MANUAL PAGE     1/190 80-CRA 119 1170/1 Uen C

Security Service Command Reference

Copyright

© Ericsson AB 2009–2010. All rights reserved. No part of this document may be reproduced in any form without the written permission of the copyright owner.

Disclaimer

The contents of this document are subject to revision without notice due to continued progress in methodology, design and manufacturing. Ericsson shall have no liability for any error or damage of any kind resulting from the use of this document.

Trademark List

Contents

1   Commands

This document provides command syntax and usage guidelines for commands used in the configuration and operation of the advanced services support available when an Advanced Service (ASE) card is installed in a SmartEdge® router. For an overview of the ASE card infrastructure, see Reference [1]. For configuration tasks, see Reference [2] or Reference [3].

1.1   asp

asp slot-id/asp-id

1.1.1   Command Mode

Advanced Services Processor (ASP) pool configuration

1.1.2   Syntax Description

1.1.3   Usage Guidelines

Specifies the ASPs associated with the ASP pool.

1.1.4   Default

No ASPs are associated with an ASP pool.

1.1.5   Examples

The following example specifies six ASPs on four ASE cards to associate with the ASP pool being configured:

[local]Redback(config-asp-pool-mode)#asp 1/1 
[local]Redback(config-asp-pool-mode)#asp 1/2 
[local]Redback(config-asp-pool-mode)#asp 3/1 
[local]Redback(config-asp-pool-mode)#asp 3/2 
[local]Redback(config-asp-pool-mode)#asp 4/1 
[local]Redback(config-asp-pool-mode)#asp 5/1

1.2   asp-count

asp-count number

1.2.1   Command Mode

ASP group configuration

1.2.2   Syntax Description

1.2.3   Default

No number of ASPs are associated with an ASP group.

1.2.4   Usage Guidelines

Specifies the number of ASPs requested by the ASP group. In conjunction with the priority assigned to the ASP group, ASPs up to the number requested will be allocated to the group from the ASP pool associated with the group.

1.2.5   Examples

The following example specifies that two ASPs are requested by the ASP group.

[local]Redback(config-asp-group-mode)#asp-count 2

1.3   asp security default

asp security default

1.3.1   Command Mode

global configuration

1.3.2   Syntax Description

This command has no keywords or arguments.

1.3.3   Default

None.

1.3.4   Usage Guidelines

Configures the ASP to provide the security service and enters the ASP security default configuration mode.

1.3.5   Examples

[local]Redback(config)#asp security default 

1.4   asp group

asp group group-name

1.4.1   Command Mode

global configuration

1.4.2   Syntax Description

1.4.3   Default

No ASP groups are configured.

1.4.4   Usage Guidelines

Creates or selects an ASP group and enters ASP group configuration mode.

1.4.5   Examples

The following example configures the ASP group ipsec_group1

[local]Redback(config)#asp group ipsec_group1

1.5   asp-group

asp-group group-name service service-name

1.5.1   Command Mode

context configuration

1.5.2   Syntax Description

1.5.3   Default

No ASP groups are associated with an ASE-based service.

1.5.4   Usage Guidelines

Associates an ASP group for the specified service with the context in which this command is entered.

1.5.5   Examples

The following example associates ASP group ipsec_group1 with the context c3.

[local]Redback(config)#context c3 
[local]Redback(config-ctx)#asp-group ipsec_group1 service security

1.6   asp pool service

asp pool pool-name service service-name

1.6.1   Command Mode

global configuration

1.6.2   Syntax Description

1.6.3   Default

No ASP pool is configured by default.

1.6.4   Usage Guidelines

Creates or selects an ASP pool and enters ASP pool configuration mode.

1.6.5   Examples

The following example configures an ASP pool ipsec_pool1 for use with the ASE-based service security.

[local]Redback(config)#asp pool ipsec_pool1 service security

1.7   card ase

card ase slot

1.7.1   Command Mode

global configuration

1.7.2   Syntax Description

1.7.3   Usage Guidelines

Specifies an ASE card for a slot, or selects one for modification, and enters card configuration mode.

