.

ExamplesThis example shows you how to clear all arps from the arp table for Ethernet interface 1.PerleRouter> clear arp-cache ethernet 1 <cr>

Related Commandsshow arparp

Syntax Description clear contacts

{[<2-2 > pulse-counter] | Clears current pulse counter to zero, also clears outstanding alarm.

[<A-B> pulse-counter]} Clears current pulse counter to zero, also clears outstanding alarm.



clear countersclear counters {[bvi <1-9999> | dot11radio <0-0> | ethernet <1-4> | loopback | openvpn-tunnel <0-999>| tunnel <0-999>]}

clear ip clear ip {[alg connections] | [bgp *(all) | [<1-4294967295>] | <A.B.C.D> | [<X:X:X:X::X:X>] | [external in | out | soft] |[dhcp binding <* | <A.B.C.D>] |[firewall <WORD>] |[route-policy name <WORD> counters | rule <1-9998> counters]}

Command Modes PerleRouter# clear contacts

Usage GuidelinesClears contact contacts and alarms.

Related Commandsshow environment

Syntax Description clear counters

{[bvi <1-9999> | dot11radio <0-0> | ethernet <1-4> | loopback | openvpn-tunnel <0-999> | tunnel <0-999>]}

Clear counters on specified interface.

Command Modes PerleRouter#clear counters

Usage GuidelinesClears counters back to zero on specified interface.

ExamplesThis example shows you how to clear all counters for Ethernet interface 1.PerleRouter> clear counters ethernet 1<cr>Clear "show interface" counters on this interface [confirm]

Syntax Description clear ip

[alg connections] | Clear alg connections



clear ipv6ipv6 {[firewall] | [neighbors] |[route-policy <NAME>]}

[bgp * | <1-4294967295> | <A.B.C.D> | <X:X:X:X::X:X> | external in | out | soft] |

Type * to clear all bgp sessions or connections.Type the connection number, ipv4, or ipv6 address of the session or connection you want to reset.Specify whether it is an inbound or outbound session. No in/out parameters clears both in and outbound.

[dhcp binding <* | <A.B.C.D>] | Type * to clear all automatic client bindingsType the ip address of the client you want to clear the dhcp binding.

[firewall <WORD>] | Clear the specified firewall statistics.

[route-policy name <WORD> counters | rule <1-9998> counters]}

Clear counters for route policies.

Command Modes PerleRouter#clear ip

Usage GuidelinesUse this command to clear all bgp or alg sessions or connections.You can clear all DHCP bindings using the * parameter or clear only the binding for a specific IP address by entering in the IP address to clear.

ExamplesThis example shows you how to clear all dhcp ip bindings from your router table.PerleRouter> clear ip dhcp bindings * <cr>This example shows you how to clear all BGP connections. PerleRouter> clear ip bgp * <cr>

Syntax Description clear ipv6

{[firewall] | Clear ipv6 firewalls.

[neighbors] | Clear ipv6 neighbors.

[route-policy <NAME>]} Clear route policies.

Command Modes PerleRouter#

Usage GuidelinesClear commands for the IPv6 protocol.



clear lineclear line {[console 0-0 | vty 0-15]}

clear loggingclear {[logging]}

ExamplesThis example clears route policy warehousePerleRouter#clear ipv6 route-policy warehouse<cr>

Related Commandsipv6

Syntax Description clear line

{[console 0-0 | vty 0-15]} Select console or line to clear.

Command Modes PerleRouter#clear line

Usage GuidelinesThe vty session will be disconnected.

ExamplesThis example clears line 1.PerleRouter#clear line vty 1<cr>[confirm][Dec 9 16:14:20 %REQHANDLE-6: Cleared VTY1 sessionOK]

Related Commands(config-line)#console(config-line)#vty

Syntax Description clear logging

{[logging]} Clears the logging buffer on your router.


Command Modes PerleRouter#clear logging

Usage GuidelinesLogging buffer size can be from 4096-32768.



clear radius clear {[radius statistics]}

clear tacacsclear {[tacacs statistics]}

ExamplesThis example clears the logging buffer on the Router.PerleRouter# clear logging <cr>Clear logging buffer[confirm]<cr>

Related Commandsshow logging

Syntax Description clear radius

{[radius statistics]} Clears radius information on your router.


Usage GuidelinesClears radius information.

ExamplesThis example clears radius statistics information on your router.PerleRouter# clear radius statistics<cr>

Related Commands(config-radius-server)#radius

Syntax Description clear tacacs

{[tacacs statistics]} Clears tacacs information on your router.


Usage GuidelinesClears tacacs statistical information.

ExamplesThis example clears tacacs statistics information your router.PerleRouter# clear tacacs <cr>



clockclock {[set hh:mm:ss 1-3 month year 2001-2037] |summer-time <name-of-timezone > date <1-31> <month-to-start > <hh:mm> <1-31> <month-to-end > < hh:mm > <1-1440-in-minutes> | recurring <1-4 > <first week> <last week>] |[timezone <name-of-time-zone> <-23 - 23 > <0-59>]}Use the no form of this command to negate a command or set its defaults.


Syntax Description clock

{[set hh:mm:ss 1-3 month year 2001-2037] |

Set the current time and date.Month is January, February, March, April, May, June, July, August, September, November or December

[summer-time <name-of-timezone > date <1-31> <month-to-start > <hh:mm> <1-31> <month-to-end > < hh:mm > <1-1440-in-minutes> | recurring <1-4 > <first week> <last week>] |

Name of the summer time zone followed by start/end dates -numeric value for the day of the month to start summer timezone 1-31, name of the month to start January, February, March, April, May, June, July, August, September, October, November, December., time to start in hours (24) and minutes, numeric value for the day of the month to end summer timezone 1-31, name of the month to end (January, February, March, April, May, June, July, August, September, October, November, December), time to end in hours(24), offset in minutes 1-1440

[timezone <name-of-time-zone> <-23 - 23 > <0-59>]}

Name of the timezone - Hours/minutes offset are going to be hours/minutes offset from utc (universal time clock).

Command Default clock timezone EST 5clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00 60

Command Modes PerleRouter(config)# clock

Usage GuidelinesSets the clock.



configureconfigure {[confirm] | [revert now | timer <1-120 > | idle <1-120>] | [terminal lock | revert timer <1-120> | idle <1-120>]}

copycopy {[flash:filename] | [ftp flash: | nvram: | running-config | startup-config :filename | [http: filename] | [https:filename] | [nvram: filename] | [running-config filename] | [scp: filename] | [sftp: filename] | [startup-config filename] | [tftp:filename]}

ExamplesThis example sets the clock 5 hours off from UTC.PerleRouter(config)#clock timezone ont-time-zone -5 <cr>


Syntax Description configure

{[confirm] | Cancels revert timer.

[revert now | timer <1-120 > | idle <1-120>] |

Parameters for reverting this config using the rollback feature. Time to wait for confirmation

[terminal lock | revert timer <1-120> | idle <1-120>]}

Allows you to lock configuration mode.

Command Modes PerleRouter#configure

Usage Guidelines Configuration mode on your router.

ExamplesThis example show you how to configure your router using your terminal connection.PerleRouter#configure<cr>Configuring from terminal, memory, or network [terminal]? <cr>PerleRouter(config)#

Related Commands(config-archive)archive

Syntax Description copy

{[flash:filename] | Copies a file to flash.



debugdebug {[alarmmgr] | [all] | [bgp] | [cellular-gnss] | [cellular-lte] | [clpd] | [dialer] |[dot11-ap] | [dot11-station] | [dot1x-authenticator] | [dot1x-supplicant] | [drmgrd] | [email] | [init] | [[ip dhcp client | relay-agent | server] | [ospf events | ism | lsa | nsm | nssa | packets | rib] | [rip events |packets |rib]] | [ip-passthrough] | [ip-sec] | [kernel] | [logging] | [ntp] | [snmp] | [trapmgr] | [tty] | [vty] | [wan-highavail] |

[ftp flash: | nvram: | running-config | startup-config :filename] |

Copies a file using ftp.

[http: filename] | Copies a file using http.

[https:filename] | Copies a file using https.

[nvram: filename] | Copies a file from nvram.

[running-config filename] | Copies running config to another file.

[scp: filename] | Copies a file using scp.

[sftp: filename] | Copies a file using sftp.

[startup-config filename] | Copies startup-config to another filename.

[tftp:filename]} Copies a file using tftp.

Command Modes PerleRouter#copy

Usage GuidelinesThe copy command (copy) is part of the file management system commands.Copy a file from one location to another.

ExamplesThis example shows how to copy a file from the flash: directory to a tftp server with an ipv4 address of 172.16.4.90.PerleRouter#copy flash:running-config-save tftp:<cr>Address or name of remote host[ ]?172.16.4.90<cr>Destination filename [ ]?backup-running-config<cr>4922 bytes copied in 0.013 seconds

Related Commandscopybootdeletemkdirpwdrenew



[wanifmgr]}Use the no form of this command to negate enable secret.Syntax Description debug

{[alarmmgr] | Add alarm manager messages to logging

[all] | Sets all debugging messages to the log on. Setting all debug on will seriously effect the speed of your Router.

[bgp] | Start debug for bgp.

[cellular-gnss] | Start debug for cellular gnss.

[cellular-lte] | Start debug for cellular lte.

[clpd] | Start debug for clpd.

[dialer] | Start debug for Dial on Demand feature.

[dot11-station] | Start debug for dot11 in station mode.

[dot11-ap] | Start debug for wireless access point.

[dot1x-authenticator] | Start debug for dot1x authenticator mode.

[dot1x-supplicant] | Start debug for dot1x suppliant mode.

[drmgrd] | Device Remote manager daemon debugging.

[email] | Start debug for email.

[init] | Start debug for init.

[[ip dhcp client | relay-agent | server] | [ospf events | ism | lsa | nsm | nssa | packets | rib] | [rip events |packets |rib]] |

Start debug for dhcp client, relay agent and server.Start debug for ospf.Start debug for rip.

[ip-passthrough] | Start debug for ip-passthrough.

[ip-sec] | Starts debug for ipsec.

[kernel] | Start debug for kernel.

[logging] | Start debug for logging.

[ntp] | NTP logging



deletedelete {[flash: <filename>] | [nvram: <filename]}

[snmp] | Start debug for smnp.

[trapmgr] | Start debug for trapmgr.

[tty] | Start debug for tty.

[vty] | Start debug for vty devices ssh and telnet.

[wan-highavail] | Start debug for wan high available connections.

[wanifmgr]} Start debug for our internal wan manager.

Command Default All debug off

Command Modes PPerleRouter# debug <cr>

Usage GuidelinesYou can set debug on for features or functions within your Router. Setting debug on for all features will seriously impact system performance on your Router.

ExamplesThis example shows you how to set debug on for ntp.PerleRouter# debug ntp <cr>This example shows you how to set debug on for dhcp server. PerleRouter#debug ip dhcp server <cr>

Related Commandspingtraceroute

Syntax Description delete

{[flash: <filename>] | Select the filename to delete.

[nvram: <filename>]} Select the filename to delete.

Command Modes PerleRouter# delete

Usage GuidelinesThe delete command is part of the file management system commands.Deletes a file on flash or nvram.



dirdir {[flash: | nvram:]}

ExamplesThis example shows how to delete a file on flash.PerleRouter#delete flash:backup.config<cr>

Related Commandscopybootmkdirpwdrenew

Syntax Description dir

[flash: | Shows the contents of flash.

nvram:]} Shows the contents of nvram.


Command Modes PerleRouter#dir

Usage GuidelinesThe dir command is part of the file management system commands.Shows the contents of a file system on flash or nvram.

ExamplesPerleRouter#dir <cr> 34 -rw- 1992 Mar 25 2019 17:39 -04:00 running-config 33 -rw- 368555308 Mar 25 2019 13:38 -04:00 perle.img 39 -rw- 2016 Mar 27 2019 12:35 -04:00 -Mar-27-12-35-22-0 24 -rw- 896 Jan 4 2001 16:46 -04:00 backup.config 42 -rw- 2068 Mar 28 2019 15:33 -04:00 -Mar-28-15-33-44-3 41 -rw- 2047 Mar 27 2019 16:24 -04:00 -Mar-27-16-24-31-2 40 -rw- 2047 Mar 27 2019 16:24 -04:00 -Mar-27-16-24-26-1




disabledisable

disconnectdisconnect {[ssh vty <0-15>]}

dot1xdot1x {[initialize interface ethernet <1-4>] | [re-authenticate interface ethernet <1-4] | [test interface ethernet <1-4]}

Syntax Description disable

Command Modes PerleRouter#disable

Usage GuidelinesDisables leave privileged mode.

ExamplesThis example show how to go from privileged level to user level.PerleRouter# disable <cr>PerleRouter>

Related Commandsenable

Syntax Description disconnect

Command Modes PerleRouter#disconnect

Usage GuidelinesDisconnects an active ssh session.

ExamplesPerleRouter#disconnect ssh vty 1<cr>[confirm][OK]

Related Commandsline

Syntax Description dot1x

[initialize interface ethernet <1-4>] | Devices connected on this Ethernet interface will be forced to authenticate. The connection is secured.



exitexit

[re-authenticate interface ethernet <1-4>] |

Devices connected on this Ethernet interface will be forced to re-authenticate.

[test interface ethernet <1-4>]} Run a 802.1x readiness test to detect any 802.1x clients that are EAPoL capable.

Command Modes PerleRouter>enablePerleRouter#

Usage GuidelinesDot1x commands to initialize, re-authenticate and test connected dot1x devices.

ExamplesThis example will force devices on ethernet interface 3 to re-authenticate.PerleRouter> enablePerleRouter# dot1x re-authenticate interface eth 1<cr>

This example will test for EAPol capable devices.PerleRouter> enablePerleRouter# interface eth 1PerleRouter(config-if)# dot1x pae authenticatorPerleRouter(config-if)#exitPerleRouter# dot1x test eapol-capable interface eth 1<cr>PerleRouter# show logging <cr>*Oct 18 02:41:15 %PORT-AUTH-6: eth2: STA 00:13:20:92:29:82 IEEE 802.1X:INFO_EAPOL_PING_RESPONSE: The interface Ethernet1 has an 802.1x capable clientwith MAC (00.13.20.92.29.82) *Oct 18 01 02:41:15 %PORT-AUTH-6: eth2: STA 00:16:d3:2f:62:bb IEEE 802.1X:INFO_EAPOL_PING_RESPONSE: The interface Ethernet1 has an 802.1x capable clientwith MAC (00.16.d3.2f.62.bb)

Related Commandsshow loggingdot1x

Syntax Description exit

Command Modes PerleRouter>exit

Usage GuidelinesExit from EXEC mode.

Related Commandsdisable



kill{[line tty <1-4>]}

logout{[logout]}

mkdirmkdir {[flash:]}

Syntax Description kill

{[line tty<1-4} Resets the line.

Command Modes PerleRouter#kill line tty 1

Usage GuidelinesKilling a line will reset that serial line, then reload any new parameters you have configured for that line.

ExamplesPerleRouter>kill line tty 1<cr>


Syntax Description logout

{[logout]} Logs out of the router.

Command Modes PerleRouter#logout

Usage GuidelinesLogs out of your router.

Syntax Description mkdir

{[flash:]} Make a directory on the flash.

Command Modes PerleRouter# mkdir

Usage GuidelinesThe make directory (mkdir) command is part of the file management system commands.Makes a new directory on flash.



moremore {[/ascii] |[ /binary] |[flash:] |[nvram:] |[running-config] |[startup-config]}

ExamplesThis example shows you how to make a directory under the file system flash:PerleRouter>enable<cr>PerleRouter#mkdir flash:testing<cr>PerleRouter#dirDirectory of flash:130307 drwx 4096 Jan 2 2019 19:58 -05:00 testdir130306 -rw- 1508 Jan 2 2019 17:46 -05:00 test-config130308 drwx 4096 Jan 3 2019 18:49 -05:00 testing

Related Commandsbootcopydeleterenamerenewpwd

Syntax Description more

{[/ascii] | Forces the file type to ascii.

[ /binary] | Force the filetype to binary.

[flash:] | Displays the content of a file within flash.

[nvram:] | Displays the content of a file within nvram. system.

[running-config] | Merge running config with current system configuration.

[startup-config]} Displays startup configuration.


Command Modes PerleRouter#more



pingping {[<ip_address/host_name> data <hex digits> repeat <number-of-times to-ping> size datagram-size]}

Usage GuidelinesThe more command show you a file contents. You can specify whether to show the contents in ascii or binary format.

ExamplesPerleRouter#more nvram:no-default-config<cr>no dot11 ssid IRG5521-0002f0default interface Dot11Radio0default interface ethernet 1default interface ethernet 2no ip nat inside source any interface cellualr 0 overloadno ip dns listen-address 192.168.0.1no ip dhcp pool default poolno interface BVI1no bridge protocol ieee

Syntax Description ping

{[<ip_address/host_name> data <hex digits> repeat <number-of-times to-ping> size datagram-size]}

Host name must be predefined in a host table. Data hex pattern is from 1 to 32 hex characters. Repeat count can be from 1-2147483647. Datagram size can be from 36-18024.

Command Modes PerleRouter#ping

Usage GuidelinesPing a host.

ExamplesThis example shows you how to ping a host with an ip address of 172.16.113.44 repeating the ping request 10 times.PerleRouter> ping 172.16.113.44 repeat 10 <cr>

This example show you how to ping a host with an ip address of 172.16.113.44 with hex data pattern of f1f1f1f1f1. PerleRouter> ping perlehost data f1f1f1f1f1<cr>

This example shows you how to ping a host with an ip address of 172.16.113.44 with a data packet size of 4o bytes.PerleRouter> ping perlehost size 40<cr>

Related Commandstraceroute



pwdpwd

release dhcp | dhcpv6 release dhcp | dhcpv6{[bvi <1–9999>] | [dot11radio <0–4>] | [ethernet <1–4> . <1–4000>]}

Syntax Description pwd

Command Modes PerleRouter# pwd

Usage GuidelinesThe pwd command is part of the file management system commands.Shows you current file system.

ExamplesThis command will show you what file system you are in.PerleRouter#cd nvram:<cr>PerleRouter#pwd<cr>nvram:

Related Commandsbootcopydeleterenamerenewmkdir

Syntax Description release

{[bvi <1–9999>] | Release the dhcp address for the specified bridge interface.

[dot11radio <0–4>] | Release the dhcp address for the specified wireless interface.

[ethernet <1–4> . <1–4000>]} Release the dhcp address for the specified ethernet interface.

Command Modes PerleRouter#release

Usage GuidelinesRelease the IPv4/IPv6 address from the specified interface. The IPv4/IPv6 address will be added back to the DHCP pool.



reloadreload {[at hh:mm] | [cancel] | [in mmm | hh:mm]}

ExamplesThis example will release the ipv4 address from eth1.PerleRouter# release dhcp eth1<cr>

Related Commandsrelease dhcp | dhcpv6show dhcpshow ip arp

Syntax Description reload

{[at hh:mm] | at – specify the time in hours and minutes when to reload the firmware on the Router.

[cancel] | cancel – cancel any pending reload commands.

[in mmm | [hh:mm]} in – specify in minutes 1-999 or hours minutes when to reload the firmware on the Router

Command Modes PerleRouter#reload

Usage GuidelinesReload the router firmware.

ExamplesReloads the firmware on the Router in 10 hours and 20 mins.PerleRouter# reload 10:20 <cr>

Cancels the previous reload command.PerleRouter# reload cancel <cr>********** ----SHUTDOWN ABORTED ---******

Related Commandsshow reload

Note: Before reloading the router, copy running config to startup config to save any changes that you want to save permanently.



renamerename {[flash: <WORD>] | [nvram: <WORD>]}

renewrenew dhcp | dhcpv6 {[bvi <1–9999>] | [dot11radio <0–4>] | [ethernet <1-4>]}

Syntax Description rename

{[flash: <WORD>] | [nvram: <WORD>]}

Rename the file.

Command Modes PerleRouter#rename

Usage GuidelinesThe rename command is part of the file management system commands.Rename a file on flash or nvram.

ExamplesThis example renames a file on flash from testdir to newdir.PerleRouter# rename flash:testdir flash:backup<cr>Destination file name[backup]?

Related Commandsbootcopydeleterenewpwdmkdir

Syntax Description renew

{[bvi <1–9999>] | Renew the dhcp address for the specified bridge interface.

[dot11radio <0–4>] | Renew the dhcp address for the specified wireless interface.

[ethernet <1-4>]} Renew the dhcp address for the specified ethernet interface.


Command Modes PerleRouter#renew

Usage GuidelinesRenew the IPv4/IPv6 address for specified interface. An IPv4/IPv6 address with be allocated from the DHCP pool.



resetreset {[factory]}

rmdirrmdir {[flash: <WORD>]}

ExamplesThis example will renew the DHCP IPv4 address for eth1.PerleRouter# renew dhcp eth1<cr>

Related Commandsrelease dhcp | dhcpv6show dhcpshow ip arp

Syntax Description reset

{[factory]} Resets the router to factory default, removing all configuration files, certificates and keys.

Command Modes PerleRouter#reset

Usage GuidelinesSets router to factory defaults,

Related Commandsbootcopydeleterenamepwdmkdir

Syntax Description rename

{[flash: <WORD>]} Remove the directory on flash.

Command Modes PerleRouter# rmdir

Usage GuidelinesRemove a file on flash.

ExamplesThis example removes a file on flash.PerleRouter# remove flash:testit <cr>Remove Directory name [testit]?



serialt serialt {[#[mask] [...] [-full] [-size=# [-show]]}

show aaashow aaa {[local user lockout]}

Related Commandsbootcopydeletepwdmkdir

Syntax Description serialt

{[#[mask] [...] [-full] [-size=# [-show]]} Takes serial line trace.

Usage GuidelinesCaptures data on serial line.

ExamplesThis example will capture all data on serial port 1 and display it on the screen.PerleRouter# serialt 1 -show<cr>SERIAL TRACE V1.00To start a serial trace:serialt #[=mask] [...] [-full] [-size=#] [-show] | | | | | | | | | | | then show the trace file | | | | size in kilobytes (2-1024) | | | stop when trace file full else wrap | | another port/mask to simultaneously trace | optional trace mask any combination of: | rx+tx+signals+special+ioctl or use: normal,all,same port number 1->maxSerial trace file utilities:serialt [-show] [-remove] | | | remove the trace file show the trace file

Related Commandstraceroutepingdebug

Syntax Description show aaa

{[local user lockout]} Shows users that are locked out of the Router.



show alarmshow alarm {[description port] |[profile] |[settings]}

Command Modes PerleRouter#show aaa

Usage GuidelinesThis command will show you the current locked out users on the Router.

Examples This example will show you the current locked out users on the Router.PerleRouter#show aaa local user lockout<cr>Locked-out users: Lyn

Related Commandsaaa

Syntax Description show alarm

{[description port] | Show description.

[profile] | Show profile.

[settings]} Show settings.

Command Modes PerleRouter>show alarm

Usage GuidelinesShows you alarm descriptions, profile and settings.

ExamplesTo show alarm descriptions.PerleRouter> show alarms descriptions <cr>1 Link Fault2 Port Not OperatingPerleRouter> show alarms profiles<cr>

defaultPort: Interfaces wlm0, eth1, eth2 Alarms not-operating Syslog not-operating Notifies not operating Relay Major

Related Commandsalarm



show archiveshow {[archive config | rollback | timer] |[update]}

show arpshow {[arp A.B.C.D]}

Syntax Description show archive

{[archive config | rollback | timer] | Shows information for configuration rollback and timer.

[update]} Shows whether the Check Software update is enabled.

Command Modes PerleRouter#show archive

Usage GuidelinesShows config rollback and update feature.

ExamplesThis example will show the config for the rollback feature.PerleRouter#show archive<cr> The maximum archive configurations allowed is 14.There are currently 9 archive configurations saved.The next archive file will be named flash:-<timestamp>-9 Archive # Name 1 flash:-May-19-14-14-16-0 2 flash:-May-19-14-17-50-1 3 flash:-May-1914-19-00-2 4 flash:-May-19-14-19-14-3 5 flash:-May-19-14-20-55-4 6 flash:-May-19-14-24-31-5 7 flash:-May-19-15-05-37-6 8 flash:-May-19-03-37-55-7 9 flash:-May-19-03-38-10-8 <- Most Recent 10 11 12 13 14

Related Commandsarchive

Syntax Description show arp

{[arp A.B.C.D]} Show arp table.



show bgpshow {[bgp community] | [community-list <1-500 > exact-match | <list-name>] | [filter-list <access-list name>] | [memory] | [neighbors <A.B.C.D> | <X:X::X:X>] | [prefix-list <word>] | [regexp <line>] | [route-map <line>]}


Command Modes PerleRouter#show arp

Usage GuidelinesUse this command to show entries in the arp table.Enter an ipv4 address to display the entry for this ip address in the arp table.

ExamplesThis example show you how to view the arp table.PerleRouter#show arp<cr>Address HWtype HWaddress Flags Mask Iface172.16.113.20 ether 78:2b:cb:a5:b4:0c C eth1172.16.23.122 ether 70:f3:95:18:7a:a3 C eth1

Related Commandsclear arp-cache

Syntax Description show bgp

{[bgp community] | Show routes matching the communities.

[community-list <1-500 > exact-match | <list-name>] |

Show routes matching the community list.

[filter-list <access-list name>] | Show routes conforming to the filter list.

[memory] | Global BGP memory statistics.

[neighbors <A.B.C.D> | <X:X::X:X>] | Detailed list for TCP and BGP neighbor connections.

[prefix-list <word>] | Display routes matching the prefix-list.

[regexp <line>] | Display routes matching the AS path regular expression.



[route-map <line>]} Display routes matching the route-map

Command Modes PerleRouter#show bgp

Usage GuidelinesShow bgp information.

ExamplesPerleRouters# show bgp neighbors<cr>BGP neighbor is 172.16.39.2, remote AS 65537, local AS 65536, external link BGP version 4, remote router ID 172.16.39.2 BGP state = Established, up for 00:14:28 Last read 05:39:27, hold time is 180, keepalive interval is 60 seconds Neighbor capabilities: 4 Byte AS: advertised and received Route refresh: advertised and received(old & new) Address family IPv4 Unicast: advertised and received

Message statistics: Inq depth is 0 Outq depth is 0

Sent Rcvd Opens: 1 0 Notifications: 0 0 Updates: 1 1 Keepalives: 16 15 Route Refresh: 0 0 Capability: 0 0 Total: 18 16

Minimum time between advertisement runs is 30 seconds

For address family: IPv4 Unicast Community attribute sent to this neighbor(both) 1 accepted prefixes

Connections established 1; dropped 0 Last reset neverLocal host: 172.16.39.1, Local port: 179Foreign host: 172.16.39.2, Foreign port: 38216Nexthop: 172.16.39.1Nexthop global: 2011::2Nexthop local: fe80::251:82ff:fe11:2201BGP connection: non shared networkRead thread: on Write thread: off

Related Commandsrouterdebug



show cellularshow {[cellular interface 0 all] | [connection] | [hardware] | [network] | [profile <NAME>] | [radio] | [security] | [sms-log]}Syntax Description show cellular

{[cellular interface 0 all] | Displays all information.

[connection] | Displays current active connections.

[hardware] | Displays cellular modem information.

[network] | Displays cellular network information.

[profile <NAME>] | Display profile information about the modem.

[radio] | Displays cellular modem radio information.

[security] | Displays modem security status.

[sms-log]}| Displays sms tet log.

Command Modes PerleRouter#show cellular

Usage GuidelinesDisplays information about your cellular connection.



PerleRouter#show cellular 0 profile------------------------Connection Information======================Cellular Status: Data connectedIP Address: 25.110.104.191IPv6 Address: ::Connection Duration: 21 mins 7 secs

Data Usage: 5.14 GBHardware Information====================Modem Manufacturer: Sierra Wireless, IncorporatedFirmware Version: SWI9X30C_02.32.11.00(9907721 001.000 Generic-M2M)Active Firmware: "Generic"Hardware Version: 1.0Device Model ID: EM7455IMEI: 359073061841023Modem Temperature: 37 deg CSIM 1 Card Detected: Yes ICCID: 89302720523049569464 IMSI: 302720609109402 Phone #: Not available

SIM 2 Card Detected: No ICCID: Not available IMSI: Not available Phone #: Not available

Network Information===================Network Status: Registered. Home network.Connected Network: "ROGERS" (MCC:MNC=302:720)

Profile Information===================Active Profile: Primary (test1)Connected APN: "lteinternet.apn"

Radio Information===================Active Profile: Primary (test1)Connected APN: "lteinternet.apn"

Modem Security Information===================Active SIM 1



show clockshow {[clock]}

show cryptoshow {[crypto ipsec client |esp-group <WORD> | ike-group <WORD> | status] | [openvpn | pki | ssl]}

SIM Locked: NoPin Retry: 5PUK Retry 10

Related Commandscellularcontroller

Syntax Description show clock

{[clock]} Shows current date and clock.

Command Modes PerleRouter#show clock

Usage GuidelinesShows current date and clock.

ExamplesTo show clock, typePerleRouter> show clock <cr>Thu Nov 22 3:18:17:17 UTC 2018


Syntax Description show crypto

{[crypto ipsec client |esp-group <WORD> | ike-group <WORD> | status] |

Shows IPsec information.

[openvpn] | Show OpenVPN information.

[pki] | Shows pki information.

[ssl]} Shows ssl information,

Command Modes PerleRouter#show crypto



show debuggingshow {[debugging]}

show dhcp show dhcp {[lease]}

Usage GuidelinesShow crypto information.

ExamplesTo show ipsec status, typePerleRouter# show ipsec status <cr>IPsec is enabledIPsec is runningNo connections active


Syntax Description show debugging

{[debugging]} Shows which processes are in debugging mode.

Command Modes PerleRouter#show debugging

Usage GuidelinesShows which functions or commands have debug enabled.

ExamplesThis example shows the output of the debug command.PerleRouter# show debugging<cr>BGP events debugging is onNTP debugging is on

debug

Syntax Description show dhcp

{[lease]} Shows current devices with leases.

Command Modes PerleRouter#show dhcp

Usage GuidelinesShows all client dhcp leases with configured options.



show dot11show {[dot11 adjacent-ap] |[associations] |[bbsid] | [operation-stats] |[resource-infor] |[station-info]}

show dot1x{[all | details | statistics] |

ExamplesThis example will show all the dhcp leases.PerleRouter# show dhcp lease<cr>

Related Commandsinterfaceshow ip dhcp

Syntax Description show dot11

{[dot11 adjacent-ap] | Displays adjacent AP list.

