3Com Router User Manual

							IP Count Configuration367
Configuring IP Count on an interface can enable packet accounting on the 
interface. You can configure to make statistics on the packets input or output on 
the interface, as well as packets denied by firewall.
Perform the following configuration in interface view.
Ta b l e 400   Configure IP Count on an interface
By default, IP Count is not enabled on interfaces.
3Configure IP Count List
IP Count list is configured for the purpose of classifying the statistics made by IP 
Count. That is, if IP Count lists have been configured, IP Count service will 
determine whether an input or output packet matches any IP Count list before 
making statistics on it. If a match has found, the statistics about the packet will be 
retained in Interior-List. If not, it will be kept in Exterior-List.
Perform the following configuration in system view.
Ta b l e 401   Configure IP Count list
By default, IP Count statistics rules are not configured.
4Configure Upper Threshold of Exterior-List Accounting Entries
The following command is used for specifying count maximum of exterior, that is, 
the max entries number of the packets incompliant with the IP Count lists. 
Perform the following configuration in system view.
Ta b l e 402   Specify count maximum of exterior
OperationCommand
Set IP Count to make statistics on the input 
packets on the current interfaceip count inbound-packets
Disable IP Count to make statistics on the input 
packets on the current interfaceundo ip count inbound-packets
Set IP Count to make statistics on the output 
packets on the current interfaceip count outbound-packets
Disable IP Count to make statistics on the 
output packets on the current interfaceundo ip count outbound-packets
Set IP Count to make statistics on the packets 
denied by the firewall on the current interfaceip count firewall-denied [ 
inbound-packets | 
outbound-packets ]
Disable IP Count to make statistics on the 
packets denied by the firewall on the current 
interfaceundo ip count firewall-denied [ 
inbound-packets | 
outbound-packets ]
OperationCommand
Configure an IP Count listip count table ip-address mask
Delete the IP Count listundo ip count table [ ip-address 
mask ]
OperationCommand
Specify count maximum of exteriorip count exterior-threshold 
number
Restore the default count maximum of exteriorundo ip count 
exterior-threshold 
						

							368CHAPTER 23: CONFIGURING IP COUNT
The default max entries number of exterior is set to 0, namely, the packets that do 
not match the rules will not be counted.
5Configure Upper Threshold of Interior-List Accounting Entries
The following command is used for specifying count maximum of interior, that is, 
the max entries number of the packets compliant with the IP Count lists. 
Perform the following configuration in system view.
Ta b l e 403   Specify count maximum of interior
By default, the upper threshold of Interior-List entries is 512.
6Configure Timeout of IP Count Entries
The following command is used for configuring timeout time for IP Count entries. 
If no new packets are received within the timeout time, IP Count will assume that 
the accounting entries have timed out and the accounting entries will be deleted 
from the list. 
Perform the following configuration in system view.
Ta b l e 404   Configure the period that an IP Count entry exists before it times out
By default, IP Count entries time out after 720 minutes.
Display and Debug IP 
CountTa b l e 405   Display and debug IP Count
Typical Configuration 
ExampleI. Networking Requirements
As shown in Figure 4-1, the router is connected to PC1 and PC2 via the interface 
Ethernet0, and to PC3 and PC4 via Ethernet1. The router is required to make 
statistics on the packets that the router transmitted to and received from PC1. PC1 
is assigned with the address 169.254.10.1 and the mask 255.255.0.0.
OperationCommand
Specify count maximum of interiorip count interior-threshold 
number
Restore the default count maximum of interiorundo ip count 
interior-threshold
OperationCommand
Configure the timeout time of IP Count entriesip count timeout minutes
Restore the default timeout time of IP Count entriesundo ip count timeout
OperationCommand
Clear statistics of IP Countreset ip count
Display IP Count listsdisplay ip count table
Display statistics of IP Countdisplay ip count { 
inbound-packets | 
outbound-packets } { exterior | 
interior | firewall-denied }
Enable IP Count debugging at all levelsdebugging ip count [ data | 
error ] 
						

