20 February 2012 Reference Guide Advanced Routing Suite CLI R75.40 Classification: [Protected] © 2012 Check Point Software Technologies Ltd. All rights reserved. This product and related documentation are protected by copyright and distributed under licensing restricting their use, copying, distribution, and decompilation. No part of this product or related documentation may be reproduced in any form or by any means without prior written authorization of Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR 52.227-19. TRADEMARKS: Refer to the Copyright page (http://www.checkpoint.com/copyright.html) for a list of our trademarks. Refer to the Third Party copyright notices (http://www.checkpoint.com/3rd_party_copyright.html) for a list of relevant copyrights and third-party licenses. Important Information Latest Software We recommend that you install the most recent software release to stay up-to-date with the latest functional improvements, stability fixes, security enhancements and protection against new and evolving attacks. Latest Documentation The latest version of this document is at: http://supportcontent.checkpoint.com/documentation_download?ID=13941 For additional technical information, visit the Check Point Support Center (http://supportcenter.checkpoint.com). For more about this release, see the home page at the Check Point Support Center (http://supportcontent.checkpoint.com/solutions?id=sk67581). Revision History Date Description 20 February 2012 First release of this document Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments (mailto:cp_techpub_feedback@checkpoint.com?subject=Feedback on Advanced Routing Suite CLI R75.40 Reference Guide). Contents Important Information 3 The Advanced Routing Suite 14 Overview of the Advanced Routing Suite CLI 14 About this Guide 14 Documentation of Commands 14 Overview 15 Name 15 Syntax 15 Mode 15 Parameters 15 Description 16 Default 16 Command History 16 Examples 16 See Also 16 Using the Advanced Routing Suite CLI 17 Starting the Advanced Routing Suite CLI 17 The -p option 17 The -f option 18 The -e option 18 The -a option 18 The -s option 18 Basic Features 19 Command Tokens 19 Command Line Completion 19 Moving About the Command Line 20 Context-Sensitive Help 20 History 20 Disabling/Enabling CLI Tracing 21 Aborting an Executing Command 21 Screen Paging 21 Exiting the CLI 21 CLI Modes 21 User Execution M ode 21 Privileged Execution M ode 22 Global Configuration M ode 22 Router Configuration Mode 22 Interface Configuration M ode 22 CLI Behavior Commands 23 configure file 23 configure terminal 23 disable 24 enable 24 end 25 exit 25 ip router-id 25 ip routingtable-id 26 logout 26 quit 27 show debugging 27 show history 28 show running-config 29 show version 30 terminal history 30 terminal history size 31 terminal length 31 write memory 32 Querying the Advanced Routing Suite CLI 32 Memory Information 32 Task Information 37 General Concepts 39 Address and Prefix Formats 39 Preferences Overview 39 Assigning Preferences 40 Interfaces 42 Interfaces Overview 42 autonomous-system 42 disable 43 preference 43 primary-alias 44 unnumbered 45 Kernel Interface 47 Kernel Interface Overview 47 kernel background limit 47 kernel background priority 48 kernel flash limit 49 kernel flash type 50 kernel no-change 51 kernel no-flush-at-exit 51 kernel no-install 52 kernel remnant-holdtime 53 kernel routes 54 kernel trace file 55 kernel trace flag 56 show kernel 57 Martian Addresses 60 Martian Addresses Overview 60 martian 60 Multicast 63 Multicast Overview 63 clear ip mroute 63 ip multicast boundary 64 ip multicast ttl-threshold 64 show ip mroute 65 show ip multicast boundary 66 show ip multicast ttl-threshold 67 Trace Options 68 Trace Options Overview 68 trace file 68 trace flag 69 Border Gateway Protocol (BGP) 71 Border Gateway Protocol (BGP) Overview 73 address-family 77 bgp always-compare-med 78 bgp as-path-loops 78 bgp bestpath as-path ignore 79 bgp bestpath compare-cluster-list-length 