[associations] | Association information.

[bbsid] | Show SSID mapping.

[operation-stats] | MAC operation attributes.

[resource-infor] | Interface resource information.

[station-info]} Wireless-client mode information.

Command Modes PerleRouter#show dot11

Usage GuidelinesShow dot11 information.

ExamplesThis example shows the interface resource information.PerleRouter# show resource-info<cr>Product Version ManufacturerOUI Manufacturer Name Product Namewlan0 00:40:02 Qualcomm Atheros QCA988x 802.11ac

Related Commandsdot11



[credential <WORD>] | [interface ethernet <1-4> details | statistics] | [radius statistics interface ethernet <1-4>]}show dot1xSyntax Description show dot1x

[all | details | statistics] | Type all for details for all dot1x connections. Select all statistics to view statistics for each dot1x connection.

[credential <WORD>] | Type credential to show the credential profile for the user.

[interface ethernet <1-4> details | statistics] |

Type Ethernet interface to show connections authenticated with dot1x.

[radius statistics interface ethernet <1-4>]}

Type radius to show radius statistics for authenticator mode.

Command Modes PerleRouter>show radius

Usage GuidelinesShows the connection information for suppliant and authenticator dot1x connections.



show eapshow eap{[profile <WORD>] | [registrations]}

ExamplesPerleRouter#show dot1x allSysauthcontrol EnabledDot1x Protocol Version 3

Dot1x Info for Ethernet2 ====================================PAE = AUTHENTICATORQuietPeriod = 60SuppTimeout = 30ReAuthMax = 2MaxReq = 2TxPeriod = 30

Dot1x Info for Ethernet3====================================PAE = SUPPLICANTStartPeriod = 30 (fixed)AuthPeriod = 30 (fixed)HeldPeriod = 60 (fixed)MaxStart = 3 (fixed)Credentials profile = lfeltonEAP profile = md5chap

PerleRouter#show dot1x credentialDot1x Credential Profile: lfelton-------------------------------------------- Username: lfelton Password:*******

Related Commandsdot1x

Syntax Description show eap

[profile <WORD>] | Shows details for pre-defined eap profiles. See (config-eap-profile)# to configure eap profile.

[registrations]} Shows supported EAP.


Command Modes PerleRouter>show eap



show eeeshow eee {[capabilities interface ethernet <1-4>] | [status]}

Usage GuidelinesShows configured methods and pki-trustpoints for eap configured profiles. EAP profiles are configured using the eap profile <name> command. The registration show command shows the EAP methods supported by your Router.

ExamplesPerleRouter>show eap registrations <cr>

Registered EAP Methods:======================= Method Type Name 4 Auth and Peer MD5 6 Auth and Peer GTC 13 Auth and Peer TLS 21 Auth and Peer TTLS 25 Auth and Peer PEAP 26 Auth and Peer MSCHAPV2..........PerleRouter>show eap profile <cr>EAP Profile: md5chap---------------------------------------- PKI-Trustpoint: None Allowed Phase 1 methods:----------------------------------------- MD5 MSCHAPV2


Syntax Description show eee

{[capabilities interface ethernet <1-4>] | Shows whether the remote Ethernet interface is capable of Energy Efficient Ethernet.



show emailshow email

[status]} Shows the current status Disagree – the remote interface cannot

negotiate eee. Link down – the remote interface is

not connected. Operational – both sides have agreed

on eee capabilities. Disabled – eee is disabled on this

ethernet interface.

Command Modes PerleRouter#show eee

Usage GuidelinesShows eee capabilities.

ExamplesPerleRouter# show eee capabilites.<cr>Ethernet 1 EEE: yesEthernet 2 EEE yes


Syntax Description show email

Command Modes PerleRouter#show email

Usage GuidelinesShows configured email parameters.

ExamplesPerleRouter# show email <cr>Email: DisabledSMTP Server: testsnmpfrom: Encryption: noneUsername: lynPassword: testValidate Certificate: Disabled



show environmentshow {[environment alarm-contact] | [all] | [temperature]}

show facility-alarmshow {[facility-alarm relay major] | [status]}

Related Commandsemail

Syntax Description show environment

{[environment alarm-contact] | Show alarm contact status.

[all] | Show all environment status.

[temperature]} Show temperature status.

Command Modes PerleRouter#show environment

Usage GuidelinesShows temperature and alarm contact status.

PerleRouter# show environment all<cr>SYSTEM TEMPERATURE is OK Temperature sensor value: 39 Degree Celsius External alarm contact A: Description: AUX-IO: Digital Input A Digital Input: Value: Closed Transitions: 0 Pulses: 0 External alarm contact B: Description: AUX-IO: Digital Input B Digital Input: Value: Closed Transitions: 0 Pulses: 0 External alarm contact 1: Description: DC-POWER: IGN Analog Input: Value: 0.16 Volts Transposed Value: 0.164 VoltsExternal alarm contact 2: Description: DC-POWER: GPIO Digital Input: Value: Open Transitions: 0 Pulses: 0 Analog Input: Value: 0.33 Volts Transposed Value: 0.329 Volts

Syntax Description show facility-alarms

{[facility-alarm relay major] | Shows facility alarms by relay.

[status]} Shows facility alarms by status.



show flash:show flash:

Command Modes PerleRouter#show facility-alarm

Usage GuidelinesShows facility alarms.

ExamplesPerleRouter>show facility-alarm<cr>Source Severity Description Actions ---------------------------------------------------------------------------------------------------------------------------------PerleRouter Minor Temperature below min secondary LOG,NOT,LTE-D MAJ Time------------------------------May 21 2019 11:26_06

Syntax Description show flash:

Command Modes PerleRouter#flash:

Usage Guidelines

ExamplesPerleRouter# show flash:<cr>PerleRouter#show flash:Directory of flash:

57 -rw- 2504 Jan 2 2019 20:58 -04:00 test-Jan-02-20-58-34-113 78 -rw- 3332 Sep 16 2019 11:58 -04:00 test-Sep-16-11-58-38-8462 37 -rw- 2124 Jan 2 2019 00:28 -04:00 test-Jan-02-00-28-14-37 49 -rw- 2124 Jan 2 2019 01:21 57 -rw- 2504 Jan 2 2019 20:58 -04:00 test-Jan-02-20-58-34-113



show gnssshow {[all | location | profile | streams]}

78 -rw- 3332 Sep 16 2019 11:58 -04:00 test-Sep-16-11-58-38-8462 37 -rw- 2124 Jan 2 2019 00:28 -04:00 test-Jan-02-00-28-14-37 49 -rw- 2124 Jan 2 2019 01:21 -04:00 test-Jan-02-01-21-17-23 70 -rw- 2513 Jan 3 2019 00:33 -04:00 test-Jan-03-00-33-56-69 39 -rw- 2124 Jan 2 2019 00:30 -04:00 test-Jan-02-00-30-16-39 74 -rw- 3509 Sep 10 2019 13:29 -04:00 test-Sep-10-13-29-21-5469 64 -rw- 2515 Jan 2 2019 23:16 -04:00 test-Jan-02-23-16-52-42 61 -rw- 2504 Jan 2 2019 22:27 -04:00 test-Jan-02-22-27-57-83 71 -rw- 3509 Sep 10 2019 13:26 -04:00 test-Sep-10-13-26-19-5466 43 -rw- 2124 Jan 2 2019 00:51 -04:00 test-Jan-02-00-51-17-17 20 -rw- 0 Dec 31 2018 22:13 -04:00 gnss.txt


Syntax Description show gnss

{[all | Show all GNSS information.

location | Show only GNSS location information.

profile | Show GNSS profile information.

streams]} Show GNSS streams informtion.

Command Modes PerleRouter> enable <cr>PerleRouter# show gnss



show hostsshow {[hosts]}

Usage GuidelinesShows information for GNSS.

ExamplesThis example shows gnss location.PerleRouter#show gnss location<cr>GNSS Location Information: Fix : Yes Longitude : -79.363062 Latitude : 43.858360 Altitude : 192.300000 Speed : 0.000000 kph Heading : 0.000000

GNSS Satellite Information:

Number of satellites in fix : 26 In fix GPS Satellites : 1 10 11 14 15 24 31 32 In fix GLONASS Satellites : 70 86 73 80 79 69 87 71 In fix GALILEO Satellites : 304 309 311 319 327 336 In fix Beidou Satellites : 214 226 227 230 In fix QZSS Satellites :

Related Commandscellular

Syntax Description show hosts

{[hosts]} Configured hosts in the host table.

Command Modes PerleRouter# show hosts

Usage GuidelinesShow a list of hosts listed in the host table.

ExamplesThis example shows the host table.PerleRouter#show hosts<cr>Default domain name is not setDNS lookup is enabledName Servers are not configuredHost table:PerleName 172.16.113.77RADIUS_SERVER 172.16.55.88TACACS_SERVER 172.16.55.99



show interfacesshow interfaces {[interfaces bvi [<1-9999>] | [cellular <0-0>] | [dialer <0-15>] | [dot11radio <0-4>] | [ethernet <1-4] | [loopback counters | description | stats | summary] | [openvpn-tunnel <0-999] | [tunnel <0-999] | [counters] | [description] | [stats] | [summary]}

Related Commandshostname

Syntax Description show interfaces

{[interfaces bvi [<1-9999>] | Show Bridge-Group Virtual interfaces.

[cellular <0-0>] | Show Cellular WAN interfaces.

[dialer <0-15>] | Show Dialer interfaces.

[dot11radio <0-4>] | Show IEEE 802.3z interfaces.

[ethernet <1-4] | Show Ethernet interfaces.

[loopback counters | description | stats | summary] |

Show Loopback interface.

[openvpn-tunnel <0-999] | Show OpenVPN interfaces.

[tunnel <0-999] | Show tunnels.

[counters] | Show counters for all interfaces.

[description] | Show descriptions for all interfaces.

[stats] | Show stats for all interfaces.

[summary]} Show summary for all interfaces.

Command Modes PerleRouter#show interfaces



show ip access-listsshow ip access-lists{[extended <100-199> <2000-2699> | [standard <1-99> <2000-2699>]}

Usage GuidelinesShows all interface details, including Admin status and Link status. Specify no interface numbers to display all interfaces or specify show interfaces or all details.

ExamplesPerleRouter>show interfaces description<cr>Interface Admin Status Link Status Description--------- ------------ ----------- -----------eth1 up down eth1eth2 up down eth2eth3 up down eth3wlan0 up downwlm0 up downwlm1 up downbr10 up down


Syntax Description show ip access-lists

{[extended <100-199> <2000-2699>] |

Extended IP access lists.

[standard <1-99> <2000-2699>]} Standard IP access lists.

Command Modes PerleRouter> enable <cr>PerleRouter#

Usage GuidelinesShows configured access lists.

ExamplesPerleRouter>show ip access-listsExtended IP access list 10010 permit any any

Related Commands(config-std-nacl)#



show ip algshow ip alg {[table]}

show ip arpshow ip arp {[<A.B.C.D>]}

Syntax Description show ip alg table

{[table]} Extended IP access lists.

Command Modes PerleRouter# show ip alg table

Usage GuidelinesApplication Level Gateway (ALG).

ExamplesPerleRouter>show ip alg table<cr>CONN-ID Source Destination Protocol Timeout State 470387840 127.0.0.1:54322 127.0.0.1:199 tcp [6] 429781 ESTABLISHED 445100032 127.0.0.1:54326 127.0.0.1:199 tcp [6] 429781 ESTABLISHED 1030624192 127.0.0.1:41776 127.0.0.1:13514 tcp [6] 100 TIME_WAIT 470388160 127.0.0.1:54324 127.0.0.1:199 tcp [6] 429781 ESTABLISHED 445101312 172.16.113.216:50077 172.16.113.215:80 tcp [6] 424575 ESTABLISHED 470386240 127.0.0.1:41778 127.0.0.1:13514 tcp [6] 431999 ESTABLISHED

Related Commandsip

Syntax Description show ip arp

{[<A.B.C.D>]} Show the arp entry for the specified ipv4 address.


Command Modes PerleRouter#show ip arp

Usage GuidelinesShow arp table details.

ExamplesPerleRouter>show ip arp<cr>Address HWtype HWaddress Flags Mask Iface172.16.113.20 ether 78:2B:cb:a5:b4:0c CM eth1



show ip as-path-access-list

show ip bgp

show ip community-list

Syntax Description show ip as-path-access-list

Command Modes PerleRouter> enable <cr>PerleRouter#

Usage Guidelines

ExamplesThis example shows how to display all as-path access lists.PerleRouter# show ip as-path-access-list<cr>AS path access list factory permit 10

Related Commandsip

Syntax Description show ip bgp

Command Modes PerleRouter#show ip bgp

Usage GuidelinesShow command for bgp.

ExamplesThis example shows how to display bgp information.PerleRouter# show ip bgp<cr>BGP table version is 0, local router ID is 172.16.113.215Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, R RemovedOrigin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path*> 172.16.0.0 0.0.0.0 1 32768 i

Total number of prefixes 1

Related Commandsip

Syntax Description show ip community-list

Command Modes PerleRouter#show ip community-list



show ip ddns ip ddns{[service | update | use-web]}

Usage Guidelines

ExamplesThis example shows how to display community lists.PerleRouter# show ip community-list<cr>Community ( expanded) access list 100permit 50

Related Commandsip

Syntax Description show ip ddns

{[service | Show the service being used for DDNS.

update | Configure DDNS update.

use-web]} Web check used for obtaining the external address.

Command Modes PerleRouter#show ip ddns<cr>

Usage GuidelinesShow all DDNS settings.

ExamplesThis example shows how to display IP DDNS update method.PerleRouter# show ip ddns update method. <cr>Update name ddns-update Key File Not Configured Server 172.16.4.90 Zone Not Configured TTL 600 Record Not ConfiguredUpdate name testmethod Key File Not Configured Server Not Configured Zone Not Configured TTL 600 Record Not Configured



show ip dhcp ip dhcp {[binding] |[pool <WORD>]}[

show ip dns show ip dns

Related Commandsip

Syntax Description show ip dhcp

{[binding] | Type bindings to show all automatic DHCP IP bindings

[pool <WORD>]} Type the name of the DHCP IP pool to show the client leases or bindings. Also shows you Fixed/Reserved leases.

Command Modes PerleRouter#show ip dhcp bindings<cr>

Usage GuidelinesShow all DHCP IP bindings. Type in the name of the pool you want to see DHCP ip bindings for.

ExamplesThis example shows how to display all DHCP IP bindings.PerleRouter# show ip dhcp pool testpool <cr>lease 172.16.0.4 lease expires Sun Jan 12 19:50:45 2019 hardware ethernet 78:2b:cb:a5:b4:0c; client-hostname "DESKTOP-N5PC2JQ"; state: activeFixed Reserved leasesIP address Client-ID/Hardware address172.16.113.200 17:17:23:34:56:77

Related Commandsshow dhcprelease dhcp | dhcpv6renew dhcp | dhcpv6clear arp-cache

Syntax Description show ip dns

Command Modes PerleRouter#show ip dns



show ip extcommunity-list show ip extcommunity-list

show ip firewall show ip firewall {[<NAME>]}

Usage GuidelinesShows IP DNS configuration and information.

ExamplesThis example shows how to display all DNS settings.PerleRouter# show ip dns <cr>IP DNS ====== DNS Lookup EnabledListen Addresses:192.168.0.1Cache Size 10000Ignore Host File OffNegative TTL 3600No Name Servers ConfiguredName Servers obtained from DHCP on the following interfaces:wlm0 64.71.255.254 64.71.255.253

Related Commandsip

Syntax Description show ip extcommunity-list

Command Modes PerleRouter#show ip extcommunity-list

Usage GuidelinesShows configured ip extcommunity lists.

ExamplesThis example shows how to display community lists.PerleRouter# show ip extcommunity-list<cr>Extended community standard list 99denyso0:0:1:30

Related Commandsip

Syntax Description show ip firewall



show ip healthshow ip health {[interfaces | profiles | status]}

{[<NAME>]} The name of the firewall.

Command Modes PerleRouter#show ip firewall

Usage GuidelinesShows ip firewall.

Examples Active on Rule Packets Bytes Action Proto Source Destination Rule Specs ----- ------- ------- ------- ------- ----------- ----------------- ---------------10 0 0 accept ip 0.0.0.0/0 0.0.0.0/0/* firewall1-10 */ 10000 0 0 drop ip 0.0.0.0/0 0.0.0.0/0/* firewall1-10000 default-action drop */

Related Commandsip

Syntax Description show ip health

{[interfaces | profiles | status]} Show health profile and statuses for interfaces.

Command Modes PerleRouter>enablePerleRouter# show ip health

Usage GuidelinesShow health status for interfaces.

ExamplesThis example shows how to display all health information for all configured interfaces.PerleRouter# show ip health <cr>IP Health Profiles and Tests Configuration:===========================================Profile Name : health-cell Failure-count: 1 Success-count: 1 Test 1: Type: PING Response Timeout: 1 Target: www.google.com

www.google.com



show ip host-groupshow ip host-group {[<WORD>]}

IP Interface Health-Profile Configuration:==========================================Cellular0 health-cellEthernet2 health-eth2

IP Interfaces Health Status:============================

Interface: Cellular0 Status: active Last Status Change: Tue Oct 1 13:05:09 2019 +Test: ping Target: www.google.com Last Interface Success: 1s Last Interface Failure: n/a # Interface Failure(s): 0

Interface: Ethernet2 Status: active Last Status Change: Tue Oct 1 13:05:09 2019 +Test: ping Target: 172.16.1.1 Last Interface Success: 1s Last Interface Failure: n/a # Interface Failure(s): 0

Related Commands(config-if-ssid)#(config-if)# cellular(config-if-ssid)#(config-if)# dialer

Syntax Description show ip host-group

{[<WORD>]} Show ip host groups registered for DDNS service.

Command Modes PerleRouter#show ip host-group

Usage GuidelinesShow ip host groups registered for DDNS service.

ExamplesThis example shows how to display the host group tables.PerleRouter (host-group)# show<cr>Host list: 172.16.77.88 1:2:3:4::5

www.google.com



show ip httpshow http {[server status]}

show ip interfacesshow ip interfaces

Related Commandsip

Syntax Description show ip http

{[server status]} Show HTTP server status.

Command Modes PerleRouter#show ip http

Usage GuidelinesShows status of HTTP server.

ExamplesShows status of HTTP server.PerleRouter# show ip http <cr>Http server status: EnabledHTTP server port : 80User session idle timeout: 1440 secondsHTTP secure server status: EnabledHTTp secure server port: 443

Related Commandsip

Syntax Description show ip interfaces

Command Modes PerleRouter>enablePerleRouter# show ip interfaces

Usage GuidelinesShows interface status



show ip nat show ip nat {[statistics | translations]}

ExamplesThis example shows how to display all ip interfaces.PerleRouter show ip interface <cr>Interface IP Address Mask Admin Status Link Status Description --------- ----------------- ----------------- ------------ ----------- ----------- lo 127.0.0.1 255.0.0.0 up up eth1 - - admin down down eth2 - - up down wlm0 25.109.1.55 255.255.255.240 up up wlan0 - - up down br1 192.168.0.1 255.255.255.0 up up wlan1 - - up up


Syntax Description show ip nat

{[statistics | translations} Shows the NAT source statistics table.Shows the pre-nat and post-nat translations. table.


Command Modes PerleRouter#show ip nat

Usage GuidelinesShows the Router’s Network Address Translation Table (NAT) statistics and translations.

Examples;PerleRouter# show ip nat translations<cr>NAT Source TranslationsPre-NAT Post-NAT Prot Timeout 172.16.0.4 25.111.129.244 tcp 339052

NAT Destination TranslationsPre-Nat Post-NAT Port-Timeout

Related Commandsip



show ip ospf show ip ospf {[statistics | translations]}Syntax Description show ip ospf

{[statistics | translations]}

Command Modes PerleRouter#show ip ospf

Usage GuidelinesShows the Router’s Network Address Translation Table (NAT) statistics and translations.

ExamplesPerleRouter#show ip ospfOSPF Routing Process, Router ID: 172.16.39.2Supports only single TOS (TOS0) routesThis implementation conforms to RFC2328RFC1583Compatibility flag is disabledOpaqueCapability flag is disabledInitial SPF scheduling delay 200 millisec(s)Minimum hold time between consecutive SPFs 1000 millisec(s)Maximum hold time between consecutive SPFs 10000 millisec(s)Hold time multiplier is currently 1SPF algorithm last executed 7m53s agoSPF timer is inactiveRefresh timer 10 secsNumber of external LSA 0. Checksum Sum 0x00000000Number of opaque AS LSA 0. Checksum Sum 0x00000000Number of areas attached to this router: 1

Area ID: 0.0.0.0 (Backbone) Number of interfaces in this area: Total: 1, Active: 1 Number of fully adjacent neighbors in this area: 0 Area has no authentication SPF algorithm executed 1 times Number of LSA 1 Number of router LSA 1. Checksum Sum 0x00001e7a Number of network LSA 0. Checksum Sum 0x00000000 Number of summary LSA 0. Checksum Sum 0x00000000 Number of ASBR summary LSA 0. Checksum Sum 0x00000000 Number of NSSA LSA 0. Checksum Sum 0x00000000 Number of opaque link LSA 0. Checksum Sum 0x00000000 Number of opaque area LSA 0. Checksum Sum 0x00000000

Related Commandsip



show ip prefix-list show ip prefix-list{[WORD]}

show ip rip show ip rip{[status]}

Syntax Description show ip prefix-list

{[WORD]}Command Default None

Command Modes PerleRouter# show ip prefix-list<cr>

Usage GuidelinesShows prefix list table.

Examples;PerleRouter# show ip prefix-list<cr>ip prefix-list pefix-lab ( for lab users)seq 10 permit 172.17.0.0/16

Related Commandsip

Syntax Description show ip rip status

{[status]} Show rip information.

Command Modes PerleRouter# show ip rip status <cr>

Usage Guidelines

ExamplesPerleRouter# show ip rip<cr>Routing Protocol is "rip" Sending updates every 30 seconds with +/-50%, next due in 30 seconds Timeout after 180 seconds, garbage collect after 120 seconds Outgoing update filter list for all interface is not set Incoming update filter list for all interface is not set Default redistribution metric is 1 Redistributing: Default version control: send version 2, receive any version Interface Send Recv Key-chain Routing for Networks: Routing Information Sources: Gateway BadPackets BadRoutes Distance Last Update Distance: (default is 120)



show ip route show ip route {[table <1-200>]}

show ip route-policy show ip route-policy {[table <1-200>]}

Related Commandsip

Syntax Description show ip route

{[table <1-200>]} Show ip routes or route table. Tables must be pre-defined by the user.


Command Modes PerleRouter#show ip route

Usage GuidelinesShows configured tables for ip routing.

ExamplesPerleRouter# show ip route<cr>table:200

Related Commandsip

Syntax Description show ip route-policy

{[table <1-200>]} Show ip routes or route table. Tables must be pre-defined by the user.

Command Modes PerleRouter#show ip route-policy

Usage GuidelinesShow configured routing policies.



show ip ssh show ip ssh

show ipv6 show ipv6 {[access-lists <WORD>] |[ bgp <X:X:X:X::X> | <X:X:X:X::X/M>] |[dhcp binding | interface client-mode | pool] |[firewall <WORD>] |[interface] |

ExamplesPerleRouter#show ip route-policy IPv4 Route-policy route1 Active on Rule Packets Bytes Action Proto Source Destination Rule Specs ----- ------- ------- ------- ------- -------------- -------------- ---------------20 0 0 rtable-254 ip 0.0.0.0/0 0.0.0.0/0/* route1-9999 */ 10000 0 0 accept ip 0.0.0.0/0 0.0.0.0/0/* route1-10000 default-action accept */

Syntax Description show ip ssh

Command Modes PerleRouter>PerleRouter#show ip ssh

Usage GuidelinesShows configuration for ssh.

ExamplesPerleRouter# show ip ssh<cr>SSH version: 2SSH server: EnabledAuthentication timeout: 120 secondsAuthentication retries: 3SSH public key:ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgAtvWaaM0CeMWoZV1H00sni2J8TYalvSyysQGyBDIOAydaaKv1+s1Imj00FL2Boi3ke/SoKhvuLJQ+bMVFXD7kXw2fk71Mo8f8Dd/rOuuF4kE6hKV+LLl44kJKwCUC2w2m4L1lH8Zn8HuX89Qcv2oqPUdkBfO1nelU3gc6gN4v1ckC069Tgg9hrhghCiBECCCYxmAJUhIy4dQcPwO1DQ6Acp2p3lW2RYdgUvRAlr8oLiVdrEvT7zZECpYgCMYWmfsTtUhvv8yZpvNAhV9nRm5E93Yl0V2J15qlmIlSGKn0iiLRW42xjQ4MT5XmWdlXj+NpuMlQRtFzyYPkR2HMf+9

Related Commandsip



[neighbours bvi <0-999> | cellular <0-0> | dot11radio <0-4> | ethernet <1-4> | tunnel <0-999>] |[ospf area | border-routers | database | interface | linkstate | neighbor | redistribution | route] |[prefix-list <WORD>] |[rip status] |[route table <1-200>] |[route-policy <WORD>]}Syntax Description show ipv6

{[access-lists <WORD>] | List all access lists.

bgp <X:X:X:X::X> | <X:X:X:X::X/M>] | Show BGP information.

[dhcp binding | interface client-mode | pool] |

Show DHCP parameters.

[firewall <WORD>] | Show firewall information.

[interface]| Show interface configuration and status.

[neighbours bvi <0-999> | cellular <0-0> | dot11radio <0-4> | ethernet <1-4> | tunnel <0-999>] |

Show neighbors cache entries.

[ospf area | border-routers | database | interface | linkstate | neighbor | redistribution | route] |

Show OSPF information.

[prefix-list <WORD>] | List IP prefix lists.

[rip status] | Show RIP status.

[route table <1-200>] | Show IP routing table.

[route-policy <WORD>]} Show route-policy information.

Command Modes PerleRouter#show ipv6

Usage GuidelinesShow IPv6 information.



show lineshow line {[console <0-0>] |[tty <1-4> [modbus statistics master-tcp | master-udp | slave-tcp | slave-udp] | multihost | packet-forwarding | ppp | rlogin-client | settings | slip | ssh-client | ssl | statistics | telnet-client | udp | vmodem]}

ExamplesPerleRouter# show ipv6 interface<cr>Interface IPv6 Address Admin Status Link Status Description --------- ---------------------------------- ------------ ----------- ----------- lo - up up eth1 - up up eth2 - up down wlan0 - up down br1 - up up wlan1 - up up wlm0 fe80::8c74:8ff:fe56:3b08/64 up up


Syntax Description show line

{[console <0-0>] | Show configured console parameters.

tty <1-4> [modbus statistics master-tcp | master-udp | slave-tcp | slave-udp] | multihost | packet-forwarding | ppp | rlogin-client | settings | slip | ssh-client | ssl | statistics | telnet-client | udp | vmodem]}

Show statistics for tty lines.

Command Modes PerleRouter#show line

Usage GuidelinesShow line configuration for serial ports.



ExamplesPerleRouter#show line tty 1<cr>TTY 1Service reverse raw Port 10001 Multihost none Break offBreak Delay 0Break Length 0Connection Method direct-connectData Logging OffDial Retries 0Dial Timeout 0Discard Characters 0Received With Errors OffEcho Suppression OffHotkey Prefix 0Idle Timer 0Interface eia-232Initiate Connection anyInitiate Char 0address is 0Internet Address ::Keepalive OffLine Name Line Termination OnLock OffMap CR to CRLF Off



show loggingshow logging

ExamplesMicrosoft SAC Support OffMode DisabledModem Init String Monitor DCD OffMonitor DSR OffMonitor DTR OffMOTD OffMultisessions 0Pages 0Phone Number Reset OffRev Sess Security OffRTS Toggle OffRTS Toggle Initial Delay 0Session StringsInitiateTerminateDelay 0Terminal vt100TX Driver Control auto Session Timer 0

Syntax Description show logging

Command Modes PerleRouter#show logging

Usage GuidelinesShows logging buffer.

ExamplesPerleRouter>show logging<cr>Syslog logging: enabled (764643 messages processed, 0 messages rate-limited, 0 overruns) Console logging: level debugging, 71 messages logged Monitor logging: level debugging, 71 messages logged Logging to: Buffer logging: level debugging, 1344 messages logged File logging: disabled Trap logging: level informational Logging Source-Interface: Log Buffer (16384 bytes): Sep 26 20:51:57 %REQHANDLERD-6: CONSOLE: initializing usb serial console mode Sep 26 20:52:02 %IPSEC_STARTER-6: Starting strongSwan 5.6.2 IPsec [starter]... Sep 26 20:52:02 %IPSEC_STARTER-6: charon is already running (/var/run/charon.pid exists) -- skipping daemon start



show mabshow mab {[all] | [interface ethernet <1-4>] | [radius statistics interface ethernet <1-4>]}

Related Commandslogging

Syntax Description show mab

{[all] | Show all mab (MAC authentication Bypass) devices.

[interface ethernet <1-4>] | Show all mab devices on specified ethernet interface.

[radius statistics interface ethernet <1-4>]}

Shows MAB radius information.

Command Default #default aaa authentication dot1x default group #default aaa authentication login default #default aaa accounting dot1x default start-stop group #default aaa authentication dot1x default group#default aaa authentication login default #no aaa accounting dot1x default start-stop group

Command Modes PerleRouter>PerleRouter#show mab

Usage GuidelinesThe devices configured for MAB will not need to be authenticated using DOT1x protocol.

ExamplesPerleRouter>show mab<cr>Sysauthcontrol disabledInterface Mac-Auth-Bypass----------------------------------------------Ethernet 2 Enabled



show management-accessshow management-access

show nat66show nat66 {[prefix | statistics]}


Syntax Description show management-access

Command Modes PerleRouter>PerleRouter#show management-access

Usage Guidelines

ExamplesThis example shows management access methods for LAN/WAN and TRUSTED interfaces.PerleRouter>show management-access<cr>LAN: br1 pppoe1 wlan0 eth1 HTTP HTTPS TELNET SSH SNMP ENABLED ENABLED ENABLED ENABLED ENABLEDWAN: wlm0 HTTP HTTPS TELNET SSH SNMP ENABLED ENABLED ENABLED ENABLED ENABLEDTRUSTED: tun2

Related Commandsmanagement-access

Syntax Description show nat66

{[prefix | statistics]} Show NAT66 prefixes.

statistics]} Show NAT66 statistics.

