-
Cisco IOS Wide-Area Networking Command Reference, Release 12.3 T
-
Introduction
-
Wide-Area Networking Commands: A through B
-
Wide-Area Networking Commands: C
-
Wide-Area Networking Commands: D through E
-
Wide-Area Networking Commands: frame-relay adaptive-shaping through frame-relay lmi-type
-
Wide-Area Networking Commands: frame-relay local-dlci through fr-atm connect dlci
-
Wide-Area Networking Commands: H through L
-
Wide-Area Networking Commands: M through R \r\n
-
Wide-Area Networking Commands: scrambling cell-payload through show dxi pvc
-
Wide-Area Networking Commands: show frame-relay through show vc-group
-
Wide-Area Networking Commands: show x25 through svc
-
Wide-Area Networking Commands: T through x25 nvc
-
Wide-Area Networking Commands: x25 ops through xot access-group
-
Table Of Contents
subscriber authorization enable
show x25 context
To display operating configuration status details of an X.25 link, use the show x25 context command in EXEC mode.
show x25 context [xot | interface serial number [dlci number] | cmns-interface-type number [mac mac-address]]
Syntax Description
Command Modes
EXEC
Command History
Examples
XOT Example
The following is sample output from the show x25 context command with the xot keyword:
Router# show x25 context xotXOT Access-group 2PROFILE mod128 station DXE/DTE, address 2222, state R1, modulo 128, timer 0Defaults: idle VC timeout 0input/output window sizes 80/80, packet sizes 256/256Timers: T20 180, T21 200, T22 180, T23 180RESTARTs 0/0 CALLs 5+0/7+0/0+0 DIAGs 0/0XOT Access-group 3station DXE/DTE, address <none>, state R1, modulo 8, timer 0Defaults: idle VC timeout 0input/output window sizes 2/2, packet sizes 128/128Timers: T20 180, T21 200, T22 180, T23 180RESTARTs 0/0 CALLs 21+0/50+0/0+0 DIAGs 0/0Serial Interface Example
The following is sample output from the show x25 context command:
Router# show x25 context interface serial 1Serial1 DLCI 20PROFILE DCE, address <none>, state R1, modulo 8, timer 0Defaults: idle VC timeout 0input/output window sizes 2/2, packet sizes 128/128Timers: T10 60, T11 180, T12 60, T13 60Channels: Incoming-only none, Two-way 1-1024, Outgoing-only noneRESTARTs 1/0 CALLs 0+0/0+0/0+0 DIAGs 0/0LAPB DCE, state CONNECT, modulo 8, k 7, N1 12056, N2 20T1 3000, T2 0, interface outage (partial T3) 0, T4 0VS 7, VR 6, tx NR 6, Remote VR 7, Retransmissions 0Queues: U/S frames 0, I frames 0, unack. 0, reTx 0IFRAMEs 111/118 RNRs 0/0 REJs 0/0 SABM/Es 14/1 FRMRs 0/0 DISCs 0/0X.25 Failover Example
The following is sample output from the show x25 context command when the X.25 Failover feature is configured. The "Fail-over delay" field appears when the primary interface has gone down and come back up again. The number of seconds indicates the time remaining until the secondary interface will reset.
Router# show x25 contextSerial1 DLCI 33PROFILE dxe/DCE, address 3032, state R1, modulo 8, timer 0Defaults:idle VC timeout 0input/output window sizes 2/2, packet sizes 128/128Timers:T20 180, T21 200, T22 180, T23 180Channels:Incoming-only none, Two-way 1-4095, Outgoing-only noneRESTARTs 12/0 CALLs 5+4/0+0/0+0 DIAGs 0/0Fail-over delay:16 seconds remaining on Dialer0LAPB dxe/DCE, state CONNECT, modulo 8, k 7, N1 12056, N2 20T1 3000, T2 0, interface outage (partial T3) 0, T4 0VS 1, VR 1, tx NR 1, Remote VR 1, Retransmissions 0Queues:U/S frames 0, I frames 0, unack. 0, reTx 0IFRAMEs 97/88 RNRs 0/0 REJs 0/0 SABM/Es 55490/12 FRMRs 186/0 DISCsTable 51 describes significant fields shown in the displays.
Table 53 show x25 context Field Descriptions
XOT Access-group
Number of the XOT access group.
PROFILE
X.25 profile associated with the XOT access group.
address
Address to which the interface is connected.
state
State of the interface. Possible values are as follows:
R1— normal ready state
R2—DTE1 restarting state
R3—DCE2 restarting state
If the state is R2 or R3, the interface is awaiting acknowledgment of a Restart packet.
modulo
Modulo packet sequence numbering scheme.
timer
Interface timer value (zero unless the interface state is R2 or R3).
Defaults: idle VC timeout
Inactivity time before clearing the virtual circuit.
input/output window sizes
Default window sizes (in packets) for the interface. The x25 facility interface configuration command can be used to override these default values for the switched virtual circuits originated by the router.
packet sizes
Default maximum packet sizes (in bytes) for the interface. The x25 facility interface configuration command can be used to override these default values for the switched virtual circuits originated by the router.
Timers
Values of the X.25 timers are as follows:
T10 through T13 for a DCE device
T20 through T23 for a DTE device
Channels
Virtual circuit ranges for this interface.
RESTARTs
Restart packet statistics for the interface using the format Sent/Received.
CALLs
(number of successful calls sent + calls failed)/(calls received + calls failed)/(calls forwarded + calls failed). Calls forwarded are counted as calls sent.
DIAGs
Number of diagnostic messages sent and received.
Fail-over delay
Number of seconds remaining until secondary interface resets.
1 DTE = data terminal equipment
2 DCE = data communications equipment
Related Commands
show x25 cug
To display information about all closed user groups (CUGs) or specific CUGs (defined by the local or network CUG number), use the show x25 cug command in EXEC mode.
show x25 cug {local-cug [number] | network-cug [number]}
Syntax Description
Command Modes
EXEC
Command History
Usage Guidelines
You must designate either the local CUG or the network CUG by the choice of keyword. Within that designation you can view all CUGs or a specific CUG defined by its local or network CUG identifier.
Examples
CUG Selection Facility Suppress Option Example
The following is sample output for the show x25 cug command when CUG selection facility is suppressed for all CUGs on serial interface 1/2 and for the preferential CUG on the X.25 profile named "cug".
Router# show x25 cug local-cugX.25 Serial1/2, 2 CUGs subscribed with no public accessCUG selection facility suppressed for all CUGslocal-cug 100 <-> network-cug 10local-cug 1 <-> network-cug 11PROFILE cug, 2 CUGs subscribed with incoming public accessCUG selection facility suppressed for preferential CUGlocal-cug 0 <-> network-cug 0 , preferentiallocal-cug 100 <-> network-cug 100local-cug 200 <-> network-cug 200Local CUG Example
The following sample output from the show x25 cug local-cug command displays information about all local CUGs on configured on the router.
