Index

A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z

A

AAA (authentication, authorization, accounting) overview   1

aaa commands

aaa accounting acct-stop on-aaa-failure   1

aaa accounting acct-stop on-access-deny   1

aaa accounting duplication   1

aaa accounting interval   1

aaa accounting ppp default   1

aaa authentication enable default   1, 2

aaa authentication login   1

aaa authentication ppp default   1

aaa delimiter   1

aaa dns primary   1

aaa dns secondary   1

aaa domain-map   1, 2, 3, 4

aaa duplicate-address-check   1

aaa new-model   1, 2

aaa parse-order   1

aaa subscriber limit per-port   1

aaa subscriber limit per-vr   1

aaa timeout   1

aaa tunnel assignment-id-format   1

aaa tunnel client-name   1, 2

aaa tunnel ignore   1

aaa tunnel password   1, 2

aaa wins primary   1

aaa wins secondary   1

See also show aaa commands1

AAA failure, notifying RADIUS   1

AAA services

accounting   1

and TACACS+   1

authentication   1, 2

authorization   1

overview   1

Access-Accept messages   1, 2

Access-Challenge messages   1

Access-Reject messages   1, 2

Access-Request messages   1, 2

accounting

AAA overview   1

configuring servers   1, 2

description   1

server access   1

server request processing limit   1

SNMP traps   1

Acct-Input-Gigapackets (RADIUS attribute 26-35)   1

Acct-Input-Gigawords (RADIUS attribute 52)   1

Acct-Off messages   1

Acct-On messages   1

Acct-Output-Gigapackets (RADIUS attribute 26-36)   1

Acct-Session-Id (RADIUS attribute 44)   1

Acct-Start messages   1

Acct-Stop messages   1

Acct-Tunnel-Connection (RADIUS attribute 68)   1

Acct-Tunnel-Link-Reject messages   1

Acct-Tunnel-Link-Start messages   1

Acct-Tunnel-Link-Stop messages   1

Acct-Tunnel-Reject messages   1

Acct-Tunnel-Start messages   1

Acct-Tunnel-Stop messages   1

address command   1

address command, L2F   1

address pool

mapping to domain name   1

ranges   1

address-pool-name command   1

ATM subinterface

configuring multiple clients   1, 2

configuring single clients   1, 2

attributes

host profile   1

attribute value pair

See AVP1

audience for documentation   1

authentication

AAA overview   1

configuring servers   1, 2

configuring TACACS+   1

description   1

preauthenticating users   1

redirected authentication   1

server access   1

server request processing limit   1

SNMP traps   1

authentication login, TACACS+   1

authorization, AAA overview   1

authorization, description   1

B

backoff algorithm   1

baseline commands

baseline aaa   1, 2

baseline dhcp-local   1

baseline dhcp relay   1

baseline dhcp server   1

baseline ip http   1

baseline local pool   1

baseline radius   1

baseline tacacs   1

BOOTP (BOOTstrap Protocol)   1, 2

B-RAS applications

client to server interaction   1

configuring

authentication and accounting servers   1, 2

B-RAS license   1

DHCP features   1

IP addresses for remote clients   1

local address servers   1, 2

name server addresses   1, 2

SDX client   1

timeout   1

UDP checksums   1

creating an IP interface   1

DHCP proxy client and server   1

Dynamic Host Configuration Protocol. See DHCP1

IP hinting   1

limiting active subscribers   1

local address server   1

mapping address pool to domain   1

mapping user domain names to a virtual router   1

mapping user requests

without a configured domain name   1

without a valid domain name   1

monitoring   1

multiple clients per ATM subinterface   1

overview   1

preauthenticating users   1

protocol support   1

redirected authentication   1

references   1, 2

SDX client. See SDX1

SDX client. See SDX client1

single clients per ATM subinterface   1

SNMP traps   1

specifying a single name for a domain   1

syslog messages   1

virtual router   1

C

Called-Station-Id (RADIUS attribute 30)   1

Calling-Station-Id (RADIUS attribute 31)   1

CDs

ERX documentation CD   1

ERX software CD   1

Class (RADIUS attribute 25)   1

CLI (command line interface)