							Troubleshooting369
II. Networking Diagram
See Figure 4-1 Networking for IP Count application for reference.
III. Configuration Procedure
1Configure the router
aEnable IP Count service
[Router]ip count enable
bSpecify count maximum of exterior-list to 10
[Router]ip count exterior-threshold 10
cSpecify count maximum of interior-list to 10
[Router]ip count interior-threshold 10
dConfigure an IP Count list
[Router]ip count table 169.254.10.1 255.255.0.0
eEnter the interface view of the interface Ethernet 0 and assign it with the 
address 169.254.10.2.
[Router]interface ethernet 0
[Router-Ethernet0]ip address 169.254.10.2 255.255.0.0
fConfigure IP Count to make statistics on the packets input and output on the 
interface.
[Router-Ethernet0] ip count inbound-packets
[Router-Ethernet0] ip count outbound-packets
IV. Test Procedure
1Ping the router on PC1.
ping -n 5 169.254.10.2
2Execute the display command of IP Count to view the IP Count statistics.
[Router] display ip count inbound-packets interior 
  Input packets in Interior-list 
Src               Dst                  Packets        Bytes    Protocol
169.254.10.1    169.254.10.2        5               420      ICMP
[Router] display ip count outbound-packets interior 
Output packets in Interior-list 
Src               Dst                 Packets    Bytes          Protocol
169.254.10.2    169.254.10.1       5           420            ICMP
TroubleshootingFault 1: Executing the display ip count command but no packet 
information is displayed.
Troubleshooting: 
1First, analyze the information that is output by executing the display ip count 
command. The prompt “****** Disable” means that the statistics has not been 
made yet on the data information requiring display. In other words, IP Count has 
not been configured on the interface of the router. 
2IP Count has been configured on the interface. Execute the display ip count 
command, but still, no packet information is displayed. This time, the prompt “Src    
Dst   Packets     Bytes    Protocol” appears, which means that IP Count has not 
been enabled. Use the 
ip count enable command to enable IP Count service. 
						

							370CHAPTER 23: CONFIGURING IP COUNT 
						

							24
CONFIGURING IPX
This chapter contains information on the following topics:
■IPX Protocol Overview
■Configure IPX 
IPX Protocol OverviewNovell IPX protocol is a connectionless protocol. Though both data and destination 
IPX address are included in IPX packet, the protocol cannot confirm whether a 
packet has been forwarded successfully. Such functions are provided by the 
protocol at the layer above IPX. In IPX, any IPX packet is considered as an 
independent entity, not related to any other IPX packets logically or sequentially.
In network model, IPX protocol is in network layer and is the only path for 
information transmission between the upper-layer protocol and the lower-layer 
protocol. IPX protocol functions to fill in addresses, route and forward information 
packets. For packets generated at the upper-layer, IPX forwards them out directly. 
For user data packets, IPX will first find the correct path in RIP route information 
table, and then forward them out.
IPX address
IPX address consists of network and node, represented as network.node. Network 
number is the unique identifier of the physical network, which is 4-byte long and 
is expressed by eight hexadecimal digits. The preamble 0 can be omitted and not 
input.
Node value is, of 6 bytes long, the unique identifier of one node. Every two bytes 
are followed by ., and then the node value is divided into three groups. Each 
group is represented with four hexadecimal numbers with the preamble 0 
omitted.
The following is an example of IPX address:
bc.0.0cb.47
Here, the network ID is bc (more specifically, it is 000000bc), the node value is 
0.0cb.47 (more specifically, it is 0000.00cb.0047). All digits are hexadecimal. In 
the command help, IPX address is expressed in the form of N.H.H.H.
RIP
A router mainly functions to forward packets between networks. When a client 
sends a packet between networks, instead of knowing what path the packet 
should pass to reach the destination, it only knows to transmit the packet to the 
nearest router and forward it via the next router. So a router must provide the  
						

