|
|
This chapter presents the commands to configure and maintain Cisco IOS dial and access solutions. The commands are presented in alphabetical order. Some commands required for configuring dial and access solutions may be found in other Cisco IOS command references. Use the command reference master index or search online to find these commands.
To download static route configuration information from the authorization, authentication, and accounting (AAA) server using TACACS+ or RADIUS, use the aaa authorization configuration default command in global configuration mode. To remove static route configuration information, use the no form of this command.
aaa authorization configuration default {radius | tacacs+}
Syntax Description
radius Use RADIUS for static route download. tacacs+ Use TACACS+ for static route download.
Defaults
No configuration authorization is defined.
Command Modes
Global configuration
Command History
12.0(3)T This command was introduced.
Release
Modification
Examples
The following example downloads static route information using a TACACS+ server:
aaa authorization configuration default tacacs+
Related Commands
aaa new-model Enables the AAA access control model. Enables the download static route feature and sets the amount of time between downloads. Clears static routes downloaded from a AAA server. Displays all static IP routes, or those installed using the AAA route download function.
Command
Description
To associate a authorization, authentication, and accounting (AAA) server group with an interface or customer profile, enter the aaa group-configuration interface or customer profile subcommand. To disable the configuration, enter the no form of this command.
aaa group-configuration aaa-group-name
Syntax Description
aaa-group-name Character string used to name the group of AAA servers.
Defaults
No default behavior or values.
Command Modes
Interface
Customer profile subcommand
Command History
12.0(6)T This command was introduced.
Release
Modification
Usage Guidelines
The AAA server group feature introduces a way to group existing server hosts. The feature enables you to select a subset of the configured server hosts and use them for a particular service.
A server group is a list of server hosts of a particular type. Currently supported server host types are RADIUS server hosts and TACACS+ server hosts. A server group is used with a global server host list. The server group lists the IP addresses of the selected server hosts.
Examples
The following example shows a AAA server group by the name of radius-3 being associated with a customer profile by the name of acme.
resource-pool profile customer acme aaa group-configuration radius-3
Related Commands
aaa accounting Enables AAA accounting of requested services for billing or security purposes. aaa authentication login Enables AAA accounting of requested services for billing or security purposes. aaa authorization Sets parameters that restrict network access to a user. aaa new-model Enables the AAA access control model. radius-server host Specifies a RADIUS server host. tacacs-server host Specifies a TACACS host.
Command
Description
To enable the download static route feature and set the amount of time between downloads, use the aaa route download command in global configuration mode. To disable this function, use the no form of the command.
aaa route download [time]
Syntax Description
time (Optional) Time between downloads, in minutes. The range is 1 to 1440 minutes.
Defaults
The default period between downloads (updates) is 720 minutes.
Command Modes
Global configuration
Command History
12.0(3)T This command was introduced.
Release
Modification
Usage Guidelines
This command is used to download static route details from the authorization, authentication, and accounting (AAA) server if the name of the router is hostname. The name passed to the AAA server for static routes is hostname-1, hostname-2 .... hostname-n---the router downloads static routes until it fails an index and no more routes can be downloaded.
Examples
The following example sets the AAA route update period to 100 minutes:
aaa route download 100
Related Commands
Downloads static route configuration information from the AAA server using TACACS+ or RADIUS. Clears static routes downloaded from a AAA server. Displays all static IP routes, or those installed using the AAA route download function.
Command
Description
To set the interval for closing the connection, use the absolute-timeout command in line configuration mode. To restore the default, use the no form of this command.
absolute-timeout minutes
Syntax Description
minutes The number of minutes after which the user's session will be terminated.
Defaults
No timeout interval is automatically set.
Command Modes
Line configuration
Command History
11.0 This command was introduced.
Release
Modification
Usage Guidelines
This command terminates the connection after the specified time period has elapsed, regardless of whether the connection is being used at the time of termination. You can specify an absolute-timeout value for each port. The user is given 20 seconds notice before the session is terminated. You can use this command in conjunction with the logout-warning command, which notifies the user of an impending logout.
![]() |
Note You can set this command and an AppleTalk Remote Access Protocol (ARAP) timeout for the same line; however, this command supersedes any timeouts set in ARAP. Additionally, ARAP users will receive no notice of any impending termination if you use this command. |
Examples
The following example sets an interval of 60 minutes on line 5:
line 5 absolute-timeout 60
Related Commands
logout-warning Warns users of an impending forced timeout. Sets the interval for closing the connection when there is no input or output traffic.
Command
Description
To configure L2TP Network Servers (LNSs) to accept tunneled PPP connections from an L2TP Access Concentrator (LAC) and create an accept-dialin Virtual Private Dialup Network (VPDN) subgroup, use the accept dialin command in VPDN group configuration mode. To remove the accept-dialin subgroup from a VPDN group, use the no form of this command.
accept dialinSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
VPDN group configuration
Command History
11.3(5)AA This command was introduced. 12.0(1)T This command was migrated to Release 12.0 T. 12.0(5)T All keywords and arguments were removed and made into separate accept-dialin subgroup commands.