1.7.4   Examples

The following example configures an ASE card in slot 4:

[local]Redback(config)#card ase 4

1.8   debug asp engine

debug asp slot/asp-id engine all {trace | log} {buffer | console } [level level ]

1.8.1   Command Mode

exec

1.8.2   Syntax Description

1.8.3   Usage Guidelines

Enables the generation of debug messages for a specific ASP engine on a specific ASE card.

1.8.4   Examples

Enables the generation of debug messages for the ASP engine of a specific ASP on a specific ASE card.

[local]Redback #debug asp 2/1 engine all

1.9   debug security

debug security {all | asp | config | general | ppa | rcm | service | state | tunnel}

1.9.1   Command Mode

exec

1.9.2   Syntax Description

1.9.3   Usage Guidelines

Enables the generation of debug messages for the ASE-based security service.

1.9.4   Examples

The following example enables the generation of all debug messages for the ASE-based security service.

[local]Redback#debug security all

1.10   log server

log server server-ip [transport transport-protocol] [port port]

1.10.1   Command Mode

ASP security default configuration

1.10.2   Syntax Description

1.10.3   Default

No log server is configured by default.

1.10.4   Usage Guidelines

Configures the IP address and destination port of the log server. The log server should be reachable through context local.

1.10.5   Examples

[local]Redback(config)#asp security default 
[local]Redback(config-asp-security-default)#log server 10.1.1.2 udp 514 10.1.0.5

1.11   log source

log source source-ip [context context-name]

1.11.1   Command Mode

ASP security default configuration

1.11.2   Syntax Description

1.11.3   Default

No log source is configured by default.

1.11.4   Usage Guidelines

Configures the IP address and the context through which the log source is reachable.

1.11.5   Examples

[local]Redback(config-asp-security-default)#log server 10.1.1.2 udp 514 10.1.0.5

1.12   maximum subscribers

maximum subscribers max-subscribers

1.12.1   Command Mode

ASP pool configuration

1.12.2   Syntax Description

1.12.3   Default

The default number of subscribers admitted per ASP is 8,124.

1.12.4   Usage Guidelines

Specifies the maximum number of subscribers admitted for all ASPs associated with an ASP pool. Each ASP added to the pool can support a maximum of 32,768 units. Subscribers consume a load of 1 unit, so each ASP supports 32,768 subscribers, or a combination of subscribers and tunnels with a maximum load within 32,768 units.

1.12.5   Examples

The following example specifies a limit of 16,384 subscribers for each ASP associated with ASP pool p1.

[local]Redback(config)#asp pool p1 service security 
[local]Redback(config-asp-pool-mode)#maximum subscribers 16384

1.13   maximum tunnels ipsec

maximum tunnels ipsec max-tunnels

1.13.1   Command Mode

ASP pool configuration

1.13.2   Syntax Description

1.13.3   Default

The default number of IPsec tunnels admitted per ASP is 2,048.

1.13.4   Usage Guidelines

Specifies the maximum number of IPsec tunnels for all ASPs associated with an ASP pool. Each ASP added to the pool supports a maximum of 32,768 units. IPsec tunnels consume a load of 8 units, so each ASP supports 4,096 tunnels, or a combination of tunnels and subscribers with a maximum load within 32,768 units.

1.13.5   Examples

The following example specifies a limit of 1,024 IPsec tunnels for each ASP associated with ASP pool p1.

[local]Redback(config)#asp pool p1 service security 
[local]Redback(config-asp-pool-mode)#maximum tunnels ipsec 1024

1.14   pool

pool pool-name

1.14.1   Command Mode

ASP group configuration

1.14.2   Syntax Description

1.14.3   Default

No ASP pool is identified for an ASP group by default.

1.14.4   Usage Guidelines

Specifies the ASP pool associated with the ASP group.

1.14.5   Examples

The following example specifies that the existing ASP pool ipsec_pool1 is associated with this ASP group.

[local]Redback(config)#asp group ipsec_group1 
[local]Redback(config-asp-group-mode)#pool ipsec_pool1

1.15   priority

priority number

1.15.1   Command Mode

ASP group configuration

1.15.2   Syntax Description

1.15.3   Default

No priority for an ASP group is configured by default.

