System Management

Before you can configure the MGX 8260 Media Gateway, you must log on as a user with the privilege to change system parameters. You need SuperUser privileges to change most system-level settings. To log on, follow these steps:

Step 1 Open a telnet session with the MGX 8260 Media Gateway. You need to know the host name or IP address for the desired MGX 8260 node.

Step 2 At the User Id prompt, enter your user name.

Step 3 At the Password prompt, enter your password.

The MGX 8260 Media Gateway displays a command line prompt.

Configuration Tasks

See the following sections for configuration tasks related to managing the system:

Configuring System Security (Required)
Configuring Node Parameters (Required)
Configuring the Management Interfaces (Required)
Synchronizing the System Clock (Required)

You use the command line interface to enter system management commands.

Configuring System Security

The MGX 8260 controls user access two ways:

User accounts and passwords
SNMP communities

Configuring User Accounts

The MGX 8260 Media Gateway enforces security with user accounts and access levels. Users must log onto the Cisco MGX 8260 before performing any task, and authenticated users can perform only those tasks permitted by their access level. The Cisco MGX 8260 supports up to 20 user accounts, each with access privileges ranging from full control to guest (see Table 6-1).

Table 6-1: User Accounts and Access Privileges

Access
Level Account type Command groups

1

SuperUser

Access all features

2

Administrator

Configure and view all features except user profiles and community strings

3

Provisioning

Configure and view system, port, lines, end points, and connections

4

Maintenance

Access selected level 3 commands

5

Operator

View system, port, lines, end points, and connections

6

Guest

View system, common lines and ports

Access Level	Account type	Command groups
1	SuperUser	Access all features
2	Administrator	Configure and view all features except user profiles and community strings
3	Provisioning	Configure and view system, port, lines, end points, and connections
4	Maintenance	Access selected level 3 commands
5	Operator	View system, port, lines, end points, and connections
6	Guest	View system, common lines and ports

A new system has a default SuperUser account. To prohibit unauthorized access to the equipment, replace the default account with a unique one.

Note The Command Line Reference lists the specific access level for each command.

Adding User Profiles

Only users with access level 1 can add new profiles to the MGX 8260 Media Gateway.

To add a new user profile, follow these steps:

Step 1 Log on to the MGX 8260 Media Gateway at access level 1.

Step 2 Enter the addusp command, specifying the user ID and access level:

The system adds a new user with a default password that matches the user id.

The following example adds a user named William with a default password of William and an access level of 1:

addusp William 1

Change the default password to a unique password as described in the next section.

Changing Passwords

Every user can change their own password. If the existing password is unknown, a level 1 user must delete the account and add a new one.

To change a password, follow these steps:

Step 1 Log onto the account you want to change.

Enter the chpwd command and respond to the following prompts that appear:

Rules:

1. Password length must be 4 - 10

2. First character must be alphanumeric

3. Only printable characters are allowed

4. Space not allowed

Enter Password : *****
New Password   : ********
Verify Password: ********

The system updates the account password.

Deleting User Profiles

To delete a user profile, follow these steps:

Step 1 Log on to the MGX 8260 Media Gateway at access level 1.

Step 2 Enter the delusp command, specifying the ID of the user whose profile you want to delete:

The system removes the user profile from the database.

For example, the following command removes the user profile for William:

delusp William

Viewing User Profiles

To list existing user profiles, follow these steps:

Step 1 Log on to the MGX 8260 Media Gateway at access level 1.

Step 2 Enter the lsusps command.

The system lists the users.

=============================================================
              User Profile Entries (lsusps)
=============================================================
Index  User Identifier   Access Level
=====  ===============   ============
  1         William              1
  2         user3                3

Setting and Viewing SNMP Communities

When managing the MGX 8260 Media Gateway from a SNMP manager, security is enforced with password-like community strings. SNMP communities are groupings of workstations and servers (or gateways) that can manage the MGX 8260. Community strings are important when managing the MGX 8260 Media Gateway from a Network Management System, like HP Openview. You can configure up to 15 community strings.

Adding Community Strings

To add a community string, enter the addcms command, specifying the community, such as "public", the IP address of the SNMP manager, and the privilege (read-only = 1 or read-write = 2). An IP address of 0.0.0.0 specifies all SNMP managers. Community strings contain up to 20 characters.