Release
Modification
Usage Guidelines
For a VPDN group to accept dialin calls, you must also configure the following commands:
Once an L2F or L2TP tunnel is established, both dial-in and dial-out calls can use the same tunnel.
This command replies to a dial in L2F or L2TP tunnel open request from the specified peer. Once the LNS accepts the request from a LAC, it uses the specified virtual template to clone new virtual access interfaces. This command replaces the vpdn incoming command used in Cisco IOS Release 11.3. The user interface will automatically be upgraded when you reload the router with a 12.0 T or 11.3 AA image.
Typically, you need one VPDN group for each LAC. For an LNS that services many LACs, the configuration can become cumbersome; however, you can use the default VPDN group configuration if all the LACs will share the same tunnel attributes. An example of this scenario would be a LNS that services a large department with many Windows NT L2TP clients that are co-located with the LAC. Each of the Windows NT devices is an L2TP client as well as a LAC. Each of these devices will demand a tunnel to the LNS. If all the tunnels will share the same tunnel attributes you can use a default VPDN group configuration, which excels and simplifies the configuration process.
![]() |
Note The vpdn group command must be configured with the accept dialin or request dialin command to be functional. The requester initiates a dial in tunnel. The acceptor accepts a request for a dial in tunnel. |
Examples
The following example enables the LNS to accept an L2TP tunnel from a LAC named mugsy. A virtual-access interface will be cloned from virtual-template 1:
vpdn-group 1 accept dialin protocol l2tp virtual-template 1 terminate-from hostname mugsy
If you do not use the terminate-from command, you automatically enable a default VPDN group, which allows all tunnels to share the same tunnel attributes:
vpdn-group 1 ! Default L2TP VPDN group accept dialin protocol l2tp virtual-template 1
Related Commands
force-local-chap Forces the LNS to reauthenticate the client. Allows the LNS to renegotiate the LCP on dial-in calls, using L2TP or L2F. Specifies the Layer 2 tunneling protocol that the VPDN subgroup will use. request dialin Configures a VPDN group to request L2F or L2TP tunnels to a home gateway and creates a request-dialin VPDN subgroup. Specifies the host name of the remote LAC or LNS that will be required when accepting a VPDN tunnel. Specifies which virtual template will be used to clone virtual-access interfaces.
Command
Description
To accept requests to tunnel Layer 2 Tunneling Protocol (L2TP) dial-out calls and create an accept-dialout VPDN subgroup, use the accept dialout command in VPDN group configuration mode. To remove the accept-dialout subgroup from the VPDN group, use the no form of this command.
accept dialoutSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
VPDN group configuration
Command History
12.0(5)T This command was introduced.
Release
Modification
Usage Guidelines
Only L2TP can be used to dial out, not Cisco's Layer 2 Forwarding (L2F).
For a VPDN group to accept dialout calls, you must also configure the following commands:
Once an L2TP tunnel is established, both dial-in and dialout calls can use the same tunnel.
Examples
The following example configures a VPDN group to accept L2TP tunnels for dialout calls from the LNS cerise by using dialer 2 as its dialing resource:
vpdn-group 1 accept dialout protocol l2tp dialer 2 terminate-from hostname cerise ! interface Dialer2 ip unnumbered Ethernet0 encapsulation ppp dialer in-band dialer aaa dialer-group 1 ppp authentication chap
Related Commands
Specifies the dialer interface that an accept-dialout VPDN subgroup will use to dial out calls. dialer aaa Allows a dialer to access the AAA server for dialing information. Enables a Dialer Profile or DDR dialer to use L2TP dial-out. Specifies the Layer 2 tunneling protocol that the VPDN subgroup will use. Enables an LNS to request VPDN dial-out calls by using L2TP. Specifies the host name of the remote LAC or LNS that will be required when accepting a VPDN tunnel.
Command
Description
To define restrictions on incoming and outgoing connections, use the access-class command in line configuration mode. To remove the access list number, use the no form of this command.
access-class access-list-number {in | out}
Syntax Description
access-list-number Specifies an integer between 1 and 199 that defines the access list. in Controls which nodes can make local-area transport (LAT) connections into the server. out Defines the access checks made on outgoing connections. (A user who types a node name at the system prompt to initiate a LAT connection is making an outgoing connection.)
Defaults
Disabled
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
This command defines access list numbers that will then be used with the lat access-list command to specify the access conditions.
The value supplied for the access-list-number argument is used for all protocols supported by the Cisco IOS software. If you are already using an IP access list, you must define local-area transport (LAT) and possibly X.25 access lists permitting connections to everything, to emulate the behavior of previous software versions.
