Table of Contents

1 PPP and MP Configuration Commands· 1-1

PPP and MP configuration commands· 1-1

broadcast-limit link· 1-1

display interface mp-group· 1-1

display interface virtual-template· 1-3

display virtual-access· 1-3

display ppp mp· 1-4

interface mp-group· 1-6

interface virtual-template· 1-7

ip address ppp-negotiate· 1-7

link-protocol ppp· 1-8

mtu· 1-8

ppp account-statistics enable· 1-9

ppp authentication-mode· 1-9

ppp chap password· 1-10

ppp chap user 1-11

ppp ipcp dns· 1-12

ppp ipcp dns admit-any· 1-12

ppp ipcp dns request 1-13

ppp ipcp remote-address forced· 1-14

ppp mp· 1-15

ppp mp binding-mode· 1-15

ppp mp endpoint 1-16

ppp mp max-bind· 1-17

ppp mp min-fragment 1-17

ppp mp mp-group· 1-18

ppp mp short-sequence· 1-19

ppp mp user 1-20

ppp mp virtual-template· 1-21

ppp pap local-user 1-21

ppp timer negotiate· 1-22

remote address· 1-22

reset counters interface· 1-24

timer hold· 1-24

PPP Link Efficiency Mechanism Configuration Commands· 1-25

ppp mp lfi 1-25

ppp mp lfi delay-per-frag· 1-25

2 PPPoE Configuration Commands· 2-1

PPPoE Server Configuration Commands· 2-1

display pppoe-server session· 2-1

pppoe-server bind· 2-1

pppoe-server log-information off 2-2

pppoe-server max-sessions local-mac· 2-3

pppoe-server max-sessions remote-mac· 2-3

pppoe-server max-sessions total 2-4

reset pppoe-server 2-4

 

PPP and MP configuration commands

broadcast-limit link

Syntax

broadcast-limit link number

undo broadcast-limit link

View

Virtual template (VT) view

Default Level

2: System level

Parameters

number: Maximum number of links that can be used for transmitting multicast or broadcast packets, in the range 0 to 128. A value of 0 disables the transmission of multicast packets or broadcast packets.

Description

Use the broadcast-limit link command to set the maximum number of links that can be used for transmitting multicast packets or broadcast packets for a VT.

Use the undo broadcast-limit link command to restore the default.

By default, the maximum number of links that can be used for transmitting multicast or broadcast packets is 30.

For a VT containing multiple links, the system performance may decrease if all the links of the VT are engaged in multicast or broadcast packet transmission. You can use the broadcast-limit link command to limit the number of links that are capable of multicast or broadcast packet transmission.

Examples

# Set the maximum number of links that are capable of multicast or broadcast packets transmission to 100 for VT 1.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] broadcast-limit link 100

display interface mp-group

Syntax

display interface mp-group [ mp-number ]

View

Any view

Default Level

1: Monitor level

Parameters

mp-number: Number of an existing multilink point to point protocol group (MP-group) interface.

Description

Use the display interface mp-group command to display the information about an existing MP-group interface. If the mp-number argument is not provided, this command displays the information about all the existing MP-group interfaces.

Examples

# Display the information about interface MP-group 12.

<Sysname> display interface mp-group 12

Mp-group12 current state: DOWN

Line protocol current state: DOWN

Description: Mp-group12 Interface

The Maximum Transmit Unit is 1500, Hold timer is 10(sec)

Internet protocol processing : disabled

Link layer protocol is PPP

LCP initial

Physical is MP

Output queue : (Urgent queue : Size/Length/Discards)  0/50/0

Output queue : (Protocol queue : Size/Length/Discards) 0/500/0

Output queue : (FIFO queuing : Size/Length/Discards)  0/75/0

     Last 300 seconds input:  0 bytes/sec 0 packets/sec

     Last 300 seconds output:  0 bytes/sec 0 packets/sec

     0 packets input, 0 bytes, 0 drops

     0 packets output, 0 bytes, 0 drops

Table 1-1 Description on the fields of the display interface mp-group command

Field	Description
current state	Physical state of the interface (UP or DOWN)
Line protocol current state	Data link layer state (UP or DOWN)
Description	Description string of the interface
The Maximum Transmit Unit	Maximum transmit unit (MTU) of the interface
Hold timer	Interval for the current interface to send keepalive packets
Internet protocol processing	Network layer state (enabled or disabled)
LCP initial	Link control protocol (LCP) negotiation is complete
Physical	Physical type of the interface
Last 300 seconds input:  0 bytes/sec 0 packets/sec Last 300 seconds output:  0 bytes/sec 0 packets/sec	Average rate of input packets and output packets in the last 300 seconds
0 packets input, 0 bytes, 0 drops	Total amount of the inbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the inbound packets
0 packets output, 0 bytes, 0 drops	Total amount of outbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the outbound packets

 

display interface virtual-template

Syntax

display interface virtual-template [ number ]

View

Any view

Default Level

1: Monitor level

Parameters

number: Number of an existing virtual template (VT).

Description

Use the display interface virtual-template command to display the information about a VT. If the number argument is not provided, this command displays the information about all the existing VTs.

Related commands: interface virtual-template.