Router# show x25 cug local-cugX.25 Serial1/1, 3 CUGs subscribed with no public accesslocal-cug 99 <-> network-cug 9999, no-incoming, preferentiallocal-cug 100 <-> network-cug 1000local-cug 101 <-> network-cug 1001PROFILE cugs, 2 CUGs subscribed with with incoming public accesslocal-cug 1 <-> network-cug 10, no-outgoinglocal-cug 2 <-> network-cug 20, no-incoming, preferentialLine: 129 aux 0 , 1 CUGs subscribed with outgoing public accesslocal-cug 1 <-> network-cug 10Line: 130 vty 0 , 4 CUGs subscribed with incoming and outgoing public accesslocal-cug 1 <-> network-cug 10local-cug 50 <-> network-cug 5, preferentiallocal-cug 60 <-> network-cug 6, no-incominglocal-cug 70 <-> network-cug 7, no-outgoingLine: 131 vty 1 , 1 CUGs subscribed with no public accesslocal-cug 1 <-> network-cug 10Network CUG Example
The following is sample output from the show x25 cug network-cug command specifically for network number 10 showing that local CUG 1 is associated with it.
Router# show x25 cug network-cug 10X.25 Serial1/2, 5 CUGs subscribed with no public accessnetwork-cug 10 <-> local-cug 1PROFILE cugs, 2 CUGs subscribed with no public accessnetwork-cug 10 <-> local-cug 1 , no-outgoingLine: 129 aux 0 , 1 CUGs subscribed with no public accessnetwork-cug 10 <-> local-cug 1Line: 130 vty 0 , 4 CUGs subscribed with incoming and outgoing public accessnetwork-cug 10 <-> local-cug 1Line: 131 vty 1 , 1 CUGs subscribed with no public accessnetwork-cug 10 <-> local-cug 1Table 52 describes the significant fields shown in the displays.
Related Commands
show x25 hunt-group
To display hunt groups and view detailed interface statistics and distribution methods, use the show x25 hunt-group command in privileged EXEC mode.
show x25 hunt-group [name]
Syntax Description
Command Modes
Privileged EXEC
Command History
12.0(3)T
This command was introduced.
12.0(5)T
The command output status field was modified to include "unoperational" as a type of interface status.
Usage Guidelines
Use the clear counters or the clear x25 commands in EXEC mode to clear the count of VCs in use in the "status" field and the number of bytes of data transmitted and received in the "traffic" field. Since the "uses" field is a hunt-group-specific counter, it will not be cleared using the clear counters or clear x25 commands. The "uses" field is only cleared at boot time or when the hunt group is defined.
Examples
The following is sample output from the show x25 hunt-group command:
Router# show x25 hunt-groupID Type Target uses status traffic(out/in)=================================================================================HG1 rotary Serial1 2 next 1158/1691Serial2 2 next 1328/2146xot 172.17.125.54 2 last_used 137/3154xot 172.17.125.34 1 next 137/3154HG2 vc-count Serial2 4 5 VCs 6921/1364Serial3 2 1 VC 70/1259Table 53 describes significant fields shown in the display.
Related Commands
clear x25
Restarts an X.25 or CMNS service, clears an SVC, or resets a PVC.
x25 hunt-group
Creates and maintains a hunt group.
show x25 interface
To display information about virtual circuits (VCs) that use an X.25 interface and, optionally, about a specified virtual circuit, use the show x25 interface EXEC command.
show x25 interface [serial number | cmns-interface mac mac-address]
Syntax Description
Command Modes
EXEC
Command History
Examples
The following show x25 interface sample output displays X.25 information about VCs on serial interface 0:
Router# show x25 interface serial 0SVC 1, State: D1, Interface: Serial0Started 00:13:52, last input 00:00:05, output neverConnects 3334 <-> ip 3.3.3.4Call PID ietf, Data PID noneWindow size input: 7, output: 7Packet size input: 512, output: 512PS: 0 PR: 6 ACK: 1 Remote PR: 0 RCNT: 5 RNR: noP/D state timeouts: 0 timer (secs): 0data bytes 0/2508 packets 0/54 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0SVC 32, State: D1, Interface: Serial0.11Started 00:16:53, last input 00:00:37, output 00:00:28Connects 3334 <-> clnsCall PID cisco, Data PID noneWindow size input: 7, output: 7Packet size input: 512, output: 512PS: 5 PR: 4 ACK: 4 Remote PR: 4 RCNT: 0 RNR: noP/D state timeouts: 0 timer (secs): 0data bytes 378/360 packets 21/20 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0show x25 map
To display information about configured address maps, use the show x25 map command in privileged EXEC mode.
show x25 map
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
10.0
This command was introduced.
12.2(8)T
This command was modified to display record boundary preservation information for address maps.
Usage Guidelines
The show x25 map command displays information about the following:
•
Configured maps (defined by the x25 map command)
•
•
Examples
Record Boundary Preservation Examples
The following is sample output of the show x25 map command for a router that is configured with record boundary preservation (RBP) using the x25 pvc rbp remote command:
Router# show x25 mapSerial1/0:-> rbp, destination host 10.0.0.33 port 9999PVC, 1 VC:1/PThe following is sample output of the show x25 map command for a router that is configured with RBP using the x25 map rbp remote command:
Router# show x25 mapSerial3/0:12132 -> rbp, destination host 10.0.0.32 port 9999permanent, 1 VC:1024The following is sample output of the show x25 map command for a router that is configured with RBP using the x25 pvc rbp local command:
Router# show x25 mapSerial3/0:<- rbp, listening at port 9999PVC, 1 VC:2/PThe following is sample output of the show x25 map command for a router that is configured with RBP using the x25 map rbp local command:
Router# show x25 mapSerial1/0:12131 <- rbp, listening at port 9999permanent, 1 VC:1Table 54 describes significant fields shown in the display.
Typical X.25 Maps Example
The following is sample output from the show x25 map for five maps that were configured with the x25 map command:
Router# show x25 mapSerial0: X.121 1311001 <--> ip 172.20.170.1PERMANENT, BROADCAST, 2 VCS: 3 4Serial0: X.121 1311005 <--> appletalk 128.1PERMANENTSerial1: X.121 2194441 cud hello <--> padPERMANENT, windowsize 5 5, accept-reverse, idle 5Serial1: X.121 1311005 <--> bridgePERMANENT, BROADCASTSerial2: X.121 001003 <--> apollo 1.3,appletalk 1.3,ip 172.20.1.3,decnet 1.3,novell 1.0000.0c04.35df,vines 00000001:0003,xns 1.0000.0c04.35df,clnsPERMANENT, NVC 8, 1 VC: 1024The display shows that five maps have been configured for a router: two for serial interface 0, two for serial interface 1, and one for the serial interface 2 (which maps eight protocols to the host).
Table 57 describes significant fields shown in the display.
show x25 profile
To view details of X.25 profiles on your router, use the show x25 profile command in EXEC mode.
show x25 profile [name]
Syntax Description
Command Modes
EXEC
Command History
12.0(3)T
This command was introduced.
12.2(8)T
This command was modified to display the XOT access groups associated with an X.25 profile.