80 bgp bestpath compare-originator-id 81 bgp bestpath compare-router-id 82 bgp bestpath med confed 82 bgp bestpath med missing-as-worst 83 bgp cluster-id 84 bgp confederation identifier 85 bgp confederation peers 86 bgp non-leading-confeds 86 bgp open-on-accept 88 bgp pass-optional-nontrans 88 bgp restart-defer 89 bgp restart-delete-remnants 90 bgp restart-time 91 bgp restart-timeout 91 bgp router-id 92 bgp send-group-always 93 bgp tie-break-on-age 94 clear ip bgp 94 default-metric 95 distance 96 distribute-list 97 enable 98 maximum-routes 99 neighbor add-communities 100 neighbor aggregator-id 101 neighbor allow 102 neighbor as-loop 103 neighbor as-override 104 neighbor aspath-prepend 105 neighbor capability orf comm-filter 105 neighbor capability orf extcomm-filter 106 neighbor capability orf prefix-filter 107 neighbor cluster-id 108 neighbor distance 109 neighbor dynamic 110 neighbor enable 111 neighbor end-of-rib 112 neighbor export-localpref 112 neighbor graceful-restart 113 neighbor ignore-leading-as 114 neighbor import-localpref 115 neighbor keep 116 neighbor keepalives-always 117 neighbor local-as 118 neighbor log-up-down 119 neighbor maximum-routes 120 neighbor metric-out 122 neighbor multi-protocol-nexthop 122 neighbor next-hop-self 123 neighbor orf comm-list 124 neighbor orf extcomm-list 125 neighbor orf prefix-list 126 neighbor out-delay 127 neighbor passive 128 neighbor password 128 neighbor pedantic 129 neighbor peer-group 130 neighbor preference2 132 neighbor receive-buffer 133 neighbor remote-as 133 neighbor remove-private-as 134 neighbor route-map 135 neighbor route-reflector-client 136 neighbor route-to-peer 137 neighbor send-buffer 138 neighbor send-community 139 neighbor soft-reconfiguration inbound 140 neighbor timers 140 neighbor ttl 142 neighbor update-source 142 neighbor use-med 144 neighbor v4-gateway 145 neighbor version 146 network 146 preference2 147 redistribute 148 router bgp 150 show ip bgp 151 show ip bgp instance 152 show ip bgp neighbors 152 show ip bgp orf 154 show ip bgp paths 155 show ip bgp peer-group 155 show ip bgp summary 156 timers bgp 157 trace file 158 trace flag 159 Internet Control Message Protocol (ICMP) 162 Internet Control Message Protocol (ICMP) Overview 162 router icmp 162 trace file 163 trace flag 164 Fast Open Shortest Path First (OSPF) 166 Fast Open Shortest Path First (OSPF) Overview 168 router ospf 172 advertise-subnet 173 authentication 174 compatible rfc1583 176 dead-interval 176 distance 177 enable 178 enable-te 179 hello-interval 180 igp-shortcut 181 inherit-metric 181 monitor-auth-key 182 multicast-rib 183 network area 184 nssa-inherit-metric 185 nssa-stability-interval 186 poll-interval 186 priority 187 redistribute 188 redistribute-nssa 190 require-vbit 191 restart-allow-changes 192 restart-enable 193 restart-max-sync-time 194 restart-type 194 retransmit-interval 195 router-id 196 timers spf 197 trace file 198 trace flag 199 transmit-delay 200 area advertise-subnet 201 area authentication 202 area dead-interval 204 area filter 205 area hello-interval 206 area nssa 207 area nssa-range 208 area nssa-translate-always 209 area poll-interval 210 area priority 211 area range 212 area retransmit-interval 213 area stub 214 area stubhost 214 area stubnetwork 215 area transmit-delay 216 area virtual-link 217 default-metric 219 default-nssa-metric 219 default-nssa-type 220 default-preference 221 default-tag 222 default-type 222 advertise-subnet 223 allow-all 224 authentication 225 cost 227 dead-interval 228 enable 229 hello-interval 230 neighbor 231 network 232 no-multicast 232 passive-interface 233 poll-interval 234 priority 235 retransmit-interval 236 traffic-eng administrative-weight 237 traffic-eng attribute-flags 238 traffic-eng bandwidth 239 transmit-delay 240 ip ospf advertise-subnet 241 ip ospf allow-all 242 ip ospf area 243 ip ospf authentication 244 ip ospf cost 246 ip ospf dead-interval 246 ip ospf enable 247 ip ospf hello-interval 248 ip