User Guide

ManualsBrandsAlcatel-Lucent ManualsOtherSPEDDTOUCH PRO WITH FIREWALL

3EC 16982 AFAA TCZZA Ed. 01

SPEED TOUCH Pro

CLI Reference Guide

with Firewall DSL Router

Summary of content (260 pages)

PAGE 1
SPEED TOUCH Pro CLI Reference Guide with Firewall DSL Router 3EC 16982 AFAA TCZZA Ed.
PAGE 2
Status Change Note Released BD F aa 39813 Short Title CD-RG STFire CLI All rights reserved. Passing on and copying of this document, use and communication of its contents not permitted without written authorization from Alcatel. 2 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 3
Contents Contents Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1 ADSL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 2 ATMF Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 3 Bridge Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 4
Contents 4 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 5
Preface Preface Welcome to the Alcatel SpeedTouch Pro with Firewall Series Command Line Interface Reference Guide ! This Reference Guide aims to give the fastidious user a concise, practical and easy to use document for configuring the SpeedTouch Pro with Firewall via its character based Command Line Interface. Although the SpeedTouch Pro with Firewall Web interface is adequate enough for most users, access via the CLI may be still important for advanced and detailed configuration and troubleshooting.
PAGE 6
Preface Trademarks The following trademarks are used in this document: Speed Touch is a trademark of the Alcatel Company Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corporation Windows and Internet Explorer are trademarks of Microsoft Corporation Apple and MacOS are registered trademarks of Apple Computer Inc. UNIX is a registered trademark of UNIX System Laboratories, Inc. Ethernet is a trademark of Xerox Corporation.
PAGE 7
Alcatel SpeedTouchPro with Firewall CLI Navigation 3EC 16982 AFAA TCZZA Ed.
PAGE 8
/ 260 3EC 16982 AFAA TCZZA Ed.
PAGE 9
Accessing the Command Line Interface Users can access the Command Line Interface via: The SpeedTouch Pro with Firewall CLI web pages This requires that TCP/IP connectivity exists between the host from which the web browser is opened and the SpeedTouch Pro with Firewall A Telnet session This requires that TCP/IP connectivity exists between the host from which the Telnet session is opened and the SpeedTouch Pro with Firewall The serial 'Console' interface.
PAGE 10
Access via a Telnet Session or Serial Console As soon a session to the CLI is opened, the SpeedTouch Pro with Firewall banner pops up, followed by the CLI prompt. In case of a Telnet session authentication via the System password might be required before access is granted. The following figure shows an example of the SpeedTouch Pro with Firewall banner after opening a Telnet session and authentication. EXAMPLE: /home/doejohn{1}$ telnet 10.0.0.138 Trying 10.0.0.138... Connected to 10.0.0.138.
PAGE 11
Navigation and Manipulation Manipulation commands are commands that manipulate operations on the command line, for example changing the command group, go to the beginning of the command line, go to the end of the command line, etc. Command group Navigation From top level, you can change to a command group by executing the name of the desired command group. To obtain a list of all available command groups, execute help from the top level.
PAGE 12
The Help Command Execute help from top level to list all available command groups for the SpeedTouch Pro with Firewall. EXAMPLE: =>help Following commands are available : help : Displays this help information ? : Displays this help information exit : Exits this shell. .. : Exits group selection.
PAGE 13
Executing e.g. help firewall from top level gives the same result as executing help from the firewall command group selection. EXAMPLE: =>firewall help Following commands are available : tron troff match assign list flush : : : : : : Enables verbose console messaging. Disables verbose console messaging. Defines an ip packet match. Assign a chain to an entry point. Shows a list of all the hooks with the chain attached. Clears all hooks. If a hook is provided, that hook is cleared.
PAGE 14
Command Completion The CLI features command completion, which means that when starting to enter a command it can be completed by pressing the Tab" key. For example, entering a at the firewall command group selection, followed by a Tab" stroke results in the full assign command being completed. Entering firewall a from top level gives the same result. For the completion to be successful, the part to be added must be unique.
PAGE 15
History of Commands To retake previous commands press the up arrow and come back to more recent commands with the down arrow . Press Enter (↵)" to select and execute the retaken command. EXAMPLE: =>firewall [firewall]=>list assign hook=input chain=input assign hook=sink chain=sink assign hook=forward chain=forward assign hook=source chain=source [firewall]=> [firewall]=>:firewall list 3EC 16982 AFAA TCZZA Ed.
PAGE 16
Command Line Interface Top Level Structure The following command groups are available: adsl (only applicable for the SpeedTouch Pro with Firewall ADSL/POTS variant) atmf (only applicable for models equipped with an ATMF 25.6Mbps port) bridge cip config dhcp dns firewall ip mer nat phonebook ppp pptp shdsl (only applicable for the SpeedTouch Pro with Firewall SHDSL variant) software system td 16 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 17
Command Line Interface Commands All CLI commands are commands that operate on, or configure, the SpeedTouch Pro with Firewall. You can execute these commands from top level, preceded by the name of the command group from which the command should be executed (e. g. firewall list). You can also execute the commands from the command group itself, using the reduced form of the command (e.g. list at the firewall command group selection). `!` in a command means `NOT`, e.g.
PAGE 18
/ 260 3EC 16982 AFAA TCZZA Ed.
PAGE 19
Alcatel SpeedTouchPro with Firewall CLI Command Description 3EC 16982 AFAA TCZZA Ed.
PAGE 20
/ 260 3EC 16982 AFAA TCZZA Ed.
PAGE 21
1 ADSL Commands 1 ADSL Commands The adsl command group is only applicable to the SpeedTouch Pro with Firewall ADSL/POTS variant, NOT to the SpeedTouch Pro with Firewall ADSL/ISDN and SpeedTouch Pro with Firewall SHDSL variant. adsl (to access the ADSL level) adsl info 3EC 16982 AFAA TCZZA Ed.
PAGE 22
1 ADSL Commands adsl info Show ADSL/POTS statistics and information about the SpeedTouch Pro with Firewall status.
PAGE 23
2 ATMF Commands 2 ATMF Commands The atmf command group is only applicable to the SpeedTouch Pro with Firewall ADSL/POTS variant equipped with an ATMF 25.6Mbps port. atmf atmf atmf atmf atmf atmf atmf (to access the ATMF level) add delete flush list load save 3EC 16982 AFAA TCZZA Ed.
PAGE 24
2 ATMF Commands atmf add Add a cross connection between the ATMF 25 interface and the WAN interface. SYNTAX: atmf add vpi = vci = vpi A number between 0 and 7. Represents the Virtual Path identifier. REQUIRED vci A number between 0 and 511. Represents the Virtual Channel identifier. Use VCI=0 for a VP cross connection.
PAGE 25
2 ATMF Commands atmf delete Delete a cross connection on the ATMF 25 interface. SYNTAX: atmf delete vpi = vci = vpi A number between 0 and 7. Represents the Virtual Path identifier. REQUIRED vci A number between 0 and 511. Represents the Virtual Channel identifier. Use VCI=0 for a VP cross connection.
PAGE 26
2 ATMF Commands atmf flush Flush complete ATMF 25 interface configuration. The flush command does not impact previously saved configurations. SYNTAX: atmf flush EXAMPLE: =>atmf VPI = VPI = VPI = VPI = VPI = VPI = VPI = =>atmf =>atmf => list 1 VCI 2 VCI 3 VCI 4 VCI 5 VCI 6 VCI 7 VCI flush list = = = = = = = 0 0 0 0 0 0 0 RELATED COMMANDS: atmf load atmf save 26 / 260 Load saved or default ATMF 25 interface configuration. Save current ATMF 25 interface configuration. 3EC 16982 AFAA TCZZA Ed.
PAGE 27
2 ATMF Commands atmf list Show all current ATMF 25 interface cross connections . SYNTAX: atmf list EXAMPLE OUTPUT: =>atmf VPI = VPI = VPI = VPI = VPI = VPI = VPI = VPI = => list 0 VCI 1 VCI 2 VCI 3 VCI 4 VCI 5 VCI 6 VCI 7 VCI = 35 = 0 = 0 = 0 = 0 = 0 = 0 = 0 RELATED COMMANDS: atmf add atmf delete 3EC 16982 AFAA TCZZA Ed. 01 Add an ATMF 25 interface cross connection. Delete a cross connection on the ATMF 25 interface.
PAGE 28
2 ATMF Commands atmf load Load saved (or default) ATMF 25 interface configuration. Execute atmf flush prior to atmf load. SYNTAX: atmf load [defaults = ] [defaults] Load factory defaults (yes) or saved configuration (no).
PAGE 29
2 ATMF Commands atmf save Save current ATMF 25 interface configuration. SYNTAX: atmf save EXAMPLE: =>atmf VPI = VPI = VPI = VPI = VPI = VPI = VPI = VPI = =>atmf =>atmf =>atmf =>atmf =>atmf VPI = VPI = VPI = VPI = VPI = VPI = VPI = VPI = => list 0 VCI 1 VCI 2 VCI 3 VCI 4 VCI 5 VCI 6 VCI 7 VCI save flush list load list 0 VCI 1 VCI 2 VCI 3 VCI 4 VCI 5 VCI 6 VCI 7 VCI = 35 = 0 = 0 = 0 = 0 = 0 = 0 = 0 = 35 = 0 = 0 = 0 = 0 = 0 = 0 = 0 RELATED COMMANDS: atmf flush atmf load 3EC 16982 AFAA TCZZA Ed.
PAGE 30
2 ATMF Commands 30 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 31
3 Bridge Commands 3 Bridge Commands bridge bridge bridge bridge bridge bridge bridge bridge bridge bridge bridge bridge bridge bridge (to access the Bridge level) config flush ifadd ifattach ifconfig ifdelete ifdetach iflist load macadd macdelete maclist save 3EC 16982 AFAA TCZZA Ed.
PAGE 32
3 Bridge Commands bridge config Show/set bridge aging policy. SYNTAX: bridge config [age = ] [age] A number between 10 and 100000 (seconds). Represents the lifetime of a dynamically learned MAC address. By default the aging timer is 300 seconds. OPTIONAL EXAMPLE: =>bridge config Aging : 300 =>bridge config age=600 =>bridge config Aging : 600 => 32 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 33
3 Bridge Commands bridge flush Flush complete bridging configuration. The flush command does not impact previously saved configurations.
PAGE 34
3 Bridge Commands bridge ifadd Create a bridge interface. SYNTAX: bridge ifadd intf = dest = intf The bridge interface name. If not specified, the destination parameter must be specified. In this case the name of the destination will double as interface name. OPTIONAL dest The destination address for the new interface. Typically a phonebook entry.
PAGE 35
3 Bridge Commands bridge ifattach Attach (i.e. connect) a bridge interface. SYNTAX: bridge ifattach intf = intf The name of the bridge interface to attach.
PAGE 36
3 Bridge Commands bridge ifconfig Configure a bridge interface. SYNTAX: bridge ifconfig intf = [dest = ] [qos = ] [encaps = <{llc/snap|vcmux}>] [fcs = <{off|on}>] [portstate = <{disabled|learning|forwarding}>] [retry = ] intf The name of the bridge interface to configure. REQUIRED [dest] The destination for this interface. Typically a phonebook entry. This parameter needs only to be specified in case of an interface created without specified destination.
PAGE 37
3 Bridge Commands EXAMPLE: =>bridge iflist intf=NewBridge NewBridge : dest : Br1 Retry: 10 QoS: default Encaps: llc/snap Fcs: off Connection State: connected Port: wan0 PortState: forwarding RX bytes: 75 frames: 12 TX bytes: 30246 frames: 91 dropframes: 0 =>bridge ifconfig intf=NewBridge encaps=vcmux retry=15 =>bridge iflist intf=NewBridge NewBridge : dest : Br1 Retry: 15 QoS: default Encaps: vcmux Fcs: off Connection State: connected Port: wan0 PortState: forwarding RX bytes: 83 frames: 13 TX bytes: 30740
PAGE 38
3 Bridge Commands bridge ifdelete Delete a bridge interface. bridge ifdelete intf = intf The name of the interface name to delete.
PAGE 39
3 Bridge Commands bridge ifdetach Detach (i.e. disconnect) a bridge interface. SYNTAX: bridge ifdetach intf = intf The name of the bridge interface to detach.
PAGE 40
3 Bridge Commands bridge iflist Show the current state of all or the selected bridge interfaces. SYNTAX: bridge iflist [intf = ] [intf] The name of the bridge interface to show the configuration of. OPTIONAL If not specified all bridge interfaces are shown.
PAGE 41
3 Bridge Commands bridge load Load saved (or default) bridge configuration. Execute bridge flush prior to bridge load. SYNTAX: bridge load [defaults = ] [defaults] Load factory defaults (yes) or saved configuration (no).
PAGE 42
3 Bridge Commands bridge macadd Add a static MAC address to the filtering database. Allows to manually add static addresses, which should normally be dynamically discovered by the bridge itself. SYNTAX: bridge macadd intf = hwaddr = intf The name of the bridge interface to add the MAC address for. REQUIRED hwaddr The MAC address of the new entry.
