User Guide

ManualsBrandsAlcatel-Lucent ManualsOtherSPEEDTOUCH 608 WL

SpeedTouch™608 WL

Wireless Business DSL Routers

CLI Reference Guide

Release R5.3.1

Summary of content (846 pages)

PAGE 1
SpeedTouch™608 WL Wireless Business DSL Routers CLI Reference Guide Release R5.3.
PAGE 2
PAGE 3
SpeedTouch™ 608 WL CLI Reference Guide R5.3.
PAGE 4
Copyright Copyright ©1999-2005 THOMSON. All rights reserved. Passing on, and copying of this document, use and communication of its contents is not permitted without written authorization from THOMSON. The content of this document is furnished for informational use only, may be subject to change without notice, and should not be construed as a commitment by THOMSON. THOMSON assumes no responsibility or liability for any errors or inaccuracies that may appear in this document.
PAGE 5
Contents Contents About this Document .................................................................................... 1 ADSL Commands........................................................................................... 3 adsl config..................................................................................................................................................... 4 adsl info...........................................................................................................
PAGE 6
Contents atm oam vclb add....................................................................................................................................... 41 atm oam vclb del........................................................................................................................................ 42 atm oam vclb list ........................................................................................................................................ 43 atm phonebook add ...............
PAGE 7
Contents connection flush ......................................................................................................................................... 83 connection info........................................................................................................................................... 84 connection list ............................................................................................................................................ 85 connection refresh .......
PAGE 8
Contents dhcp server policy .................................................................................................................................... 126 dhcp server debug clear .......................................................................................................................... 127 dhcp server debug stats .......................................................................................................................... 128 dhcp server debug traceconfig ..............
PAGE 9
Contents dns server debug stats............................................................................................................................. 169 dns server debug spoof clear.................................................................................................................. 170 dns server debug spoof getaddress ....................................................................................................... 171 dns server debug spoof getflags .............................
PAGE 10
Contents dsd webfilter professional config ........................................................................................................... 211 dsd webfilter professional level add....................................................................................................... 212 dsd webfilter professional level delete................................................................................................... 213 dsd webfilter professional level flush...............................
PAGE 11
Contents dyndns host list ........................................................................................................................................ 253 dyndns service list.................................................................................................................................... 254 dyndns service modify............................................................................................................................. 255 Env Commands .......................
PAGE 12
Contents eth switch mirror egress.......................................................................................................................... 293 eth switch mirror ingress......................................................................................................................... 294 Expr Commands......................................................................................... 295 expr add ...................................................................................
PAGE 13
Contents grp iflist ..................................................................................................................................................... 341 grp rtlist..................................................................................................................................................... 343 grp rttadd ..................................................................................................................................................
PAGE 14
Contents Interface Commands ................................................................................. 385 interface list .............................................................................................................................................. 386 IP Commands ............................................................................................. 387 ip arpadd ..................................................................................................................
PAGE 15
Contents IPQoS Commands...................................................................................... 429 ipqos config .............................................................................................................................................. 430 ipqos list.................................................................................................................................................... 432 ipqos ef config ..........................................................
PAGE 16
Contents ipsec connection descriptor modify ....................................................................................................... 474 ipsec connection dialup connect............................................................................................................. 476 ipsec connection dialup disconnect........................................................................................................ 477 ipsec connection network add ..........................................
PAGE 17
Contents ipsec peer vpnserver xauthpool add ...................................................................................................... 520 ipsec peer vpnserver xauthpool adduser............................................................................................... 521 ipsec peer vpnserver xauthpool delete .................................................................................................. 522 ipsec peer vpnserver xauthpool deluser ..........................................
PAGE 18
Contents label list ..................................................................................................................................................... 559 label modify .............................................................................................................................................. 560 label chain add .........................................................................................................................................
PAGE 19
Contents nat config .................................................................................................................................................. 598 nat flush .................................................................................................................................................... 599 nat ifconfig ................................................................................................................................................ 600 nat iflist.....
PAGE 20
Contents ppp rtdelete............................................................................................................................................... 647 ppp relay flush.......................................................................................................................................... 648 ppp relay ifadd.......................................................................................................................................... 649 ppp relay ifdelete........
PAGE 21
Contents script list.................................................................................................................................................... 685 script run ................................................................................................................................................... 686 SNMP Commands...................................................................................... 687 snmp config ..........................................................
PAGE 22
Contents Systemlog Commands .............................................................................. 725 systemlog flush ........................................................................................................................................ 726 systemlog show ....................................................................................................................................... 727 systemlog send .........................................................................
PAGE 23
Contents wireless macacl modify ........................................................................................................................... 765 wireless macacl register .......................................................................................................................... 766 wireless secmode config ......................................................................................................................... 767 wireless secmode wep.............................
PAGE 24
Contents Supported IP Protocols ............................................................................................................................ 794 Supported TCP/UDP Port Names............................................................................................................ 795 Supported ICMP Type Names................................................................................................................. 798 Supported System Logging Facilities...............................
PAGE 25
About this Document About this Document Introduction Welcome to the SpeedTouch™ Command Line Interface (CLI) Reference Guide! For the Service Provider, this Reference Guide aims to be a concise and practical document for creating a customized Service Template file, based on the SpeedTouch™ CLI command set, to be used by the end user to configure the SpeedTouch™ and computer(s).
PAGE 26
About this Document Trademarks The following trademarks are used in this document: SpeedTouch™ is a trademark of THOMSON. Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corporation. Windows and Internet Explorer are trademarks of Microsoft Corporation. Apple and MacOS are registered trademarks of Apple Computer Inc. UNIX is a registered trademark of UNIX System Laboratories, Inc. Ethernet is a trademark of Xerox Corporation.
PAGE 27
ADSL Commands ADSL Commands Introduction This chapter describes the commands of the adsl command group. Contents This chapter covers the following commands: adsl config Show/set the Asymmetric Digital Subscriber Line (ADSL) configuration. 4 adsl info Display the ADSL statistics and information about the DSL line status. 5 E-DOC-CTC-20050531-0061 v1.
PAGE 28
ADSL Commands adsl config Show/set the Asymmetric Digital Subscriber Line (ADSL) configuration. SYNTAX: adsl config [opermode = <{multimode | multi_adsl2 | multi_readsl2 | multi_adsl2plus}>] [trace = <{disabled | enabled}>] where: opermode The operational mode of the SpeedTouch™. Choose between: multimode multi_adsl2 multi_readsl2 multi_adsl2plus OPTIONAL The default is multi_adsl2plus. trace Enable or disable ADSL tracing. The default is enabled.
PAGE 29
ADSL Commands adsl info Display the ADSL statistics and information about the DSL line status. Although the same command is used for both SpeedTouch™ ADSL/POTS and SpeedTouch™ ADSL/ISDN variants, the command features specific output parameters and counters per variant.
PAGE 30
ADSL Commands 6 E-DOC-CTC-20050531-0061 v1.
PAGE 31
ATM Commands ATM Commands Introduction This chapter describes the commands of the atm command group. Contents This chapter covers the following commands: atm flush Flush all Asynchronous Transfer Mode (ATM) interfaces. 9 atm ifadd Create a new ATM interface. 10 atm ifattach Attach a ATM interface. 11 atm ifconfig Configure an ATM interface. 12 atm ifdelete Delete an ATM interface. 14 atm ifdetach Detach an ATM interface. 15 atm iflist Display the ATM interfaces.
PAGE 32
ATM Commands atm oam vclb add Create a loopback connection for VC. 41 atm oam vclb del Delete a loopback connection for VC. 42 atm oam vclb list List all VC loopback connections. 43 atm phonebook add Add a new phonebook entry. 44 atm phonebook autolist Show the auto PVCs. 45 atm phonebook delete Delete an existing phonebook entry. 46 atm phonebook flush Flush all the phonebook entries. 47 atm phonebook list Display the current phonebook. 48 atm qosbook add Add a new QoS book entry.
PAGE 33
ATM Commands atm flush Flush all Asynchronous Transfer Mode (ATM) interfaces. SYNTAX: atm flush E-DOC-CTC-20050531-0061 v1.
PAGE 34
ATM Commands atm ifadd Create a new ATM interface. SYNTAX: atm ifadd intf = where: intf REQUIRED The name for the new ATM interface. Note If not specified, the destination parameter must be specified. In this case the name of the destination will double as interface name.
PAGE 35
ATM Commands atm ifattach Attach a ATM interface. SYNTAX: atm ifattach intf = where: intf The name of the ATM interface to be attached.
PAGE 36
ATM Commands atm ifconfig Configure an ATM interface. The interface to be configured must not be connected at the time of configuration. If this should be the case, use the command :atm ifdetach before using the command :atm ifconfig. SYNTAX: atm ifconfig intf = [dest = ] [qos = ] [encaps = <{llc | vcmux}>] [retry = ] [fcs = <{disabled | enabled | auto}>] [ulp = <{ip | mac | ppp}>] where: intf The name of the ATM interface to be configured.
PAGE 37
ATM Commands EXAMPLE: =>atm iflist atm_0_35 : dest : atm_pvc_0_35 Retry : 10 QoS : default Encaps : llc Fcs : disabled Ulp : mac Connection State : connected atm_8_35 : dest : atm_pvc_8_35 Retry : 10 QoS : default Encaps : llc Fcs : disabled Ulp : mac Connection State : not-connected => =>atm ifconfig intf=atm_8_35 dest=atm_pvc_8_35 encaps=vcmux ulp=ppp => =>atm iflist atm_0_35 : dest : atm_pvc_0_35 Retry : 10 QoS : default Encaps : llc Fcs : disabled Ulp : mac Connection State : connected atm_8_35 : de
PAGE 38
ATM Commands atm ifdelete Delete an ATM interface. SYNTAX: atm ifdelete intf = where: intf The name of the ATM interface to be deleted.
PAGE 39
ATM Commands atm ifdetach Detach an ATM interface. SYNTAX: atm ifdetach intf = where: intf The name of the ATM interface to be detached.
PAGE 40
ATM Commands atm iflist Display the ATM interfaces. SYNTAX: atm iflist [intf = ] where: intf The name of the ATM interface to be shown. Note OPTIONAL If not specified, all the ATM interfaces are shown.
PAGE 41
ATM Commands atm bundle add Add a new bundle of interfaces. SYNTAX: atm bundle add name = where: name The name of the new bundle. REQUIRED EXAMPLE: =>atm bundle add name=myBundle =>atm bundle list myBundle: Connection state : not-connected Retry: 10 Policy: priority Propagate: disabled TX requested bytes: 0 requested frames: 0 TX bytes: 0 frames: 0 RX bytes: 0 frames: 0 => RELATED COMMANDS: atm bundle delete Delete a bundle of interfaces. atm bundle list Display the current bundles.
PAGE 42
ATM Commands atm bundle attach Attach a bundle of interfaces. SYNTAX: atm bundle attach name = where: name The name of the bundle to be attached. REQUIRED EXAMPLE: =>atm bundle attach name=myBundle =>atm bundle list myBundle: Connection state : connected Retry: 10 TX requested bytes: 0 TX bytes: 0 RX bytes: 0 => Policy: priority Propagate: disabled requested frames: 0 frames: 0 frames: 0 RELATED COMMANDS: atm bundle detach 18 Detach a bundle of interfaces. E-DOC-CTC-20050531-0061 v1.
PAGE 43
ATM Commands atm bundle config Modify a bundle of interfaces. The bundle of interfaces to be configured must not be connected at the time of configuration. If this should be the case, use the command :atm bundle detach before using the command :atm bundle config. SYNTAX: atm bundle config name = [policy = <{priority | connection}>] [propagate = <{disabled | enabled}>] [retry = ] where: name The name of the bundle to be configured.
PAGE 44
ATM Commands atm bundle clear Clear the bundle statistics. SYNTAX: atm bundle clear [name = ] where: name The name of the bundle for which the statistics must be cleared. Note 20 OPTIONAL If not specified, the statistics for all the bundles will be cleared. E-DOC-CTC-20050531-0061 v1.
PAGE 45
ATM Commands atm bundle delete Delete a bundle of interfaces. SYNTAX: atm bundle delete name = where: name The name of the bundle to be deleted. REQUIRED RELATED COMMANDS: atm bundle add Add a new bundle of interfaces. atm bundle list Display the current bundles. E-DOC-CTC-20050531-0061 v1.
PAGE 46
ATM Commands atm bundle detach Detach a bundle of interfaces. SYNTAX: atm bundle detach intf = where: intf The name of the bundle to be detached. REQUIRED RELATED COMMANDS: atm bundle attach 22 Attach a bundle of interfaces. E-DOC-CTC-20050531-0061 v1.
PAGE 47
ATM Commands atm bundle flush Flush all bundles. SYNTAX: atm bundle flush E-DOC-CTC-20050531-0061 v1.
PAGE 48
ATM Commands atm bundle ifadd Add an interface on a bundle. Up to 8 interfaces or (sub-)bundles can be added to one bundle. SYNTAX: atm bundle ifadd name = intf = [index = ] where: name The name of the bundle to which an ATM interface must be added. REQUIRED intf The name of the ATM interface to be added. REQUIRED index A number between 0 and 6. Represents the index of the ATM interface.
PAGE 49
ATM Commands atm bundle ifconfig Configure an interface from a bundle. The interface to be configured must not be connected at the time of configuration. If this should be the case, use the command :atm bundle ifdetach before using the command :atm bundle ifconfig. SYNTAX: atm bundle ifconfig name = intf = [state = <{disabled | enabled}>] [low = ] [high = ] where: name The name of the bundle from which an ATM interface must be configured.
PAGE 50
ATM Commands atm bundle ifdelete Remove an interface from a bundle. SYNTAX: atm bundle ifdelete name = intf = where: name The name of the bundle from which an ATM interface must be removed. REQUIRED intf The name of the ATM interface to be removed.
PAGE 51
ATM Commands atm bundle list Display the current bundles. SYNTAX: atm bundle list EXAMPLE: =>atm bundle list Test : Connection state : not-connected Retry: 10 Policy: priority TX requested bytes: 0 requested frames: 0 TX bytes: 0 frames: 0 RX bytes: 0 frames: 0 Interface: Test State: enabled Selector: 0-15 TX bytes: 0 frames: 0 RX bytes: 0 frames: 0 RX discarded bytes: 0 discarded frames: 0 Disconnects: 0 => RELATED COMMANDS: atm bundle add Add a new bundle of interfaces.
PAGE 52
ATM Commands atm cac config Configure the ATM connection admission control. SYNTAX: atm cac config config port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> state = <{disabled|enabled}> where: config port The port for which CAC is configured. REQUIRED state Enable/disable CAC for an ATM port. REQUIRED EXAMPLE: {Administrator}=>atm cac config port = dsl0 state = enabled :atm cac config port=dsl0 state=enabled {Administrator}=> RELATED COMMANDS: atm cac list Display all the CAC parameters.
PAGE 53
ATM Commands atm cac list Display all the CAC parameters. SYNTAX: atm cac list EXAMPLE: {Administrator}[atm cac]=>list CAC: port: dsl0 state: enabled CAC: port: dsl1 state: enabled CAC: port: atm2 state: enabled CAC: port: aal5 state: disabled CAC: port: atm5 state: disabled Overbooking: realtime: 0% non-realtime: 0%. {Administrator}[atm cac]=> RELATED COMMANDS: atm cac config Configure the ATM connection admission control. atm cac overbooking Configure ATM overbooking parameters.
PAGE 54
ATM Commands atm cac overbooking Configure ATM overbooking parameters. SYNTAX: atm cac overbooking rt = nrt = where: rt A number between 0 and 1000. The realtime overbooking percentage. REQUIRED nrt A number between 0 and 1000. The non-realtime overbooking percentage.
PAGE 55
ATM Commands atm debug aal5stats Display ATM Adaptation Layer 5 (AAL5) port specific ATM statistics. SYNTAX: atm debug aal5stats port = <{dsl0} or number> vpi = [vci = ] [clear = <{disabled | enabled}>] where: port The port number for which statistics will be retrieved. Choose between: REQUIRED DSL0 Or specify a port number (dsl0 has port number 0). vpi A number between 0 and 15.
PAGE 56
ATM Commands atm debug gstats Display ATM global statistics. SYNTAX: atm debug gstats [clear = <{disabled | enabled}>] where: clear Enable or disable clearing of the statistics after request. OPTIONAL EXAMPLE: {admin}[atm debug]=>gstats # of received octets = 1802. # of transmitted octets = 4346. # of received cells = 34. # of transmitted cells = 82. # of unknown cells = 0. # of errors on the input = 0. # of errors on output = 0.
PAGE 57
ATM Commands atm debug portstats Display port specific ATM statistics. SYNTAX: atm debug portstats port = <{dsl0} or number> [clear = <{disabled | enabled}>] where: port The port number for which statistics will be retrieved. Choose between: REQUIRED DSL0 Or specify a port number (dsl0 has port number 0). clear Enable or disable clearing of the statistics after request. OPTIONAL EXAMPLE: =>atm debug portstats port=dsl0 # of received octets = 1961. # of transmitted octets = 4717.
PAGE 58
ATM Commands atm oam config Modify the ATM Operation and Maintenance (OAM) settings. SYNTAX: atm oam config [clp = ] [loopbackid = ] where: clp A number (0 or 1). Represents the Cell Loss Priority (CLP) bit value of the OAM cells. The default is 1. OPTIONAL loopbackid A hexadecimal string. Represents the loopback ID for processing of segment loopback cells. The default is 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a.
PAGE 59
ATM Commands atm oam list Display the ATM OAM settings. SYNTAX: atm oam list EXAMPLE: =>atm oam list OAM config dump ------------------CLP bit value : 1 Loopback id : 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a OAM data blocking mode -------------------------Port dsl0: blocking Port dsl1: blocking Port atm2: blocking Port atm3: blocking Port aal5: blocking Port atm5: blocking => RELATED COMMANDS: atm oam config Modify the ATM Operation and Maintenance (OAM) settings.
PAGE 60
ATM Commands atm oam modify Modify the ATM OAM data blocking mode. SYNTAX: atm oam modify port = <{dsl0} or number> blocking = <{disabled | enabled}> where: port The port for which OAM blocking is configured. Choose between: REQUIRED DSL0 Or specify a port number (dsl0 has port number 0). blocking Enable or disable the OAM data blocking mode on this port. The default is enabled.
PAGE 61
ATM Commands atm oam ping Send ATM loopback cells. SYNTAX: atm oam ping dest = [count = ] [interval = ] where: dest The destination address for the request. This can be any ATM phonebook entry. REQUIRED count A number between 1 and 1000000. Represents the number of pings to send. OPTIONAL interval A number between 100 and 1000000 (milliseconds). Represents the interval between packets.
PAGE 62
ATM Commands atm oam cc list Display Continuity Check (CC) configuration. SYNTAX: atm oam cc list EXAMPLE: =>atm oam cclist PORT = 0 VPI = 15 VCI = 16 End2End Mode = Auto Segment Mode = Auto PORT = 0 VPI = 0 VCI = 35 End2End Mode = Auto Segment Mode = Auto PORT = 0 VPI = 8 VCI = 35 End2End Mode = Auto Segment Mode = Auto PORT = 0 VPI = 0 VCI = 16 End2End Mode = Auto Segment Mode = Auto => RELATED COMMANDS: atm oam cc modify Modify CC on the connection.
PAGE 63
ATM Commands atm oam cc modify Modify CC on the connection. SYNTAX: atm oam modify port = <{dsl0} or number> vpi = [vci = ] [transmit = <{disabled | enabled}>] [receive = <{disabled | enabled}>] [auto = <{disabled | enabled}>] [span = <{segment | end2end}>] where: port The ATM port number. Choose between: REQUIRED DSL0 Or specify a port number (dsl0 has port number 0). vpi A number between 0 and 15. Represents the VPI. REQUIRED vci A number between 0 and 511.
PAGE 64
ATM Commands atm oam cc send Send CC activate/deactivate to connection. SYNTAX: atm oam cc send port = <{dsl0} or number> vpi = [vci = ] [span = <{segment | end2end}>] [action = <{activate | deactivate}>] [direction = <{source | sink | both}>] where: port The ATM port number. Choose between: REQUIRED DSL0. Or specify a port number (dsl0 has port number 0). vpi A number between 0 and 15. Represents the VPI. REQUIRED vci A number between 0 and 511.
PAGE 65
ATM Commands atm oam vclb add Create a loopback connection for VC. SYNTAX: atm oam vclb add port = <{dsl0} or number> vpi = [vci = ] where: port The ATM port number. Choose between: REQUIRED DSL0 Or specify a port number (dsl0 has port number 0). vpi A number between 0 and 15. Represents the VPI. REQUIRED vci A number between 0 and 511. Represents the VCI. OPTIONAL Note For a VP cross-connection, use 0 or do not specify.
PAGE 66
ATM Commands atm oam vclb del Delete a loopback connection for VC. SYNTAX: atm oam vclb del port = <{dsl0} or number> vpi = [vci = ] where: port The ATM port number. Choose between: REQUIRED DSL0 Or specify a port number (dsl0 has port number 0). vpi A number between 0 and 15. Represents the VPI. REQUIRED vci A number between 0 and 511. Represents the VCI. OPTIONAL Note For a VP cross-connection, use 0 or do not specify.
PAGE 67
ATM Commands atm oam vclb list List all VC loopback connections. SYNTAX: atm oam vclb list EXAMPLE: =>atm oam vclb list PORT = 0 VPI = 0 VCI = PORT = 1 VPI = 0 VCI = => 36 37 RELATED COMMANDS: atm oam vclb add Create a loopback connection for VC. atm oam vclb del Delete a loopback connection for VC. E-DOC-CTC-20050531-0061 v1.
PAGE 68
ATM Commands atm phonebook add Add a new phonebook entry. SYNTAX: atm phonebook add name = addr = where: name addr The name of the new phonebook entry.
PAGE 69
ATM Commands atm phonebook autolist Show the auto PVCs. Auto PVCs are only shown if they are supported by the Central Office DSLAM. SYNTAX: atm phonebook autolist EXAMPLE: =>atm phonebook autolist 8.35 => RELATED COMMANDS: atm phonebook list E-DOC-CTC-20050531-0061 v1.0 Display the current phonebook.
PAGE 70
ATM Commands atm phonebook delete Delete an existing phonebook entry. This command is only applicable for phonebook entries that are not used (in other words, not configured for any packet service). SYNTAX: atm phonebook delete name = where: name The name of the phonebook entry to be deleted. Tip REQUIRED Use the command :atm phonebook list to check whether the entry is in use (Use=1) or not (Use=0). EXAMPLE: =>atm phonebook list Name Use Address atm_pvc_0_35 1 0.35 RtPPPoA 0 8.
PAGE 71
ATM Commands atm phonebook flush Flush all the phonebook entries. 1. Phonebook entries that are in use, cannot be flushed. 2. This command does not impact previously saved configurations. SYNTAX: atm phonebook flush EXAMPLE: =>atm phonebook list Name Use Address atm_pvc_0_35 1 0.35 RtPPPoA 0 8.35 => =>atm phonebook flush Some phonebook entries are still in use. Entries that are in use cannot be deleted. => =>atm phonebook list Name Use Address atm_pvc_0_35 1 0.35 => E-DOC-CTC-20050531-0061 v1.
PAGE 72
ATM Commands atm phonebook list Display the current phonebook. SYNTAX: atm phonebook list EXAMPLE: =>atm phonebook list Name Use Address atm_pvc_0_35 1 0.35 RtPPPoA 0 8.35 => RELATED COMMANDS: atm phonebook add Add a new phonebook entry. atm phonebook autolist Show the auto PVCs. atm phonebook delete Delete an existing phonebook entry. 48 E-DOC-CTC-20050531-0061 v1.
PAGE 73
ATM Commands atm qosbook add Add a new QoS book entry. SYNTAX: atm qosbook add name = [txctd = ] [rxctd = ] where: name The name of the new QoS entry. REQUIRED txctd The name of the Conformance Traffic Descriptor (CTD) for the transmit (upstream) direction. OPTIONAL rxctd The name of the CTD for the receive (downstream) direction.
PAGE 74
ATM Commands atm qosbook config Modify the QoS book configuration. SYNTAX: atm qosbook config [format = <{bytes | cells}>] where: format The input/output format of the QoS book. Choose between: OPTIONAL bytes: the output is shown in Kbits or bytes. cells: the output is shown in cps or cells. The default is bytes.
PAGE 75
ATM Commands atm qosbook ctdadd Add a Connection Traffic Descriptor (CTD). SYNTAX: atm qosbook ctdadd name = conformance = <{UBR | CBR | VBR }> [peakrate = ] [sustrate = ] [realtime = <{enabled | disabled}>] where: name The name of the new CTD. REQUIRED conformance The ATM service conformance definition. REQUIRED peakrate A number between 0 and 27786. Represents the peak rate (in kilobits per second).
PAGE 76
ATM Commands IMPORTANT NOTE: The SpeedTouch™ always rounds up specified burst sizes to a multiple of 48 bytes (a multiple of ATM cells). Example: In the example below a burst size of 100 bytes is specified (maxburst=100). The SpeedTouch™ will round up the burst size to the closest matching multiple of 48 bytes, as can be seen when displaying the profile via the command :atm qosbook ctdlist (burst=144).
PAGE 77
ATM Commands atm qosbook ctddelete Delete a CTD. SYNTAX: atm qosbook ctddelete name = [force = <{disabled | enabled}>] where: name The name of the CTD entry to be deleted. REQUIRED force Enable or disable to force delete the entry even when it is still in use. The default is disabled.
PAGE 78
ATM Commands atm qosbook ctdlist Display all CTDs. SYNTAX: atm qosbook ctdlist EXAMPLE: =>atm qosbook ctdlist Name Ref Conf Peak (Kbits) default 2 High 0 => UBR CBR Sust (Kbits) linerate 0 27786 0 Burst (bytes) Minrate (Kbits) Frame (bytes) Cdvt RT FD 0 0 0 0 0 0 0 0 disabled disabled disabled disabled RELATED COMMANDS: atm qosbook ctdadd Add a Connection Traffic Descriptor (CTD). atm qosbook ctddelete Delete a CTD. 54 E-DOC-CTC-20050531-0061 v1.
PAGE 79
ATM Commands atm qosbook delete Delete a QoS book entry. SYNTAX: atm qosbook delete name = [force = <{disabled | enabled}>] where: name The name of the QoS book entry to be deleted. REQUIRED force Enable or disable to force delete the entry even when it is still in use. The default is disabled.
PAGE 80
ATM Commands atm qosbook flush Flush all the QoS book entries. The flush command does not impact previously saved configurations. SYNTAX: atm qosbook flush 56 E-DOC-CTC-20050531-0061 v1.
PAGE 81
ATM Commands atm qosbook list Display the QoS book. SYNTAX: atm qosbook list EXAMPLE: =>atm qosbook list Name Ref Type default 3 TestVBR 0 => TX peak (Kbits) ubr linerate vbr-nrt 1500 sust (Kbits) 0 1000 burst (bytes) 0 144 RX peak (Kbits) linerate 1500 sust (Kbits) 0 1000 burst (bytes) 0 144 framediscard disabled enabled RELATED COMMANDS: atm qosbook add Add a new QoS book entry. atm qosbook delete Delete a QoS book entry. E-DOC-CTC-20050531-0061 v1.
PAGE 82
ATM Commands 58 E-DOC-CTC-20050531-0061 v1.
PAGE 83
AutoPVC Commands AutoPVC Commands Introduction This chapter describes the commands of the autopvc command group. Contents This chapter covers the following commands: autopvc config Configure autopvc. 60 autopvc list Show the retrieved information. 61 E-DOC-CTC-20050531-0061 v1.
PAGE 84
AutoPVC Commands autopvc config Configure autopvc. SYNTAX: autopvc config [mode = <{pseudo | passive | active}>] [type = <{bridge | pppoerelay | ipoa | ethoa | pppoa | pppoe}>] [overwrite = <{disabled | enabled}>] [peakrate = ] where: mode Select the autopvc mode: OPTIONAL pseudo: only pseudo-ILMI (VP/VC 15/16) is enabled.
PAGE 85
AutoPVC Commands autopvc list Show the retrieved information. SYNTAX: autopvc list [table = <{Port | AtmLayer | Vpc | Vcc | Address | AddressRegistrationAdmin | AtmServiceType | AtmServiceConnectionInfo | AAL1Profile | | AAL34Profile | AAL5Profile | AAL2CommonProfile | AAL2TrunkingProfile | AAL2LESProfile | AtmServiceConnInfoExtension | | AtmServiceTypeExtension | AAL5ProfileExtension}>] where: table Select the autopvc table for which the information must be shown.
PAGE 86
AutoPVC Commands 62 E-DOC-CTC-20050531-0061 v1.
PAGE 87
Config Commands Config Commands Introduction This chapter describes the commands of the config command group. Contents This chapter covers the following commands: config delete Delete a user configuration file. 64 config dump Show the saved configuration file. 65 config flush Flush the loaded configuration. 66 config list Show the current configuration set. 67 config load Load complete saved (backup) or default configuration file.
PAGE 88
Config Commands config delete Delete a user configuration file. SYNTAX: config delete [filename = ] where: filename Name of the user configuration file to be deleted. Note OPTIONAL If not specified, all the user configuration files that were saved in the SpeedTouch™ permanent storage will be deleted. RELATED COMMANDS: config dump 64 Show the saved configuration file. E-DOC-CTC-20050531-0061 v1.
PAGE 89
Config Commands config dump Show the saved configuration file. SYNTAX: config dump RELATED COMMANDS: config delete E-DOC-CTC-20050531-0061 v1.0 Delete a user configuration file.
PAGE 90
Config Commands config flush Flush the loaded configuration. 1. This flush command combines all the possible flush commands. 2. This command does not affect saved configurations. SYNTAX: config flush [flush_ip = <{disabled | enabled}>] where: flush_ip Flush IP settings (enabled) or not (disabled). The default is disabled. Note 66 OPTIONAL Not keeping the IP settings could cause lost IP connectivity in the LAN. E-DOC-CTC-20050531-0061 v1.
PAGE 91
Config Commands config list Show the current configuration set. SYNTAX: config list [templates = <{disabled | enabled}>] where: templates List the template files (disabled) or not (enabled). The default is disabled. OPTIONAL RELATED COMMANDS: config load Load complete saved (backup) or default configuration file. config save Store the current configuration in a backup file. E-DOC-CTC-20050531-0061 v1.
PAGE 92
Config Commands config load Load complete saved (backup) or default configuration file. Use the command :config flush before loading a configuration file. SYNTAX: config load [load_ip = <{disabled | enabled}>] [defaults = <{enabled | disabled}>] [flush = <{enabled | disabled}>] [echo = <{disabled | enabled}>] [filename = ] where: load_ip Note defaults OPTIONAL Load IP settings (enabled) or not (disabled). Not keeping the IP settings could cause lost IP connectivity in the LAN.
PAGE 93
Config Commands config save Store the current configuration in a backup file. All the existing configurations and modifications entered by the user are saved. The backup file is saved in the SpeedTouch™ permanent storage. This file can be downloaded via the SpeedTouch™ web pages or via an FTP session. SYNTAX: config save filename = where: filename The filename for the backup file of the current configuration. REQUIRED RELATED COMMANDS: config list Show the current configuration set.
PAGE 94
Config Commands 70 E-DOC-CTC-20050531-0061 v1.
PAGE 95
Connection Commands Connection Commands Introduction This chapter describes the commands of the connection command group. Contents This chapter covers the following commands: connection appconfig Configure the available CONN/NAT application helpers. 72 connection appinfo Display CONN/NAT application specific info. 74 connection applist List the available CONN/NAT application helpers. 75 connection bind Create a new CONN/NAT application helper/port binding.
PAGE 96
Connection Commands connection appconfig Configure the available CONN/NAT application helpers. SYNTAX: connection appconfig application = [trace = <{disabled | enabled}>] [timeout = ] [floating = <{disabled | enabled}>] [tracelevel = ] where: application REQUIRED The name of a CONN/NAT application helper. Tip Use the command :connection applist to obtain a list of CONN/NAT application helpers. trace Enable or disable CONN/NAT application helper traces.
PAGE 97
Connection Commands RELATED COMMANDS: connection appinfo Display CONN/NAT application specific info. connection applist List the available CONN/NAT application helpers. E-DOC-CTC-20050531-0061 v1.
PAGE 98
Connection Commands connection appinfo Display CONN/NAT application specific info. SYNTAX: connection appinfo application = <{string}> where: application REQUIRED The name of a CONN/NAT application helper. Tip Use the command :connection applist to obtain a list of CONN/NAT application helpers. EXAMPLE: =>connection appinfo application=SIP SIP ALG session SIPALG: pool=138, in use=0, bottom=138 => RELATED COMMANDS: connection appconfig Configure the available CONN/NAT application helpers.
PAGE 99
Connection Commands connection applist List the available CONN/NAT application helpers.
PAGE 100
Connection Commands connection bind Create a new CONN/NAT application helper/port binding. SYNTAX: connection bind application = port = where: application Tip port REQUIRED The name of a CONN/NAT application helper. Use the command :connection applist to obtain a list of CONN/NAT application helpers. The port number or port range this application handler should work on. REQUIRED EXAMPLE: =>connection Application JABBER JABBER FTP IRC ...
PAGE 101
Connection Commands connection bindlist List the current CONN/NAT application helper/port bindings.
PAGE 102
Connection Commands connection clean Clean the connection database by forcing timeouts. SYNTAX: connection clean [level = ] where: level A number between 0 and 9. Represents the desired scrubbing level. The default is ... . OPTIONAL EXAMPLE: =>connection list ID proto state ------ ----8 tcp ACTIVE INIT: 16 192.168. RESP: 17 192.168. 34 tcp ACTIVE INIT: 68 192.168. RESP: 69 192.168. =>connection clean =>connection list ID proto state ------ ----8 tcp ACTIVE INIT: 16 192.168. RESP: 17 192.
PAGE 103
Connection Commands connection clear Kill all the connections. SYNTAX: connection clear EXAMPLE: =>connection clear Connection to host lost. E-DOC-CTC-20050531-0061 v1.
PAGE 104
Connection Commands connection config Configure the connection handling. SYNTAX: connection config [configchangemode = <{immediate | delayed}>] [probes = <{disabled | enabled}>] [udptrackmode = <{strict | loose}>] where: configchangemode Select how configuration changes are handled. Choose between: immediate delayed. OPTIONAL The default is immediate. probes Enable or disable live probes on idle connections. The default is disabled.
PAGE 105
Connection Commands connection debug The connection debug commands SYNTAX: connection debug [trace = <{disabled|enabled}>] where: trace Enable or disable traces. The default is disabled. OPTIONAL EXAMPLE: =>connection debug connection traces : disabled => =>connection debug trace enabled => =>connection debug connection traces : enabled => E-DOC-CTC-20050531-0061 v1.
PAGE 106
Connection Commands connection describe Describe the streams of a connection. SYNTAX: connection describe [id = ] where: id A number between 0 and 2048. Represents the ID of the connection to be described. Note If not specified, the connection with ID 0 will be described. Tip Use the command :connection list to obtain the IDs of the different connections.
PAGE 107
Connection Commands connection flush Flush the current connection configuration. SYNTAX: connection flush E-DOC-CTC-20050531-0061 v1.
PAGE 108
Connection Commands connection info Show all the registered modules with some info. SYNTAX: connection info EXAMPLE: =>connection info Registered connection modules : - Module : FW, holds private data (F:10264 S:6592). - Module : IDS, holds private data (F:0 S:0). - Module : NAT, holds private data (F:0 S:0). Registered stream modules : - Module : ROUTING, holds private data (F:10199 S:6657). - Module : LABEL, holds private data (F:22546 S:19870). - Module : IPQOS, holds private data (F:10202 S:6653).
PAGE 109
Connection Commands connection list Display the currently known connections. SYNTAX: connection list [nr = ] where: nr OPTIONAL A number between 1 and 2048. Represents the number of connections to be displayed. Note If not specified, all the connections will be displayed. EXAMPLE: =>connection list ID proto state ------ ----58 tcp ACTIVE INIT: 116 10. RESP: 117 10. => E-DOC-CTC-20050531-0061 v1.0 0. 0.
PAGE 110
Connection Commands connection refresh Invalidate all the cached decisions. SYNTAX: connection refresh 86 E-DOC-CTC-20050531-0061 v1.
PAGE 111
Connection Commands connection stats Display the connection and stream statistics.
PAGE 112
Connection Commands connection timerclear Clear the connection timeout to default. SYNTAX: connection timerclear [timer = <{tcpidle|tcpneg|tcpkill|udpidle|udpkill| icmpkill|ipidle|ipkill}>] where: timer The name of the connection idle timer to be reset. Note REQUIRED If not specified, all the timers will be reset to their default values.
PAGE 113
Connection Commands connection timerconfig Configure the connection timeout handling. SYNTAX: connection timerconfig [timer = <{tcpidle|tcpneg|tcpkill|udpidle|udpkill| icmpkill|ipidle|ipkill}>] [value = ] where: timer value The name of the connection idle timer ot be configured. Choose between: tcpidle tcpneg tcpkill udpidle udpkill icmpkill ipidle ipkill A number between 0 and 86400 (seconds). Represents the timer expire value.