When both IP and LAT connections are allowed from a terminal line and an IP access list is applied to that line with the access-class line configuration command, you must also create a LAT access list with the same number if you want to allow any LAT connections from that terminal. You can specify only one incoming and one outgoing access list number for each terminal line. When checking LAT access lists, if the specified list does not exist, the system denies all LAT connections.
Examples
The following example configures an incoming access class on virtual terminal line 4:
line vty 4
access-class 4 in
Related Commands
Specifies access conditions to nodes on the LAT network.
Command
Description
To enable an AppleTalk Remote Access (ARA) client to request a callback, use the arap callback command in global configuration mode. To disable callback requests, use the no form of this command.
arap callbackSyntax Description
This command has no arguments or keywords.
Defaults
Callback requests are not accepted on lines configured for ARA.
Command Modes
Global configuration
Command History
11.1 This command was introduced.
Release
Modification
Usage Guidelines
This command enables the router to accept callback requests from ARA clients. You first have to enable AppleTalk routing on the router and then enable automatic ARA startup on the line. You can use this command with either local username authentication or TACACS+ authentication.
Examples
The following example accepts a callback request from an ARA client:
arap callback
Related Commands
Enables an ARA client to request a callback from an ARA client. Configures a line to start an ARA, PPP, or SLIP session. Forces the Cisco IOS software to wait before initiating a callback to a requesting client. Sets PPP BACP call parameters. Enables a dialer interface that is not a DTR interface to function either as a callback client that requests callback or as a callback server that accepts callback requests. Enables the Cisco IOS software to call back clients that request a callback from the EXEC level. Enables virtual profiles by AAA configuration.
Command
Description
To configure a line to be used only as an AppleTalk Remote Access (ARA) connection, use the arap dedicated command in line configuration mode. To return the line to interactive mode, use the no form of the command.
arap dedicatedSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Examples
The following example configures line 3 to be used only for ARA connections:
line 3 arap dedicated
To enable AppleTalk Remote Access (ARA) for a line, use the arap enable command in line configuration mode. Use the no form of this command to disable ARA.
arap enableSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Examples
The following example enables ARA on a line:
line 3 arap enable
Related Commands
appletalk routing Enables AppleTalk routing. Configures a line to start an ARA, PPP, or SLIP session.
Command
Description
To control Macintosh access to networks, use the arap net-access-list command in line configuration mode. Use the no form of this command to return to the default setting.
arap net-access-list net-access-list-number
Syntax Description
net-access-list-number One of the list values configured using the AppleTalk access-list cable-range, access-list includes, access-list network, access-list other-access, and access-list within commands.
Defaults
Disabled. The Macintosh has access to all networks.
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
You can use the arap net-access-list command to apply access lists defined by the access-list cable-range, access-list includes, access-list network, access-list other-access, and access-list within commands.
You cannot use the arap net-access-list command to apply access lists defined by the access-list zone and access-list additional-zones commands.
Examples
In the following example, ARA is enabled on line 3 and the Macintosh will have access to the AppleTalk access list numbered 650:
line 3 arap enable arap net-access-list 650
Related Commands
Controls which zones the Apple Macintosh client sees.
Command
Description
To create a new network/zone and cause it to be advertised, use the arap network command in global configuration mode. Use the no form of this command to prevent a new network/zone from being advertised.
arap network [network-number] [zone-name]
Syntax Description
network-number (Optional) AppleTalk network number. The network number must be unique on your AppleTalk network. This network is where all ARAP users appear when they dial in to the network. zone-name (Optional) AppleTalk zone name.
Defaults
A new network or zone is not created.
Command Modes
Global configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
This is a required command. ARAP does not run without it in Cisco IOS Release 10.2 and later.
Examples
The following example creates a new network/zone:
arap network 400 test zone
To prevent Macintosh guests from logging in to the router, use the arap noguest command in line configuration mode. Use the no form of this command to remove this restriction.
arap noguest [if-needed]
Syntax Description
if-needed (Optional) Does not authenticate if the user already provided authentication. This allows users to log in as guests if they have already been authenticated through a username or password.
Defaults
Disabled
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
A guest is a person who connects to the network without having to give a name or a password.
![]() |
Caution You should not use the arap noguest command if you are using modified Common Command Language (CCL) scripts and the login tacacs command. |
Examples
The following example prohibits guests from logging in to the router:
line 3 arap enable arap noguest
To require users to enter their password manually at the time they log in, use the arap require-manual-password command in line configuration mode. Use the no form of this command to disable the manual password-entry requirement.
arap require-manual-passwordSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Line configuration
Command History
11.1 This command was introduced.
Release
Modification
Usage Guidelines
This command only works for AppleTalk Remote Access Protocol (ARAP) 2.0 connections.
