DECnet Commands: access-list (DECnet extended) Through decnet node-type

This chapter explains the function and syntax of the DECnet protocol commands: access-list (DECnet extended) through decnet node-type. For more information about defaults and usage guidelines, see the corresponding chapter of the Cisco IOS Apollo Domain, Banyan VINES, DECnet, ISO CLNS, and XNS Command Reference, Release 12.1.

Note Not all Cisco access servers support DECnet. For more information, refer to the release notes for the current Cisco IOS release.

access-list (DECnet extended)

To create an extended access list, use the access-list command in global configuration mode. To delete the entire access list, use the no form of this command.

access-list access-list-number {permit | deny} source source-mask [destination destination-mask]

no access-list

access-list-number	Integer you choose between 300 and 399 that uniquely identifies the access list.
permit	Permits access when there is an address match.
deny	Denies access when there is an address match.
source	Source address. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.
source-mask	Mask to be applied to the address of the source node. All masks are in decimal.
destination	(Optional) Destination node's DECnet address in decimal format. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50.
destination-mask	(Optional) Destination mask. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All masks are in decimal.

access-list (connect initiate)

To create an access list that filters connect initiate packets, use this version of the access-list command in global configuration mode. To disable the access list, use the no form of this command.

access-list access-list-number {permit | deny} source source-mask [destination destination-mask ] {eq | neq} [[source-object] [destination-object] [identification] any]

no access-list

The optional argument source-object consists of the following string:

src [{eq | neq | gt | lt} object-number] [exp regular-expression] [uic [group, user]]

The optional argument destination-object consists of the following string:

dst [{eq | neq | gt | lt} object-number] [exp regular-expression] [uic [group, user]]

The optional argument identification consists of the following string:

[id regular-expression] [password regular-expression] [account regular-expression]

Syntax Description

access-list-number

Integer you choose between 300 and 399 that uniquely identifies the access list.

permit

Permits access when there is an address match.

deny

Denies access when there is an address match.

source

Source address. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.

source-mask

Mask to be applied to the address of the source node. All masks are in decimal.

destination

(Optional) Destination node's DECnet address in decimal format. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.

destination-mask

(Optional) Destination mask. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All masks are in decimal.

eq | neq

Use either of these keywords:

eq---Item matches the packet if all the specified parts of source-object, destination-object, and identification match data in the packet.

neq---Item matches the packet if any of the specified parts do not match the corresponding entry in the packet.

source-object

(Optional) Contains the mandatory keyword src and one of the following optional keywords:

eq | neq | lt | gt---Equal to, not equal to, less than, or greater than. These keywords must be followed by the argument object-number, a numeric DECnet object number.

exp---Stands for expression; followed by a regular-expression that matches a string. See the appendix "Regular Expressions" in the Cisco IOS Dial Solutions Command Reference for a description of regular expressions.

uic---Stands for user identification code; followed by a numeric user ID (UID) expression. The argument [group, user] is a numeric UID expression. In this case, the bracket symbols are literal; they must be entered. The group and user parts can either be specified in decimal, in octal by prefixing the number with a 0, or in hex by prefixing the number with 0x. The uic expression displays as an octal number.

destination-object

(Optional) Contains the mandatory keyword dst and one of the following optional keywords:

eq | neq | lt | gt---Equal to, not equal to, less than, or greater than. These keywords must be followed by the argument object-number, a numeric DECnet object number.

exp---Stands for expression; followed by a regular-expression that matches a string. See the appendix "Regular Expressions" in the Cisco IOS Dial Solutions Command Reference for a description of regular expressions.

uic---Stands for user identification code; followed by a numeric user ID (UID) expression. In this case, the bracket symbols are literal; they must be entered. The group and user parts can either be specified in decimal, in octal by prefixing the number with a 0, or in hex by prefixing the number with 0x. The uic expression displays as an octal number.

identification

(Optional) Uses any of the following three keywords:

id---Regular expression; refers to user ID.

password---Regular expression; the password to the account.

account---Regular expression; the account string.

any

(Optional) Item matches if any of the specified parts do match the corresponding entries for source-object, destination-object, or identification.