Command Modes PerleRouter#show nat66

Usage GuidelinesNetwork address translation for IPv6 networks.



show ntpshow {[ntp associations] | [status]}

ExamplesThis example shows NAT66 statistics.PerleRouter>show nat66 statistics<cr>Global Stats: ID:0 Packets translated In -> Out 1290003 Packets translate Out -> In 1290003

Related Commandsnat66

Syntax Description show ntp

{[ntp associations] | Associations made with NTP.

status]} Current status of NTP.

Command Modes PerleRouter#show ntp

Usage GuidelinesShows ntp associations and status.

ExamplesPerleRouter#show ntp associations<cr> remote refid st t when poll reach delay offset jitter============================================================================== 172.16.55.77 .INIT. 16 u - 1024 0 0.000 0.000 0.000 172.16.113.55 .INIT. 16 s - 32 0 0.000 0.000 0.000PerleRouter#show ntp statusClock is not synchronized, stratum 16, no reference clockPrecision is 2**-18 sReference time is 00000000.00000000 (Thu, Feb 7 2036 2:28:16.000)Clock offset is 0.000000 msec, root delay is 0.000 msecRoot dispersion is 1265.970 msecSystem poll interval is 8 s

Related Commandsntp



show nvram:show nvram:

show processesshow processes

Syntax Description show nvram:

Command Modes PerleRouter#show nvram:

Usage GuidelinesShows files stored on nvram.

ExamplesPerleRouter#show nvram: <cr>Directory of nvram:

84 -rw- 1824 Sep 25 2019 14:16 -04:00 startup-config.log.2 18 -rw- 227 Sep 16 2019 12:21 -04:00 no-default-config 33 -rw- 3509 Sep 10 2019 13:29 -04:00 startup-config-safemode 25 -rw- 2601 Sep 27 2019 16:36 -04:00 startup-config 69 -rw- 1727 Sep 26 2019 09:52 -04:00 startup-config.log.1 42 -rw- 2203 Jan 2 2019 19:01 -04:00 startup-config-rollback 36 -rw- 2124 Jan 2 2019 00:31 -04:00 startup-config-replace 82 -rw- 3063 Sep 26 2019 16:51 -04:00 startup-config.log 16 -rw- 581 Sep 16 2019 12:21 -04:00 default-config

1372160 KBytes total (1032192 KBytes free)

Related Commandsbootcopydeleterenamepwdmkdir

Syntax Description show processes

Command Modes PerleRouter#show processes

Usage GuidelinesShows processes running on your router.



show radiusshow radius {[statistics details]}

ExamplesPerleRouter#show processes <cr>USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMANDroot 1 0.0 0.4 88468 5032 ? Ss 10:36 0:12 /sbin/initroot 2 0.0 0.0 0 0 ? S 10:36 0:00 [kthreadd]root 4 0.0 0.0 0 0 ? I< 10:36 0:00 [kworker/0:0H]root 6 0.0 0.0 0 0 ? I< 10:36 0:00 [mm_percpu_wq]root 7 0.2 0.0 0 0 ? S 10:36 0:44 [ksoftirqd/0]root 8 0.1 0.0 0 0 ? I 10:36 0:39 [rcu_preempt]root 9 0.0 0.0 0 0 ? I 10:36 0:00 [rcu_sched]root 10 0.0 0.0 0 0 ? I 10:36 0:00 [rcu_bh]root 11 0.0 0.0 0 0 ? S 10:36 0:00 [migration/0]root 12 0.0 0.0 0 0 ? S 10:36 0:00 [cpuhp/0]root 13 0.0 0.0 0 0 ? S 10:36 0:00 [cpuhp/1]root 14 0.0 0.0 0 0 ? S 10:36 0:00 [migration/1]root 15 0.0 0.0 0 0 ? S 10:36 0:00 [ksoftirqd/1]root 17 0.0 0.0 0 0 ? I< 10:36 0:00 [kworker/1:0H]root 18 0.0 0.0 0 0 ? S 10:36 0:00 [kdevtmpfs]root 19 0.0 0.0 0 0 ? I< 10:36 0:00 [netns]root 22 0.0 0.0 0 0 ? S 10:36 0:00 [khungtaskd]root 23 0.0 0.0 0 0 ? S 10:36 0:00 [oom_reaper]root 24 0.0 0.0 0 0 ? I< 10:36 0:00 [writeback]root 25 0.0 0.0 0 0 ? S 10:36 0:00 [kcompactd0]root 26 0.0 0.0 0 0 ? SN 10:36 0:00 [ksmd]root 27 0.0 0.0 0 0 ? SN 10:36 0:00 [khugepaged]root 28 0.0 0.0 0 0 ? I< 10:36 0:00 [crypto]root 29 0.0 0.0 0 0 ? I< 10:36 0:00 [kintegrityd]root 30 0.0 0.0 0 0 ? I< 10:36 0:00 [kblockd]

Related Commands

Syntax Description show radius

{[statistics details]} Show radius statistics details.

Command Modes PerleRouter#show radius

Usage Guidelines



show reloadshow reload

show routeshow route {[<WORD>]}

ExamplesShows the radius statistics. PerleRouter# show radius statistics <cr> All: Auth. Acct. Requests 3 3Responses 3 3Access Rejects 3

Related Commandsclear radiusradiusradius-server

Syntax Description show reload

Command Modes PerleRouter#show reload

Usage GuidelinesShows scheduled reloads.

ExamplesThis example show configured reloads.PerleRouter#show reload<cr> Reload scheduled for 18:00:00 EDT Oct 17 2019 ( in 59 minutes)

Related Commandsreload

Syntax Description show route

{[<WORD>]} Shows specified route map.


Command Modes PerleRouter#show route

Usage Guidelines



ExamplePerleRouter#show route route1RIB:route-map route1, permit, sequence 2 Match clauses: Set clauses: Call clause: Action: Exit routemapRIP:route-map route1, permit, sequence 2 Match clauses: Set clauses: Call clause: Action: Exit routemapRIPV6:route-map route1, permit, sequence 2 Match clauses: Set clauses: Call clause: Action: Exit routemapOSPF:route-map route1, permit, sequence 2 Match clauses: Set clauses: Call clause: Action: Exit routemap

OSPF6:route-map route1, permit, sequence 2 Match clauses: Set clauses: Call clause: Action: Exit routemapBGP:route-map route1, permit, sequence 2 Match clauses: Set clauses: Call clause: Action: Exit routemap

Related Commandsrouter



show running-configshow running-config {[all]}Syntax Description show running-config

{[all]} Show all config including defaults.

Command Modes PerleRouter#show running-config

Usage GuidelinesShows the current configuration running on your router. To make this configuration permanent you must copy this configuration to the startup configuration.

ExamplesThis example show running-config.PerleRouter#show running config<cr> Building running-config . . . version 1.0.S3hostname PerleRouterlogging file flash:logging-testno logging consoleaaa authentication dot1x default group radius aaa accounting dot1x default start-stop group radius radius server raddhk address ipv4 172.16.28.108 key 7 GMQJdok4V10=



controller cellular 0 lte apn-profile rogers1 ltedata.apn none ipv4ipv6 lte profile test attach-profile rogers1 1 lte profile test data-profile rogers1 1 lte failover primary-profile test lte enableinterface BVI1 description IP Bridge Group 1, DHCP pool 192.168.0.x available ip address 192.168.0.1 255.255.255.0!interface BVI10 description testing bv10 ip address 172.16.113.50 255.255.0.0!interface Ethernet1 no ip address ntp broadcast destination 172.16.4.90 minpoll 4 ntp broadcast client bridge-group 10!interface Ethernet2 description Bridged Ethernet2 speed 10 dot1x pae authenticator authentication host-mode multi-auth authentication port-control auto no ip addressbridge-group 10interface Ethernet3 description Bridged Ethernet3 dot1x pae supplicant dot1x credential lfelton dot1x supplicant eap profile md5chap no ip address interface Cellular0 ip address dhcp!interface Cellular1 ip address dhcp! interface Dot11Radio 0ip dhcp pool bvi1_dhcp_poolnetwork 192.168.0.0 255.255.255.0 start 192.168.0.1 stop 192.168.0.254 default-router 192.168.0.1 dns-server 8.8.8.8 interface Cellular0 ip address dhcp!bridge-group 1



ip dhcp pool Eth1Pool network 192.168.1.0 255.255.255.0 start 192.168.1.1 stop 192.168.1.254 default-router 192.168.1.1 dns-server 8.8.8.8 !snmp-server contact lynsnmp-server community public RO logging trap debugginglogging 172.16.113.203logging 172.16.113.205logging host 172.16.113.205 transport tcp!line console 0 line tty 0service dsloginspeed 9600 line tty 1service dsloginspeed 9600 ip host linux 172.16.4.90ip host 172.16.4.181 255.255.0.0ip nat inside source any interface Cellular 0 overloadntpntp master 2ntp authenticatentp server 172.16.48.1 key 42ntp authentication-key 42 md5 Ds4JbpV96AlqPA== 7ntp trusted-key 42!dot1x system-auth-controldot1x test timeout 60dot1x loggingdot1x credential lfelton username lfelton password 7 GMQJdok4VI0=!eap profile md5chap method mschapv2 method md5

Related Commandsshow startup-config



show sdm show sdm{[prefer]}

show serialshow serial {[serial advanced] |[modbus ] |[port-buffering] | [trueport] |[username] |[vmodem-phone]}

Syntax Description show sdm

{[prefer]} Select the preferred protocol. IPv4 or IPv6 or both.

Command Default IPv4

Command Modes PerleRouter#show sdm

Usage GuidelinesDisplays whether your Router is running IPv4 or IPv6 or both protocols.

ExamplesThis example shows the current template for sdm.PerleRouter#show sdm prefer<cr>The current template is ‘dual-ipv4-and-ipv6 default template

Related Command(config-route-map)#

Syntax Description show serial

{[serial advanced] | Shows advanced configuration.

[modbus] | Shows modbus configuration.

[port-buffering | Shows port buffering information.

[trueport] | Shows Trueport configuration

[username] | Shows user configuration for serial port.

[vmodem-phone]} Show virtual modem phone number.

Command Modes PerleRouter# show serial

Usage GuidelinesUse this command to view serial configuration.



show snmpshow snmp {[community] | [contact] | [engine-id] | [group] | [host] | [location] | [mib] | [user] | [view]}

ExamplesThis example shows the advanced configuration for serial.PerleRouter#show serial advanced<cr>Process Break Signals offFlush on Close offSingle Telnet offData Logging Buffer Size 4KMonitor Connection Interval 180 SecondsMonitor Connection Number of Retries 5 Monitor Connection Retry Timeout 5 Seconds

Related Commandserial

Syntax Description show snmp

{[community] | Shows community name.

[contact] | Shows contact information

[engine-id] | Show SNMP engine-id.

[group] | Shows snmp groups.

[host] | Shows host information

[location] | Shows location information.

[mib] | Shows SNMP ifmib information.

[user] | Shows snmp users.

[view]} Shows snmp views.

Command Modes PerleRouter#show snmp



show ssh

show startup-config

Usage GuidelinesShows configured options for SNMP.

ExamplesThis example show the configured options for SNMP.PerleRouter#show snmp view<cr>View name: router-view include: iso, exclude

Related Commandssnmp-server

Syntax Description show ssh

Command Modes PerleRouter>show ssh

Usage GuidelinesShow users connected via ssh.

ExamplesThis example show which users are connected.PerleRouter> show ssh<cr> Line User Host Idle Location 1 vty 0 admin idle 00:28:26 172.16.113.31 2 vty 1 lyn idle 00:00:03 172.16.113.30


Syntax Description show startup-config

Command Modes PerleRouter# show startup-config

Usage GuidelinesThis will be the configuration that the Router uses when it boots up.



PerleRouter#show startup-config ! ! version 4.1.S15! sdm prefer dual-ipv4-and-ipv6 default!service timestamps log datetime localtime!tty 2 mode line!hostname PerleRouter!enable secret 5 $1$aUfI$pN.R.tXeyhL4R9GkmXo5l0!username lyn privilege 15 secret 5 $1$LrWp$K1Ug0Y6FHfjHdqcKRHA24/aaa authentication login newlist none !clock timezone EST -5clock summer-time EDT recurring !!archive update-sw check path flash:!alarm profile defaultPort alarm not-operating syslog not-operating notifies not-operating

alarm profile test alarm not-operating!alarm contact A description AUX-IO: Digital Input A

alarm contact B description AUX-IO: Digital Input B

alarm contact 1 description DC-POWER: IGN

alarm contact 2 description DC-POWER:

.......................................................................................depending on configuration



show systemshow system {[hardware] | [statuses] | [uptime] | [versions]}Syntax Description show system

{[hardware] | Show details about hardware.

[statuses] | Show system statuses for alarms, memory, flash etc:

[uptime] | Shows how long your router has been up.

[versions]} Show versions of software running on your router.

Command Modes PerleRouter# show system

Usage GuidelinesShows system information about your router.

This example shows information about your router.PerleRouter#show system statuses

System Statuses: System Up Time................................ 7 hours 26 minutes 4 seconds System Date and Time (local time zone)........ 2019-12-10 18:02:18

Startup-Configuration state................... Not in Sync withRunning-configuration Digital Inputs: Contact A:AUX-IO: Digital Input A.......... Closed Contact B:AUX-IO: Digital Input B.......... Closed Contact 2:DC-POWER: GPIO................... Open Analog Inputs: Contact 1:DC-POWER: IGN.................... 0.29 Volts Contact 2:DC-POWER: GPIO................... 0.46 Volts

Last Alarm .................................... No Alarm CPU Utilization............................... 4.55 Memory (kBytes free).......................... 55420 Flashdisk (Mbytes free)....................... 1008



show tacacs show tacacs {[statistics details]}

show task-status show task-status

Syntax Description show tacacs

{[statistics details]} Shows TACACS statistics.

Command Modes PerleRouter> show tacacs

Usage GuidelinesShows TACACS statistics details.

ExamplesPerleRouter# show tacacs statistics <cr> All: Auth. Acct. Requests 3 3Responses 3 3Access Rejects 0


Syntax Description show task-status

Command Modes PerleRouter> show task-status

Usage GuidelinesShows system tasks running on the router.



show tech-support show tech-support

show terminal show terminal

ExamplesPerleRouter# show task-status <cr> top - 18:20:32 up 7:44, 1 user, load average: 0.05, 0.16, 0.17Tasks: 143 total, 1 running, 86 sleeping, 0 stopped, 0 zombie%Cpu(s): 5.2 us, 4.7 sy, 0.0 ni, 89.7 id, 0.1 wa, 0.0 hi, 0.3 si, 0.0 stKiB Mem: 1016508 total, 962032 used, 54476 free, 194928 buffersKiB Swap: 0 total, 0 used, 0 free. 135468 cached Mem

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 3332 root 20 0 6576 3112 2664 S 6.0 0.3 4:44.89 hostapd26266 root 20 0 5268 2476 2104 R 6.0 0.2 0:00.07 top 1 root 20 0 88468 5032 2840 S 0.0 0.5 0:13.22 systemd 2 root 20 0 0 0 0 S 0.0 0.0 0:00.02 kthreadd 4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/0:+ 6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_percpu_+ 7 root 20 0 0 0 0 S 0.0 0.0 1:02.08 ksoftirqd/0 8 root 20 0 0 0 0 I 0.0 0.0 0:51.57 rcu_preempt 9 root 20 0 0 0 0 I 0.0 0.0 0:00.01 rcu_sched 10 root 20 0 0 0 0 I 0.0 0.0 0:00.00 rcu_bh 11 root rt 0 0 0 0 S 0.0 0.0 0:00.49 migration/0 12 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/0 13 root 20 0 0 0 0 S 0.0 0.0 0:00.00 cpuhp/1 14 root rt 0 0 0 0 S 0.0 0.0 0:00.48 migration/1 15 root 20 0 0 0 0 S 0.0 0.0 0:00.86 ksoftirqd/1

Syntax Description show tech-support

Command Modes PerleRouter>show tech-support

Usage GuidelinesCaptures internal router information for you to send to Perle Technical Support if you need help.

Related Commandsdebug

Syntax Description show terminal


Usage GuidelinesShows current vty information.



show usersshow users{[all] | [console] | [vty] | [web]}

ExamplesThis example shows terminal configuration.PerleRouter> show terminal <cr> Terminal length = 24 Terminal width = 132 Terminal history is enabled Terminal history size = 20 Terminal logging monitor is Off


Syntax Description show users

{[all] | Show all users connected to the router.

[console] | Show only console user.

[vty] | Show all vty users.

[web]} Show all web users.

Command Modes PerleRouter>show users

Usage GuidelinesShows current users logged into the router.

ExamplesPerleRouter#show users all <cr> Line User Host Idle Protocol Location*0 con 0 idle 00:00:00

vty 0 lyn idle 01:04:42 Telnet 172.16.113.216 vty 1 lyn idle 01:04:42 SSH 172.16.113.216

Web Sessions:

User IP Address Idle lyn 172.16.113.216 00:24:53



show versionshow version{[backup] | [flash:] | [startup] | [verbose]}

show wanshow wan{[failover source-interface | status |wan-interface] |[high-availability] |[load-sharing rules | status ]}


Syntax Description show version

{[backup] | Show backup version of firmware.

[flash:] | Specify a firmware in flash to show.

[startup] | Show firmware that the Router is going to startup with.

[verbose]} Show more version details.

Command Modes PerleRouter>PerleRouter#show version

Usage GuidelinesShows information about versions of firmware on your Router.

ExamplesPerleRouter#show version backup <cr>Name: LTE Wireless RouterVersion: 4.1.S12Date created: Tue Sep 24 03:54:24 EDT 2019Source: Router software updateDownloaded: Tue Sep 24 09:39:27 EDT 2019Size: 332652768 bytes

Related Commandsshow reload

Syntax Description show wan



show zone-policyshow zone-policy{[zone <WORD>]}

{[failover source-interface | status |wan-interface] |

Show WAN source interface configuration and status.

[high-availability] | Display WAN management.

[load-sharing rules | status]} Display load sharing configuration and status.

Command Modes PerleRouter#show wan

Usage GuidelinesUse this feature to provide backup redundancy.

ExamplesPerleRouter#show wan high-availabilty <cr>WAN High Availability===================== Mode: FAILOVERWAN Failover Source Interfaces:=============================== Ethernet2

WAN Failover Primary Active Interface:====================================== wlm0

WAN Load Failover Interfaces Health Status:=========================================== (null)

WAN Load Share Global Settings:=============================== Include Local Traffic: enabled Source IP NAT: disabled Track inbound Connections: enabled Flush Connections on Failure: enabledWAN Load Sharing Interfaces Health Status:========================================== DISABLED

Related Commandscellularcontroller

Syntax Description show zone-policy

{[zone <WORD>]} Show zone policy for specified zone.



sshssh{[-c | -h | -l | -p <A.B.C.D> | <X:X:X:X::X>]}

standbystandby{[resume-standby-configuration] |[resume-standby-configuration]}

Command Modes PerleRouter#show zone-policy

Usage GuidelinesUse this command to show zone policy for the specified zone.

Examples

Related CommandsUse the no form of this command to negate a command or set its defaults.zonezone-pair

Syntax Description ssh

{[-c | -h | -l | -p | <A.B.C.D> | <X:X:X:X::X>]}

-c select the encryption method) -h select HMAC algorithm -l log in using this user name) -p connect to this port <A.B.C.D> <X:X:X:X::X> IPv4 or IPv6

address or hostname to connect to

Command Modes PerleRouter>ssh

Usage GuidelinesSSH from your router to a host supporting the ssh protocol.



Syntax Description standby

[resume-standby-configuration]} Resume current standby configuration.



telnettelnet {[<A.B.C.D> | <X:X:X:X::X>]}

terminalterminal{[history size <0-256>] |[length <0-512>] |[monitor <0-512>] |[width <0-512>]}

Command Modes PerleRouter>enablePerleRouter#

Usage GuidelinesForce standby mode or resume from forced standby mode.

ExamplesThis example shows how to resume standby configuration.PerleRouter> standby resume<cr>Resuming all power standby-mode configuration.

Related Commandspower

Syntax Description telnet

{[<A.B.C.D>| <X:X:X:X::X>]}

IP address or hostname to connect to


Usage GuidelinesTelnet from your router into a host that supports the telnet protocol.

ExamplesThis example shows how to connect to host (172.16.4.90) using lyn as the user.PerleRouter> telnet 172.16.4.90<cr>

Related Commandsssh

Syntax Description terminal

{[history size <0-256>] | Specify size of the history buffer.

[length <0-512>] | Specify length of the screen



traceroutetraceroute {[<A.B.C.D>]}

[monitor <0-512>] | Set monitor on tty to on.

[width <0-512>]} Specify width of the screen

Command Default length – 24width – 132

Command Modes PerleRouter# terminal

Usage GuidelinesConfigure terminal (tty) parameters.

ExamplesSet terminal width to 140.PerleRouter>terminal width 140


Syntax Description traceroute

{[<A.B.C.D>]} Destination hostname or address.


Usage GuidelinesTraceroute will list all the routers it passes through until it reaches its destination, or fails to and is discarded. In addition to this, it will tell you how long each 'hop' from router to router it takes.

ExamplesThis example shows the hops it takes from router to router to reach its destination of host 172.16.4.90.PerleRouter>traceroute 172.16.4.90<cr.> (172.16.4.90), 30 hop max, 60 bytes packets1 172.16.4.90 (172.16.4.90) 2.094ms 1.113 ms 0.826 ms

Related Commandsping



undebugundebug {[alarmgr | all | bgp | cellular-gnss | cellular-lte | clpd | dialer | dot11-ap | dot11-station | dot1x-authenticator | dot11-supplicant | drmgrd | email | init | ip | ip-passthrough | ipsec | | kernel | logging | ntp | snmp | trapmgr | tty | vty | wan-highavail | wanifmgr]}Syntax Description undebug

{[alarmgr | all | bgp | cellular-gnss | cellular-lte | clpd | dialer | dot11-ap | dot11-station | dot1x-authenticator | dot11-supplicant | drmgrd | email | init | ip | ip-passthrough | ipsec | | kernel | logging | ntp | snmp | trapmgr | tty | vty | wan-highavail | wanifmgr]}

Turn off the debug feature for a running application.

Command Modes PerleRouter> undebug

Usage GuidelinesUse this command to turn off debugging for an application in debug mode.

ExamplesThis example shows to turn off debugging for alarmmgr.PerleRouter>undebug alarmmgr <cr>Alarm Manager debugging is off

Related Commandsdebug


Global Configuration Mode Chapter 4

This chapter defines all the CLI commands in Global Configuration Mode.

aaaaaa {[accounting dot1x default start-stop group <WORD> radius | tacacs] | [authentication attempts login <1-25> | [dot1x default group <WORD> | radius] | [login <WORD> | default group | local | none | radius | tacacs] | [login <WORD> | default group | local | none | radius | tacacs | [two-factor pin-attempts <1-10> | pin-size <4-6> | pin-tries <1-10>]] | [authorization console | exec <WORD> | group | if-authenticated | local | none | radius | tacacs] | [group server radius <WORD> | tacacs <WORD>] | [local authentication attempts max-fail <1-65535>] | [password restriction min-group <1-4> | min-len <1-64>]}Use the no form of this command to negate a command or set its defaults.Syntax Description aaa

{[accounting dot1x default start-stop group <WORD> radius | tacacs] |

Records when users access the router to manage it and also when the router is re-booted. If using groups a pre-defined group must have been previously created.

[authentication attempts login <1-25> | [dot1x default group <WORD> | radius] | [login <WORD> | default group | local | none | radius | tacacs] | [login <WORD> | default group | local | none | radius | tacacs | [two-factor pin-attempts <1-10> | pin-size <4-6> | pin-tries <1-10>]] |

Specify the authentication parameters.

[authorization console | exec <WORD> | group | if-authenticated | local | none | radius | tacacs] |

Specify the authorization parameters.

[group server radius <WORD> | tacacs <WORD>] |

Specify a group server for Radius or TACACS if applicable.

[local authentication attempts max-fail <1-65535>] |

Specify how many times a local user can attempt to authenticate.

[password restriction min-group <1-4> | min-len <1-64>]}

Specify password restrictions.

Command Modes PerleRouter(config)#aaa

Usage GuidelinesSet up Authentication, Authorization and Accounting.

4


Global Configuration Mode

alarmalarm {[contact <1> [analog coefficient < -2147483.647 - 2147483.646> | offset < -2147483.647 - 2147483.6476 | units <LINE>] | description <LINE>] | [severity major | minor | none] [<2> analog coefficient < -2147483.647 - 2147483.646> | offset < -2147483.647 - 2147483.646> | units <LINE> | description <LINE> | [digital power-source dry | wet] | [trigger closed | open] | [output sink] | [pulse-counter mode pulses | transitions] | [trigger open | closed] | [severity major | minor | none] <A-B>] | [facility input-alarm <1-2> analog high < -2147483.647 - 2147483.6476 | low < -2147483.647 - 2147483.646> | lte-data-disc | notifies | [relay minor relay-mode energized] | syslog] | [standby-mode disable lte-data-disc | notifies | relay minor | syslog]] | [profile <WORD>] | [relay major | minor]}Use the no form of this command to negate a command or set its defaults.

ExamplesThis example shows you how to set authentication attempts to 10.PerleRouter(config-archive)#aaa authentication attempts 10<cr>

Related Commandsshow aaa

Syntax Description alarm

{[contact <1> [analog coefficient < -2147483.647 - 2147483.646> | offset < -2147483.647 - 2147483.646> | units <LINE>] | description <LINE>] | [severity major | minor | none] | [<2> analog coefficient < -2147483.647 - 2147483.646> | offset < -2147483.647- 2147483.646> | units <LINE> | description <LINE> | [digital power-source dry | wet] | [trigger closed | open] | [output sink] | [pulse-counter mode pulses | transitions] | [trigger open | closed] | [severity major | minor | none] <A-B>] |

Configure the DC-Power alarm contact settings <1-2>.Configure the AUX-IO alarm contact settings <A-B>.Severity Major – immediate action needed Minor – minor warning condition.Note: Relay minor not available on the IRG5410 model, relay minor only available if GPIO is configured as an output.



(config-alarm-profile){[alarm link-fault | not operating] | [notifies link-fault | not operating] | [relay minor | not operating] | [syslog link-fault | not operating]}Use the no form of this command to negate a command or set its defaults.

[facility input-alarm <1-2> analog high < -2147483.647 - 2147483.646> | low < -2147483.647 - 2147483.646> | lte-data-disc | notifies | [relay minor relay-mode energized] | syslog] | [standby-mode disable lte-data-disc | notifies | relay minor | syslog]] |

Configure external input alarm for DC-Power <1-2> or AUX-IO <A-B> alarm contact.Configure power standby-mode settings.

[profile <WORD>] | See (config-alarm-profile) for configuring parameters.

[relay major | minor]} Severity Major – immediate action needed Minor – minor warning condition

Command Modes PerleRouter(config)#alarm

Usage GuidelinesSet up environmental facilities.

ExamplesThis example enables Input A digital to trigger an alarm on digital open. PerleRouter#alarm facilty input a digital enable <cr>

Related Commandsshow alarm

Syntax Description (config-alarm-profile)#

{[alarm link-fault | not operating] | Specify the type of alarm to monitor for.

[notifies link-fault | not operating] | Sends a trap/notification to the configured SNMP host trap receivers on the triggering and clearing of the alarm.

[relay-major link-fault | not operating] | Energizes/de-energizes relay on the triggering and clearing of an alarm



archive

(config-archive){[maximum 1-14] | [path flash: | ftp: | http: | https: | scp: | sftp | tftp:] | [time-period 0-525600] | [update-sw check] |[write memory]}Use the no form of this command to negate a command or set its defaults.

[syslog link-fault not operating]} System messages will be logged to the configured logging destinations on the triggering and clearing of the alarm.

Command Modes PerleRouter(config-alarm-profile)#

Usage GuidelinesSets alarm profile parameters.

ExamplesThis example shows you how to configure alarm profile to monitor for link fault and send a syslog message tot the configured server.PerleRouter(config))#alarm profile test-alarm<cr>PerleRouter(config-alarm-profile)#alarm link-fault:<cr>PerleRouter(config-alarm-profile)#syslog link-fault<cr>

Related Commandsshow alarm

Syntax Description (config-archive)#

{[maximum 1-14] | Number of archives copies of the configurations to be keep in the archive list. Archive list can contain between 1-14 configurations.

[path flash: | ftp: | http: | https: | scp: | sftp | tftp:] |

Path must exist. Default path is the same as the no form of the command.

[time-period 0-525600] | Time period is the time in minutes to automatically save the running configuration to a archive file.

[update-sw check] | Check weekly for any software updates



[write memory]} Write memory enables the saving of the configuration to an archive file every time you copy running-config to start-up config

Command Default no pathmaximum 10no time-periodno write-memory

Command Modes PerleRouter#archive <cr>PerleRouter(config-archive)#

Usage GuidelinesThis is the full path to where the archive configuration files will be kept.flash:perle-image-name.img ftp:[[//username[:password]@location]/directory]/perle-image-name.img http://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img https://[[username:password]@][hostname | host-ip [directory] /perle-image-name.img | scp:[[username@location]/directory]/perle-image-name.img | sftp:[[//username[:password]@location]/directory]/perle-image-name.img | tftp:[[//location]/directory]/perle-image-name.img

ExamplesThis example shows you how to set up a archive path to be used with the write-memory command.PerleRouter(config-archive)#path flash:<cr>PerleRouter(config-archive)#exit<cr>PerleRouter(config)#exitPerleRouter#copy running-config startup-configDestination filename[startup-config]?<cr>5643 bytes copiedCopy in progress... 5643 bytes copied

If no file name is supplied by you, then your running config will be named with the current date and time. See below.PerleRouter#dir flash:Directory of flash:

130322 -rw- 5643 May 12 2016 14:17 -04:00 -May-12-14-17-50-1130321 -rw- 5643 May 12 2016 14:14 -04:00 -May-12-14-14-16-0

Related Commandsshow archive



arparp {<A.B.C.D> <H.H.H>}Use the no form of this command to negate a command or set its defaults.

bannerbanner {[<LINE>] || [login <LINE>] | [motd <LINE>] | [prompt-timeout]}Use the no form of this command to negate a command or set its defaults.