							372CHAPTER 24: CONFIGURING IPX
network routing information which can be sent to destination or needs to be 
forwarded, so that when a packet is received, the next router can be found to 
transmit the packet. The routing information here can be configured both 
statically and dynamically. In a router, collection and maintenance of dynamic 
routing information are realized by RIP.
RIP is an abbreviation for Routing Information Protocol. A router creates and 
maintains an inter-network routing information database (usually called router 
information table) through RIP. When the router starts, RIP begins exchange of 
routing information with external RIPs enabled hosts constantly. When creating a 
new path, RIP adds its routing information into the router information table, and 
when finding a faulty path, RIP deletes its routing information from the router 
information table. It can be seen that the router information table reacts flexibly to 
inter-network error and congestion. In case of error and congestion, the router 
information table can be modified dynamically to change the path. The following 
diagram describes the relation between main components of RIP.
Figure 135   Schematic diagram of the relation between main components of RIP
SAP
SAP is an abbreviation for Service Advertising Protocol. SAP allows providing 
various service nodes, such as file server, print server, NetWare access server and 
remote control console server, and broadcasting their service types and addresses. 
When servers start, they broadcast their services through SAP, and when serves are 
shut down, they indicate the termination of services through SAP.
Through SAP, a router creates and maintains an inter-network service information 
database, usually called service information table. It tells what services are 
provided by the network, and what inter-network addresses these servers have. 
This is an important function, for a workstation cannot establish session with file 
servers if it does not know their addresses.
A server that provides services will periodically broadcast its services and address to 
the adjacent sites. Clients cannot use such information directly, it is collected by 
SAP agents in different routers on the network, and saved in their server 
information tables. Since server information is often dynamically updated by SAP, 
Router
Information Table
Periodic
Broadcast ProcessAging Process
IPX Process
NICs and Drivers
TimerRIP ProcessTimer
Socket
0x453RIP Request/Response PacketsRouting Information 
						

							Configure IPX 373
clients can always obtain the latest server addresses. The following diagram 
describes the relation between main components of SAP.
Figure 136   Schematic diagram of the relation between main components of SAP
Configure IPX IPX configuration includes:
■Activate/deactivate IPX
■Enable IPX interface
■Adjust Novell IPX delay value
■Configure relative parameters of IPX RIP
■Configure relative parameters of IPX SAP
■Modify length of service information reserve queue
■Use trigger refresh
■Deactivate horizontal division
■Configure IPX packet management
■Modify encapsulation format of IPX frame
■Configure IPX on WAN
1Activate/Deactivate IPX
Perform the following task in system view.
Ta b l e 406   Activate/deactivate IPX 
If the node of a router is not specified, then the router will use the MAC address of 
its first Ethernet interface as its node address. 
2Enable IPX Interface
After activating the IPX function of a router, each independent interface must be 
assigned with a network ID so that IPX can run on the interface.
Serv er
Inform ation
Table
Periodic
B roadcast
ProcessAging
Process
IPX
NICs and Drivers
Tim erSA P ProcessTim er
Sock et
0x452SA P R equest/R esponse Pack etsServ er Inf o rm atio n
OperationCommand
Activate IPXipx enable [ node node ]
Deactivate IPX undo ipx enable 
						

							374CHAPTER 24: CONFIGURING IPX
Perform the following task in interface view.
Ta b l e 407   Enable IPX interface
By default, IPX is disabled on all interfaces after being started.
Delete interface IPX, then IPX configuration is removed from the interface, static 
service information and static routing information will be deleted.
3Configure Relative Parameters of IPX RIP
aConfigure IPX static route
RIP is used by IPX to decide the best path. Though a routing protocol can 
refresh a routing table dynamically, you may want to add a static route to 
routing table manually, and clearly specify how to arrive at a destination. Thus, 
the priority of IPX routes is adopted in the 3Com Router series, there is, the 
default priority of static routes is 10 and that of dynamic routes is 60. Smaller 
value indicates higher priority of the route. When selecting routes, among all 
routes to the same destination, a router selects the one of highest priority. 
Note that once you have created a static route, if one section of the route is 
faulty, communication will be interrupted and the message will be sent to a 
destination that does not exist.
Perform the following task in system view.
Ta b l e 408   Configure IPX RIP static route
By default, there is no static route. 
The default priority of IPX static route is 10 and that of IPX dynamic route is 60. 
Smaller value indicates higher priority of the route. For default route, the value 
of network.node should be FFFFFFFE. 
After configuring a default route, enable/disable it according to actual 
conditions.
Ta b l e 409   Enable/Disable a Default Route
By default, enable a default route, i.e. all packets which cannot find their 
routing can be forwarded via this route.
bConfigure updating interval of IPX RIP
You can set the interval for RIP to update IPX module. The router will send RIP 
updated broadcast message at intervals. 
Perform the following task in system view.
OperationCommand
Enable IPX interfaceipx network network
Delete IPX interfaceundo ipx network 
OperationCommand
Configure IPX static routeipx route network.node tick ticks 
hop hops [ preference value]
Remove IPX static routeundo ipx route { network [ 
network.node | float | static | 
preference value ] | all }
OperationCommand
Enable a default routeipx default-route
Disable a default routeundo ipx default-route  
						