access-list-number	Integer you choose between 300 and 399 that uniquely identifies the access list.
permit	Permits access when there is an address match.
deny	Denies access when there is an address match.
source	Source address. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.
source-mask	Mask to be applied to the address of the source node. All masks are in decimal.
destination	(Optional) Destination node's DECnet address in decimal format. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.
destination-mask	(Optional) Destination mask. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All masks are in decimal.
eq \| neq	Use either of these keywords: eq---Item matches the packet if all the specified parts of source-object, destination-object, and identification match data in the packet. neq---Item matches the packet if any of the specified parts do not match the corresponding entry in the packet.
source-object	(Optional) Contains the mandatory keyword src and one of the following optional keywords: eq \| neq \| lt \| gt---Equal to, not equal to, less than, or greater than. These keywords must be followed by the argument object-number, a numeric DECnet object number. exp---Stands for expression; followed by a regular-expression that matches a string. See the appendix "Regular Expressions" in the Cisco IOS Dial Solutions Command Reference for a description of regular expressions. uic---Stands for user identification code; followed by a numeric user ID (UID) expression. The argument [group, user] is a numeric UID expression. In this case, the bracket symbols are literal; they must be entered. The group and user parts can either be specified in decimal, in octal by prefixing the number with a 0, or in hex by prefixing the number with 0x. The uic expression displays as an octal number.
destination-object	(Optional) Contains the mandatory keyword dst and one of the following optional keywords: eq \| neq \| lt \| gt---Equal to, not equal to, less than, or greater than. These keywords must be followed by the argument object-number, a numeric DECnet object number. exp---Stands for expression; followed by a regular-expression that matches a string. See the appendix "Regular Expressions" in the Cisco IOS Dial Solutions Command Reference for a description of regular expressions. uic---Stands for user identification code; followed by a numeric user ID (UID) expression. In this case, the bracket symbols are literal; they must be entered. The group and user parts can either be specified in decimal, in octal by prefixing the number with a 0, or in hex by prefixing the number with 0x. The uic expression displays as an octal number.
identification	(Optional) Uses any of the following three keywords: id---Regular expression; refers to user ID. password---Regular expression; the password to the account. account---Regular expression; the account string.
any	(Optional) Item matches if any of the specified parts do match the corresponding entries for source-object, destination-object, or identification.

access-list (DECnet standard)

To create a standard access list, use the standard version of the access-list command in global configuration mode. To delete the entire access list, use the no form of this command.

access-list access-list-number {permit | deny} source source-mask

no access-list

access-list-number	Integer you choose between 300 and 399 that uniquely identifies the access list.
permit	Permits access when there is an address match.
deny	Denies access when there is an address match.
source	Source address. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.
source-mask	Mask to be applied to the address of the source node. Bits are set wherever the corresponding bits in the address should be ignored. All masks are in decimal.

clear decnet accounting

To delete all entries in the accounting database when DECnet accounting is enabled, use the clear decnet accounting command in EXEC mode.

clear decnet accounting [checkpoint]

Syntax Description

checkpoint

(Optional) Clears the checkpoint database.

checkpoint	(Optional) Clears the checkpoint database.

clear decnet counters

To clear DECnet counters that are shown in the output of the show decnet traffic EXEC command, use the clear decnet counters command in EXEC mode.

clear decnet counters

Syntax Description

This command has no arguments or keywords.

decnet access-group

To create a DECnet access group, use the decnet access-group command in interface configuration mode.

decnet access-group access-list-number

Syntax Description

access-list-number

Either a standard or extended DECnet access list. A standard DECnet access list applies to source addresses. The value (or values in the case of extended lists) can be in the range 300 to 399.

access-list-number	Either a standard or extended DECnet access list. A standard DECnet access list applies to source addresses. The value (or values in the case of extended lists) can be in the range 300 to 399.

decnet accounting

To enable DECnet accounting, use the decnet accounting command in interface configuration mode. To disable DECnet accounting, use the no form of this command.

decnet accounting

no decnet accounting

Syntax Description

This command has no arguments or keywords.

decnet accounting list

To specify the source and destination address pairs for which DECnet accounting information is kept, use the decnet accounting list command in global configuration mode. DECnet accounting tracks all traffic that traverses the router between the source and destination address pairs specified with this command. To remove the accounting filter, use the no form of this command.

decnet accounting list src-dec-address dest-dec-address

no decnet accounting list {src-dec-address dest-dec-address | all}

Syntax Description

src-dec-address

DECnet address for the source. The address is in the form area.node, for example, 5.3.

dest-dec-address

DECnet address for the destination. The address is in the form area.node, for example, 5.3.

all

Disables DECnet accounting for all source and destination address pairs specified previously with the decnet accounting list command.