PAGE 43
3 Bridge Commands bridge macdelete Remove a MAC address from the filtering database. SYNTAX: bridge macdelete hwaddr = hwaddr The MAC address of the entry to delete. REQUIRED EXAMPLE: =>bridge maclist 00:90:d0:01:02:03 ff:ff:ff:ff:ff:ff 01:80:c2:00:00:00 01:80:c2:00:00:01 ... 01:80:c2:00:00:10 00:80:9f:01:23:45 00:01:42:5f:7d:81 00:50:8b:31:cc:aa 08:00:20:c1:9a:12 ... =>bridge macdelete =>bridge maclist 00:90:d0:01:02:03 ff:ff:ff:ff:ff:ff 01:80:c2:00:00:00 01:80:c2:00:00:01 ...
PAGE 44
3 Bridge Commands bridge maclist Show current MAC address filtering database. SYNTAX: bridge maclist EXAMPLE: =>bridge maclist =>bridge maclist 00:90:d0:01:02:03 ff:ff:ff:ff:ff:ff 01:80:c2:00:00:00 01:80:c2:00:00:01 ... 01:80:c2:00:00:10 00:80:9f:24:ab:cf 00:01:42:5f:7d:81 00:50:8b:31:cc:aa 08:00:20:c1:9a:12 00:08:c7:c3:5f:fc 08:00:20:a8:f4:34 08:00:20:83:b7:26 00:10:83:1b:13:18 ...
PAGE 45
3 Bridge Commands bridge save Save current bridge configuration.
PAGE 46
3 Bridge Commands 46 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 47
4 CIP Commands 4 CIP Commands cip cip cip cip cip cip cip cip cip cip (to access the CIP level) flush ifadd ifdelete iflist load pvcadd pvcdelete pvclist save 3EC 16982 AFAA TCZZA Ed.
PAGE 48
4 CIP Commands cip flush Flush complete CIP configuration. The flush command does not impact previously saved configurations. SYNTAX: cip flush EXAMPLE: =>cip iflist cip0 addr = 172.16.0.5 mask = 255.255.255.0 UNI address = A0:*.04 inarp_reqs_in = 0 inarp_repl_in = 0 inarp_reqs_out = 0 inarp_repl_out = 0 =>cip flush =>cip iflist => RELATED COMMANDS: cip load cip save 48 / 260 inarp_inv_in = 0 inarp_inv_out= 0 Load saved or default CIP configuration. Save current CIP configuration.
PAGE 49
4 CIP Commands cip ifadd Create a CIP interface at the local side of the Logical IP Subnet (LIS). SYNTAX: cip ifadd addr = [netmask = ] [uniaddr = ] addr The CIP interface's local IP address in the LIS. REQUIRED netmask The LIS's subnetmask. OPTIONAL uniaddr The UNI address/port specification for incoming connections, e.g. `A0:*.04`: ADSL port, any address, selector 3. Only applicable in an SVC environment.
PAGE 50
4 CIP Commands cip ifdelete Delete a CIP interface at the local side of the Logical IP Subnet (LIS). SYNTAX: cip ifdelete addr = addr The CIP interface's local IP address in the LIS. REQUIRED EXAMPLE: =>cip iflist cip0 addr = 172.16.1.1 mask = 255.255.255.0 UNI address = A0:*.03 inarp_reqs_in = 0 inarp_repl_in = 0 inarp_reqs_out = 0 inarp_repl_out = 0 cip1 addr = 172.16.0.5 mask = 255.255.255.0 UNI address = A0:*.
PAGE 51
4 CIP Commands cip iflist Show current CIP configuration. SYNTAX: cip iflist EXAMPLE OUTPUT: =>cip iflist cip0 addr = 172.16.1.1 mask = 255.255.255.0 UNI address = A0:*.03 inarp_reqs_in = 0 inarp_repl_in = 0 inarp_reqs_out = 0 inarp_repl_out = 0 cip1 addr = 172.16.0.5 mask = 255.255.255.0 UNI address = A0:*.
PAGE 52
4 CIP Commands cip load Load saved (or default) CIP configuration. Execute cip flush prior to cip load. SYNTAX: cip load [defaults = ] [defaults] Load factory defaults (yes) or saved configuration (no). Not specifying this parameter loads the saved configuration OPTIONAL EXAMPLE: =>cip iflist cip0 addr = 172.16.1.1 mask = 255.255.255.0 UNI address = A0:*.03 inarp_reqs_in = 0 inarp_repl_in = 0 inarp_reqs_out = 0 inarp_repl_out = 0 cip1 addr = 172.16.0.5 mask = 255.255.255.0 UNI address = A0:*.
PAGE 53
4 CIP Commands cip pvcadd Create a PVC ARP entry for destinations which are not RFC 1577/RFC2225 compliant. SYNTAX: cip pvcadd dest = [destaddr = ] [mtu = ] dest The ATM address (hardware address) of the destination host. Typically a phonebook name. REQUIRED [destaddr] The IP address of the destination host. OPTIONAL [mtu] A number between 273 and 20000 (bytes). Represents the maximum AAL5 packet size for this connection.
PAGE 54
4 CIP Commands cip pvcdelete Delete a PVC ARP entry. SYNTAX: cip pvcdelete dest = dest Typically a phonebook entry name. REQUIRED Represents the ATM address (hardware address) or name of the entry to delete. EXAMPLE: =>cip pvclist atmport = 0 CIPPVC1 encaps = llc =>cip pvcdelete dest=CIPPVC1 =>cip pvclist => RELATED COMMANDS: cip pvcadd cip pvclist 54 / 260 vpi mtu = 8 = 546 vci = 80 dest_ip = 172.16.1.2 Create a PVC ARP entry. Show current PVC ARP entries.
PAGE 55
4 CIP Commands cip pvclist Show current PVC ARP entries. SYNTAX: cip pvclist EXAMPLE OUTPUT: =>cip pvclist CIPPVC1 atmport = 0 encaps = llc => vpi mtu = 8 = 546 vci = 80 dest_ip = 172.16.1.2 EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: =>cip iflist cip0 addr = 200.200.200.138 UNI address = A0:*.03 inarp_reqs_in = 0 inarp_reqs_out = 0 =>cip pvclist 699 atmport = 0 vpi = encaps = llc mtu = 8.
PAGE 56
4 CIP Commands cip save Save current CIP configuration. SYNTAX: cip save EXAMPLE: =>cip iflist cip0 addr = 172.16.1.1 mask = 255.255.255.0 UNI address = A0:*.03 inarp_reqs_in = 0 inarp_repl_in = 0 inarp_reqs_out = 0 inarp_repl_out = 0 cip1 addr = 172.16.0.5 mask = 255.255.255.0 UNI address = A0:*.04 inarp_reqs_in = 0 inarp_repl_in = 0 inarp_reqs_out = 0 inarp_repl_out = 0 =>cip save =>cip flush =>cip iflist =>cip load defaults=no =>cip iflist cip0 addr = 172.16.1.1 mask = 255.255.255.0 UNI address = A0:*.
PAGE 57
5 Config Commands 5 Config Commands config config config config config config (to access the Config level) erase flush load reset save 3EC 16982 AFAA TCZZA Ed.
PAGE 58
5 Config Commands config erase Physically remove all saved configurations. SYNTAX: config erase EXAMPLE: =>config erase RELATED COMMANDS: config flush config load config reset config save 58 / 260 Flush complete runtime configuration. Load complete saved or default configuration. Flush current and optionally restore default configuration. Save complete runtime configuration. 3EC 16982 AFAA TCZZA Ed.
PAGE 59
5 Config Commands config flush Flush complete current configuration without affecting saved configurations. This combines all flush commands: atmf flush, bridge flush, cip flush, config flush, dhcp client flush, dhcp server flush, dns flush, firewall flush, firewall rule flush, mer flush, nat flush, phonebook flush, ppp flush, pptp flush, qosbook flush, system flush and optionally ip flush. SYNTAX: config flush [flush_ip = <{no|yes}>] [flush_ip] Keep current IP configuration (yes) or not (no).
PAGE 60
5 Config Commands config load Load complete saved or default configuration. Execute config flush prior to config load. In case the saved configuration is loaded (defaults=no) this combines all load commands: atmf load, bridge load, cip load, dhcp client load, dhcp server load, dns load, firewall load, firewall rule load, mer load, nat load, phonebook load, ppp load, pptp load, qosbook load, system load and optionally ip load.
PAGE 61
5 Config Commands config reset Flush current runtime configuration and restore factory default configuration. Optionally the runtime, saved IP configuration can be preserved. SYNTAX: config reset [keep_ip = <{no|yes}>] [keep_ip] Keep IP settings (yes) or not (no). Not keeping the IP settings could cause lost IP connectivity in the LAN. OPTIONAL EXAMPLE: =>dns list Domain: business.lan Nr.
PAGE 62
5 Config Commands config save Save all existing configurations and modifications entered by the user. This combines all save commands: atmf save, bridge save, cip save, config save, dhcp client save, dhcp server save, dns save, firewall chain save, firewall save, ip save, mer save, nat save, phonebook save, ppp save, pptp save, qosbook save, system save.
PAGE 63
6 DHCP Commands 6 DHCP Commands dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp dhcp (to access the DHCP level) client (to access the DHCP Client level) client clear client config client flush client ifadd client ifattach client ifconfig client ifdelete client iflist client ifrelease client ifrenew client load client save client stats server (to access the DHCP Server level) server add server client server clrstats serv
PAGE 64
6 DHCP Commands dhcp dhcp dhcp dhcp dhcp 64 / 260 server server server server server stats status stop troff tron 3EC 16982 AFAA TCZZA Ed.
PAGE 65
6 DHCP Commands dhcp client clear Clear DHCP client statistics.
PAGE 66
6 DHCP Commands dhcp client config Show/set DHCP client configuration. SYNTAX: dhcp client config [trace = <{off|on}>] [trace] Enable tracing (on) or not (off). OPTIONAL EXAMPLE: =>dhcp client config tracing:off =>dhcp client config trace=on =>dhcp client config tracing:on => RELATED COMMANDS: dhcp client ifconfig 66 / 260 Configure a DHCP lease created for a specific interface. 3EC 16982 AFAA TCZZA Ed.
PAGE 67
6 DHCP Commands dhcp client flush Flush complete DHCP client configuration and dynamic interfaces. The flush command does not impact previously saved configurations. SYNTAX: dhcp client flush EXAMPLE: =>dhcp client iflist NewMer : [SELECTING] flags = uc IP address : 10.0.0.10 HW address : 0:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 68
6 DHCP Commands dhcp client ifadd Create a DHCP lease for a specific interface. SYNTAX: dhcp client ifadd intf = intf The name of an existing interface, e.g. created via mer ifadd. REQUIRED EXAMPLE: =>dhcp client iflist No dynamic interfaces defined. =>dhcp client ifadd intf=NewMer =>dhcp client iflist NewMer : [INIT] flags = uc IP address : 0.0.0.0 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.
PAGE 69
6 DHCP Commands dhcp client ifattach Attach a DHCP lease to a dynamic interface. Firstly create the interface with the dhcp client ifadd command. SYNTAX: dhcp client ifattach intf = intf The name of the dynamic interface. REQUIRED EXAMPLE: =>dhcp client iflist NewMer : [INIT] flags = uc IP address : 0.0.0.0 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.
PAGE 70
6 DHCP Commands dhcp client ifconfig Show/set the configuration of DHCP lease created for a specific interface. Execute the dhcp client ifrelease command prior to configuring it. SYNTAX: dhcp client ifconfig intf = [clientid = ] [hostname = ] [addr = ] [leasetime = ] [addrtrans = <{none|pat}>] [dns = <{off|on}>] [gateway = <{off|on}>] intf The name of the dynamic interface to be configured.
PAGE 71
6 DHCP Commands EXAMPLE: =>dhcp client iflist NewMer : [INIT] flags = uc IP address : 0.0.0.0 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.255 Number of leases: 1 Total size of table: 19, in use: 1, free: 94 % =>dhcp client ifconfig intf=NewMer hostname=NewLease addr=10.0.0.10 leasetime=10800 =>dhcp client iflist NewMer : [INIT] flags = uc IP address : 10.0.0.10 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 72
6 DHCP Commands dhcp client ifdelete Delete a dynamic interface. SYNTAX: dhcp client ifdelete intf = intf The name of the dynamic interface. REQUIRED EXAMPLE: =>dhcp client iflist NewMer : [SELECTING] flags = uc IP address : 10.0.0.10 HW address : 0:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 73
6 DHCP Commands dhcp client iflist Show all dynamic interfaces. SYNTAX: dhcp client iflist EXAMPLE: =>dhcp client iflist NewMer : [INIT] flags = uc IP address HW address DHCP server Number of leases: 1 Total size of table: 19, => : 0.0.0.0 : 0:90:d0:01:47:de : 255.255.255.255 in use: 1, free: 94 % EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch Pro with Firewall is configured as DHCP client on its Ethernet interface eth0. =>dhcp client iflist eth0 : [BOUND] flags = uc IP address : 10.0.