Syntax Description arp

{<A.B.C.D> <H.H.H>} Adds static arp entry to the arp table.

Command Modes PerleRouter(config)#arp

Usage GuidelinesAdds arp entry to arp table.

ExamplesAdd this arp to the arp table.PerleRouter(config)#arp 172.16.44.55 1234.1234.1234 <cr>

Related Commandsshow arp

Syntax Description banner

{[<LINE>] | c banner-text c (c is used as the delimiting character).

[login <LINE>] | Configure the prompt to be displayed before the login prompt.

[motd <LINE>] | Specify message of the day (motd) for your users to see on login.

[prompt-time <LINE>]} | This message will be displayed if the user does not login in based on time parameter under users.

Command Modes PerleRouter(config)#banner

Usage GuidelinesBanner applies to all consoles and vty sessions.



bridgebridge {[<1-9999> protocol ieee]}Use the no form of this command to negate a command or set its defaults.

cellular{[authentication chap | pap | none] | [data-apn access-point-name <WORD> cid <1-16> ] | [pdp-type ipv4 | ipv4ipv6 | ipv6] | [data-limit action-on limit disable-lte | none | alert-on-limit off | on | alert-percentage <0-99> | bill-day <1-31> | mb-size <0-100000>] | [firmware att | generic | other | sim-select | verizon] | password 0 | 7 | <LINE> | [pin 0 | 7 | <LINE>] | [roaming on | off] | [sim-slot 1 | 2] | [technology auto | lte | umts] | [username <WORD>]] |[sms [authentication method both | none | password | phone] | user <WORD>]} Use the no form of this command to negate enable secret.

ExamplesDisplay a message of the day at login.PerleRouter(config)#banner motd line<cr>Enter text message. End with the character ’l’Good morning crewlEnter configuration commands, one per line. End with CNTL/Z

Related Commands(config-line)#console(config-line)#vty

Syntax Description bridge

{[<1-9999> protocol ieee]} Set bridge to use protocol IEEE 802.3 for routing.

Command Modes PerleRouter(config)#bridge

Usage GuidelinesSet the bridge to use ieee protocol.

ExamplesPerleRouter(config)#bridge 1 protocol ieee<cr>

Syntax Description cellular



clockclock {[summer-time <name-of-timezone > date <1-31> <month-to-start > <hh:mm> <1-31> <month-to-end > < hh:mm > <1-1440-in-minutes> | recurring <1-4 > <first week> <last week>] | [timezone <name-of-time-zone> <-23 - 23 > <0-59>]}Use the no form of this command to negate a command or set its defaults.

{[authentication chap | pap | none] | [data-apn access-point-name <WORD> cid <1-16> ] | [pdp-type ipv4 | ipv4ipv6 |ipv6] | [data-limit action-on limit disable-lte | none | alert-on-limit off | on | alert-percentage <0-99> | bill-day <1-31> | mb-size <0-100000>] | [firmware att | generic | other | sim-select | verizon] | password 0 | 7 | <LINE> | [pin 0 | 7 | <LINE>] | [roaming on | off] | [sim-slot 1 | 2] | [technology auto | lte | umts] | [username <WORD>]] |[sms [authentication method both | none | password | phone] | user <WORD>]}

Specify a cellular profile name. Configure parameters for this cellular profile.

[sms [authentication method both | none | password | phone] | user <WORD>]}

Configure authentication parameters for sms.

Command Modes PerleRouter(config)#cellular

Usage GuidelinesUse this commands to setup your cellular profiles.

ExamplesThis example shows how to set up a cellular connection using a profile you created called test to browse the internet.PerleRouter>enablePerleRouter>configPerleRouter(config)#cellular profile test data-apn access-point-name ssid90 cid 10<cr>

PerleRouter(config)# ip nat inside source any interface cellular 0 overload

Related Commandsshow cellularcontroller

Syntax Description clock



configureconfigure {[confirm] | [revert now | timer <1-120> | idle] | [terminal lock | revert timer <1-200> idle]}Use the no form of this command to negate a command or set its defaults.

[summer-time <name-of-timezone > date <1-31> <month-to-start > <hh:mm> <1-31> <month-to-end > < hh:mm > <1-1440-in-minutes> | recurring <1-4 > <first week> <last week>] |

Name of the summer time zone followed by start/end dates -numeric value for the day of the month to start summer timezone 1-31, name of the month to start January, February, March, April, May, June, July, August, September, October, November, December., time to start in hours (24) and minutes, numeric value for the day of the month to end summer timezone 1-31, name of the month to end (January, February, March, April, May, June, July, August, September, October, November, December), time to end in hours(24), offset in minutes 1-1440

[timezone <name-of-time-zone> <-23 - 23 > <0-59>]}

Name of the timezone - Hours/minutes offset are going to be hours/minutes offset from utc (universal time clock).

Command Default clock timezone EST 5clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00 60

Command Modes PerleRouter(config)#

Usage GuidelinesConfigure time of day clock.

ExamplesThis example sets the clock 5 hours off from UTC.PerleRouter(config)#clock timezone ont-time-zone -5 <cr>

Related Commandsshow clock

Syntax Description configure

{[confirm] | Confirm replacement of running config with a new config file.



controller{[controller cellular <0-0>]}Use the no form of this command to negate controller cellular number.

(config-controller){[gnss antenna dedicated active | diversity] | enable | receiver-disabled] | [[lte alternative-profile <WORD>] | diversity | enable | [failover | connect-retires <1-100> | enable | revert-timer <1-1500> | signal-loss-timer <1-60> | signal threshold <-150-0>] | primary-profile <WORD> | [radio-disable] | power-down]}Use the no form of this command to negate a command or set its defaults.

[revert now | timer <1-120> idle] | Now – cancel the rollback timer and revert now.

Timer – reset the configuration time to a new value.

[terminal lock | revert timer <1-200> idle]}

Lock the configuration mode Revert – idle time to wait for

confirmation.

Command Default terminal


Usage GuidelinesSets configure options.

ExamplesThis example set terminal for configure mode.PerleRouter(config)#configure<cr>Configuring from terminal.Enter configuration commands, one per line. End iwth CNTL /Z

Syntax Description controller

{[controller cellular <0-0>]} Sets for cellular 0.

Command Modes PerleRouter(config)#controller

Usage GuidelinesSets for cellular 0, enters sub-menu mode.

ExamplesThis example shows how to select controller cellular 0 to configure parameters.PerleRouter(config)#controller cellular 0<cr>

Syntax Description



cryptocrypto {[[ipsec client <WORD> |enable | esp-group <WORD> | ike-group <WORD> | import ipsec.conf terminal | url flash: | ftp: | https: | https: | scp: | sftp: | tftp:] | l2tp | nat-network <A.B.C.D/16> | nat-traversal] |[key export rsa public | terminal | des <WORD>| url flash: | ftp: | http: | https: | scp: | sftp: | tftp:] | [generate rsa modulus <1024-4096>] | [import client rsa pem | pkcs12 terminal password <LINE> | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | ssh-host rsa terminal <LINE> | [zeroize rsa]] | [[openvpn connection <WORD>] | [enable] | [generate secret <NAME>] | [import ca <NAME> | cert <NAME> | dh <WORD> | key <NAME> | secret <NAME> | template <NAME> | terminal | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | zeroize ca <NAME> | cert <NAME> key <NAME>] | [cert <NAME> terminal | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | [dh <WORD>] | [key <NAME> terminal | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | secret <NAME>] | [template <NAME>]] |

{[gnss antenna dedicated active] | enable | receiver -disabled] |

Specify to enable: the gnss feature set antenna to active set receiver-disable to reset the

modem. (you will lose your lte connection for 40 seconds, then your lte connection will recover.

[[lte alternative-profile <WORD>] | diversity | enable | [failover | connect-retires <1-100> | enable | revert-timer <1-1500> | signal-loss-timer <1-60> | signal threshold <-150-0>] | primary-profile <WORD> | [radio-disable]]

Enable, configure and disable features on the lte (cellular) interface.

[power-down]} Power down the cellular module.

Command Modes PerleRoute(config-controller)#

Usage GuidelinesConfiguration parameters found under the config-controller option to configure GNSS and cellular (LTE) capabilities on your router.

ExamplesSets GNSS to enabled.PerleRouter(config-controller)# gnss enable <cr>GNSS is enabled.

Related Commandsshow cellular



[pki import client pem | pkcs12 terminal password <LINE> | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | https pem | pkcs12 terminal password <LINE> url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | https pem | pkcs12 terminal password <LINE> | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | [https pem | pkcs12 terminal password <LINE> url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | openvpn ca <NAME> | cert <NAME> | key <NAME>] | server pem | pkcs12 erminal password <LINE> url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | [zeroize https openvpn ca <NAME> cert <NAME> key<NAME>] | [ssl algorithm encryption suite-b-tls | tls-1.2]}Syntax Description crypto

[[ipsec client <WORD> |enable | esp-group <WORD> | ike-group <WORD> | import ipsec.conf terminal | url flash: | ftp: | https: | https: | scp: | sftp: | tftp:] | l2tp | nat-network <A.B.C.D/16> | nat-traversal] |

Configure IPSEC client.

[key export rsa public | terminal | url flash: | ftp: | http: | https: | scp: | sftp: | tftp:] | [generate rsa modulus <1024-4096>] | [import client rsa pem | pkcs12 terminal password <LINE> | url flash: | ftp: | http: | https | scp: | sftp: | tftp: |ssh-host rsa terminal | url | flash: | ftp: | http: | https | scp: | sftp: | tftp:] | [zeroize rsa]] |

Key and Certificates.

[[openvpn connection <WORD>] | [enable] | [generate secret <NAME>] | [import ca <NAME> | cert <NAME> | dh <WORD> | key <NAME> | secret <NAME> | template <NAME> | terminal | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | zeroize ca <NAME> | cert <NAME> key <NAME>] |

OpenVPN configuration.



(config-client){[authentication identify <WORD> | pre-shared-key <WORD> | remote-identity <WORD> | x509 <LINE> | trustpoint <CA-FILE>] | [connection-type disable | initiate | respond] | [ike-group <WORD>] | [local-address <A.B.C.D> | <X:X:X:X::X:X> | any] | [tunnel<1-429467295>] |esp-group <WORD> | local-address <A.B.C.D/N | X:X:X:X::X/N> | remote-address <A.B.C.D/N | X:X:X:X::X/N>]}Use the no form of this command to negate a command or set its defaults.

[pki import client pem | pkcs12 terminal password <LINE> | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | https pem | pkcs12 terminal password <LINE> url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | https pem | pkcs12 terminal password <LINE> | url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | [https pem | pkcs12 terminal password <LINE> url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | openvpn ca <NAME> | cert <NAME> | key <NAME>] | server pem | pkcs12 erminal password <LINE> url flash: | ftp: | http: | https | scp: | sftp: | tftp:] | [zeroize https openvpn ca <NAME> cert <NAME> key<NAME> | server <WORD>] |

Keys and Certifications.

[ssl algorithm encryption suite-b-tls | tls-1.2]} Set SSL encryption method.

Command Modes PerleRouter(config)#crypto

Usage GuidelinesSet encryption operations.

ExamplesSets IPSEC enable or disable.PerleRouter(config)# crypto ipsec enable<cr>PerleRouter(config)# no crypto ipsec enable<cr>

Related Commandsshow crypto

Syntax Description (config-client)



(config-connection){[ca <WORD>] | [cert <NAME>] | [cipher aes-128-cbc | aes-128-gcm | aes-192-cbc | aes-192-gcm | aes-256-cbc | aes-256-gcm | bf-cbc | camellia-128-cbc | camellia-192-cbc | camellia-256-cbc | cast5-cbc | des-cbc | des-ede-cbc | des-ede3-cbc | des-cbc | rc2-40-cbc | rc2-64-cbc | rc2-cbc | seed-cbc] | [dev <0-999>] | [dh <WORD>] | [ifconfig <A.B.C.D> <WORD> <A.B.C.D><WORD>] | [keepalive <1-65535> <1-65535>] |[key <WORD>] |

{[authentication identify <WORD> | pre-shared-key <WORD> | remote-identity <WORD> | x509 <LINE> | trustpoint <CA-FILE>] |

Sets the local authentication identity.

[connection-type disable | initiate | respond] | Set connection type: initiate respond disable

[ike-group <WORD>] | Sets IPSEC IKE configuration.

[local-address <A.B.C.D> | <X:X:X:X::X:X> | any] |

Sets local IPSEC interface.

[tunnel<1-429467295> | esp-group <WORD> | local-address <A.B.C.D/N | X:X:X:X::X/N> | remote-address <A.B.C.D/N | X:X:X:X::X/N>]}

Sets client tunnel definitions.

Command Modes PerleRoute(config-client)#

Usage GuidelinesConfigure IPSEC.

ExamplesSet IPSEC client type to initiate.PerleRouter(config-client)# connection-type initiate <cr>




[lport <1-65535>] | [persist-tun] | [port <1-65535>] | [pull] | [remote <A.B.C.D> <WORD> <X:X:X:X::X> <1-65535> | tcp | udp] |[rport <1-65535>] | [secret <NAME>] | [server <A.B.C.D> <A.B.C.D> no pool] | [server-ipv6 <X:X:X:X::X>] |[template <WORD>] | [tls-client] | [tls-server] | [verb <0-11>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-connection)

{[ca <WORD>] | Sets PKI CA trustpoint.

[cert <NAME>] | Sets PKI certificate.

[cipher aes-128-cbc | aes-128-gcm | aes-192-cbc | aes-192-gcm | aes-256-cbc | aes-256-gcm | bf-cbc | camellia-128-cbc | camellia-192-cbc | camellia-256-cbc | cast5-cbc | des-cbc | des-ede-cbc | des-ede3-cbc | des-cbc | rc2-40-cbc | rc2-64-cbc | rc2-cbc | seed-cbc] |

Set cipher to use in this connection.

[dev <0-999>] | Set the OpenVPN interface number.

[dh <WORD>] | Sets Diffie-Hellman parameters.

[ifconfig <A.B.C.D> <WORD> <A.B.C.D> <WORD>] |

[keepalive <1-65535> <1-65535>] | Sets the keepalive interval (in seconds) and the keepalive timeout (in seconds).

[key <WORD>] | Sets PKI private key.

[lport <1-65535>] | Set the port to use on the local side.default is 1194

[persist-tun] | Keep tun device between restarts.

[port <1-65535>] | Sets the port to use on both sides of the connection.

[pull] | Pull the configuration from the server.



(config-esp)#{[compression] | [lifetime <30-86400>] | [mode transport | tunnel] | [pfs] | [proposal <1-65535> [encryption 3des | aes128 | aes128gcm182 | aes256 | aes256gcm128 | chacha20poly1305] | [hash md5 | sha1 | sha256 | sha384 | sha512]]}Use the no form of this command to negate a command or set its defaults.

[remote <A.B.C.D> <WORD> <X:X:X:X::X> <1-65535> | tcp | udp] |

Set the remote host for connection.

[rport <1-65535>] | Sets the port to use on the remote side.

[secret <NAME>] | Set the Pre-Shared secret key.

[server <A.B.C.D> <A.B.C.D> no pool] |

Sets OpenVPN IPv4 server parameters.

[server-ipv6 <X:X:X:X::X>] | Sets OpenVPN IPv6 server parameters.

[template <WORD>] | Set connection template.

[tls-client] | Set to act as a TLS client.

[tls-server] | Set to act as a TLS server.

[verb <0-11>]} Sets verbosity level. (debug)

Command Modes PerleRoute(config-client)#

Usage GuidelinesConfigure IPSEC.

ExamplesSet cipher for IPSEC connection.PerleRouter(config-connection)# cipher aes-128-cbc<cr>


Syntax Description (config-esp)#

{[compression] | Sets compression for IPsec connection.

[lifetime <30-86400>] | Sets keepalive lifetime.



(config-ike)#{[aggressive-mode] |[dpd action clear | hold | restart] | [dpd action clear | hold | restart | interval <2-86400> | timeout <10-86400>] | [ike-version ike | ikev1 | ikev2] | [lifetime <30-86400>] | [proposal [dh-group 2 | 5 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26] | [encryption 3des | aes128 | aes128gcm128 | aes256 | aes256gcm256 | chacha20poly1305] | [hash md5 | sha1 | sha256 | sha384 | sha512]]}Use the no form of this command to negate a command or set its defaults.

[mode transport | tunnel] | Sets the tunnel mode.Transport mode – payload encrypted; headers clearTransport mode – both headers and payload encrypted.

[pfs] | Sets Perfect Forwarding Secrecy.

[proposal <1-65535> [encryption 3des | aes128 | aes128gcm182 | aes256 | aes256gcm128 | chacha20poly1305] | [hash md5 | sha1 | sha256 | sha384 | sha512]]}

Sets IKE/ESP proposal.

Command Modes PerleRoute(config-esp)#

Usage GuidelinesSets IPsec configuration.

ExamplesSet esp group mode to transport.PerleRouter(config-esp)# mode transport <cr>


Syntax Description (config-ike)#

{[aggressive-mode] | Sets IKEv1 negotiation mode.

[dpd action clear | hold | restart] | Sets dead peer detection.

[ike-version ike | ikev1 | ikev2] | Select IKE version to use.

[lifetime <30-86400>] | Sets livetime keepalive.



(config-12tp)#{[client-ip-pool <A.B.C.D> <A.B.C.D>] | [dns-server <1-2> <A.B.C.D>] | [outside-address <A.B.C.D>] | [pre-shared-key <WORD>] | [username <WORD> password <WORD>]}Use the no form of this command to negate a command or set its defaults.

[proposal [dh-group 2 | 5 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26] | [encryption 3des | aes128 | aes128gcm128 | aes256 | aes256gcm256 | chacha20poly1305] | [hash md5 | sha1 | sha256 | sha384 | sha512]]}

Sets IKE/ESP proposal.

Command Modes PerleRoute(config-ike)#

Usage GuidelinesSets IKE configuration.

ExamplesSet dead peer detection to restart.PerleRouter(config-ike)# dpd action restart <cr>


Syntax Description (config-l2tp)#

{[client-ip-pool <A.B.C.D> <A.B.C.D>] | Sets L2TP client ip pool addresses.

[dns-server <1-2> <A.B.C.D>] | Sets L2TP DNS servers.

[outside-address <A.B.C.D>] | Sets the L2TP remote address.

[pre-shared-key <WORD>] | Use the given pre-shared secret.

[username <WORD> password <WORD>]} Configure L2TP user name and password.

Command Modes PerleRoute(config-l2tp)#

Usage GuidelinesUse these commands to setup parameters for L2TP connections.



dot11dot11 {[ssid <LINE>]}Use the no form of this command to negate a command or set its defaults.

(config-ssid)#{[authentication key-management wpa version <1 | 2 |both> | open eap <WORD>] | [client-isolation <1 | 2 | both>] | [encryption key size 108bit | 128bit | 40bit | 0 | 7 | <hex-string>] | mode cipher ccmp | tkip] | [guest-mode] | [max-associations <1-2007>] | [mgmt-frame-protection disable | mandatory | optional] | [wpa-psk ascii 0 <LINE> | 7 <WORD> | <LINE>]}Use the no form of this command to negate a command or set its defaults.

ExamplesSet username and password for L2TP connection.PerleRouter(config-l2tp)# username lyn password test <cr>


Syntax Description dot11

{[ssid <LINE>]} Set the name for an wireless profile. (Radio service ID)

Command Modes PerleRouter(config)#dot11

Usage GuidelinesSpecify a ssid name for a wireless channel profile.

ExamplesThis example will set the ssid name to Testfloor1.PerleRouter(config)#dot11 ssid testfloor1<cr>

Related Commandsshow dot11

Syntax Description (config-ssid)#



dot1x dot1x {[credential <profile-name>] | [logging] | [system-auth-control] | [test timeout <1-65535>]}Use the no form of this command to negate a command or set its defaults.

{[authentication key-management wpa version <1 | 2 |both> | open eap <WORD>] |

Sets the authentication method.

[client-isolation <1 | 2 | both>] | Prevents low level bridging of frames between associated clients.

[encryption key size <108 | 128 | 40> < 0 hex-string> | 7 hex-string> | hex-string> | mode cipher ccmp tkip | wep] |

Configure dot11 encryption parameters.

[guest-mode] | Set guest mode.

[max-associations <1-2007>] | Set max associations for ssid.

[mgmt-frame-protection disable | mandatory | optional] |

Set management frame protection.

[wpa-psk ascii 0 <LINE> | 7 <WORD> | <LINE>]}

Configure Wi-Fi protected access pre-shared key.

Command Modes PerleRouter(config-ssid)#

Usage GuidelinesSets parameters for for IEE802.11 WLAN.

ExamplesSet authentication method to allow wpa clients,PerleRouter(config-ssid)# authentication key-management wpa version both<cr>

Related Commandsdot11show dot11

Syntax Description dot1x

{[credential <profile-name>] | Create a dot1x credential profile.

[logging] | Log dot1x messages



(config-dot1x-creden)#{[password < 0 > <LINE> | <7 > <LINE>] | [username <name>]}Use the no form of this command to negate a command or set its defaults.

[system-auth-control] | You must enable dot1x system-auth-control if you want to use 802.1x access controls on any port on the router. You can then use the port control command on each specific port on which you want 802.1x access controls to be used.

[test timeout <1-65535>]} The readiness check is typically used before 802.1x is enabled on the router. Set the timeout for EAPOL devices that don’t respond in the specified time frame.


Usage GuidelinesThe 802.1x readiness check monitors 802.1x activity on all the router ports and displays information about the devices connected to the ports that support 802.1x. You can use this feature to determine if the devices connected to the router ports are 802.1x-capable

Examples This example will create a credential profile called testcrd, then you need to set dotx1 authentication on ethernet interface to multihost.Note: You must enable system -auth-control if you want to authenticate dot1x devices.PerleRouter(config)#dot1x credential testcred<cr>PerleRouter(config)#interface ethernet 1 <cr>PerleRouter(config-if)#authentication mult-auth <cr>

Related Commandsdot1x(config-dot1x-creden)show eee

Syntax Description (config-dot1x-creden)#{[password < 0 > <LINE> | <7> <LINE> | hex-string>] |

0 - specifies that an unencrypted password will follow.7- specifies that an hidden password will follow.

[username <name>]} Specify a username.



eapeap {[profile <WORD>]}Use the no form of this command to negate a command or set its defaults.

(config-eap-profile)#{[method gtc | leap | md5 | mschapv2 | peap | tls | [ttls chap |eap-gtc |eap-md5 | eap-mschapv2 | mschap | mschapv2 | pap]] | [pki-trustpoint <WORD>]}Use the no form of this command to negate a command or set its defaults.

Command Modes PerleRouter(config)#dot1x credential your-namePerleRouter(config-dot1x-creden)#

Usage GuidelinesSets dot1x credentials.

ExamplesThis example will set the set the password for profile name testing to an encrypted password.PerleRouter(config)#dot1x credential testing<cr>PerleRouter(config-dot1x-creden)# password 7 DB0UeI1lynwOKW/j1 <cr>

Related Commandsdot1xshow eee

Syntax Description eap

{[profile <WORD>]} Configure EAP profiles.


Usage GuidelinesUse this command to create EAP profiles.


Syntax Description (config-eap-profile)#

{[method gtc | leap | md5 | mschapv2 | peap | tls | [ttls chap |eap-gtc |eap-md5 | eap-mschapv2 | mschap | mschapv2 | pap]] |

Select the method of encapsulating sensitive information such as passwords to be authenticated from the router.



emailemail {[enabled] | [encryption <none | ssl | tls>] | [from <WORD>] | [recipient <WORD>] | [smtp-server <WORD> | <A.B.C.D> | <X:X:X:X::X:X>] | [username <WORD> | password <0 LINE> | 7 <WORD> | LINE>] | [validate-certificate]}Use the no form of this command to negate enable secret.

[pki-trustpoint <WORD>]} The certificate authority you trust. This is a self-signed certificate that you create here eap


Usage GuidelinesEAP is simply an authentication framework that defines the transport and usage of identity credentials. EAP encapsulates the usernames, passwords, certificates, and tokens, etc. that a client is sending for purposes of authentication.A trustpoint is basically a certificate authority who you trust, and it is called a trustpoint because you implicitly trust this authority. The idea is that by trusting a given self-signed certificate, then your PKI system will automatically trust any other certificates signed with that trusted certificateYou need to create an eap profile before you can set this parameters.

ExamplesPerleRouter(config)#method gtc <cr>

Related Commandsdot1x

Syntax Description email

{[enabled] | Enable the email feature.

{[encryption <none | ssl | tls>] | Use selected encryption.

[from <WORD>] | Format is [email protected]

[recipient <WORD>] | Format is [email protected]



enableenable {[secret <0 | 5 | LINE>]}Use the no form of this command to negate enable secret.

[smtp-server <WORD> | <A.B.C.D> | <X:X:X:X::X:X>] |

SMNP server to use for mail requests.

[username <WORD> | password <0 <LINE> | 7 <WORD> | LINE>] | [

Username for server authentication.

password <0 <LINE> | 7 <WORD> | LINE>] |

Password for server authentication.

[validate-certificate]} Valid email certificate.


Usage GuidelinesSets email notification parameters.

ExamplesThis example shows how enable the email feature and to specify the smnp server for email requests.PerleRouter(config)#email enabled <cr>PerleRouter(config)#email snmp-server 172.16.55.77 <cr>

Related Commandsshow email

Syntax Description enable

{[secret <0 | 5 | LINE>]} 0 – Specifies an unencrypted password to follow5 – Specifies a encrypted password to followLINE – the unencrypted (cleartext) secret

Command Modes PerleRouter(config)#enable

Usage GuidelinesThis is the password to be used to enable privilege mode.

ExamplesThis example shows how to set a password for enable mode.PerleRouter(config)#enable secret testsecret<cr>



gnssgnss {[maxcon <1-64>] | [profile <1-16>] | [sid <WORD>] | [stream-output-rate <1-10>] | [streams client <1-64> | server <1-64> | tty <1-1> | usb] | [system galileo | glonass | gps] | [vid <0-9999>]}Use the no form of this command to negate a command or set its defaults.


Syntax Description gnss

{[maxcon <1-64>] | Setup maximum connections.Default is 10

[profile <1-16>] | Sets profile number.

[sid <WORD>] | Setup system ID.

[stream-output-rate <1-10>] | Change data acquisition frequency.

[streams client <1-64> | server <1-64> | tty <1-1> | usb] |

Setup GNSS streams.tty <1-1> stream serial number.usb – config stream to usb

[system galileo | glonass | gps] | Enable GNSS system streaming.

vid <0 -9999>]} Enter the vehicle ID.

Command Modes PerleRouter#(config)#gnss

Usage GuidelinesSet up GNSS configuration.

ExamplesThis example will show you how to select gnss profile number.PerleRouter(config)# gnss profile 10 <cr>

Related Commandsshow gnss



(config-gnss-profile){[language csv cvs-header | gga | gll | rmc | vtg] |[movdis <0-3600>] | [movint <1-3600>] | [movres <1-3600>] | [name <WORD> | [staint <1-3600>]} Use the no form of this command to negate a command or set its defaults.

(config-gnss-client)#{[client-name <WORD>] | [port <1-65535>] | [profile <1-16>] | [protocol tcp | udp] | [schedule end-hour <0-23> | end-minute <0-59> | start-hour <0-23> | start-minute <0-59>] | [server -name <WORD>] |

Syntax Description (config-gnss-profile)

{[language [csv cvs-header | gga | gll | rmc | vtg] |

Setup output language.

[movdis <0-3600>] | Setup moving distance interval.

[movint <1-3600>] | Setup moving time interval.

[movres <1-3600>] | Setup movement resumption event.

[name <WORD> | Setup profile name.

[staint <1-3600>]} Setup stationary time interval.

Command Modes PerleRouter#(config-gnss-profile)#

Usage GuidelinesSet up GNSS profile parameters.

ExamplesThis example will specific a name for the select profile number.PerleRouter# gnss profile delivery-truck <cr>




[single-sentence] | [stored-sentence <1-999>]} Use the no form of this command to negate a command or set its defaults.

(config-gnss-server)#{[name <WORD>] | [port <1-65535>] | [profile <1-16>] | [single-sentence]}

Syntax Description (config-gnss-client)#

{[client-name <WORD>] | Name of GNSS stream client.

[port <1-65535>] | Port of the server to receive data.

[profile <1-16>] | Profile used by the client.

[protocol tcp | udp] | Protocol that the client will use.

[schedule end-hour <0-23> | end-minute <0-59> | start-hour <0-23> | start-minute <0-59>] |

Set schedule configuration.

[server -name <WORD>] | The server DNS name or IPv4/IPv6 address.

[single-sentence] | Single sentence packet mode.

[stored-sentence <1-999>]} The maximum number of sentences to be saved if the TCP connection is lost.

Command Modes PerleRouter#(config)gnss streams client 10 <cr> PerleRouter(config-gnss-client)#

Usage GuidelinesSpecify client gnss parameters.

ExamplesThis example will specify protocol tcp for this client.PerleRouter(config-gnss-client)# protocol tcp<cr>




Use the no form of this command to negate a command or set its defaults.

hostnamehostname {[<WORD>]}Use the no form of this command to negate a command or set its defaults.

Syntax Description (config-gnss-server)#

[name <WORD>] | Name of the GNSS Stream server.

[port <1-65535>] | TCP port number to use.

[profile <1-16>] | Profile used by the server.

[single-sentence]} Setup single sentence packet mode.

Command Modes PerleRouter#(config)gnss streams server 5 <cr> PerleRouter(config-gnss-server)#

Usage GuidelinesSpecify server gnss parameters.

ExamplesThis example will specify the name of the gnss stream server.PerleRouter(config-gnss-server)#name GNSS-ROAD<cr>


Syntax Description hostname

{[<WORD>]} Type in the name you want to call your router.

Command Modes PerleRouter(config)#hostname

Usage GuidelinesSet the hostname on the router.

ExamplesThis example will set the hostname to TestHost.PerleRouter(config)#hostname TestHost<cr>TestHost#



interfaceinterface {[bvi <1-9999>] | [cellular <0-0>] | [dialer <0-15>] | [dot11radio <0-0>] | [ethernet <1-4>] | [loopback] | [openvpn-tunnel <0-999> tap | tun] | [tunnel <0-999>] | [range ethernet <1> , - <4>]} Use the no form of this command to negate a command or set its defaults.

