Quidway Eudemon 1000E Unified Security Gateway Command Reference(V100R002_03)

946
Quidway Eudemon 1000E Unified Security Gateway V100R002 Command Reference Issue 03 Date 2009-06-18 Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

description

Segw

Transcript of Quidway Eudemon 1000E Unified Security Gateway Command Reference(V100R002_03)

  • Quidway Eudemon 1000E Unified Security GatewayV100R002

    Command Reference

    Issue 03Date 2009-06-18

    Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

  • Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service. For anyassistance, please contact our local office or company headquarters. Huawei Technologies Co., Ltd.Address: Huawei Industrial Base

    Bantian, LonggangShenzhen 518129People's Republic of China

    Website: http://www.huawei.comEmail: [email protected] Copyright Huawei Technologies Co., Ltd. 2009. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior writtenconsent of Huawei Technologies Co., Ltd. Trademarks and Permissions

    and other Huawei trademarks are the property of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respective holders. NoticeThe information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but the statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

    Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

  • Contents

    About This Document.....................................................................................................................11 System Management.................................................................................................................1-1

    1.1 Basic Configuration Commands.....................................................................................................................1-21.1.1 clock.......................................................................................................................................................1-21.1.2 command-privilege.................................................................................................................................1-41.1.3 display clock...........................................................................................................................................1-51.1.4 display history-command.......................................................................................................................1-61.1.5 display hotkey........................................................................................................................................1-61.1.6 display version........................................................................................................................................1-81.1.7 header.....................................................................................................................................................1-81.1.8 hotkey.....................................................................................................................................................1-91.1.9 language-mode.....................................................................................................................................1-101.1.10 lock.....................................................................................................................................................1-111.1.11 quit (All Views)..................................................................................................................................1-121.1.12 return..................................................................................................................................................1-121.1.13 super...................................................................................................................................................1-131.1.14 super password...................................................................................................................................1-141.1.15 sysname..............................................................................................................................................1-151.1.16 system-view........................................................................................................................................1-16

    1.2 User Interface Configuration Commands.....................................................................................................1-171.2.1 acl.........................................................................................................................................................1-181.2.2 authentication-mode.............................................................................................................................1-191.2.3 auto-execute command.........................................................................................................................1-201.2.4 databits.................................................................................................................................................1-211.2.5 debugging rsa.......................................................................................................................................1-221.2.6 debugging ssh server............................................................................................................................1-221.2.7 debugging telnet...................................................................................................................................1-231.2.8 display rsa local-key-pair public..........................................................................................................1-241.2.9 display rsa peer-public-key..................................................................................................................1-251.2.10 display ssh server...............................................................................................................................1-261.2.11 display ssh user-information..............................................................................................................1-271.2.12 display tcp..........................................................................................................................................1-281.2.13 display user-interface.........................................................................................................................1-29

    Quidway Eudemon 1000E Unified Security GatewayCommand Reference Contents

    Issue 03 (2009-06-18) Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    i

  • 1.2.14 display users.......................................................................................................................................1-301.2.15 flow-control........................................................................................................................................1-311.2.16 free user-interface...............................................................................................................................1-321.2.17 history-command max-size................................................................................................................1-331.2.18 idle-timeout........................................................................................................................................1-331.2.19 lock.....................................................................................................................................................1-341.2.20 parity...................................................................................................................................................1-351.2.21 peer-public-key end............................................................................................................................1-361.2.22 protocol inbound................................................................................................................................1-361.2.23 public-key-code begin........................................................................................................................1-371.2.24 public-key-code end...........................................................................................................................1-381.2.25 rsa local-key-pair create.....................................................................................................................1-391.2.26 rsa local-key-pair destroy...................................................................................................................1-401.2.27 rsa peer-public-key.............................................................................................................................1-411.2.28 screen-length......................................................................................................................................1-421.2.29 send.....................................................................................................................................................1-421.2.30 set authentication password................................................................................................................1-431.2.31 shell....................................................................................................................................................1-441.2.32 speed...................................................................................................................................................1-451.2.33 ssh server authentication-retries.........................................................................................................1-461.2.34 ssh server rekey-interval.....................................................................................................................1-471.2.35 ssh server timeout...............................................................................................................................1-471.2.36 ssh user assign rsa-key.......................................................................................................................1-481.2.37 ssh user authentication-type...............................................................................................................1-491.2.38 stopbits...............................................................................................................................................1-501.2.39 telnet...................................................................................................................................................1-511.2.40 user privilege......................................................................................................................................1-511.2.41 user-interface......................................................................................................................................1-521.2.42 user-interface maximum-vty..............................................................................................................1-53

    1.3 Work Mode Configuration Commands.........................................................................................................1-541.3.1 display firewall mode...........................................................................................................................1-541.3.2 display firewall transparent-mode address-table..................................................................................1-551.3.3 firewall mode........................................................................................................................................1-561.3.4 firewall transparent-mode mac-aging-time..........................................................................................1-571.3.5 firewall unknown-mac..........................................................................................................................1-58

    1.4 File System Commands.................................................................................................................................1-591.4.1 ascii.......................................................................................................................................................1-611.4.2 binary....................................................................................................................................................1-611.4.3 bye........................................................................................................................................................1-621.4.4 cd (User View).....................................................................................................................................1-631.4.5 cd (FTP Client View)...........................................................................................................................1-631.4.6 cdup......................................................................................................................................................1-64

    ContentsQuidway Eudemon 1000E Unified Security Gateway

    Command Reference

    ii Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    Issue 03 (2009-06-18)

  • 1.4.7 close......................................................................................................................................................1-651.4.8 copy......................................................................................................................................................1-651.4.9 debugging vfs.......................................................................................................................................1-671.4.10 debugging (FTP Client View)............................................................................................................1-671.4.11 delete (User View).............................................................................................................................1-681.4.12 delete (FTP Client View)...................................................................................................................1-691.4.13 dir (User View)...................................................................................................................................1-701.4.14 dir (FTP Client View)........................................................................................................................1-711.4.15 disconnect...........................................................................................................................................1-711.4.16 display ftp-server................................................................................................................................1-721.4.17 display ftp-users.................................................................................................................................1-731.4.18 display startup....................................................................................................................................1-741.4.19 display this..........................................................................................................................................1-741.4.20 execute................................................................................................................................................1-751.4.21 file prompt..........................................................................................................................................1-761.4.22 format.................................................................................................................................................1-771.4.23 ftp.......................................................................................................................................................1-771.4.24 ftp server enable.................................................................................................................................1-781.4.25 ftp timeout..........................................................................................................................................1-791.4.26 get.......................................................................................................................................................1-801.4.27 lcd.......................................................................................................................................................1-801.4.28 ls.........................................................................................................................................................1-811.4.29 mkdir (User View).............................................................................................................................1-821.4.30 mkdir (FTP Client View)...................................................................................................................1-821.4.31 more....................................................................................................................................................1-831.4.32 move...................................................................................................................................................1-841.4.33 open....................................................................................................................................................1-851.4.34 passive................................................................................................................................................1-851.4.35 put.......................................................................................................................................................1-861.4.36 pwd (User View)................................................................................................................................1-871.4.37 pwd (FTP Client View)......................................................................................................................1-871.4.38 quit (FTP Client View).......................................................................................................................1-881.4.39 remotehelp..........................................................................................................................................1-891.4.40 rename................................................................................................................................................1-891.4.41 reset recycle-bin.................................................................................................................................1-901.4.42 rmdir (User View)..............................................................................................................................1-911.4.43 rmdir (FTP Client View)....................................................................................................................1-921.4.44 tftp......................................................................................................................................................1-921.4.45 tftp-server acl......................................................................................................................................1-931.4.46 undelete..............................................................................................................................................1-941.4.47 user.....................................................................................................................................................1-941.4.48 verbose...............................................................................................................................................1-95

    Quidway Eudemon 1000E Unified Security GatewayCommand Reference Contents

    Issue 03 (2009-06-18) Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    iii

  • 1.5 System Configuration Commands................................................................................................................1-961.5.1 compare configuration..........................................................................................................................1-971.5.2 debugging (User View)........................................................................................................................1-981.5.3 debugging license.................................................................................................................................1-991.5.4 display saved-configuration...............................................................................................................1-1001.5.5 display current-configuration.............................................................................................................1-1011.5.6 display channel...................................................................................................................................1-1021.5.7 display debugging..............................................................................................................................1-1031.5.8 display diagnostic-information...........................................................................................................1-1031.5.9 display environment...........................................................................................................................1-1041.5.10 display firewall logtime....................................................................................................................1-1051.5.11 display firewall statistic stream........................................................................................................1-1061.5.12 display info-center............................................................................................................................1-1061.5.13 display license..................................................................................................................................1-1071.5.14 display logbuffer..............................................................................................................................1-1081.5.15 display patch-information................................................................................................................1-1091.5.16 display trapbuffer.............................................................................................................................1-1101.5.17 firewall log stream enable................................................................................................................1-1111.5.18 firewall log-time...............................................................................................................................1-1121.5.19 firewall session log-type...................................................................................................................1-1131.5.20 info-center channel...........................................................................................................................1-1141.5.21 info-center console channel..............................................................................................................1-1151.5.22 info-center enable.............................................................................................................................1-1151.5.23 info-center logbuffer........................................................................................................................1-1161.5.24 info-center loghost............................................................................................................................1-1171.5.25 info-center loghost source................................................................................................................1-1181.5.26 info-center loghost type....................................................................................................................1-1191.5.27 info-center monitor channel.............................................................................................................1-1201.5.28 info-center snmp channel.................................................................................................................1-1211.5.29 info-center source.............................................................................................................................1-1211.5.30 info-center timestamp.......................................................................................................................1-1241.5.31 info-center trapbuffer.......................................................................................................................1-1251.5.32 license file........................................................................................................................................1-1261.5.33 patch.................................................................................................................................................1-1271.5.34 ping...................................................................................................................................................1-1281.5.35 reboot................................................................................................................................................1-1301.5.36 reset logbuffer..................................................................................................................................1-1301.5.37 reset saved-configuration.................................................................................................................1-1311.5.38 reset trapbuffer.................................................................................................................................1-1321.5.39 save...................................................................................................................................................1-1321.5.40 service modem-callback...................................................................................................................1-1331.5.41 session log enable.............................................................................................................................1-134

    ContentsQuidway Eudemon 1000E Unified Security Gateway

    Command Reference

    iv Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    Issue 03 (2009-06-18)

  • 1.5.42 startup system-software....................................................................................................................1-1351.5.43 startup saved-configuration..............................................................................................................1-1351.5.44 terminal debugging...........................................................................................................................1-1361.5.45 terminal logging...............................................................................................................................1-1371.5.46 terminal monitor...............................................................................................................................1-1371.5.47 terminal trapping..............................................................................................................................1-1381.5.48 tracert................................................................................................................................................1-139

    1.6 Web Management Commands....................................................................................................................1-1401.6.1 debugging ssl......................................................................................................................................1-1401.6.2 debugging web-manager....................................................................................................................1-1411.6.3 display web-manager..........................................................................................................................1-1421.6.4 web-manager......................................................................................................................................1-143

    1.7 NTP Configuration Commands...................................................................................................................1-1441.7.1 debugging ntp-service........................................................................................................................1-1451.7.2 display ntp-service sessions...............................................................................................................1-1461.7.3 display ntp-service status...................................................................................................................1-1471.7.4 display ntp-service trace.....................................................................................................................1-1491.7.5 ntp-service access...............................................................................................................................1-1491.7.6 ntp-service authentication enable.......................................................................................................1-1511.7.7 ntp-service authentication-keyid........................................................................................................1-1511.7.8 ntp-service broadcast-client................................................................................................................1-1521.7.9 ntp-service broadcast-server...............................................................................................................1-1531.7.10 ntp-service in-interface disable........................................................................................................1-1541.7.11 ntp-service max-dynamic-sessions...................................................................................................1-1551.7.12 ntp-service multicast-client..............................................................................................................1-1551.7.13 ntp-service multicast-server.............................................................................................................1-1561.7.14 ntp-service refclock-master..............................................................................................................1-1571.7.15 ntp-service reliable authentication-keyid.........................................................................................1-1581.7.16 ntp-service source-interface.............................................................................................................1-1591.7.17 ntp-service unicast-peer....................................................................................................................1-1601.7.18 ntp-service unicast-server.................................................................................................................1-161

    1.8 SNMP Configuration Commands...............................................................................................................1-1621.8.1 debugging snmp-agent.......................................................................................................................1-1631.8.2 display snmp-agent.............................................................................................................................1-1641.8.3 display snmp-agent community.........................................................................................................1-1641.8.4 display snmp-agent group..................................................................................................................1-1651.8.5 display snmp-agent mib-view............................................................................................................1-1661.8.6 display snmp-agent statistics..............................................................................................................1-1671.8.7 display snmp-agent sys-info...............................................................................................................1-1691.8.8 display snmp-agent usm-user.............................................................................................................1-1701.8.9 enable snmp trap updown...................................................................................................................1-1711.8.10 snmp-agent.......................................................................................................................................1-172

    Quidway Eudemon 1000E Unified Security GatewayCommand Reference Contents

    Issue 03 (2009-06-18) Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    v

  • 1.8.11 snmp-agent community....................................................................................................................1-1731.8.12 snmp-agent group.............................................................................................................................1-1741.8.13 snmp-agent local-engineid...............................................................................................................1-1751.8.14 snmp-agent mib-view.......................................................................................................................1-1761.8.15 snmp-agent packet max-size............................................................................................................1-1771.8.16 snmp-agent sys-info.........................................................................................................................1-1771.8.17 snmp-agent target-host.....................................................................................................................1-1781.8.18 snmp-agent trap enable.....................................................................................................................1-1801.8.19 snmp-agent trap life..........................................................................................................................1-1811.8.20 snmp-agent trap queue-size..............................................................................................................1-1811.8.21 snmp-agent trap source.....................................................................................................................1-1821.8.22 snmp-agent usm-user........................................................................................................................1-183

    2 Internetworking..........................................................................................................................2-12.1 Interface Management Commands..................................................................................................................2-2

    2.1.1 description..............................................................................................................................................2-22.1.2 display interface..................................................................................................................................... 2-32.1.3 display ip interface.................................................................................................................................2-62.1.4 interface..................................................................................................................................................2-92.1.5 ip binding..............................................................................................................................................2-102.1.6 reset counters interface.........................................................................................................................2-112.1.7 shutdown (Interface View)...................................................................................................................2-122.1.8 firewall fifo enable...............................................................................................................................2-122.1.9 firewall packet-capture.........................................................................................................................2-132.1.10 firewall packet-capture startup...........................................................................................................2-142.1.11 firewall packet-capture send...............................................................................................................2-152.1.12 display firewall packet-capture..........................................................................................................2-16

    2.2 Ethernet Interface Configuration Commands................................................................................................2-162.2.1 debugging ethernet packet....................................................................................................................2-172.2.2 display interface...................................................................................................................................2-182.2.3 duplex...................................................................................................................................................2-212.2.4 loopback...............................................................................................................................................2-222.2.5 mtu........................................................................................................................................................2-232.2.6 portswitch.............................................................................................................................................2-242.2.7 speed.....................................................................................................................................................2-252.2.8 distribute-weight...................................................................................................................................2-25

    2.3 Basic Logical Interface Configuration Commands.......................................................................................2-262.3.1 broadcast-limit link..............................................................................................................................2-262.3.2 display interface null............................................................................................................................2-272.3.3 display interface tunnel........................................................................................................................2-282.3.4 display interface virtual-template.........................................................................................................2-302.3.5 eth-trunk...............................................................................................................................................2-322.3.6 interface (Logic Interface View)..........................................................................................................2-33

    ContentsQuidway Eudemon 1000E Unified Security Gateway

    Command Reference

    vi Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    Issue 03 (2009-06-18)

  • 2.3.7 interface eth-trunk................................................................................................................................2-342.3.8 load-balance (Trunk interface view)....................................................................................................2-352.3.9 display trunkfwdtbl..............................................................................................................................2-362.3.10 display trunkmembership...................................................................................................................2-372.3.11 least active-linknumber......................................................................................................................2-372.3.12 max bandwidth-affected-linknumber.................................................................................................2-38

    2.4 VLAN Configuration Commands.................................................................................................................2-392.4.1 display interface vlanif.........................................................................................................................2-392.4.2 display vlan..........................................................................................................................................2-412.4.3 display vlan interface...........................................................................................................................2-422.4.4 interface vlanif......................................................................................................................................2-422.4.5 port interface........................................................................................................................................2-432.4.6 port default vlan...................................................................................................................................2-442.4.7 port trunk allow-pass vlan....................................................................................................................2-452.4.8 vlan.......................................................................................................................................................2-462.4.9 vlan-type dot1q.....................................................................................................................................2-47

    2.5 IP Address Configuration Commands...........................................................................................................2-472.5.1 display ip interface...............................................................................................................................2-472.5.2 ip address..............................................................................................................................................2-512.5.3 ip address unnumbered.........................................................................................................................2-52

    2.6 ARP Configuration Commands....................................................................................................................2-532.6.1 arp detect-times....................................................................................................................................2-542.6.2 arp expire-time.....................................................................................................................................2-542.6.3 arp-proxy enable...................................................................................................................................2-552.6.4 arp static...............................................................................................................................................2-562.6.5 arp multi-mac-permit............................................................................................................................2-572.6.6 debugging arp packet...........................................................................................................................2-582.6.7 display arp............................................................................................................................................2-582.6.8 reset arp................................................................................................................................................2-60

    2.7 Static Domain Name Resolution Command.................................................................................................2-612.7.1 display ip host.......................................................................................................................................2-612.7.2 ip host...................................................................................................................................................2-62

    2.8 DHCP Configuration Commands..................................................................................................................2-632.8.1 debugging dhcp relay...........................................................................................................................2-652.8.2 debugging dhcp server.........................................................................................................................2-652.8.3 dhcp enable...........................................................................................................................................2-662.8.4 dhcp relay.............................................................................................................................................2-672.8.5 dhcp select (Interface View).................................................................................................................2-682.8.6 dhcp select (System View)...................................................................................................................2-692.8.7 dhcp server detect.................................................................................................................................2-702.8.8 dhcp server dns-list (Interface View)...................................................................................................2-702.8.9 dhcp server dns-list (System View).....................................................................................................2-71