Examples
The following example forces users to enter their passwords manually at the time they log in, rather than use a saved password:
arap require-manual-password
Related Commands
enable password Sets a local password to control access to various privilege levels. Enables password checking at login and defines the method (local or TACACS+). Specifies an IP address, an address from a specific IP address pool, or an address from the DHCP mechanism to be returned to a remote peer connecting to this interface.
Command
Description
To set the maximum length of an AppleTalk Remote Access (ARA) session for a line, use the arap timelimit command in line configuration mode. Use the no form of this command to return to the default of unlimited session length.
arap timelimit [minutes]
Syntax Description
minutes (Optional) Maximum length of time (in minutes) for a session.
Defaults
Unlimited session length
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
After the specified length of time, the session will be terminated.
Examples
The following example specifies a maximum length of 20 minutes for ARA sessions:
line 3 arap enable arap timelimit 20
Related Commands
Sets when a disconnect warning message is displayed.
Command
Description
To set when a disconnect warning message is displayed, use the arap warningtime command in line configuration mode. Use the no form of this command to disable this function.
arap warningtime [minutes]
Syntax Description
minutes (Optional) Amount of time, in minutes, before the configured session time limit. At the configured amount of time before a session is to be disconnected, the router sends a message to the Macintosh client, which causes a warning message to appear on the user's screen.
Defaults
Disabled
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
This command can only be used if a session time limit has been configured on the line.
Examples
The following example shows a line configured for 20-minute AppleTalk Remote Access (ARA) sessions, with a warning 17 minutes after the session is started:
line 3 arap enable arap dedicated arap timelimit 20 arap warningtime 3
Related Commands
Sets the maximum length of an ARA session for a line.
Command
Description
To control what zones the Macintosh client sees, use the arap zonelist command in line configuration mode. Use the no form of this command to disable the default setting.
arap zonelist zone-access-list-number
Syntax Description
zone-access-list-number One of the list values configured using the AppleTalk access-list zone or access-list additional-zones commands.
Defaults
Disabled. The Macintosh will see all defined zones.
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
You can use the arap zonelist command to apply access lists defined by the access-list zone and access-list additional-zones commands.
You cannot use the arap zonelist command to apply access lists defined by the access-list network command.
Hiding a zone from users is not the same as preventing them from sending and receiving packets from the networks that make up that zone. For true security, an arap net-access-list command must be issued to prevent traffic to and from those networks.
Examples
The following example enables AppleTalk Remote Access (ARA) on line 3; the Macintosh will see only zones permitted by access list 650.
line 3 arap enable arap zonelist 650
Related Commands
Controls Apple Macintosh access to networks.
Command
Description
The peer default ip address command replaces the async default ip address command.
See the description of the peer default ip address command in this book for more information.
To enable the router to pass routing updates to other routers over the AUX port configured as an asynchronous interface, use the async default routing command in interface configuration mode. Use the no form of this command to disable dynamic addressing.
async default routingSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Interface configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
Use the async default routing command to define the default behavior for router-to-router communication over connections to the AUX port configured as an asynchronous interface. This command is commonly used to enable two routers to communicate over an async dial backup link.
To require a remote user to manually configure routing over connections to the AUX port configured as an asynchronous interface, use the async dynamic routing command.
Examples
The following example enables routing over asynchronous interface 0:
interface async 0 async default routing
Related Commands
Enables manually configured routing on an asynchronous interface.
Command
Description
To specify dynamic asynchronous addressing, use the async dynamic address command in interface configuration mode. Use the no form of this command to disable dynamic addressing.
async dynamic addressSyntax Description
This command has no arguments or keywords.
Defaults
Dynamic addressing is disabled.
Command Modes
Interface configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
You can control whether addressing is dynamic (the user specifies the address at the EXEC level when making the connection), or whether default addressing is used (the address is forced by the system). If you specify dynamic addressing, the router must be in interactive mode and the user will enter the address at the EXEC level.
It is common to configure an asynchronous interface to have a default address and to allow dynamic addressing. With this configuration, the choice between the default address or a dynamic addressing is made by users when they enter the slip or ppp EXEC command. If the user enters an address, it is used, and if the user enters the default keyword, the default address is used.
Examples
The following example shows dynamic addressing assigned to async interface six.
interface ethernet 0ip address 10.0.0.1 255.0.0.0interface async 6async dynamic address
Related Commands
Specifies an IP address, an address from a specific IP address pool, or an address from the DHCP mechanism to be returned to a remote peer connecting to this interface.
Command
Description
To enable manually configured routing on an asynchronous interface, use the async dynamic routing command in interface configuration mode. Use the no form of this command to disable routing protocols; static routing is still used.
async dynamic routingSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Interface configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
The async dynamic routing command is commonly used to manually bring up PPP from an EXEC session.