PAGE 114
Connection Commands connection unbind Delete an existing CONN/NAT application helper/port binding. SYNTAX: connection unbind application = port = where: application Tip port REQUIRED The name of a CONN/NAT application helper. Use the command :connection applist to obtain a list of CONN/NAT application helpers. The port number or port range this application handler should work on. REQUIRED EXAMPLE: =>connection Application IRC JABBER JABBER FTP IRC ...
PAGE 115
CWMP Commands CWMP Commands Introduction This chapter describes the commands of the cwmp (CPE WAN Management Protocol) command group. Contents This chapter covers the following commands: cwmp config Configure the cwmpd as seen from the ACS. 92 cwmp traceconfig Enable or disable tracing. 94 cwmp server config Configure the cwmpd as seen from the ACS. 95 E-DOC-CTC-20050531-0061 v1.
PAGE 116
CWMP Commands cwmp config Configure the cwmpd as seen from the ACS. SYNTAX: cwmp config [state = <{disabled|enabled}>] [mode = <{readonly|full}>] [periodicInform = <{disabled|enabled}>] [periodicInfInt = ] [maxEnvelopes = ] [connectionRequest = <{disabled|enabled}>] [connectionReqPath = ] [connectionReqUserName = ] [connectionReqPsswd = ] [connectionReqAuth = <{none|basic|digest}>] where: state The state of the cwmp daemon.
PAGE 117
CWMP Commands connectionReqPsswd Set the password the ACS must use to log in. OPTIONAL connectionReqAuth Set the digest authentication flag of the cwmp daemon. Choose between: OPTIONAL enabled disabled. The default is enabled.
PAGE 118
CWMP Commands cwmp traceconfig Enable or disable tracing.
PAGE 119
CWMP Commands cwmp server config Configure the cwmpd as seen from the ACS. SYNTAX: cwmp server config [address = ] [port = ] [path = ] [username = ] [password = ] [intf = ] where: address Set the IP address of the ACS server. OPTIONAL port Set the port of the ACS server. The default is 7002. OPTIONAL path Set the path of URL used to contact the ACS server. OPTIONAL username Set the username for ACS Digest Authentication.
PAGE 120
CWMP Commands 96 E-DOC-CTC-20050531-0061 v1.
PAGE 121
Debug Commands Debug Commands Introduction This chapter describes the commands of the debug command group. Contents This chapter covers the following commands: debug exec E-DOC-CTC-20050531-0061 v1.0 Execute a 'Trace & Debug' command.
PAGE 122
Debug Commands debug exec Execute a 'Trace & Debug' command. ! This command is for qualified personnel only. SYNTAX: debug exec cmd = where: cmd 98 A quoted 'Trace & Debug' command string. REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 123
DHCP Commands DHCP Commands Introduction This chapter describes the commands of the Dynamic Host Configuration Protocol (DHCP) command group. Contents This chapter covers the following commands: dhcp client flush Delete all the DHCP leases attached to dynamic interfaces. 101 dhcp client ifadd Create a DHCP lease for a specific interface. 102 dhcp client ifattach Attach a DHCP lease to a dynamic interface. 103 dhcp client ifconfig Configure a DHCP lease created for a specific interface.
PAGE 124
DHCP Commands dhcp server option instadd Add a DHCP server option instance. 137 dhcp server option instdelete Delete a DHCP server option instance. 138 dhcp server option instlist List all the DHCP server option instances. 139 dhcp server option tmpladd Add a DHCP server option template. 140 dhcp server option tmpldelete Delete a DHCP server option template. 141 dhcp server option tmpllist List all the DHCP server option templates. 142 dhcp server pool add Add a DHCP server pool.
PAGE 125
DHCP Commands dhcp client flush Delete all the DHCP leases attached to dynamic interfaces. The flush command does not impact previously saved configurations. SYNTAX: dhcp client flush E-DOC-CTC-20050531-0061 v1.
PAGE 126
DHCP Commands dhcp client ifadd Create a DHCP lease for a specific interface. SYNTAX: dhcp client ifadd intf = where: intf The name of the dynamic interface for which a DHCP lease must be created. REQUIRED EXAMPLE: =>dhcp client iflist No dynamic interfaces defined. =>dhcp client ifadd intf=myPPP_ppp [dhcp client]=>iflist myPPP_ppp : [INIT] flags = uc dns rt IP address : 0.0.0.0 HW address [SpeedTouch] : 00 DHCP server: 255.255.255.
PAGE 127
DHCP Commands dhcp client ifattach Attach a DHCP lease to a dynamic interface. SYNTAX: dhcp client ifattach intf = where: intf The name of the dynamic interface. REQUIRED EXAMPLE: =>dhcp client iflist myPPP_ppp : [INIT] flags = bc dns rt IP address : 0.0.0.0 HW address [SpeedTouch] : 00 DHCP server: 255.255.255.
PAGE 128
DHCP Commands dhcp client ifconfig Configure a DHCP lease created for a specific interface. Use the command :dhcp client ifrelease before configuring the dhcp client.
PAGE 129
DHCP Commands EXAMPLE: =>dhcp client iflist myPPP_ppp : [SELECTING] flags = bc dns rt IP address : 0.0.0.0 HW address [SpeedTouch] : 00 DHCP server: 255.255.255.255 metric : rt = 1, DNS = 1 trying to get a lease for 1 sec transmission of DISCOVER in 0 sec retransmission timeout: 4 nbr of retransmissions: 2 Number of leases: 1 Total size of table: 36, in use: 1, free: 97 % =>dhcp client ifconfig intf=myPPP_ppp clientid=myClientID hostname=myHostName userid=myUserID addr =10.0.0.
PAGE 130
DHCP Commands dhcp client ifdelete Delete a DHCP lease attached to a dynamic interface. SYNTAX: dhcp client ifdelete intf = where: intf The name of the dynamic interface for which the DHCP lease must be deleted. REQUIRED EXAMPLE: =>dhcp client iflist myPPP_ppp : [INIT] flags = bc dns rt IP address : 10.0.0.1 HW address [SpeedTouch] : 00:90:d0:01:47:f1 DHCP server: 10.10.1.
PAGE 131
DHCP Commands dhcp client iflist List all the DHCP leases attached to dynamic interfaces. SYNTAX: dhcp client iflist EXAMPLE: =>dhcp client iflist myPPP_ppp : [INIT] flags = bc dns rt IP address : 10.0.0.1 HW address [SpeedTouch] : 00:90:d0:01:47:f1 DHCP server: 10.10.1.
PAGE 132
DHCP Commands dhcp client ifrelease Release a DHCP lease attached to a dynamic interface. SYNTAX: dhcp client ifrelease intf = where: intf The name of the dynamic interface for which the DHCP lease must be released. REQUIRED EXAMPLE 1: =>dhcp client iflist NewETHoA : [SELECTING] flags= uc IP address : 10.0.0.10 HW address : 00:90:d0:01:47:de DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 133
DHCP Commands EXAMPLE 2: The SpeedTouch™ is configured as DHCP client disabled its Ethernet interface eth0. =>dhcp client iflist eth0 : [BOUND] flags= uc IP address : 10.0.0.3 HW address : 00:90:d0:01:47:f1 DHCP server : 10.10.1.
PAGE 134
DHCP Commands dhcp client ifrenew Renew the DHCP lease of a dynamic interface. SYNTAX: dhcp client ifrenew intf = where: intf The name of the dynamic interface for which the DHCP lease must be renewed. REQUIRED EXAMPLE 1: =>dhcp client iflist NewETHoA : [BOUND] flags= uc IP address : 10.0.0.10 HW address : 00:90:d0:01:47:f1 DHCP server : 255.255.255.255 hostname : NewLease req.
PAGE 135
DHCP Commands EXAMPLE 2: The SpeedTouch™ is configured as DHCP client disabled its Ethernet interface eth0.
PAGE 136
DHCP Commands dhcp client debug clear Clear the DHCP client statistics.
PAGE 137
DHCP Commands dhcp client debug stats Print the DHCP client statistics.
PAGE 138
DHCP Commands dhcp client debug traceconfig Modify the DHCP client trace configuration. SYNTAX: dhcp client debug traceconfig [state = <{disabled | enabled}>] where: state Enable or disable tracing. The default is disabled. OPTIONAL EXAMPLE: =>dhcp client debug traceconfig tracing: disabled =>dhcp client debug traceconfig trace=enabled =>dhcp client debug traceconfig tracing: enabled => 114 E-DOC-CTC-20050531-0061 v1.
PAGE 139
DHCP Commands dhcp relay add Add a DHCP server to the DHCP server list. SYNTAX: dhcp relay add addr = [intf = ] [giaddr = ] where: addr The IP address of the DHCP server. REQUIRED intf The name of the relay interface. OPTIONAL Note giaddr Use none to indicate that no interface is specified. The giaddr field to be used in relayed DHCP packets. OPTIONAL RELATED COMMANDS: dhcp relay delete Delete a DHCP server from the DHCP server list.
PAGE 140
DHCP Commands dhcp relay config Set the DHCP relay configuration settings. SYNTAX: dhcp relay config [agentinfo = <{disabled | enabled}>] [agentmismatch = <{disabled | enabled}>] where: agentinfo Set the relay agent info status (RFC3046) enabled or disabled. The default is disabled. OPTIONAL agentmismatch Forward/drop DHCP reply packet when a relay agent info mismatch is detected (RFC3046) (enabled) or not (disabled). The default is disabled.
PAGE 141
DHCP Commands dhcp relay delete Delete a DHCP server from the DHCP server list. SYNTAX: dhcp relay delete addr = [intf = ] where: addr The IP address of the DHCP server to be deleted. REQUIRED intf The name of the dynamic interface. OPTIONAL Note Use none to indicate that no interface is specified. RELATED COMMANDS: dhcp relay add Add a DHCP server to the DHCP server list. dhcp relay list Display the DHCP server list. E-DOC-CTC-20050531-0061 v1.
PAGE 142
DHCP Commands dhcp relay flush Flush the DHCP relay settings. The flush command does not impact previously saved configurations. SYNTAX: dhcp relay flush EXAMPLE: =>dhcp relay list DHCP server Interface giaddr ------------------------------------------------------127.0.0.1 eth0 192.168.1.254 =>dhcp relay flush =>dhcp relay list No dynamic interfaces defined. => 118 E-DOC-CTC-20050531-0061 v1.
PAGE 143
DHCP Commands dhcp relay ifconfig Configure a DHCP relay interface. SYNTAX: dhcp relay ifconfig intf = [relay = <{disabled | enabled}>] [maxhops = ] [remoteid = ] [trusted = <{disabled | enabled}>] where: intf The name of the dynamic interface to be configured. REQUIRED relay Set the relay status enabled or disabled. The default is disabled. OPTIONAL maxhops A number between 0 and 16. Represents the maximum number of hops allowed in the DHCP packet.
PAGE 144
DHCP Commands dhcp relay iflist Show the configuration of the relay interfaces. SYNTAX: dhcp relay iflist [intf = ] where: intf The name of the dynamic interface to be listed. Note OPTIONAL If not specified, all the relay interfaces will be shown.
PAGE 145
DHCP Commands dhcp relay list Display the DHCP server list. SYNTAX: dhcp relay list EXAMPLE: =>dhcp relay list DHCP server Interface giaddr ------------------------------------------------------127.0.0.1 eth0 10.0.0.138 => RELATED COMMANDS: dhcp relay add Add a DHCP server to the DHCP server list. dhcp relay delete Delete a DHCP server from the DHCP server list. E-DOC-CTC-20050531-0061 v1.
PAGE 146
DHCP Commands dhcp relay debug stats Show the DHCP relay statistics. SYNTAX: dhcp relay debug stats EXAMPLE: =>dhcp relay debug stats DHCP relay statistics ------------------------Client packet relayed : Server packet relayed : Bogus relay agent : Bogus giaddr recv : Corrupt agent option : Missing agent option : Bad circuit id : Missing circuit id : => 122 64 0 0 0 0 0 0 0 E-DOC-CTC-20050531-0061 v1.
PAGE 147
DHCP Commands dhcp relay debug traceconfig Modify the DHCP relay trace configuration. SYNTAX: dhcp relay debug traceconfig [state = <{disabled | enabled}>] where: state Enable or disable tracing. The default is disabled. OPTIONAL EXAMPLE: =>dhcp relay debug traceconfig Tracing: disabled => E-DOC-CTC-20050531-0061 v1.
PAGE 148
DHCP Commands dhcp server config Print the DHCP server configuration settings. SYNTAX: dhcp server config [state = <{disabled | enabled}>] where: 124 E-DOC-CTC-20050531-0061 v1.
PAGE 149
DHCP Commands dhcp server flush Flush all DHCP server pool and lease entries. The flush command does not impact previously saved configurations. SYNTAX: dhcp server flush E-DOC-CTC-20050531-0061 v1.
PAGE 150
DHCP Commands dhcp server policy Print the DHCP server policy settings. SYNTAX: dhcp server policy [verifyfirst = ] [trustclient = ] where: 126 E-DOC-CTC-20050531-0061 v1.
PAGE 151
DHCP Commands dhcp server debug clear Clear the DHCP server statistics.
PAGE 152
DHCP Commands dhcp server debug stats Show the DHCP server statistics.
PAGE 153
DHCP Commands RELATED COMMANDS: dhcp server debug clear E-DOC-CTC-20050531-0061 v1.0 Clear the DHCP server statistics.
PAGE 154
DHCP Commands dhcp server debug traceconfig Modify the DHCP server trace configuration. SYNTAX: dhcp server debug traceconfig [state = <{disabled | enabled}>] where: state Enable or disable tracing. The default is disabled. OPTIONAL EXAMPLE: =>dhcp server debug traceconfig Tracing: disabled => 130 E-DOC-CTC-20050531-0061 v1.
PAGE 155
DHCP Commands dhcp server lease add Add a DHCP server lease. SYNTAX: dhcp server lease add clientid = pool = [addr = ] [offset = ] [leasetime = ] [expirytime = ] [gateway = ] [macaddr = ] where: clientid The DHCP client identification string of the booting host. REQUIRED pool The name of the DHCP server pool from which the DHCP lease should be taken.
PAGE 156
DHCP Commands RELATED COMMANDS: dhcp server lease delete Delete a DHCP server lease. dhcp server lease list List all the DHCP server leases. 132 E-DOC-CTC-20050531-0061 v1.
PAGE 157
DHCP Commands dhcp server lease delete Delete a DHCP server lease. SYNTAX: dhcp server lease delete [clientid = ] [index = ] where: clientid The DHCP client identification string of the DHCP lease. Note index If not specified, all DHCP clients are deleted. OPTIONAL The DHCP server lease table index. Tip OPTIONAL Use the command :dhcp server lease list to obtain a list of the index numbers of all current DHCP leases. EXAMPLE: =>dhcp server Lease 0 0.0.0.0 1 10.0.0.
PAGE 158
DHCP Commands dhcp server lease flush Flush all the DHCP server leases. The flush command does not impact previously saved configurations. SYNTAX: dhcp server lease flush [pool = ] where: pool The name of the DHCP server pool to be flushed. Only the leases belonging to this pool will be deleted. Note OPTIONAL If not specified, all the DHCP server leases will be flushed. EXAMPLE: =>dhcp server Lease 0 0.0.0.0 1 10.0.0.1 2 10.0.0.101 3 10.0.0.132 5 10.0.0.5 4 10.0.0.6 8 10.0.0.8 9 10.0.0.
PAGE 159
DHCP Commands dhcp server lease list List all the DHCP server leases. SYNTAX: dhcp server lease list [clientid = ] [index = ] where: clientid The DHCP client identification string of the DHCP lease. Note index If not specified, the DSHCP server leases for all the DHCP clients are listed. OPTIONAL The DHCP server lease table index. Note OPTIONAL If not specified, the complete DHCP server lease table will be shown. EXAMPLE: =>dhcp server Lease 0 0.0.0.0 1 10.0.0.1 2 10.0.
PAGE 160
DHCP Commands dhcp server option flush Flush all DHCP server option templates and instances. The flush command does not impact previously saved configurations. SYNTAX: dhcp server option flush 136 E-DOC-CTC-20050531-0061 v1.
PAGE 161
DHCP Commands dhcp server option instadd Add a DHCP server option instance. SYNTAX: dhcp server option instadd name = tmplname = value = where: name The name of the DHCP server option instance. REQUIRED tmplname The name of the DHCP server option template. REQUIRED Tip value Use the command :dhcp server option tmpllist to obtain a list of DHCP server option templates.
PAGE 162
DHCP Commands dhcp server option instdelete Delete a DHCP server option instance. SYNTAX: dhcp server option instdelete name = where: name The name of the DHCP server option instance to be deleted.
PAGE 163
DHCP Commands dhcp server option instlist List all the DHCP server option instances. SYNTAX: dhcp server option instlist EXAMPLE: =>dhcp server option instlist yourInstance Tmpl name : yourTmpl Use : 0 Value : (ascii)! myInstance Tmpl name : myTmpl Use : 0 Value : (32-bit)64 (2) (1) => RELATED COMMANDS: dhcp server option instadd Add a DHCP server option instance. dhcp server option instdelete Delete a DHCP server option instance. E-DOC-CTC-20050531-0061 v1.
PAGE 164
DHCP Commands dhcp server option tmpladd Add a DHCP server option template. SYNTAX: dhcp server option tmpladd name = optionid = type = <{8-bit | 16-bit | 32-bit | addr | ascii | byte_array}> where: name The name of the DHCP server option template. REQUIRED optionid A number between 1 and 254. Specifies the DHCP server option code. REQUIRED type Specifies the DHCP server option type.
PAGE 165
DHCP Commands dhcp server option tmpldelete Delete a DHCP server option template. SYNTAX: dhcp server option tmpldelete name = where: name The name of the DHCP server option template to be deleted.
PAGE 166
DHCP Commands dhcp server option tmpllist List all the DHCP server option templates. SYNTAX: dhcp server option tmpllist EXAMPLE: =>dhcp server option tmpllist Name Option Type yourTmpl 2 ascii myTmpl 1 32-bit => Use 0 0 RELATED COMMANDS: dhcp server option tmpladd Add a DHCP server option template. dhcp server option tmpldelete Delete a DHCP server option template. 142 E-DOC-CTC-20050531-0061 v1.
PAGE 167
DHCP Commands dhcp server pool add Add a DHCP server pool. SYNTAX: dhcp server pool add [name = ] [index = ] where: name Note index OPTIONAL A name for the DHCP server pool. If not specified, the name is “dhcp_pool_x”, where x is a subsequent number. The number of the pool before which you want the new pool to be added. Note OPTIONAL If not specified, the DHCP server pool will be added at the bottom of the DHCP server lease table.
PAGE 168
DHCP Commands dhcp server pool config Configure a DHCP server pool.
PAGE 169
DHCP Commands primdns The IP address of the primary DNS server for the DHCP clients. The default value of this parameter is 0 (not specified), which means that the IP address of the DNS server will be communicated by the remote server as soon as the PPP IPCP subnetmasking connection is established or that the SpeedTouch™ acts as the LAN DNS server. OPTIONAL secdns The IP address of the optional secondary DNS server for DHCP clients.
PAGE 170
DHCP Commands dhcp server pool delete Delete a DHCP server pool. SYNTAX: dhcp server pool delete name = where: name REQUIRED The name of the DHCP server pool to be deleted. Tip Use the command :dhcp server pool list to obtain a list of all current DHCP leases. EXAMPLE: =>dhcp server pool list Pool Start End 0 LAN_Private 10.0.0.1 10.0.0.254 1 My_Pool 192.6.11.101 192.6.11.254 =>dhcp server pool delete name=My_Pool =>dhcp server pool list Pool Start End 0 LAN_Private 10.0.0.1 10.0.0.
PAGE 171
DHCP Commands dhcp server pool flush Flush all DHCP server pools. The flush command does not impact previously saved configurations. SYNTAX: dhcp server pool flush EXAMPLE: =>dhcp server pool list Pool Start 0 LAN_Private 10.0.0.1 1 My_Pool 192.6.11.101 =>dhcp server pool flush =>dhcp server pool list => E-DOC-CTC-20050531-0061 v1.0 End 10.0.0.254 192.6.11.
PAGE 172
DHCP Commands dhcp server pool list List all DHCP server pools. SYNTAX: dhcp server pool list [name = ] where: name OPTIONAL The name of the DHCP server pool to be shown. Note If not specified, all the DHCP server pools are shown. EXAMPLE: =>dhcp server pool list Pool Start 0 LAN_Private 10.0.0.1 1 My_Pool 192.6.11.101 => End 10.0.0.254 192.6.11.254 Intf eth0 eth0 State USED USED RELATED COMMANDS: dhcp server pool add Add a DHCP server pool.
PAGE 173
DHCP Commands dhcp server pool optadd Add an option instance to the DHCP server pool. SYNTAX: dhcp server pool optadd name = instname = where: name The name of the DHCP server pool to which an option instance must be added. REQUIRED instname The name of the DHCP server option instance. REQUIRED Tip Use the command :dhcp server option instlist to obtain a list of DHCP server option instances.
PAGE 174
DHCP Commands dhcp server pool optdelete Delete an option instance from the DHCP server pool. SYNTAX: dhcp server pool optdelete name = instname = where: name The name of the DHCP server pool from which an option instance must be deleted. REQUIRED instname The name of the DHCP server option instance to be deleted. REQUIRED Tip Use the command :dhcp server option list to obtain a list of DHCP server option instances.
PAGE 175
DHCP Commands dhcp server pool rtadd Add a route to the DHCP server pool. SYNTAX: dhcp server pool rtadd name = dst = [dstmsk = ] [gateway = ] where: name The name of the DHCP server pool to which a route must be added. REQUIRED dst The IP destination address of the route for DHCP clients. REQUIRED dstmsk The destination IP address mask. OPTIONAL gateway The IP address of the next hop.
PAGE 176
DHCP Commands dhcp server pool rtdelete Delete a route from the DHCP server pool. SYNTAX: dhcp server pool rtdelete name = dst = [dstmsk = ] [gateway = ] where: name The name of the DHCP server pool from which a route must be deleted. REQUIRED dst The IP destination address of the route for DHCP clients. REQUIRED dstmsk The destination IP address mask. OPTIONAL gateway The IP address of the next hop.
PAGE 177
DHCP Commands dhcp server pool ruleadd Add a selection rule to the DHCP server pool. SYNTAX: dhcp server pool ruleadd name = rulename = where: name The name of the DHCP server pool to which a selection rule must be added. REQUIRED rulename The name of the DHCP server selection rule. REQUIRED Tip Use the command :dhcp server rule list to obtain a list of DHCP server rules. RELATED COMMANDS: dhcp server pool ruledelete E-DOC-CTC-20050531-0061 v1.
PAGE 178
DHCP Commands dhcp server pool ruledelete Delete a selection rule from the DHCP server pool. SYNTAX: dhcp server pool ruleadd name = rulename = where: name The name of the DHCP server pool from which a selection rule must be deleted. REQUIRED rulename The name of the DHCP server selection rule to be deleted. REQUIRED Tip Use the command :dhcp server rule list to obtain a list of DHCP server rules.
PAGE 179
DHCP Commands dhcp server rule add Add a DHCP server rule for DHCP pool selection. SYNTAX: dhcp server rule add name = type = <{vci | uci | mac}> vci [!]= uci [!]= mac [!]= If a value is preceded by a “!”, it means NOT. For example “mac=!00:9f:aa:bb:cc:dd” means “for MAC address different from 00:9f:aa:bb:cc:dd”. where: name The name of the new DHCP server rule.
PAGE 180
DHCP Commands dhcp server rule delete Delete a DHCP server rule. SYNTAX: dhcp server rule delete name = where: name A name of the DHCP server rule to be deleted. REQUIRED RELATED COMMANDS: dhcp server rule add Add a DHCP server rule for DHCP pool selection. dhcp server rule list List all DHCP server rules. 156 E-DOC-CTC-20050531-0061 v1.
PAGE 181
DHCP Commands dhcp server rule flush Flush all the DHCP server rules. SYNTAX: dhcp server rule flush E-DOC-CTC-20050531-0061 v1.
PAGE 182
DHCP Commands dhcp server rule list List all DHCP server rules. SYNTAX: dhcp server rule list RELATED COMMANDS: dhcp server rule add Add a DHCP server rule for DHCP pool selection. dhcp server rule delete Delete a DHCP server rule. 158 E-DOC-CTC-20050531-0061 v1.
PAGE 183
DNS Commands DNS Commands Introduction This chapter describes the commands of the dns command group. Contents This chapter covers the following commands: dns client config Modify the Domain Name System (DNS) resolver configuration. 160 dns client dnsadd Add a DNS server. 161 dns client dnsdelete Delete a DNS server. 162 dns client dnslist List all DNS servers. 163 dns client flush Remove all DNS servers. 164 dns client nslookup DNS lookup for a domain name or an address.
PAGE 184
DNS Commands dns client config Modify the Domain Name System (DNS) resolver configuration. SYNTAX: dns client config [timeout = ] [retry = ] [search = <{disabled | enabled}>] [list = ] [trace = <{disabled | enabled}>] where: timeout A number between 1 and 900 (seconds). Represents the query timeout. The default is 5. OPTIONAL retry A number between 0 and 10. Represents the number of query retries before giving up. The default is 3.
PAGE 185
DNS Commands dns client dnsadd Add a DNS server. SYNTAX: dns client dnsadd addr = [port = ] where: addr The IP address of the DNS server to be added. REQUIRED port The DNS server port number. The default is 53. OPTIONAL EXAMPLE: =>dns client dnsadd addr=150.150.150.150 =>dns client dnslist Entry 1 2 State CONNECTED CONNECTED Family IP IP Server [port] 53 - [addr] 127.0.0.1 [port] 53 - [addr] 150.150.150.150 => RELATED COMMANDS: dns client dnsdelete Delete a DNS server.
PAGE 186
DNS Commands dns client dnsdelete Delete a DNS server. SYNTAX: dns client dnsdelete index = where: index REQUIRED A number between 1 and 99. Represents the index number of the DNS server to be deleted. Tip Use the command :dns client dnslist to obtain a list of DNS servers. EXAMPLE: =>dns client dnslist Entry 1 2 State CONNECTED CONNECTED Family IP IP Server [port] 53 - [addr] 127.0.0.1 [port] 53 - [addr] 150.150.150.
PAGE 187
DNS Commands dns client dnslist List all DNS servers. SYNTAX: dns client dnslist EXAMPLE: =>dns client dnslist Entry 1 2 State CONNECTED CONNECTED Family IP IP Server [port] 53 - [addr] 127.0.0.1 [port] 53 - [addr] 150.150.150.150 => RELATED COMMANDS: dns client dnsadd Add a DNS server. dns client dnsdelete Delete a DNS server. E-DOC-CTC-20050531-0061 v1.
PAGE 188
DNS Commands dns client flush Remove all DNS servers. SYNTAX: dns client flush 164 E-DOC-CTC-20050531-0061 v1.
PAGE 189
DNS Commands dns client nslookup DNS lookup for a domain name or an address. SYNTAX: dns client nslookup host = where: host The DNS domain name string for which to query. E-DOC-CTC-20050531-0061 v1.
PAGE 190
DNS Commands dns server config Modify the DNS resolver configuration. SYNTAX: dns server config [domain = ] [timeout = ] [suppress = ] [state = <{disabled | enabled}>] [trace = <{disabled | enabled}>] [WANDownSpoofing = <{disabled | enabled}>] [WDSpoofedIP = ] where: domain The DNS server domain name. OPTIONAL timeout A number between 0 and 2147483647 (seconds). Represents the forwarded DNS query timeout. The default is 15.
PAGE 191
DNS Commands dns server flush Flush all local DNS hosts and routes. SYNTAX: dns server flush E-DOC-CTC-20050531-0061 v1.
PAGE 192
DNS Commands dns server debug clear Clear the DNS server/forwarder statistics.
PAGE 193
DNS Commands dns server debug stats Print the DNS server/forwarder statistics. SYNTAX: dns server debug stats EXAMPLE: =>dns server debug stats Corrupted packets received Local questions resolved Local negative answers sent Total DNS packets forwarded External answers received Spoofed responses Forward table full, discard Spurious answers Unknown query types => : : : : : : : : : 100 3 1 0 0 0 0 0 0 RELATED COMMANDS: dns server debug clear E-DOC-CTC-20050531-0061 v1.
PAGE 194
DNS Commands dns server debug spoof clear Clear the intercept cache table SYNTAX: dns server debug spoof clear 170 E-DOC-CTC-20050531-0061 v1.
PAGE 195
DNS Commands dns server debug spoof getaddress Get the real ip for the given spoofed ip SYNTAX: dns server debug spoof getaddress addr = where: addr The IP address of the spoofed server. REQUIRED EXAMPLE: {Administrator}=>dns server debug spoof getaddress addr=198.18.1.1 :dns server debug spoof getaddress addr=198.18.1.1 Resolved ip = 0.0.0.0. {Administrator}=> E-DOC-CTC-20050531-0061 v1.
PAGE 196
DNS Commands dns server debug spoof getflags Get the error flags for the given spoofed ip SYNTAX: dns server debug spoof getflags addr = where: addr The IP address of the spoofed server. REQUIRED EXAMPLE: {Administrator}[dns server debug spoof]=>:dns server debug spoof getflags addr = 192.168.1.254 :dns server debug spoof getflags addr=192.168.1.254 Invalid spoofed ip. {Administrator}[dns server debug spoof]=> 172 E-DOC-CTC-20050531-0061 v1.
PAGE 197
DNS Commands dns server debug spoof list List the intercept cache table. SYNTAX: dsn server debug spoof list EXAMPLE: {Administrator}[dns server debug spoof]=>list Spoof IP FQDN 198.18.1.1 eu.thmulti.com 198.18.1.2 thmulti.com 198.18.1.3 com 198.18.1.4 edgmd588.eu.thmulti.com 198.18.1.5 edgmssus01.eu.thmulti.com 198.18.1.6 BOULSDCEU02.eu.thmulti.com 198.18.1.7 juleke.nit E-DOC-CTC-20050531-0061 v1.0 Real IP 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.
PAGE 198
DNS Commands dns server debug spoof update Update the intercept cache table. SYNTAX: dns server debug spoof update EXAMPLE: {Administrator}=>dns server debug spoof update {Administrator}=> 174 E-DOC-CTC-20050531-0061 v1.
PAGE 199
DNS Commands dns server host add Add a local DNS host. SYNTAX: dns server host add name = [addr = ] [ttl = ] where: name The name of the IP host to be added. REQUIRED addr The IP address of the host. OPTIONAL ttl A number between 0 and 2147483647 (seconds). Represents the lifetime of the host. The default is 0 (in other words, no limit on the lifetime). OPTIONAL EXAMPLE: =>dns server host add name=myDNS addr=150.150.150.
PAGE 200
DNS Commands dns server host delete Delete a local DNS host. SYNTAX: dns server host delete name = where: name The name of the DNS host to be deleted. REQUIRED EXAMPLE: =>dns server host list Address Hostname 150.150.150.150 myDNS speedtouch dsldevice =>dns server host delete name=myDNS =>dns server host list Address Hostname speedtouch dsldevice => TTL (s) 3600 0 0 TTL (s) 0 0 RELATED COMMANDS: dns server host add Add a local DNS host.
PAGE 201
DNS Commands dns server host flush Flush all the local DNS hosts. SYNTAX: dns server host flush EXAMPLE: =>dns server host list Address Hostname 192.168.1.64 * Unknown-00-10-a4-ad-32-cf dsldevice speedtouch =>dns server host flush =>dns server host list => E-DOC-CTC-20050531-0061 v1.
PAGE 202
DNS Commands dns server host list List all the local DNS hosts. SYNTAX: dns server host list EXAMPLE: =>dns server host list Address Hostname 192.168.1.64 * Unknown-00-10-a4-ad-32-cf dsldevice speedtouch => TTL (s) 60 1200 1200 RELATED COMMANDS: dns server host add Add a local DNS host. dns server host delete Delete a local DNS host. 178 E-DOC-CTC-20050531-0061 v1.
PAGE 203
DNS Commands dns server route add Adds a DNS forwarding route. SYNTAX: dns server route add dns = [src = ] [srcmask = ] [domain = ] [metric = ] [intf = ] where: dns The IP address of a DNS server. REQUIRED src The source IP address(es) using this remote DNS server. OPTIONAL Note Supports IP/mask notation. srcmask The source IP address mask. OPTIONAL domain The DNS domain label.
PAGE 204
DNS Commands dns server route delete Delete a DNS forwarding route. SYNTAX: dns server route delete dns = where: dns The IP address of the DNS server for which the forwarding route must be deleted. REQUIRED EXAMPLE: =>dns server route list DNS Server Source Domain 150.150.150.150 10.0.0.0/8 myDNS =>dns server route delete dns=150.150.150.150 =>dns server route list => Metric 0 Intf eth0 State UP RELATED COMMANDS: dns server route add Adds a DNS forwarding route.
PAGE 205
DNS Commands dns server route flush Flush all DNS forwarding routes. SYNTAX: dns server route flush EXAMPLE: =>dns server route list DNS Server Source 150.150.150.150 10.0.0.0/8 =>dns server route flush =>dns server route list => E-DOC-CTC-20050531-0061 v1.
PAGE 206
DNS Commands dns server route list List all the DNS forwarding routes. SYNTAX: dns server route list EXAMPLE: =>dns server route list DNS Server Source 150.150.150.150 10.0.0.0/8 => Domain myDNS Metric 0 Intf eth0 State UP RELATED COMMANDS: dns server route add Adds a DNS forwarding route. dns server route delete Delete a DNS forwarding route. 182 E-DOC-CTC-20050531-0061 v1.
PAGE 207
DSD Commands DSD Commands Introduction This chapter describes the commands of the dsd command group. Contents This chapter covers the following commands: dsd config Display/modify the Differentiated Service Delivery (DSD) framework configuration. 185 dsd debug connection list Display the internal connection pool usage. 186 dsd debug proxy Display/modify the HyperText Transfer Protocol (HTTP) Intercept fixed proxy configuration.
PAGE 208
DSD Commands dsd webfilter professional config Display/ modify a webfilter. 211 dsd webfilter professional level add Add a new web filtering level 212 dsd webfilter professional level delete Delete a web filtering level 213 dsd webfilter professional level flush Delete all levels. 214 dsd webfilter professional level list Display the levels.
PAGE 209
DSD Commands dsd config Display/modify the Differentiated Service Delivery (DSD) framework configuration. SYNTAX: dsd config [state = <{disabled | enabled}>] where: state Enable or disable the DSD framework. The default is enabled. REQUIRED EXAMPLE: =>dsd config State : enabled => E-DOC-CTC-20050531-0061 v1.
PAGE 210
DSD Commands dsd debug connection list Display the internal connection pool usage. SYNTAX: dsd debug connection list [expand = <{disabled|enabled}>] where: expand 186 Enable or disable the expanded listing. The default is disabled. optional E-DOC-CTC-20050531-0061 v1.
PAGE 211
DSD Commands dsd debug proxy Display/modify the HyperText Transfer Protocol (HTTP) Intercept fixed proxy configuration. SYNTAX: dsd debug proxy [state = <{disabled | enabled}>] [dest = ] [port = <{supported TCP/UDP port} or number>] where: state Enable or disable fixed proxy redirecting. The default is disabled. OPTIONAL dest The destination IP address to which requests will be forwarded. OPTIONAL port The port to be used for connecting to proxy.
PAGE 212
DSD Commands dsd debug recycling Display/modify HTTPI recycling settings SYNTAX: dsd debug recycling state = | interval = httpidle = otheridle = where: state Enable/disable stream recycling OPTIONAL interval Time between successive activity checks OPTIONAL httpidle Minimal idle count for recycling (filtered) http streams OPTIONAL otheridle Minimal idle count for recycling other streams OPTIONAL 188 E-DOC-CTC-20050531-0061 v1.
PAGE 213
DSD Commands dsd debug stats Display/clear DSD framework and module statistics SYNTAX: dsd debug stats name = <{intercept|urlfilter|recycling|syslog|all} clear = <{no|yes}> where: name Specify the name of a module REQUIRED clear Clear the specified statistics REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 214
DSD Commands dsd intercept config Display/modify the HTTP Intercept configuration. SYNTAX: dsd intercept config [WDSpoofedIP = ] [servertimeout = ] [servererrorurl = ] [categoryerrorurl = ] [monitorintercepturl = ] [urlblockedurl = ] [imageredirect = <{disabled | enabled}>] [imageredirecturl = ] [alwaysuseip = <{disabled | enabled}>] where: WDSpoofedIP The IP address indicating unavailable WAN connection. The default is 198.18.1.1.
PAGE 215
DSD Commands RELATED COMMANDS: dsd intercept stats E-DOC-CTC-20050531-0061 v1.0 Display the HTTP Intercept statistics.
PAGE 216
DSD Commands dsd intercept stats Display the HTTP Intercept statistics. SYNTAX: dsd intercept stats EXAMPLE: =>dsd intercept stats Total requests Unauthorized requests Request errors => : 2 : 0 : 2 RELATED COMMANDS: dsd intercept config 192 Display/modify the HTTP Intercept configuration. E-DOC-CTC-20050531-0061 v1.