The following command adds a public community string with read-write privilege for all SNMP managers:

addcms Public 0.0.0.0 2

Deleting Community Strings

To delete a community string, enter the delcms command, specifying the community string and IP address.

For example, the following command deletes the Public community string:

delcms Public 0.0.0.0

Viewing Community Strings

To view a particular community string, enter the lscms command, specifying the community string index.

The system displays the community string information:

=======================================================================
              Community String Entry (lscms)
=======================================================================
        Community String Index :1
        Commumity String       :Public
        Manager IP Address     :0.0.0.0
        Privilege              :read-write

Displayed Information Description

Community String Index

The commStrTable index number, from 1 to 15. If you don't know the index, list all community strings first and identify the string of interest. The following procedure shows how to list all community strings.

Community String

The name of the community string.

Manager IP Address

The IP address of the manager associated with this string.

Privilege

The manager's privilege, either read-write or read-only.

Displayed Information	Description
Community String Index	The commStrTable index number, from 1 to 15. If you don't know the index, list all community strings first and identify the string of interest. The following procedure shows how to list all community strings.
Community String	The name of the community string.
Manager IP Address	The IP address of the manager associated with this string.
Privilege	The manager's privilege, either read-write or read-only.

To view all community strings, enter the lscmss command.

A list of all SNMP community strings is displayed, along with the corresponding index values, manager IP addresses, and privileges.

=============================================================
              Community String Entries (lscmss)
=============================================================
Index   Manager IP Address   Privilege    Community String
=====  ==================== ===========  ===================
  1          10.1.1.2         read-only       public
  2          10.1.1.3         read-write      private

For a description of the output, refer to the description of the lscms command in the previous section.

Assigning a tftp Security Key

The tftp key authenticates file transfers between the MGX 8260 Media Gateway and a tftp client. If the key is not set, or if the key provided during the file transfer does not match this key, the file is not transferred.

To set the security key, enter the chkey command, specifying the security key. The system records the security key.

To view the security key, enter the lskey command. The system displays the security key.

Configuring Node Parameters

System-wide parameters apply to the MGX 8260 node as a whole. System-wide parameters include the following settings:

Rack number, node name, and node number
Date, time, and time zone
Node type (read/only)
Backplane type and serial number (read/only)

Setting Node Parameters

Normally, system-wide parameters are set during installation. To change node parameters, use the chndinf command, specifying the rack number, node name, and node number. To set the system date, time, or timezone, use the chdate and chtimezn commands.

Viewing Node Parameters

To view system-wide parameters, enter the lsndinf command.

The system displays the node and backplane information:

=======================================================================
          Node Information (lsndinf)
=======================================================================
System Rack Number       :    1
System Node Name         :    MMS
System Node Type         :    mgx8260
System BackPlane Type    :    1
System BackPlane Serial #:    BKPLN
System Node Number       :    1

Displayed Information Description

System Rack Number

The physical location of the shelf.

System Node Name

The user-defined name for this node

System Node Type

The node type---MGX 8260

System BackPlaneType

The Cisco backplane type

System BackPlane Serial #

The backplane serial number

System Node Number

The user-defined number for this node

Displayed Information	Description
System Rack Number	The physical location of the shelf.
System Node Name	The user-defined name for this node
System Node Type	The node type---MGX 8260
System BackPlaneType	The Cisco backplane type
System BackPlane Serial #	The backplane serial number
System Node Number	The user-defined number for this node

To view the date and time, enter the lsdate command.

The system displays the date, time, and time zone:

=======================================================================
          System Time and Date Information (lsdate)
=======================================================================
Date                   :      03/21/1999
Time                   :      22:14:12
TimeZone               :      gmtplus12

Configuring the Management Interfaces

You configure the MGX 8260 management interface for local or remote operation by setting the appropriate IP addresses and management paths. Assign management IP addresses for each of the following management interfaces that you plan to use:

Ethernet 10BaseT management interface IP1 and IP2
In-band management path

Configuring the 10BaseT Management Port

You use the SCC 10BaseT management port for http, telnet, SNMP, and TFTP sessions. Management hosts are connected to the 10BaseT port of the MGX 8260 Media Gateway (see Figure 6-1).

Figure 6-1: 10BaseT Management Connections

Tips Change management IP address from the console port rather than a telnet session.

To configure the 10BaseT management port, follow these steps:

Step 1 Connect a VT100 terminal to the console port.