PAGE 74
6 DHCP Commands dhcp client ifrelease Release a lease attached to a dynamic interface. SYNTAX: dhcp client ifrelease intf = intf The name of the dynamic interface. REQUIRED EXAMPLE: =>dhcp client iflist NewMer : [SELECTING] flags = uc IP address : 10.0.0.10 HW address : 0:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 75
6 DHCP Commands EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch Pro with Firewall is configured as DHCP client on its Ethernet interface eth0. =>dhcp client iflist eth0 : [BOUND] flags = uc IP address : 10.0.0.3 HW address : 00:90:d0:01:47:f1 DHCP server : 10.10.1.
PAGE 76
6 DHCP Commands dhcp client ifrenew Renew the lease of a dynamic interface. SYNTAX: dhcp client ifrenew intf = intf The name of the dynamic interface. REQUIRED EXAMPLE: =>dhcp client iflist NewMer : [BOUND] flags = uc IP address : 10.0.0.10 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 77
6 DHCP Commands EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch Pro with Firewall is configured as DHCP client on its Ethernet interface eth0.
PAGE 78
6 DHCP Commands dhcp client load Load saved DHCP client configuration and dynamic interfaces. Execute dhcp client flush prior to dhcp client load. SYNTAX: dhcp client load EXAMPLE: =>dhcp client iflist NewMer : [SELECTING] flags = uc IP address : 10.0.0.10 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 79
6 DHCP Commands dhcp client save Save current DHCP client configuration and dynamic interfaces. SYNTAX: dhcp client save EXAMPLE: =>dhcp client iflist NewMer : [SELECTING] flags = uc IP address : 10.0.0.10 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 80
6 DHCP Commands dhcp client stats Show DHCP client statistics.
PAGE 81
6 DHCP Commands dhcp server add Assign a static IP address to a host in the local network. This address is allocated on a permanent basis, and is excluded from the pool of addresses used by the SpeedTouch Pro with Firewall DHCP server. SYNTAX: dhcp server add clientid = addr = [leasetime = ] [hostname = ] clientid The DHCP client's MAC address. REQUIRED addr The IP address for this DHCP host. REQUIRED [leasetime] A number between 0 and 1814400 (seconds).
PAGE 82
6 DHCP Commands dhcp server client Set the AutoDHCP client time out in startup phase. Only applicable in AutoDHCP mode (See dhcp server policy command). SYNTAX: dhcp server client timeout = timeout A number between 0 and 1814400 (seconds). Represents the time to look for another DHCP server. Specifying ` 1` will make the timeout infinite: the SpeedTouch Pro with Firewall will remain client. By default the timeout is 20 seconds.
PAGE 83
6 DHCP Commands dhcp server clrstats Clear SpeedTouch Pro with Firewall DHCP server statistics.
PAGE 84
6 DHCP Commands dhcp server config Set SpeedTouch Pro with Firewall DHCP server configuration. Execute dhcp server status to see the actual status and configuration. SYNTAX: dhcp server config [beginrange = ] [endrange = ] [netmask = ] [leasetime = ] [gateway = ] [dnsaddr = ] beginrange The lowest IP address in the DHCP address range to use for leasing. Default value of this parameter is 10.0.0.1.
PAGE 85
6 DHCP Commands EXAMPLE: =>dhcp server status DHCP Server Status: Running Current configuration: Address Range: 10.0.0.1 ... 10.255.255.254 Netmask:255.0.0.0 Lease time: 10800 seconds Gateway (default router): 10.0.0.138 DNS server: 10.0.0.1 Domain name: lan Policies: Verify first: no Trust client: yes Spoofing: no Start as client:yes Spoofing parameters: Failure timeout (!DoD): 4 sec Failure lease time (!DoD): 60 sec Temp.
PAGE 86
6 DHCP Commands dhcp server delete Delete a DHCP lease. SYNTAX: dhcp server delete index = index The index number of the entry to be deleted. Execute dhcp server list to see a list of the index numbers of all current DHCP leases. REQUIRED EXAMPLE: =>dhcp server list Leases: Lease 0: 01:00:A0:24:AE:66:E1 Hostname = Default ip address : 10.0.0.8 expires in : 1 h, 16 min, 20 sec lease is being used. Lease 1: 01:23:45:67:89:AB Hostname = NewLease ip address : 10.0.0.
PAGE 87
6 DHCP Commands dhcp server flush Flush complete DHCP server configuration and dynamic leases. The flush command does not impact previously saved configurations. SYNTAX: dhcp server flush EXAMPLE: =>dhcp server list Leases: Lease 2: 01:52:41:53:20:A0:1B:A7:EB:AD:3C:C0:01:01:00:00:00 ip address: 10.0.7.79 expires in: 11 sec lease is not being used. Lease 1: 01:52:41:53:20:20:4D:0D:CB:03:40:C0:01:01:00:00:00 ip address: 10.0.7.62 Spoofed lease from 2: DHCP_SPOOF Assigned (temporary) private ip address.
PAGE 88
6 DHCP Commands dhcp server list List current DHCP leases, indicated by their index number. SYNTAX: dhcp server list EXAMPLE OUTPUT: =>dhcp server list Leases: Lease 2: 01:52:41:53:20:50:6D:C0:40:02:32:C0:01:01:00:00:00 ip address: 10.0.7.142 expires in: 3 sec lease is not being used. Lease 3: 01:52:41:53:20:A0:1B:A7:EB:AD:3C:C0:01:01:00:00:00 ip address: 10.0.7.143 expires in: 17 sec lease is not being used. Lease 5: 01:52:41:53:20:F0:90:8F:09:E1:35:BE:01:01:00:00:00 ip address: 10.0.7.
PAGE 89
6 DHCP Commands dhcp server load Load saved (or default) DHCP server configuration and permanent leases. SYNTAX: dhcp server load [defaults = ] [defaults] Load factory defaults (yes) or saved configuration (no). Not specifying this parameter loads the saved configuration. OPTIONAL EXAMPLE: =>dhcp server list Leases: Lease 1: 01:52:41:53:20:20:4D:0D:CB:03:40:C0:01:01:00:00:00 ip address: 10.0.7.62 Spoofed lease from 2: DHCP_SPOOF Assigned (temporary) private ip address.
PAGE 90
6 DHCP Commands dhcp server policy Set SpeedTouch Pro with Firewall DHCP server policy. SYNTAX: dhcp server policy [verifyfirst = ] [trustclient = ] [spoofing = ] [client = ] [verifyfirst] Probe the network for conflicting IP addresses before giving a suggested IP address to the requesting DHCP client (yes) or not (no). OPTIONAL [trustclient] Take the IP address suggested by a DHCP client into account (yes) or not (no).
PAGE 91
6 DHCP Commands dhcp server save Save complete SpeedTouch Pro with Firewall DHCP server configuration and permanent DHCP leases. SYNTAX: dhcp server save EXAMPLE: =>dhcp server list Leases: Lease 0: 01:00:A0:24:AE:66:E1 Hostname= Default ip address: 10.0.0.8 expires in: 1 h, 57 min, 9 sec lease is being used. Lease 1: 01:23:55:67:89:AB Hostname= Tempo ip address: 10.0.0.1 never expires! lease is not being used.
PAGE 92
6 DHCP Commands dhcp server spoof Set DHCP spoofing parameters. Only applicable in case of a PPP to DHCP Spoofing connection. (See dhcp server policy command). SYNTAX: dhcp server spoof [failtime = ] [errorlt = ] [dodlt = ] [failtime] A number between 0 and 1814400 (seconds). Represents the time to wait for a PPP link to successfully negotiate an IP address.
PAGE 93
6 DHCP Commands EXAMPLE: =>dhcp server status DHCP Server Status: Running Current configuration: ..... Spoofing parameters: Failure timeout (!DoD): 4 sec Failure lease time (!DoD): 60 sec Temp. lease time (DoD): 10 sec ..... =>dhcp server spoof failtime=8 errorlt=120 dodlt=20 =>dhcp server status DHCP Server Status: Running Current configuration: ..... Spoofing parameters: Failure timeout (!DoD): 8 sec Failure lease time (!DoD): 120 sec Temp. lease time (DoD): 20 sec .....
PAGE 94
6 DHCP Commands dhcp server start Start SpeedTouch Pro with Firewall DHCP server. SYNTAX: dhcp server start EXAMPLE: =>dhcp server status DHCP Server Status: Stopped Current configuration: ..... =>dhcp server start =>dhcp server status DHCP Server Status: Searching for server... Current configuration: ..... => =>dhcp server status DHCP Server Status: Running Current configuration: ..... => RELATED COMMANDS: dhcp server status dhcp server stop 94 / 260 Show current DHCP server configuration.
PAGE 95
6 DHCP Commands dhcp server stats Show SpeedTouch Pro with Firewall DHCP server statistics.
PAGE 96
6 DHCP Commands ACKs sent Indicates the number of ACKnowledgement replies were sent to successfully configured DHCP clients. NAKs sent Indicates the number of Not AcKnowledgement replies were sent to wrongly configured DHCP clients. Lease table got full Indicates whether the maximum number of DHCP leases is reached or not. Ping table got full Indicates whether the history list of IP address pings got full or not.
PAGE 97
6 DHCP Commands dhcp server status Show current DHCP server configuration. SYNTAX: dhcp server status EXAMPLE: =>dhcp server status DHCP Server Status: Client Current configuration: Address Range: 10.0.0.1 ... 10.255.255.254 Netmask:255.0.0.0 Lease time: 7200 seconds Gateway (default router): 10.0.0.1 (auto) DNS server: 10.0.0.1 (auto) Domain name: office.
PAGE 98
6 DHCP Commands dhcp server stop Stop SpeedTouch Pro with Firewall DHCP server. SYNTAX: dhcp server stop EXAMPLE: =>dhcp server status DHCP Server Status: Running Current configuration: ..... =>dhcp server stop =>dhcp server status DHCP Server Status: Stopped Current configuration: ..... => RELATED COMMANDS: dhcp server start dhcp server status 98 / 260 Start DHCP server. Show current DHCP server configuration. 3EC 16982 AFAA TCZZA Ed.
PAGE 99
6 DHCP Commands dhcp server troff Disable verbose console logging. No debug traces are generated anymore. SYNTAX: dhcp server troff EXAMPLE: =>dhcp server status DHCP Server Status: Current configuration: ..... Tracing:on ..... =>dhcp server troff =>dhcp server status DHCP Server Status: Current configuration: ..... Tracing:off ..... => RELATED COMMANDS: dhcp server status dhcp server tron 3EC 16982 AFAA TCZZA Ed. 01 Running Running Show current DHCP server configuration.
PAGE 100
6 DHCP Commands dhcp server tron Enable verbose console logging. Debug traces are generated. SYNTAX: dhcp server tron EXAMPLE: =>dhcp server status DHCP Server Status: Current configuration: ..... Tracing:off ..... =>dhcp server tron =>dhcp server status DHCP Server Status: Current configuration: ..... Tracing:on ..... => RELATED COMMANDS: dhcp server status dhcp server troff 100 / 260 Running Running Show current DHCP server configuration Disable verbose console logging. 3EC 16982 AFAA TCZZA Ed.
PAGE 101
7 DNS Commands 7 DNS Commands dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns dns (to access the DNS level) add clear clrstats delete domain flush fwdadd fwddelete fwdlist fwdtable list load nslookup save start stats status stop toutfwd troff tron 3EC 16982 AFAA TCZZA Ed.
PAGE 102
7 DNS Commands dns add Add a static DNS entry for IP hosts who do not reveal their hostname in the DHCP request, or even worse, not support DHCP. SYNTAX: dns add hostname = [addr = ] hostname The name of the IP host (without the (sub)domain name). REQUIRED [addr] The IP address of the host (without mask). In case this parameter is not specified the hostname applies to the SpeedTouch Pro with Firewall itself. OPTIONAL EXAMPLE: =>dns list Domain: business.lan Nr.
PAGE 103
7 DNS Commands dns clear Delete current DNS entries. SYNTAX: dns clear EXAMPLE: =>dns list Domain: business.lan Nr. Hostname 0 SpeedTouch 1 TestHost 2 HTTP_Server 3 FTP_Server Total Table Size: 73 entries Amount used: 4 (5%) =>dns clear =>dns list Domain: business.lan Nr. Hostname Total Table Size: 73 entries Amount used: 0 (0%) => RELATED COMMANDS: dns list 3EC 16982 AFAA TCZZA Ed. 01 IP Address *.*.*.* 10.0.0.140 10.0.0.8 10.0.0.7 IP Address List current DNS entries.