Examples

# Display the information about VT 1.

<Sysname>display interface virtual-template 1

Virtual-Template1 current state: UP

Line protocol current state: UP (spoofing)

Description: Virtual-Template1 Interface

The Maximum Transmit Unit is 1500, Hold timer is 10(sec)

Internet Address is 6.1.1.2/8 Primary

Link layer protocol is PPP

LCP initial, MP opened

Physical is None, baudrate: 64000 bps

Output queue : (Urgent queuing : Length)  100

Output queue : (Protocol queuing : Length)  500

Output queue : (FIFO queuing : Length)  75

    Last 300 seconds input:  0 bytes/sec 0 packets/sec

    Last 300 seconds output:  6 bytes/sec 0 packets/sec

    512 packets input, 43008 bytes, 0 drops

    614 packets output, 49636 bytes, 0 drops

Refer to Table 1-1 for the description on the output fields.

display virtual-access

Syntax

For centralized devices:

display virtual-access [ va-number | dialer dialer-number | peer peer-address | user user-name | vt vt-number ] *

For distributed devices:

display virtual-access [ va-number | peer peer-address | slot slot-number | user user-name | vt vt-number ] *

View

Any view

Default Level

1: Monitor level

Parameters

va-number: VA interface number, ranging from 0 to 65535.

peer peer-address: Specifies the peer IP address of a VA interface, in dotted decimal notation.

slot slot-number: Specifies a slot by its number.

user user-name: Specifies the username of a user logging in through a VA interface. This argument is a string of 1 to 80 characters.

vt vt-number: Specifies a VT number, in the range 0 to 1023.

Description

Use the display virtual-access command to display the information about a VA interface or the VA interfaces that are formed based on a VT.

 

 

Examples

# Display the information about all the VA interfaces that are formed based on VT 1.

<Sysname> display virtual-access vt 1

Virtual-Template1:0 current state: UP

Line protocol current state: UP

Description: Virtual-Template1:0 Interface

The Maximum Transmit Unit is 1500

Link layer protocol is PPP

LCP opened, MP opened, IPCP opened, OSICP opened

Physical is MP, baudrate: 64000 bps

Output queue : (Urgent queuing : Size/Length/Discards)  0/100/0

Output queue : (Protocol queuing : Size/Length/Discards)  0/500/0

Output queue : (FIFO queuing : Size/Length/Discards)  0/75/0

    Last 300 seconds input:  0 bytes/sec 0 packets/sec

    Last 300 seconds output:  0 bytes/sec 0 packets/sec

    520 packets input, 44132 bytes, 0 drops

    527 packets output, 44566 bytes, 4 drops

Refer to Table 1-1 for the description on the output fields.

display ppp mp

Syntax

display ppp mp [ interface interface-type interface-number ]

View

Any view

Default Level

1: Monitor level

Parameters

interface interface-type interface-number: Specifies an interface by its type and number.

Description

Use the display ppp mp command to display the information about an MP interface.

Related commands: link-protocol ppp, ppp mp.

Examples

# Display the information about all the MP interfaces.

<Sysname> display ppp mp

Mp-group is Mp-group0

max-bind: 20, min-fragment: 128 ,LFI max-delay: 100

 Bundle Multilink, 6 members, Master link is Mp-group0

 Peer's endPoint descriptor: 1e9935f57c85

Sequence format: short/long rcv/sent

 Bundle Up Time: 2005/03/13  19:54:23:60

  0 lost fragments, 0 reordered, 0 unassigned, 0 interleaved,

 sequence 0/0 rcvd/sent

 The member channels bundled are:

      Serial2/1:15     Up-Time:2005/03/13  19:54:23:60

      Serial2/1:16     Up-Time:2005/03/13  19:54:23:60

      Serial2/1:17     Up-Time:2005/03/13  19:54:23:60

      Serial2/1:18     Up-Time:2005/03/13  19:54:23:60

      Serial2/1:19     Up-Time:2005/03/13  19:54:23:60

      Serial2/1:20     Up-Time:2005/03/13  19:54:23:60

 Inactive member channels: 4 members

      Serial2/1:21     (inactive)

      Serial2/1:22     (inactive)

      Serial2/1:23     (inactive)

      Serial2/1:24     (inactive)

Table 1-2 Description on the fields of the display ppp mp command

Field	Description
Mp-group is Mp-group0	The information about MP-group 0 interface is displayed.
max-bind	Maximum number of links that can be bundled
min-fragment	Minimum size of an MP fragment
LFI max-delay	Maximum delay to transmit an LFI fragment
Bundle Multilink	Peer MP username is Multilink.
6 members	Six channels are bundled.
Master link is MP-group0	The master channel is MP-group 0.
Peer's endPoint descriptor: 1e9935f57c85	The description string of the peer is 1e9935f57c85.
Sequence format: short/long rcv/sent	Sequence number header format of MP: the short sequence number format is used in the incoming direction and the long sequence number format is used in the outgoing direction
Bundle Up Time: 2005/03/13  19:54:23:60	The MP channel went up at 19:54:23:60 on March 13, 2005.
0 lost fragments	Number of the lost fragments
0 reordered	Number of the packets reassembled
0 unassigned	Number of the packets waiting for being reassembled
0 interleaved	Number of the interleaved packets
sequence 0/0 rcvd/sent	Received sequence number/sent sequence number
The member channels bundled are	The following displays all the member channels bundled in this logical channel
Serial2/1:15    Up-Time:2005/03/13  19:54:23:60	Subchannel Serial2/1:15 is up at 19:54:23:60 on March 13, 2005
Inactive member channels	List of the inactive subchannels