Usage Guidelines
When the X.25 profile name is not specified, the output shows all configured profiles for a given interface.
Examples
The following sample output from the show x25 profile command displays details about the X.25 profile called "XOT-DEFAULT":
Router# show x25 profile XOT-DEFAULTX.25 profile name: XOT-DEFAULTIn use by:Access-group 2Access-group 10PROFILE dxe/DTE, address 12345, state R/Inactive, modulo 128, timer 0Defaults: idle VC timeout 0input/output window sizes 20/20, packet sizes 256/256Timers: T20 180, T21 200, T22 180, T23 180Channels: Incoming-only none, Two-way 1-4095, Outgoing-only noneThe following sample output from the show x25 profile command displays all profiles configured on the same interface:
Router# show x25 profileX.25 profile name:NetworkNodeANumber of references:2In use by:Annex G:Serial1 DLCI 20Annex G:Serial1 DLCI 30PROFILE DCE, address <none>, state R/Inactive, modulo 128, timer 0Defaults:idle VC timeout 5input/output window sizes 2/2, packet sizes 128/128Timers:T10 60, T11 180, T12 60, T13 60Channels:Incoming-only none, Two-way 1-128, Outgoing-only noneLAPB DCE, modulo 8, k 7, N1 default, N2 20T1 3000, T2 0, interface outage (partial T3) 0, T4 0X.25 profile name:NetworkNodeBNumber of references:1In use by:Annex G:Serial1 DLCI 40PROFILE DTE, address 1111, state R/Inactive, modulo 8, timer 0Defaults:idle VC timeout 0input/output window sizes 2/2, packet sizes 128/128Timers:T20 180, T21 200, T22 180, T23 180Channels:Incoming-only none, Two-way 1-1024, Outgoing-only noneLAPB DTE, modulo 8, k 7, N1 default, N2 20T1 3000, T2 0, interface outage (partial T3) 0, T4 0Table 58 describes significant fields shown in the display.
Table 58 show x25 profile Field Descriptions
Number of references
Number of X.25 connections using this profile.
In use by
Shows the interface, XOT access group, and X.25 service using this profile.
address
Address to which interface is connected.
state
State of the interface. Possible values are as follows:
R1—normal ready state
R2—DTE1 restarting state
R3—DCE2 restarting state
If the state is R2 or R3, the interface is awaiting acknowledgment of a Restart packet.
modulo
Value that determines the packet sequence numbering scheme used.
timer
Interface timer value (zero unless the interface state is R2 or R3).
Defaults: idle VC timeout
Inactivity time before clearing the virtual circuit.
input/output window sizes
Default window sizes (in packets) for the interface. The x25 facility interface configuration command can be used to override these default values for the switched virtual circuits originated by the router.
packet sizes
Default maximum packet sizes (in bytes) for the interface. The x25 facility interface configuration command can be used to override these default values for the switched virtual circuits originated by the router.
Timers
Values of the X.25 timers are as follows:
T10 through T13 for a DCE device
T20 through T23 for a DTE device
Channels:
Virtual circuit ranges for this interface.
1 DTE = data terminal equipment
2 DCE = data communications equipment
Related Commands
show x25 remote-red
This command is no longer supported.
show x25 route
To display the X.25 routing table, use the show x25 route command in privileged EXEC mode.
show x25 route
Syntax Description
This command has no arguments or keywords.
Command Modes
Privileged EXEC
Command History
Examples
The following example shows output from the show x25 route command:
Router# show x25 route# Match Substitute Route To1 dest ^1311001$ Serial0, 0 uses2 dest ^1311002$ xot 172.20.170.103 dest 444 xot dns \04 dest 555 xot dns \0Table 59 describes significant fields shown in the display.
Related Commands
x25 route
Creates an entry in the X.25 routing table (to be consulted for forwarding incoming calls and for placing outgoing PAD or protocol translation calls).
show x25 services
To display information pertaining to the X.25 services, use the show x25 services command in EXEC mode.
show x25 services
Syntax Description
This command has no arguments or keywords.
Command Modes
EXEC
Command History
Usage Guidelines
This command is the default form of the show x25 command.
Examples
The following is sample output from the show x25 services command:
Router# show x25 servicesX.25 software, Version 3.0.0.3 configurations supporting 3 active contextsVCs allocated, freed and in use: 7 - 0 = 7VCs active and idle: 4, 3XOT software, Version 2.0.0.VCs allocated, freed and in use: 2 - 1 = 1connections in-progress: 0 outgoing and 0 incomingactive VCs: 1, connected to 1 remote hostsRelated Commands
show x25 vc
To display information about active switched virtual circuits (SVCs) and permanent virtual circuits (PVCs), use the show x25 vc command in privileged EXEC mode.
show x25 vc [lcn]
Syntax Description
Command Modes
Privileged EXEC
Command History
8.3
This command was introduced in a release prior to Release 8.3.
12.2(8)T
This command was modified to display information about record boundary preservation.
Usage Guidelines
To examine a particular virtual circuit number, add an LCN argument to the show x25 vc command.
This command displays information about virtual circuits (VCs). VCs may be used for a number of purposes, such as the following:
•
•
•
•
The connectivity information displayed will vary according to the traffic carried by the VC. For multiprotocol circuits, the output varies depending on the number and identity of the protocols mapped to the X.121 address and the encapsulation method selected for the circuit.
Examples
Record Boundary Preservation Example
The following is sample output of the show x25 vc command for a PVC configured with record boundary preservation (RBP):
Router# show x25 vcPVC 2, State:D1, Interface:Serial3/0Started 00:08:08, last input 00:00:01, output 00:00:01recordsize:1500, connectedlocal address 10.0.0.1 port 9999; remote address 10.0.0.5 port 11029deferred ack:1Window size input:2, output:2Packet size input:128, output:128PS:2 PR:2 ACK:1 Remote PR:2 RCNT:1 RNR:noP/D state timeouts:0 timer (secs):0data bytes 8000/8000 packets 80/80 Resets 9/0 RNRs 0/0 REJs 0/0 INTs 0/0Table 60 describes the fields shown in the sample output that are typical for virtual circuits.
Table 60 show x25 vc Field Descriptions
SVC n or PVC n
Identifies the type of virtual circuit (switched or permanent) and its LCN (also called its "virtual circuit number").
State
State of the virtual circuit (which is independent of the states of other virtual circuits); D1 is the normal ready state. See the International Telecommunication Union Telecommunication Standardization Sector (ITU-T)1 X.25 Recommendation for a description of virtual circuit states.
Interface
Interface or subinterface on which the virtual circuit is established.
Started
Time elapsed since the virtual circuit was created.
last input
Time of last input.
output
Time of last output.
Connects...<-->..
Traffic-specific connection information. See Table 62, Table 63, Table 64, and Table 65 for more information.
D-bit permitted
Indicates that the X.25 D-bit (Delivery Confirmation) may be used on this circuit (displayed as needed).
Fast select VC
Indicates that the Fast Select facility was present on the incoming call (displayed as needed).
Reverse charged
Indicates reverse charged virtual circuit (displayed as needed).