PAGE 217
DSD Commands dsd syslog config Display/modify the HTTP Intercept logging configuration. SYNTAX: dsd syslog config [syslog = <{none | unauthorized | errors | intercepted | all}>] where: syslog Define the type of events to log. Choose between: none: nothing is logged to syslog. unauthorized: only the HTTP requests that are blocked because of a LocalRule, BlockCategory, BlockIPAddress or BlockObscure event, are logged.
PAGE 218
DSD Commands dsd syslog list Display the HTTP Intercept log file. SYNTAX: dsd syslog list EXAMPLE: =>dsd syslog list <86> SysUpTime: 00:22:37 [HTTPI] src=10.0.0.1 src_port=1965 dst=141.11.196.35 dst_port=80 event=Se rverConnect dst_name=aWebsite.com/icons/Button_Document.gif <86> SysUpTime: 00:22:59 [HTTPI] src=10.0.0.1 src_port=1968 dst=141.11.234.60 dst_port=80 event=Se rverConnect dst_name=anotherWebsite.com/rawgen.
PAGE 219
DSD Commands dsd urlfilter config Display/modify the URL filtering configuration. SYNTAX: dsd urlfilter config [state = <{disabled | enabled}>] [blockproxy = <{disabled | enabled}>] [blockipaddress = <{disabled | enabled}>] [blockobscuredip = <{disabled | enabled}>] [defaultaction = <{block | accept}>] where: state Enable or disable URL filtering. The default is enabled. OPTIONAL blockproxy Enable or disable blocking of HTTP requests via a proxy server. The default is disabled.
PAGE 220
DSD Commands dsd urlfilter rule add Add a rule. SYNTAX: dsd urlfilter rule add url = action = <{block | accept | redirect}> redirect = where: url Definition of the URL filter. REQUIRED action The action to perform when URL matches URL. Choose between: REQUIRED redirect block accept redirect. The redirection URL. Note REQUIRED This parameter is only required when the action is redirect. EXAMPLE: =>dsd urlfilter rule add url=www.speedtouch.
PAGE 221
DSD Commands dsd urlfilter rule delete Delete a rule. SYNTAX: dsd urlfilter rule delete index = [url = ] where: index Tip url REQUIRED Insertion position in the list. Use the command :dsd urlfilter rule list to obtain the index number of the rule to be deleted. Definition of the URL filter. OPTIONAL EXAMPLE: =>dsd urlfilter rule list Index Action Url ----- -------0 redirect www.speedtouch.com 1 accept www.baen.com Rule list statistics : 2 present, 128 total (0.
PAGE 222
DSD Commands dsd urlfilter rule flush Remove all current rules. SYNTAX: dsd urlfilter rule flush EXAMPLE: =>dsd urlfilter rule list Index Action Url ----- -------0 redirect www.speedtouch.com 1 accept www.baen.com Rule list statistics : 2 present, 128 total (0.0% used) =>dsd urlfilter rule flush =>dsd urlfilter rule list Index Action Url ----- -------- Redirect -------www.speedtouch.be Redirect -------- Rule list statistics : 0 present, 128 total (0.0% used) => 198 E-DOC-CTC-20050531-0061 v1.
PAGE 223
DSD Commands dsd urlfilter rule list Display the list of current rules. SYNTAX: dsd urlfilter rule list EXAMPLE: =>dsd urlfilter rule list Index Action Url ----- -------0 redirect www.speedtouch.com 1 accept www.baen.com Redirect -------www.speedtouch.be Rule list statistics : 2 present, 128 total (0.0% used) => RELATED COMMANDS: dsd urlfilter rule add Add a rule. dsd urlfilter rule delete Delete a rule. E-DOC-CTC-20050531-0061 v1.
PAGE 224
DSD Commands dsd urlfilter rule modify Modify an existing rule. SYNTAX: dsd urlfilter rule modify index = [newurl = ] action = <{block | accept | redirect}> redirect = where: index Insertion position in the list. REQUIRED newurl Definition of the new URL filter. OPTIONAL action Action to perform when URL matches URL. Choose between: REQUIRED redirect block accept redirect. The redirection URL.
PAGE 225
DSD Commands dsd webfilter cache flush Empty the internal cache SYNTAX: dsd webfilter cache flush E-DOC-CTC-20050531-0061 v1.
PAGE 226
DSD Commands dsd webfilter cache stats Display the cache statistics SYNTAX: dsd webfilter cache stats expand = <{disabled|enabled}> where: expand 202 OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 227
DSD Commands dsd webfilter config Configure web filter SYNTAX: dsd webfilter config state = <{enabled|disabled}> serverunreachable = <{block-all|accept-all}> uncategorized = <{block|accept}> license = <{none|trial|standard|professional}> ticket = sessionkey = where: state serverunreachable REQUIRED uncategorized license OPTIONAL ticket sessionkey E-DOC-CTC-20050531-0061 v1.
PAGE 228
DSD Commands dsd webfilter list Display the web filter license state SYNTAX: dsd webfilter list 204 E-DOC-CTC-20050531-0061 v1.
PAGE 229
DSD Commands dsd webfilter professional category add Add a category to a group SYNTAX: dsd webfilter professional category add destid = srcid = where: destid Destination category or group REQUIRED srcid Category ID to add REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 230
DSD Commands dsd webfilter professional category create Create a category or group SYNTAX: dsd webfilter professional category create id = name = type = <{category|group}> where: id Unique local ID for the category/group REQUIRED name Friendly name REQUIRED type Choose between category or group REQUIRED 206 E-DOC-CTC-20050531-0061 v1.
PAGE 231
DSD Commands dsd webfilter professional category delete Delete a category or a group SYNTAX: dsd webfilter professional category delete id = where: id Unique local ID for the category/group E-DOC-CTC-20050531-0061 v1.
PAGE 232
DSD Commands dsd webfilter professional category flush Delete all categories and groups SYNTAX: dsd webfilter professional category flush 208 E-DOC-CTC-20050531-0061 v1.
PAGE 233
DSD Commands dsd webfilter professional category list List all categories and groups SYNTAX: dsd webfilter professional category list type = <{category|group}> where: type Choose between category or group. E-DOC-CTC-20050531-0061 v1.
PAGE 234
DSD Commands dsd webfilter professional category remove Remove a category from a group SYNTAX: dsd webfilter professional category remove destid = srcid = where: destid Destination category or group REQUIRED srcid Category ID to add REQUIRED 210 E-DOC-CTC-20050531-0061 v1.
PAGE 235
DSD Commands dsd webfilter professional config Display/ modify a webfilter. SYNTAX: dsd webfilter professional config listversion = validcatmask = where: listversion a string OPTIONAL validcatmask a string OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 236
DSD Commands dsd webfilter professional level add Add a new web filtering level SYNTAX: dsd webfilter professional level add index = name = text = otherurls = <{block|accept}> where: index Level index (-1 for next available) REQUIRED name Content category level name REQUIRED text ] Friendly description OPTIONAL otherurls Choose between block and accept Block or allow requests that do not belong to a specific category OPTIONAL
PAGE 237
DSD Commands dsd webfilter professional level delete Delete a web filtering level SYNTAX: dsd webfilter professional level delete index = name = text = ] otherurls = <{block|accept}> where: index Level index (-1 for next available) REQUIRED name Content category level name REQUIRED text ] Friendly description OPTIONAL otherurls Choose between block or accept Block or allow requests that do not belong to a specific category OPTI
PAGE 238
DSD Commands dsd webfilter professional level flush Delete all levels. SYNTAX: dsd webfilter professional level flush 214 E-DOC-CTC-20050531-0061 v1.
PAGE 239
DSD Commands dsd webfilter professional level list Display the levels. SYNTAX: dsd webfilter professional level list E-DOC-CTC-20050531-0061 v1.
PAGE 240
DSD Commands dsd webfilter professional level modify Modify a web filtering level SYNTAX: dsd webfilter professional level modify index = name = text = ] otherurls = <{block|accept}> where: index Level index (-1 for next available) name Content category level name text ] Friendly description otherurls Choose between block or accept Block or allow requests that do not belong to a specific category 216 REQUIRED OPTIONAL E-DOC-CTC
PAGE 241
DSD Commands dsd webfilter professional level set Set the current web filtering level SYNTAX: dsd webfilter professional level set name = where: name Name of the current category level E-DOC-CTC-20050531-0061 v1.
PAGE 242
DSD Commands dsd webfilter professional rule clear Reset the level to a default rule SYNTAX: dsd webfilter professional rule clear level = where: level 218 REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 243
DSD Commands dsd webfilter professional rule list List all the rules SYNTAX: dsd webfilter professional rule list E-DOC-CTC-20050531-0061 v1.
PAGE 244
DSD Commands dsd webfilter professional modify Modify a rule SYNTAX: dsd webfilter professional modify level = id = action = <{block|accept}> where: level Level name REQUIRED id Server category ID REQUIRED action Choose between block accept OPTIONAL 220 E-DOC-CTC-20050531-0061 v1.
PAGE 245
DSD Commands dsd webfilter server add Add a web filter server SYNTAX: dsd webfilter server add index = address = port = <{at-echo|at-nbp|at-rtmp|at-zis| auth|bgp|biff|bootpc|bootps|chargen| clearcase|daytime|discard|dns| domain|doom|echo|exec|finger|ftp| ftp-data|gopher|h323|httpproxy| ike|ils|imap2|imap3|ingres-net| ipcserver|ipx|irc-o|irc-u| kerberos|ldap|login|netbios-dgm| netbios-ns|netbios-ssn| netwall|netware-ip|new-rwho| nfds|nicname|nntp|ntalk|ntp| pcmailsrv|pop2|pop3|printe
PAGE 246
DSD Commands dsd webfilter server config Configure web filter server SYNTAX: dsd webfilter server config listversion = retries = servertimeout = timeoutmultiplier = renewfrequency = useproxy = <{disabled|enabled}> proxyserver = ] proxyport = <{at-echo|at-nbp|at-rtmp|at-zis|auth|bgp| biff|bootpc|bootps|chargen|clearcase|daytime| discard|dns|domain|doom|echo|exec|finger|ftp| ftp-data|gopher|h323|httpproxy|ike|ils| imap2|imap3|ingres-net|ipcserver|ipx
PAGE 247
DSD Commands dsd webfilter server delete Delete a web filter server SYNTAX: dsd webfilter server delete index = address = port = <{at-echo|at-nbp|at-rtmp|at-zis|auth|bgp| biff|bootpc|bootps|chargen|clearcase| daytime|discard|dns|domain|doom|echo| exec|finger|ftp|ftp-data|gopher|h323| httpproxy|ike|ils|imap2|imap3| ingres-net|ipcserver|ipx|irc-o|irc-u| kerberos|ldap|login|netbios-dgm| netbios-ns|netbios-ssn|netwall| netware-ip|new-rwho|nfds|nicname|nntp| ntalk|ntp|pcmail-srv|pop2|pop
PAGE 248
DSD Commands dsd webfilter server flush Flush the server list SYNTAX: dsd webfilter server flush 224 E-DOC-CTC-20050531-0061 v1.
PAGE 249
DSD Commands dsd webfilter server list List all web filter servers SYNTAX: dsd webfilter server list E-DOC-CTC-20050531-0061 v1.
PAGE 250
DSD Commands dsd webfilter server modify Modify a web filter server SYNTAX: dsd webfilter server modify index = address = port = <{at-echo|at-nbp|at-rtmp|at-zis|auth|bgp| biff|bootpc|bootps|chargen|clearcase| daytime|discard|dns|domain|doom|echo| exec|finger|ftp|ftpdata|gopher|h323| httpproxy|ike|ils|imap2|imap3|ingresnet| ipcserver|ipx|irc-o|irc-u|kerberos|ldap| login|netbios-dgm|netbios-ns| netbios-ssn|netwall|netware-ip|new-rwho| nfds|nicname|nntp|ntalk|ntp|pcmail-srv| pop2|pop3|
PAGE 251
DSD Commands dsd webfilter standard category add Add a category to a group SYNTAX: dsd webfilter standard category add destid = srcid = where: destid The destination category or group REQUIRED srcid The category ID to add REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 252
DSD Commands dsd webfilter standard category create Create a category or group SYNTAX: dsd webfilter standard category create id = name = where: id Unique local ID for the category/group REQUIRED name Friendly name REQUIRED 228 E-DOC-CTC-20050531-0061 v1.
PAGE 253
DSD Commands dsd webfilter standard category delete Delete a category or group SYNTAX: dsd webfilter standard category delete id = where: id Unique local ID for the category/group E-DOC-CTC-20050531-0061 v1.
PAGE 254
DSD Commands dsd webfilter standard category flush Delete all the levels SYNTAX: dsd webfilter standard category flush 230 E-DOC-CTC-20050531-0061 v1.
PAGE 255
DSD Commands dsd webfilter standard category list Display the levels SYNTAX: dsd webfilter standard category list E-DOC-CTC-20050531-0061 v1.
PAGE 256
DSD Commands dsd webfilter standard category remove Remove a category from a group SYNTAX: dsd webfilter standard category remove destid = srcid = where: destid Destination category or group REQUIRED srcid Category ID to add REQUIRED 232 E-DOC-CTC-20050531-0061 v1.
PAGE 257
DSD Commands dsd webfilter standard level add Add a new web filtering level SYNTAX: dsd webfilter standard level add index = name = [text = ] [otherurls = <{block|accept}>] where: index Level index (-1 for next available) REQUIRED name Content category level name REQUIRED text Friendly description OPTIONAL otherurls Block or allow requests that do not belong to a specific category OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 258
DSD Commands dsd webfilter standard level delete Delete a web filtering level SYNTAX: dsd webfilter standard level delete index = name = [text = ] [otherurls = <{block|accept}>] where: index Level index (-1 for next available) REQUIRED name Content category level name REQUIRED text Friendly description OPTIONAL otherurls Block or allow requests that do not belong to a specific category OPTIONAL 234 E-DOC-CTC-20050531-0061 v1.
PAGE 259
DSD Commands dsd webfilter standard level flush Delete all levels SYNTAX: dsd webfilter standard level flush E-DOC-CTC-20050531-0061 v1.
PAGE 260
DSD Commands dsd webfilter standard level list Display the levels SYNTAX: dsd webfilter standard level list 236 E-DOC-CTC-20050531-0061 v1.
PAGE 261
DSD Commands dsd webfilter standard level modify Modify a web filtering level SYNTAX: dsd webfilter standard level modify index = name = [text = ] [otherurls = <{block|accept}>] where: index Level index (-1 for next available) REQUIRED name Content category level name REQUIRED text Friendly description OPTIONAL otherurls Block or allow requests that do not belong to a specific category OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 262
DSD Commands dsd webfilter standard level set Set current web filtering level SYNTAX: dsd webfilter standard level set name = where: name 238 Name of the current category level REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 263
DSD Commands dsd webfilter standard rule clear Reset level to default rule SYNTAX: dsd webfilter standard rule clear level = where: level Level name E-DOC-CTC-20050531-0061 v1.
PAGE 264
DSD Commands dsd webfilter standard rule list List all rules. SYNTAX: dsd webfilter standard rule list level = where: level 240 Level name OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 265
DSD Commands dsd webfilter standard rule modify Modify a rule SYNTAX: dsd webfilter standard rule modify level = id = action = <{block|accept}> where: level Level name REQUIRED id Server category ID OPTIONAL action Block or allow rules REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 266
DSD Commands 242 E-DOC-CTC-20050531-0061 v1.
PAGE 267
DynDNS Commands DynDNS Commands Introduction Dynamic DNS is a service that allows to bind a host name to an IP address. In contrast to classical DNS, this service allows regular updates of the IP address related to a host name. In this way, hosts of which the IP address regularly changes (for example due to a limited DHCP lease time) can be identified by a static host name that is unique throughout the Internet. This chapter describes the commands of the dyndns commnd group.
PAGE 268
DynDNS Commands dyndns add Add a dynamic DNS client. SYNTAX: dyndns add name = where: name The name of the new dynamic DNS client. Note REQUIRED A maximum of 5 clients can be configured. EXAMPLE: =>dyndns add name=WAN =>dyndns list WAN : [INIT] user = password = addr = 0.0.0.0 => RELATED COMMANDS: dyndns delete Delete a dynamic DNS client. dyndns list List all dynamic DNS clients. 244 E-DOC-CTC-20050531-0061 v1.
PAGE 269
DynDNS Commands dyndns delete Delete a dynamic DNS client. SYNTAX: dyndns delete name = where: name The name of the dynamic DNS client to be deleted. REQUIRED EXAMPLE: =>dyndns list WAN : [INIT] user = password = addr = 0.0.0.0 =>dyndns delete name=WAN =>dyndns list => RELATED COMMANDS: dyndns add Add a dynamic DNS client. dyndns list List all dynamic DNS clients. E-DOC-CTC-20050531-0061 v1.
PAGE 270
DynDNS Commands dyndns flush Delete all the dynamic DNS clients. SYNTAX: dyndns flush 246 E-DOC-CTC-20050531-0061 v1.
PAGE 271
DynDNS Commands dyndns list List all the dynamic DNS clients. SYNTAX: dyndns list EXAMPLE: =>dyndns list WAN : [INIT] user = password = addr = 0.0.0.0 => RELATED COMMANDS: dyndns add Add a dynamic DNS client. dyndns delete Delete a dynamic DNS client. E-DOC-CTC-20050531-0061 v1.
PAGE 272
DynDNS Commands dyndns modify Modify a dynamic DNS client. SYNTAX: dyndns modify name = [intf = ] [user = ] [password = ] [group = ] [mx = ] [backmx = <{disabled | enabled}>] [wildcard = <{disabled | enabled}>] [offline = <{disabled | enabled}>] [service = <{dyndns | statdns | custom | No-IP | DtDNS | gnudip}>] [status = <{disabled | enabled}>] [trace = <{disabled | enabled}>] where: name The name of the dynamic DNS client to be modified.
PAGE 273
DynDNS Commands EXAMPLE: =>dyndns list WAN : [INIT] user = password = addr = 0.0.0.0 =>dyndns modify name=WAN intf=RtPPPoE user=DNSuser password=_DEV_BA8C0C963BD84130 service=gnudip =>dyndns list WAN : RtPPPoE_ppp [INIT] options = gnudip user = my_DNS_user password = ******** addr = 0.0.0.0 => E-DOC-CTC-20050531-0061 v1.
PAGE 274
DynDNS Commands dyndns host add Add a fully qualified host name. SYNTAX: dyndns host add group = name = where: group Note name REQUIRED The dynamic DNS host group. A maximum of 4 different groups can be created. REQUIRED The name of an IP host to add. Note A maximum of 20 hosts can be configured. EXAMPLE: =>dyndns host add group=local name=localhost.com =>dyndns host list local : [ ] localhost.
PAGE 275
DynDNS Commands dyndns host delete Delete a host name. SYNTAX: dyndns host delete name = where: name The name of the IP host to be deleted. REQUIRED EXAMPLE: =>dyndns host list local : [ ] localhost.com public : [ ] publichost.com legend : [ ] not initialised [o] update in progress [v] update successful [x] error =>dyndns host delete name=publichost.com =>dyndns host list local : [ ] localhost.
PAGE 276
DynDNS Commands dyndns host flush Delete all hosts. The hosts cannot be flushed, if there is still a group referenced to the hosts. SYNTAX: dyndns host flush 252 E-DOC-CTC-20050531-0061 v1.
PAGE 277
DynDNS Commands dyndns host list List all host names. SYNTAX: dyndns host list EXAMPLE: =>dyndns host list local : [ ] localhost.com public : [ ] publichost.com legend : [ ] not initialised [v] update successful => [o] [x] update in progress error RELATED COMMANDS: dyndns host add Add a fully qualified host name. dyndns host delete Delete a host name. E-DOC-CTC-20050531-0061 v1.
PAGE 278
DynDNS Commands dyndns service list List all dynamic DNS services. SYNTAX: dyndns service list EXAMPLE: =>dyndns service list dyndns : server = port = request = update interval = retry interval = max retry = members.dyndns.org 80 /nic/update 2097120 30 3 statdns : server port request update interval retry interval max retry = = = = = = members.dyndns.org 80 /nic/update 0 30 3 custom : server port request update interval retry interval max retry = = = = = = members.dyndns.
PAGE 279
DynDNS Commands dyndns service modify Modify specific dynamic DNS service settings. SYNTAX: dyndns service modify name = [server = ] [port = <{supported TCP/UDP port name} or number>] [request = ] [updateinterval = ] [retryinterval = ] where: name The name of the dynamic DNS service. Choose between: dyndns statdns custom No-IP DtDNS gnudip.
PAGE 280
DynDNS Commands EXAMPLE: =>dyndns service modify name=custom server=mydyndns.org port=www-http request=hereiam | updateinterval=2000000 retryinterval=15 max_retry=5 =>dyndns service list dyndns : server = members.dyndns.org port = 80 request = /nic/update update interval = 2097120 retry interval = 30 max retry = 3 statdns : server port request update interval retry interval max retry = = = = = = members.dyndns.
PAGE 281
Env Commands Env Commands Introduction This chapter describes the commands of the env command group. Contents This chapter covers the following commands: env flush Flush all the non-system environment variables. 258 env get Get the current value of an environment variable. 259 env list Show all the currently available environment variables. 260 env set Set an environment variable. 261 env unset Delete a environment variable. 262 E-DOC-CTC-20050531-0061 v1.
PAGE 282
Env Commands env flush Flush all the non-system environment variables. SYNTAX: env flush 258 E-DOC-CTC-20050531-0061 v1.
PAGE 283
Env Commands env get Get the current value of an environment variable. SYNTAX: env get var = where: var The name of the environment variable. Tip REQUIRED Use the command :env list to obtain a list of all environment variables. RELATED COMMANDS: env list E-DOC-CTC-20050531-0061 v1.0 List all current environment variables.
PAGE 284
Env Commands env list Show all the currently available environment variables. SYNTAX: env list RELATED COMMANDS: env get 260 Get the current value of an environment variable. E-DOC-CTC-20050531-0061 v1.
PAGE 285
Env Commands env set Set an environment variable. SYNTAX: env set var = value = where: var The name of the environment variable. Tip REQUIRED When creating an environment variable, any name is allowed. However spaces are NOT allowed and the name may NOT start with: value “CONF” “HOST” an underscore “_” the dollar sign “$”. A quoted translated string which defines the value of the environment variable.
PAGE 286
Env Commands env unset Delete a environment variable. SYNTAX: env unset var = where: var REQUIRED The name of the environment variable to be deleted. Note System variables (built-in variables with names starting with an underscore “_”, “CONF” or “HOST”) cannot be unset, changed or deleted. EXAMPLE: =>env list _COMPANY_NAME=THOMSON multimedia _COMPANY_URL=http://www.speedtouch.com _PROD_NAME=SpeedTouch .....
PAGE 287
Eth Commands Eth Commands Introduction This chapter describes the commands of the eth command group. Contents This chapter covers the following commands: eth ifadd Create a new ETH interface. 264 eth ifattach Attach an ETH interface. 265 eth ifconfig Modify an ETH interface. 266 eth ifdelete Delete an ETH interface. 267 eth ifdetach Detach an ETH interface. 268 eth iflist Display the ETH interfaces. 269 eth flush Flush all the ETH interfaces.
PAGE 288
Eth Commands eth ifadd Create a new ETH interface. SYNTAX: eth ifadd intf = where: intf The name of the new ETH interface. REQUIRED RELATED COMMANDS: eth ifdelete Delete an ETH interface. eth iflist Display the ETH interfaces. 264 E-DOC-CTC-20050531-0061 v1.
PAGE 289
Eth Commands eth ifattach Attach an ETH interface. SYNTAX: eth ifattach intf = where: intf The name of the ETH interface to be attached. REQUIRED RELATED COMMANDS: eth ifdetach E-DOC-CTC-20050531-0061 v1.0 Detach an ETH interface.
PAGE 290
Eth Commands eth ifconfig Modify an ETH interface. SYNTAX: eth ifconfig intf = [dest = ] [retry = ] where: intf The name of the ETH interface to be configured. REQUIRED dest The destination interface for this ETH interface. OPTIONAL retry A number between 0 and 65535. Represents the number of times the ETH connection setup should retry before giving up. The default is 10. OPTIONAL 266 E-DOC-CTC-20050531-0061 v1.
PAGE 291
Eth Commands eth ifdelete Delete an ETH interface. SYNTAX: eth ifdelete intf = where: intf The name of the ETH interface name to be deleted. REQUIRED RELATED COMMANDS: eth ifadd Create a new ETH interface. eth iflist Display the ETH interfaces. E-DOC-CTC-20050531-0061 v1.
PAGE 292
Eth Commands eth ifdetach Detach an ETH interface. SYNTAX: eth ifdetach intf = where: intf The name of the ETH interface to be detached. REQUIRED RELATED COMMANDS: eth ifattach 268 Attach an ETH interface. E-DOC-CTC-20050531-0061 v1.
PAGE 293
Eth Commands eth iflist Display the ETH interfaces. SYNTAX: eth iflist [intf = ] where: intf The name of the ETH interface to be displayed. Note OPTIONAL If not specified, all the ETH interfaces will be displayed. RELATED COMMANDS: eth ifadd Create a new ETH interface. eth ifdelete Delete an ETH interface. E-DOC-CTC-20050531-0061 v1.
PAGE 294
Eth Commands eth flush Flush all the ETH interfaces. The flush command does not impact previously saved configurations. SYNTAX: eth flush 270 E-DOC-CTC-20050531-0061 v1.
PAGE 295
Eth Commands eth bridge clear Clear the bridge statistics. SYNTAX: eth bridge clear E-DOC-CTC-20050531-0061 v1.
PAGE 296
Eth Commands eth bridge config Modify/display the bridge configuration settings. SYNTAX: eth bridge config [age = ] [filter = <{no_WAN_broadcast | none}>] where: age A number between 10 and 100000 (seconds). Represents the lifetime of a dynamically learned Medium Access Control (MAC) address. The default is 300. OPTIONAL filter The bridge filter to be applied for all Wide Area Network (WAN) bridge ports.
PAGE 297
Eth Commands eth bridge flush Flush bridge interfaces and parameters. The flush command does not impact previously saved configurations. SYNTAX: eth bridge flush E-DOC-CTC-20050531-0061 v1.
PAGE 298
Eth Commands eth bridge ifadd Create a new bridge interface. SYNTAX: eth bridge ifadd intf = where: intf The name of the new bridge interface. REQUIRED RELATED COMMANDS: eth bridge ifdelete Delete a bridge interface. eth bridge iflist Display the current bridge interfaces. 274 E-DOC-CTC-20050531-0061 v1.
PAGE 299
Eth Commands eth bridge ifattach Attach a bridge interface. SYNTAX: eth bridge ifattach intf = where: intf The name of the bridge interface to be attached. REQUIRED RELATED COMMANDS: eth bridge ifdetach E-DOC-CTC-20050531-0061 v1.0 Detach a bridge interface.
PAGE 300
Eth Commands eth bridge ifconfig Modify a bridge interface configuration. SYNTAX: eth bridge ifconfig intf = [dest = ] [portstate = <{disabled | learning | forwarding}>] [retry = ] [prioconfig = <{disabled|overwrite|increase}>] [mcastfilter = <{disabled|enabled}>] where: intf The name of the bridge interface to be configured. REQUIRED dest The destination for this interface. Typically an ATM or a physical interface name.
PAGE 301
Eth Commands EXAMPLE: =>eth bridge iflist OBC : dest : Internal ... ... BrEthoA_br: dest : (none) Connection State: not-connected Retry: 10 Port: (Unassigned) PortNr: (Unknown) PortState: forwarding =>eth bridge ifconfig intf=BrEthoA_br dest=BrEthhoA_atm =>eth bridge iflist OBC : dest : Internal ... ... BrEthoA_br: dest : BrEthhoA_atm Connection State: not-connected Retry: 10 Port: (Unassigned) PortNr: (Unknown) PortState: forwarding => E-DOC-CTC-20050531-0061 v1.
PAGE 302
Eth Commands eth bridge ifdelete Delete a bridge interface. SYNTAX: eth bridge ifdelete intf = where: intf The name of the bridge interface name to be deleted. REQUIRED RELATED COMMANDS: eth bridge ifadd Create a new bridge interface. eth bridge iflist Display the current bridge interfaces. 278 E-DOC-CTC-20050531-0061 v1.
PAGE 303
Eth Commands eth bridge ifdetach Detach a bridge interface. SYNTAX: eth bridge ifdetach intf = where: intf The name of the bridge interface to be detached. REQUIRED RELATED COMMANDS: eth bridge ifattach E-DOC-CTC-20050531-0061 v1.0 Attach a bridge interface.
PAGE 304
Eth Commands eth bridge iflist Display the current bridge interfaces. SYNTAX: eth bridge iflist [intf = ] where: intf The name of the bridge interface to be displayed. Note OPTIONAL If not specified, all bridge interfaces are shown. RELATED COMMANDS: eth bridge ifadd Create a new bridge interface. eth bridge ifdelete Delete a bridge interface. 280 E-DOC-CTC-20050531-0061 v1.
PAGE 305
Eth Commands eth bridge macadd Add a static MAC address to a bridge interface. This command allows to manually add static MAC addresses, which should normally be dynamically discovered by the bridge itself. SYNTAX: eth bridge macadd intf = hwaddr = where: intf The name of the bridge interface to which the MAC address must be added. REQUIRED hwaddr The Ethernet MAC address of the new entry.
PAGE 306
Eth Commands eth bridge macdelete Remove a MAC address from the filtering database. SYNTAX: eth bridge macdelete hwaddr = where: hwaddr The Ethernet MAC address of the entry to be deleted.
PAGE 307
Eth Commands eth bridge maclist Display the MAC address database.
PAGE 308
Eth Commands eth bridge mcdadd Add a multicast group to be dropped to the database. SYNTAX: eth bridge mcdadd srcintfs = dstintfs = where: srcports The source bridge interfaces from which multicast packets must be dropped. REQUIRED dstports The destination bridge interfaces for which the multicast packets must be dropped.
PAGE 309
Eth Commands eth bridge mcddelete Delete a multicast group to be dropped from the database. SYNTAX: eth bridge mcddelete RELATED COMMANDS: eth bridge mcdadd Add a multicast group to be dropped to the database. eth bridge mcdlist Display the multicast group to be dropped from the database. E-DOC-CTC-20050531-0061 v1.
PAGE 310
Eth Commands eth bridge mcdlist Display the multicast group to be dropped from the database. SYNTAX: eth bridge mcdlist RELATED COMMANDS: eth bridge mcdadd Add a multicast group to be dropped to the database. eth bridge mcddelete Delete a multicast group to be dropped from the database. 286 E-DOC-CTC-20050531-0061 v1.
PAGE 311
Eth Commands eth device ifconfig Configure an Ethernet interface. SYNTAX: eth device ifconfig intf = [type = <{auto | 10BaseTHD | 10BaseTFD | 100BaseTHD | 100BaseTFD} or number>] [state = <{enabled | disabled}>] where: intf The name of a physical interface. REQUIRED type The Ethernet type. Select either: OPTIONAL auto: Auto negotiation of Ethernet communication speed (10Mb/s or 100Mb/s) and Duplex mode (half duplex or full duplex).
PAGE 312
Eth Commands eth device iflist Show status of Ethernet interfaces.
PAGE 313
Eth Commands eth switch group flush Set all the ports to the default settings. All the ports are placed in group 0. SYNTAX: eth switch group flush EXAMPLE: =>eth Group Group Group =>eth =>eth Group => switch group 0 Ports: 4 1 Ports: 1 2 Ports: 2 3 switch group switch group 0 Ports: 1 2 E-DOC-CTC-20050531-0061 v1.
PAGE 314
Eth Commands eth switch group list List all the configured switch groups. SYNTAX: eth switch group list EXAMPLE: =>eth Group Group Group => switch group list 0 Ports: 4 1 Ports: 1 2 Ports: 2 3 RELATED COMMANDS: eth switch group move 290 Move a specified port to a specified switch group. E-DOC-CTC-20050531-0061 v1.
PAGE 315
Eth Commands eth switch group move Move a specified port to a specified switch group. SYNTAX: eth switch group move group = port = where: group A number between 0 and 4. Represents the group ID to which the port must be moved. REQUIRED port A number between 01 and 4. Represents the port to be moved.
PAGE 316
Eth Commands eth switch mirror capture Define the specified port to be the Mirror Capture Port. Only one port can be the Mirror Capture Port at any one time. SYNTAX: eth switch mirror capture port = where: port The port to be the Mirror Capture Port. Note REQUIRED If no port number is specified, then the port number of the Mirror Capture Port is shown.
PAGE 317
Eth Commands eth switch mirror egress Enable or disable the specified port to be the Mirror Egress Port. Only one port can be the Mirror Egress Port at any one time. But a port can be the Mirror Egress Port and the Mirror Ingress Port at the same time. SYNTAX: eth switch mirror egress port = [state = <{enabled | disabled}>] where: port The port to be the Mirror Egress Port.
PAGE 318
Eth Commands eth switch mirror ingress Enable or disable the specified port to be the Mirror Ingress Port. Only one port can be the Mirror Ingress Port at any one time. But a port can be the Mirror Egress Port and the Mirror Ingress Port at the same time. SYNTAX: eth switch mirror ingress port = [state = <{enabled | disabled}>] where: port The port to be the Mirror Ingress Port.
PAGE 319
Expr Commands Expr Commands Introduction This chapter describes the commands of the expr command group. Contents This chapter covers the following commands: expr add Add a subexpression to an expression. 296 expr delete Delete an expression. 299 expr flush Flush all the expressions. 300 expr list List the expressions. 301 expr modify Modify an expression. 304 E-DOC-CTC-20050531-0061 v1.
PAGE 320
Expr Commands expr add Add a subexpression to an expression.
PAGE 321
Expr Commands tos A number between 0 and 255. Represents the Type of Service (ToS) specification in the IP packet. Note precedence dscp The parameters tos, precedence and dscp are mutually exclusive. The precedence in the IP packet (part of tos). Select an IP precedence (see “ IP Precedence” on page 800) or, alternatively, specify the number. Note OPTIONAL The parameters tos, precedence and dscp are mutually exclusive. The Differentiated Services Code Point (DSCP) in the IP packet (part of tos).
PAGE 322
Expr Commands EXAMPLE: =>expr list name type use flags expression -----------------------------------------------------------------------------------------_myPPP_ppp intf 0 D 1. intf=myPPP_ppp _eth0 intf 0 D 1. intf=eth0 wan intf 0 1. intfgroup=0 lan intf 28 1. intfgroup=2 local intf 0 1. intfgroup=1 notwan intf 1 1. intfgroup=2 2. intfgroup=1 _10.0.0.138 ip 0 D 1. addr=10.0.0.138 _192.168.1.254 ip 0 D 1. addr=192.168.1.254 ... DiffServ sip serv serv 0 1 h323 serv 1 1. 1. 2. 1. 2. 3.
PAGE 323
Expr Commands expr delete Delete an expression. SYNTAX: expr delete name = [index = ] where: name The name of the expression to be deleted. REQUIRED index The index of the subexpression to be deleted. OPTIONAL Note If not specified, all the subexpressions wil be deleted. EXAMPLE: =>expr list name type use flags expression -----------------------------------------------------------------------------------------_myPPP_ppp intf 0 D 1. intf=myPPP_ppp _eth0 intf 0 D 1.
PAGE 324
Expr Commands expr flush Flush all the expressions. SYNTAX: expr flush 300 E-DOC-CTC-20050531-0061 v1.
PAGE 325
Expr Commands expr list List the expressions. SYNTAX: expr list [name = ] [type = <{intf | ip | serv}>] [format = <{pretty | cli}>] where: name The name of an existing expression. Note type intf ip serv. Note format If not specified, all the expressions will be listed. The expression type. Choose between: OPTIONAL OPTIONAL If not specified, the expressions of all types will be shown. Select the output format of the list.
PAGE 326
Expr Commands EXAMPLE 1: =>expr list name type use flags expression -----------------------------------------------------------------------------------------_Internet intf 0 D 1. intf=Internet _LocalNetwork intf 0 D 1. intf=LocalNetwork HTTPI_if_0 intf 1 D 1. intf=LocalNetwork 2. intf=LocalNetwork 3. intf=LocalNetwork HTTP_if_0 intf 1 D 1. intfgroup=2 HTTPs_if_0 intf 1 D 1. intfgroup=2 FTP_if_0 intf 1 D 1. intfgroup=2 TELNET_if_0 intf 1 D 1. intfgroup=2 DNS-S_if_0 intf 1 D 1.
PAGE 327
Expr Commands EXAMPLE 2: =>expr list format=cli :expr add name=_Internet type=intf intf=Internet :expr add name=_LocalNetwork type=intf intf=LocalNetwork :expr add name=HTTPI_if_0 type=intf intf=LocalNetwork :expr add name=HTTPI_if_0 type=intf intf=LocalNetwork :expr add name=HTTPI_if_0 type=intf intf=LocalNetwork :expr add name=HTTP_if_0 type=intf intfgroup=lan :expr add name=HTTPs_if_0 type=intf intfgroup=lan :expr add name=FTP_if_0 type=intf intfgroup=lan :expr add name=TELNET_if_0 type=intf intfgroup=l
PAGE 328
Expr Commands expr modify Modify an expression.