Related Commandsshow hosts

Syntax Description interface

{[bvi <1-9999>] | Specify the bridge interface you want to configure.

[cellular <0-0>] | Specify the cellular interface you want to configure.

[dialer <0-15>] | Specify the dialer interface you want to configure.

[dot11radio <0-0>] | Specify the wireless interface you want to configure

[ethernet <1-4>] | Specify the Ethernet interface you want to configure.

[loopback] | Specify the loopback interface you want to configure.

[openvpn-tunnel <0-999> tap | tun] | Specify a openvpn tunnel you want to configure.

[tunnel <0-999>] | Specify the tunnel you want to configure.

[range ethernet <1> , - <5>] Specify a Ethernet range you want to configure.

Command Modes PerleRouter(config)#interface ethernet 1PerleRouter(config-if)#



(config-if)# bvi {[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address <X:X:X:X::X/<0-128> | dhcp | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime <0> | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [mtu <68-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan |trusted | wan] | [shutdown] | [zone-member security <WORD>]}

Usage GuidelinesSet interface command.

ExamplesThis example will allow you to config parameters for Ethernet interface 1.PerleRouter(config)# interface ethernet 1<cr>

Related Commands interface



Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# bvi

{[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] |

Customize arp messages for this interface.

[description <LINE>] | Type in a description for this interface.

[ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] |

Specify an IP parameters.

[ipsec restrict] | Do not allow ipsec to run on this interface.



[ipv6 address <X:X:X:X::X/<0-128> | dhcp | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime 0 | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |

Enable IPv6 on this interface.

[mtu <68-1500>] | Specify the mtu (maximum transmit unit) for this interface.

[ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] |

Configure for this interface.

[role lan |trusted | wan] | Select the role for this interface.

[shutdown] | Shutdown this interface.

[zone-member security <WORD>]} This interface belongs to zone security name.

Command Modes PerleRouter(config)#interfacePerleRouter(config-if)#

Usage GuidelinesSets option parameters for bridge.



(config-if)# cellular{[alarm profile <WORD>] | [description <LINE>] | [idle-time <LINE>] | [ip ddns service dyndns | update <WORD> | use-web skip | url <WORD> | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict |[ipv6 address <X:X:X:X::X/<0-128> | dhcp | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime 0 | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [monitor-traffic both | receive | transmit] | [mtu <64-9000>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [on-demand] | [start-connected] | [role lan/trusted/wan] | [zone-member security <WORD>]}

ExamplesThis example enables an IP address on bvi 10.PerleRouter>enable<cr>PerleRouter#config<cr>PerleRouter#interface bvi 10<cr>PerleRouter(config-if)#ip address 172.16.113.45 255.255.0.0<cr>




Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# cellular

{[alarm profile <WORD>] | Use this alarm profile for this interface.

[description <LINE>] | Description for this interface.

[idle-time <LINE>] | Set time to drop the on demand connection.

[ip ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |

Configure ddns services to use for this interface.

[ipsec restrict] | Allow no IPsec on this interface.


Configure IPv6 options for this interface.

[monitor-traffic both | receive | transmit]] | Monitor the traffic for on demand feature.

[mtu <64-9000>] | Size of the mtu (max transmission unit) for this interface.



(config-if)# dialer{[dialer description <LINE>] | [encapsulation ppp] | [ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |[ipsec restrict] | [[ipv6 firewall in | out | local <WORD> | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval

[ntp broadcast client | destination <A.B.C.D> | key <1-65534> | minpoll <4-17> | version <1-4>] | [disable] | [multicast < A.B.C.D> | < X:X:X:X::X:X> | client< A.B.C.D> | < X:X:X:X::X:X> | key<1-65534> | minpoll | version <1-4>] |

Configure NTP options for this interface.

[on-demand] | On demand feature brings up the interface when there is data to be sent or received only.

[start-connected] | Establish LTE data connection after reload or power up.


[zone-member security <WORD>]} This interface is member of this security zone.

Command Modes PerleRouter(config-if)#

Usage GuidelinesSetup cellular profile parameters.

ExamplesThis example will start cellular connection after the router reboots.PerleRouter#interface cellular 0<cr>PerleRouter(config-if)#start-connected<cr>

Related Commands cellularcontrollershow cellular



<1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [ppp access-concentrator <LINE> | chap hostname <WORD> | password 0 <LINE> | 7 <WORD> | <LINE> | timeout idle <1-4294967>] | [role lan | trusted | wan] | [shutdown] | [zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# dialer

{[dialer description <LINE>] | Specify a name for this interface.

[encapsulation ppp] | Set encapsulation type.

[ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |

Sets IP configuration parameters for this interface.

[ipsec restrict] | Enable or disable IPv6.



[ipv6 firewall in | out | local <WORD> | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |

Set IPv6 sub commands.

[mtu <64-1500>] | Sets Maximum transmission unit size.


Configure NTP (Network Time Protocol).

[ppp access-concentrator <LINE> | chap hostname <WORD> | password 0 <LINE> | 7 <WORD> | <LINE> | timeout idle <1-4294967>] |

Configure Point to Point protocol.

[role lan | trusted | wan] | Select the role for this interface.


[zone-member security <WORD>]} This interface is a member of zone security.


Usage GuidelinesSets parameters for dailer interface.

ExamplesThis example will set the role for this interface.PerleRouter(config-if)role wan<cr>

Related Commands show interfaces



(config-if)# dot11Radio{[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [bridge-group <1-9999>] | [channel <1-11>] | [description <WORD>] |[dot11ac antenna-pattern-fixed | center-channel-frequency <34-173> | channel-width vht40 | vht80] | ldpc | max-mpdu <11454> <7991> | max-mpdu-exp <1-7> | require-vht | [short-gi <20 | 40 | 80>] | stbc rx-stbc rx-stbc-1 | tx-stbc] | [dot11n 40mhz-incapable | a-msdu <7935> | auto-power-save | channel-width ht40+ | ht40- | dsss-cck-40mhz | ldpc | require-ht | short-gi <20 | 40> | stbc rx-stbc rx-stbc-1 | tx-stbc] | [ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address dhcp | firewall in | out | local <WORD> | [ospf cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535>] | [mtu <256-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [radio-mode <0-1>] | [role lan | trusted | wan] | [shutdown] | [ssid <LINE> dot11radio <1-4>] | [station-role non-root | root] | [world mode dot11d country-code <WORD>] | [zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# Dot11Radio


Sets the arp options.

[bridge-group <1-9999>] | Sets transparent bridging interface parameters.

[channel <1-11>] | Sets the radio frequency.

[description <LINE>] | Specify a description for this interface.



(config-if-ssid)# {[bridge-group <1-9999>] | [description <WORD>] | [ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |



[radio-mode <0-1>] | Select 0 for 2.4Ghz and 1 for 5Ghz.



[ssid <LINE> dot11radio <1-4>] Configure radio service set parameters.

[station-role non-root | root] | Specify role of the radio.

[world mode dot11d country-code <WORD>] |

Specify an ISO 3166-1 Alpha code.



Usage GuidelinesSetup options for Dot11Radio.

ExamplesThis example will setup this interface to use DHCP.PerleRouter(config)ip address dhcp<cr>




[ipsec restrict] | [ipv6 address dhcp | enable | firewall in | out | local <WORD> | [nd dad attempts <0-600>] | managed-config-flag-other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4292967294> | infinite] | [ra dns server <X:X:X:X::X>] | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350>] | [lifetime <0> <4-9000>] | [suppress] | reachable-time <0-3600000> | retransmission-time <0-3600000> | [router-preference high | low | medium]] |[mtu <256-1500>] |[ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if-ssid)#

{[bridge-group <1-9999>] | Sets transparent bridging interface parameters.

[description <LINE>] |

[ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>]





(config-if) ethernet{[alarm profile <WORD>] | [arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] |

[ipv6 address dhcp | enable | firewall in | out | local <WORD> | [nd dad attempts <0-600>] | managed-config-flag-other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4292967294> | infinite] | [ra dns server <X:X:X:X::X>] | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350>] | [lifetime <0> <4-9000>] | [suppress] | reachable-time <0-3600000> | retransmission-time <0-3600000> | [router-preference high | low | medium]] |








Command Modes PerleRouter(config-if-ssid)#

Usage GuidelinesConfigure ssid submenu commands.

ExamplesThis example will restrict IPsec to this interface. All interfaces are used if no restrictions are in place.PerleRouter(config-if-ssid)ipsec restrict<cr>

Related Commands show ip interfaces



[authentication [host-mode] | [multi-auth] | [multi-host] | single-host] | [periodic] | [port-control [auto] | [forced-authorized] | force-unauthorized] | [timer reauthenticate <1-65535> | restart <1-65535>] | [bridge-group <1-9999>] |[description <LINE>] | [dot1x credential <WORD> | max-auth-req <1-10> | max-req <1-10> | [[pae authenticator | suppliant] | eap profile <WORD> [pae profile <WORD>] | [timeout quiet-period <1-65535> | supp-period <1-65535> | tx-period <1-65535>] | [duplex auto | half | full] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address <X:X:X:X::X/<0-128> | autoconfig | dhcp] enable | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime 0 | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium]] | [mab eap] | [mtu <64-9000>] | [ntp broadcast client | destination<A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast < A.B.C.D> <X:X:X:X::X:X> | client < A.B.C.D> < X:X:X:X::X:X> | key <1-65534> | minpoll | version <1-4>] | [power efficient-ethernet auto] | [role lan | trusted | wan] | [shutdown] | [speed 10 |100 |1000 |auto] |[zone-member security <WORD>]} Use the no form of this command to negate a command or set its defaults.ipSyntax Description (config-if)


[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] |




[authentication [host-mode] | [multi-auth] | [multi-host] | single-host] | [periodic] | [port-control [auto] | [forced-authorized] | force-unauthorized] | [timer reauthenticate <1-65535> | restart <1-65535>] |

Select authentication mode to use on this interface when using Dot1x devices.

[bridge-group <1-9999>] | Add this interface to the specified bridge-group.


[dot1x credential <WORD> | max-auth-req <1-10> | max-req <1-10> | [[pae authenticator | suppliant] | eap profile <WORD> [pae profile <WORD>] | [timeout quiet-period <1-65535> | supp-period <1-65535> | tx-period <1-65535>] |

Sets the Port Access Entity (PAE) type.

Supplicant—The interface acts only as a supplicant and does not respond to messages that are meant for an authenticator.Authenticator—The interface acts only as an authenticator and does not respond to any messages meant for a supplicant.Both—The interface behaves both as a supplicant and as an authenticator and thus does respond to all dot1x messages.

[duplex auto | half | full] | Select duplex for this interface. In most cases this parameter should be left at auto.



(config-if)# openVvpn-tunnel{[bridge-group <1-9999>] | [description <LINE>] | [ip ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | [[firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point] | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] | [ipv6 | enable | firewall in | local |out | nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | [ospf | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority<0-255> | retransmit-interval <1-65535> | transmit-delay

[ntp broadcast client | destination<A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast < A.B.C.D> <X:X:X:X::X:X> | client < A.B.C.D> < X:X:X:X::X:X> | key <1-65534> | minpoll | version <1-4>] |


[power efficient-ethernet auto] | Configure interface power settings.

[role lan |trusted | wan] | Set the role for this interface.


[speed 10 |100 |1000 |auto]} Set the speed for this interface.



Usage GuidelinesSet up Ethernet parameters for this interface.

ExamplesThis example will set the speed for this interface to 100.PerleRouter(config-if)# speed 100<cr>




<1-65535>] | [policy route-policy <WORD>] | [rip authentication key-chain | mode <WORD> | split-horizon disabled | poisoned-reverse] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [zone-member security <WORD>]} Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# openvpn-tunnel



[ip ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | [[firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point] | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] |

Specify IP parameters.




(config-if)#tunnel{[tunnel <0-999> mode gre ip arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address

[ipv6 | enable | firewall in | local |out | nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | [ospf | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority<0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] | [policy route-policy <WORD>] | [rip authentication key-chain | mode <WORD> | split-horizon disabled | poisoned-reverse] |

Set IPv6 configuration parameters.



[role lan | trusted | wan] | Set the role for this interface.



Usage GuidelinesSet configuration parameters for OPEN-VPN tunnel.

ExamplesThis example will set no authentication when using ospf.PerleRouter(config-if)# ip ospf authentication null<cr>




<A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X/0-128> | enable | [firewall in | local | out <WORD>] |nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip disable | poisoned-reverse] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [tunnel destination <A.B.C.D> | multicast source <A.B.C.D> source <A.B.C.D> | cellular <0-0> | dot11radio <0-0> | ethernet <1-4> . <1-4000> | tos <0-99> | ttl <1-255>] | [zone-member security <WORD>] | [ipv6ip 6in4 arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X/0-128> | enable | [firewall in | local | out <WORD>] |nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip disable | poisoned-reverse] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [tunnel destination <A.B.C.D> | multicast source <A.B.C.D> source <A.B.C.D> | cellular <0-0> | dot11radio <0-0> | ethernet <1-4> . <1-4000> | tos <0-99> | ttl <1-255>] | [zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# tunnel



{[tunnel <0-999> mode gre ip arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X/0-128> | enable | [firewall in | local | out <WORD>] |nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip disable | poisoned-reverse] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [tunnel destination <A.B.C.D> | multicast source <A.B.C.D> source <A.B.C.D> | cellular <0-0> | dot11radio <0-0> | ethernet

Sets mode gre and interface parameters.



(config-if)#range {[range ethernet <1- , 4> <1- , 4)] | [alarm profile <WORD>] | [arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [authentication [host-mode] | [multi-auth] | [multi-host] | single-host] | [periodic] | [port-control [auto] | [forced-authorized] | force-unauthorized] | [timer reauthenticate <1-65535> | restart <1-65535>] | [bridge-group <1-9999>] | [description <LINE>] | [dot1x credential <WORD> | max-auth-req <1-10> | max-req <1-10> | [[pae authenticator | suppliant] | eap profile <WORD> [pae profile <WORD>] | [timeout quiet-period <1-65535> | supp-period <1-65535> | tx-period <1-65535>] | [duplex auto | half | full] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | update <WORD> | use-web skip | url <WORD>] | dns dhcp] | [ipsec restrict] | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address <X:X:X:X::X/<0-128> | autoconfig | dhcp] | enable | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime 0 | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium]] | [mab eap] | [mtu <64-9000>] | [ntp broadcast client | destination<A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast < A.B.C.D> <X:X:X:X::X:X> |

| [zone-member security <WORD>]} Sets IPv6 parameters for this interface.


Usage GuidelinesSets parameters for tunnel interface.

ExamplesThis example will enable arp accepts on this interface.PerleRouter(config-if)# arp enable-arp-accept<cr>




client < A.B.C.D> < X:X:X:X::X:X> | key <1-65534> | minpoll | version <1-4>] | [power efficient-ethernet auto] | [role lan | trusted | wan] | [shutdown] | [speed 10 |100 |1000 |auto] | [zone-member security <WORD>]} Use the no form of this command to negate a command or set its defaults.ipSyntax Description (config-if)#range

{[range ethernet <1- , 4> <1- , 4)] | Specify the from to range.














ipip {[access-list extended <100-199> <2000-2699> | [resequence extended <100-199> <2000-2699> <1-2147483647> <1-2147483647> | standard <1-99> <1300-1999> <1-2147483647> <1-2147483647>] | standard <1-99> <1300-1999>] | [as-path access-list <WORD> <1-65535> deny | permit <LINE>] | [community-list expanded | standard <100-500> <1-65535] | [alg modules ftp | gre | h323 | nfs | pptp | sip | sqlnet | tftp disable] |[as-path access-list <WORD> <1-65535> deny | permit <LINE>] |[community-list expanded <100-500> <1-65535> deny <TEST> | permit <LINE> | standard <1-99> <1-65535> deny <1-4294967295> | internet | local-as |no-advertise | no-export | permit <1-4294967295> | internet | local-as | no-advertise | no-export | permit <LINE>] |[default-gateway <A.B.C.D>] |









Usage GuidelinesSet up a range to configure Ethernet parameters for this interface.

ExamplesThis example disables ipv6 on this range of ethernet interfaces.PerleRouter(config-if)# ipsec restrict<cr>




[route-policy <WORD] |[scp password 0 <LINE> | 7 <WORD> | <LINE> | username <WORD>] |[sftp username <word> | password <0 | 7 | LINE>] |[ssh authentication-retries <0-5> | client algorithms mac hmac hmac-sha1 | [email protected] | hmac-sha2-256 | [email protected] | hmac-sha2-512 | hmac-sha2-512 [email protected] | [email protected] | [email protected] | [email protected] | [email protected]] |[tacacs source-interface bvi <0-9999> | cellular <0-0> | dialer <0-15> | dot11radio<0-4> | ethernet <1-4 . <1-4000> | openvpn-tunnel <1-999> | tunnel <1-999>] |[telnet server]} Use the no form of this command to negate a command or set its defaults.Syntax Description ip

{[access-list extended <100-199> <2000-2699> | [resequence extended <100-199> <2000-2699> <1-2147483647> <1-2147483647> | standard <1-99> <1300-1999> <1-2147483647> <1-2147483647>] | standard <1-99> <1300-1999>] |

ACL standard type: allows you to filter based on source IP address of a packet.ACL extended type: allows you to filtering on source addresses, but also on destination addresses, protocols, and even applications, based on their port number.

[alg modules ftp | gre | h323 | nfs | pptp | sip | sqlnet | tftp disable] |

By default all alg modules are enabled. Use the disable command to disable modules.

[as-path access-list <WORD> <1-65535> deny | permit <LINE>] |

Use this command to configure an access-list filter for Border Gateway Protocol (BGP) autonomous system (AS) numbers.

[extcommunity-list expanded <100-500> <1-65535> deny <TEST> | permit <LINE> | standard <1-99> <1-65535> deny <1-4294967295> | internet |local-as |no-advertise | no-export | permit <1-4294967295> | internet |local-as |no-advertise | no-export | permit <LINE>] |

Add an extended community list entry.

[ddns update method key <WORD>] | Specify a profile for DDNS.

[default-gateway <A.B.C.D>] | Specify a default gateway.



[route < A.B.C.D> <A.B.C.D> < A.B.C.D> <1-255> | bvi <1-9999> | cellular <0-0> | dot11radio <1-4> | ethernet <1-4> <1-255> dhcp | null <1-255> | table <1-200> <A.B.C.D> <A.B.C.D> < A.B.C.D> <1-255> | bvi <1-9999> | cellular <0-0> | dot11radio <1-4> | ethernet <1-4> <1-255> dhcp | null <1-255>] |


[route-policy <WORD]} Route policy.

[scp password 0 <LINE> | 7 <WORD> | <LINE> | username <WORD>] |

SCP configuration commands.

[sftp username <word> | password <0 | 7 | LINE>] |

SFTP configuration commands.

[ssh authentication-retries <0-5> | client algorithms mac hmac hmac-sha1 | [email protected] | hmac-sha2-256 | [email protected] | hmac-sha2-512 | hmac-sha2-512 [email protected] | [email protected] | [email protected] | [email protected] | [email protected]] |

Configure SSH options.

[tacacs source-interface bvi <0-9999> | cellular <0-0> | dialer <0-15> | dot11radio<0-4> | ethernet <1-4 . <1-4000> | openvpn-tunnel <1-999> | tunnel <1-999>] |

Configure the source interface for TACACS requests.

[telnet server]} Configure telnet server options.

Command Modes PerleRouter(config)#ip

Usage GuidelinesEnable and configure IP parameters.

ExamplesThis example sets ftp servers to use ftp passive mode when connecting to our router.PerleRouter(config)# ip ftp passive<cr>



(config-std-nacl)#{[<1-65535> deny | permit <A.B.C.D>/hostname> <A.B.C.D>/hostname> | any | host <A.B.C.D>/hostname>]} Use the no form of this command to negate a command or set its defaults.

(config-dhcp)#{[address <A.B.C.D> hardware-address <H.H.H>] | [authoritative enable] | [bootfile <WORD>] | [default-router <A.B.C.D>/hostname] | [description <LINE>] | [dns-server <A.B.C.D>/hostname] | [domain-name <WORD>] | [enable] | [lease <0-365> <0-23> <0-59> | infinite] | [network </nn | A.B.C.D> start <A.B.C.D> stop <A.B.C.D>] | [option <1-254> ascii <LINE> | hex <hex-string> | ip <A.B.C.D>/hostname] | [static-route <A.B.C.D> <A.B.C.D> <A.B.C.D>]}Use the no form of this command to negate a command or set its defaults.


Syntax Description (config-std-nacl)#

{[<1-2147483647> deny | permit <A.B.C.D>/hostname> <A.B.C.D>/hostname> | any | host<A.B.C.D>/hostname>]}

Configure access lists.

Command Modes PerleRouter(config-std-nacl)#

Usage GuidelinesWhen specifying IP address use notation as eg; 172.16.113.66

ExamplesThis example will specify a default domain name of TestUnit.PerleRouter(config-std-nacl)#ip domain-name TestUnit<cr>

Syntax Description (config-dhcp)#



{[address <A.B.C.D> hardware-address <H.H.H>] |

Specify the IP address that you want to reserve for the client. This IP address will only be assigned to the client with this hardware address.

[authoritative enable] | Set authoritative to enabled if this is the only DHCP server on your network. This will allow roaming clients to get a new DHCP address even if their lease has been assigned from another network and is still valid (lease has not expired) This will prevent a client lock out situation.

[bootfile <filename>] | For the DHCP server to support client auto-configuration, you must specify the IP address or name of a TFTP server and the bootfile name.

[default-router <A.B.C.D>] | Specify the default router to use after a DHCP client has booted. The IP address of the default router should be on the same subnet as the client.

[description <pool-name>] | Provide a description for the DHCP pool.

[dns-server <A.B.C.D>] | Specify a DNS server to use for clients using this DHCP pool. A DNS server needs to be specified if you want to browse the internet.

[domain-name <A.B.C.D>] | If needed. specify a domain name.

[enable] Enable this dhcp pool.

[lease <0-365> <0-23> <0-59> | infinite] |

Specify a lease time for client connecting using this DHCP pool. Typically 24 lease times are suitable, however if your situation is a public hotspot then shorter time be warranted.

[network </nn | A.B.C.D> start <A.B.C.D> stop <A.B.C.D>] |

Specify the network, start and stop IP addresses for DHCP lease ranges.

[option ascii <string> | hex <hex-string> | ip <A.B.C.D>]

If needed, specify DHCP options to be sent to the client. NVT ascii strig

[static-route <A.B.C.D> <A.B.C.D> <A.B.C.D>]}

If needed, specify a static route.


Usage GuidelinesWhen specifying IP address use notation as eg; 172.16.113.66



ipv6IPv6 {[access-list <WORD>] | [dhcp pool <WORD>] | [dns domain <WORD> server <X:X:X:X::X> | listen-address <X:X:X:X::X>] | [firewall <WORD> | ipv6-receive-redirects enable | ipv6-src-route enable | state-policy [established action accept | drop | reject] | [invalid action accept | drop | reject] | [related accept | drop | reject]] | [host <WORD> | <X:X:X:X::X>] | [name-server <X:X:X:X::X>] | [prefix-list <WORD>] | [radius source-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | ethernet <1-4> . <1-4000> openvpn-tunnel <0-999> tunnel <0-999>] | [route <A.B.C.D> <A.B.C.D> | bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet<1-4> . <1-4000> | open-vpn-tunnel <0-999> | tunnel <0-999> <X:X:x:X::X <1-255>] |[route-policy <WORD>] |[router osfp | rip] | [tacacs source-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | ethernet <1-4> . <1-4000> openvpn-tunnel <0-999> tunnel <0-999>] | [unicast-routing]}

ExamplesThis example will set authoritative mode to enable.PerleRouter(config-dhcp)#ip authoritative enable<cr>

Related Commandsip

Syntax Description ipv6

{[access-list <WORD>] | Set the access list to use.

[dhcp pool <WORD>] | Set the dhcp pool to use.

[dns domain <WORD> server <X:X:X:X::X> | listen-address <X:X:X:X::X>] |

Set DNS domain parameters.

[firewall <WORD> | ipv6-receive-redirects enable | ipv6-src-route enable | state-policy [established action accept | drop | reject] | [invalid action accept | drop | reject] | [related accept | drop | reject]] |

Firewall options.



[host <WORD> | <X:X:X:X::X>] | Configure static host names

[name-server <X:X:X:X::X>] | Specify the address of the name server to use.

[prefix-list <WORD>] | IP prefix-list filter.

[radius source-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | ethernet <1-4> . <1-4000> openvpn-tunnel <0-999> tunnel <0-999>] | [route <A.B.C.D> <A.B.C.D> | bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet<1-4> . <1-4000> | open-vpn-tunnel <0-999> | tunnel <0-999> <X:X:x:X::X <1-255>] |

RADIUS configuration parameters.

[route <A.B.C.D> <A.B.C.D> | bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet<1-4> . <1-4000> | open-vpn-tunnel <0-999> | tunnel <0-999> <X:X:x:X::X <1-255>] |


[route-policy <WORD>] | IPV6 route policy.

[router osfp | rip] | Enable a IPV6 routing process.

[tacacs source-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | ethernet <1-4> . <1-4000> openvpn-tunnel <0-999> tunnel <0-999>] |

TACACS configuration parameters.

[unicast-routing]} Enable unicast routing.

Usage GuidelinesSet IPv6 parameters.

ExamplesThis example sets the DHCP to pool name.PerleRouter# ipv6 dhcp pool ipv6pool1<cr>

Related Commandsshow ipv6



(config--ipv6-acl)# <1-65535>] | [deny | <X:X:X:X::X/0-128 |any>] | [permit <X:X:X:X::X/0-128 | any>]}Use the no form of this command to negate a command or set its defaults.

(dhcpv6-config)#{[address prefix <X:X:X:X::X/0-128> ] | [dns-server <X:X:X:X::X> | [domain-name <WORD>] | [host <WORD>] | [lifetime default <0-4294967294> maximum <0-4294967294> minimum <0-4294967294>] |[nis address <X:X:X:X::X> | domain-name <WORD>] |[nisp address <X:X:X:X::X> | domain-name <WORD>] |[sip address <X:X:X:X::X> | domain-name <WORD>] |[sntp address <X:X:X:X::X>] |[subnet <X:X:X:X::X/<1-128>]}Use the no form of this command to negate a command or set its defaults.

Syntax Description (config-ipv6-acl)#

<1-65535>] | Specify the sequence number.

[deny <X:X:X:X::X/0-128 | any> exact-match] |

Deny specified packets.

[permit <X:X:X:X::X/0-128 | any> exact-match] |

Deny specified packets.

Command Modes PerleRouter(config-ipv6-acl)#

Usage GuidelinesConfigure network packets to deny or permit using Access Control List.

ExamplesThis example will deny packets from this network.PerleRouter(config-ipv6-acl# deny 172.16.0.0/16 exact-match<cr>


Syntax Description (dhcpv6-config)#



(config-fw6)#{[default-action accept | drop | reject] |

{[address prefix <X:X:X:X::X/0-128 ] | Specify the IPv6 address prefix.

[dns-server <X:X:X:X::X> | Specify a DNS server to use for clients using this DHCP pool. A DNS server needs to be specified if you want to browse the internet.

[domain-name <WORD>] | If needed. specify a domain name.

[host <WORD>] |

[lifetime default <0-4294967294> maximum <0-4294967294> minimum <0-4294967294>]

Configure lifetime prefixes.

[nis address <X:X:X:X::X> | domain-name <WORD>] |

Configure the address and domain name of your nis server.

[nisp address <X:X:X:X::X> | domain-name <WORD>] |

Configure the address and domain name of your nisp server.

[sip address <X:X:X:X::X> | domain-name <WORD>] |

Configure the address and domain name of your sip server.

[sntp address <X:X:X:X::X>] | Configure the address of your SNTP server.

[subnet <X:X:X:X::X/<1-128>]}Command Modes PerleRouter(config)#

Usage Guidelines

ExamplesThis example will set the dns-server address to 1:2:3:4:5::6.PerleRouter(dhcpv6-config)#dns-server 1:2:3:4:5::6<cr>




[description <LINE>] | [enable-default-logfile] | [rule <1-9999>]}Use the no form of this command to negate a command or set its defaults.

(config-fw6-rules)#{[description <WORD>] |[disable] | [log-enable] |[match destination [address <X:X:X::X/0-128> | not <X:X:X::X/0-128> | start <X:X:X::X> stop <X:X:X::X>] | port <1-65535> not <X:X:X::X/0-128> | start <X:X:X::X> stop <X:X:X::X>] | [fragment fragment | non-fragment] | icmp type <0-255> code <0-255> | typenane address-unreachable | bad-header | communication-prohibited | destination-unreachable | echo-reply | echo-request | neighbour-advertisement | neighbour-solicitation | no-route | packet-too-big | parameter-problem | port-unreachable | route-advertisement | router-solicitation | time-exceeded | ttl-zero-during-reassembly | ttl-zero-during-transit | unknown-header-type | unknown-option] | ipsec ipsec | non-ipsec | [protocol <0-255> | ah |dccp |dsr | egp | eigrp | encap | esp | etherip | ggp | gre | hmp | icmp | idpr | igmp | igp | p | ipip | ipv6 | ipv6-frag | ipv6-icmp | ipv6-nonxt | ipv6-opts | ipv6-route | isis | l2tp | manet | mpls-in-ip | narp | not | ospf pim | rdp | roho |rvsp | sctp | sdrp | shim6 | skip | tcp | udp | udplite |vrrp | xnc-idp] | [recent count <1-255> | time <1-4294967295>] | source address <X:X:X::X/0-128> | not <X:X:X::X/0-128> | start <X:X:X::X> stop <X:X:X::X>] | [mac-address <H.H.H> not <H.H.H>] | [port

Syntax Description (config-fw6)#

{[default-action accept | drop | reject] | Default action for firewall rules.

[description <LINE>] | Description for the firewall rules.

[enable-default-logfile] | Log packets matching default action.

[rule <1-9999>]} Create rules, go into submenu.

Command Modes PerleRouter(config-fw6)#

Usage GuidelinesConfigure IPv6 firewall options.