authorization and authentication messages   1, 2

commands used to modify RADIUS attributes   1, 2

client-name command   1

Common Open Policy Service protocol. See COPS1

configuring

authentication and accounting servers   1, 2

B-RAS licenses   1

DHCP features   1, 2

DHCP local server   1, 2

DHCP Proxy Client   1

DHCP relay and BOOTP relay   1

domain names   1, 2

HTTP local server   1, 2

idle or session timeout for B-RAS   1

IP addresses for remote clients   1

IP interfaces that support PPP clients   1

L2F   1

local address servers   1, 2

name server addresses   1, 2

realm names   1, 2

SDX   1

SDX client   1

TACACS+   1

usernames and passwords from a domain   1, 2

Connect-Info (RADIUS attribute 77)   1

conventions defined

icons   1

syntax   1

text   1

COPS (Common Open Policy Service protocol)   1, 2, 3, 4, 5

customer support   1

D

deadtime command   1

default domain name   1

destination

changing   1

DHCP (Dynamic Host Configuration Protocol)   1, 2, 3, 4, 5

configuring BOOTP Relay   1

configuring DHCP and BOOTP   1

configuring proxy client and server   1

Integrated DHCP Access Server (I-DAS)   1

overview   1

DHCP local server

configuring   1, 2

equal-access mode   1

address allocation   1

configuring   1, 2

connection process   1

HTTP local server   1

local pool selection   1

overview   1, 2

SDX   1

SDX (Service Deployment System)   1

line module support   1

local pool selection, equal-access   1

using framed IP address   1

using pool name   1

local pool selection, standalone   1

using giaddr   1

using received interface IP address   1

modes   1

monitoring   1, 2

overview   1

standalone mode

address allocation   1

configuring   1, 2

local pool selection   1

overview   1, 2

DHCP pool commands

default-router   1

dns-server   1

domain-name   1

lease   1

netbios-name-server   1

netbios-node-type   1

network   1

reserve   1

server-address   1

Digital Subscriber Line Access Multiplexers. See DSLAMs1

disable proxy lcp command   1

DNS (Domain Name System)   1, 2

assigning IP addresses   1

documentation set, ERX   1

CD   1

comments on   1

domain names

mapping to virtual routers   1, 2, 3

mapping user requests without a configured domain name   1

mapping user requests without valid domain name   1

specifying single name for users   1

stripping domain name   1

using delimiters other than @   1

using either domain or realm as domain name   1

using realm name as domain name   1

DSLAMs (Digital Subscriber Line Access Multiplexers)   1

DSLs (digital subscriber lines)   1

Dynamic Host Configuration Protocol. See DHCP1, 2

dynamic IP interfaces   1, 2

E

Egress-Policy-Name (RADIUS attribute 26-11)   1

enable proxy authenticate command   1

enduring IP address   1

equal-access DHCP local server   1

ERX-1400 series   1

ERX-700 series   1

ERX documentation set   1

CD   1

comments on   1

ERX models   1

ERX system, remote access. See B-RAS applications1

Event-Timestamp (RADIUS attribute 55)   1

F

fragmentation, packet   1

fragmentation and reassembly   1

Framed-Compression (RADIUS attribute 13)   1

Framed-Ip-Address (RADIUS attribute 8)   1

Framed-Ip-Netmask (RADIUS attribute 9)   1

H

home gateway   1

hostname command   1

host profile attributes   1

HTTP local server   1

configuring   1, 2

monitoring   1, 2

http server command   1

I

icons defined, notice   1

I-DAS, RADIUS accounting support for   1

identification command   1, 2

Ingress-Policy-Name (RADIUS attribute 26-10)   1

installing the system software   1

integrated DHCP access server (I-DAS)