 

interface mp-group

Syntax

interface mp-group mp-number

undo interface mp-group mp-number

View

System view

Default Level

2: System level

Parameters

mp-number: MP group interface number.

l          For a centralized device, mp-number ranges from 0 to 1023.

l          For a distributed device, mp-number is in the form of X/Y/Z, in which:

X is the number of the slot that holds the service board, ranging from 2 to 5.

Y is the number of the subslot that holds the interface card, which can either be 0 or the physical subslot number. 0 is the number of the subslot which holds the logical interface card.

Z is the number of the interface on the interface card, ranging from 0 to 1023.

Description

Use the interface mp-group command to create an MP group interface and enter MP group interface view.

Use the undo interface mp-group command to remove an MP-group interface.

This command needs to be used in conjunction with the ppp mp mp-group command. You can execute the two commands in either order.

 

 

Examples

# Create MP group 3 interface on a centralized device.

<Sysname> system-view

[Sysname] interface mp-group 3

[Sysname-Mp-group3]

# Create MP group 5/0/0 interface on a distributed device.

<Sysname> system-view

[Sysname] interface mp-group 5/0/0

[Sysname-Mp-group5/0/0]

interface virtual-template

Syntax

interface virtual-ethernet number

undo interface virtual-ethernet number

View

System view

Default Level

2: System level

Parameters

number: VT number, in the range 0 to 1023.

Description

Use the interface virtual-template command to create a VT and enter VT view. If the VT already exists, you enter its view directly.

Use the undo interface virtual-template command to remove a VT.

To remove a VT, make sure that all the corresponding VA access interfaces are removed and the VT is not in use.

Examples

# Create VT 10 interface.

<Sysname> system-view

[Sysname] interface virtual-template 10

[Sysname-Virtual-Template10]

ip address ppp-negotiate

Syntax

ip address ppp-negotiate

undo ip address ppp-negotiate

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the ip address ppp-negotiate command to enable IP address negotiation on the local interface, so that the local interface can accept the IP address allocated by the peer end.

Use the undo ip address ppp-negotiate command to disable IP address negotiation.

By default, IP address negotiation is disabled.

Related commands: remote address, ppp ipcp remote-address forced.

Examples

# Enable IP address negotiation on Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ip address ppp-negotiate

link-protocol ppp

Syntax

link-protocol ppp

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the link-protocol ppp command to enable PPP on an interface.

By default, PPP are enabled on all the interfaces except Ethernet interface.

Examples

# Enable PPP on Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] link-protocol ppp

mtu

Syntax

mtu size

undo mtu

View

VT interface view, MP group interface view

Default Level

2: System level

Parameters

size: MTU in bytes, in the range of 128 to 1580.

Description

Use the mtu command to set the MTU size of the interface.

Use the undo mtu command to restore the default.

By default, the MTU of an interface is 1500 bytes.

Examples

# Set the MTU of MP group 1 to 1200 bytes.

<Sysname> system-view

[Sysname] interface mp-group 1

[Sysname-Mp-group1] mtu 1200

ppp account-statistics enable

Syntax

ppp account-statistics enable

undo ppp account-statistics enable

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the ppp account-statistics enable command to enable the generating of PPP accounting statistics.

Use the undo ppp account-statistics enable command to disable the generating of PPP accounting statistics.

By default, the generating of PPP accounting statistics is disabled.

Examples

# Enable the generating of PPP accounting statistics on interface Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp account-statistics enable

ppp authentication-mode

Syntax

ppp authentication-mode { chap | pap } [ call-in | domain isp-name ]

undo ppp authentication-mode

View

Interface view

Default Level

2: System level

Parameters

chap: Adopts CHAP authentication.

pap: Adopts PAP authentication.

call-in: Authenticates the call-in users only.

domain isp-name: Specifies the domain name for authentication, a string of 1 to 24 characters.

Description

Use the ppp authentication-mode command to configure the PPP authentication mode.

Use the undo ppp authentication-mode command to disable PPP authentication.

By default, PPP authentication is not performed.

Note that:

l          If you run the ppp authentication-mode command with the domain keyword specified, you need to configure an address pool in the corresponding domain. (You can use the display domain command to display the domain configuration.)

l          If you configure the ppp authentication-mode command without specifying the domain name, the system checks the username for domain information. If the username contains a domain name, the domain will be used for authentication (If the domain does not exist, the user’s access request will be denied). If not, the default domain is used (you can use the domain default command to configure the default domain; if no default domain is configured, the default domain system is used by default).

There are two types of PPP authentication: PAP authentication and CHAP authentication.

l          PAP authentication is two-way handshake authentication. The password used is in plain text.

l          CHAP authentication is three-way handshake authentication. The password is in cipher text.