ExamplesThis example will set default action for firewall rules.PerleRouter(config-fw6)# default-action drop<cr>




<1-65535> | not <1-65535> | start <1-65535> | stop <1-65535>] | state [established disable | enable] | [invalid disable | enable] | [new enable | disable] | [related disable | enable] | tcp-flags ack | all | fin | psh | rst | syn |urg | not ack | all | fin | psh | rst | syn | urg]] | [[set action drop | dscp <0-63> | mark <1-2147483647> | routing table <1-200> | main | tcp-mss <500-1460> | pmtu] | [time monthdays <1-31> | not <1-31>] | startdate <MONTH> <1-31> <2001-2037> | stopdate <MONTH> <1-31> <2001-2037>| starttime <hh:mm:ss> | stoptime <hh:mm:ss> | utc | weekdays <DAY> | not <DAY>]]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-fw6-rules)#

{[description <WORD>] | Configure a description for the policy rule.

[disable] | Disable the policy rule.

[log-enable] | Log packet matching the rule.

[match destination [address <X:X:X::X/0-128> | not <X:X:X::X/0-128> | start <X:X:X::X> stop <X:X:X::X>] | port <1-65535> not <X:X:X::X/0-128> | start <X:X:X::X> stop <X:X:X::X>] | [fragment fragment | non-fragment] | icmp type <0-255> code <0-255> | typenane address-unreachable | bad-header | communication-prohibited | destination-unreachable | echo-reply | echo-request | neighbour-advertisement | neighbour-solicitation | no-route | packet-too-big | parameter-problem | port-unreachable | route-advertisement | router-solicitation | time-exceeded | ttl-zero-during-reassembly | ttl-zero-during-transit | unknown-header-type | unknown-option] | ipsec ipsec | non-ipsec | [protocol <0-255> | ah |dccp |dsr | egp | eigrp | encap | esp | etherip | ggp | gre | hmp | icmp | idpr | igmp | igp | p | ipip | ipv6 | ipv6-frag | ipv6-icmp | ipv6-nonxt | ipv6-opts | ipv6-route | isis | l2tp | manet | mpls-in-ip | narp | not | ospf pim | rdp | roho |rvsp | sctp | sdrp | shim6 | skip | tcp | udp | udplite |vrrp | xnc-idp] |



key{[chain < WORD]}

[recent count <1-255> | time <1-4294967295>] | source address <X:X:X::X/0-128> | not <X:X:X::X/0-128> | start <X:X:X::X> stop <X:X:X::X>] | [mac-address <H.H.H> not <H.H.H>] | [port <1-65535> | not <1-65535> | start <1-65535> | stop <1-65535>] | state [established disable | enable] | [invalid disable | enable] | [new enable | disable] | [related disable | enable] | tcp-flags ack | all | fin | psh | rst | syn |urg | not ack | all | fin | psh | rst | syn | urg]] |

Match the values from the routing table.

[[set action drop | dscp <0-63> | mark <1-2147483647> | routing table <1-200> | main | tcp-mss <500-1460> | pmtu] |

Packet modifications.

[time monthdays <1-31> | not <1-31>] | startdate <MONTH> <1-31> <2001-2037> | stopdate <MONTH> <1-31> <2001-2037>| starttime <hh:mm:ss> | stoptime <hh:mm:ss> | utc | weekdays <DAY> | not <DAY>]]}

Time parameters.

Command Modes PerleRouter(config-fw6-rules)#

Usage GuidelinesSet up firewall rules for IPv6.

ExamplesThis example will set the action for matched packets.PerleRouter(config-fw6-rules)# set action accept<cr>


Syntax Description key

{[chain < WORD]} Key-chain management.

Command Default

Command Modes PerleRouter#(config)# key



(config-key)#{[key <1-2147483647]} Use the no form of this command to negate a command or set its defaults.

Usage GuidelinesA key chain is a series of keys that can be created to help ensure secure communication between routers in a network. Authentication occurs whenever neighboring routers exchange information. Plain text authentication sends a plain text key with each message, and plain text is vulnerable to snooping.

ExamplesThis example create key chain 1, then go into sub menu key.PerleRouter(config)#key chain key1<cr>

Related Commands(config-keychain-key)#

Syntax Description (config-key)#

{[key <1-2147483647]} Specify a number for this key.

Command Modes PerleRouter#(config-key)# key

Usage GuidelinesThis command is used in conjunction with (config-keychain-key) to set a key string.

ExamplesSpecify a key number.PerleRouter(config-key)# key 250<cr>

Related Commandskey



(config-keychain-key)#{[string <0 | 7 | WORD>]}Use the no form of this command to negate a command or set its defaults.

lineline {[console <0-0 > | tty < 1-2> | vty <0-15>]}

Syntax Description (config-keychain-key)#

{[string <0 | 7 | WORD>]} Sets key string0 – specifies an unencrypted password7 – specifies a hidden password with followWORD - the unencrypted (cleartext) user password.

Command Modes PerleRouter(config-keychain-key) #string

Usage GuidelinesSpecify a password for keychain.

ExamplesSpecify a password for key chain.PerleRouter(config-keychain-key)# string password123<cr>

Related Commandskey

Syntax Description line

Command Modes PerleRouter#(config)#line

Usage GuidelinesUse this command to change to line mode.

ExamplesSee line config mode for configuring line parameters.

Related Commands(config-line)#console(config-line)#tty(config-line)#vty



logginglogging {[<hostname> | <A.B.C.D>] | [alarm <2-3> | major | minor] | [buffered <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings |[console <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings] |[delimiter tcp] | [facility auth | cron | daemon | kern | local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | sys10 | sys11 | sys12 | sys13 | sys14 | sys9 | syslog | user | ucp] |[file flash: <filename> <0-7> | <4096-32768> | alert | critical | debugging | emergencies | errors | informational | notifications | warnings] | [host <A.B.C.D> transport tcp port <1-65535> | udp port <1-65535>] |[monitor <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings] |[on] | [origin-id hostname | ip | ipv6 | string] |[rate-limit <1-10000> except <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings] |[source interface bvi <1-9999> | cellular <0-0> | dot11radio <0-4> | ethernet <1-4> | openvpn-tunnel <0-999> | tunnel <0-999>] | [trap <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings]}Use the no form of this command to negate a command or set its defaults. Syntax Description logging

{[<hostname> | <A.B.C.D>] | Specify the address of the logging host.

[alarm <2-3> | major | minor] | Set severity alarm level.major – immediate action needed (severity 2)minor – minor warning conditions (severity 3)

[buffered <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings] |

Set buffered logging parameters.

[console <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings] |

Set console logging parameters.



[delimiter tcp] | Append delimiter to syslog messages.

[facility auth | cron | daemon | kern | local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7 | lpr | mail | news | sys10 | sys11 | sys12 | sys13 | sys14 | sys9 | syslog | user | ucp] |

Set facility parameter for syslog messages.

[file flash: <filename> <0-7> | <4096-32768> | alert | critical | debugging | emergencies | errors | informational | notifications | warnings] |

Set file logging parameters.

[host <A.B.C.D> transport tcp port <1-65535> | udp port <1-65535>] |

Set the syslog server IP address and parameters.

[monitor <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings] |

Set terminal line (monitor) logging parameters.

[on] | Enable logging to all enabled destinations.

[origin-id hostname | ip | ipv6 | string] | Add origin ID to syslog messages.

[rate-limit <1-10000> except <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings] |

Set message per second limit.

[source interface bvi <1-9999> | cellular <0-0> | dot11radio <0-4> | ethernet <1-4> | openvpn-tunnel <0-999> | tunnel <0-999>] |

Set the interface for source address in logging transactions.

[trap <0-7> | <4096-32768> | alert | critical] | debugging | emergencies | errors | informational | notifications | warnings]}

Set syslog server logging level.

Command Default logging buffered 4096 debugginglogging console debugginglogging monitor debugging

Command Modes PerleRouter(config)#logging

Usage GuidelinesEnable logging setting.



loginlogin [on-failure every <1-65535> | log every <1-65535>| trap every <1-65535>] | on-success every <1-65535> | log every <1-65535>| trap every <1-65535>]}

low-power-modelow-power-mode {[led enable] | [processor enable]}

ExamplesThis example will enable logging to the host 172.16.55.88.PerleRouter(config)#logging 172.16.55.88<cr>


Syntax Description login

[on-failure every <1-65535> | log every <1-65535>| trap every <1-65535>] |

Set options for failed login attempt.

[on-success every <1-65535> | log every <1-65535>| trap every <1-65535>]}

Set options for successful login attempt.

Command Modes PerleRouter(config)#login

Usage GuidelinesSet parameters for users login in attempts.

ExamplesThis example will log failed login attempts.PerleRouter(config)#login on-failure<cr>


Syntax Description low-power-mode

[led enable] | Enables low power mode for the LEDs.

[processor enable]} Enables low power mode for the processor.

Command Modes PerleRouter(config)#low-power-mode

Usage GuidelinesSet options for low power mode.



management-accessmanagement-access {[enable] | [from-lan] | [from-wan]}

ExamplesThis example sets low power mode for the LEDs.PerleRouter(config)#low-power-mode led enable<cr>


Syntax Description management-access

{[enable] | Enable management access.

[from-lan] | Allow management access from LAN devices.

[from-wan]} Allow management access from WAN devices.

Command Default All management access methods are enabled for LAN by default.All management access methods are disabled for WAN by default.

Command Modes PerleRouter(config)#management-access<cr>

Usage GuidelinesThis command allows you to set per interface the management access methods for that interface.Management Methods are: Enable – all management Access methods for this interface HTTP – Enable HTTP (Web) management Access for this interface HTTPS – Enable HTTPS (Web) management access for this interface Telnet – Enable Telnet management access for this interface SSH – Enable SSH management access for this interface SNMP – Enable SNMP management access for this interface

ExamplesThis example sets management access HTTPS off for interface Ethernet 1.PerleRouter>enable<cr> PerleRouter#config<cr>PerleRouter(config)#management-access from-LAN<cr>



(management-access-LAN)#{[http enable] | [https enable] | [snmp enable] | [ssh enable] | [telnet enable]} Use the no form of this command to negate a command or set its defaults.

Related Commands(management-access-LAN)# (management-access-WAN)#

Syntax Description (management-access-LAN)#

[http enable | Enable devices connected from the LAN side with Role set to LAN to use HTTP to connect to the router.

[https enable] | Enable devices connected from the LAN side with Role set to LAN to use HTTPS to connect to the router.

[snmp enable] | Enable devices connected from the LAN side with Role set to LAN to use HTTPS to connect to the router.

[ssh enable] | Enable devices connected from the LAN side with Role set to LAN to use ssh to connect to the router.

[telnet enable]} Enable devices connected from the LAN side with Role set to LAN to use telnet to connect to the router.

Command Default All methods are enabled on the LAN side. All methods are disabled on the WAN side.

Command Modes PerleRouter(config)#management-accessfrom-lan<cr>

Usage Guidelines

ExamplesThis example sets management access telnet for LAN devices.PerleRouter(config)#management-access from-lan<cr>PerleRouter(management-access-LAN)#telnet enable<cr>

Related Commands(management-access-LAN)# (management-access-WAN)#



(management-access-WAN)#{[http enable] | [https enable] | [snmp enable] | [ssh enable] | [telnet enable]} Use the no form of this command to negate a command or set its defaults. Syntax Description (management-access-WAN)#

{[http enable | Enable devices connected from the WAN side with Role set to WAN to use HTTP to connect to the router.

[https enable] | Enable devices connected from the WAN side with Role set to WAN to use HTTPS to connect to the router.

[snmp enable] | Enable devices connected from the WAN side with Role set to WAN to use SNMP to connect to the router.

[ssh enable] | Enable devices connected from the WAN side with Role set to WAN to use ssh to connect to the router.

[telnet enable]} Enable devices connected from the WAN side with Role set to WAN to use telnet to connect to the router.

Command Default All protocols are disabled.

Command Modes PerleRouter>enable <cr>PerleRouter#config <cr>PerleRouter(config)#management-accessfrom-lan<cr>

Usage GuideliconesEnable management access. Specify WAN access for specific protocols.

ExamplesSpecify management access for wan devices using ssh.PerleRouter(config)# management-access from-wan<cr>PerleRouter(config-management-access-WAN)# ssh enable<cr>




nat66nat66 {[prefix outside <X:X:X:X::X:X>/<0-128> inside <X:X:X:X::X:X>/<0-128> outside-interface bvi <0-9999> | cellular <0-0> | dot11radio <0-4> | ethernet <1-4> | openvpn-tunnel <0-999> | tunnel <0-999>]}Use the no form of this command to negate a command or set its defaults.

ntpntp {[authentication] | [authentication-key <1-65534> md5 <WORD> <0 | 7>] | [broadcastdelay <1-999999>] | [gnss] | [logging] | [master <1-15>] | [peer <A.B.C.D> <WORD> <X:X:X:X::X> ip <hostname-of-peer> ipv6 <hostname-of-peer> | key <1-65534> | maxpoll <4-17> | minpoll <4-17> | prefer | version <1-4>] | [server <A.B.C.D> <WORD> <X:X:X:X::X> ip <hostname-of-peer> ipv6 <hostname-of-peer> | key <1-65534> | maxpoll <4-17> | minpoll <4-17> | prefer | version <1-4>] | [trusted-key 1-65534]}Use the no form of this command to negate a command or set its defaults.

Syntax Description nat66

{[prefix outside <X:X:X:X::X:X>/<0-128> inside <X:X:X:X::X:X>/<0-128> outside-interface bvi <0-9999> | cellular <0-0> | dot11radio <0-4> | ethernet <1-4> | openvpn-tunnel <0-999> | tunnel <0-999>]}

Set parameters for NAT66.

Command Modes PerleRouter(config)#nat66

Usage GuidelinesNAT66 is used to map one IPv6 address prefix to another IPv6 address prefix as each IPv6 packet transits the router. Use NAT when your router is on a private network and your internal PCs want to browse the internet.

Related Commandsshow nat66

Syntax Description ntp



[authentication] | The time sources must authenticate with each other before synchronizing clock time.

[authentication-key <1-65534> md5 <WORD> <0 | 7>] |

When authentication is enabled, the configured authentication key must be exchanged between time sources before clock synchronizing can begin.0 – unencrypted key 7 – encrypted key

[broadcastdelay <1-999999>] | By default, the router will set broadcast delay to Auto-negotiate. Select the auto-negotiate broadcast delay off if you wish to set your own broadcast delay time in microseconds. Broadcast delay time is the estimated round-trip delay between the broadcast NTP server and the router.

[gnss] | Use GNSS (GPS) as a time source.

[logging] | Log NTP messages to the router’s internal log.

[master <1-15>] | Select this router as the master source clock. The stratum defines how far away the clock is away from the Authoritative Time Source.The highest stratum is 1. It is reserved for atomic clocks, GPS clocks or radio clock which generates a very accurate time. This type of time source is defined as the “Authoritative time source”. The stratum defines how many hops a node is from the “authoritative time source”. Stratum x nodes are synchronized to stratum x‐1 nodes.Stratum numbers range from 1 to 15.

[peer <A.B.C.D> <WORD> <X:X:X:X::X> ip <WORD> ipv6 <WORD>> | key <1-65534> | maxpoll <4-17> | minpoll <4-17> | prefer | version <1-4>] |

Configure the IPv4/IPv6 address or hostname of the NTP peer that you will be getting the clock from. Select prefer to use this NTP source over another. A preferred peer's responses are discarded only if they vary greatly from the other time sources. Otherwise, the preferred peer is used for synchronization without consideration of the other time sources.



[server <A.B.C.D> <WORD> <X:X:X:X::X> ip <WORD> ipv6 <WORD>> | key <1-65534> | maxpoll <4-17> | minpoll <4-17> | prefer | version <1-4>] |

Configure the IPv4/IPv6 address or hostname of the NTP peer that you will be getting the clock from. Select prefer to use this NTP source over another. A preferred server’s responses are discarded only if they vary greatly from the other time sources. Otherwise, the preferred server is used for synchronization without consideration of the other time sources.Changes to the polling interval is not recommended and is discouraged. NTP dynamically selects the optimal poll interval between the values of minpoll and maxpoll, which defaults to 64 and 1024 seconds respectively and are correct for most environments.Shorter values are used to correct large errors and larger values are to refine accuracy.Default is Minimum poll 64.Versions 1-4 are supported

[trusted-key 1-65534]} Configure a trusted key to be used for trusted time sources.

Command Modes PerleRouter>enable <cr>PerleRouter#config t<cr>PerleRouter(config)#ntp

Usage GuidelinesNetwork Time Protocol (NTP) is used as a method of distributing and maintaining synchronization of time information between nodes in a network. NTP server uses UTC (Universal Coordinated Time). When initially launched, it can take NTP as much as 5 minutes to obtain an accurate time.This is due to the algorithm used to determine what NTP master(s) the router should synchronize with. NTP will not synchronize with nodes whose time is significantly even if its stratum is lower. During this “settling” period, the router may not have the correct time. NTP can usually achieve time synchronization between two systems in the order of a few milliseconds. This can be achieved with a time transmission rate of as little as one packet per minute.



Feature Details / Application Notes

power{[operation-mode ignition contact <1-2> standby-voltage <1.0-30.0> standby-delay <1-86400> wakeup-voltage <1.0-30.0> wakeup-delay <1-3600> | smart-standby | standard]}Use the no form of this command to negate a command or set its defaults.

PerleRouter# show ntp server 172.16.4.181<cr> 23:40:31: %NTPD-5: ntpd [email protected] Wed May 18 14:33:49 UTC 2016 (10): Starting 23:40:31: %NTPD-6: Command line: ntpd -n -g 23:40:31: %RSYSLOGD-6:LOGGINGHOST_STARTSTOP: Logging to UDP host 172.16.55.88 port 514 started 23:40:31: %NTPD-6: proto: precision = 3.840 usec (-18) 23:40:31: %NTPD-6: Listen and drop on 0 v6wildcard [::]:123 23:40:31: %NTPD-6: Listen and drop on 1 v4wildcard 0.0.0.0:123 23:40:31: %NTPD-6: Listen normally on 2 lo 127.0.0.1:123 23:40:31: %NTPD-6: Listen normally on 3 Vl1 172.16.113.77:123 23:40:31: %NTPD-6: Listen normally on 4 lo [::1]:123 23:40:31: %NTPD-6: Listen normally on 5 Gi2 [fe80::6ac9:bff:fec1:58da%4]:123 23:40:31: %NTPD-6: Listen normally on 6 Gi1 [fe80::6ac9:bff:fec1:58d9%3]:123 23:40:31: %NTPD-6: Listen normally on 7 eth0 [fe80::6ac9:bff:fec1:58d8%2]:123 23:40:31: %NTPD-6: Listening on routing socket on fd #38 for interface updates 23:40:31: %NTPD-3: Unable to listen for broadcasts, no broadcast interfaces available 23:40:31: %NTPD-6: 0.0.0.0 c01d 0d kern kernel time sync enabled 23:40:31: %NTPD-6: 0.0.0.0 c012 02 freq_set kernel 0.000 PPM 23:40:31: %NTPD-6: 0.0.0.0 c011 01 freq_not_set 23:40:31: %NTPD-6: 0.0.0.0 c016 06 restart

ExamplesPerleRouter# show ntp status<cr> Clock is synchronized, stratum 12, reference is 172.16.4.180Precision is 2**-18 sReference time is dae84dc5.33013328 (Thu, May 19 2016 10:35:49.199)Clock offset is 7.595002 msec, root delay is 0.439 msecRoot dispersion is 7956.293 msec

Related Commandsshow ntp

Syntax Description power



(config-smrt-stdby)# [condition <1-2> [analog contact <1-2> standby-voltage <1.0-30.0> standby-delay <1-30> wakeup-voltage <1.0-30.0> wakeup-delay <1-3600> | digital |schedule daily wakeup-time <hh:mm> hourly <0-59> standby-time <0-59> recurring <1-99>] | [digital contact <2-2> wakeup-trigger closed | open] delay <1-30>] | schedule daily wakeup-time <hh:mm> | standby-time <hh:mm> | recurring <1-7> | hourly wakeup-time <0-59> | standby-time] | [expression condition <1 | 2> and | or condition <1 | 2>]}Use the no form of this command to negate a command or set its defaults.

{[operation-mode ignition contact <1-2> standby-voltage <1.0-30.0> standby-delay <1-86400> wakeup-voltage <1.0-30.0> wakeup-delay <1-3600> |

Standby voltage – set minimum voltage value in volts in which router will enter into a standby mode.Standby delay – set delay in seconds that voltage must remain below standby voltage before entering standby mode.Wakeup voltage – set maximum voltage value in volts in which the router will wake-up from standby mode.Wakeup delay – Set the delay in seconds, in which voltage must remain above/below voltage wake-up before waking up from standby mode.

smart-standby | Smart-standby – router is in smart standby mode based on the parameters configured for condition and expression. See (config-smrt-stdby)# for configuration.

standard]} Router is in standard mode, no standby mode is configured.This is the default.

Command Modes PerleRouter(config)#power

ExamplesSpecify operation mode of ignition to go into standby mode when voltage is below 1.0 and wakes up from standby mode when the voltage goes above 2.0.PerleRouter(config)# operation ignition contact 1 standby-voltage 1.0 wakeup-voltage 2.0<cr>

Related Commands(config-smrt-stdby)#

Syntax Description (config-smrt-stdby)#



radius radius {[server <radius-server-name>]}Use the no form of this command to negate a command or set its defaults.

[condition <1-2> [analog contact <1-2> standby-voltage <1.0-30.0> standby-delay <1-30> wakeup-voltage <1.0-30.0> wakeup-delay <1-3600> | digital |schedule daily wakeup-time <hh:mm> hourly <0-59> standby-time <0-59> recurring <1-99>] | [digital contact <2-2> wakeup-trigger closed | open] delay <1-30>] | schedule daily wakeup-time <hh:mm> | standby-time <hh:mm> | recurring <1-7> | hourly wakeup-time <0-59> | standby-time] |

Configure the parameters for standby mode.

[expression condition <1 | 2> and | or condition <1 | 2>]}Command Default Standard

Command Modes PerleRouter(config-smrt-stdby)#

Usage GuidelinesSet parameters for Standby mode.

ExamplesSet standby condition to occur when analog 1 voltage minimum is 1.0 volts.PerleRouter(config-smrt-stdby)# condition 1 analog contact 1 standby-voltage 1.0<cr>


Syntax Description radius server

{[server <radius-server-name>]} Specify the name of the Radius server

Command Modes PerleRouter(config)#radius

ExamplesThis example shows you set the radius server name.PerleRouter(config)# radius server testrad<cr>



(config-radius-server)#{[address ipv4 <A.B.C.D> acct-port <0-65536> | auth-port <0-65536>] | [key 0 | 7 | <word>] | [retransmit <1-100>] | [timeout <1-1000>]}Use the no form of this command to negate a command or set its defaults.

radius-server radius-server {[deadtime <1-1440>] | [key 0 | 7 | <word>] | [retransmit <1-100>] | timeout <1-1000>]}Use the no form of this command to negate a command or set its defaults.

Related Commandsclear radiusshow radius

Syntax Description config-radius-server

{[address ipv4 <A.B.C.D> acct-port <0-65536> | auth-port <0-65536>] |

Specify the Radius server address.

[key 0 | 7 | <word>] | Specify an encryption key to be shared with the Radius servers.

retransmit <1-100>] Specify the number of retries to the active server

[timeout <1-1000>]} Specify the time to wait for Radius server to reply.


ExamplesThis example sets the timeout to 5 minutes for a prefined Radius server.PerleRouter(config-radius-server)# timeout 5<cr>


Syntax Description radius-server

{[deadtime <1-1440>] | Specify a time to stop using a server that doesn’t respond.

[key 0 | 7 | <word>] |

Specify the encryption key to be shared with the Radius servers.

[retransmit <1-100>] | Number of times to try to connect the radius server. Default is 3.



routerrouter {[bgp <1-4294967295> | ospf | rip]}Use the no form of this command to negate a command or set its defaults.

timeout <1-1000>]} Wait time for the radius server to respond. Default is 5 seconds.


Usage GuidelinesThese are the global parameters for Radius. You can set some of these parameter for each Radius server separately.

ExamplesThis example shows you how to set deadtime of 5 minutes.PerleRouter(config)# radius-server deadtime 5<cr>


Syntax Description router

{[bgp <1-4294967295> | Broader Gateway Protocol (BGP) is an independent routing protocol that is used exclusively for the internet. If using your router to connect to the internet, bgp should be enabled.

[ospf | Open Shortest Path First (ospf) is a protocol used to find the best paths for packets as they pass through a set of connected networks. OSFP was designed to replace the RIP protocol as it optimizes the updating up of the routing table. OSPF should be enabled on your router.

rip]} Routing Information Protocol (rip). Older protocol for finding the shortest path for routing information using a routing metric/hop count algorithm. RIP should be enabled on your router if there are older routers on your network that need to use RIP.




(config-router)#{[bgp [address-family ipv4 | ipv6 unicast]] | [aggregate address <A.B.C.D> <A.B.C.D> as-set | summary-only]] | [bgp always-compare-med | [bestpath as-path | confed | ignore] | compare-router-id | med confed | missing-as-worst] | [client-to-client reflection] | cluster-id <1-4294967295> | confederation identifier <1-4294967295> | peers <1-4294967295> <1-4294967295> | dampening <1-45> | <1-20000> | <1-20000> | <1-255> | deterministic-med | enforce-first-as | fast-external-failover | graceful-restart stalepath-time <1-3600> | log-neighbor-changes | network import-check | router-id <A.B.C.D> | scan-time <5-60>] | [distance <1-255> bgp distance <1-255> <1-255> <1-255>] | [maximum-paths <1-255> ibgp] | [neighbour <A.B.C.D> <X:X:X:X::X> advertisement-interval <0-600> | allowas-in <1-10> | asoverride | [attribute-unchanged as-path | med | next-hop] | [capability dynamic | orf prefix-list both | receive | send] | default originate route-map <NAME> | description <LINE> | [disable-connected-check | distributed-list <1-99> in | out <1300-2699> in | out] | dont’t-capability-negotiate | ebgp-multihop <1-255> | filter-list <WORD> | local-as <1-4294967295> no-prepend | maximum-prefix <1-4294967295> | next-hop-self | override-capability | passive | password <LINE> | port <1-65535> | prefix-list <WORD> | remote-as <1-4294967295> | remove-private-as | [route-map <WORD> in | out] | route-reflector -client | route-server-client | [send-community both | extended | standard] | shutdown | soft-reconfiguration | strict-capability-match | timers connect | ttl-security | unsuppress-map | update-source | weight] |[passive-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| openvpn-tunnel <0-999> | tunnel <0-999>] |[network <A.B.C.D> <A.B.C.D> | backdoor | route-map <WORD>] | [redistribute connected | kernel | ospf | rip | static | metric <1-4294967295> | route-map <WORD>] | [timers bgp <0-65535> <0-65335>]}

Usage GuidelinesSelect the routing protocol for your router.

ExamplesThis example sets the routing protocol to BGP.PerleRouter(config)# router bgp 10<cr>

Related Commandsshow ip bgpshow ip ospfshow ip rip



Use the no form of this command to negate a command or set its defaults.Syntax Description (config-router)#

{[bgp [address-family ipv4 | ipv6 unicast]] | Enter address family mode.

aggregate address <A.B.C.D> <A.B.C.D> as-set | summary-only]] |

Configure BGP aggregate entries.

[bgp always-compare-med | [bestpath as-path | confed | ignore] | compare-router-id | med confed | missing-as-worst] | [client-to-client reflection] | cluster-id <1-4294967295> | confederation identifier <1-4294967295> | peers <1-4294967295> <1-4294967295> | dampening <1-45> | <1-20000> | <1-20000> | <1-255> | deterministic-med | enforce-first-as | fast-external-failover | graceful-restart stalepath-time <1-3600> | log-neighbor-changes | network import-check | router-id <A.B.C.D> | scan-time <5-60>] |

Set parameters for BGP.

[distance <1-255> bgp distance <1-255> <1-255> <1-255>] |

Define administrative distances.

[maximum-paths <1-255> ibgp] | Forward packets over multiple paths.



[neighbour <A.B.C.D> <X:X:X:X::X> advertisement-interval <0-600> | allowas-in <1-10> | asoverride | [attribute-unchanged as-path | med | next-hop] | [capability dynamic | orf prefix-list both | receive | send] | default originate route-map <NAME> | description <LINE> | [disable-connected-check | distributed-list <1-99> in | out <1300-2699> in | out] | dont’t-capability-negotiate | ebgp-multihop <1-255> | filter-list <WORD> | local-as <1-4294967295> no-prepend | maximum-prefix <1-4294967295> | next-hop-self | override-capability | passive | password <LINE> | port <1-65535> | prefix-list <WORD> | remote-as <1-4294967295> | remove-private-as | [route-map <WORD> in | out] | route-reflector -client | route-server-client | [send-community both | extended | standard] | shutdown | soft-reconfiguration | strict-capability-match | timers connect | ttl-security | unsuppress-map | update-source | weight] |

Set neighbor configuration parameters.

[network <A.B.C.D> <A.B.C.D> | backdoor | route-map <WORD>] |

Specify a network to announce via BGP.

[passive-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| openvpn-tunnel <0-999> | tunnel <0-999>] |

Suppress routing updates on an interface.

[redistribute connected | kernel | ospf | rip | static | metric <1-4294967295> | route-map <WORD>] |

Redistribute information from another routing protocol.

[timers bgp <0-65535> <0-65335>]} Adjust routing timers.

Command Modes PerleRouter(config-router)#

Usage GuidelinesSet up parameters for BGP protocol.

ExamplesThis example sets BGP timers keepalive to 10 and hold time to 20 seconds.PerleRouter(config)#<cr>timers bgp 10 20 <cr>



(config-router)#{[ospf area <0-4294967295> | <A.B.C.D> authentication message-digest | default-cost <1-6777215> | nssa no-summary | translate |-always | translate-candidate | translate-never | range <A.B.C.D> <A.B.C.D> advertise | not-advertise cost <0-16777215> | substitute <A.B.C.D> <A.B.C.D> cost <0-16777215> | [shortcut enable | disable | default] | stub no-summary | [virtual-link <A.B.C.D> authentication-key <WORD> | message-digest message-digest-key <1-255> md5 <LINE> | null] | dead-interval <1-65535>| hello-interval <1-65535> | retransmit-interval <1-65535> | transmit-delay<1-65535>] |[auto-cost reference-bandwidth <1-4294967>] |[capability opaque] |[compatibility rfc1583] |[default-information originate always | metric <0-16777214> | metric-type <1-2> | route-map <WORD>] | [default-metric <0-16777214>] |[max-metric router-lsa administrative | on-shutdown <5-86400> | on-startup <5-86400>] | [neighbor poll-interval <1-65535> | priority <0-255>] |[network <A.B.C.D> <A.B.C.D> area <0-4294967295>] |[passive-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| openvpn-tunnel <0-999> | tunnel <0-999>] |[redistribute connected | kernel | ospf | rip | static | metric <1-4294967295> | route-map <WORD>] | [refresh timer <5-1800>] |[router-id <A.B.C.D>] |[timers throttle spf <1-600000> <1-600000><1-600000>]}Use the no form of this command to negate a command or set its defaults.