    Quidway Eudemon 1000E Unified Security GatewayCommand Reference Contents

    Issue 03 (2009-06-18) Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    vii

  • 2.8.10 dhcp server domain-name (Interface View).......................................................................................2-722.8.11 dhcp server domain-name (System View).........................................................................................2-732.8.12 dhcp server expired (Interface View).................................................................................................2-742.8.13 dhcp server expired (System View)...................................................................................................2-752.8.14 dhcp server forbidden-ip....................................................................................................................2-762.8.15 dhcp server ip-pool.............................................................................................................................2-772.8.16 dhcp server nbns-list (Interface View)...............................................................................................2-772.8.17 dhcp server nbns-list (System View).................................................................................................2-782.8.18 dhcp server netbios-type (Interface View).........................................................................................2-792.8.19 dhcp server netbios-type (System View)...........................................................................................2-802.8.20 dhcp server option (Interface View)...................................................................................................2-812.8.21 dhcp server option (System View).....................................................................................................2-822.8.22 dhcp server ping.................................................................................................................................2-832.8.23 dhcp server static-bind.......................................................................................................................2-842.8.24 display dhcp relay address..................................................................................................................2-852.8.25 display dhcp relay statistics................................................................................................................2-862.8.26 display dhcp server conflict................................................................................................................2-872.8.27 display dhcp server expired................................................................................................................2-882.8.28 display dhcp server free-ip.................................................................................................................2-892.8.29 display dhcp server ip-in-use..............................................................................................................2-902.8.30 display dhcp server statistics..............................................................................................................2-912.8.31 display dhcp server tree......................................................................................................................2-932.8.32 dns-list................................................................................................................................................2-952.8.33 domain-name......................................................................................................................................2-962.8.34 expired................................................................................................................................................2-972.8.35 gateway-list........................................................................................................................................2-982.8.36 ip relay address (Interface View).......................................................................................................2-992.8.37 ip relay address (System View)........................................................................................................2-1002.8.38 ip relay address cycle.......................................................................................................................2-1012.8.39 nbns-list............................................................................................................................................2-1012.8.40 netbios-type......................................................................................................................................2-1022.8.41 network (DHCP)..............................................................................................................................2-1032.8.42 option................................................................................................................................................2-1042.8.43 reset dhcp relay statistics..................................................................................................................2-1052.8.44 reset dhcp server conflict..................................................................................................................2-1052.8.45 reset dhcp server ip-in-use................................................................................................................2-1062.8.46 reset dhcp server statistics................................................................................................................2-1072.8.47 static-bind ip-address........................................................................................................................2-1082.8.48 static-bind mac-address....................................................................................................................2-108

    2.9 IP Performance Configuration Commands.................................................................................................2-1092.9.1 debugging ip.......................................................................................................................................2-1102.9.2 debugging tcp event...........................................................................................................................2-111

    ContentsQuidway Eudemon 1000E Unified Security Gateway

    Command Reference

    viii Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    Issue 03 (2009-06-18)

  • 2.9.3 debugging tcp packet..........................................................................................................................2-1122.9.4 debugging udp packet.........................................................................................................................2-1132.9.5 debugging tcp md5.............................................................................................................................2-1132.9.6 display fib...........................................................................................................................................2-1142.9.7 display fib I.........................................................................................................................................2-1152.9.8 display fib acl.....................................................................................................................................2-1172.9.9 display fib ip-prefix............................................................................................................................2-1192.9.10 display fib longer..............................................................................................................................2-1202.9.11 display fib statistics..........................................................................................................................2-1222.9.12 display icmp statistics.......................................................................................................................2-1232.9.13 display ip socket...............................................................................................................................2-1242.9.14 display ip statistics...........................................................................................................................2-1262.9.15 display tcp statistics..........................................................................................................................2-1272.9.16 display tcp status..............................................................................................................................2-1302.9.17 display udp statistics.........................................................................................................................2-1312.9.18 reset tcp statistics..............................................................................................................................2-1332.9.19 reset udp statistics.............................................................................................................................2-1332.9.20 tcp timer fin-timeout.........................................................................................................................2-1342.9.21 tcp timer syn-timeout.......................................................................................................................2-1352.9.22 tcp window.......................................................................................................................................2-136