Step 2 Log onto the MGX 8260 Media Gateway as a SuperUser.

Step 3 Set the IP address and mask for the primary management interface using the chsysip1 command.

For example, with a system IP address of 10.15.26.20 and a 24-bit subnet mask, enter the following command:

chsysip1 10.15.26.20 255.255.255.0

Step 4 Optionally, set the IP address and mask for the secondary management interface using the chsysip2 command.

For example;

chsysip2 10.15.27.20 255.255.255.0

Configuring In-Band Management Paths

Configure an in-band management path if you want to manage the MGX 8260 Media Gateway via a Fast Ethernet channel. Before configuring an in-band management path, make sure the Fast Ethernet card is installed on the SCC.

To configure an in-band management path, follow these steps:

Step 1 Contact your network administrator to obtain an IP address that is compatible with your in-band network.

Step 2 Verify that the chassis is configured for Fast Ethernet lines.

Step 3 Set the in-band management IP address, using the chibip command.

For example, if you assigned a IP address of 10.15.28.20 for the in-band path and you use a 24-bit subnet mask, enter the following command:

chibip 10.15.28.20 255.255.255.0

Viewing Management Port Parameters

You view all management parameters with a single command. The following management port parameters are displayed:

10BaseT IP address, mask, and gateway
In-band IP address and mask
MGX 8260 MAC address

To view management port parameters, enter the lsmgips command.

The management interface configuration is displayed:

=========================================================================
           Management Interfaces Configuration (lsmgips)
=========================================================================
SNMP Interface IP1 Address   :          10.15.26.20
SNMP Interface IP1 Mask      :          255.255.255.0
SNMP Interface IP2 Address   :          10.15.27.20
SNMP Interface IP2 Mask      :          255.255.255.0
SNMP Interface MAC Address   :          00:50:a3:00:26:c8
In-Band Interface Address    :          10.15.28.20
In-Band Interface Mask       :          255.255.255.0

Displayed Information Description

SNMP Interface IP1 Address

The IP address of the primary 10BaseT management interface

SNMP Interface IP1 Mask

The IP subnet mask for the primary interface

SNMP Interface IP2 Address

The IP address for the secondary 10BaseT management interface

SNMP Interface IP2 Mask

The IP subnet mask for the secondary interface

SNMP Interface MAC Address

The physical MAC address for the MGX 8260 Media Gateway

Inband Interface Address

The IP address of the in-band management interface

Inband Interface Mask

The IP subnet mask for the in-band management interface

Displayed Information	Description
SNMP Interface IP1 Address	The IP address of the primary 10BaseT management interface
SNMP Interface IP1 Mask	The IP subnet mask for the primary interface
SNMP Interface IP2 Address	The IP address for the secondary 10BaseT management interface
SNMP Interface IP2 Mask	The IP subnet mask for the secondary interface
SNMP Interface MAC Address	The physical MAC address for the MGX 8260 Media Gateway
Inband Interface Address	The IP address of the in-band management interface
Inband Interface Mask	The IP subnet mask for the in-band management interface

Synchronizing the System Clock

The MGX 8260 clock module has three synchronization options:

BITS (Building Integrated Timing Source)---A high quality timing source that synchronizes all equipment in the building
Line---A clock derived from the receive line signal
Local---An internal MGX 8260 timing source

You assign one clock source as the primary source and another as the secondary source. When using the line clock source, specify both the line and slot associated with the source.

During normal operation, the primary clock is the active source and the secondary clock is the backup source. If the active source fails, the MGX 8260 Media Gateway switches to the backup clock and reports an alarm. You can also switch to the backup source manually. This section explains how to set primary and secondary clocks and view clock status.

Setting Clock Parameters

To set the clock synchronization, specify the primary and secondary clocks using the chpclksrc and chsclksrc commands.

The following example configures the clock source as slot 12, line 8. The last parameter, 2, specifies the clock source as narrowband.

chpclksrc 12 8 2

The following command configures an external BITS clock:

chpclksrc # # 3

Since the slot and line numbers are irrelevant, you don't need to specify them.

Viewing Clock Parameters

You view clock status with a single command. The clock parameters are:

Status of the primary and secondary clocks
The current clock source
The lowest stratum level of the current clock source

To view clock status, enter the lsclksrcs command.