Examples
The following example shows how to enable manually configured routing on asynchronous interface 1. The ip tcp header-compression passive command enables Van Jacobson TCP header compression and prevents transmission of compressed packets until a compressed packet arrives from the asynchronous link.
interface async 1async dynamic routing
async dynamic address async default ip address 1.1.1.2
ip tcp header-compression passive
A remote user who establishes a PPP or SLIP connection to this asynchronous interface can enable routing by using the /routing switch or the ppp/routing command.
However, if you want to establish routing by default on connections to an asynchronous interface, use the async default routing command when you configure the interface.
Related Commands
Enables the router to pass routing updates to other routers over the AUX port configured as an asynchronous interface. Specifies dynamic asynchronous addressing versus default addressing. ip tcp header-compression Enables TCP header compression.
Command
Description
To place a line into dedicated asynchronous mode using Serial Line Internet Protocol (SLIP) or PPP encapsulation, use the async mode dedicated command in interface configuration mode. Use the no form of this command to return the line to interactive mode.
async mode dedicatedSyntax Description
This command has no arguments or keywords.
Defaults
Asynchronous mode is disabled.
Command Modes
Interface configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
With dedicated asynchronous network mode, the interface will use either SLIP or PPP encapsulation, depending on which encapsulation method is configured for the interface. An EXEC prompt does not appear, and the router is not available for normal interactive use.
If you configure a line for dedicated mode, you will not be able to use the async dynamic address command, because there is no user prompt.
Examples
The following example assigns an IP address to an asynchronous line and places the line into network mode. Setting the stop bits to 1 enhances performance.
interface async 4 async default ip address 172.31.7.51 async mode dedicated encapsulation slip line 20 location Joe's computer stopbits 1 speed 115200
Related Commands
Returns a line that has been placed into dedicated asynchronous network mode to interactive mode, thereby enabling the slip and ppp EXEC commands.
Command
Description
To return a line that has been placed into dedicated asynchronous network mode to interactive mode, thereby enabling the slip and ppp EXEC commands, use the async mode interactive command in interface configuration mode. Use the no form of this command to prevent users from implementing Serial Line Internet Protocol (SLIP) and PPP at the EXEC level.
async mode interactiveSyntax Description
This command has no arguments or keywords.
Defaults
Asynchronous mode is disabled.
Command Modes
Interface configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
Interactive mode enables the slip and ppp EXEC commands. In dedicated mode, there is no user EXEC level. The user does not enter any commands, and a connection is automatically established when the user logs in, according to the configuration.
Examples
The following example places async interface 6 into interactive asynchronous mode:
interface async 6 async default ip address 172.31.7.51 async mode interactive ip unnumbered ethernet 0
Related Commands
Places a line into dedicated asynchronous mode using SLIP or PPP encapsulation.
Command
Description
To specify that Virtual Private Dialup Network (VPDN) send the entire structured username to the authentication, authorization, and accounting (AAA) server the first time the router contacts the AAA server, use the authen before-forward command in VPDN group configuration mode. Use the no form of this command to send just the domain name or Dialed Number identification Service (DNIS).
authen before-forwardSyntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
VPDN group configuration
Command History
11.3(9)AA This command was introduced. 12.0(5)T This command was modified to only be available if the request-dialin VPDN subgroup is enabled.
Release
Modification
Usage Guidelines
You must enable the request-dialin command on the VPDN group before you can use the authen before-forward command. Removing the request-dialin command will remove the authen before-forward command from the VPDN group.
Examples
The following example creates a VPDN group that send the entire username to the AAA server when a user dials in with a username that has the domain name philzone.com:
vpdn-group 1 request dialin protocol l2f domain philzone.com initiate-to ip 10.0.0.1 local name unbrokenchain authen before-forward
Related Commands
request dialin Configures a VPDN group to request L2F or L2TP tunnels to a home gateway and creates a request-dialin VPDN subgroup. multilink Limits sessions authorized for all multilink users.
Command
Description
To configure the Cisco IOS software to automatically execute a command when a user connects to a particular line, use the autocommand command in line configuration mode. Use the no form of this command to disable the automatic execution.
autocommand command
Syntax Description
command Any appropriate EXEC command, including the host name and any switches that occur with the EXEC command.
Defaults
No commands are configured to automatically execute.
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
This command enables you to automatically execute an EXEC command when a user connects to a line.
Examples
The following example forces an automatic connection to a host named host21 (which could be an IP address):
line vty 4
autocommand connect host21
Syntax Description
lapb-ta Automatically detects Link Access Procedure, Balanced (LAPB) for an ISDN terminal adapter. ppp Automatically detects PPP encapsulation on the interface. v120 Automatically detects V.120 encapsulation on B channels.
Defaults
No default behavior or values.
Command Modes
Interface configuration
Command History
11.2 This command was introduced. 12.0(4)T The lapb-ta keyword was added.
Release
Modification
Usage Guidelines
At least one encapsulation type is required in the command, but you can specify additional encapsulation types.
