4.4 CLI & System Management Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

System management basics Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

System Management CLI-Based user interface (CLI: Command Line Interface) commands are not case-sensitive file names & directory names are case-sensitive e.g.: config, show config, show running-config, cd BSA, ... web-based configurator (WCF: Web Configurator Factory) CWMP TR-69 SNMP V1/V2/V3 SNTP synchronization support of user privileges upload/download of configuration & binaries via FTP/TFTP QoS measurement probe traceroute, ping, extended ping user authentication via RADIUS or TACACS+ RADIUS accounting event and trace buffering flow capture and decoding Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

management interfaces: System Management management interfaces: console port: serial, 9600 bps async, 8 bits, 1 stop, no parity, no flow control ethernet port factory IP address: 192.168.1.10 configuration using telnet FTP/TFTP for downloading/uploading files access rights: 3 levels user (level 0): only access to elementary show functions or diagnostics manager (level 7): access to all show functions, traces and configurations administrator (level 15): access to all functions including system debugging default login: login = admin password = admin Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

local user management System Management users with different access rights can be defined each user has a username, password and belongs to a group 3 pre-defined user groups with 3 levels of access rights: levels 0 (user) , 7 (manager) & 15 (administrator) CLI commands: example: create user "teacher" with password "severe" and level "administrator" Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

any file can be uploaded / downloaded File System 1/4 file system: 2 DISKS FLASH disk (non volatile / EEPROM saved, default): BSA directory with sub-directories config : for configuration files binaries : for software binaries dump : for log files RAM disk (volatile : erased on power reset, not after reboot) used by the system itself (temporary files) used for log files (events or traces) contains: the "tmp" directory for saving temporary files the "running-config": a txt file with the CLI commands to build the current configuration event files (log messages) any file can be uploaded / downloaded software binaries, boot binaries, configuration and log files Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

CLI commands for file and directory management: File System 2/4 CLI commands for file and directory management: devs [flash | ramdisk] : without parameters, displays the file system in use. with the parameters, the user can change the current working file system. pwd : displays the current working directory cd <directory> : change directory mkdir <directory> : create a new directory ls : list the files and sub-directories of the current directory cat <filename> : list content of a text file (config., logs) who : provides the list of users who are connected to the router rm <filename> : remove a file exec -echo <filename> : executes a CLI script mv <filename1> <filename2> : rename a file copy <file1> <file2> : copy a file (source: file1, destination: file2) Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

file and directory management File System 3/4 file and directory management root directory FLASHDISK BSA subdirectory RAMDISK FLASHDISK Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

file and directory management File System 4/4 file and directory management logging of all SNMP v3 sessions logging of all Telnet sessions password file lists the software & configuration files to start-up the device by bootsoftware configuration management history Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

device motherboard description Power-Up Message 1/4 device motherboard description serial nr free Flash memory ➙ Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

software binary file location software binary file name Power-Up Message 2/4 software binary file location software binary file name ➙ ➙ software version: ONEOS1: ONE 60 - 200 ONEOS2: ONE 400 ONEOS4: ONE 20A – 100A ONEOS5: ONE 80 -180 – 300 ONEOS6: ONE 20D – 100D ONEOS7: ONECell 25 ONEOS35: ONECell 35 Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

hardware configuration Power-Up Message 3/4 ➙ hardware configuration ➙ Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

configuration file name Power-Up Message 4/4 ➙ configuration file name Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Basic CLI handling Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Getting Started with CLI you do not have to fully write CLI keywords: ➨ press <TAB> to complete the keyword. If there are more than one keyword match for a partial word, the CLI answers ‘Ambiguous command’. (example: ‘sh’ matches ‘shutdown’ and ‘show’) if you do not know what to enter: ➨ press ‘?’ anywhere in the command line to get help the CLI is not case-sensitive ? Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Getting Started with CLI edition keystrokes Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Hardware Configuration basic CLI Commands Hardware Configuration OneOs>show system hardware Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

System Status basic CLI Commands OneOs>show system status Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

System Configuration (1) basic CLI Commands System Configuration (1) OneOs>show running-config Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

System Configuration (2) basic CLI Commands System Configuration (2) OneOs>show configuration OneOs>show configuration interface Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

basic CLI Commands Accessing the configuration mode (admin/manager privilege) : OneOs> configure terminal Saving configuration : OneOs> save running-config [ to <filename>] Router reboot : OneOs> reboot [ { after <seconds> | at <hh>:<mm>[:<ss>] } ] OneOs> reboot cancel Restart with default configuration : OneOs> erase saved-config Are you sure you want to erase running configuration? (Y/N) : y Restore factory settings : OneOs> restore factory-setting Actually this command does : OneOs> rm /BSA/config/bsaStart.cfg OneOs> rm /password OneOs> rm /snmpv3.users OneOs> reboot Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

basic CLI Commands Manual date/time setting : OneOs> date 29/01/2008 OneOs> date <dd>/<mm>/<yr> OneOs> time 11:06:30 OneOs> time <hh>:<mn>:<sc> Date/time synchronisation on an NTP clock source (SNTP client): OneOs> configure terminal OneOs(configure)> sntp broadcast client OneOs(configure)> sntp <server-ip-address> [<source-if> <unit>] Adjusting universal time acquired by NTP to local time zone and time offset: OneOs(configure)> clock timezone <name> <-23 .. 23> OneOs(configure)> clock summer-time recurring <name> { <1-4> | first | last } <day> <month> { <1-4> | first | last } <day> <month> Example: clock timezone GMT 1 clock summer-time recurring PARIS last Sunday March 02:00 last Sunday October 03:00 Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

password recovery Password Recovery If the login/passwords are lost, password recovery is possible from the console port typing: <ESCAPE>, then <CTRL>+Y and finally <CTRL>+N the ‘/password’ file and the configuration file are erased. If you attempt to log in after reboot the password file is recreated with the default ‘admin’/’admin’ login/password. example: Username: <ESC> <Ctrl Y> <Ctrl N> Are you sure you want to reset configuration? (y/n) y System will reboot now. Rebooting the device... Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

CLI Help 1 OneOs>help atm-capture - Capture ATM traffic on a specific PVC auto-call - make an automatic call auto-update - Start/Stop AutoUpdate sequence boot - Configure the boot application capture - Set protocol analyser filters configure - Enter configuration mode console - Disable/Enable console input copy - Copy <URL Source> <URL Destination> debug - Debug disable - Turn off privileged commands dot11 - 802.11 management commands enable - Reserved erase - Erase running-config and reboot exec - Execute a file exit - Exit intermediate mode factory - factory <lock | unlock | fxs> factory-conf - factory-conf <serialnumber> <MACaddr> [<password>] ftp - Enter ftp session hostname - Get host name isdn - helpfull isdn commands monitor - Monitor administration functions Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

CLI Help 2 OneOs>help no - Disable ping / flood ping sessions package-options - Package options management ping - Send ICMP echo request post-mortem - Enable/disable post mortem pstn - helpfull pstn commands restore - Restore factory default settings save - Save configuration [to filename] serial-capture - Capture traffic on serial interface snmp - snmp software - Change operational or backup software version telnet - Telnet to host term - Reserved trace - Filter trace calls trace-oam - Manage display of OAM traffic traceroute - Traces route to host untar - untar a file on flash verify - Verify boot or soft files write - Write running config x25 - x25 management commands xping - Set ping session Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

CLI Help Commands 1 OneOs>help commands activate - Configure system alias - Text substitution bind - Bind an address to telnet server broadcast - Write message to all users logged in cat - Display contents of a file cd - Change working directory chkdsk <device:> - DOS file system sanity check / co clear - Reset functions cpuClkStart - Start task activity monitor running at ticksPerSec ticks per second cpuClkStop - Stop collecting data cpuHelp - Print the list of cpu report functionalities cpuReport - Prints display of task activity statistics cpuStart - Start cpuClkStart and do a report every freq seconds cpuStop - Stop collecting data and reports cpuTask - Run periodic task activity reports date - Print/set the date delay - Delays devs - List or change all system-known devices echo - Echo text typed in end - Reserved Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

CLI Help Commands 2 OneOs>help commands event - Filter events calls format - Format the flash groups - Show system groups help - Show command help history - Show command history logout - Log off this system ls - List files mkdir - Create directory mv - Move file power-on-reboot - do a power on reboot prompt - Change current prompt pwd - Print curent working directory reboot - Reboot the equipment reboot-check - Reboot the equipment repeat - Repeat a message rm - Remove a file serial-port - Change serial port caracteristics show - Show running system information sleep - Sleep for n seconds start - start a call generator Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