PAGE 329
Expr Commands intfgroup The IP interface group. Choose between: wan local lan tunnel dmz guest. Note bridgeport tos dscp OPTIONAL The parameters tos, precedence and dscp are mutually exclusive. The DSCP in the IP packet (part of tos). Select a DSCP (see “ Differentiated Services Code Point (DSCP)” on page 801). Note OPTIONAL The parameters tos, precedence and dscp are mutually exclusive. The precedence in the IP packet (part of tos).
PAGE 330
Expr Commands 306 E-DOC-CTC-20050531-0061 v1.
PAGE 331
Firewall Commands Firewall Commands Introduction This chapter describes the commands of the firewall command group. Contents This chapter covers the following commands: firewall config Configure the firewall options. 308 firewall clear Flush the firewall configuration. 310 firewall list List the firewall configuration. 311 firewall chain add Add a chain. 312 firewall chain delete Delete a chain. 313 firewall chain flush Flush all chains. 314 firewall chain list List all chains.
PAGE 332
Firewall Commands firewall config Configure the firewall options. SYNTAX: firewall config [state = <{disabled | enabled}>] [keep = <{disabled | enabled}>] [tcpchecks = <{none | fast | exact}>] [udpchecks = <{disabled|enabled}>] [icmpchecks = <{disabled | enabled}>] [logdefault = <{disabled | enabled}>] [logthreshold = <{disabled | enabled}>] [tcpwindow = ] where: state Enable or disable the firewall. The default is enabled.
PAGE 333
Firewall Commands EXAMPLE: =>firewall config :firewall config state=enabled keep=disabled tcpchecks=fast icmpchecks=enabled logdefault=disabled logthreshold=enabled tcpwindow=65536 => E-DOC-CTC-20050531-0061 v1.
PAGE 334
Firewall Commands firewall clear Flush the firewall configuration. SYNTAX: firewall clear 310 E-DOC-CTC-20050531-0061 v1.
PAGE 335
Firewall Commands firewall list List the firewall configuration. SYNTAX: firewall list [format = <{pretty | cli}>] where: format Select the output format in which the configuration must be shown. Choose between: pretty: the configuration is shown as intuitive output in clear text. cli: the configuration is shown via the CLI commands configuration. OPTIONAL The default is pretty.
PAGE 336
Firewall Commands firewall chain add Add a chain. SYNTAX: firewall chain add chain = where: chain The name of the chain to be added.
PAGE 337
Firewall Commands firewall chain delete Delete a chain. SYNTAX: firewall chain delete chain = where: chain The name of the chain to be deleted.
PAGE 338
Firewall Commands firewall chain flush Flush all chains. SYNTAX: firewall chain flush 314 E-DOC-CTC-20050531-0061 v1.
PAGE 339
Firewall Commands firewall chain list List all chains. SYNTAX: firewall chain list [format = <{pretty | cli}>] where: format Select the output format in which the chains must be shown. Choose between: pretty: the chains are shown as intuitive output in clear text. cli: the chains are shown via the CLI commands configuration. OPTIONAL The default is pretty.
PAGE 340
Firewall Commands firewall debug clear Clear the firewall statistics.
PAGE 341
Firewall Commands firewall debug stats Display the firewall statistics.
PAGE 342
Firewall Commands firewall debug traceconfig Configure the firewall trace options. SYNTAX: firewall debug traceconfig [tcpchecks = <{disabled | enabled}>] [udpchecks = <{disabled|enabled}>] [icmpchecks = <{disabled | enabled}>] [sink = <{none | all | accept | deny | drop | reset} or number>] [forward = <{none | all | accept | deny | drop reset} or number>] [source = <{none | all | accept | deny | drop | reset} or number>] where: tcpchecks Disable or enable tcpchecks traces. The default is disabled.
PAGE 343
Firewall Commands firewall level add Add a security level. SYNTAX: firewall level add name = [index = ] [readonly = <{disabled | enabled}>] [udptrackmode = <{strict | loose}>] [service = <{disabled | enabled}>] [proxy = <{disabled|enabled}>] [text = ] where: name The name of the security level to be added. REQUIRED index The index of the security level. OPTIONAL Tip Use the command :firewall level list to obtain a list of indexes.
PAGE 344
Firewall Commands firewall level delete Delete a security level. SYNTAX: firewall level delete name = where: name The name of the security level to be deleted. REQUIRED RELATED COMMANDS: firewall level add Add a security level. firewall level list List all the security levels. 320 E-DOC-CTC-20050531-0061 v1.
PAGE 345
Firewall Commands firewall level flush Flush the security level configuration. SYNTAX: firewall level flush E-DOC-CTC-20050531-0061 v1.
PAGE 346
Firewall Commands firewall level list List all the security levels. SYNTAX: firewall level list [format = <{pretty | cli}>] where: format Select the output format in which the security levels must be shown. Choose between: pretty: the security levels are shown as intuitive output in clear text. cli: the security levels are shown via the CLI commands configuration. OPTIONAL The default is pretty. RELATED COMMANDS: firewall level add Add a security level.
PAGE 347
Firewall Commands firewall level modify Configure a security level. SYNTAX: firewall level modify name = [index = ] [readonly = <{disabled | enabled}>] [udptrackmode = <{strict | loose}>] [service = <{disabled | enabled}>] [proxy = <{disabled|enabled}>] [text = ] where: name The name of the security level to be added. REQUIRED index The index of the security level. OPTIONAL Tip Use the command :firewall level list to obtain a list of indexes.
PAGE 348
Firewall Commands firewall level set Set the security level or display the current security level. SYNTAX: firewall level set [name = ] where: name The name of the security level to be set. Note 324 OPTIONAL If no security level is specified, the current security level will be shown. E-DOC-CTC-20050531-0061 v1.
PAGE 349
Firewall Commands firewall rule add Add a firewall rule. SYNTAX: firewall rule add chain = [index = ] [name = ] [clink = ] [srcintf [!]= <{DHCP-S_if_0|DHCP-R_if_0|wan|local|lan| tunnel|dmz|guest|HTTPI_if_0|HTTP_if_0|HTTPs_if_0|FTP_if_0| TELNET_if_0|DNS-S_if_0|SNMP_AGENT_if_0|PING_RESPONDER_if_0| _Internet| _lan1|_wan1|_dmz1|_guest1}>] [srcip [!]= <{private|ssdp_ip|mdap_ip|_10.0.0.138| _192.168.1.254|_192.168.2.254|_192.168.3.
PAGE 350
Firewall Commands where: chain The name of the chain which contains the rule. REQUIRED index The number of the rule in the chain. OPTIONAL name The name of the new rule. OPTIONAL clink The name of the chain to be parsed when this rule applies. OPTIONAL srcintf The name of the source interface expression. OPTIONAL srcip The name of the source IP expression. OPTIONAL dstintf The name of the destination interface expression. OPTIONAL dstip The name of the destination IP expression.
PAGE 351
Firewall Commands firewall rule delete Delete a firewall rule. SYNTAX: firewall rule delete chain = index = where: chain The name of the chain in which a rule must be deleted. REQUIRED index The number of the rule in the chain. REQUIRED RELATED COMMANDS: firewall rule add E-DOC-CTC-20050531-0061 v1.0 Add a firewall rule.
PAGE 352
Firewall Commands firewall rule flush Flush all firewall rules. SYNTAX: firewall rule flush [chain = ] where: chain The name of the chain for which the rules must be flushed. Note 328 OPTIONAL If not specified, the rules of all the chains will be flushed. E-DOC-CTC-20050531-0061 v1.
PAGE 353
Firewall Commands firewall rule list Show a list of the firewall rules in a chain. SYNTAX: firewall rule list [chain = ] [format = <{pretty | cli}>] where: chain The name of the chain for which the rules must be listed. Note format OPTIONAL If not specified, the rules of all the chains are shown. Select the output format in which the list must be shown. Choose between: pretty: the list is shown as intuitive output in clear text.
PAGE 354
Firewall Commands EXAMPLE: =>firewall rule list Rules (flags: C=Constant, D=Dynamic, E=Enable, L=Log) ===== Chain Nr. Flags Rule --------------------------------------------------------------------------------------sink 1 CDE : link sink_fire 2 CDE : link sink_system_service sink_fire 1 C E SSDP : accept ssdp_serv lan.* > *.ssdp_ip sink_system_service 1 CDE HTTPI : accept HTTPI_sv_0 HTTPI_if_0.* > *.* 2 DE PING_RESPONDER : accept PING_RESPONDER_sv_0 PING_RESPONDER_ if_0.* > *.
PAGE 355
Firewall Commands firewall rule modify Modify a firewall rule. SYNTAX: firewall rule modify chain = index = [newindex = ] [name = ] [clink = ] [srcintf [!]= ] [srcip [!]= <{_10.0.0.138 | _192.168.1.254| private | ssdp_ip | mdap_ip}>] [dstintf [!]= ] [dstip [!]= <{_10.0.0.138 | _192.168.1.
PAGE 356
Firewall Commands firewall rule debug clear Clear the firewall rule statistics. SYNTAX: firewall rule debug clear [chain = ] [index = ] where: chain The name of the chain which contains the rule. OPTIONAL index The number of the rule in the chain. OPTIONAL Note If not specified, the statistics for all the rules in the chain will be cleared.
PAGE 357
Firewall Commands RELATED COMMANDS: firewall rule debug stats E-DOC-CTC-20050531-0061 v1.0 Show the firewall rule statistics.
PAGE 358
Firewall Commands firewall rule debug stats Show the firewall rule statistics. SYNTAX: firewall rule debug stats [chain = ] [index = ] where: chain The name of the chain for which the statistics must be shown. Note index If not specified, the statistics for all the chains will be shown. The number of the rule in the chain. Note OPTIONAL OPTIONAL If not specified, the statistics for all the rules in the chain are shown.
PAGE 359
Firewall Commands firewall rule debug traceconfig Display or modify the rule trace configuration. SYNTAX: firewall rule debug traceconfig [trace = <{disabled | enabled}>] where: trace Enable or disable rule traces. The default is disabled. OPTIONAL EXAMPLE: =>firewall rule debug traceconfig :firewall rule debug traceconfig state=disabled => E-DOC-CTC-20050531-0061 v1.
PAGE 360
Firewall Commands 336 E-DOC-CTC-20050531-0061 v1.
PAGE 361
GRP Commands GRP Commands Introduction This chapter describes the commands of the grp command group. Contents This chapter covers the following commands: grp config Set the Generic Routing Protocol (GRP) configuration settings. 338 grp flush Flush the GRP interface settings and parameters. 339 grp ifconfig Configure the interface's routing parameters. 340 grp iflist Show the current interfaces. 341 grp rtlist Show the current routes in the GRP interfaces routing table.
PAGE 362
GRP Commands grp config Set the Generic Routing Protocol (GRP) configuration settings. SYNTAX: grp config [cdistance = ] [kdistance = ] [rdistance = ] [trace = <{disabled | enabled}>] where: cdistance A number between 0 and 255. Sets the distance of the connected route type. The default is 0. OPTIONAL kdistance A number between 0 and 255. Sets the distance of the kernel route type. The default is 1. OPTIONAL rdistance A number between 0 and 255.
PAGE 363
GRP Commands grp flush Flush the GRP interface settings and parameters. SYNTAX: grp flush E-DOC-CTC-20050531-0061 v1.
PAGE 364
GRP Commands grp ifconfig Configure the interface's routing parameters. SYNTAX: grp ifconfig intf = metric = where: intf The name of the interface. Tip metric REQUIRED Use the command :grp iflist to obtain a list of available interfaces. A number between 1 and 16 (hops). Represents the metric of the interface. REQUIRED EXAMPLE: =>grp iflist Interface : LocalNetwork index : 2 metric : 1 mtu : 1500 flags : address : 192.168.1.
PAGE 365
GRP Commands grp iflist Show the current interfaces. SYNTAX: grp iflist [intf = ] where: intf The name of the interface to be shown. Note OPTIONAL If not specified, all the interfaces will be shown. EXAMPLE: =>grp iflist Interface : LocalNetwork index : 2 metric : 1 mtu : 1500 flags : address : 192.168.1.254/24 broadcast : 192.168.1.255 address : 10.0.0.138/24 broadcast : 10.0.0.
PAGE 366
GRP Commands EXAMPLE: =>grp iflist Interface : lan1 index : 3 metric : 1 mtu : 1500 flags : address : 192.168.1.254/24 broadcast : 192.168.1.255 address : 10.0.0.138/24 broadcast : 10.0.0.255 Interface : Internet index : 2 metric : 1 mtu : 1500 flags : Interface : ipsec0 index : 1 metric : 1 mtu : 65535 flags : Interface : loop index : 0 metric : 1 mtu : 65535 flags : address : 127.0.0.
PAGE 367
GRP Commands grp rtlist Show the current routes in the GRP interfaces routing table. SYNTAX: grp rtlist [dst = ] [dstmask = ] where: dst The destination IP address of the route. Supports IP/mask notation. Note dstmask OPTIONAL If no destination IP address is specified, all the current routes will be shown. The destination IP address mask, either in dotted or in numerical cidr notation.
PAGE 368
GRP Commands grp rttadd Add a translation rule to the GRP route translation list. SYNTAX: grp rttadd dst = [dstmsk = ] tdst = [tdstmsk = ] rttype = <{kernel | connect | static | rip}> intf = where: dst The destination IP address to be translated. Note dstmsk tdst REQUIRED Supports IP/mask notation. The destination IP address mask, either in dotted or in numerical cidr notation.
PAGE 369
GRP Commands grp rttdelete Delete a translation rule from the GRP route translation list. SYNTAX: grp rttdelete dst = [dstmsk = ] tdst = [tdstmsk = ] rttype = <{kernel | connect | static | rip}> intf = where: dst The destination IP address to be translated. Note dstmsk tdst REQUIRED Supports IP/mask notation. The destination IP address mask, either in dotted or in numerical cidr notation.
PAGE 370
GRP Commands RELATED COMMANDS: grp rttadd Add a translation rule to the GRP route translation list. grp rttlist List the GRP route translation list. 346 E-DOC-CTC-20050531-0061 v1.
PAGE 371
GRP Commands grp rttlist List the GRP route translation list. SYNTAX: grp rttlist EXAMPLE: =>grp rttlist GRP route translation list ----------------------------Codes : K - kernel, C - connected, S Destination Transl Destination S 10.0.0.1/32 => 150.150.150.1/32 C 10.0.0.2/32 => 150.150.2.2/32 => static, R - rip Interface Internet Internet RELATED COMMANDS: grp rttadd Add a translation rule to the GRP route translation list. grp rttdelete Delete a translation rule from the GRP route translation list.
PAGE 372
GRP Commands grp rip bnadd Add an IP address to the Routing Information Protocol (RIP) black network list. SYNTAX: grp rip bnadd addr = [netmask = ] where: addr Note netmask REQUIRED The IP network address. Supports IP/mask notation. The subnetmask associated with this IP address, either in dotted or in numerical cidr notation. OPTIONAL EXAMPLE: =>grp rip bnlist RIP black network address list ---------------------------------192.6.11.
PAGE 373
GRP Commands grp rip bndelete Delete an IP address from the RIP black network list. SYNTAX: grp rip bndelete addr = [netmask = ] where: addr The IP network address to be deleted. Note netmask REQUIRED Supports IP/mask notation. The subnetmask associated with this IP address, either in dotted or in numerical cidr notation. OPTIONAL EXAMPLE: =>grp rip bnlist RIP black network address list ---------------------------------192.6.11.150/24 192.6.12.
PAGE 374
GRP Commands grp rip bnlist Show the RIP black network list. SYNTAX: grp rip bnlist EXAMPLE: =>grp rip bnlist RIP black network address list ---------------------------------192.6.11.150/24 192.6.12.150/24 => RELATED COMMANDS: grp rip bnadd Add an IP address to the Routing Information Protocol (RIP) black network list. grp rip bndelete Delete an IP address from the RIP black network list. 350 E-DOC-CTC-20050531-0061 v1.
PAGE 375
GRP Commands grp rip config Configure the RIP settings.
PAGE 376
GRP Commands impsrt Enable or disable the import of static routes. The default is enabled. OPTIONAL impdefkrt Enable or disable the import of the default kernel route. The default is enabled. OPTIONAL impdefsrt Enable or disable the import of the default static route. The default is enabled. OPTIONAL exprt Enable or disable the export of received RIP routes. The default is enabled. OPTIONAL expdefrt Enable or disable the export of the received RIP default route. The default is enabled.
PAGE 377
GRP Commands grp rip flush Flush the RIP interface settings and global parameters. SYNTAX: grp rip flush E-DOC-CTC-20050531-0061 v1.
PAGE 378
GRP Commands grp rip ifconfig Configure a RIP interface. SYNTAX: grp rip ifconfig intf = [rip = <{disabled | enabled}>] [txversion = <{rip_unspec | rip_v1 | rip_v2 | rip_v1-2}>] [rxversion = <{rip_unspec | rip_v1 | rip_v2 | rip_v1-2}>] [authmode = <{none | cleartext}>] [authstring = ] [splithorizon = <{disable | enable}>] where: intf REQUIRED The name of the RIP interface to be configured. Tip Use the command :grp iflist to obtain a list of available interfaces.
PAGE 379
GRP Commands EXAMPLE: =>grp rip ifconfig intf = myPPP_ppp [rip] = disabled [txversion] = rip_unspec [rxversion] = rip_unspec [authmode] = none [authstr] = [passive] = disabled [splithorizon] = enabled :grp rip ifconfig intf=myPPP_ppp => E-DOC-CTC-20050531-0061 v1.
PAGE 380
GRP Commands grp rip nbadd Add a RIP neighbor to the RIP neighbor list. SYNTAX: grp rip nbadd addr = where: addr The IP address of the RIP neighbour to be added. REQUIRED EXAMPLE: =>grp rip nblist RIP neighbor list ====================== =>grp bnadd addr=192.6.11.150 =>grp rip nblist RIP neighbor list ====================== 192.6.11.150 => RELATED COMMANDS: grp rip nbdelete Delete a RIP neighbor from the RIP neighbor list. grp rip nblist Show the RIP neighbor list.
PAGE 381
GRP Commands grp rip nbdelete Delete a RIP neighbor from the RIP neighbor list. SYNTAX: grp rip nbdelete addr = where: addr The IP address of the RIP neighbour to be deleted. REQUIRED EXAMPLE: =>grp nblist RIP neighbor list ====================== 192.6.11.150 =>grp rip nbdelete addr=192.6.11.150 =>grp rip nblist RIP neighbor list ====================== => RELATED COMMANDS: grp rip nbadd Add a RIP neighbor to the RIP neighbor list. grp rip nblist Show the RIP neighbor list.
PAGE 382
GRP Commands grp rip nblist Show the RIP neighbor list. SYNTAX: grp rip nblist EXAMPLE: =>grp rip nblist RIP neighbor list ====================== 192.6.11.150 => RELATED COMMANDS: grp rip nbadd Add a RIP neighbor to the RIP neighbor list. grp rip nbdelete Delete a RIP neighbor from the RIP neighbor list. 358 E-DOC-CTC-20050531-0061 v1.
PAGE 383
GRP Commands grp rip rtfadd Add a route filter to the RIP route filter list. SYNTAX: grp rip rtfadd addr = [netmask = ] direction = <{incoming | outgoing}> intf = where: addr The IP network address which must be filtered out. REQUIRED netmask The subnetmask associated with this address. OPTIONAL direction Specify if the filtering must be applied to incoming or outgoing packets.
PAGE 384
GRP Commands grp rip rtfdelete Delete a route filter from the RIP route filter list. SYNTAX: grp rip rtfdelete addr = [netmask = ] direction = <{incoming | outgoing}> intf = where: addr The IP network address which must be filtered out. REQUIRED netmask The subnetmask associated with this address. OPTIONAL Note If the subnetmask was specified at the time of creation of the route filter, then it must be specified in the :grp rip rtfdelete command.
PAGE 385
GRP Commands grp rip rtflist List the RIP route filter list. SYNTAX: grp rip rtflist EXAMPLE: =>grp rip rtflist RIP route filter list ------------------------Codes : I - Incoming, O - Outgoing Network Interface I 10.0.0.138/24 PPPoA_1 => RELATED COMMANDS: grp rip rtfadd Add a route filter to the RIP route filter list. grp rip rtfdelete Delete a route filter from the RIP route filter list. E-DOC-CTC-20050531-0061 v1.
PAGE 386
GRP Commands grp rip show Show the RIP settings and the routes in the RIP database.
PAGE 387
Hostmgr Commands Hostmgr Commands Introduction This chapter describes the commands of the hostmgr command group. Contents This chapter covers the following commands: hostmgr add Add host device info to the host manager. 364 hostmgr clear Remove all the hosts from the list. 366 hostmgr config Configure the host manager parameters. 367 hostmgr delete Delete the host device info from the host manager. 368 hostmgr flush Flush the host manager configuration.
PAGE 388
Hostmgr Commands hostmgr add Add host device info to the host manager. SYNTAX: hostmgr add mac_addr = [ip_addr = ] [name = ] [type = <{generic_device|desktop_computer|laptop_computer| set_top_box|pda|gaming_console|phone|mobile_phone| printer|mass_storage_device}>] [ipintf = ] [ethintf = ] [physintf = ] where: mac_addr The MAC address of the host to be added. REQUIRED ip_addr The host IP address. OPTIONAL name The host name.
PAGE 389
Hostmgr Commands EXAMPLE: =>hostmgr list MAC-address IP-address -------------------00:10:a4:ad:32:cf 192.168.1.64 Flags ----C Type ---Generic Device Intf ---LocalNetwork Hw Intf ------ethif4 Hostname -------MyComputer =>hostmgr add mac_addr=00:10:a4:33:56:53 name=Play type=Playstation =>hostmgr list MAC-address IP-address Flags Type Intf -----------------------------00:10:a4:33:56:53 0.0.0.0 Playstation ethif1 00:10:a4:ad:32:cf 192.168.1.
PAGE 390
Hostmgr Commands hostmgr clear Remove all the hosts from the list. SYNTAX: hostmgr clear EXAMPLE: =>hostmgr list MAC-address ----------00:10:a4:33:56:53 00:10:a4:ad:32:cf IP-address ---------0.0.0.0 192.168.1.64 Flags ----C Type ---Playstation Generic Device Intf ---ethif1 LocalNetwork Hw Intf ------ethif1 ethif4 Hostname -------Play MyComputer =>hostmgr clear =>hostmgr list No hosts found. => RELATED COMMANDS: hostmgr delete 366 Delete the host device info from the host manager.
PAGE 391
Hostmgr Commands hostmgr config Configure the host manager parameters. SYNTAX: hostmgr config [state = <{disabled | enabled}>] [scantime = ] [autosave = <{disabled | enabled}>] [trace = <{disabled | enabled}>] where: state Enable or disable the host manager daemon. The default is enabled. OPTIONAL scantime A number between 10 an 600 (seconds). Represents the time between two scans. The default is 30 (seconds). OPTIONAL autosave Enable or disable automatic saves to flash memory.
PAGE 392
Hostmgr Commands hostmgr delete Delete the host device info from the host manager. SYNTAX: hostmgr delete mac_addr = where: mac_addr The MAC address of the host to be removed. REQUIRED EXAMPLE: =>hostmgr list MAC-address ----------00:10:a4:33:56:53 00:10:a4:ad:32:cf IP-address ---------0.0.0.0 192.168.1.
PAGE 393
Hostmgr Commands hostmgr flush Flush the host manager configuration. The host manager configuration is cleaned and returned to default values. SYNTAX: hostmgr flush E-DOC-CTC-20050531-0061 v1.
PAGE 394
Hostmgr Commands hostmgr list List all the host devices. SYNTAX: hostmgr list EXAMPLE: =>hostmgr list MAC-address ----------00:10:a4:33:56:53 00:10:a4:ad:32:cf IP-address ---------0.0.0.0 192.168.1.64 Flags ----C Type ---Playstation Generic Device Intf ---ethif1 LocalNetwork Hw Intf ------ethif1 ethif4 Hostname -------Play MyComputer => RELATED COMMANDS: hostmgr add Add host device info to the host manager. hostmgr delete Delete the host device info from the host manager.
PAGE 395
IDS Commands IDS Commands Introduction This chapter describes the commands of the ids command group. Contents This chapter covers the following commands: ids clear Reset the IDS statistics. 372 ids config Display/modify the Intrusion Detection System (IDS) configuration. 373 ids parser list Display the IDS parser configuration. 374 ids parser modify Modify the IDS parser configuration. 375 ids pattern clear Reset the pattern tracker.
PAGE 396
IDS Commands ids clear Reset the IDS statistics. SYNTAX: ids clear RELATED COMMANDS: ids parser list 372 Display the IDS parser configuration. E-DOC-CTC-20050531-0061 v1.
PAGE 397
IDS Commands ids config Display/modify the Intrusion Detection System (IDS) configuration. SYNTAX: ids config [state = <{disabled | enabled}>] [trace = <{disabled|enabled}>] where: state Enable or disable IDS checks. The default is enabled. OPTIONAL trace Enable or disable tracing. The default is disabled. OPTIONAL EXAMPLE: =>ids config IDS configuration: ================= state : enabled traces ::disabled => E-DOC-CTC-20050531-0061 v1.
PAGE 398
IDS Commands ids parser list Display the IDS parser configuration. SYNTAX: ids parser list [parser = ] where: parser The name of the parser REQUIRED EXAMPLE: =>ids parser list parser state ----------------------------------------fragment enabled scan enabled dos enabled proto enabled rate enabled => 374 E-DOC-CTC-20050531-0061 v1.
PAGE 399
IDS Commands ids parser modify Modify the IDS parser configuration. SYNTAX: ids parser modify parser = state = <{disabled | enabled}> where: parser The name of the IDS parser of which the configuration must be modified. REQUIRED state Disable or enable the parser.
PAGE 400
IDS Commands ids pattern clear Reset the pattern tracker.
PAGE 401
IDS Commands ids pattern list Display the patterns in the pattern tracker. SYNTAX: ids pattern list [size = <{10 | 100 | full} or number>] where: size The size of the IDS pattern list that will be shown. Choose between: 10 100 full OPTIONAL or, alternatively, specify a number. The default is full. EXAMPLE: =>ids pattern list 1. # 40002# UDP period: [00001564..00001565] 2. # 30002# UDP period: [00001564..00001566] 3. # 5000a# UDP period: [00001411..00001425] => *.*.*.*:* -> *.*.*.
PAGE 402
IDS Commands ids pattern stats Display the pattern tracker statistics. SYNTAX: ids pattern stats EXAMPLE: =>ids pattern stats Pattern tracker statistics: --------------------------memory maximum number of patterns number of active patterns number of recycled patterns number of pattern searches number of new patterns maximum number of hash collisions % of hash entries with collisions % of hash entries unused => : : : : : : : : : 32768 bytes 512 8 0 9 8 1 0.09 99.
PAGE 403
IDS Commands ids signature list Displays the ids signature configuration SYNTAX ids signature list [signature =
PAGE 404
IDS Commands ids signature modify Modify the states of the signatures.
PAGE 405
IDS Commands ids threshold clear Reset the IDS thresholds to their default values. SYNTAX: ids threshold clear EXAMPLE: =>ids threshold list index name window limit scaling ----------------------------------------------------------------1. ids scan 20 20 enabled 2. ids flood 2 100 disabled 3. ids tcp rate 10 300 enabled 4. ids udp rate 1 200 disabled 5. ids icmp rate 1 200 disabled 6.
PAGE 406
IDS Commands ids threshold list Display the IDS thresholds. SYNTAX: ids threshold list EXAMPLE: =>ids threshold list index name window limit scaling ----------------------------------------------------------------1. ids scan 20 20 enabled 2. ids flood 2 100 disabled 3. ids tcp rate 1 200 disabled 4. ids udp rate 1 200 disabled 5. ids icmp rate 1 200 disabled 6. ids ip rate 1 200 disabled => RELATED COMMANDS: ids threshold clear Reset the IDS thresholds to their default values.
PAGE 407
IDS Commands ids threshold modify Modify the IDS thresholds. SYNTAX: ids threshold modify index = [window = ] [limit = ] [scaling = <{disabled | enabled}>] where: index The index of the IDS threshold to be modified. Tip REQUIRED Use the command :ids threshold list to obtain the indexes. window A number (of seconds). Represents the time window of the threshold. OPTIONAL limit A number. Represents the limit of the threshold.
PAGE 408
IDS Commands 384 E-DOC-CTC-20050531-0061 v1.
PAGE 409
Interface Commands Interface Commands Introduction This chapter describes the commands of the interface command group. Contents This chapter covers the following commands: interface list E-DOC-CTC-20050531-0061 v1.0 Display interfaces.
PAGE 410
Interface Commands interface list Display interfaces. SYNTAX: interface list [expand = <{disabled | enabled}>] [reverse = <{disabled | enabled}>] where: expand Enable or disable expanded listing. The default is disabled. OPTIONAL reverse Enable or disable reverse listing (lower layer first instead of upper layer first). The default is disabled.
PAGE 411
IP Commands IP Commands Introduction This chapter describes the commands of the ip command group. Contents This chapter covers the following commands: ip arpadd Add an entry to the ARP cache of a broadcast Internet Protocol (IP) interface. 389 ip arpdelete Delete an entry from the ARP cache. 390 ip arplist Display the ARP cache. 391 ip config Show/set global IP stack configuration options. 392 ip flush Flush all the static IP parameters. 394 ip ifadd Create an IP interface.
PAGE 412
IP Commands ip debug sendto Send UDP packets. 423 ip debug stats Display IP statistics. 425 ip debug traceconfig Display/modify the IP stack trace configuration. 426 ip debug traceroute Send ICMP/UDP packets to trace the IP path. 427 388 E-DOC-CTC-20050531-0061 v1.
PAGE 413
IP Commands ip arpadd Add an entry to the ARP cache of a broadcast Internet Protocol (IP) interface. SYNTAX: ip arpadd intf = ip = [hwaddr = ] where: intf The IP interface name. REQUIRED ip The IP address (or range) of the entry to be added to the Address Resolution Protocol (ARP) cache. REQUIRED hwaddr The hardware address (for example the Ethernet MAC address) of the entry to be added.
PAGE 414
IP Commands ip arpdelete Delete an entry from the ARP cache. SYNTAX: ip arpdelete intf = ip = [hwaddr = ] where: intf The IP interface name. REQUIRED ip The IP address (or range) of the entry to be deleted. REQUIRED hwaddr The hardware address (for example the Ethernet MAC address) of the entry to be deleted. OPTIONAL EXAMPLE: =>ip arplist Interface IP-address HW-address Type 2 eth0 10.0.0.1 00:10:a4:ad:32:cf STATIC 2 eth0 10.0.0.
PAGE 415
IP Commands ip arplist Display the ARP cache. SYNTAX: ip arplist EXAMPLE: =>ip arplist Interface 2 eth0 2 eth0 2 eth0 => IP-address 10.0.0.1 10.0.0.2 10.0.0.3 HW-address 00:10:a4:ad:32:cf 00:00:00:00:00:00 00:a0:24:ae:66:e1 Type STATIC DYNAMIC STATIC RELATED COMMANDS: ip arpadd Add an entry to the ARP cache of a broadcast Internet Protocol (IP) interface. ip arpdelete Delete an entry from the ARP cache. E-DOC-CTC-20050531-0061 v1.
PAGE 416
IP Commands ip config Show/set global IP stack configuration options. SYNTAX: ip config [forwarding = <{disabled | enabled}>] [redirects = <{disabled | enabled}>] [sourcerouting = <{disabled | enabled}>] [netbroadcasts = <{disabled | enabled}>] [ttl = ] [fraglimit = ] [defragmode = <{disabled | enabled}>] [addrcheck = <{off | own | static | dynamic}>] [mssclamping = <{disabled | enabled}>] where: forwarding Disable or enable the IP routing functionality.
PAGE 417
IP Commands addrcheck Set the level of IP address checks. Choose between: off: No address checking is performed. For advanced users only; in normal circumstances there should always be some kind of address checking. own: Minimum level of checking. OPTIONAL Only the address configuration on the SpeedTouch™ is checked.
PAGE 418
IP Commands ip flush Flush all the static IP parameters. Dynamic configurations (for example from PPP or CIP links) remain. The flush command does not impact previously saved configurations. ! The command :ip flush deletes all local IP connectivity. Do not use this command during an IP based local connection, for example a Telnet CLI session, or web based CLI access. SYNTAX: ip flush 394 E-DOC-CTC-20050531-0061 v1.
PAGE 419
IP Commands ip ifadd Create an IP interface. SYNTAX: ip ifadd intf = dest = where: intf The name of the IP interface to be created. REQUIRED dest An network interface name.
PAGE 420
IP Commands ip ifattach Attach an IP interface. SYNTAX: ip ifattach intf = where: intf The name of the IP interface to be attached.
PAGE 421
IP Commands ip ifconfig Configure the parameters of an IP interface. SYNTAX: ip ifconfig intf = [mtu = ] [status = <{down | up}>] [hwaddr = ] [group = or number] [linksensing = <{disabled | enabled}>] [primary = <{disabled | enabled}>] where: intf The name of the IP interface to be configured. REQUIRED mtu A number between 68 and 65535. Represents the MTU (the maximum packet size (including IP header)) to be used on this interface.
PAGE 422
IP Commands EXAMPLE: =>ip iflist Interface Group MTU 0 loop local 65535 1 Internet wan 1500 2 RtPPPoE_ppp wan 1500 3 LocalNetwork lan 1500 4 myIPintf wan 1500 =>ip ifconfig intf = myIPintf [mtu] = 1500 [status] = up [hwaddr] = 00:0e:50:0f:fc:2c [group] = wan [linksensing] = enabled [primary] = enabled :ip ifconfig intf=myIPintf =>ip iflist Interface Group MTU 0 loop local 65535 1 Internet wan 1500 2 RtPPPoE_ppp wan 1500 3 LocalNetwork lan 1500 4 myIPintf wan 1500 => RX 123966 0 0 86589 0 TX 75177 0 0 125
PAGE 423
IP Commands ip ifdelete Delete an IP interface. SYNTAX: ip ifdelete intf = where: intf The name of the IP interface to be deleted.
PAGE 424
IP Commands ip ifdetach Detach an IP interface. SYNTAX: ip ifdetach intf = where: intf The name of the IP interface to be detached. REQUIRED EXAMPLE: =>ip iflist expand=enabled Interface Group MTU RX TX TX-Drop Status HW-address 0 loop local 65535 130597 82240 0 [UP] 00:0e:50:0f:fc:2c BRHW-address : ff:ff:ff:ff:ff:ff RX unicastpkts: 1304 brcastpkts : 0 TX unicastpkts: 1994 brcastpkts : 0 droppkts:0 Oper state : UP Admin State: UP Flags : ARP BROADCAST ARPTABLE LOOP MULTICAST INTERNAL ...
PAGE 425
IP Commands ip iflist Display all the IP interfaces. SYNTAX: ip iflist [expand = <{disabled | enabled}>] where: expand Enable or disable expanded listing. The default is disabled.
PAGE 426
IP Commands ip ifwait Wait for a status change of an IP interface. SYNTAX: ip ifwait intf = [timeout = ] [adminstatus = <{down | up}>] [operstatus = <{down | up}>] [linkstatus = <{down | up}>] where: intf The IP interface name. REQUIRED timeout A number between 1 and 600000 (seconds). Represents the timeout. OPTIONAL adminstatus The administrative state of the interface. Choose between: OPTIONAL operstatus linkstatus down up.
PAGE 427
IP Commands ip ipadd Assign an IP address to an IP interface. SYNTAX: ip ipadd intf = addr = [netmask = ] [pointopoint = ] [addroute = <{disabled | enabled}>] where: intf The IP interface name. REQUIRED addr The new IP address to be added. REQUIRED netmask The subnetmask associated with this address. OPTIONAL pointopoint The remote IP address in case of a dedicated point-to-point link.
PAGE 428
IP Commands ip ipconfig Modify an IP address configuration. SYNTAX: ip ipconfig addr = [preferred = <{disabled | enabled}>] [primary = <{disabled | enabled}>] where: addr The IP address to be configured. REQUIRED preferred Make this IP address the preferred address for that subnet (enabled) or not (disabled). The default is disabled. OPTIONAL primary Make this IP address the primary address for the interface (enabled) or not (disabled). The default is disabled.
PAGE 429
IP Commands ip ipdelete Remove an IP address from an IP interface. SYNTAX: ip ipdelete addr = where: addr The IP address to be deleted. REQUIRED EXAMPLE: =>ip iplist Interface 1 eth0 1 eth0 1 eth0 0 loop Type Ethernet Ethernet Ethernet Ethernet =>ip ipdelete addr=10.0.0.2 =>ip iplist Interface Type 1 eth0 Ethernet 1 eth0 Ethernet 0 loop Ethernet IP-address 10.0.0.2 10.0.0.138 169.254.141.11 127.0.0.1 Point-to-point/Mask 255.255.255.0 255.255.255.0 255.255.0.0 255.0.0.