    2.10 Routing Table Display Commands...........................................................................................................2-1362.10.1 display ip routing-table.....................................................................................................................2-1372.10.2 display ip routing-table (destination range specified)......................................................................2-1382.10.3 display ip routing-table (destination specified)................................................................................2-1392.10.4 display ip routing-table acl...............................................................................................................2-1402.10.5 display ip routing-table ip-prefix......................................................................................................2-1422.10.6 display ip routing-table protocol......................................................................................................2-1432.10.7 display ip routing-table radix...........................................................................................................2-1442.10.8 display ip routing-table statistics......................................................................................................2-1452.10.9 display ip routing-table verbose.......................................................................................................2-146

    2.11 Route Policy Configuration Commands...................................................................................................2-1492.11.1 apply access-vpn..............................................................................................................................2-1502.11.2 apply as-path....................................................................................................................................2-1502.11.3 apply community..............................................................................................................................2-1512.11.4 apply local-preference......................................................................................................................2-1522.11.5 apply origin......................................................................................................................................2-1532.11.6 apply tag...........................................................................................................................................2-1532.11.7 apply cost..........................................................................................................................................2-1542.11.8 apply cost-type.................................................................................................................................2-1552.11.9 display ip as-path-acl........................................................................................................................2-1562.11.10 display ip community-list...............................................................................................................2-1572.11.11 display ip ip-prefix.........................................................................................................................2-158

    Quidway Eudemon 1000E Unified Security GatewayCommand Reference Contents

    Issue 03 (2009-06-18) Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    ix

  • 2.11.12 display ip policy.............................................................................................................................2-1582.11.13 display ip policy setup....................................................................................................................2-1592.11.14 display ip policy statistics..............................................................................................................2-1602.11.15 display route-policy........................................................................................................................2-1612.11.16 if-match acl (unicast)......................................................................................................................2-1612.11.17 if-match as-path..............................................................................................................................2-1622.11.18 if-match community.......................................................................................................................2-1632.11.19 if-match cost...................................................................................................................................2-1642.11.20 if-match interface...........................................................................................................................2-1642.11.21 if-match ip next-hop.......................................................................................................................2-1652.11.22 if-match ip-prefix...........................................................................................................................2-1662.11.23 if-match packet-length....................................................................................................................2-1672.11.24 if-match tag....................................................................................................................................2-1682.11.25 ip as-path-acl..................................................................................................................................2-1682.11.26 ip community-list...........................................................................................................................2-1692.11.27 ip ip-prefix......................................................................................................................................2-1702.11.28 ip policy route-policy.....................................................................................................................2-1722.11.29 ip route-static..................................................................................................................................2-1722.11.30 route-policy....................................................................................................................................2-174

    2.12 RIP Configuration Commands..................................................................................................................2-1752.12.1 checkzero..........................................................................................................................................2-1762.12.2 debugging rip....................................................................................................................................2-1772.12.3 default cost (RIP View)....................................................................................................................2-1772.12.4 display rip.........................................................................................................................................2-1782.12.5 filter-policy export (RIP View)........................................................................................................2-1792.12.6 filter-policy import (RIP View)........................................................................................................2-1802.12.7 host-route..........................................................................................................................................2-1812.12.8 import-route (RIP View)..................................................................................................................2-1822.12.9 ipv4-family.......................................................................................................................................2-1832.12.10 network (RIP View).......................................................................................................................2-1842.12.11 peer (RIP View).............................................................................................................................2-1852.12.12 preference (RIP View)...................................................................................................................2-1862.12.13 reset................................................................................................................................................2-1872.12.14 rip...................................................................................................................................................2-1872.12.15 rip authentication-mode..................................................................................................................2-1882.12.16 rip input..........................................................................................................................................2-1892.12.17 rip metricin.....................................................................................................................................2-1902.12.18 rip metricout...................................................................................................................................2-1912.12.19 rip output........................................................................................................................................2-1922.12.20 rip split-horizon..............................................................................................................................2-1932.12.21 rip version.......................................................................................................................................2-1932.12.22 rip work..........................................................................................................................................2-194

    ContentsQuidway Eudemon 1000E Unified Security Gateway

    Command Reference

    x Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    Issue 03 (2009-06-18)

  • 2.12.23 summary.........................................................................................................................................2-1952.12.24 timers..............................................................................................................................................2-196

