show activeservers

show client

[[name=] Name]

[[name=] Name]

Shows the status of a given client connected to the server. If this parameter is "*", show client enumerates the status of all clients. If no name is specified, show client shows which, if any, remote access clients are connected to the server.

set client

[name=] Name

[state=] {disconnect | resetstats}

[name=] Name

Required. Specifies the user name of the client to disconnect or reset statistics.

[state=] {disconnect | resetstats}

Required. Specifies the action to perform. The parameter disconnect disconnects the specified user. The parameter resetstats resets the statistics for the specified user.

dump

• You can dump the contents of the current configuration to a file that can be used to restore altered configuration settings.
  
  

The following command saves the current configuration as a script in the rascfg.dmp file.

dump > rascfg.dmp

show tracing [component]

component

Specifies the component for which to display information. If no component is specified, show tracing shows the state of all installed components.

set tracing component {enabled | disabled}

Component

Required. Specifies the component for which you want to enable or disable tracing. Use "*" to specify all components.

{enabled | disabled}

Required. Specifies whether to enable or disable tracing for the specified component.

• To see a list of all installed components, use the show tracing command without parameters.
  
  

To set tracing for the PPP component, type:

set tracing ppp enabled

show authmode

set authmode {standard | nodcc | bypass}

{standard | nodcc | bypass}

Required. Specifies whether dial-up clients using certain types of devices should be authenticated. The parameter standard specifies that clients using any type of device should be authenticated. The parameter nodcc specifies that clients using any type of device except a direct-connect device should be authenticated. The parameter bypass specifies that no clients should be authenticated.

add authtype {pap | md5chap | mschap | mschapv2 | eap}

{pap | md5chap | mschap | mschapv2 | eap}

Required. Specifies which authentication type to add to the list of types through which the remote access server should attempt to negotiate authentication. The pap parameter specifies that the remote access server should use the Password Authentication Protocol (plaintext). The md5chap parameter specifies that the remote access server should use the Challenge Handshake Authentication Protocol (using the Message Digest 5 hashing scheme to encrypt the response). The mschap parameter specifies that the remote access server should use the Microsoft Challenge-Handshake Authentication Protocol. The mschapv2 parameter specifies that the remote access server should use version 2 of MSCHAP. The eap parameter specifies that the remote access server should use Extensible Authentication Protocol.

• The remote access server will attempt to negotiate authentication by using protocols in order from the most secure to the least secure. After both the client and the server have agreed on an authentication type, PPP negotiation proceeds according to the appropriate RFCs.
  
  

delete authtype{pap | md5chap | mschap | mschapv2 | eap}

{pap| md5chap | mschap | mschapv2 | eap}

Required. Specifies which authentication type to delete from the list of types through which the remote access server should attempt to negotiate authentication. The pap parameter specifies that the remote access server should not use the Password Authentication Protocol (plaintext). The md5chap parameter specifies that the remote access server should not use the Challenge Handshake Authentication Protocol (using the Message Digest 5 hashing scheme to encrypt the response). The mschap parameter specifies that the remote access server should not use the Microsoft Challenge-Handshake Authentication Protocol. The mschapv2 parameter specifies that the remote access server should not use version 2 of MSCHAP. The eap parameter specifies that the remote access server should not use Extensible Authentication Protocol.

show authtype

add link {swc | lcp}

{swc | lcp}

Required. Specifies which link property to add to the list of link properties PPP will negotiate. The parameter swc specifies that software compression (MPPC) should be added. The parameter lcp specifies that Link Control Protocol extensions from the PPP suite of protocols should be added.

delete link {swc | lcp}

{swc | lcp}

Required. Specifies which link property to delete from the list of link properties PPP will negotiate. The parameter swc specifies that software compression (MPPC) should be deleted. The parameter lcp specifies that Link Control Protocol extensions from the PPP suite of protocols should be deleted.

show link

add multilink {multi | bacp}

{multi | bacp}

Required. Specifies which multilink type to add to the list of multilink types PPP will negotiate. The parameter multi specifies that multilink PPP sessions should be added. The parameter bacp specifies that Bandwidth Allocation Control Protocol should be added.

delete multilink {multi | bacp}

{multi | bacp}

Required. Specifies which multilink type to delete from the list of multilink types PPP will negotiate. The parameter multi specifies that multilink PPP sessions should be deleted. The parameter bacp specifies that Bandwidth Allocation Control Protocol should be deleted.

show multilink

add registeredserver

[[domain=] DomainName]

[[server=] ServerName]

[[domain=] DomainName]

Specifies, by domain name, the domain in which to register the server. If you do not specify a domain, the server is registered in its primary domain.