PAGE 430
IP Commands ip iplist Display all the configured IP addresses. SYNTAX: ip iplist EXAMPLE: =>ip iplist Interface 2 LocalNetwork 2 LocalNetwork 0 loop => Type Ethernet Ethernet Ethernet IP-address 10.0.0.138 *192.168.1.254 127.0.0.1 Point-to-point/Mask 255.255.255.0 255.255.255.0 255.255.255.255 RELATED COMMANDS: ip ipadd Assign an IP address to an IP interface. ip ipdelete Remove an IP address from an IP interface. 406 E-DOC-CTC-20050531-0061 v1.
PAGE 431
IP Commands ip mcadd Add a multicast address to a multicast capable interface. SYNTAX: ip mcadd intf = addr = [mask = ] where: intf The IP interface name. REQUIRED addr The multicast IP address. REQUIRED mask The multicast IP address mask associated with this address. OPTIONAL Note Use 0 for promiscuous mode. EXAMPLE: =>ip mcadd intf=ETHoA_1 addr=192.178.14.11 =>ip mclist Interface Address Mask 2 ETHoA_1 192.178.14.11 255.255.255.
PAGE 432
IP Commands ip mcdelete Delete a multicast address to a multicast capable interface. SYNTAX: ip mcdelete intf = addr = [mask = ] where: intf The IP interface name. REQUIRED addr The multicast IP address. REQUIRED mask The multicast IP address mask associated with this address. OPTIONAL Note Use 0 for promiscuous mode. EXAMPLE: =>ip mclist Interface Address Mask 2 ETHoA_1 192.178.14.11 255.255.255.255 =>ip mcdelete intf=ETHoA_1 addr=192.
PAGE 433
IP Commands ip mclist Display all multicast addresses. SYNTAX: ip mclist EXAMPLE: =>ip mclist Interface 2 ETHoA_1 => Address 192.178.14.11 Mask 255.255.255.255 RELATED COMMANDS: ip mcadd Add a multicast address to a multicast capable interface. ip mcdelete Delete a multicast address to a multicast capable interface. E-DOC-CTC-20050531-0061 v1.
PAGE 434
IP Commands ip rtadd Add a route to the routing table. SYNTAX: ip rtadd dst = [dstmsk = ] [label = ] [gateway = ] [intf = ] [srcintf = ] [metric = ] where: dst The destination IP address(es) for this route. Note REQUIRED Supports ip/mask notation. dstmsk The destination IP address mask. OPTIONAL label The name of the label. OPTIONAL The IP address of the next hop. This hop must be directly connected.
PAGE 435
IP Commands ip rtdelete Delete a route from the routing table. SYNTAX: ip rtdelete dst = [dstmsk = ] [label = ] [gateway = ] [intf = ] where: dst The destination IP address(es) for this route. Note REQUIRED Supports cidr notation. dstmsk The destination IP address mask. OPTIONAL label The name of the label. OPTIONAL The IP address of the next hop. The next hop must be directly connected.
PAGE 436
IP Commands ip rtlist Display the routing table. SYNTAX: ip rtlist [expand = <{disabled | enabled}>] where: expand Enable or disable expanded listing. The default is disabled. OPTIONAL EXAMPLE: =>ip rtlist Destination Label 10.0.0.138/32 127.0.0.1/32 10.0.0.0/24 =>ip rtlist expand=enabled Destination Label 10.0.0.138/32 127.0.0.1/32 10.0.0.0/24 => Gateway 127.0.0.1 127.0.0.1 10.0.0.138 Interface loop loop eth0 Metric 0 0 0 Status [UP] [UP] [UP] Gateway 127.0.0.1 127.0.0.1 10.0.0.
PAGE 437
IP Commands ip auto flush Flush the autoIP interfaces. SYNTAX: ip auto flush E-DOC-CTC-20050531-0061 v1.
PAGE 438
IP Commands ip auto ifadd Create an autoIP interface. SYNTAX: ip auto ifadd intf = [addr = ] where: intf The name of the IP interface for which a link-local address has to be allocated. REQUIRED dest The preferred link-local IP address. OPTIONAL EXAMPLE: =>ip auto ifadd intf=eth0 => ip auto iflist eth0 : [INIT] 0.0.0.0 poolstart = 169.254.1.1 claim : 10 defence : 5 probes sent = 0 collisions = 0 poolend = 169.254.254.254 netmask = 255.255.0.
PAGE 439
IP Commands ip auto ifattach Select and assign a link-local address to an autoIP interface. SYNTAX: ip auto ifattach intf = where: intf The name of the autoIP interface for which a link-local address has to be attached. REQUIRED EXAMPLE: => ip auto iflist ipsec0 : [INIT] 0.0.0.0 poolstart = 169.254.1.1 claim : 10 defence : 5 probes sent = 0 collisions = 0 poolend = 169.254.254.254 netmask = 255.255.0.
PAGE 440
IP Commands ip auto ifconfig Configure an autoIP interface. SYNTAX: ip auto ifconfig intf = [addr = ] [poolstart = ] [poolend = ] [netmask = ] [claim = ] [defence = ] [probe = ] [interval = ] where: intf The name of the autoIP interface to be configured. REQUIRED addr The preferred link-local IP address.
PAGE 441
IP Commands EXAMPLE: => ip auto iflist eth0 : [INIT] 0.0.0.0 poolstart = 169.254.1.1 claim : 10 defence : 5 probes sent = 0 collisions = 0 poolend = 169.254.254.254 netmask = 255.255.0.0 probe : 4 interval : 2 (sec) =>ip auto ifconfig intf=ipsec0 claim=5 probe=5 => ip auto iflist ipsec0 : [INIT] 0.0.0.0 poolstart = 169.254.1.1 poolend = 169.254.254.254 netmask = 255.255.0.0 claim : 5 defence : 5 probe : 5 interval : 2 (sec) probes sent = 0 collisions = 0 => E-DOC-CTC-20050531-0061 v1.
PAGE 442
IP Commands ip auto ifdelete Delete an existing autoIP interface. SYNTAX: ip auto ifdelete intf = where: intf The name of the IP interface to be deleted. REQUIRED EXAMPLE: =>ip auto iflist ipsec0 : [SELECTING] poolstart = claim : 10 probes sent collisions 169.254.80.236 169.254.1.1 poolend = 169.254.254.254 netmask = 255.255.0.0 defence : 5 probe : 4 interval : 2 (sec) = 2 = 0 =>ip auto ifdelete intf=ipsec0 =>ip auto iflist => RELATED COMMANDS: ip auto ifadd Create an autoIP interface.
PAGE 443
IP Commands ip auto ifdetach Release the link-local address for the given autoIP interface. SYNTAX: ip auto ifdetach intf = where: intf The name of the autoIP interface for which a link-local address has to be detached. REQUIRED EXAMPLE: =>ip auto iflist ipsec0 : [SELECTING] poolstart = claim : 10 probes sent collisions 169.254.80.236 169.254.1.1 poolend = 169.254.254.254 netmask = 255.255.0.
PAGE 444
IP Commands ip auto iflist Display the autoIP interfaces. SYNTAX: ip auto iflist [intf = ] where: intf OPTIONAL The name of the autoIP interface to be listed. Note If not specified, all the autoIP interfaces are shown. EXAMPLE: =>ip auto iflist eth0 : [CLAIMED] 169.254.138.1 poolstart = 169.254.1.1 claim : 10 defence : 5 probes sent = 2 collisions = 0 poolend = 169.254.254.254 netmask = 255.255.0.
PAGE 445
IP Commands ip debug httpprobe Send a HTTP probe. This HTTP probe will measure the Round Trip Time (RTT) taken to connect and access data from a HTTP server. SYNTAX: ip debug httpprobe url = [version = <{1.0 | 1.1}>] where: url The Uniform Resource Locator (URL) identifying the HTTP server. REQUIRED version The version of the HTTP server. The default is 1.0. OPTIONAL EXAMPLE: The first example shows the measured time for a file that was downloaded: =>ip httpprobe url=http://download.
PAGE 446
IP Commands ip debug ping Send ICMP ECHO_REQUEST packets. SYNTAX: ip debug ping addr = [count = ] [size = ] [interval = ] [listen = <{disabled | enabled}>] where: addr The destination IP address. REQUIRED count A number between 1 and 1000000. Represents the number of pings to send. OPTIONAL size A number between 1 and 20000 (bytes). Represents the size of the ping packet(s). The default is 9.
PAGE 447
IP Commands ip debug sendto Send UDP packets. SYNTAX: ip debug sendto addr = [count = ] [size = ] [interval = ] [listen = <{disabled | enabled}>] [srcaddr = ] [srcport = ] dstport = [dstintf = ] where: addr The destination IP address. REQUIRED count A number between 1 and 1000000. Represents the number of UDP packets to send. The default is 1.
PAGE 448
IP Commands EXAMPLE: =>ip debug sendto addr=10.0.0.148 listen=on srcport=19 dstport=1025 =>ip debug sendto addr=10.0.0.148 listen=on srcport=19 dstport=1025 1 bytes from 10.0.0.148:1025 41 A =>ip debug sendto addr=10.0.0.148 count=3 listen=on srcport=19 dstport=1025 1 bytes from 10.0.0.148:1025 41 A 1 bytes from 10.0.0.148:1025 41 A 1 bytes from 10.0.0.148:1025 41 A => 424 E-DOC-CTC-20050531-0061 v1.
PAGE 449
IP Commands ip debug stats Display IP statistics. SYNTAX: ip debug stats EXAMPLE: =>ip debug stats Total datagrams received IP header errors Datagrams forwarded Datagram forwarding errors Datagram forwarding resource errors Total Fragments received Fragments dropped due to resources or timeouts Datagrams reassembled Datagrams fragmented successfully Datagram fragmentation errors Total Datagram fragments created successfully => E-DOC-CTC-20050531-0061 v1.
PAGE 450
IP Commands ip debug traceconfig Display/modify the IP stack trace configuration.
PAGE 451
IP Commands ip debug traceroute Send ICMP/UDP packets to trace the IP path. SYNTAX: ip debug traceroute addr = [count = ] [size = ] [interval = ] [maxhops = ] [dstport = ] [maxfail = ] [type = <{icmp | udp}>] [utime = <{disabled | enabled}>] where: addr The destination IP address. REQUIRED count A number between 1 and 10.
PAGE 452
IP Commands EXAMPLE: =>ip debug traceroute addr = 192.193.195.250 count=3 size=1 interval=1000 maxhops=30 dstport=33433 maxfail=5 type=icmp utime=yes :ip debug traceroute addr=192.193.195.250 ttl=1 192.193.195.250 676 us 1351 us 648 us => 428 E-DOC-CTC-20050531-0061 v1.
PAGE 453
IPQoS Commands IPQoS Commands Introduction This chapter describes the commands of the ipqos command group. Contents This chapter covers the following commands: ipqos config Configure IPQoS for a given destination interface for the IPQoS queues instantiation. 430 ipqos list Display the IPQoS configuration. 432 ipqos ef config Configure the IPQoS Expedited Forwarding (EF) timer for an interface. 433 ipqos ef list Display the IPQoS EF timers.
PAGE 454
IPQoS Commands ipqos config Configure IPQoS for a given destination interface for the IPQoS queues instantiation. When enabling or disabling IPQoS, take the following into account: if the WAN interface (for example PPPoA, IP oA,...) is detached at the time of enabling/disabling IPQoS, then the WAN interface has to be attached in order for the enabling/disabling of IPQoS to take effect.
PAGE 455
IPQoS Commands realtimerate A number between 1 and 100. Represents a percentage of the interface bandwidth for rate-limiting of the Real Time queue. In case of congestion, the Real Time queue will only use this percentage of the interface bandwidth when there is also traffic on the other queues. The default is 80. OPTIONAL burstsize A number between 1 and 64. Represents the Real Time queue burstsize (in kilobytes) for rate limiting. The default is 2. OPTIONAL weight1 A number between 1 and 97.
PAGE 456
IPQoS Commands ipqos list Display the IPQoS configuration. SYNTAX: ipqos list EXAMPLE: =>ipqos list Name State atm_pvc_0_35 disabled atm_pvc_8_35 enabled => Discard Priority early early wfq wfq Size (Packets) 250 250 Size (KBytes) 56 56 Rate (%) 80% 80% Burst (KBytes) 2 2 Weights Weights 25% 25% 25% 25% 25% 25% 25% 25% RELATED COMMANDS: ipqos config 432 Configure IPQoS for a given destination interface for the IPQoS queues instantiation. E-DOC-CTC-20050531-0061 v1.
PAGE 457
IPQoS Commands ipqos ef config Configure the IPQoS Expedited Forwarding (EF) timer for an interface. SYNTAX: ipqos ef config intf = [state = <{disabled | enabled}>] [timeout = ] [mtu = ] where: intf The name of the IP interface. REQUIRED state Enable or disable the IPQoS EF timer for the interface. The default is disabled. OPTIONAL timeout A number between 100 and 10000 milliseconds. Represents the timeout. The default is 1000.
PAGE 458
IPQoS Commands ipqos ef list Display the IPQoS EF timers. SYNTAX: ipqos ef list EXAMPLE: =>ipqos ef list Interface State loop Rt_PPPoA2 eth0 => disabled enabled disabled Timeout (ms) 1000 1000 1000 MTU (bytes) 65535 1500 1500 RELATED COMMANDS: ipqos ef config Configure the IPQoS Expedited Forwarding (EF) timer for an interface. ipqos ef stats Display the IPQoS EF timer statistics. 434 E-DOC-CTC-20050531-0061 v1.
PAGE 459
IPQoS Commands ipqos ef stats Display the IPQoS EF timer statistics. SYNTAX: ipqos ef stats EXAMPLE: =>ipqos ef stats Interface State loop Rt_PPPoA2 eth0 => active active disabled Remain (ms) 900 900 0 RELATED COMMANDS: ipqos ef config Configure the IPQoS Expedited Forwarding (EF) timer for an interface. ipqos ef list Display the IPQoS EF timers. E-DOC-CTC-20050531-0061 v1.
PAGE 460
IPQoS Commands ipqos meter add Add an IPQoS meter. SYNTAX: ipqos meter add name = where: name The name of the IPQoS meter to be added. REQUIRED EXAMPLE: =>ipqos meter add name=Test =>ipqos meter list Test [STOPPED]: LABEL: INTF: DROP : droprate : 102400kbps MARK : markrate : 102400kbps tosmarking : enabled classification: decrease => burst: burst: type : class: 64KB 64KB tos 0 action: drop action: count tos : 0 RELATED COMMANDS: ipqos meter delete Delete an IPQoS meter.
PAGE 461
IPQoS Commands ipqos meter clear Clear the IPQoS meter statistics. SYNTAX: ipqos meter clear EXAMPLE: =>ipqos meter stats Name Test2 =>ipqos meter clear =>ipqos meter stats Name myMeter => # packets accepted 171 # packets dropped 12 # packets marked 16 # packets accepted 0 # packets dropped 0 # packets marked 0 RELATED COMMANDS: ipqos meter stats E-DOC-CTC-20050531-0061 v1.0 Display the IPQoS meter statistics.
PAGE 462
IPQoS Commands ipqos meter config Modify an IPQoS meter configuration.
PAGE 463
IPQoS Commands markaction The mark action. Choose between: OPTIONAL count: only the statistics for arriving IP packets that are in excess of the configured markrate will be updated. mark: arriving IP packets that are in excess of the configured markrate, will be marked according to the setting of the parameter classification. The default is count. tosmarking Enable or disable tosmarking for marked packets.
PAGE 464
IPQoS Commands ipqos meter delete Delete an IPQoS meter. SYNTAX: ipqos meter delete name = where: name The name of the IPQoS meter to be deleted.
PAGE 465
IPQoS Commands ipqos meter flush Flush all IPQoS meters. SYNTAX: ipqos meter flush E-DOC-CTC-20050531-0061 v1.
PAGE 466
IPQoS Commands ipqos meter list Display the IPQoS meters. SYNTAX: ipqos meter list EXAMPLE: =>ipqos meter list Test2 [STOPPED]: LABEL: DSCP DROP : droprate : MARK : markrate : tosmarking : classification: => INTF: Internet 102400kbps burst: 102400kbps burst: enabled type : decrease class: 64KB 64KB tos 0 action: drop action: count tos : 0 RELATED COMMANDS: ipqos meter add Add an IPQoS meter. ipqos meter delete Delete an IPQoS meter. 442 E-DOC-CTC-20050531-0061 v1.
PAGE 467
IPQoS Commands ipqos meter start Start an IPQoS meter. SYNTAX: ipqos meter start name = where: name The name of the stopped IPQoS meter.
PAGE 468
IPQoS Commands ipqos meter stats Display the IPQoS meter statistics. SYNTAX: ipqos meter stats EXAMPLE: =>ipqos meter stats Name Test2 => # packets accepted 171 # packets dropped 12 # packets marked 16 RELATED COMMANDS: ipqos meter clear 444 Clear the IPQoS meter statistics. E-DOC-CTC-20050531-0061 v1.
PAGE 469
IPQoS Commands ipqos meter stop Stop an IPQoS meter. SYNTAX: ipqos meter stop name = where: name The name of the started IPQoS meter.
PAGE 470
IPQoS Commands ipqos queue clear Clear the IPQoS statistics.
PAGE 471
IPQoS Commands ipqos queue config Modify the IPQoS subqueue configuration. SYNTAX: ipqos queue config dest = queue = [propagate = <{disabled | enabled}>] [ecnmarking = <{disabled | enabled}>] [ackfiltering = <{disabled | enabled}>] [maxpackets = ] [maxbytes = ] [respackets = ] [resbytes = ] [hold = ] [markprob = ] where: dest The destination interface for the IPQoS queues instantiation.
PAGE 472
IPQoS Commands maxbytes OPTIONAL A number between 0 and 64. Represents the maximum size in kilobytes of this queue. The default is 0 for the Real time queue and 20 for the other queues. Note 0 means that a maximum size is not enforced. respackets A number between 0 and 250. Represents the reserved number of packets in this queue. The default is 30 for the Real time queue and 13 for the other queues.
PAGE 473
IPQoS Commands ipqos queue list Display the IPQoS subqueue configuration. SYNTAX: ipqos queue list [dest = ] where: dest The destination interface for the IPQoS queues instantiation. This is an ATM phonebook entry. Note OPTIONAL If not specified, the IPQoS subqueue configuration for all the interfaces will be shown.
PAGE 474
IPQoS Commands ipqos queue stats Show the IPQoS subqueue statistics. SYNTAX: ipqos queue stats [dest = ] where: dest The destination interface for the IPQoS queues instantiation. This is an ATM phonebook entry. Note OPTIONAL If not specified, the IPQoS subqueue statistics for all the interfaces will be shown.
PAGE 475
IPSec Commands IPSec Commands Introduction This chapter describes the commands of the IP Security (IPSec) command group. Contents This chapter covers the following commands: ipsec config Configure global Virtual Private Networking (VPN) settings. 454 ipsec flush Flush the IPSec configuration. 455 ipsec clear all Delete all Security Associations (SAs)/tunnels. 456 ipsec clear sad Delete all SA database entries. 457 ipsec clear session Delete a session.
PAGE 476
IPSec Commands ipsec peer add Add a peer gateway profile. 488 ipsec peer delete Delete a peer gateway profile. 489 ipsec peer list List the peer gateway profiles. 490 ipsec peer modify Change a peer gateway profile. 491 ipsec peer auth add Add an authentication attribute. 494 ipsec peer auth delete Delete an authentication attribute. 495 ipsec peer auth list List the authentication attributes. 496 ipsec peer auth modify Change an authentication attribute.
PAGE 477
IPSec Commands ipsec show sessions Display the sessions. 532 ipsec show spd Display the SPD contents. 533 ipsec show state Display all the dynamic states information. 534 ipsec show stats Display the statistics (SNMP). 535 E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 478
IPSec Commands ipsec config Configure global Virtual Private Networking (VPN) settings. SYNTAX: ipsec config [state = <{disabled | enabled}>] [autoroute = <{enabled | disabled}>] [autoproxyarp = <{enabled | disabled}>] where: state Enable or disable VPN processing. The default is enabled. OPTIONAL autoroute Enable or disable auto-addition of routes in VPN dialup client/server scenarios. The default is enabled.
PAGE 479
IPSec Commands ipsec flush Flush the IPSec configuration. SYNTAX: ipsec flush E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 480
IPSec Commands ipsec clear all Delete all Security Associations (SAs)/tunnels. SYNTAX: ipsec clear all EXAMPLE: =>ipsec clear all ok. => RELATED COMMANDS: ipsec clear session 456 Delete a session. E-DOC-CTC-20050531-0061 v1.
PAGE 481
IPSec Commands ipsec clear sad Delete all SA database entries. SYNTAX: ipsec clear sad E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 482
IPSec Commands ipsec clear session Delete a session. This command will delete a Phase 1 SA and all the associated Phase 2 SAs/tunnels. SYNTAX: ipsec clear session localid = remoteid = where: localid The local ID of the session to be deleted REQUIRED remoteid The remote ID of the session to be deleted REQUIRED RELATED COMMANDS: ipsec clear all 458 Delete all Security Associations (SAs)/tunnels. E-DOC-CTC-20050531-0061 v1.
PAGE 483
IPSec Commands ipsec clear spd Delete all spdb entries. SYNTAX: ipsec clear spd E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 484
IPSec Commands ipsec connection add Add a connection profile. SYNTAX: ipsec connection add name = where: name The name of the new connection profile. REQUIRED EXAMPLE: =>ipsec connection add name=myConnection =>ipsec connection list [myConnection] Peer : Local network : Remote network : Always on : disabled Descriptors : Options : State : disabled => RELATED COMMANDS: ipsec connection delete Delete a connection profile.
PAGE 485
IPSec Commands ipsec connection delete Delete a connection profile. SYNTAX: ipsec connection delete name = where: name The name of the connection profile to be deleted.
PAGE 486
IPSec Commands ipsec connection list List the connection profiles. SYNTAX: ipsec connection list EXAMPLE: =>ipsec connection list [myConnection] Peer : Local network : Remote network : Always on : Descriptors : Options : State : disabled disabled => RELATED COMMANDS: ipsec connection add Add a connection profile. ipsec connection delete Delete a connection profile. 462 E-DOC-CTC-20050531-0061 v1.
PAGE 487
IPSec Commands ipsec connection modify Change a connection profile. SYNTAX: ipsec connection modify name = [peer = ] [localnetwork = ] [remotenetwork = ] [alwayson = <{disabled | enabled}>] [descr = <{security descriptors}>] [options = ] [state = <{disabled | enabled}>] where: name The name of the connection profile to be modified. REQUIRED peer The name of the peer gateway profile (the gate to which to talk).
PAGE 488
IPSec Commands ipsec connection start Manually start negotiation for a connection. SYNTAX: ipsec connection start name = where: name The name of the connection to be started. REQUIRED RELATED COMMANDS: ipsec connection stop 464 Manually stop a connection. E-DOC-CTC-20050531-0061 v1.
PAGE 489
IPSec Commands ipsec connection stop Manually stop a connection. SYNTAX: ipsec connection stop name = where: name The name of the connection to be stopped. REQUIRED RELATED COMMANDS: ipsec connection start E-DOC-CTC-20050531-0061 v1.0 v1.0 Manually start negotiation for a connection.
PAGE 490
IPSec Commands ipsec connection advanced add Add a connection profile. SYNTAX: ipsec connection advanced add name = where: name The name of the new connection profile.
PAGE 491
IPSec Commands ipsec connection advanced delete Delete a connection profile. SYNTAX: ipsec connection advanced delete name = where: name The name of the connection profile to be deleted.
PAGE 492
IPSec Commands ipsec connection advanced list List the connection profiles. SYNTAX: ipsec connection advanced list EXAMPLE: =>ipsec connection list [myConnection] Peer : Local network : Remote network : Local match : Remote match : Local selector : Remote selector: Always on : Descriptors : Options : State : disabled disabled => RELATED COMMANDS: ipsec connection advanced add Add a connection profile.
PAGE 493
IPSec Commands ipsec connection advanced modify Change a connection profile. SYNTAX: ipsec connection advanced modify name = [peer = ] [localnetwork = ] [remotenetwork = ] [localmatch = ] [remotematch = ] [localselector = ] [remoteselector = ] [alwayson = <{disabled | enabled}>] [descr = <{security descriptors}>] [options = ] [state = <{disabled | enabled}>] where: name The name of the connection profile to be modified.
PAGE 494
IPSec Commands remotematch Phase 2 responder side remote ID matching. Choose between: exactly_ one_of_ subnet_of_ subrange_of_ black_ip. OPTIONAL localselector Local traffic selector for this profile. OPTIONAL remoteselector Remote traffic selector for this profile. OPTIONAL alwayson Enable or disable this connection to be on at all times, provided IPSec is enabled. The default is disabled.
PAGE 495
IPSec Commands ipsec connection descriptor add Add a Phase 2 (IPSec) security descriptor profile. SYNTAX: ipsec connection descriptor add name = where: name The name of the new security descriptor profile.
PAGE 496
IPSec Commands ipsec connection descriptor delete Delete a Phase 2 security descriptor profile. SYNTAX: ipsec connection descriptor delete name = where: name REQUIRED The name of the Phase 2 security descriptor profile to be deleted. Tip Use the command :ipsec connection descriptor list to obtain a list of the available security descriptors.
PAGE 497
IPSec Commands ipsec connection descriptor list List the Phase 2 security descriptor profiles.
PAGE 498
IPSec Commands ipsec connection descriptor modify Change a Phase 2 security descriptor profile. SYNTAX: ipsec connection descriptor modify name = [crypto = <{DES | 3DES | AES | NULL}>] keylen = <{128 | 192 | 256}> [auth = <{HMAC-MD5 | HMAC-SHA1}>] [pfs = <{disabled | enabled}>] [lifetime_secs = ] [lifetime_kbytes = ] [encapsulation = <{tunnel | transport}>] where: name The name of the Phase 2 security descriptor profile to be modified.
PAGE 499
IPSec Commands encapsulation The encapsulation mode. Choose between: tunnel: used for applications where the SpeedTouch™ is the IPSec Security Gateway for the connected hosts. transport: used only for information streams generated by or terminated in the SpeedTouch™ itself. For example, remote management applications may use this setting. OPTIONAL The default is tunnel. E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 500
IPSec Commands ipsec connection dialup connect Dialin to server. SYNTAX: ipsec connection dialup connect conn = local_id_type = <{as_per_peer_profile | user_fqdn | fqdn | key_id}> [loc_id = ] [xauthuser = ] [xauthpass = ] where: conn The name of the connection profile. REQUIRED local_id_type The type of local ID for peer instance. Choose between: REQUIRED as_per_peer_profile user_fqdn fqdn key_id.
PAGE 501
IPSec Commands ipsec connection dialup disconnect Disconnect a specific client-server connection. SYNTAX: ipsec connection dialup disconnect conn = local_id_type = <{as_per_peer_profile | user_fqdn | fqdn | key_id}> [loc_id = ] where: conn The name of the connection profile. REQUIRED local_id_type The type of local ID for peer instance. Choose between: REQUIRED loc_id as_per_peer_profile user_fqdn fqdn key_id. The local ID for peer profile instance.
PAGE 502
IPSec Commands ipsec connection network add Add a network attribute. SYNTAX: ipsec connection network add name = where: name The name of the new network attribute. REQUIRED EXAMPLE: =>ipsec connection network add name = myAttribute =>ipsec connection network list [myAttribute] : => RELATED COMMANDS: ipsec connection network delete Delete a network attribute. ipsec connection network list List the peer network attribute. 478 E-DOC-CTC-20050531-0061 v1.
PAGE 503
IPSec Commands ipsec connection network delete Delete a network attribute. SYNTAX: ipsec connection network delete name = where: name The name of the network attribute to be deleted. REQUIRED EXAMPLE: =>ipsec connection network list [myAttribute] : =>ipsec connection network delete name = myAttribute =>ipsec connection network list => RELATED COMMANDS: ipsec connection network add Add a network attribute. ipsec connection network list List the peer network attribute.
PAGE 504
IPSec Commands ipsec connection network list List the peer network attribute. SYNTAX: ipsec connection network list EXAMPLE: =>ipsec connection network list [myAttribute] : => RELATED COMMANDS: ipsec connection network add Add a network attribute. ipsec connection network delete Delete a network attribute. 480 E-DOC-CTC-20050531-0061 v1.
PAGE 505
IPSec Commands ipsec connection network modify Change a network attribute. SYNTAX: ipsec connection network modify name = [type = <{address | subnet | range}>] [ip = ] [proto = ] [port [?]= ] where: name The name of the network attribute to be modified. REQUIRED type Specify the address type. Choose between: OPTIONAL address: a single IP address. subnet: an IP subnet. range: an IP address range.
PAGE 506
IPSec Commands ipsec connection options add Add a connection options group. SYNTAX: ipsec connection options add name = where: name The name of the new connection options group. REQUIRED EXAMPLE: =>ipsec connection =>ipsec connection [myOptions] Virtual IF DF bit Min MTU add route options add name=myOptions options list : : : : 1000 enabled => RELATED COMMANDS: ipsec connection options delete Delete a connection options group.
PAGE 507
IPSec Commands ipsec connection options delete Delete a connection options group. SYNTAX: ipsec connection options delete name = where: name The name of the connection options group to be deleted.
PAGE 508
IPSec Commands ipsec connection options list List the connection options groups. SYNTAX: ipsec connection options list EXAMPLE: =>ipsec connection [myOptions] Virtual IF DF bit Min MTU add route options list : : : : 1000 enabled => RELATED COMMANDS: ipsec connection options add Add a connection options group. ipsec connection options delete Delete a connection options group. 484 E-DOC-CTC-20050531-0061 v1.
PAGE 509
IPSec Commands ipsec connection options modify Change a connection options group. SYNTAX: ipsec connection options modify name = [virtual_if = ] [force_df = <{pass | force_set | force_clear}>] [min_mtu = ] [add_route = <{enabled | disabled}>] [routed = <{enabled | disabled}>] where: name The name of the connection options group to be modified. REQUIRED virtual_if The virtual interface name. OPTIONAL force_df Select the DF bit copy behaviour.
PAGE 510
IPSec Commands ipsec debug syslog Enable / disable VPN informational syslog messages. SYNTAX: ipsec debug syslog [state = <{disabled | enabled}>] where: state 486 Enable or disable VPN informational syslog messages. OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 511
IPSec Commands ipsec debug traceconfig Set the trace level. SYNTAX: ipsec debug traceconfig [level = <{none | low | medium | high}>] where: level Select the trace level. Choose between: none low medium high. E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 512
IPSec Commands ipsec peer add Add a peer gateway profile. SYNTAX: ipsec peer add name = where: name The name of the new peer gateway profile.
PAGE 513
IPSec Commands ipsec peer delete Delete a peer gateway profile. SYNTAX: ipsec peer delete name = where: name The name of the peer gateway profile to be deleted. REQUIRED EXAMPLE: =>ipsec peer list [myPeer] Remote Address : Backup Remote Address: Physical IF : Exchange Mode : Local Identifier : Remote Identifier : Descriptors : Authentication : Client/Server : Options : 10.60.0.1 myPPPOE main (addr)10.50.0.1 (addr)10.60.0.
PAGE 514
IPSec Commands ipsec peer list List the peer gateway profiles. SYNTAX: ipsec peer list EXAMPLE: =>ipsec peer list [myPeer] Remote Address : Backup Remote Address: Physical IF : Exchange Mode : Local Identifier : Remote Identifier : Descriptors : Authentication : Client/Server : Options : 10.60.0.1 myPPPOE main (addr)10.50.0.1 (addr)10.60.0.1 AES_MD5 myAuthentication => RELATED COMMANDS: ipsec peer add Add a peer gateway profile.
PAGE 515
IPSec Commands ipsec peer modify Change a peer gateway profile. SYNTAX: ipsec peer modify name = [remoteaddr = ] [backupaddr = ] [exchmode = <{main | aggressive}>] [localid = <(type)value> [remoteid = <(type)value> [phyif = ] [descr = ] [auth = ] [client/server = ] [options = ] where: name The name of the peer gateway profile to be modified.
PAGE 516
IPSec Commands remoteid The ID by which the peer gate identifies the remote Security Gateway. The format of this parameter is (type)value, where type is one of the keywords shown below. An example is (addr)10.0.0.1. Choose one of the following keywords: addr: IP address. Example: 10.0.0.1. subnet: subnet. Example: 10.20.50/24. range: IP address range. Example: 10.0.0.1-10.0.0.5; 10.0.0.[5-15]. fqdn: fully qualified domain name. Example: sales.corporate.net.
PAGE 517
IPSec Commands EXAMPLE: =>ipsec peer list [myPeer] Remote Address : Backup Remote Address: Physical IF : Exchange Mode : Local Identifier : Remote Identifier : Descriptors : Authentication : Client/Server : Options : =>ipec peer modify name=myPeer remoteaddr=10.60.0.1 exchmode=main localid=(addr)10.50.0.1 | remoteid=(addr)10.60.0.1 phyif=myPPPoE descr=AES_MD5 auth=myAuthentication =>ipsec peer list [myPeer] Remote Address : 10.60.0.
PAGE 518
IPSec Commands ipsec peer auth add Add an authentication attribute. SYNTAX: ipsec peer auth add name = where: name The name of the new authentication attribute. REQUIRED EXAMPLE: =>ipsec peer auth add name=myAuthentication =>ipsec peer auth list [myAuthentication] Authtype : => RELATED COMMANDS: ipsec peer auth delete Delete an authentication attribute. ipsec peer auth list List the authentication attributes. 494 E-DOC-CTC-20050531-0061 v1.
PAGE 519
IPSec Commands ipsec peer auth delete Delete an authentication attribute. SYNTAX: ipsec peer auth delete name = where: name The name of the authentication attribute to be deleted. REQUIRED EXAMPLE: =>ipsec peer auth list [myAuthentication] Authtype : =>ipsec peer auth delete name=myAuthentication =>ipsec peer auth list => RELATED COMMANDS: ipsec peer auth add Add an authentication attribute. ipsec peer auth list List the authentication attributes. E-DOC-CTC-20050531-0061 v1.
PAGE 520
IPSec Commands ipsec peer auth list List the authentication attributes. SYNTAX: ipsec peer auth list EXAMPLE: =>ipsec peer auth list [myAuthentication] Authtype : preshared Secret : ******** => where the field Authtype can have the following values: cert: the authentication attribute uses certificates. : the authentication attribute is not yet defined. preshared: the authentication attribute uses a pre-shared key. Only in this case is the field Secret shown.
PAGE 521
IPSec Commands ipsec peer auth modify Change an authentication attribute. SYNTAX: ipsec peer auth modify name = [type = <{preshared | cert}>] [secret = ] where: name The name of the authentication attribute to be modified. REQUIRED type Select the authentication method. Choose between: OPTIONAL secret preshared: the pre-shared authentication method is used. cert: authentication is done with certificates. Specify the pre-shared key.
PAGE 522
IPSec Commands ipsec peer descriptor add Add a Phase 1 security descriptor profile. SYNTAX: ipsec peer descriptor add name = where: name The name of the new Phase 1 security descriptor profile.
PAGE 523
IPSec Commands ipsec peer descriptor delete Delete a Phase 1 security descriptor profile. SYNTAX: ipsec peer descriptor delete name = where: name The name of the Phase 1 security descriptor profile to be deleted.
PAGE 524
IPSec Commands ipsec peer descriptor list List the Phase 1 security descriptor profiles.
PAGE 525
IPSec Commands ipsec peer descriptor modify Change a Phase 1 security descriptor profile. SYNTAX: ipsec peer descriptor modify name = [crypto = <{DES | 3DES | AES}>] [keylen = <{128 | 192 | 256}>] [integrity = <{MD5 | SHA1}>] [group = <{MODP768 | MODP1024 | MODP1536}>] [lifetime_secs = ] where: name The name of the Phase 1 security descriptor profile to be modified. REQUIRED crypto Specify the encryption algorithm to be used for encrypting the IKE messages.
PAGE 526
IPSec Commands EXAMPLE: =>ipsec peer descriptor list [AES_SHA1] : AES(128) SHA1 MODP1024 Lifetime 3600s [AES_MD5] : AES(128) MD5 MODP1024 Lifetime 3600s [3DES_SHA1] : 3DES SHA1 MODP1024 Lifetime 3600s [3DES_MD5] : 3DES MD5 MODP1024 Lifetime 3600s [DES_SHA1] : DES SHA1 MODP768 Lifetime 3600s [DES_MD5] : DES MD5 MODP768 Lifetime 3600s [AES_SHA1_Adv] : AES(256) SHA1 MODP1536 Lifetime 86400s [myPeerDescriptor] : =>ipsec peer descriptor modify name=myPeerDescriptor crypto=AES keylen=128 auth=MD5 group=MODP1536
PAGE 527
IPSec Commands ipsec peer options add Add a peer options group. SYNTAX: ipsec peer options add name = where: name The name of the new peer options group. REQUIRED EXAMPLE: =>ipsec peer options add name=myPeerOptions =>ipsec peer options list [myPeerOptions] Local address : NAT-T : enabled DPD : enabled DPD Idle Period: 180 s DPD Xmits : 3 DPD Timeout : 120 s Inactivity : 3600 s timeout => RELATED COMMANDS: ipsec peer options delete Delete a peer options group.