src-dec-address	DECnet address for the source. The address is in the form area.node, for example, 5.3.
dest-dec-address	DECnet address for the destination. The address is in the form area.node, for example, 5.3.
all	Disables DECnet accounting for all source and destination address pairs specified previously with the decnet accounting list command.

decnet accounting threshold

To set the maximum number of accounting database entries, use the decnet accounting threshold command in global configuration mode. To restore the default, use the no form of this command.

decnet accounting threshold threshold

no decnet accounting threshold threshold

Syntax Description

threshold

Maximum number of entries (source and destination address pairs) that the Cisco IOS software can accumulate.

threshold	Maximum number of entries (source and destination address pairs) that the Cisco IOS software can accumulate.

decnet accounting transits

To set the maximum number of transit entries that will be stored in the DECnet accounting database, use the decnet accounting transits command in global configuration mode. To disable this function, use the no form of this command.

decnet accounting transits count

no decnet accounting transits

Syntax Description

count

Number of transit entries that will be stored in the DECnet accounting database.

count	Number of transit entries that will be stored in the DECnet accounting database.

decnet advertise

To c onfigure border routers to propagate Phase IV areas through an OSI backbone, use the decnet advertise command in global configuration mode. To disable this function, use the no form of this command.

decnet advertise decnet-area hops cost

no decnet advertise [decnet-area]

Syntax Description

decnet-area

Phase IV area that you want propagated.

hops

Hop count to be associated with the route being advertised. Default is 0.

cost

Cost to be associated with the route being advertised. Default is 0.

decnet-area	Phase IV area that you want propagated.
hops	Hop count to be associated with the route being advertised. Default is 0.
cost	Cost to be associated with the route being advertised. Default is 0.

decnet area-max-cost

To set the maximum cost specification value for interarea routing, use the decnet area-max-cost command in global configuration mode.

decnet [network-number] area-max-cost value

Syntax Description

network-number

(Optional) Network number from 0 to 3. Specified when using Address Translation Gateway (ATG). If not specified, the default is network 0.

value

Maximum cost for a route to a distant area that the Cisco IOS software may consider usable; the software treats as unreachable any route with a cost greater than the value you specify. A valid range for cost is 1 to 1022. This parameter is only valid for area routers. The default is 1022.

network-number	(Optional) Network number from 0 to 3. Specified when using Address Translation Gateway (ATG). If not specified, the default is network 0.
value	Maximum cost for a route to a distant area that the Cisco IOS software may consider usable; the software treats as unreachable any route with a cost greater than the value you specify. A valid range for cost is 1 to 1022. This parameter is only valid for area routers. The default is 1022.

decnet area-max-hops

To set the maximum hop count value for interarea routing, use the decnet area-max-hops command in global configuration mode.

decnet [network-number] area-max-hops value

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

value

Maximum number of hops for a usable route to a distant area. The Cisco IOS software treats as unreachable any route with a count greater than the value you specify. A valid range for the hop count is 1 to 30. The default is 30 hops.

network-number	(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.
value	Maximum number of hops for a usable route to a distant area. The Cisco IOS software treats as unreachable any route with a count greater than the value you specify. A valid range for the hop count is 1 to 30. The default is 30 hops.

decnet congestion-threshold

To set the congestion- experienced bit if the output queue has more than the specified number of packets in it, use the decnet congestion-threshold command in interface configuration mode. To remove the parameter setting and set it to 0, use the no form of this command.

decnet congestion-threshold number

no decnet congestion-threshold

Syntax Description

number

Number of packets that are allowed in the output queue before the system sets the congestion experience bit. This value is an integer between 0 and 0x7fff. The value zero prevents this bit from being set. Only relatively small integers are reasonable. The default is 1 packet.

number	Number of packets that are allowed in the output queue before the system sets the congestion experience bit. This value is an integer between 0 and 0x7fff. The value zero prevents this bit from being set. Only relatively small integers are reasonable. The default is 1 packet.

decnet conversion

To allow Phase IV routers (running Cisco Release 9.1 or higher) to run in a Phase V network and vice versa, enable conversion with the decnet conversion command in global configuration mode. To disable conversion, use the no form of this command.

decnet conversion nsap-prefix

no decnet conversion nsap-prefix

Syntax Description

nsap-prefix

Value used for the IDP field when constructing NSAPs from a Phase IV address.

nsap-prefix	Value used for the IDP field when constructing NSAPs from a Phase IV address.