CLI Help Commands 3 OneOs>help commands stop - stop a call generator stty - Terminal settings syntax - Show command syntax system - System settings time - Print/set the time tree - Show command tree tshell - Switch to Target Shell on this session user - User configuration who - Display users currently logged in whoami - Show current user info write_message - Write text to another user Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

File download/upload Download / Upload 1 first: checking flash disk space ! the last line of the command output indicates the available memory example: required space depends on the OneOS version: OneOs> show device status flash OneOs> show device status flash ... ... ... - free space on volume: 26,310,656 bytes OneOs> Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Any file may be uploaded/downloaded : Download / Upload 2 FTP or TFTP ONExx has embedded FTP or TFTP clients Connection to FTP or TFTP Server from The ONExx after opening a telnet session from the PC The ONExx through the console session Any file may be uploaded/downloaded : Software and boot binary files Configuration files Log files (events) file transfer must be started from the directory where the file is located Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

TFTP upload: TFTP Upload example: - transfer of bsaStart.cfg from ONExx to the PC - TFTP server IP address = 192.168.1.1 Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

TFTP download: TFTP Download example: - transfer of bsaStart.cfg from the PC/tftp server to the ONExx/tftp client - TFTP server IP address = 192.168.1.1 Executing a configuration file: OneOs> exec –echo bsaStart.cfg Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

FTP upload: FTP Upload example: transfer of bsaStart.cfg from ONExx to the PC FTP server IP address = 192.168.1.1 note: during any FTP sessions following commands are available: LOCAL / ONExxx : lls ( local ls command ) lcd ( local cd command ) REMOTE / PC : ls ( ls command ) cd ( cd command ) Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

FTP download: FTP Download example: - transfer of bsaStart.cfg from the PC to the ONExx - FTP server IP address = 192.168.1.1 Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Software Upgrade Example for downloading a new software release: Read the bsaBoot.inf file to read the current location and software name: Run a TFTP server on a PC (IP address = 192.168.1.1) and enter the following command: Rename OneOs and reboot OneOs> cd BSA OneOs> cat bsaBoot.inf flash:/BSA/binaries/OneOs (software binary name) flash:/BSA/config/bsaStart.cfg OneOs> cd BSA/binaries OneOs> copy tftp://192.168.1.1/OneOs_file.ZZZ OneOsNew OneOs> mv OneOs OneOsold OneOs> mv OneOsNew OneOs OneOs> reboot Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

verification of software integrity example: OneOs>show soft-file info [<path>/]<filename> Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Recover Factory Settings Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Factory Settings via CLI 1/2 Objective Reload a router as if it was coming from factory CLI Command restore factory-setting Are you sure you want to restore factory settings?(Y/N): Action Removes all files except certain system files: flash: /BSA/bsaBoot.inf flash: /BSA/binaries/OneOs flash: /factory-backup/ (and all files found under that directory) flash: /ibc (and all files found under that directory) flash: /tftpboot (and all files found under that directory) Regenerates certain system files Flash:/password Flash:/BSA/bsaBoot.inf System Reboots Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Factory Settings via CLI 2/2 Some customer settings can be restored Files in Factory-backup directory are restored flash:/factory-backup/default-bsaStart.cfg flash:/factory-backup/default-web.tar flash:/factory-backup/default.wcfaccounts.ini flash:/factory-backup/default-password Following files are erased: snmpv3.user ssh_host_dsa_key.pub (SSH public DSA key) ssh_host_dsa_key (SSH DSA key) pinecode (PIN code for Mobile Access Routers) Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com

Factory Settings via Hardware Restore Factory Settings via hardware No need to access via Console Port Specific boot Flag must be set flags (f) : 0x8008 the router configuration is overwritten with the factory configuration flags (f) : 0x4008 the router configuration is renamed as /BSA/config/bsaStart.rescue and the factory configuration is copied such that it is used as start configuration Procedure Power-on the product The ‘Status’ LED blinks very quickly, then it blinks more slowly. When all LEDs of the front panel are lit, unplug the power cable. Repeat the process three times and then let the router boot. The restore operation will be done. Copyright © OneAccess Networks - All rights reserved - www.oneaccess-net.com