In addition, you can also adopt the AAA authentication algorithm list (if defined) to authenticate users.

In either PPP authentication mode, AAA determines whether a user can pass the authentication through a local authentication database or an AAA server.

 

 

Related commands: ppp chap user, ppp pap local-user, ppp chap password, local-user, domain default (the latter two commands are described in AAA Commands in the Security Volume).

Examples

# Configure to authenticate the peer device using PAP on interface Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp authentication-mode pap domain system

ppp chap password

Syntax

ppp chap password { cipher | simple } password

undo ppp chap password

View

Interface view

Default Level

2: System level

Parameters

cipher: Specifies to display the password in cipher text.

simple: Specifies to display the password in plain text.

password: Default password for CHAP authentication, a string of 1 to 48 characters. When the simple keyword is used, this password is in plain text. When the cipher keyword is used, this password can either be in cipher text or in plain text. A password in plain text is a continuous string of no more than 48 characters, such as aabbcc. A password in cipher text has a fixed length of 24 or 64 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description

Use the ppp chap password command to set the default password for CHAP authentication.

Use the undo ppp chap password command to cancel the configuration.

Related commands: ppp authentication-mode chap.

Examples

# Set the default password for CHAP authentication to systemname, which is to be displayed in plain text.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp chap password simple systemname

ppp chap user

Syntax

ppp chap user username

undo ppp chap user

View

Interface view

Default Level

2: System level

Parameters

username: Username for CHAP authentication, a string of 1 to 80 characters, which is the one sent to the peer device for the local device to be authenticated.

Description

Use the ppp chap user command to set the username for CHAP authentication.

Use the undo ppp chap user command to cancel the configuration.

By default, the username for CHAP authentication is null.

To pass CHAP authentication, the username/password of one side needs to be the local username/password of the peer.

Related commands: ppp authentication-mode.

Examples

# Set the username for CHAP authentication as Root on Serial 2/0 interface.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp chap user Root

ppp ipcp dns

Syntax

ppp ipcp dns primary-dns-address [ secondary-dns-address ]

undo ppp ipcp dns primary-dns-address [ secondary-dns-address ]

View

Interface view

Default Level

2: System level

Parameters

primary-dns-address: Primary DNS server IP address to be set.

secondary-dns-address: Secondary DNS server IP address to be set.

Description

Use the ppp ipcp dns command to configure the primary and secondary DNS server IP addresses to be used in PPP negotiation.

Use the undo ppp ipcp dns command to cancel the configuration.

By default, a device does not allocate DNS server IP addresses for its peer.

When connected through PPP, a device can assign DNS server IP addresses to its peer during PPP negotiation (if the peer requests) for the peer to access the network by domain names.

If a PC is connected to the device through PPP, you can execute the winipcfg command or the ipconfig /all command on the PC to check the DNS server IP addresses assigned by the device.

A device can provide a primary DNS server IP address and a secondary DNS server IP address to its peer.

Examples

# Set the primary DNS server IP address to 100.1.1.1 and the secondary DNS server IP address to 100.1.1.2 on interface Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp ipcp dns 100.1.1.1 100.1.1.2

ppp ipcp dns admit-any

Syntax

ppp ipcp dns admit-any

undo ppp ipcp dns admit-any

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the ppp ipcp dns admit-any command to configure the device to accept the DNS server IP addresses assigned by the peer even though it does not request the peer for the DNS server IP addresses.

Use the undo ppp ipcp dns admit-any command to configure the device to deny the DNS server IP addresses assigned by the peer if it does not request the peer for the DNS server IP addresses.

By default, a device does not accept the DNS server IP addresses assigned by the peer if it does not request the peer for the DNS server IP addresses.

You can configure a device to accept the DNS server IP addresses assigned by the peer, through which domain names can be resolved for the device.

Note that, before configuring this command, you need to configure the ppp ipcp dns request command first.

Examples

# Configure interface Serial 2/0 of the local device to accept the DNS server IP addresses allocated by the peer.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp ipcp dns admit-any

ppp ipcp dns request

Syntax

ppp ipcp dns request

undo ppp ipcp dns request

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the ppp ipcp dns request command to enable a device to request its peer for the DNS server IP address actively through a port.

Use the undo ppp ipcp dns request command to restore the default.

By default, a device does not request its peer for the DNS server IP address actively.

You can configure a device to request its peer (especially in cases where a device is connected to the operator’s access server through a dial-up link) for the DNS server address during PPP negotiation to enable domain names to be resolved for the device.

 

 

Examples

# Enable the device to request its peer for the DNS server IP address actively through Serial 2/0 interface.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp ipcp dns request

ppp ipcp remote-address forced

Syntax

ppp ipcp remote-address forced

undo ppp ipcp remote-address forced

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the ppp ipcp remote-address forced command to configure a device to assign IP addresses to the peer by force. This command also disables the peer from using locally configured IP addresses.

Use the undo ppp ipcp remote-address forced command to cancel the configuration.

By default, the peer can use locally configured IP address in PPP IPCP negotiation. That is, a device assigns an IP address to its peer when the latter requests explicitly. It does not assign IP addresses to the peer when the latter already has IP addresses configured.