Window size
Window sizes for the virtual circuit.
Packet size
Maximum packet sizes for the virtual circuit.
PS
Current send sequence number.
PR
Current receive sequence number.
ACK
Last acknowledged incoming packet.
Remote PR
Last receive sequence number received from the other end of the circuit.
RCNT
Count of unacknowledged input packets.
RNR
State of the Receiver Not Ready flag; this field is true if the network sends a Receiver-not-Ready packet.
Window is closed
This line appears if the router cannot transmit any more packets until the X.25 Layer 3 peer has acknowledged some outstanding packets.
P/D state timeouts
Number of times a supervisory packet (Reset or Clear) has been retransmitted.
Timer
A nonzero time value indicates that a control packet has not been acknowledged yet or that the virtual circuit is being timed for inactivity.
Reassembly
Number of bytes received and held for reassembly. Packets with the M-bit set are reassembled into datagrams for encapsulation virtual circuits; switched X.25 traffic is not reassembled (and is displayed only when values are not zero).
Held Fragments/Packets
Number of X.25 data fragments to transmit to complete an outgoing datagram, and the number of datagram packets waiting for transmission (displayed only when values are not zero).
data bytes m/n packets p/q
Total number of data bytes sent (m), data bytes received (n), data packets sent (p), and data packets received (q) since the circuit was established.
Resets t/r
Total number of reset packets transmitted/received since the circuit was established.
RNRs t/r
Total number of Receiver Not Ready packets transmitted/received since the circuit was established.
REJs t/r
Total number of Reject packets transmitted/received since the circuit was established.
INTs t/r
Total number of Interrupt packets transmitted/received since the circuit was established.
1 The ITU-T carries out the functions of the former Consultative Committee for International Telegraph and Telephone (CCITT).
Table 61 describes the fields specific to VCs configured with record boundary preservation.
Encapsulated Traffic Example
The following is sample output of the show x25 vc command used on an encapsulated traffic circuit:
Router# show x25 vc 1024SVC 1024, State: D1, Interface: Serial0Started 0:00:31, last input 0:00:31, output 0:00:31Connects 170090 <-->compressedtcp 172.20.170.90ip 172.20.170.90Call PID multi, Data PID ietfReverse chargedWindow size input: 2, output: 2Packet size input: 128, output: 128PS: 5 PR: 5 ACK: 4 Remote PR: 5 RCNT: 1 RNR: FALSEWindow is closedP/D state timeouts: 0 Timer (secs): 0data bytes 505/505 packets 5/5 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0Table 62 describes the connection fields specific to encapsulation traffic.
Locally Switched X.25 Traffic Example
The following is sample output of the show x25 vc command used on a virtual circuit carrying locally switched X.25 traffic:
Router# show x25 vcPVC 1, State: D1, Interface: Serial2Started 0:01:26, last input never, output neverPVC <--> Serial1 PVC 1, connectedWindow size input: 2, output: 2Packet size input: 128, output: 128PS: 0 PR: 0 ACK: 0 Remote PR: 0 RCNT: 0 RNR: FALSEP/D state timeouts: 0 Timer (secs): 0data bytes 0/0 packets 0/0 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0SVC 5, State: D1, Interface: Serial2Started 0:00:16, last input 0:00:15, output 0:00:15Connects 170093 <--> 170090 from Serial1 VC 5Window size input: 2, output: 2Packet size input: 128, output: 128PS: 5 PR: 5 ACK: 4 Remote PR: 5 RCNT: 1 RNR: FALSEP/D state timeouts: 0 Timer (secs): 0data bytes 505/505 packets 5/5 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0Table 63 describes the connection fields for virtual circuits carrying locally switched X.25 traffic.
Table 63 show x25 vc Local Traffic Field Descriptions
PVC <-->
Indicates a switched connection between two PVCs.
Serial1 PVC 1
Identifies the other half of a local PVC connection.
connected
Identifies connection status for a switched connection between two PVCs. See Table 66 for PVC status messages.
170093
Identifies the Calling (source) Address of the connection. If a Calling Address Extension was encoded in the call facilities, it is also displayed. If the source host is a CMNS host, its MAC address is also displayed.
170090
Identifies the Called (destination) Address of the connection. If a Called Address Extension was encoded in the call facilities, it is also displayed. If the destination host is a CMNS host, its MAC address is also displayed.
from Serial1
Indicates the direction of the call and the connecting interface.
VC 5
Identifies the circuit type and LCN for the connecting interface. VC indicates an SVC, and PVC indicates a PVC. If the connecting host is a CMNS host, its MAC address is also displayed.
X.25 Traffic Locally Switched Between PVCs and SVCs Example
The following is sample output of the show x25 vc command used on a virtual circuit carrying locally switched PVC-to-SVC X.25 traffic:
Router# show x25 vcPVC 5, State: D1, Interface: Serial0Started 4d21h, last input 00:00:14, output 00:00:14Connects 101600 <--> 201700 from Serial2 VC 700D-bit permittedWindow size input: 2, output: 2Packet size input: 128, output: 128PS: 5 PR: 5 ACK: 4 Remote PR: 5 RCNT: 1 RNR: noP/D state timeouts: 0 timer (secs): 0data bytes 1000/1000 packets 10/10 Resets 1/0 RNRs 0/0 REJs 0/0 INTs 0/0SVC 700, State: D1, Interface: Serial2Started 00:00:16, last input 00:00:16, output 00:00:16Connects 101600 <--> 201700 from Serial0 PVC 5Window size input: 2, output: 2Packet size input: 128, output: 128PS: 5 PR: 5 ACK: 5 Remote PR: 4 RCNT: 0 RNR: noP/D state timeouts: 0 timer (secs): 103data bytes 500/500 packets 5/5 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0Table 64 describes the connection fields for virtual circuits carrying locally switched X.25 traffic between PVCs and SVCs.
Remotely Switched X.25 Traffic Example
The following is sample output from the show x25 vc command used on a virtual circuit carrying remotely switched X.25 traffic:
Router# show x25 vcPVC 2, State: D1, Interface: Serial2Started 0:01:25, last input never, output neverPVC <--> [172.20.165.92] Serial2/0 PVC 1 connectedXOT between 172.20.165.95, 1998 and 172.20.165.92, 27801Window size input: 2, output: 2Packet size input: 128, output: 128PS: 0 PR: 0 ACK: 0 Remote PR: 0 RCNT: 0 RNR: FALSEP/D state timeouts: 0 Timer (secs): 0 Reassembly (bytes): 0Held Fragments/Packets: 0/0data bytes 0/0 packets 0/0 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0SVC 6, State: D1, Interface: Serial2Started 0:00:04, last input 0:00:04, output 0:00:04Connects 170093 <--> 170090 fromXOT between 172.20.165.91, 1998 and 172.20.165.92, 27896Window size input: 2, output: 2Packet size input: 128, output: 128PS: 5 PR: 5 ACK: 4 Remote PR: 5 RCNT: 1 RNR: FALSEP/D state timeouts: 0 Timer (secs): 0 Reassembly (bytes): 0Held Fragments/Packets: 0/0data bytes 505/505 packets 5/5 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0Table 65 describes the connection fields for virtual circuits carrying remotely switched X.25 traffic.
