Nortel Secure Router 2330/4134 Using the Command Line Interface Release: 10.2 Document Revision: 03.01 www.nortel.com .NN47263-506 Nortel Secure Router 2330/4134 Release: 10.2 Publication: NN47263-506 Document release date: 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. While the information in this document is believed to be accurate and reliable, except as otherwise expressly agreed to in writing NORTEL PROVIDES THIS DOCUMENT "AS IS" WITHOUT WARRANTY OR CONDITION OF ANY KIND, EITHER EXPRESS OR IMPLIED. The information and/or products described in this document are subject to change without notice. Nortel, Nortel Networks, the Nortel logo, and the Globemark are trademarks of Nortel Networks. THE SOFTWARE DESCRIBED IN THIS DOCUMENT IS FURNISHED UNDER A LICENSE AGREEMENT AND MAY BE USED ONLY IN ACCORDANCE WITH THE TERMS OF THAT LICENSE. All other trademarks are the property of their respective owners. 3 . Contents New in this release 5 Features 5 show system configuration 5 Other changes 5 Secure Router 2330 hardware 5 Introduction 7 CLI fundamentals 9 Top-level commands 10 Global commands 10 Configuration mode 11 Context-sensitive configuration commands 11 CLI user access levels 12 Multiple concurrent CLI users 12 Context-sensitive help 12 Command-specific help 13 Command tree 13 Navigation keys 14 Navigation commands 15 no command 15 Command abbreviations 15 Command history 15 Configuration file 15 Module slot and port numbering 16 Secure Router 4134 Voice Carrier medium module subslots 17 Boot CLI fundamentals 19 Boot CLI command list 19 Basic CLI operations 23 Logging on 24 Configuring the router from a terminal 24 Configuring users 25 Modifying the administrator account user name 25 Modifying passwords for other users 26 Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 4 Modifying your own password 26 Saving the current configuration to file 27 Encrypting password display 28 Adding a header to the configuration file 28 Adding comments at the beginning of a configuration 28 Adding comments to the end of a configuration 29 Configuring the router using configuration files from flash 29 Configuring the router using configuration files from the network 30 Configuring the timeout for console sessions 30 Displaying the console timeout 31 Displaying configured user accounts 31 Displaying connected users 31 Displaying user account for current session 31 Displaying running configuration 32 Displaying stored configuration 32 Displaying system configuration 32 File management 35 Navigation 35 Copying files to and from compact flash or USB 35 Downloading files from the network to compact flash or USB 36 Uploading a file from compact flash or USB to the network 37 Formatting a compact flash or USB device 37 Renaming a file on compact flash or USB 38 Removing a file from compact flash or USB 38 Uploading the event log to the network 38 Displaying the file list from compact flash or USB 38 Displaying image file versions from compact flash or USB 39 Displaying Boot ROM file information 39 Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 5 . New in this release The following sections detail what’s new in Nortel Secure Router 2330/4134 — Using the CLI (NN47263-506). ATTENTION In this document, the term Secure Router 2330/4134 is used interchangeably to refer to the Secure Router 2330 and the Secure Router 4134. Features See the following sections for information about features changes: show system configuration With release 10.2, the output of the show system configuration is modified so that the slot allocation is shown in consecutive order. For more information, see “Displaying system configuration” (page 32). Other changes See the following sections for information about changes that are not feature-related: Secure Router 2330 hardware This document is updated to refer to the new Secure Router 2330 hardware in addition to the existing Secure Router 4134 hardware. For information on port and slot numbering for the SR2330, see Figure 2 "Secure Router 2330 front panel" (page 17). Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 6 New in this release Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 7 . Introduction This document describes the basic functionality and navigation of the Command Line Interface (CLI) for Secure Router 2330/4134 (SR2000/4134). Navigation • “CLI fundamentals” (page 9) • “Boot CLI fundamentals” (page 19) • “Basic CLI operations” (page 23) • “File management” (page 35) Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 8 Introduction Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 9 . CLI fundamentals The command line interface (CLI) is the main, text-based interface for configuring, managing, and monitoring the Secure Router 2330/4134. You access the CLI through a direct connection to the console port, or remotely using Telnet. This section contains information about the basic CLI functionality with the Secure Router 2330/4134. Navigation • “Top-level commands” (page 10) • “Global commands” (page 10) • “Configuration mode” (page 11) • “Context-sensitive configuration commands” (page 11) • “CLI user access levels” (page 12) • “Multiple concurrent CLI users” (page 12) • “Context-sensitive help” (page 12) • “Command-specific help” (page 13) • “Command tree” (page 13) • “Navigation keys” (page 14) • “Navigation commands” (page 15) • “no command” (page 15) • “Command abbreviations” (page 15) • “Command history” (page 15) • “Configuration file” (page 15) • “Module slot and port numbering” (page 16) Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 10 CLI fundamentals Top-level commands When you log on to the switch, you enter the top level of the CLI hierarchy. From this level, you can access various top-level commands, including debugging, system file configuration, password configuration, testing, and rebooting. The configure command is also available for entering the configuration mode, or configuring the switch from an existing configuration file. The following table lists the commands that are accessible only from the top level of the CLI. Table 1 Top-level commands Command Definition configure Configure from [flash | network | terminal]. debug Access debug commands. file Access file commands. password Change the user password. reboot Reboot the system. test Access test commands. Global commands From the top level of the CLI, you can also access additional operational commands including clear, pin, save, show, telnet, and trace. These commands are available from any level of the CLI. The following table lists the global commands are available from any level of the CLI. Table 2 Global commands Command Definition clear Access clear commands. ping Invoke ping to IP host. ping6 Invoke pint to IPv6 host. save Save configuration to [local | network]. show Access show commands. telnet Open a Telnet connection. Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. Context-sensitive configuration commands 11 Table 2 Global commands (cont’d.) Command Definition trace Trace the route to a destination address or host name. trace6 Trace the route to an IPv6 destination address or host name. Configuration mode To configure the router system parameters, you must enter the configuration mode using the configure terminal command. For example: SR4134#configure terminal SR4134/configure# From the configuration mode, you can configure router system parameters for the SR2000/4134. You can also access configuration commands for specific interfaces, modules, or features. For detailed configuration commands, refer to Context-sensitive configuration commands To configure parameters for certain interfaces, modules, or features, you must first select the desired object to configure. For example, you can select an interface from the configuration mode by entering the interface command. Or you can configure the firewall parameters by entering the firewall command. When you select a particular object, the CLI prompt level changes to display the object that is selected. Any subsequent commands that you enter apply only to the selected object until you exit the command level for that object. For example, the following displays the commands required to select Ethernet interface in slot 0, port 1 for configuration. SR4134#configure terminal SR4134/configure# interface ethernet 0/1 Configuring existing Ethernet interface SR4134/configure/interface/ethernet (0/1)# The commands available differ depending on the particular object selected. Nortel Secure Router 2330/4134 Using the Command Line Interface NN47263-506 03.01 7 September 2009 Copyright © 2007-2009 Nortel Networks. All Rights Reserved. 12 CLI fundamentals CLI user access levels The CLI supports four levels