To disable the peer from using locally configured IP addresses, execute the ppp ipcp remote-address forced command on the local interface.

Related commands: remote address.

Examples

# Configure an optional IP address 10.0.0.1 on interface Serial 2/0 for the peer.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] remote address 10.0.0.1

# Configure IP address 10.0.0.1 on interface Serial 2/0 for the peer and assign the IP address to the peer by force.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] remote address 10.0.0.1

[Sysname-Serial2/0] ppp ipcp remote-address forced

ppp mp

Syntax

ppp mp

undo ppp mp

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the ppp mp command to configure an interface encapsulated with PPP to operate in MP mode.

Use the undo ppp mp command to restore the default.

By default, an interface encapsulated with PPP operates in the single PPP mode.

To obtain more bandwidth, you can bind multiple PPP links to form a logical MP interface.

Examples

# Configure interface Serial 2/0 to operate in MP mode (assuming that the interface is PPP-encapsulated).

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp mp

ppp mp binding-mode

Syntax

ppp mp binding-mode { authentication | both | descriptor }

undo ppp mp binding-mode

View

Virtual template interface view

Default Level

2: System level

Parameters

authentication: Performs MP binding by PPP authentication username.

both: Performs MP binding by both PPP authentication username and endpoint descriptor.

descriptor: Performs MP binding by endpoint descriptor.

Description

Use the ppp mp binding-mode command to set the way in which MP binding is performed.

Use the undo ppp mp binding-mode command to restore the default.

By default, MP binding is performed by both PPP authentication username and endpoint descriptor.

The PPP authentication username is the peer username received while performing PAP or CHAP authentication. The endpoint descriptor, which uniquely identifies a device, refers to the one received during LCP negotiation. Based on the username or endpoint descriptor, the system can locate the corresponding VT interface and then create an MP binding according to the template.

Note that:

l          In endpoint descriptor-based MP bindings, users cannot be differentiated. So, to bind users to different groups, use the keyword both in the command.

l          In authentication username-based MP bindings, peer devices cannot be differentiated. So, when multiple peer devices exist, use the keyword both in the command.

l          Related commands: ppp mp user.

Examples

# Specify to perform MP binding by PPP authentication username.

<Sysname> system-view

[Sysname] interface virtual-template 0

[Sysname- Virtual-Template0] ppp mp binding-mode authentication

ppp mp endpoint

Syntax

ppp mp endpoint string char-string

undo ppp mp endpoint

View

Interface view

Default Level

2: System level

Parameters

string char-string: Specifies the char-string argument as the endpoint option. The string specified by char-string is of 1 to 20 characters.

Description

Use the ppp mp endpoint command to configure the endpoint option for LCP negotiation when the current interface is in an MP-group interface.

Use the undo ppp mp endpoint command to restore the default endpoint option for LCP negotiation when the current interface is in an MP-group interface.

By default, the endpoint option in the packets sent out an interface is the device name. After you use the mp-group command to add the interface to the specified MP-group interface, the endpoint option in the packets sent out the interface is the MP-group interface name. As the endpoint option is of up to 20 bytes, if the default is of more than 20 bytes, the first 20 bytes are taken as the endpoint option.

Examples

# Configure the endpoint option in the packets sent out Serial 2/0 as 123456.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp mp endpoint string 123456

ppp mp max-bind

Syntax

ppp mp max-bind max-bind-num

undo ppp mp max-bind

View

Virtual template interface view, MP group interface view

Default Level

2: System level

Parameters

max-bind-num: Maximum number of links allowed in an MP bundle, in the range 1 to 128.

Description

Use the ppp mp max-bind command to set the maximum number of links allowed in an MP bundle.

Use the undo ppp mp max-bind command to restore the default.

By default, the maximum number of links allowed in an MP bundle is 16.

Changing the maximum number of links allowed in an MP bundle may affect PPP performance. So, execute the ppp mp max-bind command under the guidance of technical engineers. Normally, the default is recommended.

 

 

Related commands: ppp mp.

Examples

# Set the maximum number of links allowed in an MP bundle to 12.

<Sysname> system-view

[Sysname] interface virtual-template 0

[Sysname-Virtual-Template0] ppp mp max-bind 12

ppp mp min-fragment

Syntax

ppp mp min-fragment size

undo ppp mp min-fragment

View

Virtual template interface view, MP group interface view

Default Level

2: System level

Parameters

size:  Minimum MP packet size for fragmentation to be set, in the range 128 to 1500 (in bytes). MP outgoing packets smaller than this value will not be fragmented, while those larger than or equal to this value will be fragmented.

Description

Use the ppp mp min-fragment command to set the minimum MP packet size for fragmentation.

Use the undo ppp mp min-fragment command to restore the default, 128 bytes.

 

 

Examples

# Set the minimum MP packet size for fragmentation to 500 bytes.

<Sysname> system-view

[Sysname] interface virtual-template 0

[Sysname-Virtual-Template0] ppp mp min-fragment 500

ppp mp mp-group

Syntax

ppp mp mp-group mp-number

undo ppp mp

View

Interface view

Default Level

2: System level

Parameters

mp-number: MP group interface number.

l          On centralized devices, the mp-number argument ranges from 0 to 1023.

l          On distributed devices, the mp-number argument is in the form of X/Y/Z, where:

X is the slot number of the LPU, in the range of 2 to 5.

Y is the subslot number of the interface card. Y is 0 or the subslot number of the interface card. The logical interface card is seated in subslot 0.

Z is the number of the interface on the interface card, in the range of 0 to 1023.

Description

Use the ppp mp mp-group command to add the current interface to an MP-group.

Use the undo ppp mp mp-group command to remove the current interface from the specified MP-group it belongs to.

This command should be used along with the interface mp-group command. However, the order in which the two commands are executed can be either one. That is, you can create an MP-group interface and then add an interface to the MP-group; or add the interface to the MP-group and then create the MP-group.

Note that:

l          Only physical interfaces can be added to an MP group. Logical interfaces (such as Tunnel interfaces) do not support the ppp mp mp-group command.

l          MP-group interfaces on different LPUs cannot be bound together.

Examples

On a centralized device:

# Add interface Serial 2/0 to MP-group 3.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial3/0] ppp mp mp-group 3

ppp mp short-sequence

Syntax

ppp mp short-sequence

undo ppp mp short-sequence

View

Interface view

Default Level

2: System level

Parameters

None

Description

Use the ppp mp short-sequence command to trigger MP short sequence number header format negotiation. After the negotiation succeeds, the local end receives packets with short sequence numbers.

Use the undo ppp mp short-sequence command to restore the default.

By default, the long sequence number header format is used.

This command applies to the incoming direction only. To enable the local end to transmit packets with short sequence numbers, configure the remote end to receive packets with short sequence numbers.

 

 

Examples

# Configure the short sequence number header format of MP in the incoming direction of interface Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp mp mp-group 0

ppp mp user

Syntax

ppp mp user username bind virtual-template number

undo ppp mp user username

View

System view

Default Level

2: System level

Parameters

username: Username, a string of 1 to 80 characters.

virtual-template number: Specifies a virtual-template number, in the range 0 to 1023.

Description

Use the ppp mp user command to specify to add PPP links with specific usernames to the corresponding MP bundles according to usernames.

Use the undo ppp mp user command to remove a username-based MP bundle.

In establishing a PPP connection, if PPP authentication succeeds and a virtual-template is specified, the PPP link established will be added to the corresponding MP bundle according to the configuration of the virtual-template, and a new virtual interface will be formed for data transmission.

You can configure the following parameters for a virtual-template:

l          Local IP address and the peer IP address (or IP address pool)

l          PPP working parameter

Related commands: ppp mp, ppp mp max-bind.

Examples

# Specify the VT interface that corresponds to user 1 as VT interface 1, setting the IP address of the VT interface as 202.38.60.1/24.

<Sysname> system-view

[Sysname] ppp mp user user1 bind virtual-template 1

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ip address 202.38.60.1 255.255.255.0

ppp mp virtual-template

Syntax

ppp mp virtual-template number

undo ppp mp

View

Interface view

Default Level

2: System level

Parameters

number: Number of the VT interface to be bound to the interface, in the range 0 to 1023.

Description

Use the ppp mp virtual-template command to bind an interface to a VT interface, enabling the interface to work in MP mode.

Use the undo ppp mp command to cancel an interface-VT interface binding, making the interface to work in normal PPP mode.

By default, an interface is not bound to a VT interface, and the interface works in normal PPP mode.

After binding an interface to a VT interface, you can optionally enable PAP/CHAP authentication.

Two or more interfaces bound to the same VT interface are bound together directly. Note that the ppp mp virtual-template command and the ppp mp command are mutually exclusive.

Examples

# Bind interface Serial 2/0 to VT interface 1 (assuming that the interface is encapsulated with PPP).

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp mp virtual-template 1

ppp pap local-user

Syntax

ppp pap local-user username password { cipher | simple } password

undo ppp pap local-user

View

Interface view

Default Level

2: System level

Parameters

username: Username of the local device for PAP authentication, a string of 1 to 80 characters.

cipher: Displays the password in cipher text.

simple: Displays the password in plain text.

password: Default password for PAP authentication, a string of 1 to 48 characters. When the simple keyword is used, this password is in plain text. When the cipher keyword is used, this password can either be in cipher text or in plain text. A password in plain text is a continuous string of no more than 48 characters, such as aabbcc. A password in cipher text has a fixed length of 24 or 64 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description

Use the ppp pap local-user command to set the local username and password for PAP authentication.

Use the undo ppp pap local-user command to cancel the local username and password configured.

By default, the username and the password for PAP authentication are not set.

For the local device to pass PAP authentication on the remote device, make sure that the same username and password configured for the local device are also configured on the remote device with the commands local-user username and password { cipher | simple } password.

Related commands: local-user, password (in AAA Commands in the Security Volume)

Examples

# Set the local username and password for PAP authentication as user1 and pass1 (in plain text).

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp pap local-user user1 password simple pass1

ppp timer negotiate

Syntax

ppp timer negotiate seconds

undo ppp timer negotiate

View

Interface view

Default Level

2: System level

Parameters

seconds: Negotiation timeout time to be set, in the range 1 to 10 (in seconds). In PPP negotiation, if the local device receives no response from the peer during this period after it sends a packet, the local device sends the last packet again.