Table 65 show x25 vc Remote X.25 Traffic Field Descriptions
PVC
Flags PVC information.
[172.20.165.92]
Indicates the IP address of the router remotely connecting the PVC.
Serial 2/0 PVC 1
Identifies the remote interface and PVC number.
connected
Identifies connection status for a switched connection between two PVCs. See Table 66 for PVC status messages.
170093
Identifies the Calling (source) Address of the connection. If a Calling Address Extension was encoded in the call facilities, it is also displayed.
170090
Identifies the Called (destination) Address of the connection. If a Called Address Extension was encoded in the call facilities, it is also displayed.
from
Indicates the direction of the call.
XOT between...
Identifies the IP addresses and port numbers of the X.25-over-TCP (XOT) connection.
Table 66 lists the PVC states that can be reported. These states are also reported by the debug x25 command in PVC-SETUP packets (for remote PVCs only). Some states apply only to remotely switched PVCs.
show x25 xot
To display information for all X.25 over TCP (XOT) virtual circuits that match a given criterion, use the show x25 xot command in privileged EXEC mode.
show x25 xot [local ip-address [port port]] [remote ip-address [port port] | access-group [access-group-number]]
Syntax Description
Command Modes
Privileged EXEC
Command History
Examples
The following show x25 xot sample output displays information about all XOT virtual circuits:
Router# show x25 xotSVC 11, State: D1, Interface: [10.2.2.2,1998/10.2.2.1,11002]Started 00:00:08, last input 00:00:08, output 00:00:08Line: 0 con 0 Location: Host: 5678111 connected to 5678 PAD <--> XOT 2.2.2.2,1998Window size input: 2, output: 2Packet size input: 128, output: 128PS: 2 PR: 3 ACK: 3 Remote PR: 2 RCNT: 0 RNR: noP/D state timeouts: 0 timer (secs): 0data bytes 54/18 packets 2/3 Resets 0/0 RNRs 0/0 REJs 0/0 INTs 0/0\The following example shows sample output for the show x25 xot command with the access-group keyword:
Router# show x25 xot access-groupxot access-group 1 using built-in default configurationxot access-group 10 using x.25 profile oceanxot access-group 55 using x.25 profile riverRelated Commands
shutdown (FR-ATM)
To shut down a Frame Relay-ATM Network Interworking (FRF.5) connection or a Frame Relay-ATM Service Interworking (FRF.8) connection, use the shutdown command in FRF.5 or FRF.8 connect configuration mode. To disable disconnection, use the no form of this command.
shutdown
no shutdown
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values
Command Modes
FRF.5 connect configuration
FRF.8 connect configurationCommand History
Usage Guidelines
An FRF.5 or FRF.8 connection must be manually shut down once the interworking connection is created by use of the shutdown command.
Examples
FRF.5 Shutdown Example
The following example shows how to shut down an FRF.5 connection:
Router(config)# connect network-2 interface serial0/1 16 atm3/0 0/32 network-interworking...Router(config-frf5)# shutdownFRF.8 Shutdown Example
The following example shows how to shut down an FRF.8 connection:
Router(config)# connect serial0 100 atm3/0 1/35 service-interworking...Router(config-frf8)# shutdownRelated Commands
shutdown (PVC range)
To deactivate a permanent virtual circuit (PVC) range, use the shutdown command in PVC range configuration mode. To reactivate a PVC range, use the no form of this command.
shutdown
no shutdown
Syntax Description
This command has no arguments or keywords.
Defaults
PVC range is active.
Command Modes
PVC range configuration
Command History
Examples
In the following example, a PVC range called "range1" is deactivated:
interface atm 6/0.110 multipointrange range1 pvc 100 4/199shutdownRelated Commands
range pvc
Defines a range of ATM PVCs.
show pppatm summary
Deactivates an individual PVC within a PVC range.
shutdown (PVC-in-range)
To deactivate an individual permanent virtual circuit (PVC) within a PVC range, use the shutdown command in PVC-in-range configuration mode. To reactivate an individual PVC within PVC range, use the no form of this command.
shutdown
no shutdown
Syntax Description
This command has no arguments or keywords.
Defaults
The PVC is active.
Command Modes
PVC-in-range configuration
Command History
Examples
In the following example, "pvc1" within the PVC range called "range1" is deactivated:
interface atm 6/0.110 multipointrange range1 pvc 100 4/199pvc-in-range pvc1 7/104shutdownRelated Commands
pvc-in-range
Configures an individual PVC within a PVC range.
shutdown (PVC range)
Deactivates a PVC range.
smds address
To specify the Switched Multimegabit Data Service (SMDS) individual address for a particular interface, use the smds address interface configuration command. To remove the address from the configuration file, use the no form of this command.
smds address smds-address
no smds address smds-address
Syntax Description
Defaults
No address is specified.
Command Modes
Interface configuration
Command History
Usage Guidelines
All addresses for SMDS service are assigned by the service provider, and can be assigned to individuals and groups.
Addresses are entered in the Cisco SMDS configuration software using an E prefix for multicast addresses and a C prefix for unicast addresses. Cisco IOS software expects the addresses to be entered in E.164 format, which is 64 bits. The first 4 bits are the address type, and the remaining 60 bits are the address. If the first 4 bits are 1100 (0xC), the address is a unicast SMDS address, which is the address of an individual SMDS host. If the first 4 bits are 1110 (0xE), the address is a multicast SMDS address, which is used to broadcast a packet to multiple end points. The 60 bits of the address are in binary-coded decimal (BCD) format. Each 4 bits of the address field presents a single telephone number digit, allowing for up to 15 digits. At a minimum, you must specify at least 11 digits (44 bits). Unused bits at the end of this field are filled with ones.
Note
Examples
The following example specifies an individual address in Ethernet-style notation:
interface serial 0smds address c141.5797.1313.FFFFsmds dxi
To enable the Data Exchange Interface (DXI) version 3.2 support, use the smds dxi interface configuration command. To disable the DXI 3.2 support, use the no form of this command.
smds dxi
no smds dxi
Syntax Description
This command has no arguments or keywords.
Defaults
Enabled
Command Modes
Interface configuration
Command History
Usage Guidelines
Adding this command to the configuration enables the DXI version 3.2 mechanism and encapsulates SMDS packets in a DXI frame before they are transmitted. DXI 3.2 adds an additional 4 bytes to the SMDS packet header to communicate with the SMDS data service unit (SDSU). These bytes specify the frame type. The interface expects all packets to arrive with DXI encapsulation.
The DXI 3.2 support also includes the heartbeat process as specified in the SIG-TS-001/1991 standard, revision 3.2. The heartbeat (active process) is enabled when both DXI and keepalives are enabled on the interface. The echo (passive process) is enabled when DXI is enabled on the interface. The heartbeat mechanism automatically generates a heartbeat poll frame every 10 seconds. This default value can be changed with the keepalive (LMI) command.