[[server=] ServerName]

Specifies, by Domain Name System (DNS) name or IP address, the server to register. If you do not specify a server, the computer from which you type the command is registered.

delete registeredserver

[[domain=] DomainName]

[[server=] ServerName]

[[domain=] DomainName]

Specifies, by domain name, the domain from which to remove the registration. If you do not specify a domain, the registration is removed from the primary domain of the computer from which you type the command.

[[server=] ServerName]

Specifies, by IP address or DNS name, the server whose registration you want to remove. If you do not specify a server, the registration is removed for the computer from which you type the command.

show registeredserver

[[domain=] DomainName]

[[server=] ServerName]

[[domain=] DomainName]

Specifies, by domain name, the domain in which the server about which you want to display information is registered. If you do not specify a domain, the primary domain of the computer from which the command is issued is assumed.

[[server=] ServerName]

Specifies, by IP address or DNS name, the server about which you want to display information. If you do not specify a server, the computer from which the command is issued is assumed.

show user

[name=] UserName

[[mode=] {permit | report}]

[name=] UserName

Specifies, by logon name, the user whose properties you want to display. If you do not specify a user, the properties of all users are displayed.

[[mode=] {permit | report}]

Specifies whether to show properties for all users or only those whose dial-up permission is set to permit. The permit parameter specifies that properties should be displayed only for users whose dial-up permission is permit. The report parameter specifies that properties should be displayed for all users.

set user

[name=] UserName

[dialin=] {permit | deny | policy}

[cbpolicy=] {none | caller | admin

[cbnumber=] CallbackNumber}

[name=] UserName

Required. Specifies, by logon name, the user for which you want to set properties.

[dialin=] {permit | deny | policy}

Required. Specifies under what circumstances the user should be allowed to connect. The permit parameter specifies that the user should always be allowed to connect. The deny parameter specifies that the user should never be allowed to connect. The policy parameter specifies that remote access policies should determine whether the user is allowed to connect.

[cbpolicy] {none | caller | admin [cbnumber=] CallbackNumber}

Required. Specifies the callback policy for the user. The callback feature saves the user the cost of the phone call used to connect to a remote access server. The none parameter specifies that the user should not be called back. The caller parameter specifies that the user should be called back at a number specified by the user at connection time. The admin parameter specifies that the user should be called back at the number specified by the CallbackNumber parameter.

• The policy option is not available for users that belong to a mixed-mode domain. For users in a mixed-mode domain, the policy parameter and the deny parameter are equivalent.
  
  

To allow GuestUser to connect and be called back at (425) 555-0110, type:

set user guestuser permit admin 4255550110

show status

show conf

set conf

[confstate=] {enabled | disabled}

[confstate=] {enabled | disabled}

Required. Specifies the remote access configuration state. The enabled parameter enables the server configuration. The disabled parameter disables the server configuration and removes the server from the list of remote access servers.

show portstatus

[[name=] PortName]

[[state=] State]

[[name=] PortName]

Specifies the port for which to display status.

[[state=] State]

Display ports with the specified state.

The following are the RAS port states:

nonoperational

Non-operational ports

disconnected

Disconnected ports

callingback

Ports calling back

listening

Ports listening

authenticating

Ports authenticating

connected

Authenticated and connected ports

initializing

Ports initializing

The following show the port status using the name and state parameters.

show portstatus name=VPN0-127

show portstatus state=connected

set portstatus

[[name=] PortName]

[[name=] PortName]

Specifies the name of the port. If none is specified, resets statistics of all active ports.

show type

set type

[ipv4rtrtype=] {lanonly | lananddd | none}

[ipv6rtrtype=] {lanonly | lananddd | none}

[rastype=] {ipv4 | ipv6 | both | none}

[ipv4rtrtype=] {lanonly | lananddd | none}

Specifies the computer is configured as an IPv4 router. The lanonly parameter specifies that this computer is a LAN-only router and does not require demand-dial or VPN connections. The lananddd parameter specifies that this computer is a LAN and demand-dial router and supports VPN connections. The none parameter specifies that this computer is not enabled as an IPv4 router.

[ipv6rtrtype=] {lanonly | lananddd | none}

Specifies the computer is configured as an IPv6 router. The lanonly parameter specifies that this computer is a LAN-only router and does not require demand-dial or VPN connections. The lananddd parameter specifies that this computer is a LAN and demand-dial router and supports VPN connections. The none parameter specifies that this computer is not enabled as an IPv6 router.

[rastype=] {ipv4 | ipv6 | both | none}

Specifies the computer is configured as a remote access server. The ipv4 parameter specifies the computer is configured for IPv4. The ipv6 parameter specifies the computer is configured for IPv6. The both parameter specifies the computer is configured for IPv4 and IPv6. The none parameter specifies the computer is not configured as a remote access server.