PAGE 528
IPSec Commands ipsec peer options delete Delete a peer options group. SYNTAX: ipsec peer options delete name = where: name The name of the peer options group to be deleted.
PAGE 529
IPSec Commands ipsec peer options list List the peer options groups. SYNTAX: ipsec peer options list EXAMPLE: =>ipsec peer options list [myPeerOptions] Local address : NAT-T : enabled DPD : enabled DPD Idle Period: 180 s DPD Xmits : 3 DPD Timeout : 120 s Inactivity : 3600 s timeout => RELATED COMMANDS: ipsec peer options add Add a peer options group. ipsec peer options delete Delete a peer options group. E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 530
IPSec Commands ipsec peer options modify Change a peer options group. SYNTAX: ipsec peer options modify name = <{myPeerOptions}> [localaddr = ] [nat-t = <{enabled | disabled | force_nat}>] [dpd = <{disabled | enabled}>] [dpd_idle_period = ] [dpd_xmits = ] [dpd_timeout = ] [inactivity = ] [nat-t_keepalive = ] where: name The name of the peer options group to be modified.
PAGE 531
IPSec Commands EXAMPLE: =>ipsec peer options list [myPeerOptions] Local address : NAT-T : enabled NAT-T keepalive: 20s DPD : enabled DPD Idle Period: 180 s DPD Xmits : 3 DPD Timeout : 120 s Inactivity : 3600 s timeout => E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 532
IPSec Commands ipsec peer subpeer add Add a subpeer gateway profile. SYNTAX: ipsec peer subpeer add name = where: name The name of the new subpeer gateway profile. REQUIRED RELATED COMMANDS: ipsec peer subpeer delete Delete a subpeer gateway profile. ipsec peer subpeer list List the subpeer gateway profiles. 508 E-DOC-CTC-20050531-0061 v1.
PAGE 533
IPSec Commands ipsec peer subpeer delete Delete a subpeer gateway profile. SYNTAX: ipsec peer subpeer delete name = where: name The name of the subpeer gateway profile to be deleted. REQUIRED RELATED COMMANDS: ipsec peer subpeer add Add a subpeer gateway profile. ipsec peer subpeer list List the subpeer gateway profiles. E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 534
IPSec Commands ipsec peer subpeer list List the subpeer gateway profiles. SYNTAX: ipsec peer options list RELATED COMMANDS: ipsec peer subpeer add Add a subpeer gateway profile. ipsec peer subpeer delete Delete a subpeer gateway profile. 510 E-DOC-CTC-20050531-0061 v1.
PAGE 535
IPSec Commands ipsec peer subpeer modify Change a subpeer gateway profile. SYNTAX: ipsec peer subpeer modify name = [localid = ] [remoteid = ] [phyif = <{lan1|Internet|loop}>] [server = <>] where: name The name of the subpeer gateway profile to be modified. REQUIRED localid The ID by which the peer gate identifies this gate.
PAGE 536
IPSec Commands ipsec peer vpnclient add Add a VPN client configuration group. SYNTAX: ipsec peer vpnclient add name = where: name The name of the new VPN client configuration group. REQUIRED EXAMPLE: =>ipsec peer vpnclient add name=myVPNclient =>ipsec peer vpnclient list [myVPNclient] Xauth : Client Type : Virtual IP Map Mode : Local LAN IP Range : => RELATED COMMANDS: ipsec peer vpnclient delete Delete a VPN client configuration group.
PAGE 537
IPSec Commands ipsec peer vpnclient delete Delete a VPN client configuration group. SYNTAX: ipsec peer vpnclient delete name = where: name The name of the VPN client configuration group to be deleted.
PAGE 538
IPSec Commands ipsec peer vpnclient list List the VPN client configuration group. SYNTAX: ipsec peer vpnclient list EXAMPLE: =>ipsec peer vpnclient list [myVPNclient] Xauth Client Type Virtual IP Map Mode Local LAN IP Range : : : : => RELATED COMMANDS: ipsec peer vpnclient add Add a VPN client configuration group. ipsec peer vpnclient delete Delete a VPN client configuration group. 514 E-DOC-CTC-20050531-0061 v1.
PAGE 539
IPSec Commands ipsec peer vpnclient modify Change a VPN client configuration group. SYNTAX: ipsec peer vpnclient modify name = [xauthuser = ] [xauthpass = ] [clienttype = <{generic | cisco | nortel}>] [virtualip_maptype = <{none | nat | dhcp}>] [lan_range = ] where: name The name of the VPN client configuration group to be modified. REQUIRED xauthuser The X-AUTH username. OPTIONAL Note xauthpass The X-AUTH password.
PAGE 540
IPSec Commands ipsec peer vpnserver add Add a VPN server configuration group. SYNTAX: ipsec peer vpnserver add name = where: name The name of the new VPN server configuration group.
PAGE 541
IPSec Commands ipsec peer vpnserver delete Delete a VPN server configuration group. SYNTAX: ipsec peer vpnserver delete name = where: name The name of the VPN server configuration group to be deleted.
PAGE 542
IPSec Commands ipsec peer vpnserver list List the VPN server configuration groups. SYNTAX: ipsec peer vpnserver list EXAMPLE: =>ipsec peer vpnserver list [myVPNserver] Push IP : disabled Address Range : Netmask : Primary DNS : Secondary DNS : Primary WINS : Secondary WINS: Domain : XAuth Pool : => RELATED COMMANDS: ipsec peer vpnserver add Add a VPN server configuration group.
PAGE 543
IPSec Commands ipsec peer vpnserver modify Change a VPN server configuration group. SYNTAX: ipsec peer vpnserver modify name = [push_ip = <{disabled|enabled}>] [iprange = ] [netmask = ] [primdns = ] [secdns = ] [primwins = ] [secwins = ] [domain = ] [xauthpool = ] where: name The name of the VPN server configuration group to be modified.
PAGE 544
IPSec Commands ipsec peer vpnserver xauthpool add Add an XAuth user pool. SYNTAX: ipsec peer vpnserver xauthpool add name = where: name The name of the new XAuth user pool. REQUIRED EXAMPLE: =>ipsec peer vpnserver xauthpool add name=myXAuthpool =>ipsec peer vpnserver xauthpool list Pool myXAuthpool type generic => RELATED COMMANDS: ipsec peer vpnserver xauthpool adduser Add an entry to an XAuth pool. ipsec peer vpnserver xauthpool delete Delete an entire XAuth user pool.
PAGE 545
IPSec Commands ipsec peer vpnserver xauthpool adduser Add an entry to an XAuth pool. SYNTAX: ipsec peer vpnserver xauthpool adduser poolname = username = where: poolname The name of the XAuth user pool to which a user must be added. REQUIRED username The name of the user to be added.
PAGE 546
IPSec Commands ipsec peer vpnserver xauthpool delete Delete an entire XAuth user pool. SYNTAX: ipsec peer vpnserver xauthpool delete name = where: name The name of the XAuth user pool to be deleted.
PAGE 547
IPSec Commands ipsec peer vpnserver xauthpool deluser Delete a user from an XAuth user pool. SYNTAX: ipsec peer vpnserver xauthpool deluser poolname = username = where: poolname The name of the XAuth user pool from which a user must be deleted. REQUIRED username The name of the user to be deleted.
PAGE 548
IPSec Commands ipsec peer vpnserver xauthpool list List all the XAuth users. SYNTAX: ipsec peer vpnserver xauthpool list EXAMPLE: =>ipsec peer vpnserver xauthpool list Pool myXAuthpool type generic Username: myXAuthuser Password: Pool yourXAuthpool type generic Username: yourXAuthuser Password: => RELATED COMMANDS: ipsec peer vpnserver xauthpool add Add an XAuth user pool. ipsec peer vpnserver xauthpool adduser Add an entry to an XAuth pool.
PAGE 549
IPSec Commands ipsec peer vpnserver xauthpool listpool List all users in a particular XAuth pool. SYNTAX: ipsec peer vpnserver xauthpool listpool name = where: name The name of the XAuth pool to be listed. REQUIRED EXAMPLE: =>ipsec peer vpnserver xauthpool listpool name=myXAuthpool Pool myXAuthpool type generic Username: myXAuthuser Password: => RELATED COMMANDS: ipsec peer vpnserver xauthpool add Add an XAuth user pool.
PAGE 550
IPSec Commands ipsec peer vpnserver xauthpool modify Configure XAuth user pool parameters. SYNTAX: ipsec peer vpnserver xauthpool modify name = [type = <{generic | chap}>] where: name The name of the VPN server configuration group to be modified. REQUIRED type Specify the X-AUTH algorithm to use. Choose between: OPTIONAL generic chap. The default is generic.
PAGE 551
IPSec Commands ipsec peer vpnserver xauthpool moduser Configure XAuth user attributes. SYNTAX: ipsec peer vpnserver xauthpool moduser poolname = username = password = where: poolname The name of the X-AUTH pool containing the user. REQUIRED username The user name. OPTIONAL password The password.
PAGE 552
IPSec Commands ipsec show all Display all the information. SYNTAX: ipsec show all 528 E-DOC-CTC-20050531-0061 v1.
PAGE 553
IPSec Commands ipsec show cli Display all the information in CLI format. SYNTAX: ipsec show cli E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 554
IPSec Commands ipsec show config Display all the configuration information. SYNTAX: ipsec show config EXAMPLE: =>ipsec show config -=-=-=-=-=-=-=-=-=-=-=ipsec vpn configuration -=-=-=-=-=-=-=-=-=-=-=peers ===== authentication -------------options ------descriptors ----------[AES_SHA1] : AES(128) SHA1 MODP1024 Lifetime 3600s [AES_MD5] : AES(128) MD5 MODP1024 Lifetime 3600s ...
PAGE 555
IPSec Commands ipsec show sadb Display the SADB contents. SYNTAX: ipsec show sadb E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 556
IPSec Commands ipsec show sessions Display the sessions. SYNTAX: ipsec show sessions [level = <{normal | verbose}>] where: level 532 Select the output level. Choose between: normal verbose. OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 557
IPSec Commands ipsec show spd Display the SPD contents. SYNTAX: ipsec show spd E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 558
IPSec Commands ipsec show state Display all the dynamic states information.
PAGE 559
IPSec Commands ipsec show stats Display the statistics (SNMP). SYNTAX: ipsec show stats EXAMPLE: [ipsec show]=>stats SNMP ===== ikeGlobalStats -------------ikeGlobalActiveTunnels ikeGlobalPreviousTunnels ikeGlobalInOctets ikeGlobalInPackets ikeGlobalInDropPackets ikeGlobalInNotify ikeGlobalInP2Exchgs ikeGlobalInP2ExchgsInvalids ikeGlobalInP2ExchgsRejects ikeGlobalInP2SaDelRequests ...
PAGE 560
IPSec Commands 536 E-DOC-CTC-20050531-0061 v1.
PAGE 561
ISDN Commands ISDN Commands Introduction This chapter describes the commands of the isdn command group. Contents This chapter covers the following commands: isdn flush Flush all the ISDN profile configuration. 538 isdn ifadd Create an ISDN interface. 539 isdn ifattach Attach an ISDN interface. 540 isdn ifconfig Configure an ISDN interface. 541 isdn ifdelete Delete an ISDN interface. 542 isdn ifdetach Detach an ISDN interface. 543 isdn iflist Display all the ISDN interfaces.
PAGE 562
ISDN Commands isdn flush Flush all the ISDN profile configuration. SYNTAX: isdn flush 538 E-DOC-CTC-20050531-0061 v1.
PAGE 563
ISDN Commands isdn ifadd Create an ISDN interface. SYNTAX: isdn ifadd intf = where: intf The name of the ISDN interface to be created. REQUIRED EXAMPLE: =>isdn ifadd intf=myISDN =>isdn iflist Dial-Out Access Configuration: 0 ISP Name: myISDN Dial Nr: MultiLink PPP: Disable Disconnect Reason : 0x0000 Profile State: Not used Remote Dial-In User Configuration: => RELATED COMMANDS: isdn ifdelete Delete an ISDN interface. isdn iflist Display all the ISDN interfaces.
PAGE 564
ISDN Commands isdn ifattach Attach an ISDN interface. SYNTAX: isdn ifattach intf = where: intf The name of the ISDN interface to be attached.
PAGE 565
ISDN Commands isdn ifconfig Configure an ISDN interface. SYNTAX: isdn ifconfig intf = [number = ] [mlppp = <{disabled | enabled}>] [mode = <{dialout | dialin}>] [group = ] where: intf The name of the ISDN interface to be configured. REQUIRED number The ISDN access number. OPTIONAL mlppp Enable or disable Multi Link PPP (ML PPP). The default is disabled. OPTIONAL Note mode When disabled, the rate of the B Channel will be 64 kbps.
PAGE 566
ISDN Commands isdn ifdelete Delete an ISDN interface. SYNTAX: isdn ifdelete intf = where: intf The name of the ISDN interface to be deleted.
PAGE 567
ISDN Commands isdn ifdetach Detach an ISDN interface. SYNTAX: isdn ifdetach intf = where: intf The name of the ISDN interface to be detached.
PAGE 568
ISDN Commands isdn iflist Display all the ISDN interfaces. SYNTAX: isdn iflist [intf = ] where: intf The name of the ISDN interface to be displayed. Note OPTIONAL If no interface is specified, all the ISDN interfaces will be displayed. EXAMPLE: =>isdn iflist Dial-Out Access Configuration: 0 ISP Name: myISDN Dial Nr: 123456 MultiLink PPP: Enable Req. Callback: Disable Profile State: Reserved Remote Dial-In User Configuration: => RELATED COMMANDS: isdn ifadd Create an ISDN interface.
PAGE 569
ISDN Commands isdn debug clear Clear the ISDN statistics. SYNTAX: isdn debug clear EXAMPLE: =>isdn debug stats ISDN interface statistics Bytes received : 4356789 Bytes transmitted : 17689503 =>isdn debug clear =>isdn debug stats ISDN interface statistics Bytes received : Bytes transmitted : => 0 0 RELATED COMMANDS: isdn debug stats E-DOC-CTC-20050531-0061 v1.0 v1.0 Show the ISDN statistics.
PAGE 570
ISDN Commands isdn debug stats Show the ISDN statistics. SYNTAX: isdn debug stats EXAMPLE: =>isdn debug stats ISDN interface statistics Bytes received : Bytes transmitted : => 4356789 17689503 RELATED COMMANDS: isdn debug clear 546 Clear the ISDN statistics. E-DOC-CTC-20050531-0061 v1.
PAGE 571
ISDN Commands isdn debug traceconfig Display/modify the ISDN trace configuration. SYNTAX: isdn debug traceconfig [appl = <{disabled | enabled}>] [capimsg = <{disabled | enabled}>] [capidump = <{disabled | enabled}>] [isdnlayer1 = <{disabled | enabled}>] [isdnlayer2 = <{disabled | enabled}>] [isdnlayer3 = <{disabled | enabled}>] where: appl Enable or disable application tracing. The default is disabled. OPTIONAL capimsg Enable or disable Common ISDN Application Interface (CAPI) message tracing.
PAGE 572
ISDN Commands isdn debug screening Set screening options. SYNTAX: isdn debug screening [strict = <{enabled|disabled}>] where: strict 548 Enable or disable strict screening. The default is enabled. OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 573
ISDN Commands isdn debug vbuff Show vbuff information. SYNTAX: isdn debug vbuff E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 574
ISDN Commands isdn group addgroup Add a new group SYNTAX: isdn group addgroup [name = ] where: name 550 The name of the group to be added REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 575
ISDN Commands isdn group delgroup Delete a group SYNTAX: isdn group delgroup name = <{empty}> where: name The name of the group to be deleted E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 576
ISDN Commands isdn group addrule Add a new rule to a group. SYNTAX: isdn group addrule group = <{empty}> number = where: group The name of the group to which the rule will be added REQUIRED number The dial number of the group REQUIRED 552 E-DOC-CTC-20050531-0061 v1.
PAGE 577
ISDN Commands isdn group delrule Delete a rule from a group. SYNTAX: isdn group delrule group = <{empty}> number = where: group The name of the group to which the rule belongs REQUIRED number The dial number of the group REQUIRED E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 578
ISDN Commands isdn group list List all groups and their rules SYNTAX: isdn group list 554 E-DOC-CTC-20050531-0061 v1.
PAGE 579
Label Commands Label Commands Introduction This chapter describes the commands of the label command group. Contents This chapter covers the following commands: label add Create a new label. 556 label delete Delete a label. 557 label flush Flush all labels. 558 label list Display the labels. 559 label modify Modify a label configuration. 560 label chain add Add a new label chain. 562 label chain delete Delete a label chain. 563 label chain flush Flush all label chains.
PAGE 580
Label Commands label add Create a new label. SYNTAX: label add name = where: name The name of the label to be added.
PAGE 581
Label Commands label delete Delete a label. SYNTAX: label delete name = [force = <{disabled | enabled}>] where: name The name of the label to be deleted. REQUIRED force Force delete and cleanup references even when the label is still in use (enabled) or not (disabled). The default is disabled.
PAGE 582
Label Commands label flush Flush all labels. The flush command does not impact previously saved configurations. SYNTAX: label flush 558 E-DOC-CTC-20050531-0061 v1.
PAGE 583
Label Commands label list Display the labels. SYNTAX: label list [name = ] where: name OPTIONAL The name of the label to be displayed. Note If not specified, all the labels will be displayed.
PAGE 584
Label Commands label modify Modify a label configuration.
PAGE 585
Label Commands bidirectional The label applies to the initiator stream, the returning stream (the current connection) as well as to the child connections (enabled) or not (disabled). The default is disabled. OPTIONAL inheritance The label will be copied to all child connection streams in the same direction (enabled) or not (disabled). The default is disabled. OPTIONAL tosmarking Enable or disable tos marking. The default is disabled. OPTIONAL tos A number between 0 and 255.
PAGE 586
Label Commands label chain add Add a new label chain. SYNTAX: label chain add chain = where: chain The name of the chain to be added.
PAGE 587
Label Commands label chain delete Delete a label chain. SYNTAX: label chain delete chain = where: chain The name of the chain to be deleted.
PAGE 588
Label Commands label chain flush Flush all label chains. SYNTAX: label chain flush 564 E-DOC-CTC-20050531-0061 v1.
PAGE 589
Label Commands label chain list Display a list of chains. SYNTAX: label chain list [format = <{pretty | cli}>] where: format Select the output format of the list. Choose between: pretty: the configuration is shown as intuitive output in clear text. cli: the configuration is shown via the CLI commands configuration. OPTIONAL The default is pretty.
PAGE 590
Label Commands label rule add Add a label rule. SYNTAX: label rule add chain = [index = ] [name = ] [clink = ] [srcintf [!]= ] [srcip [!]= <{ip address | private}>] [dstip [!]= <{ip address | private}>] [serv [!]= <{service name}>] [log = <{disabled | enabled}>] [state = <{disabled | enabled}>] label = If a value is preceded by a “!”, it means NOT. For example “srcintf=!wan” means “if srcintf is different from WAN”.
PAGE 591
Label Commands EXAMPLE: =>label rule list Rules (flags: C=Constant, D=Dynamic, E=Enable, L=Log) ===== Chain Nr. Flags Rule -------------------------------------------------------------------------------------------------routing_labels 1 CDE : link rt_user_labels 2 CDE : link rt_default_labels qos_labels 1 CDE : link qos_user_labels 2 CDE : link qos_default_labels qos_default_labels 1 C E : VoIP sip *.* > *.* 2 C E : VoIP h323 *.* > *.* 3 C E : Interactive telnet *.* > *.* 4 C E : Interactive smtp *.* > *.
PAGE 592
Label Commands label rule delete Delete a label rule. SYNTAX: label rule delete chain = index = where: chain The name of the chain in which a rule must be deleted. REQUIRED index The index number of the rule in the chain. REQUIRED Tip Use the command :label rule list to obtain the index number of the applicable rule. EXAMPLE: =>label rule list Rules (flags: C=Constant, D=Dynamic, E=Enable, L=Log) ===== Chain Nr.
PAGE 593
Label Commands label rule flush Flush all label rules. The chains themselves are not removed. The flush command does not impact previously saved configurations. SYNTAX: label rule flush [chain = ] where: chain The name of the chain to be flushed. Note E-DOC-CTC-20050531-0061 v1.0 OPTIONAL If not specified, all the rules for all the chains are flushed.
PAGE 594
Label Commands label rule list Display a list of label rules. SYNTAX: label rule list [chain = ] [format = <{pretty | cli}>] where: chain The name of the chain for which the rules must be listed. Note format OPTIONAL If not specified, all rules for all chains are shown. Select the output format of the list. Choose between: pretty: the configuration is shown as intuitive output in clear text. cli: the configuration is shown via the CLI commands configuration.
PAGE 595
Label Commands label rule modify Modify a label rule. SYNTAX: label rule modify chain = index = [newindex = ] [name = ] [clink = ] [srcintf [!]= ] [srcip [!]= <{ip address | private}>] [dstip [!]= <{ip address | private}>] [serv [!]= <{service name}>] [log = <{disabled | enabled}>] [state = <{disabled | enabled}>] [label = ] If a value is preceded by a “!”, it means “NOT”.
PAGE 596
Label Commands label rule debug clear Clear the label rule statistics. SYNTAX: label rule debug clear [chain = ] [index = ] where: chain The name of the chain in which the rule is to be found. Note index If not specified, the statistics for all the rules in all chains will be cleared. The index number (determined by the position) of the rule in the chain. Note OPTIONAL OPTIONAL If not specified, the statistics for all the rules in a chain will be cleared.
PAGE 597
Label Commands label rule debug stats Display the label rule statistics. SYNTAX: label rule debug stats [chain = ] [index = ] where: chain The name of the chain for which the statistics must be shown. Note index OPTIONAL If not specified, the statistics for the rules applicable to all chains are shown. The index number of the rule for which the statistics must be shown. Tip Use the command :label rule list to obtain the index number of the applicable rule.
PAGE 598
Label Commands label rule debug traceconfig Display or modify the rule trace configuration. SYNTAX: label rule debug traceconfig [trace = <{disabled | enabled}>] where: trace Disable or enable rule traces. The default is disabled. OPTIONAL EXAMPLE: =>label rule debug traceconfig :label rule debug traceconfig state=disabled => 574 E-DOC-CTC-20050531-0061 v1.
PAGE 599
Language Commands Language Commands Introduction This chapter describes the commands of the language command group. Contents This chapter covers the following commands: language config Select a language. 576 language delete Delete one or all language archives. 577 language list List the available language archives. 578 E-DOC-CTC-20050531-0061 v1.
PAGE 600
Language Commands language config Select a language. SYNTAX: language config [language = ] where: language Language code: OSI language code (2 chars) for language. Example: en for english. OPTIONAL EXAMPLE: =>language config language : en => RELATED COMMANDS: language delete Delete one or all language archives. language list List the available language archives. 576 E-DOC-CTC-20050531-0061 v1.
PAGE 601
Language Commands language delete Delete one or all language archives. SYNTAX: language delete [file = ] [all = <{yes | no}>] where: file The filename of the language archive to be removed. OPTIONAL all Remove all languages archives (yes) or not (no). The default is no. OPTIONAL RELATED COMMANDS: language config Select a language. language list List the available language archives. E-DOC-CTC-20050531-0061 v1.
PAGE 602
Language Commands language list List the available language archives. SYNTAX: language list EXAMPLE: =>language list CODE LANGUAGE en* English => VERSION 5.3.0.10.0 FILENAME The currently selected language is indicated by a “*” next to the OSI language code. RELATED COMMANDS: language config Select a language. language delete Delete one or all language archives. 578 E-DOC-CTC-20050531-0061 v1.
PAGE 603
MLP Commands MLP Commands Introduction This chapter describes the commands of the mlp command group. Contents This chapter covers the following commands: mlp flush Flush all the Multi-Level access Policies (MLP) structures. 580 mlp import Import all the scores. 581 mlp debug export Export all the scores. 582 mlp debug stats Display MLP statistics. 583 mlp debug traceconfig Modify the MLP trace settings. 584 mlp privilege add Add a privilege.
PAGE 604
MLP Commands mlp flush Flush all the Multi-Level access Policies (MLP) structures. SYNTAX: mlp flush 580 E-DOC-CTC-20050531-0061 v1.
PAGE 605
MLP Commands mlp import Import all the scores. SYNTAX: mlp import [trace = <{disabled | enabled | full}>] where: trace Select the import trace level. Choose between: disabled enabled full. OPTIONAL The default is disabled. RELATED COMMANDS: mlp debug export E-DOC-CTC-20050531-0061 v1.0 Export all the scores.
PAGE 606
MLP Commands mlp debug export Export all the scores. SYNTAX: mlp debug export RELATED COMMANDS: mlp import 582 Import all the scores. E-DOC-CTC-20050531-0061 v1.
PAGE 607
MLP Commands mlp debug stats Display MLP statistics. SYNTAX: mlp debug stats EXAMPLE: =>mlp debug stats Roles (cur/free/max) : 8/7/15 Privileges (cur/free/max) : 35/25/60 ListItems (cur/free/max) : 31/119/150 => E-DOC-CTC-20050531-0061 v1.
PAGE 608
MLP Commands mlp debug traceconfig Modify the MLP trace settings. SYNTAX: mlp debug traceconfig [trace = <{disabled | enabled | full}>] where: trace Select the trace level. Choose between: disabled enabled full. OPTIONAL The default is disabled. EXAMPLE: =>mlp debug traceconfig mlp trace: disabled => 584 E-DOC-CTC-20050531-0061 v1.
PAGE 609
MLP Commands mlp privilege add Add a privilege. SYNTAX: mlp privilege add name = type = <{access | service}> [descr = ] where: name The name of the new privilege. Note type descr The maximum number of privileges is 60. Select the privilege type. Choose between: access: the privilege is an access privilege. service: the privilege is a service privilege. A description of the privilege. Note REQUIRED REQUIRED OPTIONAL The maximum length is 63 characters.
PAGE 610
MLP Commands mlp privilege addzone Add a zone to a privilege. Only one zone can be added at a time to a privilege. If multiple zones need to be added, the command :mlp privilege addzone must be executed for each zone to be added. SYNTAX: mlp privilege addzone name = zone = where: name The name of the privilege in which a zone must be added. REQUIRED zone The name of the new zone.
PAGE 611
MLP Commands mlp privilege config Modify a privilege. SYNTAX: mlp privilege config name = [descr = ] [score = <{hex-word}[:{hex-word}] ex: 'a12:c30f'>] where: name The name of the privilege to be modified. REQUIRED descr Set the privilege description. OPTIONAL Note score The maximum length is 63 characters. Set the score of the privilege. Note OPTIONAL This is a hexadecimal value, for example “a12:c30f”.
PAGE 612
MLP Commands mlp privilege delete Delete a privilege. SYNTAX: mlp privilege delete name = where: name The name of the privilege to be deleted.
PAGE 613
MLP Commands mlp privilege list Display the privileges. SYNTAX: mlp privilege list [name = ] [type = <{access | service}>] [verbose = <{minimal | medium | all}>] where: name The name of the privilege to be listed. Note type verbose If not specified, all the privileges will be shown. Select the privilege type to be shown. Choose between: access: only the access privileges will be shown service: only the service privileges will be shown.
PAGE 614
MLP Commands mlp privilege removezone Remove a zone from a privilege. Only one zone can be removed at a time from a privilege. If multiple zones need to be removed, the command :mlp privilege removezone must be executed for each zone to be removed. SYNTAX: mlp privilege removezone name = zone = where: name The name of the privilege in which a zone must be removed. REQUIRED zone The name of the zone to be removed.
PAGE 615
MLP Commands mlp role add Add a role. SYNTAX: mlp role add name = parent = [descr = ] where: name The name of the new role. Note REQUIRED The maximum number of roles is 15. parent The name of the parent role. REQUIRED descr The role description. OPTIONAL Note The maximum length is 63 characters.
PAGE 616
MLP Commands mlp role addpriv Add a privilege to a role. SYNTAX: mlp role addpriv name = access = service = where: name The name of the role. REQUIRED access The name of the access privilege to be added. REQUIRED service The name of the service privilege to be added.
PAGE 617
MLP Commands mlp role config Modify the role. SYNTAX: mlp role config name = [parent = ] [descr = ] where: name The name of the role to be configured. REQUIRED parent The name of the parent role. OPTIONAL descr The role description. OPTIONAL Note The maximum length is 63 characters.
PAGE 618
MLP Commands mlp role delete Delete a role. SYNTAX: mlp role delete name = where: name The name of the role to be deleted.
PAGE 619
MLP Commands mlp role list Display the roles. SYNTAX: mlp role list [name = ] [verbose = <{minimal | medium | all}>] where: name The name of the role to be listed. Note verbose OPTIONAL If not specified, all the roles will be listed. Limit the output list. Choose between: minimal medium all. OPTIONAL The default is minimal.
PAGE 620
MLP Commands mlp role removepriv Remove a privilege from a role. SYNTAX: mlp role removepriv name = access = [service = ] where: name The name of the role. REQUIRED access The name of the access privilege to be deleted. REQUIRED service The name of the service privilege to be deleted.
PAGE 621
NAT Commands NAT Commands Introduction This chapter describes the commands of the nat command group. Contents This chapter covers the following commands: nat config Display/modify global NAT configuration options. 598 nat flush Flush the current NAT configuration. 599 nat ifconfig Modify address translation on an IP interface. 600 nat iflist Display the address translation configuration on all the interfaces.
PAGE 622
NAT Commands nat config Display/modify global NAT configuration options. SYNTAX: nat config [trace = <{disabled | enabled}>] where: trace Enable or disable traces. The default is disabled. REQUIRED EXAMPLE: =>nat config NAT traces : disabled =>nat config trace=enabled =>nat config NAT traces : enabled => 598 E-DOC-CTC-20050531-0061 v1.
PAGE 623
NAT Commands nat flush Flush the current NAT configuration. SYNTAX: nat flush E-DOC-CTC-20050531-0061 v1.
PAGE 624
NAT Commands nat ifconfig Modify address translation on an IP interface. SYNTAX: nat ifconfig intf = translation = <{disabled | enabled | transparent}> where: intf The IP interface name. REQUIRED translation Enable or disable address translation. Choose between: REQUIRED disabled: Address translation is disabled. enabled: Address translation is enabled. transparent: An inside address is translated into the same outside IP address.
PAGE 625
NAT Commands nat iflist Display the address translation configuration on all the interfaces. SYNTAX: nat iflist EXAMPLE: =>nat iflist Interface loop Internet RtPPPoE_ppp LocalNetwork => NAT disabled enabled enabled transparent RELATED COMMANDS: nat ifconfig E-DOC-CTC-20050531-0061 v1.0 Modify address translation on an IP interface.
PAGE 626
NAT Commands nat mapadd Add an address mapping to a Network Address Translation (NAT) enabled interface. SYNTAX: nat mapadd intf = [type = <{napt | nat}>] [outside_addr = ] [inside_addr = ] [access_list = ] [foreign_addr = ] [protocol = <{supported IP protocol} or number>] [outside_port = ] [inside_port = ] where: intf Note type outside_addr The specified interface must be an existing NAT enabled interface.
PAGE 627
NAT Commands access_list The range of inside addresses to which the mapping is restricted. This parameter is used for outbound traffic only. Represents the list of inside IP addresses (LAN devices) allowed to make use of this map. Allowed values are: An IP address (A.B.C.D or A.D, meaning A.0.0.D). A range of IP addresses (A.B.C.[D-E]). An IP subnet (A.B.C.D/M). * (all addresses). OPTIONAL The default is the inside_addr.
PAGE 628
NAT Commands EXAMPLE: =>nat maplist Idx Type Interface Outside Address Inside Address Use 1 NAPT eth0 any:80 127.0.0.1:8080 0 2 NAPT eth0 any:1080 127.0.0.1:8080 0 3 NAPT eth0 any:8080 127.0.0.1:8080 0 =>nat mapadd intf=myPPP_ppp type=napt outside_addr=100.100.100.1 access_list=10.0.0.0/24 =>nat maplist Idx Type Interface Outside Address Inside Address Use 1 NAPT myPPP_ppp 100.100.100.1 unmapped 0 1 NAPT eth0 any:80 127.0.0.1:8080 0 2 NAPT eth0 any:1080 127.0.0.1:8080 0 3 NAPT eth0 any:8080 127.0.0.
PAGE 629
NAT Commands nat mapdelete Delete an address mapping from a NAT enabled interface. SYNTAX: nat mapdelete intf = index = where: intf The IP interface name. REQUIRED index The map index. REQUIRED Tip Use the command :nat maplist to obtain a list of the mapindexes. EXAMPLE: =>nat maplist Idx Type Interface Outside Address 1 NAPT myPPP_ppp 100.100.100.
PAGE 630
NAT Commands nat maplist Display the address mapping for a NAT enabled interface. SYNTAX: nat maplist [intf = ] [expand = <{disabled | enabled}>] where: intf Note expand OPTIONAL The IP interface name. If not specified, the address mapping for all the NAT enabled interfaces will be shown. Enable or disable expanded listing. The default is disabled.
PAGE 631
NAT Commands nat tmpladd Add an address mapping template. SYNTAX: nat tmpladd [intf = ] [group = <{wan|local|lan|tunnel|dmz|guest} or number>] [timeout = ] [type = <{napt | nat}>] outside_addr = [inside_addr = ] [access_list = ] [foreign_addr = ] [protocol = <{supported IP protocol} or number>] [outside_port = ] [inside_port = ] where: intf The IP interface name.
PAGE 632
NAT Commands inside_addr The inside (typically private) IP address. Inbound: Represents the address(es) to be used as destination address after translation. Outbound: This map will only apply if the source IP address is part of the inside address(es). REQUIRED for port-shifting maps. Allowed values are: An IP address (A.B.C.D or A.D, meaning A.0.0.D). A range of IP addresses (A.B.C.[D-E]) (only for NAT). An IP subnet (A.B.C.D/M (only for NAT)). OPTIONAL for NAT maps and NAPT maps.
PAGE 633
NAT Commands outside_port The outside port number or range (only for maps of type napt). For a NAPT map: Represents the range of TCP/UDP ports to be used as dynamic port range during the NAPT process. For a port-shifting map: OPTIONAL for NAPT map. REQUIRED for port-shifting map. Represents the source port(s) to be translated (shifted) into inside_port. Allowed values are: inside_port TCP/UDP port range [P-Q] (with Q > P) TCP/UDP port number (only for port-shifting maps).
PAGE 634
NAT Commands nat tmpldelete Delete an address mapping template. SYNTAX: nat tmpldelete index = where: index REQUIRED The index of the address mapping template to be deleted. Tip Use the command :nat tmpllist to view the address mapping templates. EXAMPLE: =>nat tmpllist Idx Type Interface 1 NAPT any 2 NAPT myPPP_ppp =>nat tmpldelete index=1 =>nat tmpllist Idx Type Interface 1 NAPT myPPP_ppp => Ifgroup lan any Outside Address 100.200.100.1 100.100.100.
PAGE 635
NAT Commands nat tmpllist Display the address mapping templates. SYNTAX: nat tmpllist [expand = <{disabled | enabled}>] where: expand Enable or disable expanded listing. The default is disabled. OPTIONAL EXAMPLE: =>nat tmpllist Idx Type Interface 1 NAPT any 2 NAPT myPPP_ppp => Ifgroup lan any Outside Address 100.200.100.1 100.100.100.1 Inside Address unmapped unmapped Use 0 0 RELATED COMMANDS: nat tmpladd Add an address mapping template. nat tmpldelete Delete an address mapping template.
PAGE 636
NAT Commands nat tmplinst Instantiate address mapping templates for a given dynamic address. SYNTAX: nat tmplinst intf = addr_index = dynamic_addr = where: intf The IP interface name. REQUIRED addr_index The outside IP address index/key to instantiate for. REQUIRED dynamic_addr The dynamic address to substitute the index/key with. REQUIRED EXAMPLE: =>nat tmplinst intf=myPPP_ppp addr_index=100.100.100.1 dynamic_addr=200.200.200.
PAGE 637
PKI Commands PKI Commands Introduction This chapter describes the commands of the Public Key Infrastructure (PKI) command group. Contents This chapter covers the following commands: pki clearall Delete the secure storage. 614 pki config Configure global PKI settings. 615 pki crlconfig Configure PKI Certificate Revocation List (CRL) settings. 616 pki export Export an item from the secure storage to file. 617 pki flush Flush the PKI configuration.
PAGE 638
PKI Commands pki clearall Delete the secure storage. ! Use this command with EXTREME caution. SYNTAX: pki clearall [force = <{enabled | disabled}>] where: force Force deletion (enabled) or not (disabled). Note 614 OPTIONAL Only do this when you are really sure that the secure storage needs to be deleted. E-DOC-CTC-20050531-0061 v1.