Use this command to enable the specified serial or ISDN interface to accept calls and dynamically change the encapsulation in effect on the interface when the remote device does not signal the call type. For example, if an ISDN call does not identify the call type in the Lower Layer Compatibility fields and is using an encapsulation that is different from the one configured on the interface, the interface can change its encapsulation type dynamically.
This command enables interoperation with ISDN terminal adapters that use V.120 encapsulation but do not signal V.120 in the call setup message. An ISDN interface that by default answers a call as synchronous serial with PPP encapsulation can change its encapsulation and answer such calls.
Autodetection of LAPB traffic on an ISDN terminal adapter is now possible, by adding the keyword lapb-ta to the command line. This allows recognition of incoming LAPB-TA calls.
Automatic detection is attempted for the first 10 seconds after the link is established or the first five packets exchanged over the link, whichever is first.
Examples
The following example configures BRI 0 to call and receive calls from two sites, use Point-to-Point Protocol (PPP) encapsulation on outgoing calls, and use Challenge Handshake Authentication Protocol (CHAP) authentication on incoming calls. This example also enables BRI 0 to configure itself dynamically to answer calls that use V.120 but that do not signal V.120.
interface bri 0 encapsulation ppp autodetect encapsulation v120 no keepalive dialer map ip 131.108.36.10 name EB1 234 dialer map ip 131.108 36.9 name EB2 456 dialer-group 1 isdn spid1 0146334600 isdn spid2 0146334610 isdn T200 1000 ppp authentication chap
The following example enables the LAPB-TA and V.120 protocols for autodetection on interface serial0:23 after you have configured the virtual terminals to handle asynchronous traffic:
vty-async interface serial0:23 autodetect encapsulation lapb-ta v120
Related Commands
encapsulation Sets the encapsulation method used by the interface.
Command
Description
To configure automatic line disconnect, use the autohangup command in line configuration mode. This command causes the EXEC to issue the exit command when the last connection closes. Use the no form of this command to disable automatic line disconnect.
autohangupSyntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Line configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
This command is useful for UNIX UNIX-to-UNIX Copy Program (UUCP) applications that automatically disconnect lines because UUCP scripts cannot issue the exit command to hang up the telephone.
Examples
The following example enables automatic line disconnect on lines 5 through 10:
line 5 10 autohangup
To configure a line to start an Appletalk Remote Access (ARA), PPP, or Serial Line Internet Protocol (SLIP) session, use the autoselect command in line configuration mode. Use the no form of this command to disable this function on a line.
autoselect {arap | ppp | slip | during-login}
Syntax Description
arap Configures the Cisco IOS software to allow an ARA session to start up automatically. ppp Configures the Cisco IOS software to allow a PPP session to start up automatically. slip Configures the Cisco IOS software to allow a SLIP session to start up automatically. during-login The username and/or password prompt is displayed without pressing the Return key. After the user logs in, the autoselect function begins.
Defaults
ARA session
Command Modes
Line configuration
Command History
10.3 This command was introduced. 11.0 The following keywords were added:
Release
Modification
Usage Guidelines
This command eliminates the need for users to enter an EXEC command to start an ARA, PPP, or SLIP session.
![]() |
Note SLIP does not support authentication. For PPP and ARAP, you must enable authentication. |
The autoselect command configures the Cisco IOS software to identify the type of connection being requested. For example, when a user on a Macintosh running ARA selects the Connect button, the Cisco IOS software automatically starts an ARAP session. If, on the other hand, the user is running SLIP or PPP and uses the autoselect ppp or autoselect slip command, the Cisco IOS software automatically starts a PPP or SLIP session, respectively. This command is used on lines making different types of connections.
A line that does not have autoselect configured views an attempt to open a connection as noise. The router does not respond and the user client times out.
![]() |
Note After the modem connection is established, a Return is required to evoke a response, such as to get the username prompt. You might need to update your scripts to include this requirement. Additionally, the activation character should be set to the default and the exec-character-bits set to 7. If you change these defaults, the application cannot recognize the activation request. |
Examples
The following example enables ARA on a line:
line 3 arap enable autoselect arap
The following example enables PPP on a line:
line 7 autoselect ppp
The following example enables ARA on a line and allows logins from users with a modified CCL script and an unmodified script to log in:
line 3 arap enable autoselect arap autoselect during-login arap noguest if-needed
Related Commands
Sets when a disconnect warning message is displayed. Sets PPP BACP call parameters.