1.15.4   Usage Guidelines

Configures the priority for the ASP group. Priority is used to determine the order in which ASPs are allocated to the ASP groups.

1.15.5   Examples

The following example configures a priority of 100 for the ASP group. This ASP group will be allocated ASPs before ASP groups with lower priority.

[local]Redback(config-asp-group-mode)#priority 100

1.16   show asp

show asp [slot-id/asp-id]

1.16.1   Command Mode

all modes

1.16.2   Syntax Description

1.16.3   Usage Guidelines

Displays information about ASPs. With no parameters, a one-line summary for each ASP providing the pool name and the group name to which the ASP belongs, the operational state of the ASP, whether the ASP is acting as an active or backup ASP, and the service the ASP provides is displayed. With an ASP specified, the same information for the specified ASP is displayed.

1.16.4   Examples

[local]Redback#show asp
 ASP-Name  Oper-State  Active/Backup Pool       Group         Service

    1/1    up          active        pool1       group1       security

    1/2    up          active        pool2       group2       security

    2/1    up          active        pool_1      ha-grp1      security

    11/1   down        active        ipsec_pool1 ipsec_group1 security


[local]Redback#show asp 11/1
ASP ID : 11/1
        Operating State : up            
        Active or Backup : active           
        Pool : ipsec_pool1 
        Group : ipsec_group1 
        Service : security 

1.17   show asp group

show asp group [group-name | detail]

1.17.1   Command Mode

all modes

1.17.2   Syntax Description

1.17.3   Usage Guidelines

Displays information about ASP groups. With no parameters, a one-line summary for each ASP group providing the name of the ASP pool that is referenced by the group, number of configured ASPs for the group and the priority configured for the group is displayed. With an ASP group name specified, the same information is provided for the specified ASP group, and a one line summary for each physical ASP in the ASP group is displayed. With the detail keyword, the same information provided for a single ASP group is displayed for all configured ASP groups.

1.17.4   Examples

[local]Redback#show asp group

ID  Name  Service-Type  Prio  Num-ASPs  Num-ASPs-Assigned

2   ipsec_group1    1    0      1               1 

[local]Redback#show asp group ipsec_group1

Group Name : ipsec_group1
        Service Name : 
        Group ID : 2
        Priority : 0
        Associated Pool : ipsec_pool1
        Configured ASP Count : 1
        Assigned ASP Count : 1
        Assigned ASPs : 
          1. 11/1 (up/active)

1.18   show asp pool

show asp pool [pool-name | detail]

1.18.1   Command Mode

all modes

1.18.2   Syntax Description

1.18.3   Usage Guidelines

Displays information about ASP pools. With no parameters, a one-line summary for each ASP pool providing the pool name, number of configured ASPs for the pool and the service to which the pool belongs is displayed. With an ASP pool name specified, the service which is being provided by the ASP pool, the ASP groups that are referencing it and the set of physical ASPs that belong to the ASP pool and a one line summary for each ASP group and physical ASP is displayed. With the detail keyword, the same information provided for a single ASP pool is displayed for all configured ASP pools.

1.18.4   Examples

[local]Redback#show asp pool
Pool-Name     Service-Name  Number-of-ASPs   

ipsec_pool1   security           2
ipsec_pool2   security           0

[local]Redback#show asp pool ipsec_pool1

Pool Name : ipsec_pool1
        Service Name : security
        Pool ID : 2 
        ASP Groups :
        1. ipsec_group1

        Configured ASPs : 
        1. 11/1 (up/active)

[local]Redback#show asp pool detail

Pool Name : ipsec_pool1
        Service Name : security
        Pool ID : 1
        ASP Groups :
        1. ipsec_group1
        Configured ASPs :

        1. 11/1 (up/active)

Pool Name : ipsec_pool2
        Service Name : security
        Pool ID : 2
        ASP Groups :
        1. group2
        Configured ASPs :

        1. 1/2 (up/active)

Glossary

Reference List