PAGE 639
PKI Commands pki config Configure global PKI settings. SYNTAX: pki config [state = <{disabled | enabled}>] [trace = <{disabled | enabled}>] where: state Enable or disable PKI processing. The default is enabled. OPTIONAL trace Enable or disable traces. The default is disabled. OPTIONAL EXAMPLE: =>pki config PKI Status : enabled traces disabled => E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 640
PKI Commands pki crlconfig Configure PKI Certificate Revocation List (CRL) settings. SYNTAX: pki crlconfig [checking_enabled = <{disabled | enabled}>] [use_expired_crls = <{disabled | enabled}>] [dist_point1 = ] [fetch_dynamically = <{disabled | enabled}>] [check_cert_extension = <{disabled | enabled}>] [time_checking = <{disabled | enabled}>] [net_timeout = ] [http_proxy_address = ] [http_proxy_port = ] where: checking_enabled Enable or disable CRL checking.
PAGE 641
PKI Commands pki export Export an item from the secure storage to file. SYNTAX: pki export item = filename = where: item A number. Represents the secure storage item number. REQUIRED filename The filename under which the secure storage item must be saved. REQUIRED RELATED COMMANDS: pki import E-DOC-CTC-20050531-0061 v1.0 v1.0 Import a certificate/CRL from a file or pasted text (Public Key Cryptoghraphy Standard (PKCS) #7).
PAGE 642
PKI Commands pki flush Flush the PKI configuration. SYNTAX: pki flush 618 E-DOC-CTC-20050531-0061 v1.
PAGE 643
PKI Commands pki import Import a certificate/CRL from a file or pasted text (Public Key Cryptoghraphy Standard (PKCS) #7). At least 10 certificates can be imported. The SpeedTouch™ checks the available storage space before importing a new certificate. SYNTAX: pki import [filename = ] where: filename The filename under which the certificate is stored. OPTIONAL RELATED COMMANDS: pki export E-DOC-CTC-20050531-0061 v1.0 v1.0 Export an item from the secure storage to file.
PAGE 644
PKI Commands pki list List the secure storage content. SYNTAX: pki list [item = ] where: item Note 620 OPTIONAL A number. Represents the secure storage item number. If not specified, the complete content of the secure storage will be displayed. E-DOC-CTC-20050531-0061 v1.
PAGE 645
PKI Commands pki refresh Reload the certificate management subsystem. SYNTAX: pki refresh E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 646
PKI Commands pki remove Remove an item from the secure storage. ! Use this command with caution. SYNTAX: pki remove item = where: item The secure storage item number. Tip 622 REQUIRED Use the command :pki list to obtain the secure storage item numbers. E-DOC-CTC-20050531-0061 v1.
PAGE 647
PKI Commands pki request Generate an offline certificate request (PKCS#10). SYNTAX: pki request subjectdn = [force = <{enabled | disabled}>] where: subjectdn The Distinguished Name (DN) for the certificate. The Subject DN reflects the subject name for the requested certificate. To be valid, the value of the parameter subjectdn must be a valid DN in string representation as specified in RFC2253.
PAGE 648
PKI Commands pki show Show the PKI configuration. SYNTAX: pki show [format = <{pretty | cli}>] where: format Select the output format of the list. Choose between: pretty: the configuration is shown as intuitive output in clear text. cli: the configuration is shown via the CLI commands configuration. OPTIONAL The default is pretty. EXAMPLE: =>pki show Secure storage ================== Certificate services have not been logged into.
PAGE 649
PKI Commands pki cep cancel Cancel the current Certificate Enrollment Protocol (CEP) request. SYNTAX: pki cep cancel E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 650
PKI Commands pki cep config Show/modify the CEP configuration.
PAGE 651
PKI Commands subjectdn The DN for the certificate. The Subject DN reflects the subject name for the requested certificate. To be valid, the value of the parameter subjectdn must be a valid DN in string representation as specified in RFC2253.
PAGE 652
PKI Commands altsubjectdn The distinguished name for X509v3 extension. The Subject DN reflects the subject name for the requested certificate. To be valid, the value of the parameter subjectdn must be a valid DN in string representation as specified in RFC1779.
PAGE 653
PKI Commands pki cep list Show a listing of currently outstanding CEP requests. SYNTAX: pki cep list E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 654
PKI Commands pki cep request Generate a CEP request. SYNTAX: pki cep request [force = <{enabled | disabled}>] where: force 630 Ignore current certificates (enabled) or not (disabled). The default is enabled. OPTIONAL E-DOC-CTC-20050531-0061 v1.
PAGE 655
PKI Commands pki cep resubmit Resubmit the current CEP request. A check will also be performed whether the launched CEP request is already signed by the CA. If so, the signed certificate will be imported into the secure storage. SYNTAX: pki cep resubmit E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 656
PKI Commands 632 E-DOC-CTC-20050531-0061 v1.
PAGE 657
PPP Commands PPP Commands Introduction This chapter describes the commands of the ppp command group. Contents This chapter covers the following commands: ppp flush Flush all PPP interfaces. 634 ppp ifadd Create a new PPP interface. 635 ppp ifattach Attach a PPP interface. 636 ppp ifconfig Configure a PPP interface. 637 ppp ifdelete Delete a PPP interface. 641 ppp ifdetach Detach a PPP interface. 642 ppp iflist Display the PPP interfaces.
PAGE 658
PPP Commands ppp flush Flush all PPP interfaces. The flush command does not impact previously saved configurations. SYNTAX: ppp flush 634 E-DOC-CTC-20050531-0061 v1.
PAGE 659
PPP Commands ppp ifadd Create a new PPP interface. SYNTAX: ppp ifadd intf = where: intf The name for the new PPP interface. Note REQUIRED If not specified, the destination parameter must be specified. In this case the name of the destination will double as interface name.
PAGE 660
PPP Commands ppp ifattach Attach a PPP interface. SYNTAX: ppp ifattach intf = where: intf The name of the PPP interface to be attached. REQUIRED EXAMPLE: =>ppp iflist Internet: dest : RELAY [00:00:00] Retry : 10 mode = IP routing flags = echo magic accomp restart mru addr savepwd demanddial dns metric = 0 mru = 1492 Tx inactivity = 1200s left = 0s auth = auto user = password = admin state = down oper state = down link state = not-connected LCP : state = initial retransm = 10 term.
PAGE 661
PPP Commands ppp ifconfig Configure a PPP interface. The interface to be configured must not be connected at the time of configuration. If this should be the case, use the command :ppp ifdetach before using the command :ppp ifconfig.
PAGE 662
PPP Commands password The password for remote PAP/CHAP authentication. OPTIONAL acname The Access Concentrator name for a PPPoE session. OPTIONAL Tip servicename Use the command :ppp ifscan to obtain the names of available access concentrators, if any. OPTIONAL The Service Name for a PPPoE session. Tip Use the command :ppp ifscan to obtain the available service names, if any. pcomp Try (enabled) or do not try (disabled) to negotiate PPP protocol compression (LCP PCOMP). The default is disabled.
PAGE 663
PPP Commands echo Send LCP echo requests at regular intervals (enabled) or not (disabled). The default is disabled. OPTIONAL mru A number between 293 and 8192. Represents the maximum packet size the SpeedTouch™ should negotiate to be able to receive. The default is 1492. OPTIONAL laddr The local IP address of the peer-to-peer connection. Specifying a local IP address forces the remote side of the PPP link (if it allows to) to accept this IP address as the SpeedTouch™ PPP session IP address.
PAGE 664
PPP Commands idletrigger Consider the link being idle if no traffic is sent and/or received during the idle time. Choose between: RxTx: The idle time period restarts when a packet is transmitted or received. Rx: The idle time period restarts when a packet is received. OPTIONAL Transmitted packets are ignored. Tx: The idle time period restarts when a packet is transmitted. Received packets are ignored. The default is RxTx.
PAGE 665
PPP Commands ppp ifdelete Delete a PPP interface. SYNTAX: ppp ifdelete intf = where: intf The name of the PPP interface to be deleted. REQUIRED EXAMPLE: =>ppp iflist Internet: dest : RELAY [00:00:00] Retry : 10 mode = IP routing flags = echo magic accomp restart mru addr savepwd demanddial dns metric = 0 mru = 1492 Tx inactivity = 1200s left = 0s auth = auto user = password = admin state = down oper state = down link state = not-connected LCP : state = initial retransm = 10 term.
PAGE 666
PPP Commands ppp ifdetach Detach a PPP interface. SYNTAX: ppp ifdetach intf = where: intf The name of the PPP interface to be detached. REQUIRED EXAMPLE: =>ppp iflist Internet: dest : RELAY [00:00:00] Retry : 10 mode = IP routing flags = echo magic accomp restart mru addr savepwd demanddial dns metric = 0 mru = 1492 Tx inactivity = 1200s left = 0s auth = auto user = password = admin state = down oper state = down link state = not-connected LCP : state = initial retransm = 10 term.
PAGE 667
PPP Commands ppp iflist Display the PPP interfaces. SYNTAX: ppp iflist [intf = ] where: intf The name of the PPP interface. Note OPTIONAL If not specified, all PPP interfaces are shown.
PAGE 668
PPP Commands ppp ifscan Scan a PPPoE interface for available Access Concentrator and Service names. Use the command :ppp ifdetach for this interface before performing a scan on it. SYNTAX: ppp ifscan intf = [time = ] where: intf The name of the PPPoE interface to be scanned. REQUIRED time A number between 0 and 36000 (seconds). Represents the time to scan for services.
PAGE 669
PPP Commands ppp rtadd Add a route to the routing table when the PPP link comes up. This route configuration will determine which local hosts are allowed to use this link and/or which remote destinations should be or should not be reachable. The interface must not be connected when a route configuration is added. If this should be the case, use the command :ppp ifdetach for this interface prior to configuring routes.
PAGE 670
PPP Commands EXAMPLE: =>ppp iflist Internet: dest : RELAY [00:00:00] Retry : 10 mode = IP routing flags = echo magic accomp restart mru addr savepwd demanddial dns metric = 0 mru = 1492 Tx inactivity = 1200s left = 0s auth = auto user = password = admin state = down oper state = down link state = not-connected LCP : state = initial retransm = 10 term. reason = IPCP: state = initial retransm = 0 term.
PAGE 671
PPP Commands ppp rtdelete Delete the route for a PPP link. The interface must not be connected when a route configuration must be deleted. If the interface is connected, use the command :ppp ifdetach for this interface. SYNTAX: ppp rtdelete intf = where: intf The PPP interface name for which to delete the route settings.
PAGE 672
PPP Commands ppp relay flush Remove all Ethernet interfaces from the PPP relay agent list and terminate all sessions. The flush command does not impact previously saved configurations. SYNTAX: ppp relay flush 648 E-DOC-CTC-20050531-0061 v1.
PAGE 673
PPP Commands ppp relay ifadd Add an Ethernet interface to the PPP relay list. SYNTAX: ppp relay ifadd intf = where: intf The Ethernet interface to be added to the PPP relay agent list.
PAGE 674
PPP Commands ppp relay ifdelete Delete an Ethernet interface from the PPP relay agent list. SYNTAX: ppp relay ifdelete intf = where: intf The Ethernet interface to be deleted from the PPP relay agent list.
PAGE 675
PPP Commands ppp relay iflist Display all Ethernet interfaces added to the PPP relay agent list. SYNTAX: ppp relay iflist where: intf The Ethernet interface to be added to the PPP relay agent list. REQUIRED EXAMPLE: =>ppp relay iflist # Interface 1 ethoa_0_35 2 ethoa_8_35 => HWaddr Status 00-0e-50-0f-fc-2d connected 00-0e-50-0f-fc-2d connected RELATED COMMANDS: ppp relay ifadd Add an Ethernet interface to the PPP relay list.
PAGE 676
PPP Commands ppp relay sesslist Add an Ethernet interface to the PPP relay list. SYNTAX: ppp relay ifadd intf = where: intf 652 The Ethernet interface to be added to the PPP relay agent list. REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 677
PPTP Commands PPTP Commands Introduction This chapter describes the commands of the pptp command group. Contents This chapter covers the following commands: pptp ifadd Add a Point-to-Point Tunneling Protocol (PPTP) profile. 654 pptp flush Flush the complete PPTP configuration. 655 pptp list Show the current PPTP configuration. 656 pptp profadd Define a new PPTP profile. 657 pptp profdelete Delete a PPTP profile. 658 pptp proflist Display all the current PPTP profiles.
PAGE 678
PPTP Commands pptp ifadd Add a Point-to-Point Tunneling Protocol (PPTP) profile. Backwards compatible with previous release, use profiles instead. SYNTAX: pptp ifadd dest = [rate = ] [encaps = <{vcmux | nlpid}>] [ac = <{never | always | keep}>] where: dest The WAN destination for this PPTP tunnel. Typically a phonebook entry. REQUIRED rate A number between 10 and 10000. Represents the transmission speed (in bits/s) for the WAN link.
PAGE 679
PPTP Commands pptp flush Flush the complete PPTP configuration. The flush command does not impact previously saved configurations. SYNTAX: pptp flush E-DOC-CTC-20050531-0061 v1.
PAGE 680
PPTP Commands pptp list Show the current PPTP configuration. SYNTAX: pptp list EXAMPLE: =>pptp list Dialstr Destination DIALUP_PPP3 => 656 QoS default Encaps vcmux AC never State CONNECTED User (10.0.0.2) E-DOC-CTC-20050531-0061 v1.
PAGE 681
PPTP Commands pptp profadd Define a new PPTP profile. SYNTAX: pptp profadd name = [qos = ] [encaps = <{vcmux | nlpid}>] [ac = <{never | always | keep}>] where: name The name of the new PPTP profile. REQUIRED qos The name of the qosbook entry, containing the settings for this profile. OPTIONAL Note encaps This parameter never needs to be specified. The type of WAN protocol encapsulation to be used with this PPTP profile. Choose between: VC-MUX NLPID.
PAGE 682
PPTP Commands pptp profdelete Delete a PPTP profile. SYNTAX: pptp profdelete name where: name The name of the PPTP profile to be deleted. REQUIRED EXAMPLE: =>pptp proflist Profile QoS Encaps Relay_PPP1 default nlpid PPTPLink default vcmux =>pptp profdelete name=PPTPLink =>pptp proflist Profile QoS Encaps Relay_PPP1 default nlpid => AC always never AC always RELATED COMMANDS: pptp profadd Define a new PPTP profile. pptp proflist Display all the current PPTP profiles.
PAGE 683
PPTP Commands pptp proflist Display all the current PPTP profiles. SYNTAX: pptp proflist EXAMPLE: =>pptp proflist Profile QoS Relay_PPP1 default PPTPLink default => Encaps nlpid vcmux AC always never RELATED COMMANDS: pptp profadd Define a new PPTP profile. pptp profdelete Delete a PPTP profile. E-DOC-CTC-20050531-0061 v1.
PAGE 684
PPTP Commands 660 E-DOC-CTC-20050531-0061 v1.
PAGE 685
Service Commands Service Commands Introduction This chapter describes the commands of the service command group. Contents This chapter covers the following commands: service host assign Assign a host service to a LAN device. 662 service host config Get/set global host service configuration options. 663 service host add Add a host service. 664 service host delete Delete a host service. 665 service host disable Disable a host service. 666 service host flush Flush all host services.
PAGE 686
Service Commands service host assign Assign a host service to a LAN device. SYNTAX: service host assign name = [host = ] [log = <{disabled|enabled}>] where: name The name of an existing host service. REQUIRED host The IP address of the LAN device. OPTIONAL log Enable or disable logging. OPTIONAL EXAMPLE: =>service host assign name="MSN Messenger" host=192.168.1.
PAGE 687
Service Commands service host config Get/set global host service configuration options. SYNTAX: service host config [trace = <{disabled | enabled}>] where: trace Enable or disable traces. The default is disabled. REQUIRED EXAMPLE: =>service host config Service traces : disabled l=> E-DOC-CTC-20050531-0061 v1.
PAGE 688
Service Commands service host add Add a host service. SYNTAX: service host add name = [mode = <{server | client | custom}>] where: name The name of the new host service. REQUIRED mode The service mode. Choose between: OPTIONAL server: The service is defined for server purposes. client: The service is defined for client purposes. custom: The service is a user created service (in other words, a customized service). The default is custom.
PAGE 689
Service Commands service host delete Delete a host service. SYNTAX: service host delete name = where: name The name of the host service to be deleted. REQUIRED EXAMPLE: =>service host list Service Name Host User-Defined Mode --------------------------------------------------------------------------Age of Empires unassigned server AIM Talk unassigned client ...
PAGE 690
Service Commands service host disable Disable a host service. SYNTAX: service host disable [name = ] where: name The name of the host service to be disabled. Note OPTIONAL If not specified, all the host services will be disabled. EXAMPLE: =>service host list Service Name Host User-Defined Mode --------------------------------------------------------------------------Age of Empires unassigned server AIM Talk unassigned client Aliens vs. Predator unassigned server .. MSN Messenger 192.
PAGE 691
Service Commands service host flush Flush all host services. SYNTAX: service host flush E-DOC-CTC-20050531-0061 v1.
PAGE 692
Service Commands service host list Display a list of host services. SYNTAX: service host list [name = ] where: name REQUIRED The name of the host service to be listed. Note If not specified, all the host services will be listed. EXAMPLE: =>service host list Service Name Host User-Defined Mode --------------------------------------------------------------------------Aliens vs.
PAGE 693
Service Commands service host stats Show the host service statistics. SYNTAX: service host stats EXAMPLE: =>service host Services : Service maps : Trigger ports: => stats 113 of 150 in use. 225 of 300 in use. 0 of 25 in use. E-DOC-CTC-20050531-0061 v1.
PAGE 694
Service Commands service host triggerlist List all triggers. SYNTAX: service host triggerlist EXAMPLE: =>service triggerlist Ip Triggerport -----------=> 670 Portrange --------- Timeout ------- E-DOC-CTC-20050531-0061 v1.
PAGE 695
Service Commands service host rule add Create/define a host service portmap. SYNTAX: service host rule add name = [protocol = <{any|tcp|udp} or number>] [baseport = ] portrange = [triggerport = ] [triggerprotocol = <{any|tcp|udp} or number>] where: name The name of the host service. REQUIRED protocol The IP protocol type. Choose between: OPTIONAL baseport any tcp udp a number.
PAGE 696
Service Commands service host rule delete Delete a host service portmap. SYNTAX: service host rule delete name = [protocol = <{any|tcp|udp} or number>] [baseport = ] portrange = [triggerport = ] [triggerprotocol = <{any|tcp|udp} or number>] where: name The name of the host service. REQUIRED protocol The IP protocol type. Choose between: OPTIONAL baseport any tcp udp a number.
PAGE 697
Service Commands service system ifadd Add an interface group to the access list. SYNTAX: service system ifadd name = <{PPTP|HTTP|HTTPs|FTP|TELNET|RIP-Query|DNS-S| SNMP_AGENT|SSDP|MDAP|PING_RESPONDER}> group = <{wan|local|lan|tunnel|dmz|guest} or number> where: name The name of the system service for this access list. REQUIRED group The interface group for this access list.
PAGE 698
Service Commands service system ifdelete Delete an interface group from the access list. SYNTAX: service system ifdelete name = <{PPTP|HTTP|HTTPs|FTP|TELNET|RIP-Query|DNS-S| SNMP_AGENT|SSDP|MDAP|PING_RESPONDER}> group = <{wan|local|lan|tunnel|dmz|guest} or number> where: name The name of the system service for this access list. REQUIRED group The interface group for this access list.
PAGE 699
Service Commands service system ipadd Add an IP address (range) to the access list. SYNTAX: service system ipadd name = <{PPTP|HTTP|HTTPs|FTP|TELNET|RIP-Query|DNS-S| SNMP_AGENT|SSDP|MDAP|PING_RESPONDER}> ip = where: name The name of the system service for this access list. REQUIRED ip The IP address (range) for this access list.
PAGE 700
Service Commands service system ipdelete Delete an IP address (range) from the access list. SYNTAX: service system ipdelete name = <{PPTP|HTTP|HTTPs|FTP|TELNET|RIP-Query|DNS-S| SNMP_AGENT|SSDP|MDAP|PING_RESPONDER}> ip = where: name The name of the system service for this access list. REQUIRED ip The IP address (range) for this access list.
PAGE 701
Service Commands service system list Display the system services. SYNTAX: service system list [name = ] [expand = <{disabled | enabled}>] [dynamics = <{disabled | enabled}>] [members = <{disabled | enabled}>] where: name The name of the system service to be displayed. Note OPTIONAL If not specified, all the system services will be displayed. expand Enable or disable expanded listing. The default is disabled. OPTIONAL dynamics Display dynamic sevices. The default is disabled.
PAGE 702
Service Commands service system mapadd Add a port map for a system service. SYNTAX: service system mapadd name = <{PPTP|HTTP|HTTPs|HTTPI|FTP|TELNET|DNS-S| SNMP_AGENT|SSDP|MDAP}> intf = port = where: name The name of the system service for this map. REQUIRED intf The interface for this map. REQUIRED port The port for this map.
PAGE 703
Service Commands service system mapdelete Delete a port map for a system service. SYNTAX: service system mapdelete name = <{PPTP|HTTP|HTTPs|HTTPI|FTP|TELNET|DNS-S| SNMP_AGENT|SSDP|MDAP}> intf = port = where: name The name of the system service for this map. REQUIRED intf The interface for this map. REQUIRED port The port for this map.
PAGE 704
Service Commands service system modify Modify a system service.
PAGE 705
Script Commands Script Commands Introduction This chapter describes the commands of the script command group. Scripting is not a general purpose mechanism but is only used in the autoPVC/ILMI mechanism. ! It is recommended not to change the default scripts. Contents This chapter covers the following commands: script add Add a line to a script. 682 script delete Delete a complete script or a line from a script. 683 script flush Flush all scripts. 684 script list Display a script or all scripts.
PAGE 706
Script Commands script add Add a line to a script. SYNTAX: script add name = [index = ] command = where: name Name of the script in which a line must be added. REQUIRED index Line number OPTIONAL Note command Use 0 to add a line. Command. REQUIRED RELATED COMMANDS: script delete Delete a complete script or a line from a script. script list Display a script or all scripts. 682 E-DOC-CTC-20050531-0061 v1.
PAGE 707
Script Commands script delete Delete a complete script or a line from a script. SYNTAX: script delete name = [index = ] where: name Name of the script to be deleted. REQUIRED index Line number to be deleted. OPTIONAL Tip Use the command :script list to view the line numbers. Note If not specified, the complete script will be deleted. RELATED COMMANDS: script add Add a line to a script. script list Display a script or all scripts. E-DOC-CTC-20050531-0061 v1.
PAGE 708
Script Commands script flush Flush all scripts. The flush command does not impact previously saved configurations. SYNTAX: script flush 684 E-DOC-CTC-20050531-0061 v1.
PAGE 709
Script Commands script list Display a script or all scripts. SYNTAX: script list [name = ] where: name Name of the script to be listed. Note OPTIONAL If not specified, all the scripts are displayed. EXAMPLE Some of the default scripts are shown below: =>script list Script: autopvc_add_qos 0: qosbook add name _auto_$1_$2 class $3 tx_peakrate $4 tx_sustrate $5 tx_maxburst $6 rx_peakrate $4 rx_sustrate $5 rx_maxburst $6 dynamic yes ...
PAGE 710
Script Commands script run Run a script. SYNTAX: script run name = pars = where: name Tip pars 686 REQUIRED Name of the script to be run. Use the command :script list to obtain the names of the different scripts. Parameters separated with comma. For example a,b,c. REQUIRED E-DOC-CTC-20050531-0061 v1.
PAGE 711
SNMP Commands SNMP Commands Introduction This chapter describes the commands of the snmp command group. Contents This chapter covers the following commands: snmp config Show/set global Simple Network Management Protocol (SNMP) parameters. 688 snmp get Get from the supplied SNMP Object IDentifier (OID). 689 snmp getnext GetNext from the supplied SNMP OID. 690 snmp walk Walk from the supplied SNMP OID. 691 snmp community add Configure an SNMP community string.
PAGE 712
SNMP Commands snmp config Show/set global Simple Network Management Protocol (SNMP) parameters. SYNTAX: snmp config [sysContact = ] [sysName = ] [sysLocation = ] where: sysContact The SNMP system contact. The default is Service Provider. OPTIONAL sysLocation The SNMP system location. The default is Customer Premises. OPTIONAL 688 E-DOC-CTC-20050531-0061 v1.
PAGE 713
SNMP Commands snmp get Get from the supplied SNMP Object IDentifier (OID). For example: get ObjectId=.1.3.6.1.2.1.1.1.0. SYNTAX: snmp get [ObjectId = ] where: ObjectID The Object Identifier. Object ID to get from ... must include the instance which is 0 for scalar objects, for example .1.3.6.1.2.1.1.1.0 sysDescription. Note OPTIONAL If not specified, the sysDescription OID .1.3.6.1.2.1.1.1.0 is assumed. Its value is SpeedTouch™.
PAGE 714
SNMP Commands snmp getnext GetNext from the supplied SNMP OID. SYNTAX: snmp getnext [ObjectId = ] where: ObjectID The Object Identifier. Object ID to getnext from for example .1.3.6.1.2.1.1 system returns sysDescription. OPTIONAL EXAMPLE: =>snmp getnext ObjectId=.1.3.6.1.2.1.1.4.0 VB_octetStr .1.3.6.1.2.1.1.5.0 => Sascha RELATED COMMANDS: snmp get Get from the supplied SNMP Object IDentifier (OID). snmp walk Walk from the supplied SNMP OID. 690 E-DOC-CTC-20050531-0061 v1.
PAGE 715
SNMP Commands snmp walk Walk from the supplied SNMP OID. SYNTAX: snmp walk [ObjectId = ] where: ObjectID The Object Identifier. Object ID to walk from for example .1.3.6.1.2.1.1 system walks the system group. OPTIONAL EXAMPLE: =>snmp walk ObjectId=.1.3.6.1.2.1.1 VB_octetStr .1.3.6.1.2.1.1.1.0 VB_objId .1.3.6.1.2.1.1.2.0 VB_timeTicks .1.3.6.1.2.1.1.3.0 VB_octetStr .1.3.6.1.2.1.1.4.0 VB_octetStr .1.3.6.1.2.1.1.5.0 VB_octetStr .1.3.6.1.2.1.1.6.0 VB_integer .1.3.6.1.2.1.1.7.0 => SpeedTouch™ .1.
PAGE 716
SNMP Commands snmp community add Configure an SNMP community string. SYNTAX: snmp community add securityname = <{RWCommunity | ROCommunity}> communityname = where: securityname communityname Configure access rights/restrictions control for the community name. Choose between: RWCommunity: read/write access rights ROCommunity: read only access rights. Configure the SNMP community name.
PAGE 717
SNMP Commands snmp community delete Delete an SNMP community string. SYNTAX: snmp community delete securityname = <{RWCommunity | ROCommunity}> where: securityname Select the access rights/restrictions control for the community name to be deleted. Choose between: RWCommunity: read/write access rights ROCommunity: read only access rights.
PAGE 718
SNMP Commands snmp community list List all SNMP community strings. SYNTAX: snmp community list EXAMPLE: =>snmp community list Read-write SNMP community name Read-only SNMP community name => : : ***** ***** RELATED COMMANDS: snmp community add Configure an SNMP community string. snmp community delete Delete an SNMP community string. 694 E-DOC-CTC-20050531-0061 v1.
PAGE 719
SNMP Commands snmp community modify Modify an SNMP community string. SYNTAX: snmp community modify securityname = <{RWCommunity | ROCommunity}> communityname = where: securityname communityname E-DOC-CTC-20050531-0061 v1.0 Configure access rights/restrictions control for the community name. Choose between: RWCommunity: read/write access rights ROCommunity: read only access rights. Configure the SNMP community name.
PAGE 720
SNMP Commands 696 E-DOC-CTC-20050531-0061 v1.
PAGE 721
SNTP Commands SNTP Commands Introduction This chapter describes the commands of the Simple Network Time Protocol (SNTP) command group. Contents This chapter covers the following commands: sntp add Add a Network Time Protocol (NTP) server to the NTP server list. 698 sntp config Modify/display the SNTP client configuration. 699 sntp delete Delete an NTP server from the NTP server list. 700 sntp flush Flush the NTP server list and the SNTP client configuration.
PAGE 722
SNTP Commands sntp add Add a Network Time Protocol (NTP) server to the NTP server list. The internal SpeedTouch™ real time clock (SNTP client) will be synchronized with the NTP server. SYNTAX: sntp add [addr = ] [name = ] [version = ] where: addr name This parameter is optional in this respect that either an IP address or the name of an NTP server must be specified. The DNS name of NTP server to be added to list.
PAGE 723
SNTP Commands sntp config Modify/display the SNTP client configuration. SYNTAX: sntp config [enable = <{enabled | disabled}>] [poll = ] where: enable Enable or disable the SpeedTouch™ SNTP client. The default is enabled. OPTIONAL poll A number between 1 and 60 (minutes). Represents the time interval for the SNTP client to poll the configured NTP server and, if needed, (re-)synchronize its internal clock. The default is 60.
PAGE 724
SNTP Commands sntp delete Delete an NTP server from the NTP server list. SYNTAX: sntp delete [addr = ] [name = ] where: addr Note name OPTIONAL The IP address of the NTP server to be removed from the list. This parameter is optional in this respect that either an IP address or the name of an NTP server must be specified. OPTIONAL The DNS name of the NTP server to be removed to the list.
PAGE 725
SNTP Commands sntp flush Flush the NTP server list and the SNTP client configuration. SYNTAX: sntp flush E-DOC-CTC-20050531-0061 v1.
PAGE 726
SNTP Commands sntp list List the NTP servers. SYNTAX: sntp list EXAMPLE: =>sntp list IP Address 100.101.110.111 100.101.110.112 100.101.110.113 => Version 4 4 4 Status Name contacting ... Unable to contact Synchronized DESCRIPTION: The status of an NTP server can be: Not used: The SpeedTouch™ SNTP client is disabled. As a consequence, none of the NTP servers are used. Contacting...: The SpeedTouch™ SNTP client is trying to contact this NTP server.
PAGE 727
Software Commands Software Commands Introduction This chapter describes the commands of the software command group. Contents This chapter covers the following commands: software cleanup Check whether a disk clean-up is required. 704 software deletepassive Delete the passive software version. 705 software duplicate Duplicate the active software version as the passive software version. 706 software setpassive Mark a file as the passive software version.
PAGE 728
Software Commands software cleanup Check whether a disk clean-up is required. If necessary, garbage collection is performed. SYNTAX: software cleanup RELATED COMMANDS: software deletepassive Delete the passive software version. software setpassive Mark a file as the passive software version. 704 E-DOC-CTC-20050531-0061 v1.
PAGE 729
Software Commands software deletepassive Delete the passive software version. SYNTAX: software deletepassive RELATED COMMANDS: software cleanup Check whether a disk clean-up is required. software duplicate Duplicate the active software version as the passive software version. software setpassive Mark a file as the passive software version. E-DOC-CTC-20050531-0061 v1.
PAGE 730
Software Commands software duplicate Duplicate the active software version as the passive software version. SYNTAX: software duplicate RELATED COMMANDS: software cleanup Check whether a disk clean-up is required. software deletepassive Delete the passive software version. software setpassive Mark a file as the passive software version. 706 E-DOC-CTC-20050531-0061 v1.
PAGE 731
Software Commands software setpassive Mark a file as the passive software version. Only correctly uploaded software, valid for the SpeedTouch™, can be marked as passive software. SYNTAX: software setpassive file = where: file The filename (without directory path) of the software package. REQUIRED RELATED COMMANDS: software cleanup Check whether a disk clean-up is required. software deletepassive Delete the passive software version. E-DOC-CTC-20050531-0061 v1.
PAGE 732
Software Commands software switch Switch the active and passive versions and reboot the SpeedTouch™. Because rebooting implies a flush of all non-saved configurations, it is highly recommended to save the current configuration, for example via :saveall or :config save before executing a software switch. SYNTAX: software switch RELATED COMMANDS: software version Display the software version. system reboot Reboot the SpeedTouch™. 708 E-DOC-CTC-20050531-0061 v1.
PAGE 733
Software Commands software upgrade Reboot the modem to initiate the SW upgrade. New software available on a remote LAN host will be uploaded to the modem. SYNTAX: software upgrade E-DOC-CTC-20050531-0061 v1.
PAGE 734
Software Commands software version Display the software version. SYNTAX: software version 710 E-DOC-CTC-20050531-0061 v1.
PAGE 735
System Commands System Commands Introduction This chapter describes the commands of the system command group. Contents This chapter covers the following commands: system config Set/change the system configuration parameters. 712 system flush Flush the current system configuration. 714 system locale Set/get the regional settings. 715 system reboot Reboot the SpeedTouch™. 717 system reset Reset the SpeedTouch™ to its factory or ISP defaults and reboot the device.
PAGE 736
System Commands system config Set/change the system configuration parameters. ! For a good operation of UPnP and the discovery mechanism, it is highly recommended not to change the system configuration settings.
PAGE 737
System Commands EXAMPLE: =>system config upnp discovery mdap discovery drst support reset button digest authentication defaultconnection => E-DOC-CTC-20050531-0061 v1.
PAGE 738
System Commands system flush Flush the current system configuration. The system password and the system config settings (dcache excluded) are flushed. The flush command does not impact previously saved configurations. SYNTAX: system flush EXAMPLE: =>system flush Security notification: Password changed, use 'saveall' to make it permanent. => 714 E-DOC-CTC-20050531-0061 v1.
PAGE 739
System Commands system locale Set/get the regional settings. SYNTAX: system locale [dec_symbol = <{, | .}>] [group_symbol = <{. | ,}>] [date_separator = <{/ | - | .}>] [date_format = <{iso | ddmmyyyy | ddmmyy | mmddyyyy | mmddyy}>] [time_format = <{iso | hmmss}>] [datetime_format = <{iso | date+time | time+date}>] [duration_format = <{dhmmss | hmmss}>] where: dec_symbol Set the decimal symbol. Choose between: . , OPTIONAL The default is “,”. group_symbol Set the group symbol.
PAGE 740
System Commands time_format Set the time format. Choose between: iso hmmss. OPTIONAL The default is iso. Note datetime_format h = hours; mm = minutes; ss = seconds. Set the date-time format. Choose between: iso date+time time+date. OPTIONAL The default is date+time. duration_format Set the duration format. Choose between: dhmmss hmmss. OPTIONAL The default is dhmmss. Note d = days; h = hours; mm = minutes; ss = seconds.
PAGE 741
System Commands system reboot Reboot the SpeedTouch™. ! Non-saved configuration settings will be lost after reboot. SYNTAX: system reboot EXAMPLE: =>system reboot ..... (lost session connectivity due to reboot) ..... E-DOC-CTC-20050531-0061 v1.
PAGE 742
System Commands system reset Reset the SpeedTouch™ to its factory or ISP defaults and reboot the device. ! All user specific settings and all saved configuration changes are lost after reboot. SYNTAX: system reset factory yes/no = <{yes | no}> proceed no/yes = <{no | yes}> where: factory yes/no proceed no/yes Choose between: yes: delete user and ISP specific settings. no: delete user specific settins only. REQUIRED Confirmation for resetting the modem.
PAGE 743
System Commands system debug autosave Autosave debugging commands SYNTAX: system debug autosave [trace = <{disabled|enabled}>] where: trace Enable or disable autosave traces E-DOC-CTC-20050531-0061 v1.
PAGE 744
System Commands system debug stats Show the SpeedTouch™ CPU and memory statistics. SYNTAX: system debug stats [reset = <{disabled | enabled}>] where: reset Reset the CPU statistics. The default is disabled. OPTIONAL DESCRIPTION: CHIP memory: Memory used by the CPU (first MB from the RAM) – not cached since it has to be realtime. Application memory: Memory used by the applications. min: The least amount of free memory detected during the uptime of the SpeedTouch™.
PAGE 745
System Commands system ra config Configure Remote management access parameters. SYNTAX: system ra config [secure = <{disabled | enabled}>] [port = ] [timeout = ] where: secure Enable or disable https. The default is enabled. OPTIONAL port Set the destination port for remote access. The default is 51003. OPTIONAL timeout Set the connection timeout in minutes.
PAGE 746
System Commands system rtc synchronize Do a SNTP update and synchronize the realtime clock. SYNTAX: system rtc synchronize 722 E-DOC-CTC-20050531-0061 v1.
PAGE 747
System Commands system rtc settime Show/set the SpeedTouch™ internal system clock. When synchronization with an external NTP server via the SpeedTouch™ SNTP client fails, this command allows to manually configure its internal clock. In cases without regular synchronization, accurate realtime clock settings can not be guaranteed.
PAGE 748
System Commands 724 E-DOC-CTC-20050531-0061 v1.
PAGE 749
Systemlog Commands Systemlog Commands Introduction This chapter describes the commands of the systemlog command group. Contents This chapter covers the following commands: systemlog flush Flush all messages in the internal Syslog message buffer. 726 systemlog show Show messages in the internal Syslog message buffer. 727 systemlog send Send messages from the internal Syslog message buffer to a specified local or remote syslog server host. 728 E-DOC-CTC-20050531-0061 v1.