Fast switching of DXI frames is supported, but Interim Local Management Interface (ILMI) is not.
Note
Note
Examples
The following example enables DXI 3.2 on interface HSSI 0:
interface hssi 0encapsulation smdssmds dxismds address C120.1111.2222.FFFFip address 172.20.1.30 255.255.255.0smds multicast ip E180.0999.9999smds enable-arpRelated Commands
keepalive (LMI)
Enables the LMI mechanism for serial lines using Frame Relay encapsulation.
smds enable-arp
To enable dynamic Address Resolution Protocol (ARP), use the smds enable-arp interface configuration command. The multicast address for ARP must be set before this command is issued. To disable the interface once ARP has been enabled, use the no form of this command.
smds enable-arp
no smds enable-arp
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Interface configuration
Command History
Examples
The following example enables the dynamic ARP routing table:
interface serial 0ip address 172.20.1.30 255.255.255.0smds multicast IP E180.0999.9999.2222smds enable-arpRelated Commands
smds glean
To enable dynamic address mapping for Internet Packet Exchange (IPX) over Switched Multimegabit Data Service (SMDS), use the smds glean interface configuration command. To disable dynamic address mapping for IPX over SMDS, use the no form of this command.
smds glean protocol [timeout-value] [broadcast]
no smds glean protocol
Syntax Description
Defaults
Disabled
Command Modes
Interface configuration
Command History
Usage Guidelines
The smds glean command uses incoming packets to dynamically map SMDS addresses to higher-level protocol addresses. Therefore the need for static map configuration for the IPX protocol is optional rather than mandatory. However, any static map configuration overrides the dynamic maps.
If a map is gleaned and it already exists as a dynamic map, the timer for the dynamic map is reset to the default value or the user-specified value.
Examples
The following example enables dynamic address mapping for IPX on interface serial 0 and sets the time to live (TTL) to 14 minutes:
interface serial 0encapsulation smdssmds address c141.5797.1313.FFFFsmds multicast ipx e1800.0999.9999.FFFFsmds glean ipx 14smds multicast
To assign a multicast Switched Multimegabit Data Service (SMDS) E.164 address to a higher-level protocol, use the smds multicast command in interface configuration mode. To remove an assigned multicast address, use the no form of this command.
smds multicast protocol smds-address
no smds multicast protocol smds-address
Syntax Description
protocol
Protocol type. See Table 67 for a list of supported protocols and their keywords.
smds-address
SMDS address. Because SMDS does not incorporate broadcast addressing, a group address for a particular protocol must be defined to serve the broadcast function.
Defaults
No mapping is defined.
Command Modes
Interface configuration
Command History
Usage Guidelines
When configuring DECnet, you must enter all four DEC keywords (decnet, decnet_router-L1, decnet_router-L2, and decnet_node) in the configuration.
Table 67 lists the high-level protocols supported by the smds multicast command.
For IP, the IP NETwork and MASK fields are no longer required. The Cisco IOS software accepts these arguments, but ignores the values. These were required commands for the previous multiple logical IP subnetworks configuration. The software continues to accept the arguments to allow for backward compatibility, but ignores the contents.
Examples
The following example maps the IP broadcast address to the SMDS group address E180.0999.9999:
interface serial 0smds multicast IP E180.0999.9999.FFFFsmds multicast arp
To map the Switched Multimegabit Data Service (SMDS) address to a multicast address, use the smds multicast arp interface configuration command. To disable this feature, use the no form of this command.
smds multicast arp smds-address [ip-address mask]
no smds multicast arp smds-address [ip-address mask]
Syntax Description
smds-address
SMDS address in E.164 format.
ip-address
(Optional) IP address.
mask
(Optional) Subnet mask for the IP address.
Defaults
No mapping is defined.
Command Modes
Interface configuration
Command History
Usage Guidelines
This command is used only when an Address Resolution Protocol (ARP) server is present on a network. When broadcast ARPs are sent, SMDS first attempts to send the packet to all multicast ARP SMDS addresses. If none exist in the configuration, broadcast ARPs are sent to all multicast IP SMDS multicast addresses. If the optional ARP multicast address is missing, each entered IP multicast command is used for broadcasting.
Examples
The following example configures broadcast ARP messages:
interface serial 0smds multicast arp E180.0999.9999.2222Related Commands
smds multicast bridge
To enable spanning-tree updates, use the smds multicast bridge interface configuration command. To disable this function, use the no form of this command.
smds multicast bridge smds-address
no smds multicast bridge smds-address
Syntax Description
Defaults
No multicast SMDS address is defined. Spanning tree updates are disabled for transparent bridging across SMDS networks.
Command Modes
Interface configuration
Command History
Usage Guidelines
To allow transparent bridging of packets across serial and High-Speed Serial Interface (HSSI ) interfaces in an SMDS network, the SMDS interface must be added to an active bridge group. Also, standard bridging commands are necessary to enable bridging on an SMDS interface.
When the smds multicast bridge command is added to the configuration, broadcast packets are encapsulated with the specified SMDS multicast address configured for bridging. Two broadcast Address Resolution Protocol (ARP) packets are sent to the multicast address. One is sent with a standard (SMDS) ARP encapsulation, while the other is sent with the ARP packet encapsulated in an 802.3 MAC header. The native ARP is sent as a regular ARP broadcast.
Cisco's implementation of IEEE 802.6i transparent bridging for SMDS supports 802.3, 802.5, and FDDI frame formats. The router can accept frames with or without frame check sequence (FCS). Fast-switched transparent bridging is the default and is not configurable. If a packet cannot be fast switched, it is process switched.
In Cisco IOS Release 10.2 software (or earlier), bridging over multiple logical IP subnetworks is not supported. Bridging of IP packets in a multiple logical IP subnetworks environment is unpredictable.
Examples
In the following example, all broadcast bridge packets are sent to the configured SMDS multicast address:
interface hssi 0encapsulation smdssmds address C120.1111.2222.FFFFip address 172.16.0.0 255.255.255.0smds multicast bridge E180.0999.9999.FFFFbridge-group 5Related Commands
smds multicast ip
To map a Switched Multimegabit Data Service (SMDS) group address to a secondary IP address, use the smds multicast ip interface configuration command. To remove the address map, use the no form of this command.
smds multicast ip smds-address [ip-address mask]
no smds multicast ip smds-address [ip-address mask]
Syntax Description
smds-address
SMDS address in E.164 format.
ip-address
(Optional) IP address.
mask
(Optional) Subnet mask for the IP address.
Defaults
The IP address and mask default to the primary address of the interface if they are left out of the configuration.
Command Modes
Interface configuration
Command History
Usage Guidelines
This command allows a single SMDS interface to be treated as multiple logical IP subnetworks. If taking advantage of the multiple logical IP subnetworks support in SMDS, you can use more than one multicast address on the SMDS interface (by entering multiple commands). However, each smds multicast ip command entry must be associated with a different IP address on the SMDS interface.