PAGE 104
7 DNS Commands dns clrstats Clear DNS statistics. SYNTAX: dns clrstats EXAMPLE: =>dns stats DNS Statistics: Corrupted packets recv Local questions resolved Local neg answers sent Total DNS packets fwd External answers recv Fwd table full, discard Spurious answers Unknown query types : : : : : : : : 0 0 4 0 0 0 0 0 Total number of packets received : 4 =>dns clrstats DNS statistics cleared.
PAGE 105
7 DNS Commands dns delete Delete a DNS entry. SYNTAX: dns delete index = index The index number of the entry to be deleted. Execute dns list to see a list of the index numbers of all current DNS entries. REQUIRED EXAMPLE: =>dns list Domain: business.lan Nr. Hostname 0 SpeedTouch 1 TestHost 2 HTTP_Server 3 FTP_Server Total Table Size: 73 entries Amount used: 4 (5%) =>dns delete index=2 =>dns list Domain: business.lan Nr.
PAGE 106
7 DNS Commands dns domain Set local DNS (sub)domain name. SYNTAX: dns domain domain = domain The local DNS (sub)domain name. REQUIRED EXAMPLE: =>dns list Domain: business.lan Nr. Hostname IP Address 0 SpeedTouch *.*.*.* 1 TestHost 10.0.0.140 2 HTTP_Server 10.0.0.8 3 FTP_Server 10.0.0.7 Total Table Size: 73 entries Amount used: 4 (5%) =>dns domain domain=office.home.lan =>dns list Domain: office.home.lan Nr. Hostname IP Address 0 SpeedTouch *.*.*.* 1 TestHost 10.0.0.140 2 HTTP_Server 10.0.0.
PAGE 107
7 DNS Commands dns flush Flush complete SpeedTouch Pro with Firewall DNS server/forwarder configuration and static entries. The flush command does not impact previously saved configurations. SYNTAX: dns flush EXAMPLE: =>dns list Domain: office.home.lan Nr. Hostname 4* Z7V1D8 0 SpeedTouch 1 TestHost 2 Default 3 ftpserver Total Table Size: 73 entries Amount used: 5 (6%) =>dns flush =>dns list Domain: lan Nr.
PAGE 108
7 DNS Commands dns fwdadd Add a DNS forwarding entry. The entries in the forwarding list determine which DNS server should be used for which PC. If an identification cannot be established within the local LAN , the request is forwarded to another DNS server, on another network (Internet/LAN to LAN connection). The connection is negotiated within a PPP link.
PAGE 109
7 DNS Commands dns fwddelete Delete a DNS forwarding entry. SYNTAX: dns fwddelete src = mask = [dns = ] src The source IP address (pool) of the hosts to remove the entry for. REQUIRED mask The source IP (sub)netmask. REQUIRED [dns] The IP address of the (remote) DNS server (in case of multiple DNS server entries). OPTIONAL EXAMPLE: =>dns fwdlist DNS forwarding servers: DNS SRC MASK Direct 10.0.0.138 10.0.0.0 255.255.255.0 yes 192.6.11.150 192.
PAGE 110
7 DNS Commands dns fwdlist Show current DNS forwarding entries. SYNTAX: dns fwdlist EXAMPLE OUTPUT: =>dns fwdlist DNS forwarding servers: DNS SRC 10.0.0.138 10.0.0.0 192.6.11.150 192.6.11.0 => RELATED COMMANDS: dns fwdadd dns fwddelete dns fwdtable 110 / 260 MASK 255.255.255.0 255.255.255.0 Direct yes yes Add a DNS forwarding entry. Delete a DNS forwarding entry. Show DNS forwarding table. 3EC 16982 AFAA TCZZA Ed.
PAGE 111
7 DNS Commands dns fwdtable Show DNS forwarding table, i.e. list all curently unresolved DNS requests. SYNTAX: dns fwdtable EXAMPLE OUTPUT: =>dns fwdtable Forwarding table: Nr. Ip Address (port#):id(hex) (expiry) 0 10.10.10.12 (54751):8331 (13 sec) Timeout: 15 seconds Table size: 10 amount of table used: 1 (10%) => RELATED COMMANDS: dns fwdlist 3EC 16982 AFAA TCZZA Ed. 01 dns server 10.10.10.112 tries 1 Show current DNS forwarding entries.
PAGE 112
7 DNS Commands dns list Show current DNS entries. SYNTAX: dns list EXAMPLE OUTPUT: =>dns list Domain: office.home.lan Nr. Hostname 4* Z7V1D8 0 SpeedTouch 1 TestHost 2 Default 3 ftpserver Total Table Size: 73 entries Amount used: 5 (6%) => IP Address 10.0.0.29 *.*.*.* 10.0.0.140 10.0.0.8 172.16.0.1 EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch Pro with Firewall is configured as DNS server. =>dns list Domain: SpeedLAN.local Nr.
PAGE 113
7 DNS Commands dns load Load saved or default SpeedTouch Pro with Firewall DNS server/forwarder configuration and static DNS entries. Execute dns flush prior to dns load. SYNTAX: dns load [defaults = ] [defaults] Load factory defaults (yes) or saved configuration (no). Not specifying this parameter loads the saved configuration OPTIONAL EXAMPLE: =>dns list Domain: office.home.lan Nr.
PAGE 114
7 DNS Commands dns nslookup Search the hostname (via a known IP address) or the IP address (via a known hostname) of a DNS host. SYNTAX: dns nslookup lookup = lookup The DNS hostname or IP address to query. REQUIRED EXAMPLE: =>dns list Domain: office.home.lan Nr. Hostname 4* Z7V1D8 0 SpeedTouch 1 TestHost 2 Default 3 ftpserver Total Table Size: 73 entries Amount used: 5 (6%) =>dns nslookup lookup=TestHost Name: TestHost Address: 10.0.0.140 =>dns nslookup lookup=10.0.0.
PAGE 115
7 DNS Commands dns save Save current SpeedTouch Pro with Firewall DNS server/forwarder configuration and static entries. SYNTAX: dns save EXAMPLE: =>dns fwdlist DNS forwarding servers: DNS SRC 10.0.0.138 10.0.0.2 10.0.0.138 10.0.0.4 10.0.0.138 10.0.0.3 =>dns save =>dns flush =>dns fwdlist DNS forwarding servers: DNS SRC =>dns load =>dns fwdlist DNS forwarding servers: DNS SRC 10.0.0.138 10.0.0.2 10.0.0.138 10.0.0.4 10.0.0.138 10.0.0.3 => RELATED COMMANDS: dns flush dns load 3EC 16982 AFAA TCZZA Ed.
PAGE 116
7 DNS Commands dns start Start SpeedTouch Pro with Firewall DNS server/forwarder. SYNTAX: dns start EXAMPLE: =>dns status DNS server status: Stopped DNS table size DNS forwarding table size DNS forwarding dns servers table size No dns cache. Tracing: off =>dns start DNS server started. =>dns status DNS server status: Started DNS table size DNS forwarding table size DNS forwarding dns servers table size No dns cache.
PAGE 117
7 DNS Commands dns stats Show SpeedTouch Pro with Firewall DNS server/forwarder statistics. SYNTAX: dns stats EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch Pro with Firewall is configured as DNS server. =>dns list Domain: SpeedLAN.local Nr. Hostname IP Address 0 SpeedTouch *.*.*.* 1 Server 10.10.1.1 2 Client 10.0.0.
PAGE 118
7 DNS Commands dns status Show SpeedTouch Pro with Firewall DNS server/forwarder configuration. SYNTAX: dns status EXAMPLE OUTPUT: =>dns status DNS server status: Stopped DNS table size : DNS forwarding table size : DNS forwarding dns servers table size : No dns cache. Tracing: off => RELATED COMMANDS: dns flush dns load dns save 118 / 260 73, 10, 25, in use: in use: in use: 4, free: 94 % 0, free:100 % 4, free: 84 % Flush complete DNS server/forwarder configuration and dynamic entries.
PAGE 119
7 DNS Commands dns stop Stop SpeedTouch Pro with Firewall DNS server/forwarder. SYNTAX: dns stop EXAMPLE: =>dns status DNS server status: Started DNS table size DNS forwarding table size DNS forwarding dns servers table size No dns cache. Tracing: off =>dns stop DNS server stopped. =>dns status DNS server status: Stopped DNS table size DNS forwarding table size DNS forwarding dns servers table size No dns cache. Tracing: off => RELATED COMMANDS: dns status dns start 3EC 16982 AFAA TCZZA Ed.
PAGE 120
7 DNS Commands dns toutfwd Set DNS forwarding timeout. SYNTAX: dns toutfwd timeout = timeout A number (seconds). Represents the query forwarding timeout. This parameter determines how long the SpeedTouch Pro with Firewall DNS server should try to contact a (remote) DNS server before (temporarily) declaring the DNS requests unresolved. By default the timeout is 15 seconds. REQUIRED EXAMPLE: =>dns fwdtable Forwarding table: Nr. Ip Address (port#):id(hex) 0 10.10.10.
PAGE 121
7 DNS Commands dns troff Disable verbose console messaging. No debug traces are generated. SYNTAX: dns troff EXAMPLE: =>dns status DNS server status: Started DNS table size DNS forwarding table size DNS forwarding dns servers table size No dns cache. Tracing: on =>dns troff =>dns status DNS server status: Started DNS table size DNS forwarding table size DNS forwarding dns servers table size No dns cache.
PAGE 122
7 DNS Commands dns tron Enable verbose console messaging. Debug traces are generated. SYNTAX: dns tron EXAMPLE: =>dns status DNS server status: Started DNS table size : 73, in use: 4, free: 94 DNS forwarding table size : 10, in use: 0, free:100 DNS forwarding dns servers table size : 25, in use: 4, free: 84 No dns cache. Tracing: off =>dns tron Tracing on.
PAGE 123
8 Firewall Commands 8 Firewall Commands firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall firewall 3EC 16982 AFAA TCZZA Ed.
PAGE 124
8 Firewall Commands firewall assign Assign a chain to an entry point. An entry point, also referred to as hook or a Packet Interception Point (PIP) is the location where packets are intercepted to be compared against a chain of rules SYNTAX: firewall assign hook = <{input|sink|forward|source|output}> chain = hook The entry point's name to assign a chain to. Choose between: input : The point off all incoming traffic.
PAGE 125
8 Firewall Commands firewall flush Flush all associations between a hook and its chain(s). The chain itself is not removed. The flush command does not impact previously saved configurations. SYNTAX: firewall flush [hook = <{input|sink|forward|source|output}>] [hook] the name of the hook to clear. Choose between: input sink forward source output. In case this parameter is not specified all hooks are cleared.
PAGE 126
8 Firewall Commands firewall list Show association(s) between all hooks and their chain(s) or of one specified hook SYNTAX: firewall list [hook = <{input|sink|forward|source|output}>] [hook] the name of the hook to show the associations for. Choose between: input sink forward source output. In case this parameter is not specified the associations for all hooks are shown.
PAGE 127
8 Firewall Commands firewall load Load saved (or default) firewall configuration. Execute firewall flush prior to firewall load. SYNTAX: firewall load [file = ] [defaults = ] [file] The name of the firewall configuration to be loaded. Not specifying this parameter loads the default configuration OPTIONAL [defaults] Load factory defaults (yes) or saved configuration (no).
PAGE 128
8 Firewall Commands firewall match Match a specified IP packet. Used to match an IP packet against a chain in order to determine what the reaction of the firewall would be. This command can be considered as being the same as the firewall rule create command, but without the action to be taken.
PAGE 129
8 Firewall Commands [prot] The protocol (name or number) in the virtual IP packet. Choose between: tcp udp icmp Or specify the protocol number in accordance to the latest version of RFC1700: Assigned numbers. OPTIONAL [syn] Set the TCP SYN flag (yes) or not (no). OPTIONAL [urg] Set the TCP URG flag (yes) or not (no). OPTIONAL [ack] Set the TCP ACK flag (yes) or not (no). OPTIONAL [srcport] The TCP/UDP port the virtual packet is coming from.
PAGE 130
8 Firewall Commands [icmptype] The ICMP (Internet Control Message Protocol) type (name or number) OPTIONAL of the virtual packet.
PAGE 131
8 Firewall Commands firewall save Save all modifications entered by : firewall assign. This command only saves the association between hook(s) and chain(s), set by the firewall assign command, not the information about chains, rules and their parameters . SYNTAX: firewall save [file = ] [file] A name for the current firewall configuration file to be saved. The name is limited to 9 characters. This parameter allows multiple firewall configurations to be saved under different names.
PAGE 132
8 Firewall Commands firewall troff Disable verbose console messaging. SYNTAX: firewall troff EXAMPLE: =>firewall troff RELATED COMMANDS: firewall tron 132 / 260 Enable verbose console messaging. 3EC 16982 AFAA TCZZA Ed.
PAGE 133
8 Firewall Commands firewall tron Enable verbose console messaging. SYNTAX: firewall tron EXAMPLE: =>firewall tron RELATED COMMANDS: firewall troff 3EC 16982 AFAA TCZZA Ed. 01 Disable verbose console messaging.