The system displays the clock status:

========================================================================
           Clock Configuration (lsclksrcs)
========================================================================
Primary Clock Source Type  :       externalClk
Primary Clock Source Slot  :       9
Primary Clock Source Line  :       1
Secondary Clock Source Type:       internalClk
Secondary Clock Source Slot:       9
Secondary Clock Source Line:       1
Primary Clock Status       :       ok
Secondary Clock Status     :       ok
Clock Source Card Type     :       *
Clock Stratum              :       level4
Master Clock               :       primary
Current Clock              :       primary

Displayed Information Description

Primary (or Secondary) Clock Source Type

The clock source type:

broadBandClk

narrowBandClk

externalClk

internalClk

Primary (or Secondary) Clock Source Slot

The slot number for the clock source

Primary (or Secondary) Clock Source Line

The line number for the clock source

Primary (or Secondary) Clock Status

The clock status:

ok

noClock

inaccurate

Clock Source Card Type

The clock source card type:

bits

oc3

Clock Stratum

The level of Stratum clock:

level 3 (reserved for future use)

level 4

Master Clock

The master clock source:

primary

secondary

internal

Current Clock

The current clock source:

primary

secondary

internal

Displayed Information	Description
Primary (or Secondary) Clock Source Type	The clock source type: broadBandClk narrowBandClk externalClk internalClk
Primary (or Secondary) Clock Source Slot	The slot number for the clock source
Primary (or Secondary) Clock Source Line	The line number for the clock source
Primary (or Secondary) Clock Status	The clock status: ok noClock inaccurate
Clock Source Card Type	The clock source card type: bits oc3
Clock Stratum	The level of Stratum clock: level 3 (reserved for future use) level 4
Master Clock	The master clock source: primary secondary internal
Current Clock	The current clock source: primary secondary internal

Switching to the Secondary Clock

You can force the system to switch between the primary and secondary clocks. The switching direction depends on the current clock. During normal operation, the current clock is the primary clock.

To switch to the clock sources, enter the swclk command.

Saving and Restoring Card Configurations

You can save or restore system configuration from a tftp server on the management network. To use tftp, you must conform to the Cisco file-naming convention and supply a six-character security key. The security system disables tftp file transfers if the key is not configured or does not match. The following procedures explain how to save and restore card configurations.

Backing Up Configurations

You can back up the current MGX 8260 configuration with the dbbkup command. This command captures the configuration information for all cards and saves it to a file on the SCC hard drive. The system assigns a name for this file and reports it to the user.

To save a card configuration, follow these steps:

Step 1 Log onto the desired MGX 8260.

Step 2 At the command prompt, type dbbkup.

The system reports the result of the operation and the name of the backup file.

Step 3 Record the file name for future reference.

Uploading Configurations

The MGX 8260 stores configuration files in the SCC hard drive. You can upload these files to an external server for safekeeping. Before performing this procedure, check your records to determine the name of the backup file you want to upload.

To upload a configuration file, follow these steps:

Step 1 Log onto the workstation running the tftp server.

Step 2 Initiate a tftp session with the target MGX 8260 Media Gateway using the tftp command.

tftp <IP Address>

Specify the IP address of the MGX 8260 management port in standard IP dot notation.

Note tftp is an operating system command executed by the management workstation.

Step 3 Set the transfer mode to binary:

mode binary

Step 4 Start the file transfer using the tftp get command.

get <CardName>_<FileName>.<SecurityKey>

Parameter Description

CardName

The name of the card, such as SCC or NSC

FileName

The name of the configuration file, typically the form:

rxx.xx.xx.cfg

SecurityKey

The six-character alphanumeric security key for the target MGX 8260

Parameter	Description
CardName	The name of the card, such as SCC or NSC
FileName	The name of the configuration file, typically the form: rxx.xx.xx.cfg
SecurityKey	The six-character alphanumeric security key for the target MGX 8260

Step 5 Confirm the file transfer by checking the distribution directory.

Downloading Configurations

The MGX 8260 stores configuration files on the SCC hard drive, so you generally don't need to download a configuration file. However, if you prefer to save configuration files on an external server, you can download the file to the MGX 8260 before invoking dbrstr. Before performing this procedure, check your records to determine the name of the backup file you want to download.

To restore a card configuration, follow these steps:

Step 1 Log onto a workstation and locate the configuration file to download.

Step 2 Initiate a tftp session with the target MGX 8260 Media Gateway using the tftp command.

tftp <IP Address>

Specify the IP address of the MGX 8260 management port in standard IP dot notation.

