Useful First Generation NetVanta 2000 Series CLI Commands
The CLI (Command Line Interface) on the first generation NetVanta 2000 Series is built on Unix technology, so if you are familiar with Unix commands, you should be able to browse through the menus very easily. If not, a simple command list is displayed below to navigate through the unit.
help – displays a list of available commands and directories in the current directory
ls – works pretty much the same as help, it is a Unix command for displaying current content.
list – It displays current settings on unit. It only works on certain directories, such as config/ip to display Ethernet Configuration and status.
cd – changes directory. If going back one directory, type cd .. (if you type in the directory name, it also takes you into that directory)
You can also go to multiple subdirectories by typing a forward slash (/) in between directory names. (i.e NetVanta:/> config/ip/)
If you don’t know what a specific command does, simply type in the command and the NetVanta should tell you the required format as well as the information needed to make the command work. Messages in brackets < >. (i.e. address <ifname> static -ip <ipaddr>/<mask|bits>> means: type address, enter the interface name, type static –ip, enter the IP address, type /, enter the subnet mask.
Obviously, the easiest way to set the unit up is via the Web Interface. If you run into a situation where there is not a way you can configure the unit via the web interface, then you can use the following commands to set the unit up for HTTP access and admin login, so that you can set it up from your PC over the Internet.
Setting up a static WAN IP address and Subnet Mask.
Note: WAN interface is represented by Interface ETH1. LAN interface is represented by Interface ETH0. You should already have access on the LAN interface to do this.
1. Type the following command: config/ip and press Enter.
2. You should now be at the NetVanta:/> config/ip/ prompt.
3. Type the following command: list
4. This command should give you information about your Network Interface such as WAN and LAN IP addresses, along with MAC addresses and other information about the interfaces.
Go back to the NetVanta:/> prompt by typing the following command twice: cd ..
To logout, type the following command: logout
By enabling IKE tracing, you can see the status of Main or Aggressive mode and Quick Mode being completed. If you don’t see Main or Aggressive mode complete, then there may be a problem with the IKE setup. If Main or Aggressive mode completes, but Quick Mode does not, then there may be a problem with the IPSec, Inbound or Outbound Policies.
Enabling Trace for IKE
1. At the NetVanta:/> prompt, type in the following command: traceenable IKE and press Enter.
2. At the NetVanta:/> prompt, type in the following command: tracestart and press Enter.
Disabling Trace for IKE
At the NetVanta:/> prompt, type in the following command: tracestopand press Enter.
At the NetVanta:/> prompt, type in the following command: tracedisable IKE and press Enter.
netstat is a useful tool for checking your network configuration and activity. It displays the total number of associations or sessions on the unit. The unit has a maximum of 650 outbound simultaneous sessions.