ospf neighbor 249 ip ospf network 250 ip ospf no-multicast 251 ip ospf passive-interface 251 ip ospf poll-interval 252 ip ospf priority 253 ip ospf retransmit-interval 254 ip ospf traffic-eng administrative-weight 255 ip ospf traffic-eng attribute-flags 256 ip ospf traffic-eng bandwidth 257 ip ospf transmit-delay 258 show ip ospf 259 show ip ospf border-routers 260 show ip ospf database 260 show ip ospf interface 261 show ip ospf neighbor 262 show ip ospf request-list 263 show ip ospf retransmission-list 263 show ip ospf summary-address 264 show ip ospf virtual-links 265 Redirect Processing 266 Redirect Processing Overview 266 ip redirect 266 router redirect 267 trace file 267 trace flag 268 Router Discovery 270 Router Discovery Overview 270 ip router-discovery address-policy 271 ip router-discovery enable 272 ip router-discovery trace file 272 ip router-discovery trace flag 273 router-discovery lifetime 274 router-discovery maximum-interval 275 router-discovery minimum-interval 276 Routing Information Protocol (RIP) 278 Routing Information Protocol (RIP) Overview 278 router rip 281 default-metric 281 distribute-list 282 ecmp 285 enable 285 flash-update-time 286 ignore-host-routes 287 ignore-must-be-zero 287 network 288 preference 289 query-authentication 290 redistribute 291 send-updates 293 source-gateways 294 split-horizon 296 Example 3 297 term-updates 297 timers basic 298 trace file 299 trace flag 300 trusted-gateways 301 ip rip authentication 302 ip rip enable 304 ip rip metric-in 304 ip rip metric-out 305 ip rip no-receive 306 ip rip no-send 307 ip rip secondary-authentication 308 ip rip version 309 show ip rip database 310 Example 3 311 SNMP Multiplexing (SMUX) 313 SNMP Multiplexing (SMUX) Overview 313 smux password 313 smux port 314 smux trace file 315 smux trace flag 315 Distance Vector Multicast Routing Protocol (DVMRP) 317 Distance Vector Multicast Routing Protocol (DVMRP) Overview 317 ip dvmrp 317 ip dvmrp distance 318 ip dvmrp default-metric 319 ip dvmrp disable 320 ip dvmrp metric-offset 320 ip dvmrp nodvmrpout 321 ip dvmrp noretransmit 322 ip dvmrp prune-lifetime 323 ip dvmrp trace file 323 ip dvmrp trace flag 324 ip dvmrp unicast-routing 326 show ip dvmrp interfaces 327 show ip dvmrp neighbors 328 show ip dvmrp route 329 tunnel mode dvmrp 331 Internet Group Management Protocol (IGMP) 332 Internet Group Management Protocol (IGMP) Overview 332 clear ip igmp group 333 ip igmp 334 ip igmp ignore-v1-messages 335 ip igmp ignore-v2-messages 335 ip igmp last-member-query-count 336 ip igmp last-member-query-interval 337 ip igmp query-interval 339 ip igmp query-max-response-time 340 ip igmp require-router-alert 341 ip igmp robustness 342 ip igmp send-router-alert 343 ip igmp startup-query-count 344 ip igmp startup-query-interval 345 ip igmp static-group 347 ip igmp trace file 348 ip igmp trace flag 349 ip igmp version 350 show ip igmp groups 351 show ip igmp interface 355 show ip igmp interface-summary 358 show ip igmp static-groups 359 Protocol Independent Multicast (PIM) 360 Protocol Independent Multicast (PIM) Overview 360 ip pim assert-holdtime 361 ip pim dr-priority 362 ip pim hello-holdtime 363 ip pim hello-interval 363 ip pim jp-holdtime 364 ip pim jp-interval 365 ip pim lan-delay 366 ip pim mrt-interval 367 ip pim mrt-stale-multiplier 367 [...]... commands or sections of this guide that might be useful In addition, other publicly available documents, such as RFCs, may be listed here Advanced Routing Suite CLI Reference Guide R75.40 | 16 Chapter 2 Using the Advanced Routing Suite CLI In This Chapter Starting the Advanced Routing Suite CLI Basic Features CLI Modes CLI Behavior Commands Querying the Advanced Routing Suite CLI General Concepts 17 19... ip http server Advanced Routing Suite CLI Reference Guide R75.40 | 29 Using the Advanced Routing Suite CLI ip ospf name-pookup ! access-1ist 1 permit 224.0.0.0 15.255.255.255 ! !end routerz# show version Syntax show version Mode User Execution Privileged