Note tftp is an operating system command executed by the management workstation.

Step 3 Set the transfer mode to binary using the tftp mode command.

mode binary

Step 4 Start the file transfer using the tftp put command.

put <CardName>_<FileName>.<Security Key>

Parameter Description

CardName

The name of the card, such as SCC or NSC

FileName

The name of the configuration file, in the form:

rxx.xx.xx.cfg

SecurityKey

The six-character alphanumeric security key for the target MGX 8260

Parameter	Description
CardName	The name of the card, such as SCC or NSC
FileName	The name of the configuration file, in the form: rxx.xx.xx.cfg
SecurityKey	The six-character alphanumeric security key for the target MGX 8260

Step 5 Confirm the file transfer.

Restoring Configurations

You can restore the MGX 8260 to a previous configuration using the dbrstr command. This command retrieves a configuration file from the SCC hard disk and restores all cards accordingly. Before performing this procedure, check your records to determine the name of the backup file you want to restore.

Warning This is a service-affecting action. Perform this task when the equipment is down or during a pre-arranged maintenance window.

To restore MGX 8260 configurations, follow these steps.

Step 1 Log onto the desired MGX 8260.

Step 2 At the command prompt, type database restore command and the confutation file name. Omit the .cfg extension from the file name.

For example:

dbrstr scc_mms111

Step 3 Restart the target card using the resetcd command.

Upgrading and Downgrading Software Images

You can upgrade the system image for any card from a tftp server on the management network. To use tftp, you must conform to the Cisco file-naming convention, and supply a security key. The security system disables tftp file transfers if the key is not configured or does not match. The following procedures explain how to download software images and upgrade or downgrade the card image.

Downloading Software Images

The MGX 8260 can store up to 10 software images per card type.

To download a new software image, follow these steps:

Step 1 Log onto the workstation running the tftp server and locate the image file to download.

Step 2 Initiate a tftp session with the target MGX 8260 Media Gateway using the tftp command.

tftp <IP Address>

Specify the IP address of the MGX 8260 management port in standard IP dot notation.

Note tftp is an operating system command executed by the management workstation.

Step 3 Set the transfer mode to binary:

mode binary

Step 4 Start the file transfer using the tftp put command.

put <Image>.<Security Key>

Parameter Description

Image

The path and file name of the software image. Typically the name indicates the card type and software release. For example, scc_r01.02.03 indicates SCC software release 1.2.3.

SecurityKey

The six-character alphanumeric security key for the target MGX 8260

Parameter	Description
Image	The path and file name of the software image. Typically the name indicates the card type and software release. For example, scc_r01.02.03 indicates SCC software release 1.2.3.
SecurityKey	The six-character alphanumeric security key for the target MGX 8260

Step 5 Confirm the file transfer.

Upgrading the Card Image

Warning This is a service-affecting action. Perform this task during light traffic periods or in a pre-arranged maintenance window.

To upgrade the software image on a card, enter the upgdcd command, specifying the card number to upgrade and the file name for the software image.

upgdcd <slot> <image>

Parameter Description

slot

The slot number of the SCC, NSC, or BSC to upgrade. Values: 1 to 16

image

The path and file name of the software image. Typically the name indicates the card type and software release. For example, scc_r01.02.03 indicates SCC software release 1.2.3.

Parameter	Description
slot	The slot number of the SCC, NSC, or BSC to upgrade. Values: 1 to 16
image	The path and file name of the software image. Typically the name indicates the card type and software release. For example, scc_r01.02.03 indicates SCC software release 1.2.3.

For example:

upgdcd 9 scc_r01.02.03.img

Downgrading the Card Image

You can downgrade the software image to any currently stored in memory.

Warning This is a service-affecting action. Perform this task during light traffic periods or in a pre-arranged maintenance window.

To downgrade the software image on a card, use the dngdcd command, specifying the card number to downgrade and the file name for the software image.

dngdcd <slot> <image>

Parameter	Description
slot	The slot number of the SCC, NSC, or BSC to upgrade. Values: 1 to 16
image	The path and file name of the software image. Typically the name indicates the card type and software release. For example, scc_r01.02.03 indicates SCC software release 1.2.3.

For example:

dngdcd 9 scc_r01.02.02.img

Table of Contents

System Management

Adding Community Strings

Deleting Community Strings