PAGE 134
8 Firewall Commands firewall chain create Create a new chain. SYNTAX: firewall chain create chain = chain The name of the chain to create. REQUIRED EXAMPLE: =>firewall chain list Tempo, source, forward, sink =>firewall chain create chain=Telnet =>firewall chain list Telnet, Tempo, source, forward, sink => RELATED COMMANDS: firewall assign firewall chain delete firewall chain list 134 / 260 Assign a chain to an entry point. Delete a chain. Show a list of all current chains.
PAGE 135
8 Firewall Commands firewall chain delete Delete a chain. SYNTAX: firewall chain delete chain = chain The name of the chain to be deleted. REQUIRED EXAMPLE: =>firewall chain list Telnet, Tempo, source, forward, sink =>firewall chain list Telnet, Tempo, source, forward, sink =>firewall chain delete chain=Tempo =>firewall chain list Telnet, source, forward, sink => RELATED COMMANDS: RELATED COMMANDS: firewall assign firewall chain create firewall chain list 3EC 16982 AFAA TCZZA Ed.
PAGE 136
8 Firewall Commands firewall chain list Show a list of all current chains. SYNTAX: firewall chain list EXAMPLEINPUT/OUTPUT: =>firewall chain list source, forward, sink =>firewall chain create chain Telnet =>firewall chain list Telnet, source, forward, sink =>firewall chain list Telnet, source, forward, sink => RELATED COMMANDS: firewall assign firewall chain create firewall chain delete 136 / 260 Assign a chain to an entry point. Create a chain. Delete a chain. 3EC 16982 AFAA TCZZA Ed.
PAGE 137
8 Firewall Commands firewall chain load Load saved or default chain(s) configuration (with related rules). SYNTAX: firewall chain load [file = ] [defaults = ] [file] The name of the chain configuration to be loaded. Not specifying this parameter loads the default configuration OPTIONAL [defaults] Load factory defaults (yes) or saved configuration (no).
PAGE 138
8 Firewall Commands firewall chain save Save all modifications entered by : firewall chain create, firewall chain delete . This command saves the information about chains, rules and their parameters. This is different from firewall save which saves only the association between hook(s) and chain(s), set by the firewall assign command. SYNTAX: firewall chain save [file = ] [file] A name for the current chain configuration file to be saved. The name is limited to 9 characters.
PAGE 139
8 Firewall Commands firewall rule clear Clear statistics for a given rule. SYNTAX: firewall rule clear [chain = ] [index = ] [chain] The name of the chain in which the rule is to be found.
PAGE 140
8 Firewall Commands firewall rule create Create a rule.
PAGE 141
8 Firewall Commands [srcbridgeport] A number between 0 and 6. Represents the bridge port the virtual packet should [or should NOT] arrive on. Execute bridge iflist for a list of available bridge ports. OPTIONAL [src] The source IP address (range) the packet should [or should NOT] come from. (Supports cidr notation). OPTIONAL [srcmsk] The source IP address mask defining the range (see src). OPTIONAL [dstintf] The name of the interface the packet should [or should NOT] be going to.
PAGE 142
8 Firewall Commands [srcport] The TCP/UDP port (or beginning of range) the packet should [or should NOT] be from. Choose between: ftp ftp-data telnet mail smtp dns domain tftp Or specify the port number in accordance to the latest version of RFC1700: Assigned numbers. OPTIONAL [srcportend] The source TCP/UDP port range end (inclusive). (Only applicable for ranges) OPTIONAL [dstport] The TCP/UDP port (or beginning of range) the packet should [or should NOT] be going to.
PAGE 143
8 Firewall Commands [icmpcode] A number between 0 and 15. Represents the expected [or NOT expected] ICMP code (or beginning of range) of the packet as specified in the latest version of RFC1700: Assigned number. OPTIONAL [icmpcodeend] A number between 0 and 15. Represents the ICMP code range end. Only applicable for ranges. OPTIONAL [clink] The name of the chain to be parsed when this rule applies. (action is ignored). OPTIONAL action Action to be taken when this rule applies.
PAGE 144
8 Firewall Commands firewall rule delete Delete a rule. SYNTAX: firewall rule delete chain = index = chain The name of the chain in which to delete the rule. index The index number of the rule in the chain. REQUIRED Execute firewall rule list first to determine the index number of the applicable rule. REQUIRED EXAMPLE: =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10.0.0.0/8 dst=200.200.200.
PAGE 145
8 Firewall Commands firewall rule flush Flush all rules created for a chain(s). The chain itself is not removed. The flush command does not impact previously saved configurations. SYNTAX: firewall rule flush [chain = ] [chain] The name of the chain to empty. In case this parameter is not specified all rules for all chains are deleted. OPTIONAL EXAMPLE: =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10.0.0.0/8 dst=200.200.200.
PAGE 146
8 Firewall Commands firewall rule list Show a list of rules. SYNTAX: firewall rule list [chain = ] [chain] The name of the chain to list the rules of. In case this parameter is not specified all rules for all chains are shown. OPTIONAL EXAMPLE INPUT AND OUTPUT: =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10.0.0.0/8 dst=200.200.200.
PAGE 147
8 Firewall Commands firewall rule stats Show statistics, i. e. the number of packets and bytes which have passed the hooks. SYNTAX: firewall rule stats [chain = ] [index = ] [chain] The name of the chain of which the statistics must be listed. In case this parameter is not specified the statistics for the rules applicable to all chains are shown. [index] OPTIONAL The index number of the chain's rule of which the statistics must be listed.
PAGE 148
8 Firewall Commands EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch Pro with Firewall is configured as DHCP client on its Ethernet interface eth0. =>firewall rule list chain=Sending :firewall rule create chain=Sendingindex=0 srcintfgrp=lan dst=10.10.1.1/32prot=icmp action=count :firewall rule create chain=Sendingindex=1 srcintfgrp=lan dst=10.0.0.
PAGE 149
9 IP Commands 9 IP Commands ip ip ip ip ip ip ip ip ip ip ip ip ip ip ip ip ip ip (to access the IP level) apadd apdelete aplist arpadd arpdelete arplist config flush ifconfig iflist load ping rtadd rtdelete rtlist save sendto 3EC 16982 AFAA TCZZA Ed.
PAGE 150
9 IP Commands ip apadd Assign an IP address to an interface. SYNTAX: ip apadd addr = [netmask = ] intf = [pointopoint = ] [broadcastip = ] [addrtrans = <{none|pat}>] [addroute = <{no|yes}>] [type = ] addr The new IP address to add. REQUIRED [netmask] The subnetmask associated with this address. OPTIONAL intf The interface name.
PAGE 151
9 IP Commands EXAMPLE: =>ip aplist 1 eth0 Type:EthernetHWaddr 00:80:9f:24:ab:cf BRHWaddr ff:ff:ff:ff:ff:ff inet addr: 10.10.10.147 Bcast: 10.10.10.255 Mask: 255.0.0.0 UP RUNNING pat MTU:1500 ReasmMAX:65535 Group:2 IPRX bytes:19791886 unicastpkts:11341 brcastpkts:290555 IPTX bytes:839550 unicastpkts:11477 brcastpkts:0 droppkts:0 HWRX bytes:0 unicastpkts:0 brcastpkts:0 HWTX bytes:0 unicastpkts:0 brcastpkts:0 droppkts:0 0 loop Type:0 inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.
PAGE 152
9 IP Commands ip apdelete Remove an IP address from an interface. SYNTAX: ip apdelete addr = addr The IP address to delete. REQUIRED EXAMPLE: =>ip aplist 2 eth0 Type:EthernetHWaddr 00:80:9f:24:ab:cf BRHWaddr ff:ff:ff:ff:ff:ff inet addr: 10.0.0.2 Bcast: 10.0.0.255 Mask: 255.255.255.
PAGE 153
9 IP Commands ip aplist Show a list of all configured IP addresses. SYNTAX: ip aplist EXAMPLE: =>ip aplist 2 eth0 Type:EthernetHWaddr 00:80:9f:24:ab:cf BRHWaddr ff:ff:ff:ff:ff:ff inet addr: 10.0.0.2 Bcast: 10.0.0.255 Mask: 255.255.255.
PAGE 154
9 IP Commands ip arpadd Add a static entry to the SpeedTouch Pro with Firewall ARP cache. SYNTAX: ip arpadd intf = ip = [hwaddr = ] intf The interface name. REQUIRED ip The IP address. REQUIRED [hwaddr] The hardware address (e.g. the Ethernet MAC address). OPTIONAL EXAMPLE: =>ip arplist Intf IP–address HW–address Type eth0 10.0.0.1 00:01:42:5f:7d:81 DYNAMIC eth0 10.0.0.8 00:a0:24:ae:66:e1 DYNAMIC eth0 10.0.1.99 52:41:53:20:20:4d STATIC eth0 10.0.1.
PAGE 155
9 IP Commands ip arpdelete Remove an entry from the SpeedTouch Pro with Firewall ARP cache. SYNTAX: ip arpdelete intf = ip = [hwaddr = ] intf The interface name. REQUIRED ip The IP address. REQUIRED [hwaddr] The hardware address. OPTIONAL EXAMPLE: =>ip arplist Intf IP–address HW–address Type eth0 10.0.0.1 00:01:42:5f:7d:81 DYNAMIC eth0 10.0.0.8 00:a0:24:ae:66:e1 DYNAMIC eth0 10.0.1.99 52:41:53:20:20:4d STATIC eth0 10.0.1.
PAGE 156
9 IP Commands ip arplist Show the SpeedTouch Pro with Firewall ARP cache. SYNTAX: ip arplist EXAMPLE OUTPUT: =>ip arplist Intf IP–address eth0 10.0.0.1 eth0 10.0.0.8 eth0 10.0.1.99 eth0 10.0.1.100 eth0 10.0.0.2 => RELATED COMMANDS: ip arpadd ip arpdelete 156 / 260 HW–address 00:01:42:5f:7d:81 00:a0:24:ae:66:e1 52:41:53:20:20:4d 52:41:53:20:f0:90 00:10:a4:d0:9a:db Type DYNAMIC DYNAMIC STATIC STATIC STATIC Add a static entry to the ARP cache. Delete an entry from the ARP cache.
PAGE 157
9 IP Commands ip config Show/set global IP stack configuration options. SYNTAX: ip config [forwarding = <{off|on}>] [firewalling = <{off|on}>] [redirects = <{off|on}>] [sourcerouting = <{off|on}>] [netbroadcasts = <{off|on}>] [ttl = ] [fraglimit = ] [defragmode = <{normal|always|nat}>] [addrcheck = <{off|own|static|dynamic}>] [mssclamping = <{off|on}>] [forwarding] Disable (off) or enable (on) the IP routing functionality.
PAGE 158
9 IP Commands [defragmode] Define which packets are reassembled under which circumstances. Choose between: normal Packets to be forwarded will not be reassembled. Packets with local destination, i.e. destined for the SpeedTouch Pro with Firewall, are reassembled. always Packets are always reassembled. nat Same behaviour as normal except for packets to be forwarded through the NAT engine. Packets on which address translation is performed are reassembled as the NAT engine requires the entire packet.
PAGE 159
9 IP Commands EXAMPLE: =>ip config Forwarding on Firewalling off Sendredirects off Sourcerouting on NetBroadcasts off Default TTL 128 Fraglimit 32 fragments Fragcount currently 0 fragments Defragment mode : always Address checks : static Mss clamping : on =>ip config firewalling=on ttl=64 fraglimit=64 defragmode=nat =>ip config Forwarding on Firewalling on Sendredirects off Sourcerouting on NetBroadcasts off Default TTL 64 Fraglimit 64 fragments Fragcount currently 0 fragments Defragment mode : nat Address
PAGE 160
9 IP Commands ip flush Flush complete IP configuration. Dynamic configurations (e.g. from PPP or CIP links) remain. The flush command does not impact previously saved configurations. As an ip flush causes all local IP connectivity to be deleted, do not execute this command during an IP based local connection, e.g. a Telnet CLI session, or web based CLI access. SYNTAX: ip flush EXAMPLE: =>ip aplist 3 cip1 Type:ATM inet addr:172.16.0.5 Bcast:172.16.0.255 Mask:255.255.255.
PAGE 161
9 IP Commands ip ifconfig Configure interface parameters. SYNTAX: ip ifconfig intf = [mtu = ] [status = <{down|up}>] [hwaddr = ] [group = <{wan|local|lan}>] intf The IP interface name. REQUIRED [mtu] A number between 293 and 20000. Represents the maximum transmission unit, i.e. the maximum packet size (including IP header) to use on this interface. The default value depends on the connection and packet service for which the interface was created.
PAGE 162
9 IP Commands ip iflist Show all current interfaces. SYNTAX: ip iflist EXAMPLE OUTPUT: =>ip iflist Interface 0 loop 1 eth0 2 NewMer 5 cip0 => GRP 1 2 0 0 MTU 1500 3000 1500 9180 RELATED COMMANDS: ip ifconfig 162 / 260 RX 116 21045795 0 0 TX 0 1019664 0 0 TX–DROP 0 0 0 0 STATUS UP UP UP UP HWADDR 00:80:9f:24:ab:cf 00:80:9f:24:ab:cf Configure interface parameters. 3EC 16982 AFAA TCZZA Ed.