RADIUS accounting support for   1

interfaces, configuring for DHCP local server   1

Interim-Acct messages   1

IP addresses

assigning to name servers   1, 2

configuring for remote client   1

enduring   1

token   1

ip address-pool dhcp   1

ip commands

ip address-pool dhcp   1, 2

ip address-pool local   1

ip dhcp-server   1

ip local pool   1

ip local pool snmpTrap   1

ip local pool warning   1

ip dhcp-local commands

ip dhcp-local excluded-address   1

ip dhcp-local limit   1

ip dhcp-local pool   1

ip-hint command   1

IP hinting   1

ip http commands

ip http access-class   1

ip http max-connection-time   1

ip http not-found-url   1

ip http port   1

ip http realm   1

ip http root-refresh   1

ip http root-url   1

ip http same-host-limit   1

K

key command   1

L

L2F

AAA support   1

configuring   1

connection shutdown   1

encapsulation   1

fragmentation   1

functionality   1

home gateway   1

how L2F works   1

implementing   1

managing   1

NAS (network access server)   1

L2F commands

l2f checksum   1

l2f destruct-timeout   1

l2f drain   1

l2f drain destination   1

l2f drain tunnel   1

l2f ignore-receive-data-sequencing   1

l2f shutdown   1

l2f shutdown destination   1

l2f shutdown session   1

l2f shutdown tunnel   1

See also show l2f commands   1

L2F tunnel authentication   1

L2TP

defining   1

implementation   1

managing   1

monitoring   1

L2TP access concentrator

See LAC1

l2tp commands   1, 2

l2tp checksum   1

l2tp destination profile   1

l2tp destruct-timeout   1

l2tp drain   1

l2tp drain destination   1

l2tp drain tunnel   1

l2tp fail-over-within-preference   1

l2tp ignore-receive-data-sequencing   1

l2tp retransmission   1, 2

l2tp shutdown   1

l2tp shutdown destination   1

l2tp shutdown session   1

l2tp shutdown tunnel   1

l2tp tunnel idle-timeout   1

l2tp tunnel-switching   1

l2tp tunnel test   1

L2TP network server

See LNS1

LAC   1

configuring   1

configuring, before   1

function1

modules supported   1

sequence of events   1

Layer Two Forwarding. See L2F1

license, B-RAS   1

license b-ras command   1

line vty command   1

LNS   1

configuring   1

configuring, before   1

modules supported   1

round-robin   1

sequence of events   1

local address pool

mapping to domain name   1

ranges   1

local address server   1, 2

configuring   1

pool ranges   1

SNMP thresholds   1

local host command   1

login authentication command   1

logout subscribers name command   1

loopback command   1

M

manuals, ERX   1

comments on   1

on CD   1

max-sessions command   1, 2

medium ipv4   1

medium ipv4 command   1, 2

MIBs   1

models, ERX   1

monitoring

DHCP local server   1, 2

HTTP local server   1, 2

L2F   1

remote access   1, 2

monitoring L2TP   1

N

name servers, assigning IP addresses   1, 2, 3

NAS (network access server)   1, 2, 3

NAS-Identifier (RADIUS attribute 32)   1

NAS-IP-Address (RADIUS attribute 4)   1

NAS-Port (RADIUS attribute 5)   1

NAS-Port-Id (RADIUS attribute 87)   1

NAS-Port-Type (RADIUS attribute 61)   1

network access server. See NAS1, 2, 3

none domain name   1

non-PPP equal access   1

configuration example   1, 2

no radius client command   1

notice icons defined   1

O

Output-Gigawords (RADIUS attribute 53)   1

override-user command   1, 2

P

packet fragmentation   1

password command   1, 2

peer   1

persistent tunnels, creating   1

Point-to-Point Protocol. See PPP1

PPP (Point-to-Point Protocol)

B-RAS service support   1

Pppoe-Description (RADIUS attribute 26-24)   1

preauthenticating B-RAS users   1

preference   1

preference command   1, 2

primary authentication/accounting RADIUS server   1

privilege authentication

TACACS+   1

R

RADIUS (Remote Authentication Dial-In User Service)

AAA failure   1

authentication and accounting servers   1, 2

CLI AA messages   1

client to server interaction   1

configuring servers   1, 2

description   1, 2

direct server access   1

message types supported   1, 2

RADIUS attributes, ERX-supported   1

RADIUS attributes descriptions   1, 2

RFCs supported   1, 2

round-robin server access   1

server access   1

server request processing limit   1

services   1

SNMP traps   1

specifying servers   1

syslog messages   1

traffic shaping for PPP over ATM interfaces   1

vendor-specific attributes (VSA)   1

VSA formats   1

VSAs for dynamic IP interfaces   1

radius commands

radius acct-session-id-format   1, 2

radius algorithm   1, 2

radius algorithm command   1

radius calling-station-delimiter   1, 2

radius calling-station-format   1, 2

radius client   1

radius dsl-port-type   1, 2

radius ethernet-port-type   1, 2

radius ignore framed-ip-netmask   1

radius include acct-session-id access-request   1

radius include called-station-id   1

radius include framed-compression   1

radius include framed-ip-add acct-start   1

radius include framed-ip-addr   1

radius include framed-ip-netmask   1

radius include nas-port   1

radius include nas-port-type   1

radius include tunnel-medium-type   1

radius nas-identifier   1

radius nas-port-format   1, 2, 3

radius override nas-ip-addr tunnel-client-endpoint   1

radius rollover-on-reject   1

radius server   1

radius trap acct-server-not-responding   1

radius trap auth-server-not-responding   1

radius trap no-acct-server-responding   1

radius trap no-auth-server-responding   1

radius tunnel-accounting   1

radius udp-checksum   1

radius update-source-addr   1, 2, 3

See also show radius commands1

random selection   1

rate limits   1

realm name usage   1, 2

redirected authentication   1

release notes   1

remote access (B-RAS)