Description

Use the ppp timer negotiate command to set the PPP negotiation timeout time.

Use the undo ppp timer negotiate command to restore the default.

By default, the PPP negotiation timeout time is three seconds.

Examples

# Set the PPP negotiation timeout time to five seconds.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] ppp timer negotiate 5

remote address

Syntax

remote address { ip-address | pool [ pool-number ] }

undo remote address

View

Interface view

Default Level

2: System level

Parameters

ip-address: IP address to be assigned to the peer device.

pool [ pool-number ]: Specifies the number of the address pool used for assigning an IP address to the peer. The pool-number argument ranges from 0 to 99 and defaults to 0.

Description

Use the remote address command to set the IP address to be assigned to the peer device or specify the address pool used for assigning an IP address to the peer device.

Use undo remote address to cancel the IP address configured to be assigned to the peer device.

By default, an interface does not assign IP addresses to the peer device.

The remote address command can be used when the local device is configured with an IP address, while the peer has no IP address. To enable the peer device to accept the IP address assigned to it by the local device, you need to configure the ip address ppp-negotiate command on the peer device in addition to configuring the remote address command on the local device.

 

 

Related commands: ip address ppp-negotiate, ppp ipcp remote-address forced.

Examples

# Set the IP address to be assigned to the peer device to 10.0.0.1 on interface Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] remote address 10.0.0.1

reset counters interface

Syntax

reset counters interface [ interface-type [ interface-number ] ]

View

User view

Default Level

2: System level

Parameters

interface-type: Interface type.

interface-number: Interface number.

Description

Use the reset counters interface command to clear the traffic statistics of an interface.

Before collecting traffic statistics within a specific period of time on an interface, you need to clear the existing statistics.

l          If neither interface type nor interface number is specified, this command clears the statistics of all the interfaces.

l          If only the interface type is specified, this command clears the statistics of the interfaces that are of the specified interface type.

l          If both the interface type and interface number are specified, this command clears the statistics of the specified interface.

Examples

# Clear the statistics of interface MP-group3.

<Sysname> reset counters interface mp-group 3

# Clear the statistics of interface Virtual-template 10.

<Sysname> reset counters interface virtual-template 10

timer hold

Syntax

timer hold seconds

undo timer hold

View

Interface view

Default Level

2: System level

Parameters

seconds: Interval (in seconds) for sending keepalive packets, in the  range 0 to 32767. A value of 0 disables keepalive packet sending.

Description

Use the timer hold command to set the interval for sending keepalive packets.

Use the undo timer hold command to restore the default, or 10 seconds.

As on slow links, it takes long to transmit large packets (this may cause the sending and receiving of keepalive packet to be postponed) and a link is considered to be fail If an interface on one side receives no keepalive packet from the peer device for specific number of keepalive periods, set the interval for sending keepalive packets properly for slow links to prevent the links from being torn down by mistake.

On a PPP link, make sure the settings of the interval for sending keepalive packets on both sides are the same.

Examples

# Set the interval for sending keepalive packets to 20 seconds on interface Serial 2/0.

<Sysname> system-view

[Sysname] interface serial 2/0

[Sysname-Serial2/0] timer hold 20

PPP Link Efficiency Mechanism Configuration Commands

ppp mp lfi

Syntax

ppp mp lfi

undo ppp mp lfi

View

Virtual template interface view, MP group interface view

Default Level

2: System level

Parameters

None

Description

Use the ppp mp lfi command to enable Link Fragmentation and Interleaving (LFI) on an interface.

Use the undo ppp mp lfi command to disable LFI.

By default, LFI is disabled.

Examples

# Enable LFI on Virtual-Template1 interface.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp mp lfi

ppp mp lfi delay-per-frag

Syntax

ppp mp lfi delay-per-frag time

undo ppp mp lfi delay-per-frag

View

Virtual template interface view, MP group interface view

Default Level

2: System level

Parameters

time: Maximum delay of LFI fragment, in the range 1 to 1000 (in ms).

Description

Use the ppp mp lfi delay-per-frag command to set the maximum delay for transmitting an LFI fragment.

Use the undo ppp mp lfi delay-per-frag command to restore the default, or 10 ms.

Examples

# Set the maximum delay for transmitting an LFI fragment to 20 ms on Virtual-Template1 interface.

<Sysname> system-view

[Sysname] interface virtual-template 1

[Sysname-Virtual-Template1] ppp mp lfi delay-per-frag 20

PPPoE Server Configuration Commands

display pppoe-server session

Syntax

display pppoe-server session all

View

Any view

Default Level

1: Monitor level

Parameters

all: Displays all the information about PPPoE sessions.

Description

Use the display pppoe-server session command to display the information about PPPoE sessions on a device operating as a PPPoE server.