    2.13 OSPF Configuration Commands...............................................................................................................2-1972.13.1 abr-summary.....................................................................................................................................2-1992.13.2 area...................................................................................................................................................2-2002.13.3 asbr-summary...................................................................................................................................2-2002.13.4 authentication-mode (OSPF Area View).........................................................................................2-2012.13.5 debugging ospf.................................................................................................................................2-2022.13.6 default...............................................................................................................................................2-2042.13.7 default cost (OSPF View)................................................................................................................2-2052.13.8 default interval..................................................................................................................................2-2062.13.9 default limit......................................................................................................................................2-2072.13.10 default tag.......................................................................................................................................2-2082.13.11 default type.....................................................................................................................................2-2082.13.12 default-cost.....................................................................................................................................2-2092.13.13 default-route-advertise...................................................................................................................2-2102.13.14 display debugging ospf...................................................................................................................2-2112.13.15 display ospf abr-asbr......................................................................................................................2-2132.13.16 display ospf asbr-summary.............................................................................................................2-2142.13.17 display ospf brief............................................................................................................................2-2152.13.18 display ospf cumulative..................................................................................................................2-2172.13.19 display ospf diagnostic-information...............................................................................................2-2192.13.20 display ospf error............................................................................................................................2-2202.13.21 display ospf interface.....................................................................................................................2-2212.13.22 display ospf lsdb.............................................................................................................................2-2222.13.23 display ospf nexthop.......................................................................................................................2-2262.13.24 display ospf peer.............................................................................................................................2-2262.13.25 display ospf peer address................................................................................................................2-2282.13.26 display ospf peer interface..............................................................................................................2-2282.13.27 display ospf peer route-id...............................................................................................................2-2292.13.28 display ospf request-queue.............................................................................................................2-2302.13.29 display ospf retrans-queue..............................................................................................................2-2312.13.30 display ospf routing........................................................................................................................2-2322.13.31 display ospf vlink...........................................................................................................................2-2322.13.32 filter-policy export (OSPF View)...................................................................................................2-2332.13.33 filter-policy import (OSPF View)..................................................................................................2-2342.13.34 import-route (OSPF View).............................................................................................................2-2352.13.35 network (OSPF Aarea View).........................................................................................................2-2362.13.36 nssa.................................................................................................................................................2-2372.13.37 opaque-capbility.............................................................................................................................2-2382.13.38 ospf.................................................................................................................................................2-2392.13.39 ospf authentication-mode...............................................................................................................2-240

    Quidway Eudemon 1000E Unified Security GatewayCommand Reference Contents

    Issue 03 (2009-06-18) Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    xi

  • 2.13.40 ospf cost..........................................................................................................................................2-2412.13.41 ospf dr-priority...............................................................................................................................2-2422.13.42 ospf mib-binding............................................................................................................................2-2432.13.43 ospf mtu-enable..............................................................................................................................2-2442.13.44 ospf network-type...........................................................................................................................2-2442.13.45 ospf timer dead...............................................................................................................................2-2462.13.46 ospf timer hello...............................................................................................................................2-2472.13.47 ospf timer poll................................................................................................................................2-2472.13.48 ospf timer retransmit......................................................................................................................2-2482.13.49 ospf trans-delay..............................................................................................................................2-2492.13.50 peer (OSPF View)..........................................................................................................................2-2502.13.51 preference (OSPF View)................................................................................................................2-2512.13.52 reset ospf........................................................................................................................................2-2522.13.53 router id..........................................................................................................................................2-2532.13.54 silent-interface................................................................................................................................2-2542.13.55 snmp-agent trap enable ospf...........................................................................................................2-2552.13.56 spf-schedule-interval......................................................................................................................2-2562.13.57 stub.................................................................................................................................................2-2572.13.58 vlink-peer.......................................................................................................................................2-2582.13.59 vpn-instance-capability simple.......................................................................................................2-259

    2.14 PPP Configuration Commands..................................................................................................................2-2602.14.1 ppp authentication-mode..................................................................................................................2-2602.14.2 ppp chap password...........................................................................................................................2-2612.14.3 ppp chap user....................................................................................................................................2-2622.14.4 ppp ipcp dns.....................................................................................................................................2-2622.14.5 ppp pap local-user............................................................................................................................2-2632.14.6 ppp timer negotiate...........................................................................................................................2-264

    2.15 BGP Configuration Commands................................................................................................................2-2652.15.1 aggregate..........................................................................................................................................2-2672.15.2 balance..............................................................................................................................................2-2682.15.3 bgp....................................................................................................................................................2-2692.15.4 compare-different-as-med (BGP).....................................................................................................2-2692.15.5 confederation id................................................................................................................................2-2702.15.6 confederation nonstandard...............................................................................................................2-2712.15.7 confederation peer-as.......................................................................................................................2-2722.15.8 dampening........................................................................................................................................2-2732.15.9 debugging bgp..................................................................................................................................2-2742.15.10 default local-preference..................................................................................................................2-2762.15.11 default med.....................................................................................................................................2-2762.15.12 default-route imported....................................................................................................................2-2772.15.13 display bgp group...........................................................................................................................2-2782.15.14 display bgp network.......................................................................................................................2-279