PAGE 750
Systemlog Commands systemlog flush Flush all messages in the internal Syslog message buffer. SYNTAX: systemlog flush 726 E-DOC-CTC-20050531-0061 v1.
PAGE 751
Systemlog Commands systemlog show Show messages in the internal Syslog message buffer. SYNTAX: systemlog show [fac = ] [sev = ] [hist = <{disabled | enabled}>] where: fac Specify the facility name of the syslog messages to be shown. Use one of the supported facility names (see “ Supported System Logging Facilities” on page 799). Note sev hist If not specified, the messages of all the facilities will be shown.
PAGE 752
Systemlog Commands systemlog send Send messages from the internal Syslog message buffer to a specified local or remote syslog server host. There will be no notification on whether the host has received the messages or not. SYNTAX: systemlog send [fac = ] [sev = ] [hist = <{disabled | enabled}>] dest = where: fac Specify the facility name of the syslog messages to show.
PAGE 753
Tunnel Commands Tunnel Commands Introduction This chapter describes the commands of the tunnel command group. Contents This chapter covers the following commands: tunnel list Display the peer gateway profile management. 730 tunnel gre add Add a Generic Routing Encapsulation (GRE) tunnel. 731 tunnel gre delete Delete a GRE tunnel. 732 tunnel gre flush Remove all GRE tunnels. 733 tunnel gre list List all GRE tunnels. 734 tunnel gre modify Configure a GRE tunnel.
PAGE 754
Tunnel Commands tunnel list Display the peer gateway profile management. SYNTAX: tunnel list 730 E-DOC-CTC-20050531-0061 v1.
PAGE 755
Tunnel Commands tunnel gre add Add a Generic Routing Encapsulation (GRE) tunnel. SYNTAX: tunnel gre add ifname = source = destination = [key = ] [checksum = <{disabled | enabled}>] where: ifname The name of the new GRE interface. REQUIRED source The tunnel source IP address. REQUIRED destination The tunnel destination IP address. REQUIRED key The tunnel key. OPTIONAL Note checksum The key can have a maximum of 14 characters.
PAGE 756
Tunnel Commands tunnel gre delete Delete a GRE tunnel. SYNTAX: tunnel gre delete ifname = where: ifname The name of the GRE interface to be deleted. REQUIRED EXAMPLE: =>tunnel gre list # ifname encap source destination checksum 5 myGREintf gre 192.168.1.64 150.150.150.150 enabled 6 yourGREintf gre 192.168.1.50 160.160.160.160 enabled =>tunnel gre delete ifname=yourGREintf =>tunnel gre list key 01234567 55667788 # ifname 5 myGREintf => key 01234567 encap gre source 192.168.1.
PAGE 757
Tunnel Commands tunnel gre flush Remove all GRE tunnels. SYNTAX: tunnel gre flush E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 758
Tunnel Commands tunnel gre list List all GRE tunnels. SYNTAX: tunnel gre list EXAMPLE: =>tunnel gre list # ifname encap 5 myGREintf gre 6 yourGREintf gre => source 192.168.1.64 192.168.1.50 destination checksum 150.150.150.150 enabled 160.160.160.160 enabled key 01234567 55667788 RELATED COMMANDS: tunnel gre add Add a Generic Routing Encapsulation (GRE) tunnel. tunnel gre delete Delete a GRE tunnel. 734 E-DOC-CTC-20050531-0061 v1.
PAGE 759
Tunnel Commands tunnel gre modify Configure a GRE tunnel. SYNTAX: tunnel gre modify ifname = source = destination = [key = ] [checksum = <{disabled | enabled}>] where: ifname The name of the GRE interface to be modified. REQUIRED source The tunnel source IP address. REQUIRED destination The tunnel destination IP address. REQUIRED key The tunnel key. OPTIONAL Note checksum The key can have a maximum of 14 characters.
PAGE 760
Tunnel Commands tunnel ipip add Add an IPIP tunnel. SYNTAX: tunnel ipip add ifname = source = destination = where: ifname The name of the new IPIP interface. REQUIRED source The tunnel source IP address. REQUIRED destination The tunnel destination IP address. REQUIRED EXAMPLE: =>tunnel ipip list # ifname encap source destination 3 myIPIPtunnel ipip 10.0.0.1 100.100.100.1 =>tunnel ipip add ifname=yourIPIPtunnel source=10.0.0.2 destination=100.200.100.
PAGE 761
Tunnel Commands tunnel ipip delete Delete an IPIP tunnel. SYNTAX: tunnel ipip delete ifname = where: ifname The name of the IPIP interface to be deleted. REQUIRED EXAMPLE: =>tunnel ipip list # ifname encap source destination 3 myIPIPtunnel ipip 10.0.0.1 100.100.100.1 4 yourIPIPtunnel ipip 10.0.0.2 100.200.100.1 =>tunnel ipip delete ifname=yourIPIPtunnel =>tunnel ipip list # ifname encap source 3 myIPIPtunnel ipip 10.0.0.1 => destination 100.100.100.
PAGE 762
Tunnel Commands tunnel ipip flush Remove all IPIP tunnels. SYNTAX: tunnel ipip flush 738 E-DOC-CTC-20050531-0061 v1.
PAGE 763
Tunnel Commands tunnel ipip list List all IPIP tunnels. SYNTAX: tunnel ipip list EXAMPLE: =>tunnel ipip list # ifname encap source 3 myIPIPtunnel ipip 10.0.0.1 4 yourIPIPtunnel ipip 10.0.0.2 => destination 100.100.100.1 100.200.100.1 RELATED COMMANDS: tunnel ipip add Add an IPIP tunnel. tunnel ipip delete Delete an IPIP tunnel. E-DOC-CTC-20050531-0061 v1.0 v1.
PAGE 764
Tunnel Commands tunnel ipip modify Configure an IPIP tunnel. SYNTAX: tunnel ipip modify ifname = source = destination = where: ifname The name of the IPIP interface to be modified. REQUIRED source The tunnel source IP address. REQUIRED destination The tunnel destination IP address. REQUIRED EXAMPLE: =>tunnel ipip list # ifname encap source destination 7 myIPIPtunnel ipip 10.0.0.1 100.100.100.1 8 yourIPIPtunnel ipip 10.0.0.2 100.200.100.
PAGE 765
UPnP Commands UPnP Commands Introduction This chapter describes the commands of the upnp command group. Contents This chapter covers the following commands: upnp config Configure the UPnP™ parameter(s). 742 upnp flush Flush the UPnP™ configuration. 743 upnp list List all registered devices. 744 E-DOC-CTC-20050531-0061 v1.
PAGE 766
UPnP Commands upnp config Configure the UPnP™ parameter(s). SYNTAX: upnp config [maxage = ] [writemode = <{full | natonly | readonly}>] [safenat = <{disabled | enabled}>] [preferredaddress = ] [httpport = ] where: maxage A number between 60 and 999999. This parameter allows to configure how often the SpeedTouch™ sends a notification message to advertise its presence as an Internet Gateway Device (IGD) on the network. The default is 1800.
PAGE 767
UPnP Commands upnp flush Flush the UPnP™ configuration. The UPnP configuration will be reset to the default configuration. SYNTAX: upnp flush E-DOC-CTC-20050531-0061 v1.
PAGE 768
UPnP Commands upnp list List all registered devices. Use this command to check whether a PPP connection is properly configured and thus advertised as a PPP service. SYNTAX: upnp list [verbose = ] where: verbose Verbose level. The default is 1. OPTIONAL EXAMPLE: =>upnp list ---------------- device: IGD.xml -----------Advertised on: LocalNetwork (10.0.0.
PAGE 769
User Commands User Commands Introduction This chapter describes the commands of the user command group. Contents This chapter covers the following commands: user add Add a user. 746 user config Modify a user. 748 user delete Delete a user. 749 user flush Flush the users. 750 user list Display the users. 751 user rights Display the session rights. 753 E-DOC-CTC-20050531-0061 v1.
PAGE 770
User Commands user add Add a user. You can only add a user whose privileges are the same or lower than your own privileges. SYNTAX: user add name = password = role = [hash2 = ] [descr = ] [defuser = <{disabled | enabled}>] [defremadmin = <{disabled | enabled}>] where: name The new user name. Note REQUIRED 1. The maximum number of users is 10. 2. The maximum length is 32 characters.
PAGE 771
User Commands EXAMPLE: In the example below, the user Administrator creates a new user JohnDoe. This user has lower access rights than the user “Poweruser”. {Administrator}=>user list User Flags Role -------- ---Administrator U Administrator tech R TechnicalSupport {Administrator}[user]=>add name = JohnDoe password = **** Please retype password for verification.
PAGE 772
User Commands user config Modify a user. You can only modify a user whose privileges are the same or lower than your own privileges. SYNTAX: user config name = [password = ] [role = ] [descr = ] [defuser = <{disabled | enabled}>] [defremadmin = <{disabled | enabled}>] where: name The user name. REQUIRED password The password. OPTIONAL Note role Use the command :mlp role list to obtain the role names (see “ mlp role list” on page 595 for more information).
PAGE 773
User Commands user delete Delete a user. You can only delete a user whose privileges are the same or lower than your own privileges. SYNTAX: user delete name = where: name The name of the user to be deleted.
PAGE 774
User Commands user flush Flush the users. After execution of this command, the access to the SpeedTouch™ will no longer be protected by a password. The first user that logs on, after initiating a new Telnet session, will have the same administrative rights as a user with the role root.
PAGE 775
User Commands user list Display the users. SYNTAX: user list [name = ] [channel = <{ftp | telnet | http | mdap | serial}>] [origin = <{lan | wan | local}>] [secure = <{disabled | enabled}>] where: name The user name. Note channel origin ftp telnet http mdap serial. lan wan local. disabled enabled. E-DOC-CTC-20050531-0061 v1.0 OPTIONAL If not specified, all the origins will be listed. The selected security level.
PAGE 776
User Commands EXAMPLE: {Administrator}=>user list User ---Administrator tech Flags ----U R Role ---Administrator TechnicalSupport {Administrator}=>user list name=tech channel=http origin=wan service(s): r_lan, r_wan, r_fs_view, r_fs_retrieve, r_rtg, r_fwdg, r_nat, r_frwl, r_ipsec_norm, r_ipsec_adv, r_certificates, r_remote_mgnt, r_local, r_qos, w_lan, w_wan, w_fs_passive, w_rtg, w_fwdg, w_nat, w_frwl_norm, w_frwl_adv, w_frwe_mgnt, w_ipsec, w_certificates, w_remote_mgnt, w_local, w_qos, snd_lan, snd_wan,
PAGE 777
User Commands user rights Display the session rights. The user rights of the currently logged-in user are shown.
PAGE 778
User Commands 754 E-DOC-CTC-20050531-0061 v1.
PAGE 779
Wireless Commands Wireless Commands Introduction This chapter describes the commands of the wireless command group. Contents This chapter covers the following commands: wireless ifconfig Configure the wireless settings. 756 wireless reset Reset the wireless parameters. 758 wireless debug stats Show the transfer statistics. 759 wireless macacl add Add an ACL MAC entry. 760 wireless macacl config Configure the ACL mode. 761 wireless macacl delete Delete an ACL MAC entry.
PAGE 780
Wireless Commands wireless ifconfig Configure the wireless settings. SYNTAX: wireless ifconfig [state = <{enabled | disabled}>] [channel = <{auto | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13}>] [ssid = ] [any = <{disabled | enabled}>] [interop = <{802.11b | 802.11b/g | 802.11g}>] [frameburst = <{disabled | enabled}>] where: state Enable or disable the interface operational status of wireless access point. The default is enabled.
PAGE 781
Wireless Commands EXAMPLE: =>wireless] ifconfig State Network name (SSID) Public network (any) Channel RTS Threshold Short Retry Limit Long Retry Limit Beacon Period Rate Interoperability Protection Protection Mode Protection Trigger Shortslot Framebursting Locale Rate Set Dtim interval => E-DOC-CTC-20050531-0061 v1.0 : : : : : : : : : : : : : : : : : : enabled SpeedTouchBF4511 enabled 1 [auto] 2347 7 4 100 54 Mbps 802.11b/g auto rtscts local&overlap auto disabled Europe 1(b) 2(b) 5.
PAGE 782
Wireless Commands wireless reset Reset the wireless parameters. The following wireless parameters are reset to their default settings: Access Point (AP) + communication channel Security mode MAC Access Control List (ACL) (MACACL mode) Pre-shared keys MACACL list is cleared. SYNTAX: wireless reset proceed = <{disabled | enabled}> where: proceed Confirm to reset the settings to factory defaults. Choose between: disabled enabled.
PAGE 783
Wireless Commands wireless debug stats Show the transfer statistics. SYNTAX: wireless debug stats EXAMPLE: =>wireless debug stats Good Rx Packets Bad Rx Packets Good Tx Packets Bad Tx Packets => E-DOC-CTC-20050531-0061 v1.
PAGE 784
Wireless Commands wireless macacl add Add an ACL MAC entry. SYNTAX: wireless macacl add hwaddr = permission = <{allow|deny}> [name = ] where: hwaddr The Ethernet MAC address of the ACL entry. REQUIRED permission The action to be performed on ACL entry. Choose between: REQUIRED name allow: the wireless client is allowed entry. deny: the wireless client is not allowed entry. The name of the wireless client.
PAGE 785
Wireless Commands wireless macacl config Configure the ACL mode. SYNTAX: wireless macacl config [control = <{lock | unlock | register}>] where: control Select the ACL mode. Choose between: lock: The ACL is locked. No new entries are allowed in the ACL. unlock: Every wireless client can associate to the SpeedTouch™. register: A wireless client is only added to the ACL after using the Register Button. OPTIONAL The default is unlock.
PAGE 786
Wireless Commands wireless macacl delete Delete an ACL MAC entry. SYNTAX: wireless macacl delete hwaddr = where: hwaddr The Ethernet MAC address of the ACL entry.
PAGE 787
Wireless Commands wireless macacl flush Flush ACL entries. SYNTAX: wireless macacl flush proceed = <{disabled | enabled}> where: proceed Confirm to reset the ACL settings to factory defaults. Choose between: disabled enabled.
PAGE 788
Wireless Commands wireless macacl list Show a list of all configured ACL entries. SYNTAX: wireless macacl list EXAMPLE: =>wireless macacl list Station Name hardware address ST120g 00:02:2d:5f:b6:9e Test2 01:67:d0:23:56:cd => 764 Permission accept accept E-DOC-CTC-20050531-0061 v1.
PAGE 789
Wireless Commands wireless macacl modify Modify an existing ACL entry. SYNTAX: wireless macacl modify hwaddr = [permission = <{allow | deny}>] [name = ] where: hwaddr The Ethernet MAC address of the ACL entry. Note permission name REQUIRED If the MAC address is not present in the ACL list, the command will not be excuted. The action to be performed on ACL entry. Choose between: allow: the wireless client is allowed entry.
PAGE 790
Wireless Commands wireless macacl register Start a registration process (only for register mode). Prerequisite The register mode must be enabled (with the command :wireless macacl config control=register). If the register mode is not enabled when the registration process is started, a warning will be displayed. Registration Process After executing this command, the ACL will be unlocked for a time period of 60 seconds.
PAGE 791
Wireless Commands wireless secmode config Configure/show the security mode. SYNTAX: wireless secmode config [mode = <{disable | wep | wpa-psk}>] where: mode The security mode. Choose between: disable: no security wep: Wired Equivalent Privacy (WEP) wpa-psk: Wi-Fi Protected Access (WPA) - Pre-Shared Key (PSK). OPTIONAL The default is disable (in other words, by default, there is no security. This is to enable an easy first use).
PAGE 792
Wireless Commands wireless secmode wep Configure the WEP settings. If the current security mode is WEP, then the security mode must first be changed, before the WEP settings can be (re)configured. SYNTAX: wireless secmode wep [encryptionkey = ] where: encryptionkey The secret key to be used for WEP encryption.
PAGE 793
Wireless Commands wireless secmode wpa-psk Configure the WPA-PSK settings. If the current security mode is WPA-PSK, then the security mode must first be changed, before the WPAPSK settings can be (re)configured. SYNTAX: wireless secmode wpa-psk [presharedkey = ] [encryption = <{TKIP | AES}>] [rekeysec = {0-20000}] where: presharedkey The preshared key is an alphanumeric string with a length from 8 to 64 characters.
PAGE 794
Wireless Commands wireless stations list List the currently associated stations. SYNTAX: wireless stations list EXAMPLE: =>wireless stations list Station Name Hardware Address ST120g 00:02:2D:5F:B6:9E Authentication WEP-64 used Total number of associated stations : 1 => 770 E-DOC-CTC-20050531-0061 v1.
PAGE 795
Wireless Commands wireless wds add Add a Wireless Distribution System (WDS) station. Up to four WDS stations can be added. SYNTAX: wireless wds add bssid = [name = ] where: bssid The WDS Base Service Set Identifier (BSSID). REQUIRED name A user specified reference name.
PAGE 796
Wireless Commands wireless wds config WDS configuration parameters. SYNTAX: wireless wds config [state = <{disabled | enabled}>] [autoaccess = <{disabled | enabled}>] where: state Enable or disable the WDS functionality. The default is enabled. OPTIONAL autoaccess Automatically grant WDS to other AP's (enabled) or not (disabled). The default is disabled (in other words, auto accept is disabled).
PAGE 797
Wireless Commands wireless wds delete Delete a WDS station. SYNTAX: wireless wds delete bssid = where: bssid The BSSID of the WDS station to be deleted. REQUIRED EXAMPLE: =>wireless wds list SpeedTouch180 00:90:96:4F:38:E4 SpeedTouch Sascha 00:90:96:62:5D:69 =>wireless wds delete bssid=00:90:96:62:5d:69 =>wireless wds list SpeedTouch180 00:90:96:4F:38:E4 => E-DOC-CTC-20050531-0061 v1.
PAGE 798
Wireless Commands wireless wds flush Flush all WDS stations. SYNTAX: wireless wds flush 774 E-DOC-CTC-20050531-0061 v1.
PAGE 799
Wireless Commands wireless wds list List the WDS stations. SYNTAX: wireless wds list EXAMPLE: =>wireless wds list SpeedTouch180 SpeedTouch Sascha => E-DOC-CTC-20050531-0061 v1.
PAGE 800
Wireless Commands wireless wds scanresults Scan all networks. SYNTAX: wireless wds scanresults [rescan = <{disabled | enabled}>] where: rescan Perform a new scan (enabled) or not (disabled). The default is disabled.
PAGE 801
Abbreviations Abbreviations The table below lists all the abbreviations used in the CLI Reference Guide.
PAGE 802
Abbreviations Abbreviation Description HDLC High-level Data Link Control HTTP HyperText Transfer Protocol ICMP Internet Control Message Protocol IDS Intrusion Detection System IGD Internet Gateway Device IGMP Internet Group Management Protocol IKE Internet Key Exchange IP Internet Protocol IP oA IP over ATM IPCP Internet Protocol Control Protocol IPSec IP Security ISDN Integrated Services Digital Network ISI Independent Set ID KB Kilobytes Kbps Kilobits per second LAN Local
PAGE 803
Abbreviations Abbreviation Description PPP Point-to-Point Protocol PPPoA PPP over ATM PPPoE PPP over Ethernet PPTP Point-to-Point Tunneling Protocol PSD Power Spectral Density PSK Pre-Shared Key PVC Permanent Virtual Channel QoS Quality of Service RIP Routing Information Protocol RTC Real Time Clock RTT Round Trip Time SAs Security Associations SFTP Secure File Transfer Protocol SHDSL Single Pair High-speed Digital Subscriber Line SIP Session Initiation Protocol SLA Service
PAGE 804
Abbreviations Abbreviation Description VLAN Virtual Local Area Network VLSM Variable Length Subnet Masking VP Virtual Path VPI Virtual Path Identifier VPN Virtual Private Networking WAN Wide Area Network WDS Wireless Distribution System WEP Wired Equivalent Privacy WFQ Weighted Fair Queueing WINS Windows Internet Naming Service WLAN Wireless LAN WPA Wi-Fi Protected Access WRR Weighted Round Robin 780 E-DOC-CTC-20050531-0061 v1.
PAGE 805
System Logging Messages System Logging Messages Introduction This chapter lists the different System Logging messages.
PAGE 806
System Logging Messages Auto-PVC Module Facility Severity Contents LOCAL5 WARNING AUTOPVC script failed LOCAL5 WARNING AUTOPVC script failed LOCAL5 WARNING AUTOPVC script (name1, qosb_name) failed LOCAL5 WARNING AUTOPVC script (name1, qosb_name, name2) failed LOCAL5 WARNING AUTOPVC script 'autopvc_change_qos (itable[i].
PAGE 807
System Logging Messages DHCP Relay Module Facility Severity Contents LOCAL2 WARNING DHCR relay: Dropping boot rqs on interface due to invalid giaddr for server () LOCAL2 WARNING DHCR relay: Dropping boot reply with invalid relay agent option from LOCAL2 WARNING DHCR relay: Dropping boot request containing the relay agent option from LOCAL2 WARNING DHCR relay: Dropping boot reply to unknown interface from LOCAL2 WARNING DHCR relay: Droppin
PAGE 808
System Logging Messages Dyndns Module Facility Severity Contents DYNDNS WARNING Connection failed to for client DYNDNS WARNING Failed to resolve host name for client DYNDNS WARNING Server Timeout() for client DYNDNS WARNING Update failed to server for client DYNDNS NOTICE clien
PAGE 809
System Logging Messages LOGIN Module Facility Severity Contents AUTH NOTICE LOGOUT User logged out on () AUTH NOTICE LOGOUT User logged out on AUTH NOTICE LOGOUT session of user killed () AUTH NOTICE LOGOUT session of user killed AUTH NOTICE LOGIN User tried to login on (from ) AUTH NOTICE LOGIN User logged in
PAGE 810
System Logging Messages IPSec Module Facility Severity Contents KERNEL ERROR ESP packet dropped: Replay check failure USER INFO AddSa: SPIs: Loc: Rem: () Prot:- Exp: USER INFO AddSuite: SPIs: Loc: Rem: () Prot:- Exp: USER INFO Cert/map id mismatch: using USER INFO Cert: using to establish to USER INFO "Cert status unknown;
PAGE 811
System Logging Messages ISDN Module Facility Severity Contents KERN USER ISDN software key not installed : closing connection Kernel Module Facility Severity Contents KERN WARNING KERNEL cold reset KERN WARNING KERNEL warm reset KERN EMERG KERNEL Controlled restart (after internal error or explicit system reboot) Linestate Module Facility Severity Contents LOCAL5 NOTICE xDSL linestate up (downstream: kbit/s, upstream: kbit/ s) LOCAL5 NOTICE xDSL linestat
PAGE 812
System Logging Messages PPP Module Facility Severity Contents LOCAL0 WARNING PPP Link up () LOCAL0 WARNING PPP Link down () AUTH ERROR PPP PAP authentication failed () [protocol reject] AUTH INFO PPP PAP on intf no response to authenticate-request AUTH NOTICE PPP PAP remote user successful authenticated AUTH ERROR PPP PAP authentication for remote user failed AUTH INFO PPP PAP Authenticate Ack received AUTH
PAGE 813
System Logging Messages RIP Module Facility Severity Contents LOCAL1 INFO RIP Packet received from unknown interface LOCAL1 INFO RIP Packet size is smaller than minimum size LOCAL1 INFO RIP Packet size is greater than maximum size LOCAL1 INFO RIP Wrong RIP packet alignment LOCAL1 INFO RIP RIP version 0 with command received LOCAL1 INFO RIP Reserved field not zero in RIP header LOCAL1 INFO RIP RIP is not enabled for network address LOCAL1 INFO RIP Packet
PAGE 814
System Logging Messages Routing Module Facility Severity Contents LOCAL1 INFO GRP Default destination is routed via gateway LOCAL1 INFO GRP Default destination is not routed anymore via gateway SECURITY INFO LABEL Rule Id: Protocol: ICMP Src_ip: Dst_ip: ICMP message type: Label: SECURITY INFO LABEL Rule Id: Protocol: Src_ip: Dst_ip:
PAGE 815
System Logging Messages Software Module Facility Severity Contents KERN INFO SOFTWARE Copying all data files from to KERN INFO SOFTWARE Switchover going down in seconds KERN INFO SOFTWARE No passive software found, duplicating active software KERN INFO SOFTWARE Duplication of active software failed KERN INFO SOFTWARE File initiated KERN INFO SOFTWARE File <““ || not> successful term
PAGE 816
System Logging Messages 792 E-DOC-CTC-20050531-0061 v1.
PAGE 817
Supported Key Names Supported Key Names Contents This chapter lists all the key names supported by the SpeedTouch™, that can be used for completing CLI command parameters: Supported IP Protocols 794 Supported TCP/UDP Port Names 795 Supported ICMP Type Names 798 Supported System Logging Facilities 799 Supported System Logging Severities 800 IP Precedence 800 Differentiated Services Code Point (DSCP) 801 E-DOC-CTC-20050531-0061 v1.
PAGE 818
Supported Key Names Supported IP Protocols For more information on the listed IP protocols, see RFC1340 or www.iana.org.
PAGE 819
Supported Key Names Supported TCP/UDP Port Names For more information on the listed TCP/UDP port assignments, see RFC1340 or www.iana.org.
PAGE 820
Supported Key Names Port name Number TCP UDP sntp 123 Y Y Simple Network Time Protocol (SNTP) ingres-net 134 Y Y INGRES-NET Service netbios-ns 137 Y Y NETBIOS Naming System netbios-dgm 138 Y Y NETBIOS Datagram Service netbios-ssn 139 Y Y NETBIOS Session Service imap2 143 Y Y Internet Message Access Protocol (IMAP) v2 sql-net 150 Y Y SQL-NET pcmail-srv 158 Y Y PCMail Server snmp 161 Y Y Simple Network Management Protocol (SNMP) snmptrap 162 Y Y SNMP Trap
PAGE 821
Supported Key Names Port name Number TCP UDP utime 519 Y Y UNIX Time rip 520 - Y Local routing process (on site); uses variant of Xerox NS Routing Information Protocol (RIP) timed 525 Y Y Timeserver netwall 533 Y Y For emergency broadcasts new-rwho 540 Y Y uucpd remote who is uucp 540 Y Y uucpd uucp-rlogin 540 Y Y uucpd remote login rtsp 554 Y Y Real Time Streaming Protocol (RTSP) whoami 565 Y Y whoami ipcserver 600 Y Y SUN IPC Server doom 666 Y Y D
PAGE 822
Supported Key Names Supported ICMP Type Names For more information on the listed ICMP type names, see RFC1340 or www.iana.org.
PAGE 823
Supported Key Names Supported System Logging Facilities For more information on the listed System Logging facilities, see RFC3164.
PAGE 824
Supported Key Names Supported System Logging Severities For more information on the listed System Logging severities, see RFC3164.
PAGE 825
Supported Key Names Differentiated Services Code Point (DSCP) For more information on DSCP, see RFC3260.
PAGE 826
Supported Key Names 802 E-DOC-CTC-20050531-0061 v1.
PAGE 827
Index Index A tunnel ipip add 736 user add 746 wireless macacl add 760 wireless wds add 771 aal5stats atm debug aal5stats 31 addgroup add atm bundle add 17 atm oam vclb add 41 atm phonebook add 44 atm qosbook add 49 dhcp relay add 115 dhcp server lease add 131 dhcp server pool add 143 dhcp server rule add 155 dns server host add 175 dns server route add 179 dsd urlfilter rule add 196 dsd webfilter professional category add 205 dsd webfilter professional level add 212 dsd webfilter server add 221 dsd we
PAGE 828
Index ifadd 24 ifconfig 25 ifdelete 26 list 27 B bind connection bind 76 cac config 28 list 29 overbooking 30 debug aal5stats 31 gstats 32 portstats 33 flush 9 ifadd 10 ifattach 11 ifconfig 12 ifdelete 14 ifdetach 15 iflist 16 oam cc list 38 modify 39 send 40 config 34 list 35 modify 36 ping 37 vclb add 41 del 42 list 43 phonebook add 44 autolist 45 delete 46 flush 47 list 48 qosbook add 49 config 50 ctdadd 51 ctddelete 53 ctdlist 54 delete 55 flush 56 list 57 bindlist connection bindlist 77 bnadd grp r
PAGE 829
Index config adsl config 4 atm bundle config 19 atm cac config 28 atm oam config 34 atm qosbook config 50 autopvc config 60 connection config 80 cwmp config 92 cwmp server config 95 delete 64 dhcp relay config 116 dhcp server config 124 dhcp server pool config 144 dns client config 160 dns server config 166 dsd config 185 dsd intercept config 190 dsd syslog config 193 dsd urlfilter config 195 dsd webfilter professional config 211 dsd webfilter server config 222 dsd webfilterconfig 203 dump 65 eth bridge co
PAGE 830
Index config delete 64 dhcp relay delete 117 dhcp server lease delete 133 dhcp server pool delete 146 dhcp server rule delete 156 dns server host delete 176 dns server route delete 180 dsd urlfilter rule delete 197 dsd webfilter professional category delete 207 dsd webfilter professional level delete 213 dsd webfilter server delete 223 dsd webfilter standard category delete 229 dsd webfilter standard level delete 234 dyndns delete 245 dyndns host delete 251 expr delete 299 firewall chain delete 313 firewal
PAGE 831
Index flush 147 list 148 optadd 149 optdelete 150 rtadd 151 rtdelete 152 ruleadd 153 ruledelete 154 rule add 155 delete 156 flush 157 list 158 disable service host disable 666 disconnect ipsec connection dialup disconnect 477 dns client config 160 dnsadd 161 dnsdelete 162 dnslist 163 flush 164 nslookup 165 server config 166 debug clear 168 spoof clear 170 getaddress 171 getflags 172 list 173 update 174 stats 169 flush 167 host add 175 delete 176 flush 177 list 178 route add 179 delete 180 flush 181 list 18
PAGE 832
Index delete 229 flush 230 list 231 category remove 232 level delete 234 flush 235 list 236 modify 237 set 238 level add 233 rule clear 239 list 240 modify 241 ifdelete 278 ifdetach 279 iflist 280 macadd 281 macdelete 282 maclist 283 mcdadd 284 mcddelete 285 mcdlist 286 device ifconfig 287 iflist 288 flush 270 ifadd 264 ifattach 265 ifconfig 266 ifdelete 267 ifdetach 268 iflist 269 switch group flush 289 list 290 move 291 mirror capture 292 egress 293 ingress 294 dump config dump 65 duplicate software du
PAGE 833
Index level add 319 delete 320 flush 321 list 322 modify 323 set 324 list 311 rule add 325 debug clear 332 stats 334 traceconfig 335 delete 327 flush 328 list 329 modify 331 ip flush 394 ipqos meter flush 441 ipsec flush 455 isdn flush 538 label chain flush 564 label flush 558 label rule flush 569 mlp flush 580 nat flush 599 pki flush 618 ppp flush 634 ppp relay flush 648 pptp flush 655 script flush 684 service host flush 667 sntp flush 701 system flush 714 systemlog flush 726 tunnel gre flush 733 tunnel
PAGE 834
Index rtlist 343 rttadd 344 rttdelete 345 rttlist 347 dhcp client ifattach 103 eth bridge ifattach 275 eth ifattach 265 ip auto ifattach 415 ip ifattach 396 isdn ifattach 540 ppp ifattach 636 gstats atm debug gstats 32 ifconfig atm bundle ifconfig 25 atm ifconfig 12 dhcp client ifconfig 104 dhcp relay ifconfig 119 eth bridge ifconfig 276 eth device ifconfig 287 eth ifconfig 266 grp ifconfig 340 grp rip ifconfig 354 ip auto ifconfig 416 ip ifconfig 397 isdn ifconfig 541 nat ifconfig 600 ppp ifconfig 637
PAGE 835
Index ppp relay iflist 651 ifrelease dhcp client ifrelease 108 ifrenew dhcp client ifrenew 110 ifscan ppp ifscan 644 ifwait ip ifwait 402 import mlp import 581 pki import 619 info adsl info 5 autopvc info 61 connection info 84 ingress eth switch mirror ingress 294 instadd dhcp server option instadd 137 instdelete dhcp server option instdelete 138 instlist dhcp server option instlist 139 interface list 386 ip arpadd 389 arpdelete 390 arplist 391 auto flush 413 ifadd 414 ifattach 415 ifconfig 416 ifdelete 41
PAGE 836
Index advanced add 466 delete 467 list 468 modify 469 delete 461 descriptor add 471 delete 472 list 473 modify 474 dialup connect 476 disconnect 477 list 462 modify 463 network add 478 delete 479 list 480 modify 481 options add 482 delete 483 list 484 modify 485 start 464 stop 465 debug syslog 486 traceconfig 487 flush 455 peer add 488 auth add 494 delete 495 list 496 modify 497 delete 489 descriptor add 498 delete 499 list 500 modify 501 list 490 modify 491 options add 503 delete 504 list 505 modify 506 s
PAGE 837
Index Syslog severities 800 TCP/UDP port 795 L label add 556 chain add 562 delete 563 flush 564 list 565 delete 557 flush 558 list 559 modify 560 rule add 566 debug clear 572 stats 573 traceconfig 574 delete 568 flush 569 list 570 modify 571 language config 576 delete 577 list 578 list atm bundle list 27 atm cac list 29 atm oam cc config 38 atm oam list 35 atm oam vclb list 43 atm phonebook list 48 atm qosbook list 57 config list 67 connection list 85 dhcp relay list 121 dhcp server lease list 135 dhcp se
PAGE 838
Index list dsd debug connection list 186 addzone 586 config 587 delete 588 list 589 removezone 590 listpool ipsec peer vpnserver xauthpool listpool 525 load config load 68 role add 591 addpriv 592 config 593 delete 594 list 595 removepriv 596 locale system locale 715 M modify macadd eth bridge macadd 281 macdelete eth bridge macdelete 282 maclist eth bridge maclist 283 mapadd nat mapadd 602 service system mapadd 678 mapdelete nat mapdelete 605 service system mapdelete 679 maplist nat maplist 606 mca
PAGE 839
Index N flush 618 import 619 list 620 refresh 621 remove 622 request 623 show 624 nat config 598 flush 599 ifconfig 600 iflist 601 mapadd 602 mapdelete 605 maplist 606 tmpladd 607 tmpldelete 610 tmplinst 612 tmpllist 611 policy dhcp server policy 126 portstats atm debug portstats 33 ppp flush 634 ifadd 635 ifattach 636 ifconfig 637 ifdelete 641 ifdetach 642 iflist 643 ifscan 644 relay flush 648 ifadd 649 ifdelete 650 iflist 651 sesslist 652 rtadd 645 rtdelete 647 nbadd grp rip nbadd 356 nbdelete grp ri
PAGE 840
Index recycling rttlist dsd debug recycling 188 refresh connection refresh 86 pki refresh 621 grp rttlist 347 ruleadd dhcp server pool ruleadd 153 ruledelete register wireless macacl register 766 dhcp server pool ruledelete 154 run remove script run 686 dsd webfilter professional category remove 210 dsd webfilter standard category remove 232 pki remove 622 removepriv mlp role removepriv 596 removezone mlp privilege removezone 590 request pki cep request 630 pki request 623 reset system reset 718 wi
PAGE 841
Index ifdelete 674 ipadd 675 ipdelete 676 list 677 mapadd 678 mapdelete 679 modify 680 session ipsec clear session 458 sessions ipsec show sessions 532 sesslist ppp relay sesslist 652 set dsd webfilter professional level set 217 dsd webfilter standard level set 238 env set 261 firewall level set 324 setpassive software setpassive 707 settime system rtc settime 723 show grp rip show 362 pki show 624 systemlog show 727 snmp community add 692 delete 693 list 694 modify 695 config 688 get 689 getnext 690 walk
PAGE 842
Index PPTP 788 RIP 789 Routing 790 Session 790 SNTP 790 Software 791 UPnP 791 Wireless 791 system config 712 debug autosave 719 stats 720 flush 714 locale 715 ra config 721 reboot 717 reset 718 rtc settime 723 synchronize 722 firewall rule debug traceconfig 335 ip debug traceconfig 426 ipsec debug traceconfig 487 isdn debug traceconfig 547 label rule debug traceconfig 574 mlp debug traceconfig 584 traceroute ip debug traceroute 427 triggerlist service host triggerlist 670 tunnel gre add 731 delete 732 flu
PAGE 843
Index V vbuff isdn debug vbuff 549 version software version 710 W walk snmp walk 691 wep wireless secmode wep 768 wireless debug stats 759 ifconfig 756 macacl add 760 config 761 delete 762 flush 763 list 764 modify 765 register 766 reset 758 secmode config 767 wep 768 wpa-psk 769 stations list 770 wds add 771 config 772 delete 773 flush 774 list 775 scanresults 776 wpa-psk wireless secmode wpa-psk 769 E-DOC-CTC-20050531-0061 v1.
PAGE 844
Index 820 E-DOC-CTC-20050531-0061 v1.
PAGE 845