decnet cost

To set a cost value for an interface, use the decnet cost command in interface configuration mode. To disable DECnet routing for an interface, use the no form of this command.

decnet cost cost-value

no decnet cost

Syntax Description

cost-value

Integer from 1 to 63. There is no default cost for an interface, although a suggested cost 1 for FDDI, 4 for Ethernet, and greater than 10 for serial links.

cost-value	Integer from 1 to 63. There is no default cost for an interface, although a suggested cost 1 for FDDI, 4 for Ethernet, and greater than 10 for serial links.

decnet encapsulation

To provide DECnet encapsulation over Token Ring, use the decnet encapsulation command in interface configuration mode.

decnet encapsulation {pre-dec | dec}

Syntax Description

pre-dec

Configures routers for operation on the same Token Ring with routers running software versions prior to Cisco IOS Release 9.1. In this mode, Cisco routers cannot communicate with non-Cisco equipment. Referred to as Cisco-style encapsulation.

dec

Provides encapsulation that is compatible with other Digital equipment. All Cisco routers must be running Cisco IOS Release 9.1 or later.

pre-dec	Configures routers for operation on the same Token Ring with routers running software versions prior to Cisco IOS Release 9.1. In this mode, Cisco routers cannot communicate with non-Cisco equipment. Referred to as Cisco-style encapsulation.
dec	Provides encapsulation that is compatible with other Digital equipment. All Cisco routers must be running Cisco IOS Release 9.1 or later.

decnet hello-timer

To change the interval for sending broadcast hello messages, use the decnet hello-timer command in interface configuration mode. To restore the default value, use the no form of this command.

decnet hello-timer seconds

no decnet hello-timer

Syntax Description

seconds

Interval at which the Cisco IOS software sends hello messages. It can be a decimal number in the range 1 to 8191 seconds. The default is 15 seconds.

seconds	Interval at which the Cisco IOS software sends hello messages. It can be a decimal number in the range 1 to 8191 seconds. The default is 15 seconds.

decnet host

To associate a name-to-DECnet address mapping, use the decnet host command in global configuration mode. To disable name mapping, use the no form of this command.

decnet host name decnet-address

no decnet host name

Syntax Description

name

A name you choose that uniquely identifies this DECnet address.

decnet-address

Source address. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.

name	A name you choose that uniquely identifies this DECnet address.
decnet-address	Source address. DECnet addresses are written in the form area.node. For example, 50.4 is node 4 in area 50. All addresses are in decimal.

decnet in-routing-filter

To provide access control to hello messages or routing information received on an interface, use the decnet in-routing-filter command in interface configuration mode. To remove access control, use the no form of this command.

decnet in-routing-filter access-list-number

no decnet in-routing-filter

Syntax Description

access-list-number

Standard DECnet access list. This list applies to source addresses. The value can be in the range 300 to 399.

access-list-number	Standard DECnet access list. This list applies to source addresses. The value can be in the range 300 to 399.

decnet map

To establish an address translation for selected nodes, use the decnet map command in global configuration mode.

decnet first-network map virtual-address second-network real-address

Syntax Description

first-network

DECnet network numbers in the range 0 to 3.

virtual-address

Numeric DECnet address (10.5, for example).

second-network

DECnet network number you map to; DECnet numbers range 0 to 3.

real-address

Numeric DECnet address (10.5, for example).

first-network	DECnet network numbers in the range 0 to 3.
virtual-address	Numeric DECnet address (10.5, for example).
second-network	DECnet network number you map to; DECnet numbers range 0 to 3.
real-address	Numeric DECnet address (10.5, for example).

decnet max-address

To configure the Cisco IOS software with a maximum number of node addresses, use the decnet max-address command in global configuration mode.

decnet [network-number] max-address value

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

value

A number less than or equal to 1023 that represents the maximum address possible on the network. In general, all routers on the network should use the same value for this argument. The default is 1023.

network-number	(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.
value	A number less than or equal to 1023 that represents the maximum address possible on the network. In general, all routers on the network should use the same value for this argument. The default is 1023.

decnet max-area

To set the largest number of areas that the Cisco IOS software can handle in its routing table, use the decnet max-area command in global configuration mode.

decnet [network-number] max-area area-number

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

area-number

Area number from 1 to 63. Like the decnet max-address global configuration command value, this argument controls the sizes of internal routing tables and of messages sent to other nodes. All routers on the network should use the same maximum address value. The default is 63.