Broadcasts can be sent on the SMDS interface by means of the multicast address. By sending broadcasts in this manner, the router is not required to replicate broadcasts messages to every remote host.
In addition, the higher-level protocols such as Open Shortest Path First (OSPF) and Intermediate System-to-Intermediate System (IS-IS) can use the multicast capability by sending one update packet or routing packet to the multicast address.
If the optional IP address and mask arguments are not present, the SMDS address and multicast address are associated with the primary IP address of the interface. This association allows the command to be backward compatible with earlier versions of the software.
If an Address Resolution Protocol (ARP) multicast address is missing, each entered IP multicast command is used for broadcasting. The ARP multicast command has the same format as the IP multicast command and is typically used only when an ARP server is present in the network.
Note
Examples
The following example configures an interface with two subinterfaces to support two different IP subnets with different multicast addresses to each network:
interface serial 2/0encapsulation smdssmds address C120.1111.2222.4444interface serial 2/0.1 multipointsmds addr c111.3333.3333.3333ip address 2.2.2.1 255.0.0.0smds multicast ip e222.2222.2222.2222smds enable-arpinterface serial 2/0.2 multipointsmds addr c111.2222.3333.3333.3333ip address 2.3.3.3 255.0.0.0smds multicast ip E180.0999.9999.FFFFsmds enable-arpRelated Commands
smds static-map
To configure a static map between an individual Switched Multimegabit Data Service (SMDS) address and a higher-level protocol address, use the smds static-map command in interface configuration mode. To remove the map, use the no form of this command with the appropriate arguments.
smds static-map protocol protocol-address smds-address [broadcast]
no smds static-map protocol protocol-address smds-address [broadcast]
Syntax Description
Defaults
No mapping is defined.
Command Modes
Interface configuration
Command History
Usage Guidelines
The smds static-map command provides pseudobroadcasting by allowing the use of broadcasts on those hosts that cannot support SMDS multicast addresses.
Examples
The following example illustrates how to enable pseudobroadcasting. The router at address C120.4444.9999 will receive a copy of the broadcast request because the broadcast keyword is specified with the smds static-map command. The host at address 172.16.1.15 is incapable of receiving multicast packets. The multicasting is simulated with this feature.
interface hssi 0encapsulation smdssmds address C120.1111.2222.FFFFip address 172.16.1.30 255.255.255.0smds static-map ip 172.16.1.15 C120.4444.9999.FFFF broadcastsmds enable-arpThe following example illustrates how to enable multicasting. In addition to IP and ARP requests to E100.0999.9999, the router at address C120.4444.9999 will also receive a copy of the multicast request. The host at address 172.16.1.15 is incapable of receiving broadcast packets.
interface hssi 0encapsulation smdssmds address C120.1111.2222.FFFFip address 172.16.1.30 255.255.255.0smds multicast ip E100.0999.999.FFFFsmds static-map ip 172.16.1.15 C120.4444.9999.FFFFsmds enable-arpsscop cc-timer
To change the connection control timer, use the sscop cc-timer interface configuration command. To restore the default value, use the no form of this command.
sscop cc-timer seconds
no sscop cc-timer
Syntax Description
Defaults
1 second
Command Modes
Interface configuration
Command History
Usage Guidelines
The connection control timer determines the time between transmission of BGN (establishment), END (release), or RS (resynchronization) protocol data units (PDUs) as long as an acknowledgment has not been received.
Examples
The following example sets the connection control timer 15 seconds:
sscop cc-timer 15Related Commands
sscop keepalive-timer
To change the keepalive timer, use the sscop keepalive-timer interface configuration command. To restore the default value, use the no form of this command.
sscop keepalive-timer seconds
no sscop keepalive-timer seconds
Syntax Description
seconds
Number of seconds the router waits between transmission of POLL PDUs when no sequential data (SD) or SDP PDUs are queued for transmission or are outstanding pending acknowledgments.
Defaults
5 seconds
Command Modes
Interface configuration
Command History
Examples
The following example sets the keepalive timer to 15 seconds:
sscop keepalive-timer 15sscop max-cc
To change the retry count of connection control, use the sscop max-cc interface configuration command. To restore the default value, use the no form of this command.
sscop max-cc retries
no sscop max-cc
Syntax Description
Defaults
10 retries
Command Modes
Interface configuration
Command History
Examples
The following example sets the retry count of the connection control to 20:
sscop max-cc 20Related Commands
sscop poll-timer
To change the poll timer, use the sscop poll-timer interface configuration command. To restore the default value, use the no form of this command.
sscop poll-timer seconds
no sscop poll-timer
Syntax Description
Defaults
100 seconds
Command Modes
Interface configuration
Command History
Usage Guidelines
The poll timer controls the maximum time between transmission of POLL PDUs when SD or SDP PDUs are queued for transmission or are outstanding pending acknowledgments.
Examples
The following example sets the poll timer to 15 seconds:
sscop poll-timer 15sscop receive-window
To change the receiver window, use the sscop receive-window interface configuration command. To restore the default value, use the no form of this command.
sscop receive-window packets
no sscop receive-window
Syntax Description
packets
Number of packets the interface can receive before it must send an acknowledgment to the ATM switch. Valid range is from 1 to 6000.
Defaults
7 packets
Command Modes
Interface configuration
Command History
Examples
The following example sets the receiver's window to 10 packets:
sscop rcv-window 10sscop send-window
To change the transmitter window, use the sscop send-window interface configuration command. To restore the default value, use the no form of this command.
sscop send-window packets
no sscop send-window
Syntax Description
packets
Number of packets the interface can send before it must receive an acknowledgment from the ATM switch. Valid range is from 1 to 6000.
Defaults
7 packets
Command Modes
Interface configuration
Command History
Examples
The following example sets the transmitter's window to 10 packets:
sscop send-window 10subscriber access
To configure a network access server (NAS) to enable Subscriber Service Switch (SSS) to preauthorize the NAS port identifier (NAS-Port-ID) string before authorizing the domain name, use the subscriber access command in global configuration mode. To disable SSS preauthorization, use the no form of this command.
subscriber access {pppoe | pppoa} pre-authorize nas-port-id [default | list-name] [send username]
no subscriber access {pppoe | pppoa} pre-authorize nas-port-id
Syntax Description
Defaults
Preauthorization is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
The NAS-Port-ID string is used to locate the first service record, which may contain one of three attributes, as follows:
•
This filtered service key then locates the final service. See the vpdn authorize domain command for more information.
•
•
Once NAS port authorization has taken place, normal authorization, which is usually the domain authorization, continues.
Logical Line ID
The LLID is an alphanumeric string of from 1 to 253 characters that serves as the logical identification of a subscriber line. LLID is maintained in a RADIUS server customer profile database and enables users to track their customers on the basis of the physical lines on which customer calls originate. Downloading the LLID is also referred to as "preauthorization" because it occurs before normal virtual private dialup network (VPDN) authorization downloads L2TP tunnel information.
This command enables LLID and SSS querying only for PPP over Ethernet over ATM (PPPoEoATM) and PPP over Ethernet over VLAN (PPPoEoVLAN or Dot1Q) calls; all other calls, such as ISDN, are not supported.