Related Commandsshow bgp

Syntax Description config-router



{[ospf area <1-4294967295> | <A.B.C.D> authentication message-digest | default-cost <1-6777215> | nssa no-summary | translate |-always | translate-candidate | translate-never | range <A.B.C.D> <A.B.C.D> advertise | not-advertise cost <0-16777215> | substitute <A.B.C.D> <A.B.C.D> cost <0-16777215> | [shortcut enable | disable | default] | stub no-summary | [virtual-link <A.B.C.D> authentication-key <WORD> | message-digest message-digest-key <1-255> md5 <LINE> | null] | dead-interval <1-65535>| hello-interval <1-65535> | retransmit-interval <1-65535> | transmit-delay<1-65535>] |

Specify OSPF area parameters.

[auto-cost reference-bandwidth <1-4294967>] |

Calculate OSPF interface cost according to bandwidth.

[capability opaque] | Enable opaque feature.

[compatibility rfc1583] | OSPF compatibly list.

[default-information originate always | metric <0-16777214> | metric-type <1-2> | route-map <WORD>] |

Control distribution of default information.

[default-metric <0-16777214>] | Set metric of redistributed routes.

[max-metric router-lsa administrative | on-shutdown <5-86400> | on-startup <5-86400>] |

Define administrative distance.

[neighbor poll-interval <1-65535> | priority <0-255>] |

Specify a neighbor router.

[network <A.B.C.D> <A.B.C.D> area <0-4294967295>]

Specify a network to enable IP routing.

[passive-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| tunnel <0-999>] |



Redistribute information from other routing protocol.

[refresh timer <5-1800>] | Adjust refresh timers.

[router-id <A.B.C.D>] | Router ID for this OSPF process.



(config-router)#{[rip default-information originate] |[default-metric <1-16>] |[distance <1-255>] |[distribution-list <1-99> in | out bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| openvpn-tunnel <0-999> | tunnel <0-999> | <1300-2699> in | out bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> | tunnel <0-999> prefix <WORD> in | out bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> | tunnel <0-999>] |[neighbor <A.B.C.D>] |[network <A.B.C.D> <A.B.C.D>] |[passive-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| openvpn-tunnel <0-999> | tunnel <0-999>] |[redistribute connected | kernel | ospf | rip | static | metric <1-4294967295> | route-map <WORD>] |[timers basic <5-2147483>]}Use the no form of this command to negate a command or set its defaults.

[timers throttle spf <1-600000> <1-600000><1-600000>]}

Adjust routing timers.


Usage GuidelinesSet up parameters for OSPF protocol.

ExamplesThis example sets opaque feature for OSPF. PerleRouter(config)#capability opaque<cr>

Related Commandsshow ip ospf

Syntax Description config-router

[rip default-information originate] | Control distribution of default information.

[default-metric <1-16>] | Set the metric for redistributed routes.



router-maprouter-map {[<WORD> <1-65535> deny <1-65535> | permit <1-65535>]}

[distance <1-255>] | Set the administrative distance.

[distribution-list <1-99> in | out bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| openvpn-tunnel <0-999> | tunnel <0-999> | <1300-2699> in | out bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> | tunnel <0-999> | prefix <WORD> in | out bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> | tunnel <0-999>] |

Filter networks in routing updates.

[neighbor <A.B.C.D>] | Specify a neighbor router.

[network <A.B.C.D> <A.B.C.D>] | Enable routing on a IP network.

[passive-interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000>| openvpn-tunnel <0-999> | tunnel <0-999>] |



Redistribute information from other routing protocol.

[timers basic <5-2147483>]} Interval between updates for RIP.

Command Default


Usage GuidelinesSet up parameters for RIP protocol.

ExamplesThis example sets timer for RIP updates to every 5 minutes.PerleRouter(config)#timers basic 5 <cr>




Use the no form of this command to negate a command or set its defaults.

(config-route-map)#{[call <WORD>] |[continue <1-65535>] |[description <LINE>] |[match | as-path <WORD> | community <1-500> | extcommunity <1-500> | interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> | tunnel <0-999> | [ip address <1-199> | <1300-2699> | prefix-list] | [ipv6 <WORD> | prefix-list] | metric <1-4294967295> | [origin egp | igp | unknown] | peer <A.B.C.D> | tag <1-65535>] |[on-match goto <1-65535> | next] | [set aggregator as <1-4294967295> <A.B.C.D> | as-path exclude <1-4294967295> | prepend <1-4294967295> | atomic -aggregate | comm-list <1-500> delete | [community <1-4294967295> | <AA:NN> | internet | local-as | no-advertise | no export] | extended-community rt <AA:NN> | soo <AA:NN> | ip nexthop <A.B.C.D> | [ipv6 nexthop global <X:X:X:X::X> | local <X:X:X:X::X>] | local-preference <0-4294967295> | metric <1-4294967295> | [metric-type type-1 | type-2] | [origin epg | igp | unknown] | originator-id <A.B.C.D> | src <A.B.C.D> | tag <1-65535> | weight <0-4294967295>]}Use the no form of this command to negate a command or set its defaults.

Syntax Description router-map

{[WORD> <1-65535> deny | permit]} Insert, delete, deny or permit from existing route map table.

Command Modes PerleRouter(config)#router-map

Usage GuidelinesCreate route maps or enter route map command mode.

ExamplesThis example creates a route map called test-route.PerleRouter(config)#route-map test-route<cr>

Related Commandsshow route

Syntax Description (config-route-map)#

{[call <WORD>] | Jump to another route-map after match-set



[continue <1-65535>] | Continue on a different entry within the route-map.

[match | as-path <WORD> | community <1-500> | extcommunity <1-500> | interface bvi <1-9999> | cellular <0-0> | dialer <0-15> | dot11radio <0-4> | ethernet <1-4> . <1-4000> | openvpn-tunnel <0-999> | tunnel <0-999> | [ip address <1-199> | <1300-2699> | prefix-list] | [ipv6 <WORD> | prefix-list] | metric <1-4294967295> | [origin egp | igp | unknown] | peer <A.B.C.D> | tag <1-65535>] |

Match values from routing table.

[on-match goto <1-65535> | next] | Exit policy on matches.

[set aggregator as <1-4294967295> <A.B.C.D> | as-path exclude <1-4294967295> | prepend <1-4294967295> | atomic -aggregate | comm-list <1-500> delete | [community <1-4294967295> | <AA:NN> | internet | local-as | no-advertise | no export] | extended-community rt <AA:NN> | soo <AA:NN> | ip nexthop <A.B.C.D> | [ipv6 nexthop global <X:X:X:X::X> | local <X:X:X:X::X>] | local-preference <0-4294967295> | metric <1-4294967295> | [metric-type type-1 | type-2] | [origin epg | igp | unknown] | originator-id <A.B.C.D> | src <A.B.C.D> | tag <1-65535> | weight <0-4294967295>]}

Set values in destination routing protocol.

Command Modes PerleRouter(config-route-map)#

Usage GuidelinesSet up route map configuration parameters.

ExamplesThis rule defines a match rule for community list BGP 50.PerleRouter(config-route-map)#match community 50 <cr>




sdmsdm {[prefer default | dual-ipv4-and-ipv6 default]}Use the no form of this command to negate a command or set its defaults.

serialserial {[accounting <WORD> | default] | [advanced [break off | on] | data_logging_buffer_size <1-2000> | [flush-on-close off | on] | [monitor-connection-every <1-32767>] | monitor-connection-number <1-32767>] | monitor-connection-timeout<1-32767> | single-telnet off | on]] | [authentication aaa login-authentication <WORD> | default] | [authorization exec <WORD> | default] | [modbus gateway addr-mod embedded | re-mapped] | [broadcast on | off] | char-timeout <10-10000> | [exceptions off | on] | [idle-timer <0-300>] | [ip-aliasing off | on] | mess-timeout <10-10000> | next-req-delay <0-1000> | port <1-65535> | remapped-id <1-247> | [req- off | on] | [ssl on | off] | [port buffering key-stroke-buffering on | off] | mode both | local | off | remote | nsf-directory <WORD> | nfs-encryption off | on | [nfs-host <A.B.C.D> <WORD> <X:X:X:X::X>] | syslog [level alert | critical | emergency | error | info | notice | warning] | off | on] | [time-stamp off | on] | view-port-buffer-string <WORD>] |[trueport [remap 110 | 1200 | 134 | 150 | 1800 | 19200 | 200 | 2400 | 300 | 38400 | 4800 | 50 | 600 | 75 | 9600] | [|115200 | 1200 | 1800 | 19200 | 23400 | 2400 | 38400 | 4800 | 57600 | 600 | 9600 | custom] | [vmodem-phone entry <1-8> phone-number <phone -number> | host <A.B.C.D> <WORD> <X:X:X:X::X> <tcp-port>]}

Syntax Description sdm

{[prefer default | dual-ipv4-and-ipv6 default]}

The sdm command is used to set IP protocols on your router.

Command Default sdm prefer default (IPv4)

Command Modes PerleRouter(config)#sdm

Usage GuidelinesBy default the router is set for IPv4. To enable both IPv4 and IPv6 see the example below.

ExamplesThis example shows you how to set your router for both IPv4 and IPv6 traffic.PerleRouter(config)# sdm prefer dual-ipv4-and-ipv6 default<cr>

Related Commandsshow sdm



Use the no form of this command to negate a command or set its defaults.Syntax Description serial

{[accounting <WORD> | default] | Accounting parameters.

[advanced [break off | on] | data_logging_buffer_size <1-2000> | [flush-on-close off | on] | [monitor-connection-every <1-32767>] | monitor-connection-number <1-32767>] | monitor-connection-timeout<1-32767> | single-telnet off | on]] |

Sets advanced features for serial devices.

[authentication aaa login-authentication <WORD> | default] |

Authentication parameters.

[authorization exec <WORD> | default] |

Authorization parameters.

[modbus gateway addr-mod embedded | re-mapped] | [broadcast on | off] | char-timeout <10-10000> | [exceptions off | on] | [idle-timer <0-300>] | [ip-aliasing off | on] | mess-timeout <10-10000> | next-req-delay <0-1000> | port <1-65535> | remapped-id <1-247> | [req- off | on] | [ssl on | off]] |

Sets modbus gateway parameters.

[port buffering key-stroke-buffering on | off] | mode both | local | off | remote | nsf-directory <WORD> | nfs-encryption off | on | [nfs-host <A.B.C.D> <WORD> <X:X:X:X::X>] | syslog [level alert | critical | emergency | error | info | notice | warning] | off | on] | [time-stamp off | on] | view-port-buffer-string <WORD>] |

Set port buffering parameters.

[trueport [remap 110 | 1200 | 134 | 150 | 1800 | 19200 | 200 | 2400 | 300 | 38400 | 4800 | 50 | 600 | 75 | 9600] | 115200 | 1200 | 1800 | 19200 | 23400 | 2400 | 38400 | 4800 | 57600 | 600 | 9600 | custom] |

Sets remap baud rates for Trueport devices.



serviceservice {[dhcp relay-agent | server] | [sequence-numbers] | [timestamps log datetime | localtime | msec | showtime-zone | year] | uptime]}Use the no form of this command to negate a command or set its defaults.

[vmodem-phone entry <1-8> phone-number <phone -number> | host <A.B.C.D> <WORD> <X:X:X:X::X> <tcp-port>]}

Sets parameters for virtual modem.

Command Modes PerleRouter(config)#serial

Usage GuidelinesSerial advanced feature settings

ExamplesThis example will set the vmodem phone number to 416-666-9900 for host 172.16.77.88.PerleRouter(config)#serial vmodem entry 1 phone-number 416-666-9900 host 172.16.77.88.

Related Commandsserial

Syntax Description service

{[dhcp relay-agent | server] | Enable dhcp server or relay agent.

[sequence-numbers] | Stamp the logger messages with a sequence number.

[timestamps log datetime | localtime | msec | showtime-zone | year] | uptime]}

Timestamp with date and time. Timestamp with system uptime.

Command Modes PerleRouter(config)#service

Usage GuidelinesSet parameters for DHCP relay-agent or server.

ExamplesThis example shows you how to add date, time and year to log messages.PerleRouter(config)# service timestamp log datetime localtime year<cr>



snmp-server smnp-server {[community <community-name> [ip-access <A.B.C.D> | <X:X:X:X::X:X> | ro | rw] | [network [<A.B.C.D> | <subnet>] | [<X:X:X:X::X:X>]] | [contact <contact-person-name>] | [enable traps | [alarms <2 | 3> | major | minor] | authentication | bgp | cellular-gnss | cellular-lte | dot11 | entity | envon | ipsec | openvpn | ospf | snmp] |[engine-id local <text>] | [[host <A.B.C.D> <X:X:X:X::X:X> <community-name> udp-port <0-65535>] | [version 2c <community-name> udp-port <0-65535>] | [3 auth | informs | noauth | prv | traps]] | [listen-address <A.B.C.D> <X:X:X:X::X:X> udp-port <0-65535>] |[location <physical-location>] |[user <WORD> <WORD> v3 [auth md5 | sha <WORD> priv aes | des <WORD>] [encrypted auth md5 <WORD> priv aes <WORD> | sha <WORD>] | [view <WORD> excluded <WORD>]} Use the no form of this command to negate a command or set its defaults.


Syntax Description snmp-server

{[community <community-name> [ip-access <A.B.C.D> | <X:X:X:X::X:X> | ro | rw] | [network [<A.B.C.D> | <subnet>] | [<X:X:X:X::X:X>]] |

Set community strings and access privileges.

[contact <contact-person-name>] | Type in the contact name. (mib object sysContact).

[enable traps | [alarms <2 | 3> | major | minor] | authentication | bgp | cellular-gnss | cellular-lte | dot11 | entity | envon | ipsec | openvpn | ospf | snmp] |

Enables trap messages to go to your snmp server.

[engine-id <text>] | Engine ID of the local or remote SNMPv3 agent.

[group] | Define a SNMPv3 user security model.

[[host <A.B.C.D> <X:X:X:X::X:X> <community-name> udp-port <0-65535>] | [version 2c <community-name> udp-port <0-65535>] | [3 auth | informs | noauth | prv | traps]] |

Specify hosts to receive SNMP notifications



standbystandby {[low-voltage contact <1-2> standby-voltage <5.8-29.4> standby-delay <30-3600> | wakeup-voltage <6.8-30.0> wakeup-delay <1-30> enable]}Use the no form of this command to negate a comman |d or set its defaults.

[location <physical-location>] Type text for MIB object sysLocation

[listen-address <A.B.C.D> <X:X:X:X::X:X> udp-port <0-65535>] |

Address to listen on for incoming requests.

| [user <WORD> <WORD> v3 [auth md5 | sha <WORD> priv aes | des <WORD>] [encrypted auth md5 <WORD> priv aes <WORD> | sha <WORD>] |

Configure options for SNMP V3 user.

[view <WORD> excluded <WORD>]} Define an SNMPv3 MIB family view,Exclude this family MIB from the view.


ExamplesThis example will set community name to public and contact person to admin, then enable trap messages for authentication.PerleRouter(config)#community public<cr>PerleRouter(config)#snamp-server contact admin<cr>PerleRouter( config)#snmp-server enable traps authentication<cr>

Related Commandsshow snmp

Syntax Description standby

{[low-voltage contact <1-2> standby-voltage <5.8-29.4> standby-delay <30-3600> | wakeup-voltage <6.8-30.0> wakeup-delay <1-30> enable]}

Specify parameters for standby mode.

Command Default standard

Command Modes PerleRouter(config)#standby

Usage GuidelinesConfigure power management standby messages.



tacacstacacs {[server <WORD>]}Use the no form of this command to negate username.

(config-tacacs-server)#{[address ipv4 <hostname | <A.B.C.D> | ipv6 <hostname | X:X:X:X::X> < key 0 | 7 | WORD> | [timeout <1-1000>]}Use the no form of this command to negate a command or set its defaults.

ExamplesThis example will monitor low-voltagePerleRouter(config)# standby low-volage enable,cr>

Related Commandspowerstandby

Syntax Description tacacs

{[server <WORD>]} Specify the name of the TACACS server.

Command Modes PerleRouter(config)#tacacs

ExamplesThis example specifies the name of the Tacacs server as TACTEST.PerleRouter(config)#tacacs server TACTEST<cr>

Related Commandsclear tacacsshow tacacs

Syntax Description (config-tacacs-server)#

{[address ipv4 <hostname | <A.B.C.D> | ipv6 <hostname | X:X:X:X::X> < key 0 | 7 | WORD> |

Set the IPv4 or IPv6 address for your TACACS server.

[key 0 | 7 | <WORD>] | Set the encryption key to be shared with the TACACS server.

[timeout <1-1000>]} Set the timeout if the TACACS server doesn’t respond,

Command Modes PerleRouter(config-tacacs-server)#



ttytty{[<1-1> mode console | disable | gnss | line]}Use the no form of this command to negate a command or set its defaults.

usbusb{[mode console | disable | gnss | line]}Use the no form of this command to negate tty parameters.

Usage GuidelinesSet up parameters for your TACACS server.

ExamplesThis example shows you how to set the IPv4 address for your TACACS server.PerleRouter(config-tacacs-server)# address ipv4 172.17.88.99<cr>

Related Commandstacacsclear tacacsshow tacacs

Syntax Description tty

{[<1-1> mode console | disable | gnss | line]}

Select the mode for the serial port.

Command Default Console

Command Modes PerleRouter(config)#tty

Usage GuidelinesChanged the mode of the tty port.

ExamplesThis example changes the tty port to console mode.PerleRouter(config)#tty 1 mode console<cr>

Syntax Description usb

{[mode console | disable | gnss | line]}

Set the mode for the usb port.

Command Modes PerleRouter(config)#usb

Usage GuidelinesSet how the usb port will be used.



usernameusername {[<WORD> nopassword | privilege 1 | 15 | secret | serial | two-factor]}Use the no form of this command to negate username.

(config-user-serial)#{[callback off | on] | [framed-compression on | off] |[framed -interface-id <8 octets>] | [framed-ip <A.B.C.D>] |

ExamplesThis example sets the usb port to be used for console mode.PerleRouter(config)#usb console <cr>

Related Commands(config-line)#console(config-line)#vty(config-controller)

Syntax Description username

{[<WORD> nopassword | privilege 1 | 15 | secret | serial | two-factor]}

Add local user names and passwords

Command Modes PerleRouter(config)#username

Usage GuidelinesCommand OptionsPrivilege level 1 specifies user privilege level (user exec) 15 specifies privilege exec level (privilege exec)Secret 0 - Specifies that an UNENCRYPTED password will follow. 7 Specifies an ENCRYPTED password will follow LINE - the UNENCRYPTED (cleartxt) password.

ExamplesThis example creates a user with user exec privileges and a clear text password.PerleRouter(config)#username lyn privilege 1 secret password123<cr>

Related Commandsshow users



[framed-mtu <64-1500>] |[host -ip <A.B.C.D> <X:X:X:X::X>] |[hotkey-prefix <0-ff>] |[idle-timer <0-4294967>] | [line-access read-in <1-4> | read-out <1-4> | read-write <1-4>] |[netmask <A.B.C.D>] | [phone-number <phone number>] |[port ssh <1-65535> | ssh-raw <1-65535> | tcp-clear <1-65535> | telnet <1-65535>] | [routing listen | none | send | send -and-listen] | [service dsprompt | ppp | rlogin | slip | ssh | ssl-raw | tcp-clear | telnet] | [sess-timer <0-4294967>] | [session <1-4> [auto off | on] | [rlogin-options host <A.B.C.D> <X:X:X:X::X> | termtype <WORD>]}Use the no form of this command to negate a command or set its defaults.zoneSyntax Description (config-user-serial)#

{[callback off | on] | Set callback enabled or disabled for this user.

[framed-compression on | off] | Set compression on or off for this user session.

[framed -interface-id <8 octets>] | Set an interface id.

[framed-ip <A.B.C.D>] | Set a framed ip address that will be used.

[framed-mtu <64-1500>] | Set maximum transmission unit size.

[host -ip <A.B.C.D> <X:X:X:X::X>] | Set the address for the host for this user session.

[hotkey-prefix <0-ff>] | Set the hot-prefix character to be used to change sessions.

[idle-timer <0-4294967>] | Set the idle timer for this user’s session to time out.

[line-access read-in <1-4> | read-out <1-4> | read-write <1-4>] |

Set line access rights for this user. read-in read-out read-write

[netmask <A.B.C.D>] | Set net mask for this session.

[phone-number <phone number>] | Set phone-number for this user session to call.



zone{[security <WORD>]}Use the no form of this command to negate parameters.

(config-sec-zone)#{[[default-action drop | reject] | description <WORD> | local-zone]}Use the no form of this command to negate a command or set its defaults.

Syntax Description zone

{[security <WORD>]} Add firewall with zoning.

Command Modes PerleRouter(config)#zone

Usage GuidelinesUse this command to set zoning options.

ExamplesThis example creates a zone with the name zonetest.PerleRouter(config)#zone security zonetest<cr>

Related Commandszone-pair

Syntax Description (config-sec-zone)#

{[[default-action drop | reject] | Specify the default action for traffic coming into this zone. Drop will silently drop the packets Reject will drop and notify the source

description <WORD> | Enter a zone description.

local-zone]} Zone to be local-zoned.

Command Modes PerleRouter(config-sec-zone)#

Usage GuidelinesUse this command to setup firewall zoning.

ExamplesThis example will show you how to reject all incoming packets to this zone.PerleRouter(config)# default-action reject<cr>

Related Commandsshow zone-policy



zone-pairzone-pair{[from <WORD> to <WORD> firewall <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description zone-pair

{[from <WORD> to <WORD> firewall <WORD>]}

Specify options for zone pairing.

Command Modes PerleRouter(config)#zone-pair

Usage GuidelinesZone from which to filter traffic.

Related Commandszone


Interface configuration Chapter 5

This chapter contains the CLI commands for Interface Config Mode. Some commands may be omitted or changed depending on the IRG5000 model.

interfaceinterface {[bvi <1-9999>] | [cellular <0-0>] | [dialer <0-15>] | [dot11radio <0-0>] | [ethernet <1-4>] | [loopback] | [openvpn-tunnel <0-999> | tap | tun] | [tunnel <0-999>] | [range ethernet <1> , - <5>]} Use the no form of this command to negate a command or set its defaults.Syntax Description interface

{[bvi <1-9999>] | Specify the bridge interface you want to configure.

[cellular <0-0>] | Specify the cellular interface you want to configure.

[dialer <0-15>] | Specify the dialer interface you want to configure.

[dot11radio <0-0>] | Specify the wireless interface you want to configure

[ethernet <1-4>] | Specify the Ethernet interface you want to configure.

[loopback] | Specify the loopback interface you want to configure.

[openvpn-tunnel <0-999> tap | tun] | Specify a openvpn tunnel you want to configure.

[tunnel <0-999>] | Specify the tunnel you want to configure.

[range ethernet <1> , - <5>] Specify a Ethernet range you want to configure.

Command Modes PerleRouter>enable <cr>PerleRouter#config <cr>PerleRouter(config)#PerleRouter(config)#interface ethernet 1PerleRouter(config-if)#

5

Interface configuration


(config-if)# bvi {[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address <X:X:X:X::X/<0-128> | dhcp | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime <0> | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [mtu <68-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan |trusted | wan] | [shutdown] | [zone-member security <WORD>]}

Usage GuidelinesSet interface command.

ExamplesThis example will allow you to config parameters for Ethernet interface 1.PerleRouter(config)# interface ethernet 1<cr>





Enable IPv6 on this interface.

[mtu <68-1500>] | Specify the mtu (maximum transmit unit) for this interface.


Configure for this interface.



[zone-member security <WORD>]} This interface belongs to zone security name.


Usage GuidelinesSets option parameters for bridge.



(config-if)# cellular{[alarm profile <WORD>] | [description <LINE>] | [idle-time <LINE>] | [ip ddns service dyndns | use-web skip | url <WORD> | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict |[ipv6 address <X:X:X:X::X/<0-128> | dhcp | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime 0 | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [monitor-traffic both | receive | transmit] | [mtu <64-9000>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [on-demand] | [start-connected] | [role lan | trusted | wan] | [zone-member security <WORD>]}

ExamplesThis example enables an IP address on bvi 10.PerleRouter>enable<cr>PerleRouter#config<cr>PerleRouter#interface bvi 10<cr>PerleRouter(config-if)#ip address 172.16.113.45 255.255.0.0<cr>




Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# cellular



[idle-time <LINE>] | Set time to drop the on demand connection.

[ip ddns service dyndns | use-web skip | url <WORD>] | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |

Configure ddns services to use for this interface.

[ipsec restrict] | Allow no IPsec on this interface.


Configure IPv6 options for this interface.

[monitor-traffic both | receive | transmit]] | Monitor the traffic for on demand feature.

[mtu <64-9000>] | Size of the mtu (max transmission unit) for this interface.



(config-if)# dot11Radio{[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [bridge-group <1-9999>] | [channel <1-11>] | [description <WORD>] |[dot11ac antenna-pattern-fixed | center-channel-frequency <34-173> | channel-width vht40 | vht80] | ldpc | max-mpdu <11454> <7991> | max-mpdu-exp <1-7> | require-vht | [short-gi <20 | 40 | 80>] | stbc rx-stbc rx-stbc-1 | tx-stbc] | [dot11n 40mhz-incapable | a-msdu <7935> | auto-power-save | channel-width ht40+ | ht40- | dsss-cck-40mhz | ldpc | require-ht | short-gi <20 | 40> | stbc rx-stbc rx-stbc-1 | tx-stbc] | [ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | use-web skip | url <WORD>] | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication

[ntp broadcast client | destination <A.B.C.D> | key <1-65534> | minpoll <4-17> | version <1-4>] | [disable] | [multicast < A.B.C.D> | < X:X:X:X::X:X> | client< A.B.C.D> | < X:X:X:X::X:X> | key<1-65534> | minpoll | version <1-4>] |

Configure NTP options for this interface.

[on-demand] | On demand feature brings up the interface when there is data to be sent or received only.

[start-connected] | Establish LTE data connection after reload or power up.


[zone-member security <WORD>]} This interface is member of this security zone.


Usage GuidelinesSetup cellular profile parameters.

ExamplesThis example will start cellular connection after the router reboots.PerleRouter(config)# interface cellular 0<cr>PerleRouter(config-if)#start-connected<cr>

Related Commands interfaceshow cellular



message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address dhcp | firewall in | out | local <WORD> | [ospf cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535>] | [mtu <256-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [radio-mode <0-1>] | [role lan | trusted | wan] | [shutdown] | [ssid <LINE> dot11radio <1-4>] | [station-role non-root | root] | [world mode dot11d country-code <WORD>] | [zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# Dot11Radio


Sets the arp options.

[bridge-group <1-9999>] | Sets transparent bridging interface parameters.

[channel <1-11>] | Sets the radio frequency.


[dot11ac antenna-pattern-fixed | center-channel-frequency <34-173> | channel-width vht40 | vht80] | ldpc | max-mpdu <11454> <7991> | max-mpdu-exp <1-7> | require-vht | [short-gi <20 | 40 | 80>] | stbc rx-stbc rx-stbc-1 | tx-stbc] |

Configures dot11ac vht mode.

[dot11n 40mhz-incapable | a-msdu <7935> | auto-power-save | channel-width ht40+ | ht40- | dsss-cck-40mhz | ldpc | require-ht | short-gi <20 | 40> | stbc rx-stbc rx-stbc-1 | tx-stbc] |

Configures dot11n ht mode.



(config-if-ssid)# {[bridge-group <1-9999>] | [description <WORD>] | [ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | use-web skip | url <WORD>] | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address dhcp | enable | firewall in | out | local <WORD> | [nd dad attempts <0-600>] | managed-config-flag-other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4292967294> | infinite] | [ra dns server <X:X:X:X::X>] | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350>] | [lifetime <0> <4-9000>] | [suppress] | reachable-time <0-3600000> | retransmission-time <0-3600000> | [router-preference high | low | medium]] |[mtu <256-1500>] |[ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [zone-member security <WORD>]}

[world mode dot11d country-code <WORD>] |

Specify an ISO 3166-1 Alpha code.



Usage GuidelinesSetup options for Dot11Radio.

ExamplesThis example will setup this interface to use DHCP.PerleRouter(config-if)# ip address dhcp<cr>




(config-if)# dialer{[dialer description <LINE>] | [encapsulation ppp] | [ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | use-web skip | url <WORD>] | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |[ipsec restrict] | [[ipv6 firewall in | out | local <WORD> | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> |






Command Modes PerleRouter(config-if-ssid)#

Usage GuidelinesConfigure ssid sub menu commands.

ExamplesThis example will restrict IPsec to this interface. All interfaces are used if no restrctions are in place..

PerleRouter(config-if-ssid)# ipsec restrict<cr>

Related Commands show ip interfaces



transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [ppp access-concentrator <LINE> | chap hostname <WORD> | password 0 <LINE> | 7 <WORD> | <LINE> | timeout idle <1-4294967>] | [role lan | trusted | wan] | [shutdown] | [zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# dialer

{[dialer description <LINE>] | Specify a name for this interface.

[encapsulation ppp] | Set sencapsulation type.

[ip address <A.B.C.D> <A.B.C.D> | ddns service dyndns | use-web skip | url <WORD>] | dns dhcp | firewall in | out | local <WORD> | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] |

Sets Ip configuration parameters for this interface.