PAGE 163
9 IP Commands ip load Load saved (or default) IP configuration. Execute ip flush prior to ip load. SYNTAX: ip load [defaults = ] [defaults] Load factory defaults (yes) or saved configuration (no). Not specifying this parameter loads the saved configuration OPTIONAL EXAMPLE: =>ip rtlist Destination Source 192.16.11.0/24 192.16.11.0/24 172.16.1.1/32 0.0.0.0/0 192.16.11.140/32 0.0.0.0/0 127.0.0.1/32 0.0.0.0/0 172.16.1.0/24 0.0.0.0/0 192.16.11.0/24 0.0.0.
PAGE 164
9 IP Commands ip ping Send ICMP ECHO_REQUEST packets. SYNTAX: ip ping addr = [count = ] [size = ] [interval = ] [listen = <{off|on}>] addr The destination IP address. REQUIRED [count] A number between 1 and 1000000. Represents the number of pings to send. OPTIONAL [size] A number between 1 and 20000 (bytes). Represents the size of the ping packet(s). OPTIONAL [interval] A number between 100 and 10000000 (milliseconds).
PAGE 165
9 IP Commands ip rtadd Add a route to the SpeedTouch Pro with Firewall routing table. SYNTAX: ip rtadd dst = [dstmsk = ] [src = ] [srcmsk = ] [gateway = ] [intf = ] [metric = ] [type = ] dst The destination IP address(es) for this route. Supports cidr notation. REQUIRED [dstmsk] The destination IP address mask.
PAGE 166
9 IP Commands ip rtdelete Delete a route from the SpeedTouch Pro with Firewall routing table. SYNTAX: ip rtdelete dst = [dstmsk = ] [src = ] [srcmsk = ] [gateway = ] [intf = ] dst The destination IP address(es) of the route. Supports cidr notation. REQUIRED [dstmsk] The destination IP address mask. OPTIONAL [src] The source IP address(es) of the route. Supports cidr notation.
PAGE 167
9 IP Commands ip rtlist Show current SpeedTouch Pro with Firewall routing table. SYNTAX: ip rtlist EXAMPLE OUTPUT: =>ip rtlist Destination 10.0.0.0/24 172.16.0.5/32 0.0.0.140/32 127.0.0.1/32 10.0.0.0/24 172.16.0.0/24 => RELATED COMMANDS: ip rtadd ip rtdelete 3EC 16982 AFAA TCZZA Ed. 01 Source 10.0.0.0/24 0.0.0.0/0 0.0.0.0/0 0.0.0.0/0 0.0.0.0/0 0.0.0.0/0 Gateway 10.0.0.140 172.16.0.5 10.0.0.140 127.0.0.1 10.0.0.140 172.16.0.
PAGE 168
9 IP Commands ip save Save current IP configuration. SYNTAX: ip save EXAMPLE: =>ip rtlist Destination 192.16.11.0/24 172.16.1.1/32 192.16.11.140/32 127.0.0.1/32 172.16.1.0/24 192.16.11.0/24 =>ip save =>ip flush =>ip rtlist Destination 172.16.1.1/32 127.0.0.1/32 172.16.1.0/24 =>ip load =>ip rtlist Destination 192.16.11.0/24 172.16.1.1/32 192.16.11.140/32 127.0.0.1/32 172.16.1.0/24 192.16.11.0/24 => RELATED COMMANDS: ip flush ip load 168 / 260 Source 192.16.11.0/24 0.0.0.0/0 0.0.0.0/0 0.0.0.0/0 0.0.0.
PAGE 169
9 IP Commands ip sendto Send UDP packets. SYNTAX: ip sendto addr = [count = ] [size = ] [interval = ] [listen = <{off|on}>] [srcport = ] dstport = addr The destination IP address. REQUIRED [count] A number between 1 and 1000000. Represents the number of UDP packets to send. OPTIONAL [size] A number between 1 and 20000 (bytes). Represents the size of the ping packet(s).
PAGE 170
9 IP Commands 170 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 171
10 MER Commands 10 MER Commands mer mer mer mer mer mer mer mer mer mer (to access the MER level) flush ifadd ifattach ifconfig ifdelete ifdetach iflist load save 3EC 16982 AFAA TCZZA Ed.
PAGE 172
10 MER Commands mer flush Flush complete MER configuration. The flush command does not impact previously saved configurations. SYNTAX: mer flush EXAMPLE: =>mer iflist NewMer : dest : Br3 Retry : 10 QoS : default Encaps : llc/snap Fcs : off Connection State : connected RX bytes: 0 frames: 0 TX bytes: 0 frames: 0 dropframes: 0 =>mer flush =>mer iflist => RELATED COMMANDS: mer load mer save 172 / 260 Load saved or default MER configuration. Save current MER configuration. 3EC 16982 AFAA TCZZA Ed.
PAGE 173
10 MER Commands mer ifadd Create a new MER interface. SYNTAX: mer ifadd [intf = ] [dest = ] [intf] The name for the new MER interface. If not specified, the destination parameter must be specified. In this case the name of the destination will double as interface name. OPTIONAL [dest] The destination for the new MER interface. Typically, an phonebook entry.
PAGE 174
10 MER Commands mer ifattach Attach (i.e. connect) a MER interface. SYNTAX: mer ifattach intf = intf The name of the MER interface to attach.
PAGE 175
10 MER Commands mer ifconfig Configure a MER interface. SYNTAX: mer ifconfig intf = [dest = ] [qos = ] [encaps = <{llc/snap|vcmux}>] [retry = ] intf The name of the MER interface to configure. REQUIRED [dest] The destination for this interface. Typically a phonebook entry. This parameter needs only to be specified in case of an interface created without specified destination. OPTIONAL [qos] The name of a configured Quality Of Service book entry.
PAGE 176
10 MER Commands mer ifdelete Delete a MER interface. SYNTAX: mer ifdelete intf = intf The name of the MER interface.
PAGE 177
10 MER Commands mer ifdetach Detach a MER interface. SYNTAX: mer ifdetach intf intf = The name of the MER interface.
PAGE 178
10 MER Commands mer iflist Show all or a specified MER interface(s). SYNTAX: mer iflist [intf = ] [intf] The name of the MER interface. If not specified all MER interfaces are listed.
PAGE 179
10 MER Commands mer load Load saved (or default) MER configuration. Execute mer flush prior to mer load. SYNTAX: mer load [defaults ] [defaults] Load factory defaults (yes) or saved configuration (no).
PAGE 180
10 MER Commands mer save Save current MER configuration.
PAGE 181
11 NAT Commands 11 NAT Commands nat nat nat nat nat nat nat nat nat nat nat nat nat nat (to access the NAT level) applist bind bindlist create defserver delete disable enable flush list load save unbind 3EC 16982 AFAA TCZZA Ed.
PAGE 182
11 NAT Commands nat applist List available NAPT protocol helpers. Certain protocols are `sensitive` to NAPT in that they do not function properly when dealing with it. This list shows which `NAPT sensitive` applications are supported on the SpeedTouch Pro with Firewall, i.e. the inherent knowledge of the SpeedTouch Pro with Firewall on this matter.
PAGE 183
11 NAT Commands nat bind Create a new helper/port binding. SYNTAX: nat bind application = port = application The name of a NAPT application helper. The name must be spelled exactly as listed in the application list (nat applist). REQUIRED port The port number this application handler should work on.
PAGE 184
11 NAT Commands nat bindlist List current NAPT helper/port bindings. SYNTAX: nat bindlist EXAMPLE OUTPUT: =>nat bindlist Application Proto RAUDIO(PNA) tcp H323 tcp FTP tcp RTSP tcp IRC tcp RAUDIO(PNA) tcp => RELATED COMMANDS: nat applist nat bind nat unbind 184 / 260 Port 7071 1720 21 554 6667 7070 List available NAPT protocol helpers. Create a new NAPT helper/port binding. Delete an existing helper/port binding. 3EC 16982 AFAA TCZZA Ed.
PAGE 185
11 NAT Commands nat create Create a static NAPT entry. Typically used to install specific servers behind the SpeedTouch Pro with Firewall's NAPT device. SYNTAX: nat create protocol = inside_addr = [inside_port = ] outside_addr = [outside_port = ] protocol The IP protocol name (or number) of the incoming stream.
PAGE 186
11 NAT Commands EXAMPLE: =>nat list =>ip aplist 1 eth0 Type:EthernetHWaddr 00:80:9f:24:ab:cf BRHWaddr ff:ff:ff:ff:ff:ff inet addr: 10.10.10.147 Bcast: 10.10.10.255 Mask: 255.0.0.0 UP RUNNING pat MTU:1500 ReasmMAX:65535 Group:2 IPRX bytes:19791886 unicastpkts:11341 brcastpkts:290555 IPTX bytes:839550 unicastpkts:11477 brcastpkts:0 droppkts:0 HWRX bytes:0 unicastpkts:0 brcastpkts:0 HWTX bytes:0 unicastpkts:0 brcastpkts:0 droppkts:0 5 cip0 Type:ATM inet addr: 172.16.0.5 Bcast: 127.16.0.255 Mask: 255.255.255.
PAGE 187
11 NAT Commands nat defserver Define the default server behind the SpeedTouch Pro with Firewall NAPT device that receives all (unknown) incoming packets. In typical LAN configurations one local 'default' server will be responsible for all WAN LAN mail, http, ftp, ... connectivity. This command allows to specify this server. For specific services, use the nat create command.
PAGE 188
11 NAT Commands nat delete Delete a static NAPT entry. SYNTAX: nat delete protocol = inside_addr = [inside_port = ] outside_addr = [outside_por =t ] protocol The IP protocol name (or number) of the NAT entry. REQUIRED inside_addr The IP address of the NAT entry. REQUIRED [inside_port] The port number of the NAT entry.
PAGE 189
11 NAT Commands nat disable Disable NAPT on a SpeedTouch Pro with Firewall IP address. SYNTAX: nat disable addr = addr One of SpeedTouch Pro with Firewall's IP addresses one which NAPT is enabled. REQUIRED EXAMPLE: =>nat list Indx Prot Inside–addr:PortOutside–addr:Port 1 6 10.0.0.138:80 172.16.0.5:1080 2 17 10.0.0.138:138 10.0.0.140:138 3 17 10.0.0.138:137 10.0.0.140:137 4 17 10.0.0.138:7938 10.0.0.140:7938 5 17 10.0.0.138:513 10.0.0.140:513 6 17 10.0.0.138:111 10.0.0.
PAGE 190
11 NAT Commands nat enable Enable NAPT on a SpeedTouch Pro with Firewall IP address. SYNTAX: nat enable addr = [type = <{none|pat}>] addr The SpeedTouch Pro with Firewall IP address on which NAPT must be applied. REQUIRED [type] Enable port translation (pat) or not (none). OPTIONAL EXAMPLE: =>ip aplist 1 eth0 Type:EthernetHWaddr 00:80:9f:24:ab:cf BRHWaddr ff:ff:ff:ff:ff:ff inet addr: 10.10.10.147 Bcast: 10.10.10.255 Mask: 255.0.0.
PAGE 191
11 NAT Commands nat flush Flush complete NAPT configuration. The flush command does not impact previously saved configurations. SYNTAX: nat flush EXAMPLE: =>nat list Indx Prot Inside–addr:PortOutside–addr:Port 1 17 10.0.0.138:138 10.0.0.140:138 2 17 10.0.0.138:137 10.0.0.140:137 3 17 10.0.0.138:7938 10.0.0.140:7938 4 17 10.0.0.138:513 10.0.0.140:513 5 17 10.0.0.138:111 10.0.0.
PAGE 192
11 NAT Commands nat list Show NAPT connection database. SYNTAX: nat list [addr = ] [addr] The SpeedTouch Pro with Firewall IP address for which the NAPT connection database must be shown. In case the parameter is not specified the NAPT connection database for all IP addresses is shown. OPTIONAL EXAMPLEINPUT/OUTPUT: =>nat list Indx Prot 1 6 2 17 3 17 4 17 5 17 6 17 7 17 => Inside–addr:PortOutside–addr:Port 10.0.0.138:80 172.16.0.5:1080 10.0.0.138:135 10.0.0.140:135 10.0.0.138:138 10.0.0.
PAGE 193
11 NAT Commands nat load Load saved (or default) NAPT configuration. Execute nat flush prior to nat load. SYNTAX: nat load [defaults] [defaults = ] Load factory defaults (yes) or saved configuration (no). Not specifying this parameter loads the saved configuration OPTIONAL EXAMPLE: =>nat list Indx Prot Inside–addr:PortOutside–addr:Port 1 17 10.0.0.138:138 10.0.0.140:138 2 17 10.0.0.138:137 10.0.0.140:137 3 17 10.0.0.138:7938 10.0.0.140:7938 4 17 10.0.0.138:513 10.0.0.140:513 5 17 10.0.0.
PAGE 194
11 NAT Commands nat save Save current NAPT configuration. SYNTAX: nat save EXAMPLE: =>nat list Indx Prot Inside–addr:PortOutside–addr:Port 1 17 10.0.0.138:138 10.0.0.140:138 2 17 10.0.0.138:137 10.0.0.140:137 3 17 10.0.0.138:7938 10.0.0.140:7938 4 17 10.0.0.138:513 10.0.0.140:513 5 17 10.0.0.138:111 10.0.0.140:111 =>nat save =>nat flush =>nat list Indx Prot Inside–addr:PortOutside–addr:Port =>nat load =>nat list Indx Prot Inside–addr:PortOutside–addr:Port 1 17 10.0.0.138:138 10.0.0.140:138 2 17 10.0.0.
PAGE 195
11 NAT Commands nat unbind Delete an existing helper/port binding. SYNTAX: nat unbind application = port = application The name of a NAPT application helper. The name must be spelled exactly as listed in the application list (nat applist). REQUIRED port The port number this application handler should work on.
PAGE 196
11 NAT Commands 196 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 197
12 Phonebook Commands 12 Phonebook Commands phonebook phonebook phonebook phonebook phonebook phonebook phonebook phonebook 3EC 16982 AFAA TCZZA Ed.
PAGE 198
12 Phonebook Commands phonebook add Add a phonebook entry. The number of entries is limited to 64. The number of active connections is limited to 12, but more may be configured at the same time. SYNTAX: phonebook add name = addr = <[port.]vpi.vci> type = <{any|bridge|ppp|cip|ans|pptp}> name A free to choose phonebook name for the destination.
PAGE 199
12 Phonebook Commands EXAMPLE: =>phonebook list Name Type Use Address PVC1 any 1 8.35 PVC2 bridge 0 8.36 Br3 bridge 0 8.36 Br4 bridge 0 8.38 CIPPVC3 cip 1 8.82 CIPPVC4 cip 1 8.83 =>phonebook add name=Alcatel addr=8.68 type=ppp =>phonebook list Name Type Use Address PVC1 any 1 8.35 PVC2 bridge 0 8.36 Br3 bridge 0 8.36 Br4 bridge 0 8.38 CIPPVC3 cip 1 8.82 CIPPVC4 cip 1 8.83 Alcatel ppp 0 8.68 => RELATED COMMANDS: phonebook delete phonebook list 3EC 16982 AFAA TCZZA Ed. 01 Remove a phonebook entry.
PAGE 200
12 Phonebook Commands phonebook autolist Show auto PVCs, if supported by the Central Office DSLAM. (Only applicable for Alcatel ASAM DSLAMs). SYNTAX: phonebook autolist EXAMPLEINPUT/OUTPUT: =>phonebook autolist 8.35 => RELATED COMMANDS: phonebook list 200 / 260 Show current phonebook. 3EC 16982 AFAA TCZZA Ed.
PAGE 201
12 Phonebook Commands phonebook delete Remove an unused phonebook entry. SYNTAX: phonebook delete name = name the name of the phonebook entry to delete. Only applicable for phonebook entries that are not used, i.e. not configured for any packet service. Execute phonebook list to check whether the entry is used (Use=1) or not (Use=0).
PAGE 202
12 Phonebook Commands phonebook flush Flush complete phonebook. The flush command does not impact previously saved configurations. SYNTAX: phonebook flush EXAMPLE: =>phonebook list Name Type PVC1 any PVC2 bridge Br3 bridge Br4 bridge CIPPVC3 cip CIPPVC4 cip Alcatel ppp =>phonebook flush =>phonebook list Name Type => Use 1 0 0 0 1 1 0 Address 8.35 8.36 8.36 8.38 8.82 8.83 8.68 Use Address RELATED COMMANDS: phonebook load phonebook save 202 / 260 Load saved or default phonebook.
PAGE 203
12 Phonebook Commands phonebook list Show current phonebook. SYNTAX: phonebook list [opt = <{long}>] [opt] Select output format. For internal use only. OPTIONAL EXAMPLEINPUT/OUTPUT: =>phonebook list Name Type PVC1 any PVC2 bridge Br3 bridge Br4 bridge CIPPVC3 cip CIPPVC4 cip Alcatel ppp => Use 1 0 0 0 1 1 0 RELATED COMMANDS: phonebook add phonebook autolist phonebook delete 3EC 16982 AFAA TCZZA Ed. 01 Address 8.35 8.36 8.36 8.38 8.82 8.83 8.68 Add a phonebook entry. Show auto PVCs.
PAGE 204
12 Phonebook Commands phonebook load Load saved (or default) phonebook. Execute phonebook flush prior to phonebook load. SYNTAX: phonebook load [defaults ] [defaults] Load factory defaults (yes) or saved configuration (no). Not specifying this parameter loads the saved configuration OPTIONAL EXAMPLE: =>phonebook list Name Type Use Address PVC2 bridge 0 8.36 Br4 bridge 0 8.38 CIPPVC4 cip 1 8.83 Alcatel ppp 1 8.
PAGE 205
12 Phonebook Commands phonebook save Save current phonebook. SYNTAX: phonebook save EXAMPLE: =>phonebook list Name Type PVC2 bridge Br4 bridge CIPPVC4 cip Alcatel ppp =>phonebook save =>phonebook flush =>phonebook list Name Type =>phonebook load =>phonebook list Name Type PVC2 bridge Br4 bridge CIPPVC4 cip Alcatel ppp =>phonebook save Use 0 0 1 1 Address 8.36 8.38 8.83 8.68 Use Address Use 0 0 1 0 Address 8.36 8.38 8.83 8.68 RELATED COMMANDS: phonebook flush phonebook load 3EC 16982 AFAA TCZZA Ed.
PAGE 206
12 Phonebook Commands 206 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 207
13 PPP Commands 13 PPP Commands ppp ppp ppp ppp ppp ppp ppp ppp ppp ppp ppp ppp (to access the PPP level) flush ifadd ifattach ifconfig ifdelete ifdetach iflist load rtadd rtdelete save 3EC 16982 AFAA TCZZA Ed.
PAGE 208
13 PPP Commands ppp flush Flush complete PPP configuration. The flush command does not impact previously saved configurations. SYNTAX: ppp flush EXAMPLE: =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps VC–MUX mode = IP Routing flags = echo magic accomp mru addr route savepwd PPPOA trans addr = pat mru = 1500 route = 0.0.0.0/0 – 0.0.0.0/0 (metric 0) user name = guest password= ******** admin state = down oper state = down link state = not–connected LCP : state = initial retransm= 10 term.
PAGE 209
13 PPP Commands ppp ifadd Create a new PPP interface. SYNTAX: ppp ifadd [intf = ] [dest = ] [encaps = <{vcmux|llc}>] [speed = ] [intf] The name for the new PPP interface. If not specified, the destination parameter must be specified. In this case the name of the destination will double as interface name. OPTIONAL [dest] The destination for the new PPP interface. Typically, an phonebook entry.
PAGE 210
13 PPP Commands EXAMPLE: =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps VC–MUX mode = IP Routing flags = echo magic accomp mru addr route savepwd PPPOA trans addr = pat mru = 1500 route = 0.0.0.0/0 – 0.0.0.0/0 (metric 0) user name = guest password= ******** admin state = down oper state = down link state = not–connected LCP : state = initial retransm= 10 term. reason = IPCP : state = initial retransm= 0 term.
PAGE 211
13 PPP Commands ppp ifattach Attach (i.e. connect) a PPP interface. SYNTAX: ppp ifattach intf = intf The name of the PPP interface to attach. REQUIRED EXAMPLE: =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps LLC mode = IP Routing flags = echo magic accomp restart mru addr route savepwd PPPOE trans addr = pat mru = 1492 route = 0.0.0.0/0 – 0.0.0.
PAGE 212
13 PPP Commands ppp ifconfig Configure a PPP interface. As the PPP interface to be configured may not be connected at the time of configuration, execute ppp ifdetach prior to executing the ppp ifconfig command.
PAGE 213
13 PPP Commands [qos] The name of a configured Quality Of Service book entry. This parameter never needs to be specified. OPTIONAL [proto] The encapsulation method for the PPP frames, i.e. the applicable packet service for the connection. Select: pppoa For a Routed PPPoA (PPP & IP Routing) connections. pppoe For a Routed PPPoE connection. Per default the PPPoA protocol applies. OPTIONAL [acname] The Access Concentrator name for a Routed PPPoE connection.
PAGE 214
13 PPP Commands [retryinterval] A number between 0 and 65535 (seconds). Represents the intermediate interval between two retries to establish the connection on ATM level.. Only applicable in an SVC environment. OPTIONAL [passive] Put the link in listening state in case LCP times out (on) or not (off). This parameter allows to determine whether the link should be left open to wait for incoming messages from the remote side after 10 unsuccessful tries to establish the connection or not.
PAGE 215
13 PPP Commands [idle] A number between 1 and 1000000 (seconds). Represents after how many seconds an idle link goes down. OPTIONAL [addrtrans] Automatically enable address translation for the IP address of this link (pat) or do not use address translation (none). OPTIONAL [unnumbered] Takes the local IP address from 'laddr' field and remote IP address from the IP address pool assigned to the incoming PPP link.
PAGE 216
13 PPP Commands ppp ifdelete Delete a PPP interface. SYNTAX: ppp ifdelete intf = intf The name of the PPP interface to delete. EXAMPLE: =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps VC–MUX mode = IP Routing flags = echo magic accomp mru addr route savepwd PPPOA trans addr = pat mru = 1500 route = 0.0.0.0/0 – 0.0.0.0/0 (metric 0) user name = guest password= ******** admin state = down oper state = down link state = not–connected LCP : state = initial retransm= 10 term.
PAGE 217
13 PPP Commands ppp ifdetach Detach a PPP interface. SYNTAX: ppp ifdetach intf = intf The name of the PPP interface. REQUIRED EXAMPLE: =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps LLC mode = IP Routing flags = echo magic accomp restart mru addr route savepwd PPPOA trans addr = pat mru = 1492 route = 0.0.0.0/0 – 0.0.0.0/0 (metric 0) user name = guest password= ******** admin state = up oper state = up link state = connected LCP : state = opened retransm= 0 term.
PAGE 218
13 PPP Commands ppp iflist Show current configuration of all or a specified PPP interface(s). SYNTAX: ppp iflist [intf = ] intf the name of the PPP interface. In case this parameter is not specified all PPP interfaces are shown. OPTIONAL EXAMPLE INPUT/OUTPUT : =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps VC–MUX mode = IP Routing flags = echo magic accomp mru addr route savepwd PPPOA trans addr = pat mru = 1500 route = 0.0.0.0/0 – 0.0.0.
PAGE 219
13 PPP Commands ppp ifscan Scan a PPPoE interface ( proto=pppoe) for available Access Concentrator names and Service Names. Execute the ppp ifdetach command for this interface prior to perform a scan on it. SYNTAX: ppp ifscan intf = [time = ] [kit = ] intf The name of the PPP interface to scan. REQUIRED [time] A number between 0 and 36000 (seconds). Represents the time to scan for services. OPTIONAL [kit] A number between 0 and 8.
PAGE 220
13 PPP Commands ppp load Load saved (or default) PPP configuration. Execute ppp flush prior to ppp load. SYNTAX: ppp load [defaults] [defaults = ] Load factory defaults (yes) or saved configuration (no). Not specifying this parameter loads the saved configuration OPTIONAL EXAMPLE: =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps VC–MUX mode = IP Routing flags = echo magic accomp mru addr route savepwd PPPOA trans addr = pat mru = 1500 route = 0.0.0.0/0 – 0.0.0.
PAGE 221
13 PPP Commands ppp rtadd Automatically add a route configuration to the routing table in case the specified PPP interface link comes up. This route configuration will determine which local hosts are allowed to use this link and/or which remote destinations should be or should not be reachable. Execute the ppp ifdetach command for this interface prior to configuring routes.
PAGE 222
13 PPP Commands EXAMPLE: =>ppp iflist PPP1: dest : PVC3 Retry : 10 QoS default encaps LLC mode = IP Routing flags = echo magic accomp restart mru addr route savepwd PPPOE trans addr = pat mru = 1492 user name = guest password= ******** admin state = down oper state = down link state = not–connected LCP : state = initial retransm= 10 term. reason = IPCP : state = initial retransm= 0 term. reason = =>ppp rtadd intf=PPP1 dst=172.16.0.5 dstmsk=24 src=10.0.0.
PAGE 223
13 PPP Commands ppp rtdelete Delete the route specification for a PPP link. Execute the ppp ifdetach command for this interface prior to deleting route configurations. SYNTAX: ppp rtdelete intf = intf The PPP interface name for which to delete the route settings. REQUIRED EXAMPLE: =>ppp iflist PPP1: dest : PVC3 Retry : 10 QoS default encaps LLC mode = IP Routing flags = echo magic accomp restart mru addr route savepwd PPPOE trans addr = pat mru = 1492 route = 10.0.0.2/24 – 172.16.0.
PAGE 224
13 PPP Commands ppp save Save current PPP configuration. SYNTAX: ppp save EXAMPLE: =>ppp iflist PPP1: dest : PPP1 Retry : 10 QoS default encaps VC–MUX mode = IP Routing flags = echo magic accomp mru addr route savepwd PPPOA trans addr = pat mru = 1500 route = 0.0.0.0/0 – 0.0.0.0/0 (metric 0) user name = guest password= ******** admin state = down oper state = down link state = not–connected LCP : state = initial retransm= 10 term. reason = IPCP : state = initial retransm= 0 term.
PAGE 225
14 PPTP Commands 14 PPTP Commands pptp pptp pptp pptp pptp pptp pptp pptp (to access the PPTP level) flush list load profadd profdelete proflist save 3EC 16982 AFAA TCZZA Ed.
PAGE 226
14 PPTP Commands pptp flush Flush complete PPTP configuration. The flush command does not impact previously saved configurations. SYNTAX: pptp flush EXAMPLE: =>pptp profadd name=Relay_PPP1 encaps=nlpid ac=always =>pptp proflist Profile QoS Encaps AC Relay_PPP1 default nlpid always =>pptp flush =>pptp proflist => RELATED COMMANDS: pptp load pptp save 226 / 260 Load saved or default PPTP configuration. Save current PPTP configuration. 3EC 16982 AFAA TCZZA Ed.
PAGE 227
14 PPTP Commands pptp list Show current PPTP configuration. SYNTAX: pptp list EXAMPLEINPUT/OUTPUT: =>pptp list Dialstr Destination DIALUP_PPP3 => 3EC 16982 AFAA TCZZA Ed. 01 QoS default Encaps vcmux AC never State CONNECTED User (10.0.0.
PAGE 228
14 PPTP Commands pptp load Load saved (or default) PPTP configuration. Execute pptp flush prior to pptp load. SYNTAX: pptp load [defaults = ] [defaults] Load factory defaults (yes) or saved configuration (no).
PAGE 229
14 PPTP Commands pptp profadd Define a new PPTP profile. SYNTAX: pptp profadd name = [qos = ] [encaps = <{vcmux|nlpid}>] [ac = <{never|always|keep}>] name The name for the PPTP profile. REQUIRED [qos] The name of the Quality Of Service book entry. This parameter never needs to be specified. OPTIONAL [encaps] The type of encapsulation applicable to Relayed PPPoA interfaces using this PPTP profile.
PAGE 230
14 PPTP Commands pptp profdelete Delete a PPTP profile. SYNTAX: pptp profdelete name name The name for the PPTP profile. REQUIRED EXAMPLE: =>pptp proflist Profile QoS Encaps Relay_PPP1 default nlpid PPTPLink default vcmux =>pptp profdelete name=PPTPLink =>pptp proflist Profile QoS Encaps Relay_PPP1 default nlpid => RELATED COMMANDS: pptp profadd pptp proflist 230 / 260 AC always never AC always Define a new PPTP profile. Show current PPTP profiles. 3EC 16982 AFAA TCZZA Ed.
PAGE 231
14 PPTP Commands pptp proflist Show all current PPTP profiles. pptp proflist EXAMPLE: =>pptp proflist Profile Relay_PPP1 PPTPLink => QoS default default RELATED COMMANDS: pptp profadd pptp profdelete 3EC 16982 AFAA TCZZA Ed. 01 Encaps nlpid vcmux AC always never Define a new PPTP profile. Delete a PPTP profile.
PAGE 232
14 PPTP Commands pptp save Save current PPTP configuration. SYNTAX: pptp save EXAMPLE: =>pptp proflist Profile QoS Relay_PPP1 default PPTPLink default =>pptp save =>pptp flush =>pptp proflist =>pptp load defaults=no =>pptp proflist Profile QoS Relay_PPP1 default PPTPLink default => RELATED COMMANDS: pptp flush pptp load 232 / 260 Encaps nlpid vcmux AC always never Encaps nlpid vcmux AC always never Flush complete PPTP configuration. Load saved or default PPTP configuration.
PAGE 233
15 Software Commands 15 Software Commands software software software software software software 3EC 16982 AFAA TCZZA Ed.
PAGE 234
15 Software Commands software cleanup Remove all unused files from the passive software subdirectory. This command frees the passive software subdirectory from corrupted software files and configuration files. Software marked as passive software is not deleted. SYNTAX: software cleanup EXAMPLE: =>software cleanup => RELATED COMMANDS: software deletepassive software setpassive 234 / 260 Delete the passive software. Mark an uploaded file as passive software version. 3EC 16982 AFAA TCZZA Ed.
PAGE 235
15 Software Commands software deletepassive Delete passive software. SYNTAX: software deletepassive EXAMPLE: =>Software version Active : Sascha3.424 =>Software deletepassive =>Software version Active : Sascha3.424 => RELATED COMMANDS: software cleanup software setpassive 3EC 16982 AFAA TCZZA Ed. 01 Passive : Bene3.420 Passive : Remove all unused files from the passive software subdirectory. Mark a file as passive software version.
PAGE 236
15 Software Commands software setpassive Mark a file as passive software version. Only correctly uploaded software, valid for the SpeedTouch Pro with Firewall can be marked as passive software. SYNTAX: software setpassive file = file the filename (without directory path) of the software package. REQUIRED EXAMPLE: =>Software version Active : Sascha3.423 Passive : Bene3.420 =>Software deletepassive =>Software version Active : Sascha3.423 Passive : .....
PAGE 237
15 Software Commands software switch Switch active and passive versions and reboot the Speed Touch Pro with Firewall. Because rebooting implies a flush of all non saved configurations it is highly recommended to save the current configuration if needed, e.g. by executing the config save command prior to executing a software switch. SYNTAX: software switch EXAMPLE: =>Software version Active : Sascha3.423 Passive : Sascha3.428 =>software switch ..... (after reboot and re-opening the Telnet session) .....
PAGE 238
15 Software Commands software version Show active and passive software versions. SYNTAX: software version EXAMPLE: =>Software version Active : Sascha3.428 => RELATED COMMANDS: software switch 238 / 260 Passive : Sascha3.423 Switch active and passive software versions and reboot the Speed Touch Pro with Firewall. 3EC 16982 AFAA TCZZA Ed.
PAGE 239
16 SHDSL Commands 16 SHDSL Commands The shdsl command group is only applicable to the Speed Touch Pro with Firewall SHDSL variant, NOT to the Speed Touch Pro with Firewall ADSL variants. shdsl shdsl shdsl shdsl shdsl (to access the SHDSL level) info load psd save 3EC 16982 AFAA TCZZA Ed.
PAGE 240
16 SHDSL Commands shdsl info Show SHDSL statistics and information about the SpeedTouch Pro with Firewall status. SYNTAX: shdsl info EXAMPLE: =>shdsl info WAN interface Line Status Total bytes since Downstream : PSD mask Shdsl uptime SNR margin Attenuation Transmit Power => 240 / 260 : SHDSL : UP at 2304 kbit/s power on: 9932253 Upstream : 244701 : Symmetric PSD mask for Europe : 47:55:28 : 7 dB : 24 dB : 15 dBm 3EC 16982 AFAA TCZZA Ed.
PAGE 241
16 SHDSL Commands shdsl load Load saved (or default) SHDSL configuration. SYNTAX: shdsl load [defaults = <{yes|no}>] [defaults] Load factory defaults (yes) or saved configuration (no).
PAGE 242
16 SHDSL Commands shdsl psd Configure the PSD mask to be used, then restart the SHDSL line. SYNTAX: shdsl psd mask = <{sym_NA|sym_EU|asym_NA_768|asym_NA_1536| asym_EU_2048| asym_EU_2304}> mask The selected PSD mask must comply to the regional demands and to the required payload rate.
PAGE 243
16 SHDSL Commands shdsl save Save current SHDSL configuration.
PAGE 244
16 SHDSL Commands 244 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 245
17 System Commands 17 System Commands system system system system system system system (to access the System level) clearpassword flush load reboot save setpassword 3EC 16982 AFAA TCZZA Ed.
PAGE 246
17 System Commands system clearpassword Clear current SpeedTouch Pro with Firewall system password. To avoid unrestricted and unauthorized access to the SpeedTouch Pro with Firewall it is highly recommended always to make sure that it is protected by a SpeedTouch Pro with Firewall system password (by executing system setpassword) and to change the password regularly.
PAGE 247
17 System Commands system flush Flush current SpeedTouch Pro with Firewall system configuration, i.e. the System password. The flush command does not impact previously saved configurations. To avoid unrestricted and unauthorized access to the SpeedTouch Pro with Firewall it is highly recommended always to make sure that it is protected by a SpeedTouch Pro with Firewall system password (by executing system setpassword) and to change the password regularly.
PAGE 248
17 System Commands system load Load saved (or default) system configuration. Execute system flush prior to system load. In most cases loading the default system configuration causes the SpeedTouch Pro with Firewall system password to be CLEARED.
PAGE 249
17 System Commands system reboot Reboot the SpeedTouch Pro with Firewall. Because rebooting implies a flush of all non saved configurations it is highly recommended to save the current configuration by executing config save.
PAGE 250
17 System Commands system save Save current system configuration, i.e. the System password. To avoid unrestricted and unauthorized access to the SpeedTouch Pro with Firewall it is highly recommended always to make sure that it is protected by a SpeedTouch Pro with Firewall system password (by executing system setpassword) and to save it (by executing system save) prior to executing this command.
PAGE 251
17 System Commands system setpassword Set/change the current SpeedTouch Pro with Firewall system password. To avoid unrestricted and unauthorized access to the SpeedTouch Pro with Firewall it is highly recommended always to make sure that it is protected by a SpeedTouch Pro with Firewall system password and to change it regularly. SYNTAX: system setpassword password = password A free to choose password . The password is limited to a maximum of 15 characters.
PAGE 252
17 System Commands 252 / 260 3EC 16982 AFAA TCZZA Ed.
PAGE 253
18 TD Commands 18 TD Commands td (to access this level) td call 3EC 16982 AFAA TCZZA Ed.
PAGE 254
18 TD Commands td call Call a `Trace & Debug` command. For qualified personnel only. SYNTAX: td call cmd = cmd The quoted trace & debug command string. 254 / 260 REQUIRED 3EC 16982 AFAA TCZZA Ed.
PAGE 255
Alcatel SpeedTouchPro with Firewall CLI Command Index 3EC 16982 AFAA TCZZA Ed.
PAGE 256
/ 260 3EC 16982 AFAA TCZZA Ed.
PAGE 257
Index Index A add atmf add, 24 dhcp server add, 81 dns add, 102 phonebook add, 198 create firewall chain create, 134 firewall rule create, 140 nat create, 185 D apadd, ip apadd, 150 defserver, nat defserver, 187 apdelete, ip apdelete, 152 arplist, ip arplist, 156 delete atmf delete, 25 dhcp server delete, 86 dns delete, 105 firewall chain delete, 135 firewall rule delete, 144 nat delete, 188 phonebook delete, 201 assign, firewall assign, 124 deletepassive, software deletepassive, 235 autolist, ph
PAGE 258
Index fwddelete, dns fwddelete, 109 ifscan, ppp ifscan, 219 fwdlist, dns fwdlist, 110 info adsl info, 22 shdsl info, 240 fwdtable, dns fwdtable, 111 H help, 12 L list I ifadd bridge ifadd, 34 cip ifadd, 49 dhcp client ifadd, 68 mer ifadd, 173 ppp ifadd, 209 ifattach bridge ifattach, 35 dhcp client ifattach, 69 mer ifattach, 174 ppp ifattach, 211 ifconfig bridge ifconfig, 36 dhcp client ifconfig, 70 ip ifconfig, 161 mer ifconfig, 175 ppp ifconfig, 212 ifdelete bridge ifdelete, 38 cip ifdelete, 50 dhc
PAGE 259
Index P ping, ip ping, 164 policy, dhcp server policy, 90 profadd, pptp profadd, 229 profdelete, pptp profdelete, 230 proflist, pptp proflist, 231 psd, shdsl psd, 242 pvcadd, cip pvcadd, 53 pvcdelete, cip pvcdelete, 54 pvclist, cip pvclist, 55 R reboot, system reboot, 249 reset, config reset, 61 rtadd ip rtadd, 165 ppp rtadd, 221 rtdelete ip rtdelete, 166 ppp rtdelete, 223 rtlist, ip rtlist, 167 S save atmf save, 29 bridge save, 45 cip save, 56 config save, 62 dhcp client save, 79 dhcp server save, 91 dn
PAGE 260
Index 260 / 260 3EC 16982 AFAA TCZZA Ed.