    ContentsQuidway Eudemon 1000E Unified Security Gateway

    Command Reference

    xii Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    Issue 03 (2009-06-18)

  • 2.15.15 display bgp paths............................................................................................................................2-2802.15.16 display bgp peer.............................................................................................................................2-2812.15.17 display bgp routing-table................................................................................................................2-2832.15.18 display bgp routing-table as-path-acl.............................................................................................2-2852.15.19 display bgp routing-table cidr........................................................................................................2-2862.15.20 display bgp routing-table community............................................................................................2-2872.15.21 display bgp routing-table community-list......................................................................................2-2882.15.22 display bgp routing-table dampened..............................................................................................2-2892.15.23 display bgp routing-table different-origin-as.................................................................................2-2902.15.24 display bgp routing-table flap-info.................................................................................................2-2912.15.25 display bgp routing-table peer........................................................................................................2-2922.15.26 display bgp routing-table regular-expression.................................................................................2-2932.15.27 group (BGP View or VPN-Instance View)....................................................................................2-2942.15.28 import-route (BGP View)...............................................................................................................2-2952.15.29 ipv4-family.....................................................................................................................................2-2962.15.30 network (BGP View)......................................................................................................................2-2972.15.31 peer advertise-community (BGP)...................................................................................................2-2972.15.32 peer allow-as-loop (BGP)...............................................................................................................2-2982.15.33 peer as-number...............................................................................................................................2-2992.15.34 peer as-path-acl export...................................................................................................................2-3002.15.35 peer as-path-acl import...................................................................................................................2-3012.15.36 peer connect-interface (BGP).........................................................................................................2-3022.15.37 peer default-route-advertise (BGP)................................................................................................2-3022.15.38 peer description (BGP)...................................................................................................................2-3032.15.39 peer ebgp-max-hop.........................................................................................................................2-3042.15.40 peer enable (BGP)..........................................................................................................................2-3052.15.41 peer filter-policy export (BGP)......................................................................................................2-3062.15.42 peer filter-policy import (BGP)......................................................................................................2-3072.15.43 peer group (BGP)...........................................................................................................................2-3082.15.44 peer ip-prefix export (BGP)...........................................................................................................2-3092.15.45 peer ip-prefix import (BGP)...........................................................................................................2-3102.15.46 peer listen-only...............................................................................................................................2-3112.15.47 peer next-hop-local (BGP).............................................................................................................2-3112.15.48 peer password.................................................................................................................................2-3122.15.49 peer public-as-only (BGP).............................................................................................................2-3132.15.50 peer reflect-client (BGP)................................................................................................................2-3142.15.51 peer route-policy export (BGP)......................................................................................................2-3152.15.52 peer route-policy import (BGP).....................................................................................................2-3162.15.53 peer route-update-interval (BGP)...................................................................................................2-3162.15.54 peer timer........................................................................................................................................2-3172.15.55 preference (BGP)............................................................................................................................2-3182.15.56 reflect between-clients (BGP)........................................................................................................2-319

    Quidway Eudemon 1000E Unified Security GatewayCommand Reference Contents

    Issue 03 (2009-06-18) Huawei Proprietary and ConfidentialCopyright Huawei Technologies Co., Ltd.

    xiii

  • 2.15.57 reflector cluster-id (BGP)...............................................................................................................2-3202.15.58 refresh bgp......................................................................................................................................2-3212.15.59 reset bgp.........................................................................................................................................2-3222.15.60 reset bgp dampening.......................................................................................................................2-3222.15.61 reset bgp flap-info..........................................................................................................................2-3232.15.62 reset bgp group...............................................................................................................................2-3242.15.63 summary automatic (BGP).............................................................................................................2-3252.15.64 timer keepalive hold (BGP)............................................................................................................2-325

    2.16 Policy Routing Configuration Commands................................................................................................2-3262.16.1 traffic classifier.................................................................................................................................2-3272.16.2 if-match acl (Traffic Classifier View)..............................................................................................2-3272.16.3 traffic behavior.................................................................................................................................2-3282.16.4 remark ip-nexthop............................................................................................................................2-3292.16.5 qos policy.........................................................................................................................................2-3302.16.6 classifier behavior............................................................................................................................2-3302.16.7 qos apply policy...............................................................................................................................2-3312.16.8 display qos policy.............................................................................................................................2-3322.16.9 display traffic behavior.....................................................................................................................2-3332.16.10 display traffic classifier..................................................................................................................2-333

    2.17 QoS Configuration Commands.................................................................................................................2-3342.17.1 car..................................................................................................................................................