network-number	(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.
area-number	Area number from 1 to 63. Like the decnet max-address global configuration command value, this argument controls the sizes of internal routing tables and of messages sent to other nodes. All routers on the network should use the same maximum address value. The default is 63.

decnet max-cost

To set the maximum cost specification for intra-area routing, use the decnet max-cost command in global configuration mode.

decnet [network-number] max-cost cost

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

cost

Cost from 1 to 1022. The default is 1022.

network-number	(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.
cost	Cost from 1 to 1022. The default is 1022.

decnet max-hops

To set the maximum hop count specification value for intra-area routing, use the decnet max-hops command in global configuration mode.

decnet [network-number] max-hops hop-count

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

hop-count

Hop count from 1 to 30. The Cisco IOS software ignores routes that have a hop count greater than the corresponding value of this parameter. The default is 30 hops.

network-number	(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.
hop-count	Hop count from 1 to 30. The Cisco IOS software ignores routes that have a hop count greater than the corresponding value of this parameter. The default is 30 hops.

decnet max-paths

To define the maximum number of equal-cost paths to a destination that the Cisco IOS software keeps in its routing table, use the decnet max-paths command in global configuration mode.

decnet [network-number] max-paths value

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

value

Decimal number equal to the maximum number of equal-cost paths the software will save. The valid range is 1 to 31. The default is 1.

network-number	(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.
value	Decimal number equal to the maximum number of equal-cost paths the software will save. The valid range is 1 to 31. The default is 1.

decnet max-visits

To set the limit on the number of times a packet can pass through a router, use the decnet max-visits command in global configuration mode.

decnet [network-number] max-visits value

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

value

Number of times a packet can pass through a router. It can be a decimal number in the range 1 to 63. If a packet exceeds value, the Cisco IOS software discards the packet. Digital recommends that the value of the max-visits parameter be at least twice that of the max-hops parameter, to allow packets to still reach their destinations when routes are changing. The default is 63 times.

decnet multicast-map

To specify a mapping between DECnet multicast addresses and Token Ring functional addresses, other than the default mapping, use the decnet multicast-map command in interface configuration mode. To delete the specified information, use the no form of this command.

decnet multicast-map multicast-address-type functional-address

no decnet multicast-map multicast-address-type functional-address

Syntax Description

multicast-address-type

Type of multicast address that is used. The following are valid values for the argument:

iv-all-routers (All Phase-IV routers)

iv-all-endnodes (All Phase-IV end nodes)

iv-prime-all-routers (All Phase IV Prime routers)

functional-address

Functional MAC address to which this multicast ID maps; in the form of "c000.xxxx.yyyy."

decnet node-type

To sp ecify the node type, use the decnet node-type command in global configuration mode.

decnet [network-number] node-type {area | routing-iv}

Syntax Description

network-number

(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.

area

Router participates in the DECnet routing protocol with other area routers, as described in the Digital documentation, and routes packets from and to routers in other areas. This is sometimes referred to as Level 2 (or interarea) routing. An area router does not just handle interarea routing, it also acts as an intra-area or Level 1 router in its own area.

routing-iv

Router acts as an intra-area (standard DECnet Phase IV, Level 1 router) and ignores Level 2 routing packets. In this mode, it routes packets destined for other areas to a designated interarea router, exchanging packets with other end nodes and routers in the same area.

multicast-address-type	Type of multicast address that is used. The following are valid values for the argument: iv-all-routers (All Phase-IV routers) iv-all-endnodes (All Phase-IV end nodes) iv-prime-all-routers (All Phase IV Prime routers)
functional-address	Functional MAC address to which this multicast ID maps; in the form of "c000.xxxx.yyyy."

network-number	(Optional) Network number in the range 0 to 3. Specified when using ATG. If not specified, the default is network 0.
area	Router participates in the DECnet routing protocol with other area routers, as described in the Digital documentation, and routes packets from and to routers in other areas. This is sometimes referred to as Level 2 (or interarea) routing. An area router does not just handle interarea routing, it also acts as an intra-area or Level 1 router in its own area.
routing-iv	Router acts as an intra-area (standard DECnet Phase IV, Level 1 router) and ignores Level 2 routing packets. In this mode, it routes packets destined for other areas to a designated interarea router, exchanging packets with other end nodes and routers in the same area.

Table of Contents

DECnet Commands: access-list (DECnet extended) Through decnet node-type