See B-RAS applications.1, 2

remote clients, IP addresses for   1

remote host command   1

remote system   1

retransmit command   1

round-robin

LNS   1

S

SDX (Service Deployment System)   1, 2, 3, 4

SDX client

configuring   1, 2, 3, 4

series

ERX-1400   1

ERX-700   1

server-name command   1

Service Deployment System. See SDX1

Service Deployment System.See SDX1

service dhcp-local command   1

session   1

set dhcp relay commands

set dhcp relay   1

set dhcp relay agent   1

show aaa commands

show aaa accounting   1

show aaa accounting duplication   1

show aaa accounting interval   1

show aaa delimiters   1

show aaa domain-map   1

show aaa name-servers   1

show aaa statistics   1

show aaa subscriber per-port-limit   1

show aaa subscriber per-vr-limit   1

show aaa timeout   1

show cops info command   1

show dhcp commands

show dhcp relay   1

show dhcp relay statistics   1

show dhcp server   1

show dhcp server statistics   1

show ip commands

show ip local pool   1

show ip local-pool statistics command   1

show ip dhcp-local commands

show ip dhcp-local binding   1

show ip dhcp-local excluded   1

show ip dhcp-local limits   1

show ip dhcp-local pool   1

show ip dhcp-local reserved   1

show ip dhcp-local statistics   1

show ip http commands

show ip http scalar   1

show ip http server   1

show ip http statistics   1

show l2f commands

show l2f   1

show l2f destination   1

show l2f destination summary   1

show l2f session   1

show l2f session summary   1

show l2f tunnel   1

show l2f tunnel summary   1

show l2tp commands

show l2tp   1

show l2tp destination   1

show l2tp destination profile   1

show l2tp destination summary   1

show l2tp session   1

show l2tp session summary   1

show l2tp tunnel   1

show l2tp tunnel summary   1

show license b-ras command   1

show radius commands

show radius acct-session-id-format   1

show radius algorithm   1

show radius attributes-ignored   1

show radius attributes-included   1

show radius calling-station-delimiter   1

show radius calling-station-format   1

show radius dsl-port-type   1

show radius ethernet-port-type   1

show radius nas-identifier   1

show radius nas-port-format   1

show radius override   1

show radius rollover-on-reject   1

show radius servers   1

show radius statistics   1, 2

show radius tunnel-accounting   1

show radius udp-checksum   1

show radius update-source-address   1

show sscc

show sscc info   1

show sscc version   1

show subscribers command   1

show tacacs commands

show statistics tacacs   1

show tacacs   1

SNMP traps   1

configuring for RADIUS servers   1

software, installing   1

source-address command   1

specifying

RADIUS servers   1

sscc commands

sscc address   1

sscc enable   1

sscc retryTimer   1

sscc sourceAddress   1

sscc transportRouter   1

standalone DHCP local server   1

strip-domain command   1

subscribers

accounting messages   1, 2

authorization and authentication messages   1, 2

ERX system   1

limiting active subscribers   1

syntax conventions defined   1

syslog messages   1

T

TACACS+

AAA services   1

authentication login process   1

configuration   1

NAS (network access server)   1, 2

privilege authentication   1

TACACS+ daemon   1, 2

TACACS+ host   1, 2

TACACS+ commands

aaa authentication enable default   1, 2

aaa authentication login   1

aaa new-model   1, 2

baseline tacacs   1

tacacs-server host   1

tacacs-server key   1

tacacs-server source-address   1

tacacs-server timeout   1

See also show tacacs commands1

TCP

and TACACS+   1

Terminal Access Controller Access Control System + protocol. See TACACS+1

test aaa command   1

text conventions defined   1

timeout command   1

token IP address   1

traffic shaping for PPP over ATM   1

transmitting packets   1

tunnel   1

defined   1

Tunnel-Assignment-Id (RADIUS attribute 82)   1

Tunnel-Client-Auth-Id (RADIUS attribute 90)   1

Tunnel-Client-Endpoint (RADIUS attribute 66)   1

tunnel command   1

tunnel commands, L2F

tunnel   1

Tunnel-Medium-Type (RADIUS attribute 65)   1

tunnel password command   1

Tunnel-Preference (RADIUS attribute 83)   1

Tunnel-Server-Auth-Id (RADIUS attribute 91)   1

Tunnel-Server-Endpoint (RADIUS attribute 67)   1

tunnel switching   1

Tunnel-Type (RADIUS attribute 64)   1

type command   1

l2f   1

U

UDP checksums   1, 2, 3, 4

udp-port command   1

updating the system software   1

user domain

mapping to L2TP tunnel   1, 2

User-Name (RADIUS attribute 1)   1

V

vendor-specific attributes. See VSAs1

virtual-router command   1

virtual routers

mapping user domain names   1, 2, 3

redirected authentication   1

VSA (Vendor Specific Attributes)

formats   1

VSA (vendor-specific attributes)

for dynamic IP interfaces   1

W

Web access to ERX system   1, 2

WINS (Windows Internet Name Service)

assigning IP addresses   1, 2, 3