Command
Description
To configure an IP backup endpoint address, enter the backup command in VPDN group configuration mode. To remove this function, enter the no form of this command.
backup ip ip-address [limit number [priority number]]Syntax Description
ip ip-address | IP address of the HGW/LNS at the other end of the tunnel. This is the IP endpoint at the end of the tunnel, which is an HGW/LNS router. |
limit number | (Optional) Limits sessions per backup. The limit can range from 0 to 32767. The default is no limit set. |
priority number | (Optional) Priority level. Loadsharing is priority 1. Backup priority is between 2 and 32,767. The highest priority is 2, which is the first home gateway router to receive backup traffic. The lowest priority is 32,767. The priority group is used to support multiple levels of loadsharing and backup. The default is the lowest priority. |
Defaults
No default behavior or values. This function is used only if it is configured.
Command Modes
VPDN group configuration
Command History
12.0(4)XI This command was introduced and applies to Cisco AS5200 and Cisco AS5300 access servers only.
Release
Modification
Usage Guidelines
Use the backup VPDN group configuration command to configure an IP backup endpoint address.
Examples
The following examples show that the backup command is not available in the command line interface until you enter the request dialin command:
Router(config-vpdn)# vpdn-group customer1-vpdngroup Router(config-vpdn)# ? VPDN group configuration commands: accept Accept a tunnel open request default Set a command to its defaults exit Exit from VPDN group configuration mode no Negate a command or set its defaults request Request to open a tunnel Router(config-vpdn)# request dialin l2tp ip 10.2.2.2 domain customerx ? VPDN group configuration commands: backup Add backup address default Set a command to its defaults dnis Accept a DNIS tunnel domain Accept a domain tunnel exit Exit from VPDN group configuration mode force-local-chap Force a CHAP challenge to be instigated locally l2tp L2TP specific commands lcp LCP specific commands loadsharing Add loadsharing address local local information, like name multilink Configure limits for Multilink no Negate a command or set its defaults request Request to open a tunnel
The following example shows an IP backup endpoint address of 10.1.1.1 configured with a backup session limit of 5:
Router(config-vpdn)# backup ip 10.1.1.1 limit 5
Related Commands
request dialin Configures a VPDN group to request L2F or L2TP tunnels to a home gateway and creates a request-dialin VPDN subgroup.
Command
Description
To define how much time should elapse before a secondary line status changes after a primary line status has changed, use the backup delay command in interface configuration mode. Use the no form of this command to return to the default, so that as soon as the primary fails, the secondary is immediately brought up without delay.
backup delay {enable-delay | never} {disable-delay | never}
Syntax Description
enable-delay Number of seconds that elapse after the primary line goes down before the Cisco IOS software activates the secondary line. disable-delay Number of seconds that elapse after the primary line comes up before the Cisco IOS software deactivates the secondary line. never Prevents the secondary line from being activated or deactivated.
Defaults
0 seconds
Command Modes
Interface configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
For environments in which spurious signal disruptions appear as intermittent lost carrier signals, we recommend that you enable some delay before activating and deactivating a secondary line.
Examples
The following example sets a 10-second delay on deactivating the secondary line (serial interface 0); however, the line is activated immediately:
interface serial 0 backup delay 0 10
To configure an interface as a secondary or dial backup, use the backup interface command in interface configuration mode. Use the no form of this command to disable this feature.
backup interface type number Cisco 7200 series and Cisco 7500 series routers
backup interface slot/port-adapter/port
no backup interface slot/port-adapter/port
Syntax Description
type number Interface type and port number to use as the backup interface. slot/port-adapter/port Backplane slot number and port number on the interface. See your hardware installation manual for the specific slot and port numbers.
Defaults
Disabled
Command Modes
Command History
11.0 This command was introduced.
Release
Modification
Usage Guidelines
The interface you define with this command can back up only one other interface.
![]() |
Note Routers support only serial and ISDN backup interfaces. Access servers support both asynchronous and serial backup interfaces. |
Examples
The following example sets serial 1 as the backup line to serial 0:
interface serial 0 backup interface serial 1
The following example on the Cisco 7200 sets serial 2 as the backup line to serial 1:
interface serial 1/1 backup interface serial 2/2
To configure a dialer interface as a secondary or dial backup, use the backup interface dialer command in interface configuration mode. Use the no form of this command to disable this feature.
backup interface dialer number
Syntax Description
number Dialer interface number to use as the backup interface.
Defaults
Disabled
Command Modes
Command History
11.2 This command was introduced.
Release
Modification
Usage Guidelines
Multiple dialer interfaces can use the same dialer pool, which might have a single ISDN interface as a member. Thus, that ISDN interface can back up different serial interfaces and can make calls to different sites.