							Configure IPX 375
Ta b l e 410   Configure RIP updating period
By default, the time interval for RIP updating period is adjusted to be 60 
seconds.
cConfigure aging period of IPX RIP
Perform the following task in system view.
Ta b l e 411   Configure RIP aging period
By default, the aging period of a routing table item is 3 times that of RIP 
updating period. In other words, if a routing table item is not updated after 3 
RIP updating periods, it will be deleted from the table, so will the 
corresponding dynamic service information table item be deleted from the 
server information table.
dConfigure the maximum size of RIP update packet
Perform the following task in interface view.
Ta b l e 412   Configure the maximum size of RIP update packet
By default, the maximum size of the RIP update packet is 432 bytes. 
eConfigure the maximum number of IPX parallel route
Usually, there is more than one best route to the same destination, which are 
called parallel routes. When the number of parallel route (N) configured 
exceeds 1, the system will implement load-sharing function automatically. 
Reuse multiple paths to send data.
Configuring parallel routes can decrease the possibility of congestion, but 
occupy relatively large memory. Parallel routes are not recommended when the 
memory is not abundant, however, to configure parallel routes can reduce the 
probability of blockage.
Perform the following task in system view.
Ta b l e 413   Configure the maximum number of IPX parallel route
By default, there is one parallel route to a destination.
fConfigure length of route reserve queue
OperationCommand
Configure RIP updating periodipx rip timer update seconds
Restore default value of RIP updating periodundo ipx rip timer update
OperationCommand
Adjust RIP aging periodipx rip multiplier multiplier
Restore default value of RIP aging periodundo ipx rip multiplier
OperationCommand
Configure the maximum size of RIP update packetipx rip mtu bytes
Restore default value of RIP updated packet sizeundo ipx rip mtu 
OperationCommand
Configure the maximum number of IPX parallel routeipx rip load-balance-path 
number
Restore the maximum number of IPX parallel route to 
defaultundo ipx rip 
load-balance-path  
						

							376CHAPTER 24: CONFIGURING IPX
When the length of a route reserve queue is 1, the system only saves one route 
for a destination. If this unique route is faulty, it will be deleted by the system 
and there will be no route to the destination while searching for the substitute 
routes, resulting in huge loss of packets. When the length of a route reserve 
queue exceeds 1, if one route is deleted, it will be replaced with another one as 
soon as possible, so as to prevent huge loss of packets. However,  increasing 
the length of the route reserve queue in turn increases  the system memory 
that will be occupied by IPX module.
Perform the following task in system view.
Ta b l e 414   Configure length of route reserve queue
By default, the length of a route reserve queue is 4.
4Configure Relative Parameters of IPX SAP
aConfigure IPX static service information table item
Generally, only the service notified by NetWare server and saved by the router 
can be used. In special cases, special services can be specified to use, so that 
the client can always use this special service. Similar to IPX routes, IPX service 
information priority is adopted, and smaller value means higher priority of 
service information. If the route related to the static service information is 
invalid or deleted, the static service information will be prevented from 
broadcasting, until the router finds a new valid route related to the service 
information.
Perform the following task in system view.
Ta b l e 415   Configure static service information table item
By default, the priority of static service information is 10, and that of dynamic 
service information is 60.
bConfigure updating period of IPX SAP
In a huge network, one IPX SAP broadcast occupies much of the bandwidth. 
For interfaces running protocols such as PPP, X.25 and frame relay, the 
bandwidth is limited, therefore changing IPX SAP updating period is an 
effective method to reduce bandwidth occupation. You should make sure that 
all servers and routers on the network have the same SAP updating period, 
otherwise, the router might think that a server fails to work, while the server is 
still working.
Perform the following task in system view.
OperationCommand
Configure length of route reserving queueipx rip max-reserve-paths 
length
Restore default value of length of route reserving 
queueundo ipx rip 
max-reserve-paths
OperationCommand
Add one static service informationipx service service-type name 
network.node socket hop hopcount [ 
preference preference ]
Delete one static service informationundo ipx service { service-type [ 
name [ network.node ] ] [ preference 
preference] } | all