(config-if) ethernet{[alarm profile <WORD>] | [arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [authentication [host-mode] | [multi-auth] | [multi-host] | single-host] | [periodic] | [port-control [auto] | [forced-authorized] | force-unauthorized] | [timer reauthenticate <1-65535> | restart <1-65535>] | [bridge-group <1-9999>] |[description <LINE>] | [dot1x credential <WORD> | max-auth-req <1-10> | max-req <1-10> | [[pae authenticator | suppliant] | eap profile <WORD> [pae profile <WORD>] | [timeout quiet-period <1-65535> | supp-period <1-65535> | tx-period <1-65535>] | [duplex auto | half | full] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 address <X:X:X:X::X/<0-128> | autoconfig | dhcp] enable | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag | prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime 0 | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium]] | [mab eap] | [mtu <64-9000>] | [ntp broadcast client | destination<A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast < A.B.C.D> <X:X:X:X::X:X> | client < A.B.C.D> < X:X:X:X::X:X> | key <1-65534> | minpoll | version <1-4>] | [power efficient-ethernet auto] | [role lan | trusted | wan] | [shutdown] | [speed 10 |100 |1000 |auto] |[zone-member security <WORD>]} Use the no form of this command to negate a command or set its defaults.ipSyntax Description (config-if)




(config-subif)#{[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | enable-proxy-arp | timeout <1-2147483>] |[bridge-group <1-9999>] | [description <LINE>] | [encapsulation dot1q <1-4000>] | [ip address <A.B.C.D> < A.B.C.D> | dhcp] | firewall in | local | out <WORD> | policy route-policy <WORD> | [rip authentication key-chain <WORD>] | [mode md5 | text string <LINE>] | [split-horizon disable | poison-reverse]] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X> <A.B.C.D> | enable | nd prefix <X:X:X:X::X:X/0-128> | ra dns server <X:X:X::X:X>] | [mtu <64-9000>] |









Usage GuidelinesSet up Ethernet parameters for this interface.

ExamplesThis example will set the speed for this interface to 100.PerleRouter(config-if)# speed 100<cr>




[ntp broadcast client | destination<A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast < A.B.C.D> < X:X:X:X::X> | client <A.B.C.D> < X:X:X:X::X> | key<1-65534> | minpoll | version <1-4>] | [role lan | trusted | wan] |[shutdown] |[zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-subif)#

{[arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | enable-proxy-arp | timeout <1-2147483>] |

Configure arp parameters.

[bridge-group <1-9999>] | Add this interface to the specified bridge group.

[description] | Type in a description for this sub interface.

[encapsulation dot1q <1-4000>] | This sub interface is configured to encapsulation data on the specified vlan 1-4000.

[ip address <A.B.C.D> <ip_mask A.B.C.D> | dhcp | firewall in | local | out <WORD>] |

Set IP parameters for this interface.

[ipsec restrict] | Rrestict IPsec for this sub interface.

[ipv6 <X:X:X:X::X:X> <A.B.C.D> | enable | nd prefix <X:X:X:X::X:X/0-128> | ra dns server <X:X:X::X:X>] |

Configure IPv6 parameters.

[mtu <64-9000>] | Specify the mtu (maximum transmit unit).

[ntp broadcast client | destination<A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast < A.B.C.D> < X:X:X:X::X> | client <A.B.C.D> < X:X:X:X::X> | key<1-65534> | minpoll | version <1-4>] |}

Set time parameters if using Network Time Protocol.





(config-if-range)#{[alarm profile <WORD>] | [address <A.B.C.D> | dhcp] | [arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [authentication [host-mode] | [multi-auth] | [multi-host] | single-host] | [periodic] | [port-control [auto] | [forced-authorized] | force-unauthorized] | [timer reauthenticate <1-65535> | restart <1-65535>] | [bridge-group <1-9999>] |[description <LINE>] | [dot1x credential <WORD> | max-auth-req <1-10> | max-req <1-10> | [[pae authenticator | suppliant] | eap profile <WORD> [pae profile <WORD>] | [timeout quiet-period <1-65535> | supp-period <1-65535> | tx-period <1-65535>] | [duplex auto | half | full] | [ip address <A.B.C.D> | dhcp | ddns service dyndns | use-web skip | url <WORD>] | dhcp-relay | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] | policy route-policy <WORD> | rip authentication key-chain <WORD> | mode md5 | text string <0 | 7 | WORD> | [split-horizon disable | poisoned-reverse]] |[ipsec restrict] | [ipv6 address <X:X:X:X::X/<0-128> | autoconfig | dhcp] enable | firewall in | out | local <WORD> | [nd dad attempt <0-500> | managed config-flag | other-config-flag |

[zone-member security <WORD>]} Set interface to be a member of this security zone.

Command Modes PerleRouter(config)#interface ethernet 1 . 10 <cr>PerleRouter(config-subif)#

Usage GuidelinesSet parameters on more then one Ethernet port.

ExamplesPerleRouter(config-ssid)# <cr>

Related Commands



prefix <X:X:X:X::X/<0-128> <0-4294967294> | infinite | [ra dns server <X:X:X:X::X> | [hop-limit <1-255> | unspecified] | [interval <4-1800> <3-1350> | lifetime 0 | <4-9000>| suppress] | reachable time <0-3600000> | retransmission-time <0-3600000> | router-preference high | low |medium]] |[mab eap] | [mab eap] | |[mtu <64-9000>] | [ntp broadcast client | destination<A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast < A.B.C.D> <X:X:X:X::X:X> | client < A.B.C.D> < X:X:X:X::X:X> | key <1-65534> | minpoll | version <1-4>] | [power efficient-ethernet auto] | [role lan | trusted | wan] | [shutdown] | [speed 10 | 100 | 1000 | auto] |[zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if-range)#










(config-if)# openvpn-tunnel{[bridge-group <1-9999>] | [description <LINE>] | [ip ddns service dyndns | use-web skip | url <WORD>] | [[firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point] | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] | [ipv6 | enable | firewall in | local |out | nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | [ospf | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority<0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] | [policy route-policy <WORD>] | [rip authentication key-chain | mode <WORD> | split-horizon disabled | poisoned-reverse] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [zone-member security <WORD>]} Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# openvpn-tunnel



[ip ddns service dyndns | use-web skip | url <WORD>] | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point] | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] |

Specify IP parameters.




(config-if)# tunnel{[tunnel <0-999> mode gre ip arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf

[ipv6 | enable | firewall in | local |out | nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | [ospf | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority<0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535>] | [policy route-policy <WORD>] | [rip authentication key-chain | mode <WORD> | split-horizon disabled | poisoned-reverse] |

Set IPv6 configuration parameters.






Usage GuidelinesSet configuration parameters for OPEN-VPN tunnel.

ExamplesThis example will set no authentication when using ospf.PerleRouter(config-if)# ip ospf authentication null<cr>




authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X/0-128> | enable | [firewall in | local | out <WORD>] |nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip disable | poisoned-reverse] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [tunnel destination <A.B.C.D> | multicast source <A.B.C.D> source <A.B.C.D> | cellular <0-0> | dot11radio <0-0> | ethernet <1-4> . <1-4000> | tos <0-99> | ttl <1-255>] | [zone-member security <WORD>] | [ipv6ip 6in4 arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X/0-128> | enable | [firewall in | local | out <WORD>] |nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip disable | poisoned-reverse] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [tunnel destination <A.B.C.D> | multicast source <A.B.C.D> source <A.B.C.D> | cellular <0-0> | dot11radio <0-0> | ethernet <1-4> . <1-4000> | tos <0-99> | ttl <1-255>] | [zone-member security <WORD>]}Use the no form of this command to negate a command or set its defaults.Syntax Description (config-if)# tunnel



{[tunnel <0-999> mode gre ip arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [ip address <A.B.C.D> <A.B.C.D> | dhcp | ddns service dyndns | use-web skip | url <WORD>] | dns dhcp | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X/0-128> | enable | [firewall in | local | out <WORD>] |nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip disable | poisoned-reverse] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [tunnel destination <A.B.C.D> | multicast source <A.B.C.D> source <A.B.C.D> | cellular <0-0> | dot11radio <0-0> | ethernet

Sets mode gre and tunnel interface parameters.



<1-4> . <1-4000> | tos <0-99> | ttl <1-255>] | [zone-member security <WORD>] |



[ipv6ip 6in4 arp disable-arp-filter | enable-arp-accept | enable-arp-announce | enable-arp-ignore | timeout <1-2147483>] | [description <LINE>] | [firewall in | local | out <WORD>] | [health-profile <WORD> nexthop <A.B.C.D> | dhcp] | [helper-address <A.B.C.D>] | [ospf authentication message-digest | null] | authentication-key <LINE> | cost <1-65535> | dead-interval <1-65535> | hello-interval <1-65535> | [message-digest-key <1-255> md5 <LINE>] | mtu-ignore | [network broadcast | non-broadcast | point-to-point | point-to-multipoint] | priority <0-255> | retransmit-interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip authentication key-chain | mode <WORD>] | [ipsec restrict] | [ipv6 <X:X:X:X::X:X/0-128> | enable | [firewall in | local | out <WORD>] |nd prefix <X:X:X:X::X:X/0-128> | ifmtu <1-65535> | instance-id <0-255> | mtu-ignore | passive | priority <0-255> retransmit -interval <1-65535> | transmit-delay <1-65535> | policy route-policy <WORD> | rip disable | poisoned-reverse] | [mtu <64-1500>] | [ntp broadcast client | destination <A.B.C.D> | key<1-65534> | minpoll <4-17> | version <1-4> | disable | multicast <A.B.C.D> | <X:X:X:X::X> | client <A.B.C.D> | <X:X:X:X::X> | key <1-65534> | minpoll <4-17> | version <1-4>] | [role lan | trusted | wan] | [shutdown] | [tunnel destination <A.B.C.D> | multicast source <A.B.C.D> source <A.B.C.D> | cellular <0-0> | dot11radio <0-0> | ethernet <1-4> . <1-4000> | tos <0-99> | ttl <1-255>] | [zone-member security <WORD>]}

Sets IPv6 parameters for this interface.




Usage GuidelinesSets parameters for tunnel interface.

ExamplesThis example will enable arp accepts on this interface.PerleRouter(config-if)# arp enable-accepts<cr>


Perle Wireless LTE Router, CLI Reference Guide 268

Interface line mode Chapter 6

This chapter defines all the CLI commands associated with configuring the console and tty ports.

lineline {[console <0-0> | tty <1-2> | vty <0-15>]}

(config-line)#console{[accounting exec <WORD> | <default>] | [authorization exec <WORD> | <default>] | [databits <7 | 8>] | [exec-timeout <0-35791> <0-2147483>] | [history size 0-256>] | [length 0-512>] | [login authentication <WORD> | <default>] | [media-interface null | tty | usb] | [parity [even | odd | none] | [speed | 115200 | 19200 | 38400 | 57600 | 9600] | [stopbits 1 | 2] | [timeout login response <1-300>] | [transport all | none | ssh |telnet] | [width <0-512>]}Use the no form of this command to negate a command or set its defaults.

Syntax Description line

{[console <0-0> | Set parameters for the console port.

tty <1-2>]} Set parameters for the tty port.

vty <0-15>]} Set parameters for the vty port.

Command Modes PerleRouter>enablePerleRouter>configPerleRouter#line (config-line)#

Usage GuidelinesUse this command to change to line mode.

ExamplesThis example switches to line console mode.PerleRouter(config-line)# line console 0<cr>

Related Commands(config-line)#console

Syntax Description (config-line)#console

{[accounting exec <WORD> | <default>] |

Use an accounting list with a specified name or default list.

[authorization exec <WORD> | <default>] |

Use an authorization with a specified name or default list.

6

Interface line mode


[databits <7 | 8>] | Type 7 or 8 to set databits.

[exec-timeout <0-35791> <0-2147483>] |

Time in minutes and seconds for CLI to timeout on the console session.

[history size 0-256>] | Sets the size of the history buffer.

[length 0-512>] | Number of lines displayed on the screen. Type 0 for no pausing at end of page.

[login authentication <WORD> | <default>] |

Use a specified list for authentication requests or use default list.

[media-interface null | tty | usb] | use null for no console port use tty for serial port as the console

port use usb for usb as the console port

[parity [even | odd | none] | Set parity for console mode.

[speed | 115200 | 19200 | 38400 | 57600 | 9600] |

Set speed for console mode.

[stopbits 1 | 2] | Set stop bits for console mode.

[timeout login response <1-300>] | Timeout for user responses during the login sequence.

[transport all | none | ssh |telnet] | Allows the user on the console port to telnet or ssh out of the router

[width <0-512>]}Command Default console 0

timeout login response 30login authentication defaultdatabits 8parity nonestopbits 1speed 9600

Command Modes PerleRouter>enablePerleRouter>config PerleRouter(config)#line config 0<cr>PerleRouter(config-line)#

Usage Guidelines

Interface line mode


(config-line)#tty{[break | break-interrupted | local | off |remote] | [break-delay <1-65535>] | [break-length 1-65535>] | [connection-method dial-in | dial-out | dial-in-out | direct-connect | ms-direct-guest | ms-direct-host] | [databits 5 | 6 | 7 | 8] |[data-logging off | on] |[dial-retries <0-99>] | dial-timeouts <0-99> | [discard-characters-rxd-with-errors off |on] | [echo-suppression off | on] | [flow both | hard | none | soft] | [flowin off | on] | [flowout off | on] |[hotkey-prefix <0-ff>] | [idle-timer <0-4294967>] | [initiate-connection any-char | specific-char <0-ff>] | [internet-address <A.B.C.D>] | [internet address <A.B.C.D> | <X:X:X::X>] | [ip-aliasing] | [keepalive off | on] | [line-name <NAME>] | [line-termination off | on] |[lock off | on] | [map-cr-crlf off | on] | [modbus crlf | entry | protocol] | [mode disable | enable] | [modem-init-string <WORD>] | [monitor-dcd off | on] | [monitor-dsr off | on] | [monitor-dtr off | on] | [motd off | on] | [multihost entry <1-49> <A.B.C.D> | <X:X:X::X> port <1-65535>] | [multisessions <1-8>] | [name <WORD>] | [packet-forwarding delay-between-messages <1-65535> | [enable-end-tigger1 on | off] | [enable-end-tigger2 on | off] | [enable-eof1 on | off ] | [enable-eof2 on | off] | [enable-sof1 on | off] | [enable-sof2 on | off] | end-trigger1 <0-0xff> | end-trigger2

ExamplesThese commands will set your console to speed 38400, databits 7 and stopbits 2.PerleRouter(config-line)#speed 38400<cr>PerleRouter(config-line)#databits 7<cr>PerleRouter(config-line)#stopbits 2<cr>

Related Commandsclear ipv6(config-line)#tty

Interface line mode


[ssl cipher-suite option <1-5> | [encryption 3des | aes | aes-gcm | any | arcfour | arctwo | des min-key-size 128 | 168 | 256 | 40 | 56 | 64] | [max-key-size 128 | 168 | 256 | 40 | 56 | 64] | [key-exchange adh | any | ecdh-ecdsa | edh-dss | edh-rsa | rsa] | [hmac any | md5 | sha1 | sha256 | sha384] | [enable on | off] | [type client | server] | validation-criteria common-name <WORD> | country <WORD>| | email <WORD>| | locality <WORD>| | organisaton <WORD> | organisation-unit <WORD> | state-province <WORD> | [verify-peer off | on] | [version any tlsv1 | tlsv1.1 | tlsv1.2]] | [stop-bits 1 | 2] | [telnet-client echo <0-0x7f>| eof <0-0x7f> | erase <0-0x7f> | escape <0-0x7f> | intr <0-0x7f> | line-mode off | on | local-echo off | on | map-cr-crlf on | off | quit <0-0x7f>] |[termtype ansi | dumb | hp700 | ibm3151te | term1 | term2 | term3 | tvi925 | vt100 | vt320 | wyse60] | [udp entry <1-4> | both auto-learn <A.B.C.D> | <X:X:X:X::X> specific <1-65535> <WORD>| in any-port <A.B.C.D> | <X:X:X:X::X> | <A.B.C.D> | <X:X:X:X::X> | none | out <1-65535> | <A.B.C.D> | <X:X:X:X::X>] | [user <WORD>] | [vmodem echo off | on] | [failure-string <WORD>] | [host <A.B.C.D> | <X:X:X:X::X>] | [init-string <WORD> | mode [auto | manual] | port <1-65535> | response-delay <1-999> | [signals cts always-high | represent-ri] | dcd always-high | follow-connection] | [style numeric | verbose] | success-string <WORD> | suppress off | on]}Use the no form of this command to negate a command or set its defaults.Syntax Description tty 1-2

{[break | break signal from peer

Interface line mode


[break-interrupted | local | off |remote] | Specifies how a break is interpreted.Data Range: None—The router ignores the

break key completely and it is not passed through to the host.

Local—The router deals with the break locally. If the user is in a session, thebrea k key has the same effect as a hot key.

Remote—When the break key is pressed, the router translates this into a telnet break signal which it sends to the host machine.

Break Interrupt—On some systems such as SunOS, XENIX, and AIX, a break received from the peripheral is not passed to the client properly. If the client wishes to make the break act like an interrupt key (for example, when the stty options - ignbrk and brkintr are set. Default is None

[break-delay <1-65535>] | This parameter defines the delay between the termination of a a break condition and the time data will be sent out the serial port.Default is 0ms (no delay).

[break-length 1-65535>] | When the router receives a command from its peer to issue a break signal, this parameters defines the length of time the break condition will be asserted on the serial portDefault is 1000ms (1 second)

Interface line mode


[connection-method dial-in | dial-out | dial-in-out | direct-connect | ms-direct-guest | ms-direct-host] |

Dial in – If the device is remote and will be dialing in via modem or ISDN TA, enable this parameter.Default is Disabled

Dial out– If you want the modem to dial a number when the serial port is started, enable this parameter.

Default is Disabled

databits 5 | 6 | 7 | 8] | Specify the databits to use for this connection.

[data-logging off | on] | When enabled, serial data will be buffered if the TCP connection is lost. When the TCP connection is re-established, the buffered serial data will be sent to its destination. If using the Trueport profile, data logging is only supported in Lite mode Lite Mode. If the data buffer is filled, incoming serial data will overwrite the oldest data.The minimum data buffer size is 4K. The maximum data buffer size is 256K.Note: A kill line or a reboot of the router causes all buffered data to be lost. Some profile features are not compatible with the data logging feature. See serial data-logging_buffer_size.

[dial-retries <0-99>] | The number of times the router will attempt to re-establish a connection with a remote modem.Range is 0-99Default is 2

[dial-timeouts <0-99>] | The number of seconds the router will wait to establish a connection to a remote modem.Range is 1-99Default is 45 seconds

Interface line mode


[discard-characters-rxd-with-errors off |on] | When enabled, the router will discard characters received with a parity or framing error.Default is Disabled

[echo-suppression off | on] | This parameter applies to EIA-485 half-duplex mode, all characters will be echoed to the user and transmitted across the serial ports. Some EIA-485 applications require local echo to be enabled in order to monitor the loopback data to determine that line contention has occurred. If your application cannot handle loopback data, echo suppression should be enabled.Default is Disabled

[flow both | hard | none | soft] | Defines whether the data flow is handled by the software (soft), hardware (hard), both or none. If you are using SLIP, set to Hard only. If you are using PPP set to either soft or hard (hard is recommended). If you select soft with PPP, you must set the ACCM parameter when you configure PPP for the serial port. Data Options: Soft, Hard, Both, NoneDefault is None

[flowin off | on] | Determines if input flow control is to be used.

[flowout off on] | Determines if output flow control is to be used.Default is Enabled

Interface line mode


[hotkey-prefix <0-ff>] | The prefix that a user types to lock a serial port or redraw the Menu.Data Range:• ^a l—(Lowercase L) Locks the serial port until the user unlocks it. The user is prompted for a password ( any password, excluding spaces) and locks the serial port. Next, the user must retype the password to unocj the serial port.• ^r—When you switch from a session back to the Menu, the screen may not beredrawn correctly. If this happens, use this command to redraw it properly. This is always Ctrl R, regardless of the Hot Key prefix.You can use the Hotkey Prefix to lock a serial port only when the Allow Port Locking parameter is enabled.Default is hexadecimal 01 (Ctrl-a, ^a)

[idle-timer <0-4294967>] | Use this timer to close a connection because of inactivity. When the idle timeout expires, the router will end the connection because of inactivity.Range is 0-4294967 seconds (about 49 days)Default is 0 seconds so the port will never timeout.

[initiate-connection any-char | specific-char <0-ff>] |

Initiates a connection to the specified host when any data is received on the serial port.Default is DisabledInitiates a connection to the specified host only when the specified character is received on the serial port.Default is Disabled

[internet address <A.B.C.D> | <X:X:X::X>] | The internet address of this serial port.

Interface line mode


[ip-aliasing] | Enable and specify an IP address for the serial port.

[keepalive off | on] | Enables a per connection TCP keep-alive feature. After the configured number of seconds, the connection will send a gratuitous ACK to the network peer, thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized. This parameter needs to be used in conjunction with the Monitor Connection Status Interval parameter found under config serial. The interval specifies the inactivity period before "testing" the connection.Note: If a network connection is accidentally dropped, it can take as long as the specified interval before anyone can reconnect to the serial port.Default is Disabled

[line-name <NAME>] | The name of this serial port.

[line-termination off | on] | Used with the routers that have a EIA-485 serial port. Specifies whether or not the line is terminated; use this option when the serial port is connected to a device at the end of a serial network. Line termination should only be used if the serial port is the end point in a network.Default is Disabled

[lock off | on] | When enabled, the user can lock his terminal with a password usingt the hotkey prefix (ctrl-a) ^a (lowercase L). The router prompts the user for a password and a confirmation.Default is disabled.

Interface line mode


[map-cr-crlf off | on] | When enabled, maps carriage returns (CR) to carriage return line feed (CRLF).Default is Disabled

[modbus crlf | entry | protocol] | When Modbus/Ascii is selected, adds a CR/LF to the end of the transmission; most Modbus devices require this option.Default is enabled

[mode disable | enable] | When enabled., keyboard input is not sent to the remote host until Enter is pressed, otherwise input is sent every time a key is pressed.Default is Disabled

[modem-init-string <WORD>] | Sent the configured initialization string to set up with attached modem.

[monitor-dcd off | on] | Specifies whether the EIA-232 signal DCD (Data Carrier Detect) should be monitored. This is used with modems or any other device that sends a DCD signal. When it is monitored and the router detects a DCD signal, the serial port profile is started. If both monitor DCD and Monitor DSR are enabled, both signals must be detected before the serial port profile is started.Default is disabled

[monitor-dsr off | on] | Specifies whether the EIA-232 signal DSR (Data Set Ready) should be monitored.This is used with modems or any device that sends a DSR signal. When it is monitored and the router detects a DSR signal, the serial port profile is started. If both Monitor DCD and Monitor DSR are enabled, both signals must be detected before the serial port profile is started.Default is disabled

[monitor-dtr off | on] | Monitor for DTR.

Interface line mode


[rts-toggle-final-delay | on] | Final delay – configure the time (in ms) between the time of the character transmission and when the RTS is dropped.Final delay range: 0-1000 msDefault is off

[rts-toggle-initial-delay off | on] | Initial delay – configure the time (in ms) between the time the RTS signal is raised and the start of character transmission. This delay only applies if this port is not running hardware flow control. If hardware flow control is used, the transmission will occur as soon as CTS is raised by the modem.Initial delay range is 0 – 1000 ms

[send-name off | on] | When enabled, the port name will be sent to the host upon session initiation. This will be done before any other data is sent or received to/from the host.Default is disabled

[send-port-id off | on] | Send port-id when enabled.

[service bidir <A.B.C.D> <1-65535> <1-65535>] |

Used for TCP Sockets, Reverse and Silent connections. Enter the host to connect to, server port number and host port number.

[service client-tunnel <A.B.C.D> <1-65535>] | Enter the host to connect to and host port number.

[service direct raw <A.B.C.D> | rlogin <A.B.C.D> | ssh <1-65535> | telnet <A.B.C.D> <1-65535>] |

Set service to direct raw.

[service dslogin] | Connect to the serial port in Command Line Interface (CLI) mode on this port.

[service modbus-master] | Set service modbus master.

[service modbus-slave] | Set service to modbus slave.

[service ppp] | Select service type as PPP for this serial port.

[service printer] | Select printer type as printer for this serial port.

Interface line mode


[service reverse raw [multihost on | off | tcp-port <1-65535> | multihost] | ssh <1-65535> | telnet <1-65535>] |

Set parameters for a reverse raw connection.

[service server-tunnel <1-65535>] | Set service to server tunnel connection.

[service silent raw <1-65535> | multihost all | backup < A.B.C.D> <1-65535> <1-65535> | none]

Multihost – Used for connections coming from the network to the serial port for Trueport or Raw. RawMultihost – allows multiple hosts to connect to the serial device.Backup – Used for connections going from the serial port to the network for Trueport or Silent Raw services, allows the serial port to communicate to either all the hosts in the multi-host list or a primary/backup host.

[service slip] | Set service to slip.

[service trueport client-initiated off <A.B.C.D> <1-65535> [multihost all | backup | none] signal-active off | on] | on <1-65535> [multihost all | backup | none] | signal-active off | on]] |

Set service to trueport.

[service udp <1-65535>] | Set service to udp.

[service vmodem <1-65535>] | Set service to vmodem.

[sess-timer <0-4294967>] | Use this timer to forcibly close the session/connection when the Session Timeout expires.Default is 0 seconds so that the port never timeouts.Range is 0-4294967 seconds (about 49 days)

Interface line mode


[session-strings delay<0-65535> | initiate <WORD> | terminate <WORD>] |

Delay after Send – If configured, a delay time is sent to the device. This delay can be used to provide the serial device with time to process the string before the session is initiated.Initiate at Start – If configured, this string will be sent to the serial device on the power-up of the router or when a kill line command is issued on this serial port. If the "monitor DSR" or "monitor DCD" options are set, the string will also be sent when the monitored signal is raised.Range is 0-127 alpha-numeric characters. Non printable ascii characters must be entered in this format <027>. The decimal numbers within the brackets must be 3 digits long (example 003 not 3)Send at Terminate – If configured, this string will be sent to the serial device when the TCP session on the LAN is terminated. If multi-host is configured, this string will only be sent in listen mode to the serial device when all multi-host connections are terminated.Range is 0-127 alpha-numeric characters. Non printable ascii characters must be entered in this format <027>. The decimal numbers within the brackets must be 3 digits long (example 003 not 3)

[slip lipaddr | mtu |<A.B.C.D> | netmask <A.B.C.D> | ripaddr <A.B.C.D> | routing listen | none | send | send-and-listen | vj-comp on | off]

Set SLIP parameters.

[speed 115200 | 1200 | 1800 | 19200 | 230400 | 2400 | 28800 | 300 | 38400 | 4800 | 57600 | 600 | 9600 | custom] |

Set the line speed.

Interface line mode


[telnet-client echo <0-0x7f>| eof <0-0x7f> | erase <0-0x7f> | escape <0-0x7f> | intr <0-0x7f> | line-mode off | on | local-echo off | on | map-cr-crlf on | off | quit <0-0x7f> | termtype <WORD>] |

Echo – toggles between local echo of entered characters and suppressing local echo. Local echo is used for normal processing, while suppressing the echo is convenient for entering text that should not be displayed on the screen, such as passwords. This parameter can be used only when Enable Line mode is enabled.Default is disabledeof – Defines the end-of-file character. When enabled Line mode is enabled, entering the EOF character as the first character on a line sends the character to the remote host.This value is in hexadecimal.Default is 4 (ASCII value ^D)erase –Defines the erase character. When Line mode is off, typing the erase character erases one character.This value is in hexadecimal.Default is 8 (ASCII value ^H)escape – Defines the escape character. Returns you to the command line mode. This value is hexadecimal. Default is 1d (ASCII value GS)line mode – When enabled, keyboard input is not sent to the remote host until Enter is pressed, otherwise input is sent every time a key is pressed. Default is disabledlocal echo – Toggles between local echo of entered character and suppressing local echo Local echo is used for normal processing, while suppressing the echo is convenient for entering text that should not be display on the screen such as passwords.This parameter can only be used when Enable Line Mode is enabled.Default is disabled

Interface line mode


map cr to crlf – When enabled, maps carriage return (CR) to carriage return/line feed (CR/LF). Default is disabledQuit – Defines the quit character. Typing the quit character closes and exits the current telnet session. This value is in hexadecimal. Default is 1c (ASCII value FS)

[termtype ansi | dumb | hp700 | ibm3151te | term1 | term2 | term3 | tvi925 | vt100 | vt320 | wyse60] |

Specify a terminal type.

[udp entry <1-4> | both auto-learn <A.B.C.D> | <X:X:X:X::X> specific <1-65535> <A.B.C.D> | <X:X:X:X::X>| in any-port <A.B.C.D> | <X:X:X:X::X> <A.B.C.D> | <X:X:X:X::X> | none | out <1-65535> <A.B.C.D> | <X:X:X:X::X>] |

[user <WORD>] |

[vmodem echo off | on] | [failure-string <WORD>] | [host <A.B.C.D> | <X:X:X:X::X>] | [init-string <WORD> | mode [auto | manual] | port <1-65535> | response-delay <1-999> | [signals cts always-high | represent-ri] | dcd always-high | follow-connection] | [style numeric | verbose] | success-string <WORD> | suppress off | on]}

Command Modes PerleRouter(config-line)#

Usage Guidelines

ExamplesThis example disables CLI mode for tty 1-2.PerleRouter(config)#tty 1-2<cr>PerleRouter(config-line)no exec<cr>

Related Commands

Interface line mode


(config-line)#vty {[exec-timeout <0-35791> <0-2147483>] | [history size 0-256>] | [length 0-512>] | [width <0-512>]}Use the no form of this command to negate a command or set its defaults. Syntax Description vty 0-15

[exec-timeout <0-35791> <0-2147483>] |

Time in minutes and seconds for CLI to timeout on the console session.

[history size 0-256>] | Sets the size of the history buffer.

[length 0-512>] | Number of lines displayed on the screen. Type 0 for no pausing at end of page.

[width <0-512>]} Terminal screen width.

Command Default

Command Modes PerleRouter>enablePerleRouter>config PerleRouter(config)#line vty<cr>PerleRouter(config-line)#

Usage Guidelines

ExamplesSet terminal width to 132.PerleRouter(config)#line vty<cr>PerleRouter(config-line)#width 132<cr>

Related Commands(config-line)#tty

Perle IRG5000 Series Router CLI Reference Guide · 2020-02-03 · command mode it takes you to down...

Documents

Transcript of Perle IRG5000 Series Router CLI Reference Guide · 2020-02-03 · command mode it takes you to down...