Examples
The following example shows the configuration of a site that backs up two leased lines using one BRI. Two dialer interfaces are defined. Each serial (leased line) interface is configured to use one of the dialer interfaces as a backup. Both of the dialer interfaces use dialer pool 1, which has BRI 0 as a member. Thus, BRI 0 can back up two different serial interfaces and can make calls to two different sites.
interface dialer0 ip unnumbered loopback0 encapsulation ppp dialer remote-name Remote0 dialer pool 1 dialer string 5551212 dialer-group 1 interface dialer1 ip unnumbered loopback0 encapsulation ppp dialer remote-name Remote1 dialer pool 1 dialer string 5551234 dialer-group 1 interface bri 0 encapsulation PPP dialer pool-member 1 ppp authentication chap interface serial 0 ip unnumbered loopback0 backup interface dialer 0 backup delay 5 10 interface serial 1 ip unnumbered loopback0 backup interface dialer1 backup delay 5 10
To set a traffic load threshold for dial backup service, use the backup load command in interface configuration mode. Use the no form of this command to return to the default value.
backup load {enable-threshold | never} {disable-load | never}
Syntax Description
enable-threshold Percentage of the primary line's available bandwidth that the traffic load must exceed to enable dial backup. disable-load Percentage of the primary line's available bandwidth that the traffic load must be less than to disable dial backup. never Sets the secondary line never to be activated due to traffic load.
Defaults
No threshold is predefined.
Command Modes
Interface configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
When the transmitted or received load on the primary line is greater than the value assigned to the enable-threshold argument, the secondary line is enabled.
The secondary line is disabled when one of the following conditions occurs:
If the never keyword is used instead of an enable-threshold value, the secondary line is never activated because of traffic load. If the never keyword is used instead of a disable-load argument, the secondary line is never activated because of traffic load.
Examples
The following example sets the traffic load threshold to 60 percent of the primary line serial 0. When that load is exceeded, the secondary line is activated, and will not be deactivated until the combined load is less than 5 percent of the primary bandwidth.
interface serial 0 backup load 60 5 backup interface serial 1
To create a "host failed" message that displays when a connection fails, use the busy-message command in global configuration mode. Use the no form of this command to disable the "host failed" message from displaying on the specified host.
busy-message hostname d message d
Syntax Description
hostname Name of the host that cannot be reached. d Delimiting character of your choice---a pound sign (#) for example. You cannot use the delimiting character in the message. message Message text.
Defaults
No message is displayed.
Command Modes
Global configuration
Command History
10.0 This command was introduced.
Release
Modification
Usage Guidelines
This command applies only to Telnet connections.
Follow the busy-message command with one or more blank spaces and a delimiting character of your choice. Then enter one or more lines of text, terminating the message with the second occurrence of the delimiting character.
Defining a "host failed" message for a host prevents all Cisco IOS software-initiated user messages, including the initial message that indicates the connection is "Trying..." The busy-message command can be used in the autocommand command to suppress these messages.
Examples
The following example sets a message that will be displayed on the terminal whenever an attempt to connect to the host named dross fails. The pound sign (#) is used as a delimiting character.
busy-message dross #
Cannot connect to host. Contact the computer center.
#
To inform the central-office switch that a channel is out-of-service, use the busyout command in privileged EXEC mode. This command does not terminate an existing call; instead, after you hang up or end a call, a new call cannot be established on a channel that has received a busyout command instruction.
To busyout an entire card on the dial shelf and remove it from dial services, use the busyout privileged EXEC command. To cancel busyout, use the no form of the command.
busyout shelf/slot/port
Syntax Description
shelf/slot/port Shelf number, slot number, and port number. You must type in the forward slashes (/).
Defaults
Busyout is disabled.
Command Modes
Privileged EXEC
Command History
11.3(2)AA This command was introduced and supported T1 and T3 only. 12.0 This command was enhanced to support T1, T3, E1and DMM HMM (Double Modem Module [12] Hex Modem Module [6]).
Release
Modification
Usage Guidelines
Use the busyout command before you remove a card from a shelf. The maintenance LED on the card goes ON after all the channels (or calls) have been terminated. The ON LED indicates that it is safe to remove the card from the shelf.
Use this command to busyout digital signal level 0s (DS0s) on a trunk card or all modems on a modem card.
To busyout an individual DS0, use the ds0 busyout controller configuration command.
To display the busyout information, use the show busyout privileged EXEC command.
Restrictions
If the trunk card is using ISDN signalling, there is a limit on the amount of traffic that the exchange can accept on the signalling channel. The restrictions are as follows:
Examples
The following example enables busyout on the card in dial shelf 5, slot 4:
busyout 5/4
Related Commands
Busyouts one or more DS0s. modem busyout Disables a modem from dialing or answering calls whereby the disabling action is not executed until the active modem returns to an idle state. modem busyout-threshold Maintains a balance between the number of DS0s and modems. modem shutdown Abruptly shuts down an active or idle modem installed in an access server or router. show dial-shelf Displays information about the dial shelf, including clocking information.
Command
Description
![]()
![]()
![]()
![]()
![]()
![]()
![]()
Posted: Fri Mar 17 15:08:08 PST 2000
Copyright 1989 - 2000©Cisco Systems Inc.