Per-NAS-Port Session Limits for PPPoE
Use this command to configure SSS preauthorization on the LAC so that the PPPoE per-NAS-port session limit can be downloaded from the customer profile database. To use PPPoE per-NAS-port session limits, you must also configure the PPPoE Session-Limit per NAS-Port Cisco attribute-value pair in the user profile.
Examples
The following example signals SSS to preauthorize the NAS-Port-ID string before authorizing the domain name. This policy applies only to sessions that have a PPPoE access type.
aaa new-modelaaa group server radius sg_llidserver 172.20.164.106 auth-port 1645 acct-port 1646aaa group server radius sg_groupserver 172.20.164.106 auth-port 1645 acct-port 1646aaa authentication ppp default group radiusaaa authorization confg-commandsaaa authorization network default group sg_groupaaa authorization network mlist_llid group sg_llidaaa session-id common!username s7200_2 password 0 labusername s5300 password 0 labusername sg_group password 0 labvpdn enable!vpdn-group 2request-dialinprotocol 12tpdomain group.cominitiate-to ip 10.1.1.1local name s7200_2!vpdn-group 3accept dialinprotocol pppoevirtual-template 1!! Signals Subscriber Service Switch to preauthorize the NAS-Port-ID string before! authorizing the domain name.subscriber access pppoe pre-authorize nas-port-id mlist_llid!interface Loopback0ip address 10.1.1.2 255.255.255.0!interface Loopback1ip address 10.1.1.1 255.255.255.0!interface Ethernet1/0ip address 10.2.2.2 255.255.255.0 secondaryip address 10.0.58.111 255.255.255.0no cdp enable!interface ATM4/0no ip addressno atm ilmi-keepalive!interface ATM4/0.1 point-to-pointpvc 1/100encapsulation aa15snapprotocol pppoe!interface virtual-template1no ip unnumbered Loopback0no peer default ip addressppp authentication chap!radius-server host 172.20.164.120 auth-port 1645 acct-port 1646 key rad123radius-server host 172.20.164.106 auth-port 1645 acct-port 1646 key rad123ip radius source-interface Loopback1The following example is identical to the previous example except that it also adds support for sending the PPP authenticating username with the preauthorization in the Connect-Info attribute. This example also includes command line interface (CLI) suppression on the LLID if the username that is used to authenticate has a domain that includes #184.
aaa new-modelaaa group server radius sg_llidserver 172.31.164.106 auth-port 1645 acct-port 1646aaa group server radius sg_groupserver 172.31.164.106 auth-port 1645 acct-port 1646aaa authentication ppp default group radiusaaa authorization confg-commandsaaa authorization network default group sg_groupaaa authorization network mlist_llid group sg_llidaaa session-id common!username s7200_2 password 0 labusername s5300 password 0 labusername sg_group password 0 labvpdn enable!vpdn-group 2request-dialinprotocol 12tpdomain group.comdomain group.com#184initiate-to ip 10.1.1.1local name s7200_2l2tp attribute clid mask-method right * 255 match #184!vpdn-group 3accept dialinprocotol pppoevirtual-template 1!subscriber access pppoe pre-authorize nas-port-id mlist_llid send username!Related Commands
subscriber authorization enable
To enable Subscriber Service Switch type authorization, use the subscriber authorization enable command in global configuration mode. To disable the Subscriber Service Switch authorization, use the no form of this command.
subscriber authorization enable
no subscriber authorization enable
Syntax Description
This command has no arguments or keywords.
Defaults
Authorization is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
The subscriber authorization enable command triggers Subscriber Service Switch type authorization for local termination, even if virtual private dialup network (VPDN) and Stack Group Bidding Protocol (SGBP) are disabled.
Examples
The following example enables Subscriber Service Switch type authorization:
subscriber authorization enableRelated Commands
subscriber access
Enables Subscriber Service Switch preauthorization.
vpdn authorize domain
Enables domain preauthorization on a NAS.
subscriber profile
To define a Subscriber Service Switch (SSS) policy for searches of a subscriber profile database, use the subscriber profile command in global configuration mode. To change or disable the SSS policy, use the no form of this command.
subscriber profile profile-name
no subscriber profile profile-name
Syntax Description
profile-name
A unique string, which can represent (but is not limited to) keys such as a domain, dialed number identification service (DNIS), port name, or PPP over Ethernet (PPPoE) service name.
Defaults
No default profile name
Command Modes
Global configuration
Command History
Usage Guidelines
This command is used to locally search the subscriber profile database for authorization data when an authentication, authorization, and accounting (AAA) network authorization method list is configured. Make sure that the aaa authorization network default local global configuration command is included in the configuration—do not use the aaa authorization network default command without the local keyword.
Examples
The following example provides virtual private dialup network (VPDN) service to users in the domain cisco.com, and uses VPDN group group 1 to obtain VPDN configuration information:
!subscriber profile cisco.comservice vpdn group 1The following example provides VPDN service to DNIS 1234567, and uses VPDN group 1 to obtain VPDN configuration information:
!subscriber profile dnis:1234567service vpdn group 1The following example provides VPDN service using a remote tunnel (used on the multihop node), and uses VPDN group 1 to obtain VPDN configuration information:
!subscriber profile host:lacservice vpdn group 1Related Commands
svc
To create an ATM switched virtual circuit (SVC) and specify the destination network service access point (NSAP) address on a main interface or subinterface, use the svc interface configuration command. To disable the SVC, use the no form of this command.
svc [name] [nsap address] [ces]
no svc [name] [nsap address] [ces]
Syntax Description
Defaults
No NSAP address is defined.
Command Modes
Interface configuration
Command History
Usage Guidelines
After configuring the parameters for an ATM SVC, you must exit the interface-ATM-VC or interface-CES-VC configuration mode in order to enable the SVC settings.
Once you specify a name for an SVC, you can reenter the interface-ATM-VC or interface-CES-VC configuration mode by simply entering svc name.
You can remove an NSAP address and any associated parameters by entering no svc name or no svc nsap address.
Creating an SVC without a specific NSAP address will allow a router to accept calls from any ATM address, and allow multiple VCs to be set up using the same configuration.
Use the ces keyword to configure an active or passive CES SVC. An active CES SVC can originate and terminate SVC calls. A passive CES SVC can only terminate calls.
Examples
SVC Example
The following example creates an SVC called "chicago" on ATM interface 2/0/0:
interface atm 2/0/0svc chicagoSVC with NSAP Address Example
The following example creates an SVC with the name "lion" and specifies the 40-digit hexadecimal destination ATM NSAP address:
svc lion nsap 47.0091.81.000000.0040.0B0A.2501.ABC1.3333.3333.05Active CES SVC Example
The following example creates an active CES SVC named "ces1":
interface atm 1/0svc ces1 nsap 47.00.00.000000.0040.0B0A.2501.ABC1.01.01.00 cesPassive CES SVC Example
The following example creates a passive CES SVC named "ces2":
interface atm 1/0svc ces2 ces