Examples

# Display all the information about PPPoE sessions (assuming that the current device operates as a PPPoE server).

<Sysname> display pppoe-server session all

Total PPPoE Session(s): 1

 

SID Intf              State  OIntf            RemMAC          LocMAC

2   Virtual-Template1:0  UP  GigabitEthernet1/0  0050.ba22.7369  00e0.fc08.f4de

Table 2-1 Description on the fields of the display pppoe-server session all command

Field	Description
SID	PPPoE session identifier
Intf	Virtual-Template interface
State	PPPoE session state
OIntf	Corresponding Ethernet interface
RemMAC	Peer MAC address
LocMAC	Local MAC address

 

pppoe-server bind

Syntax

pppoe-server bind virtual-template number

undo pppoe-server bind

View

Ethernet interface view

Default Level

2: System level

Parameters

virtual template number: Specifies a virtual-template interface number, in the range 0 to 1023.

Description

Use the pppoe-server bind command to enable PPPoE on an Ethernet interface and bind the Ethernet interface to a virtual-template interface.

Use the undo pppoe-server bind command to disable PPPoE on an Ethernet interface.

By default, PPPoE is disabled.

Examples

# Enable PPPoE on interface GigabitEthernet 1/0 and bind the Ethernet interface to Virtual-Template1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0

[Sysname-GigabitEthernet1/0] pppoe-server bind virtual-template 1

pppoe-server log-information off

Syntax

pppoe-server log-information off

undo pppoe-server log-information off

View

System view

Default Level

2: System level

Parameters

None

Description

Use the pppoe-server log-information off command to disable PPP log displaying on a device operating as a PPPoE server.

Use the undo pppoe-server log-information off command to enable PPP log displaying on a device operating as a PPPoE server.

By default, PPP log displaying is enabled on a PPPoE server.

With PPP log displaying enabled, large amount of log information can affect device performance and can be a nuisance to user during configuration. You can disable PPP log displaying by using the pppoe-server log-information off command.

Examples

# Disable PPP log displaying.

<Sysname> system-view

[Sysname] pppoe-server log-information off

pppoe-server max-sessions local-mac

Syntax

pppoe-server max-sessions local-mac number

undo pppoe-server max-sessions local-mac

View

System view

Default Level

2: System level

Parameters

number: Maximum number of sessions allowed with regard to the local MAC address, in the range 1 to 4069.

Description

Use the pppoe-server max-sessions local-mac command to set the maximum number of PPPoE sessions allowed with regard to the local MAC address on a device operating as a PPPoE server.

Use the undo pppoe-server max-sessions local-mac command to restore the default.

By default, the maximum number of PPPoE sessions allowed with regard to the local MAC address is 100.

Examples

# Set the maximum number of PPPoE sessions allowed with regard to the local MAC address to 50 (assuming that the device operates as a PPPoE server).

<Sysname> system-view

[Sysname] pppoe-server max-sessions local-mac 50

pppoe-server max-sessions remote-mac

Syntax

pppoe-server max-sessions remote-mac number

undo pppoe-server max-sessions remote-mac

View

System view

Default Level

2: System level

Parameters

number: Maximum number of PPPoE sessions allowed by the entire system with regard to a peer MAC address (for centralized devices) or allowed by each I/O card with regard to a peer MAC address, in the range 1 to 4096.

Description

Use the pppoe-server max-sessions remote-mac command to set the maximum number of PPPoE sessions allowed with regard to a peer MAC address.

Use the undo pppoe-server max-sessions remote-mac command to restore the default.

By default, the maximum number of PPPoE sessions allowed with regard to a peer MAC address is 100.

Examples

# Set the maximum number of PPPoE sessions allowed with regard to a peer MAC address to 50.

<Sysname> system-view

[Sysname] pppoe-server max-sessions remote-mac 50

pppoe-server max-sessions total

Syntax

For centralized devices:

pppoe-server max-sessions total number

undo pppoe-server max-sessions total

For distributed devices:

pppoe-server max-sessions slot slot-number total number

undo pppoe-server max-sessions slot slot-number

View

System view

Default Level

2: System level

Parameters

slot slot-number: Specifies a board by its slot number.

number: Maximum number of PPPoE sessions allowed, in the range 1 to 18000.

Description

Use the pppoe-server max-sessions total command to set the maximum number of PPPoE sessions.

Use the undo pppoe-server max-sessions total command to restore the default.

By default, a maximum of 18000 PPPoE sessions are allowed.

Examples

# Set the maximum number of PPPoE sessions allowed to 3000 (assuming that the current device is a centralized device).

<Sysname> system-view

[Sysname] pppoe-server max-sessions total 3000

# Set the maximum number of PPPoE sessions supported on card 3 to 1500.

<Sysname> system-view

[Sysname] pppoe-server max-sessions slot 3 total 1500

reset pppoe-server

Syntax

reset pppoe-server { all | interface interface-type interface-number | virtual-template number }

View

User view

Default Level

2: System level

Parameters

all: Terminates all the PPPoE sessions.

interface interface-type interface-number: Specifies a port by its type and number.

virtual-template number: Specifies a virtual template interface number, in the range 0 to 1023.

Description

Use the reset pppoe-server command to terminate a PPPoE session on the server side.

 

 

Examples

# Terminate the session established based on Virtual-template 1 interface.

<Sysname> reset pppoe-server virtual-template 1