Execution Description This command displays the version of the Advanced Routing Suite CLI as well as the version of Advanced Routing Suite Examples... CLI will display the tokens that can follow bar on a separate line, then re-display your typed line as shown below Note that "routerz>" is the Advanced Routing Suite CLI prompt, with "routerz" being the name of the machine on which Advanced Routing Suite is running routerz> abc bar par-name1 par-name2 routerz> abc bar Advanced Routing Suite CLI Reference Guide R75.40 | 19 Using the Advanced Routing. .. the CLI Advanced Routing Suite CLI Reference Guide R75.40 | 26 Using the Advanced Routing Suite CLI Note - The "%" prompt is intended to indicate the shell command line prompt The prompt can be different, depending on the shell and shell settings from which the Advanced Routing Suite CLI was started routerz> logout % quit Syntax quit Mode User Execution Description Use the quit command to exit the CLI. .. valid port number If the -p option is not specified, then the CLI assumes that Advanced Routing Suite' s XML subsystem is listening on port 4242 Advanced Routing Suite CLI Reference Guide R75.40 | 17 Using the Advanced Routing Suite CLI The -f option -f The -f option specifies a file from which CLI commands are to be read after the CLI has initialized The -e option -e [ ( s || c || e || w ||... information Memory Information Use the show memory query to obtain information about Advanced Routing Suite' s current memory usage Advanced Routing Suite CLI Reference Guide R75.40 | 32 Using the Advanced Routing Suite CLI Syntax show memory Parameters none Description The show memory query displays information about Advanced Routing Suite' s current memory usage Examples The following example displays a response... maximum size of the CLI log in either kilobytes or megabytes The action to take when the current log's maximum size is reached is determined by the -a option Default If the -s option is not specified, then it is as if -s 5m were specified Advanced Routing Suite CLI Reference Guide R75.40 | 18 Using the Advanced Routing Suite CLI Basic Features Basic features of the Advanced Routing Suite CLI include the... following actions are allowed: Querying of Advanced Routing Suite configuration state Querying of dynamic protocol state (for example, the number of OSPF neighbors) Modification of various CLI options, such as command history length, CLI events to trace, and so on Advanced Routing Suite CLI Reference Guide R75.40 | 21 Using the Advanced Routing Suite CLI Privileged Execution M ode Privileged Execution... and return to Global Configuration mode, use the "exit" command Advanced Routing Suite CLI Reference Guide R75.40 | 22 Using the Advanced Routing Suite CLI routerz(config-if)# exit routerz(config)# CLI Behavior Commands The section describes the commands that control the CLI behavior, as opposed to commands that control Advanced Routing Suite behavior configure file Syntax configure file [filename |... 39 Starting the Advanced Routing Suite CLI Be sure no other users are connected to Advanced Routing Suite With Advanced Routing Suite installed properly and running: 1 2 3 4 Enter the SecurePlatform expert mode Type pro enable at the prompt and press Enter Reboot Type router at the prompt and press Enter This begins your CLI session in User Execution mode The Advanced Routing Suite CLI can be started . on Advanced Routing Suite CLI R75. 40 Reference Guide) . Contents Important Information 3 The Advanced Routing Suite 14 Overview of the Advanced Routing Suite CLI 14 About this Guide. then the CLI assumes that Advanced Routing Suite& apos;s XML subsystem is listening on port 4242. Using the Advanced Routing Suite CLI Advanced Routing Suite CLI Reference Guide R75. 40 | 18. specified. Using the Advanced Routing Suite CLI Advanced Routing Suite CLI Reference Guide R75. 40 | 19 Basic Features Basic features of the Advanced Routing Suite CLI include the following: