manualshive.com logo in svg

KeeNetic Lite KN-1310, Command Reference Manual

Share
Download
KeeNetic Lite KN-1310 Command Reference Manual Download Page 8

3.6.4 components preset ............................................................................................ 40
3.6.5 components preview ......................................................................................... 40
3.6.6 components remove .......................................................................................... 41
3.6.7 components validity-period .............................................................................. 41

3.7 crypto ike key ............................................................................................................... 42
3.8 crypto ike nat-keepalive .............................................................................................. 43
3.9 crypto ike policy ........................................................................................................... 43

3.9.1 crypto ike policy lifetime ................................................................................... 44
3.9.2 crypto ike policy mode ...................................................................................... 45
3.9.3 crypto ike policy negotiation-mode .................................................................. 45
3.9.4 crypto ike policy proposal ................................................................................. 46

3.10 crypto ike proposal ..................................................................................................... 47

3.10.1 crypto ike proposal dh-group .......................................................................... 47
3.10.2 crypto ike proposal encryption ....................................................................... 48
3.10.3 crypto ike proposal integrity .......................................................................... 49

3.11 crypto ipsec transform-set ......................................................................................... 50

3.11.1 crypto ipsec transform-set cypher .................................................................. 50
3.11.2 crypto ipsec transform-set dh-group .............................................................. 51
3.11.3 crypto ipsec transform-set hmac .................................................................... 52
3.11.4 crypto ipsec transform-set lifetime ................................................................ 53

3.12 crypto ipsec profile ..................................................................................................... 53

3.12.1 crypto ipsec profile authentication-local ....................................................... 54
3.12.2 crypto ipsec profile authentication-remote ................................................... 54
3.12.3 crypto ipsec profile dpd-interval ..................................................................... 55
3.12.4 crypto ipsec profile identity-local ................................................................... 56
3.12.5 crypto ipsec profile match-identity-remote ................................................... 57
3.12.6 crypto ipsec profile mode ................................................................................ 57
3.12.7 crypto ipsec profile policy ............................................................................... 58
3.12.8 crypto ipsec profile preshared-key ................................................................. 59
3.12.9 crypto ipsec profile xauth ............................................................................... 59
3.12.10 crypto ipsec profile xauth-identity ............................................................... 60
3.12.11 crypto ipsec profile xauth-password ............................................................. 60

3.13 crypto map .................................................................................................................. 61

3.13.1 crypto map connect ......................................................................................... 62
3.13.2 crypto map enable ........................................................................................... 62
3.13.3 crypto map fallback-check-interval ................................................................ 63
3.13.4 crypto map force-encaps ................................................................................. 63
3.13.5 crypto map match-address ............................................................................. 64
3.13.6 crypto map nail-up ........................................................................................... 64
3.13.7 crypto map set-peer ........................................................................................ 65
3.13.8 crypto map set-peer-fallback .......................................................................... 66
3.13.9 crypto map set-profile ..................................................................................... 66
3.13.10 crypto map set-tcpmss .................................................................................. 67

Command Reference Guide — Keenetic Lite (KN-1310)

8

Table of Contents

Summary of Contents for Lite KN-1310

Page 1: ...Smart Wi Fi Router with Power Amplifiers Managed Switch and Mode Selector Command Reference Guide Model Keenetic Lite KN 1310 OS Version 2 10 Edition 1 17 18 01 2018 help keenetic net Keenetic Limited...

Page 2: ......

Page 3: ...s manual covers the following topics Introduction to the CLI Describes how to use the Keenetic Lite Command Line Interface CLI its hierarchical structure authorization levels and its help features Com...

Page 4: ...his context has no meaning for the command Interfaces used in the system and the relationships between them are shown in the diagrams below List of arguments if they exists and explanations to them Ar...

Page 5: ...3 Product Overview 19 Introduction to the CLI 21 Command Reference 27 Glossary 291 Interface Hierarchy 299 HTTP API 301 SNMP MIB 309 IPsec Encryption Levels 315 Keenetic Lite KN 1310 Command Reference...

Page 6: ...Command Reference Guide Keenetic Lite KN 1310 6 Contents Overview...

Page 7: ...ut 24 2 5 Saving to startup settings 24 2 6 Delayed restart 25 Chapter 3 Command Reference 27 3 1 Core commands 27 3 1 1 copy 27 3 1 2 erase 27 3 1 3 exit 28 3 1 4 ls 28 3 1 5 more 29 3 2 access list...

Page 8: ...ofile 53 3 12 1 crypto ipsec profile authentication local 54 3 12 2 crypto ipsec profile authentication remote 54 3 12 3 crypto ipsec profile dpd interval 55 3 12 4 crypto ipsec profile identity local...

Page 9: ...ion eap md5 79 3 16 3 interface authentication eap ttls 80 3 16 4 interface authentication identity 80 3 16 5 interface authentication mschap 81 3 16 6 interface authentication mschap v2 82 3 16 7 int...

Page 10: ...debug 106 3 16 46 interface ip dhcp client displace 107 3 16 47 interface ip dhcp client dns routes 107 3 16 48 interface ip dhcp client fallback 108 3 16 49 interface ip dhcp client hostname 108 3 16...

Page 11: ...rface rf e2p set 131 3 16 88 interface security level 132 3 16 89 interface speed 133 3 16 90 interface speed nonegotiate 134 3 16 91 interface ssid 134 3 16 92 interface switchport access 135 3 16 93...

Page 12: ...p host 162 3 25 ip hotspot 162 3 25 1 ip hotspot auto scan interface 163 3 25 2 ip hotspot auto scan interval 163 3 25 3 ip hotspot auto scan passive 164 3 25 4 ip hotspot auto scan timeout 165 3 25 5...

Page 13: ...190 3 46 1 ndns book name 190 3 46 2 ndns check name 193 3 46 3 ndns drop name 194 3 46 4 ndns get booked 195 3 46 5 ndns get update 196 3 47 ntce shaping 198 3 48 ntp 198 3 49 ntp server 199 3 50 nt...

Page 14: ...w associations 219 3 74 2 show clock date 220 3 74 3 show clock timezone list 221 3 74 4 show crypto ike key 222 3 74 5 show crypto map 222 3 74 6 show dot1x 224 3 74 7 show drivers 225 3 74 8 show in...

Page 15: ...74 42 show vpn server 256 3 75 snmp community 256 3 76 snmp contact 257 3 77 snmp location 257 3 78 system 258 3 78 1 system button 258 3 78 2 system clock date 259 3 78 3 system clock timezone 260 3...

Page 16: ...p echo 283 3 85 3 vpn server mppe 284 3 85 4 vpn server mppe optional 285 3 85 5 vpn server mru 285 3 85 6 vpn server mtu 286 3 85 7 vpn server multi login 286 3 85 8 vpn server pool range 287 3 85 9...

Page 17: ...11 C 4 UDP MIB 312 C 5 HOST RESOURCES MIB 312 C 6 UCD SNMP MIB 312 Appendix D IPsec Encryption Levels 315 D 1 weak 315 D 2 normal 316 D 3 normal 3des 316 D 4 strong 317 D 5 weak pfs 317 D 6 normal pfs...

Page 18: ...Command Reference Guide Keenetic Lite KN 1310 18 Table of Contents...

Page 19: ...1G6KB 25 64Mb DDR2 Flash Winbond W25Q128JVFQ 16Mb SPI Ethernet Notes Chipset Ports Integrated 5 Notes Speed Label WAN port 100 Mbps 0 100 Mbps 1 100 Mbps 2 100 Mbps 3 100 Mbps 4 Wi Fi Notes Chipset Ba...

Page 20: ...Command Reference Guide Keenetic Lite KN 1310 20 Chapter 1 Product Overview...

Page 21: ...y default settings of Keenetic Lite RESET button is used to reset startup configuration to the factory default Files startup config and running config can be edited manually without participation of t...

Page 22: ...ompletion To make the configuring process as comfortable as possible the CLI provides auto completion of commands and parameters hinting the operator which commands are available at the current level...

Page 23: ...evel authentication configure authentication ip set interface IP parameters igmp set interface IGMP parameters up enable interface down disable interface config interface FastEthernet0 Vlan2 2 3 Prefi...

Page 24: ...outingTable Added static route 1 1 2 0 24 via PPTP0 config ip route 1 1 3 0 24 PPTP1 Network RoutingTable Added static route 1 1 3 0 24 via PPTP1 config show running config ip route 1 1 1 0 255 255 25...

Page 25: ...to reboot and return to the saved settings The system reboot command lets you set a delayed restart timer perform risky settings then turn off the timer and save the changes If connection to the devic...

Page 26: ...Command Reference Guide Keenetic Lite KN 1310 26 Chapter 2 Introduction to the CLI...

Page 27: ...file to be copied in file system path format Filename source Full path to the directory for the new file Filename destination Example Current settings can be saved as follows config copy running conf...

Page 28: ...2 00 3 1 3 exit Description Leave the command node Prefix no No Change settings No Multiple input No Synopsis config exit Example config dyndns exit config History Version Description The exit command...

Page 29: ...ntry type D name db entry type D name dhcp6c entry type R name TZ size 6 entry type R name passwd size 128 entry type D name dnscache entry type D name mnt entry type D name tmp entry type D name ppp...

Page 30: ...not found the command tries to create it Such a list can be assigned to a network interface using interface ip access group command Command with no prefix removes the list of rules Prefix no Yes Chan...

Page 31: ...ination port range destination port destination end port config acl no deny icmp esp gre ipip ip source source mask destination destination mask Arguments Description Value Argument TCP protocol Keywo...

Page 32: ...There are two ways to enter the mask in the canonical form for example 255 255 255 0 and in the form of prefix with bit length for example 24 Destination port in the TCP or UDP header Integer destina...

Page 33: ...on end port config acl permit icmp esp gre ipip ip source source mask destination destination mask config acl no permit tcp udp source source mask port src port operator source port range source port...

Page 34: ...ort eq Operator greater to compare the port with the specified source port gt The destination address in the header of IP packet IP address destination Mask to be applied to the destination address in...

Page 35: ...lient Prefix no Yes Change settings Yes Multiple input Yes Synopsis config cloud control client id connect name mag app modulus exponent config no cloud control client id connect Arguments Description...

Page 36: ...oud control client name Description Rename the registered client Prefix no No Change settings Yes Multiple input No Synopsis config cloud control client id name name Arguments Description Value Argume...

Page 37: ...The period of time that a session can remain idle without any end user Integer seconds interaction Can take values in the range from 30 to 600 inclusively Example config cloud control client a78d 30ab...

Page 38: ...ion Mark component to install Final installation carried out with components commit command Prefix no No Change settings Yes Multiple input Yes Synopsis config comp install component Arguments Descrip...

Page 39: ...ndbox Example config comp list firmware version 2 12 A 1 0 1 sandbox draft component name storage group USB storage libndm Swap priority normal depend usb size 363447 order 0 version 3 4 113 1 hash 2d...

Page 40: ...ion Value Argument preset Minimal set of components will be marked minimal Recommended set of components will be marked for installation recommended Example config comp preset recommended lib libndmCo...

Page 41: ...h the components list command String component Example config comp remove ntfs Component is queued for removal ntfs History Version Description The components remove command has been introduced 2 00 3...

Page 42: ...x removes specified key Prefix no Yes Change settings Yes Multiple input Yes Synopsis config crypto ike key name psk type id any config no crypto ike key name Arguments Description Value Argument Name...

Page 43: ...live Arguments Description Value Argument Timeout between keepalive packets in seconds Can take values from 5 to 3600 inclusively Integer nat keepalive Example config crypto ike nat keepalive 20 IpSec...

Page 44: ...escription Set lifetime of IPsec IKE association By default the value 86400 is used Command with no prefix resets setting to default Prefix no Yes Change settings Yes Multiple input No Synopsis config...

Page 45: ...mode set to ikev1 History Version Description The crypto ike policy mode command has been introduced 2 06 3 9 3 crypto ike policy negotiation mode Description Set exchange mode for IKEv1 see crypto i...

Page 46: ...ue for data exchange on the IKE protocol Command with no prefix removes reference on IKE proposal Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ike policy proposal proposal conf...

Page 47: ...Latin letters numbers dots hyphens and underscores are acceptable String name Example config crypto ike proposal test IpSec Manager Crypto ike proposal test successfully created History Version Descr...

Page 48: ...n Description Add the selected type of encryption to IKE proposal The order of adding has a value for data exchange on the IKE protocol Command with no prefix removes the selected type of encryption P...

Page 49: ...no prefix removes the selected algorithm Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ike proposal integrity integrity config ike proposal no integrity integrity Arguments Des...

Page 50: ...Value Argument IPsec transformation name Latin letters numbers dots hyphens and underscores are acceptable String name Example config crypto ipsec transform set test IpSec Manager Crypto ipsec transf...

Page 51: ...oduced 2 06 3 11 2 crypto ipsec transform set dh group Description Add the selected DH group to IPsec transformation to work in the PFS mode The order of adding has a value for data exchange on the IK...

Page 52: ...rotocol Command with no prefix removes the selected algorithm Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ipsec transform hmac hmac config ipsec transform no hmac hmac Argumen...

Page 53: ...m lifetime 8640 IpSec Manager Crypto ipsec transform set test lifetime set to 8640 s History Version Description The crypto ipsec transform set lifetime command has been introduced 2 06 3 12 crypto ip...

Page 54: ...g to default Prefix no Yes Change settings Yes Multiple input No Synopsis config ipsec profile authentication local auth config ipsec profile no authentication local Arguments Description Value Argume...

Page 55: ...Description The crypto ipsec profile authentication remote command has been introduced 2 06 3 12 3 crypto ipsec profile dpd interval Description Set parameters of method to detect a dead IKE peer By...

Page 56: ...a local identifier of IPsec profile Command with no prefix removes the local identifier Prefix no Yes Change settings Yes Multiple input No Synopsis config ipsec profile identity local type id config...

Page 57: ...address ID type is full domain name fqdn ID type is domain name dn ID type is e mail address email Remote host ID value String id Allow usage of any remote host Keyword any Example config ipsec profil...

Page 58: ...profile mode command has been introduced 2 06 3 12 7 crypto ipsec profile policy Description Set the reference to existing IKE policy see crypto ike policy command Command with no prefix removes the r...

Page 59: ...value String preshare key Example config ipsec profile preshared key testkey IpSec Manager Crypto ipsec profile test preshared key was set History Version Description The crypto ipsec profile preshare...

Page 60: ...s Yes Multiple input No Synopsis config ipsec profile xauth identity identity config ipsec profile no xauth identity Arguments Description Value Argument Login for XAuth client mode String identity Ex...

Page 61: ...2 06 3 13 crypto map Description Access to a group of commands to configure selected IPsec crypto map If crypto map is not found the command tries to create it Command with no prefix removes crypto m...

Page 62: ...o Yes Change settings Yes Multiple input No Synopsis config crypto map connect config crypto map no connect Example config crypto map connect IpSec Manager Crypto map test autoconnect enabled History...

Page 63: ...ents Description Value Argument Period of checking in seconds Can take values from 60 to 86400 Integer interval value Example config crypto map fallback check interval 120 IpSec Manager Crypto map tes...

Page 64: ...ence Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto map match address access list config crypto map no match address Arguments Description Value Argument Packet filtering r...

Page 65: ...r IPsec connection Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto map set peer remote ip config crypto map no set peer Arguments...

Page 66: ...name of remote host String remote ip Example config crypto map set peer fallback test com IpSec Manager Crypto map test fallback remote peer is set to test com History Version Description The crypto m...

Page 67: ...er of SYN packets exceeds the specified limit command changes it Path MTU Discovery mode allows automatically identifiy MSS limit Command with no prefix removes all limits from MSS Prefix no Yes Chang...

Page 68: ...set transformations with help of transform set command Example config crypto map set transform test IpSec Manager Crypto map test ipsec transform set is set to test History Version Description The cr...

Page 69: ...the corresponding access list will be ignored By default the setting is disabled Command with no prefix disables the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto...

Page 70: ...o clients in Virtual IP server mode Command with no prefix removes the range Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto map virtual ip range begin end size config crypt...

Page 71: ...y bantime Description Set bantime for DNS server By default 30000 value is used Command with no prefix resets bantime to default Prefix no Yes Change settings Yes Multiple input No Synopsis config dns...

Page 72: ...illiseconds 1 week Integer max ttl Example config dnspx max ttl 10000 Dns Proxy Dns proxy set max ttl to 10000 config dnspx no max ttl Dns Proxy Dns proxy max ttl cleared History Version Description T...

Page 73: ...o ban DNS server By default 3 value is used All DNS servers can not be banned Command with no prefix resets threshold to default Prefix no Yes Change settings Yes Multiple input No Synopsis config dns...

Page 74: ...s String name History Version Description The dyndns profile command has been introduced 2 00 3 15 1 dyndns profile domain Description Assign permanent domain name to the computer You need to register...

Page 75: ...ument The password for authentication Maximum password length is 64 characters String password Example config dyndns password 1234 DynDns Profile test password saved History Version Description The dy...

Page 76: ...ption Value Argument type Used if the domain name was registered on the dyndns com 3 site dyndns Used if the domain name was registered on the no ip com 4 site noip Used if the domain name was registe...

Page 77: ...hours Integer hours Interval time in minutes Integer minutes Interval time in seconds Integer seconds Example config dyndns update interval 7 days DynDns Profile a timeout set to 604800 History Versi...

Page 78: ...fig dyndns username test_user DynDns Profile test username saved History Version Description The dyndns profile username command has been introduced 2 00 3 16 interface Description Access to a group o...

Page 79: ...entication support Command with no prefix disables CHAP Prefix no Yes Change settings Yes Multiple input No Interface type Secure Synopsis config if authentication chap config if no authentication cha...

Page 80: ...Prefix no Yes Change settings Yes Multiple input No Interface type Secure Synopsis config if authentication eap ttls config if no authentication eap ttls Example config if authentication eap ttls EAP...

Page 81: ...identity command has been introduced 2 00 3 16 5 interface authentication mschap Description Enable MS CHAP authentication support Command with no prefix disables MS CHAP Prefix no Yes Change settings...

Page 82: ...Description The interface authentication mschap v2 command has been introduced 2 00 3 16 7 interface authentication pap Description Enable PAP authentication support Command with no prefix disables P...

Page 83: ...rd Example config if authentication password 1234 Password saved History Version Description The interface authentication password command has been introduced 2 00 3 16 9 interface authentication shar...

Page 84: ...e WiFi Synopsis config if authentication wpa psk psk config if no authentication wpa psk Arguments Description Value Argument Pre agreed key in the form of a 256 bit hexadecimal number which consists...

Page 85: ...istory Version Description The interface bandwidth limit command has been introduced 2 06 3 16 12 interface ccp Description Enable CCP support during establishing connection Command with no prefix dis...

Page 86: ...alue Argument channel Number of radio channel number Radio channel number is detected automatically auto Example config if channel 8 Channel saved History Version Description The interface channel com...

Page 87: ...ied channel By default 40 below value is used Command with no prefix resets to default Prefix no Yes Change settings Yes Multiple input No Interface type Radio Synopsis config if channel width width c...

Page 88: ...bility lines is defined by the hardware capabilities of a particular adapter and provisions of the relevant additions to the IEEE 802 11 standard By default BGN value is used for 2 4 GHz Prefix no No...

Page 89: ...ced 2 00 3 16 18 interface country code Description Assign to the interface a literal country code which influences the set of radio channels By default RU value is used Prefix no No Change settings Y...

Page 90: ...n Description The interface debug command has been introduced 2 00 3 16 20 interface description Description Assign arbitrary descrption to the specified network interface Command with no prefix delet...

Page 91: ...ig if no down Example config if down Interface disabled History Version Description The interface down command has been introduced 2 00 3 16 22 interface duplex Description Set the duplex mode of the...

Page 92: ...ltiple input No Synopsis config if dyndns profile profile config if no dyndns profile Arguments Description Value Argument The name of DynDns profile String profile Example config if dyndns profile te...

Page 93: ...isable Description Disable encryption on the wireless interface Prefix no No Change settings Yes Multiple input No Interface type WiFi Synopsis config if encryption disable Example config if encryptio...

Page 94: ...bit WEP uses a 26 hexadecimal characters 13 characters ASCII Overall there can be 1 to 4 encryption keys with one of them default key must be assigned Command with no prefix removes key Prefix no Yes...

Page 95: ...fig if no encryption mppe Example config if encryption mppe MPPE enabled History Version Description The interface encryption mppe command has been introduced 2 00 3 16 29 interface encryption wpa Des...

Page 96: ...when any of the WPA is enabled Command with no prefix disables WPA2 support Prefix no Yes Change settings Yes Multiple input No Interface type WiFi Synopsis config if encryption wpa2 config if no enc...

Page 97: ...ontrol command has been introduced 2 08 3 16 32 interface hide ssid Description Enable hidden SSID mode When using this feature Access Point will not be displayed in the list of available wireless net...

Page 98: ...opsis config if igmp downstream config if no igmp downstream Example config if igmp downstream added downstream interface ISP History Version Description The interface igmp downstream command has been...

Page 99: ...hange settings Yes Multiple input No Interface type IP Synopsis config if igmp upstream config if no igmp upstream Example config if igmp upstream upstream role assigned to ISP History Version Descrip...

Page 100: ...ask and IP aliases On removing either the bridge itself or the bridge interface these settings even if they have been changed will be copied back to the vacant interface The command allows one to add...

Page 101: ...s Interface type IP Synopsis config if ip access group acl direction config if no ip access group acl direction Arguments Description Value Argument List of filtering rules as previously created using...

Page 102: ...nd the prefix with bit length for example 24 Example The network address defined by the IP address and mask can specified in either of the two ways specify a mask in the canonical form or set the pref...

Page 103: ...hostname hostname config if no ip address dhcp Arguments Description Value Argument Name of the host to be placed in the DHCP option 12 field This name need not be the String hostname same as the host...

Page 104: ...terface ip adjust ttl command has been introduced 2 00 Keyword set was added 2 09 3 16 42 interface ip adjust ttl send Description Modify the TTL for all packets of outgoing interface connections Comm...

Page 105: ...Arguments Description Value Argument Additional address of the network interface IP address address Additional mask of the network interface There are two ways to specify the mask IP mask mask the can...

Page 106: ...02 3 16 45 interface ip dhcp client debug Description Enable debug mode for DHCP client Detailed info about DHCP client working is saved to the system log Command with no prefix disables the debug mo...

Page 107: ...lace interface Arguments Description Value Argument Name or alias of the interface whose static address will be displaced Interface name interface Example config if ip dhcp client displace Home Dhcp C...

Page 108: ...ce type Ethernet Synopsis config if ip dhcp client fallback type config if no ip dhcp client fallback Arguments Description Value Argument The type of IP address Currently implemented only one type st...

Page 109: ...p dhcp client name servers Description Use DNS server addresses which are received via DHCP This function is enabled by default Command with no prefix denies using of DNS server addresses which are re...

Page 110: ...s released History Version Description The interface ip dhcp client release command has been introduced 2 03 3 16 52 interface ip dhcp client renew Description DHCP client releases lease IP address an...

Page 111: ...l Description Set property global with a parameter to the interface This property is necessary to configure the default route DynDNS Client and NAT functioning Can represent global interfaces as leadi...

Page 112: ...and with no prefix cancels the command Prefix no Yes Change settings Yes Multiple input No Interface type PPP Synopsis config if ip mru mru config if no ip mru Arguments Description Value Argument MRU...

Page 113: ...fig if ip mtu 5000 MTU saved History Version Description The interface ip mtu command has been introduced 2 00 3 16 57 interface ip remote Description Set a remote peer static address Prefix no Yes Ch...

Page 114: ...e IP Synopsis config if ip tcp adjust mss pmtu mss config if no ip tcp adjust mss Arguments Description Value Argument Set the upper limit of MSS equal to the minimum MTU along the path to the remote...

Page 115: ...mmand with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Interface type PPP Synopsis config if ipcp dns routes config if no ipcp dns routes Example config if ipcp d...

Page 116: ...IP headers by Van Jacobson s method Command with no prefix disables compression Prefix no Yes Change settings Yes Multiple input No Interface type PPP Synopsis config if ipcp vj cid config if no ipcp...

Page 117: ...and SHA1 normal Level is compatible with most systems priority is given to 3DES and SHA1 normal 3des The strongest level PFS is mandatory priority is given to AES256 and SHA1 strong The same as weak b...

Page 118: ...ion The interface ipsec ignore command has been introduced 2 10 3 16 65 interface ipsec ikev2 Description Enable IKEv2 protocol for IPSec connection that is automatically associated with the tunnel By...

Page 119: ...Argument Secret PSK key value String key Example config if ipsec preshared key 12345678 Network Interface Secure Gre0 preshared key was set config if no ipsec preshared key Network Interface Secure Gr...

Page 120: ...interface to be used as default IPv6 gateway By default the setting is disabled Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config if ipv6 f...

Page 121: ...name servers command has been introduced 2 00 3 16 70 interface ipv6 prefix Description Configure prefix delegation When auto is set prefix is requested via DHCPv6 PD Command with no prefix removes t...

Page 122: ...if ipv6cp IPv6CP enabled History Version Description The interface ipv6cp command has been introduced 2 00 3 16 72 interface lcp acfc Description Enable compression negotiation of the Data Link Layer...

Page 123: ...echo interval count adaptive config if no lcp echo Arguments Description Value Argument Interval between sending LCP echo in seconds If within the specified time Integer interval interval there is no...

Page 124: ...ynopsis config if lcp pfc cid config if no lcp pfc Arguments Description Value Argument Enable compression of Connection ID into headers Keyword cid Example config if lcp pfc cid PFC compression enabl...

Page 125: ...0 3 16 76 interface mac access list type Description Set the type for filtering list of the interface Type is not defined by default none value assigned Prefix no No Change settings Yes Multiple input...

Page 126: ...rface Warning Change MAC address on Wi Fi interface is prohibited Prefix no Yes Change settings Yes Multiple input No Interface type MAC Synopsis config if mac address address config if no mac address...

Page 127: ...he interface Prefix no No Change settings Yes Multiple input No Interface type MAC IP Synopsis config if mac clone Example config if mac clone MAC address saved History Version Description The interfa...

Page 128: ...Description Assign Ping Check profile to the interface Command with no prefix cancels the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config if ping check profile profile con...

Page 129: ...ription Value Argument The transmitter power as the percentage of the maximum power from 1 to 100 Integer power Example config if power 90 Power level applied History Version Description The interface...

Page 130: ...config if preamble short Short preamble enabled History Version Description The interface preamble short command has been introduced 2 00 3 16 85 interface rekey interval Description Set the period of...

Page 131: ...with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config if rename rename config if no rename Arguments Description Value Argument New interface name Stri...

Page 132: ...tions coming to the public interface i e in the direction public private and public public The device itself accepts network connections allows control only from private interfaces Data transfer betwe...

Page 133: ...tion are the functions designed to solve fundamentally different problems Enabling NAT between Home and PPPoE0 interfaces in the configuration shown above does not prohibit access to the network Home...

Page 134: ...settings Yes Multiple input No Interface type Ethernet Synopsis config if speed nonegotiate config if no speed nonegotiate Example config if speed nonegotiate Network Interface Ethernet GigabitEthern...

Page 135: ...Wireless Network Name SSID String ssid SSID will be assigned automatically Keyword auto Example config if ssid WIRELESS SSID saved History Version Description The interface ssid command has been intr...

Page 136: ...orwarding of downstream traffic from a different VLAN called friend Friend packets are transmitted without a tag Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple i...

Page 137: ...ch is set with switchport access command The port is an output one only for VLAN with PVID ID Once a frame is transferred to the port the VLAN marker gets removed Enable the VLAN trunk mode that is th...

Page 138: ...g if no switchport trunk vlan vid Arguments Description Value Argument VLAN ID Can take values from 1 to 4094 inclusively Integer vid Example config if switchport trunk vlan 100 Network Interface Swit...

Page 139: ...p of commands to configure TSP Command with no prefix disables TSP Prefix no Yes Change settings Yes Multiple input No Interface type TunnelSixInFour Group entry config if tsp Synopsis config if tsp c...

Page 140: ...es Multiple input No Interface type TunnelSixInFour Synopsis config if tsp prefix length length config if tsp no prefix length Arguments Description Value Argument Prefix length Can only take values 4...

Page 141: ...ttings Yes Multiple input No Interface type TunnelSixInFour Synopsis config if tsp user user config if tsp no user Arguments Description Value Argument TSP username String user History Version Descrip...

Page 142: ...if no tunnel destination Network Interface Tunnel Gre0 destination was reset History Version Description The interface tunnel destination command has been introduced 2 08 3 16 99 interface tunnel eoi...

Page 143: ...sets the setting Prefix no Yes Change settings Yes Multiple input No Interface type Tunnel Synopsis config if tunnel source auto interface address config if no tunnel source Arguments Description Valu...

Page 144: ...ion The interface tx burst command has been introduced 2 07 3 16 102 interface tx queue Description Set the size of the queue of outgoing packets on the interface By default 1000 is set Command with n...

Page 145: ...enabled History Version Description The interface up command has been introduced 2 00 3 16 104 interface usb power cycle Description Turn off power on the usb modem for a specified period of time Thi...

Page 146: ...g if wmm WMM extensions enabled History Version Description The interface wmm command has been introduced 2 00 3 16 106 interface wps Description Enable WPS functionality Prefix no Yes Change settings...

Page 147: ...e interface wps auto self pin command has been introduced 2 04 3 16 108 interface wps button Description Start WPS process using a software button Process takes 2 minutes or until the first connection...

Page 148: ...Receive WiFi configuration from Keenetic Lite receive PIN code of the remote peer String pin Example config if wps peer receive 99586683 Receiving WiFi configuration process started peer PIN mode His...

Page 149: ...es entry from ARP table If you use no arguments the whole list of ARP entrys will be removed Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ip arp ip mac config no ip arp ip Argu...

Page 150: ...String class Example config ip dhcp class STB One Dhcp Server Vendor class STB One has been created History Version Description The ip dhcp class command has been introduced 2 00 3 18 1 ip dhcp class...

Page 151: ...eaving the old value IP address and vice versa to change the IP address leaving the old MAC address value intact Command with no prefix removes the host Prefix no Yes Change settings Yes Multiple inpu...

Page 152: ...2 characters Note In the current version of the system no more than one pool per interface is supported For DHCP server to function correctly it is required that the range of IP addresses set by range...

Page 153: ...istory Version Description The ip dhcp pool bind command has been introduced 2 00 3 20 2 ip dhcp pool class Description Access to a group of commands to configure DHCP vendor class for selected pool I...

Page 154: ...iple input Yes Synopsis config dhcp pool class option number type data config dhcp pool class no option number Arguments Description Value Argument number 6 option DNS server 6 42 option NTP server 42...

Page 155: ...specified the address of the Ethernet interface determined automatically for a given range range will be used Command with no prefix cancels the setting Prefix no Yes Change settings Yes Multiple inpu...

Page 156: ...DNS server IP address address1 Address of secondary DNS server IP address address2 Example config dhcp pool dns server 192 168 1 88 pool test_pool name server list has been saved History Version Desc...

Page 157: ...s Yes Multiple input No Synopsis config dhcp pool enable config dhcp pool no enable Example config dhcp pool enable Dhcp Server pool 111 is enabled History Version Description The ip dhcp pool enable...

Page 158: ...he chosen interface is used as the default gateway and DNS server if other addresses are not specified using commands ip dhcp pool default router and ip dhcp pool dns server Command with no prefix rem...

Page 159: ...S update has been enabled History Version Description The ip dhcp pool update dns command has been introduced 2 06 3 20 11 ip dhcp pool wpad Description Configure DHCP option 252 WPAD protocol By defa...

Page 160: ...Multiple input Yes Synopsis config ip dhcp relay lan interface config no ip dhcp relay lan interface Arguments Description Value Argument Full name or an alias of Ethernet interface through which DHC...

Page 161: ...act address of the server is not specified see ip dhcp relay server the requests will be broadcasted It is recommended to specify server address Command with no prefix removes the setting Prefix no Ye...

Page 162: ...ger Added static record for zydata local address 192 168 1 22 config no ip host zydata local 192 168 1 22 Dns Manager Record zydata local address 192 168 1 22 deleted History Version Description The i...

Page 163: ...very Manager Subnetwork scanning on interface WifiMaster0 AccessPoint1 is enabled config hotspot auto scan no interface WifiMaster0 AccessPoint1 Hotspot Discovery Manager Subnetwork scanning on interf...

Page 164: ...ate in hosts per seconds Command with no prefix resets setting to default Prefix no Yes Change settings Yes Multiple input No Interface type IP Synopsis config hotspot auto scan passive rate hps confi...

Page 165: ...an timeout 31 Hotspot Discovery Manager Auto scan host offline timeout is set to 31 s config hotspot auto scan no timeout Hotspot Discovery Manager Auto scan host offline timeout reset to default Hist...

Page 166: ...hotspot default policy command has been introduced 2 09 3 25 6 ip hotspot host Description Setup bypass or block rules for specific Hotspot clients Host rules override interface based policy Section...

Page 167: ...to host 54 e4 3a 8a f3 a7 History Version Description The ip hotspot host command has been introduced 2 06 3 25 7 ip hotspot policy Description Define the Hotspot policy for a specific interface Polic...

Page 168: ...troduced 2 06 3 25 8 ip hotspot wake Description Send Wake on LAN packet to private and protected interfaces of the host Prefix no No Change settings No Multiple input No Interface type IP Synopsis co...

Page 169: ...ger duration Duration of suspicious activity observation in minutes By default 3 value is used Integer observation window Example config ip http lockout policy 10 30 2 Http Manager Bruteforce detectio...

Page 170: ...proxy Prefix no Yes Change settings Yes Multiple input Yes Group entry config http proxy Synopsis config ip http proxy name config no ip http proxy name Arguments Description Value Argument HTTP proxy...

Page 171: ...tp proxy domain Description Set domain name that specifies the FQDN of the virtual host Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config h...

Page 172: ...The ip http proxy domain ndns command has been introduced 2 08 3 28 4 ip http proxy upstream Description Set HTTP server address for request redirecting Command with no prefix removes the setting Pref...

Page 173: ...e HTTP server is allowed for public private and protected interfaces Keyword public Access to the HTTP server is allowed for private interfaces Keyword private Access to the HTTP server is allowed for...

Page 174: ...NS addresses static settings will be active However if after registering dynamic addresses the static settings are changed by the user they become active until the new dynamic addresses are registered...

Page 175: ...s of network network or network behind the interface interface For example command ip nat Home means that all packets from the network Home passing through the router will undergo IP spoofing Prefix n...

Page 176: ...ule added History Version Description The ip nat vpn command has been introduced 2 04 3 34 ip route Description Add a static route to the routing table to describe a rule of IP packets transmission th...

Page 177: ...channel connected that requires no additional addressing within the channel If priority interface ip global is set on the interface the route is added to the system table only if there is no other hig...

Page 178: ...c then the destination address translation DNAT will occure If to address corresponds to the interface with secutity level public then source address translation SNAT will occure TCP UDP port number i...

Page 179: ...ing requests will be translated The end of the range of ports Integer end port The destination address after translation IP address to address TCP UDP port number after translation If one is not speci...

Page 180: ...parameters for public interfaces By default feature is enabled Command with no prefix disables bruteforce detection Prefix no Yes Change settings Yes Multiple input No Interface type IP Synopsis conf...

Page 181: ...ort number is used Command with no prefix resets port number to default Prefix no Yes Change settings Yes Multiple input No Synopsis config telnet port number config telnet no port Arguments Descripti...

Page 182: ...ption The ip telnet security level command has been introduced 2 08 3 37 4 ip telnet session max count Description Set the maximal number of simultaneous sessions for telnet connection By default 4 is...

Page 183: ...ent The lifetime of inactive session Can take values from 5 to 2 32 1 seconds inclusively Integer timeout Example config telnet session timeout 6 Telnet Server a session timeout value set to 6 seconds...

Page 184: ...00 Kbps History Version Description The ip traffic shape host command has been introduced 2 05 The schedule argument was added 2 08 3 39 ipv6 firewall Description Enable IPv6 firewall By default the s...

Page 185: ...S server IPv6 addresses Addresses saved in this fashion are called static as opposite to dynamic as registered by PPP or DHCP services ipv6 name server command can be entered multiple times if several...

Page 186: ...eters Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ipv6 route prefix default interface config no ipv6 route prefix default interface Arguments Description Value Argument IPv6 p...

Page 187: ...nd the subnet to an interface Command with no prefix cancels binding Prefix no Yes Change settings Yes Multiple input No Synopsis config subnet bind interface config subnet no bind interface Arguments...

Page 188: ...able SLAAC stateless autoconfiguration slaac Enable DHCPv6 server stateful autoconfiguration dhcp Example config subnet mode slaac Mode changed History Version Description The ipv6 subnet mode command...

Page 189: ...The ipv6 subnet stateless dhcp command has been introduced 2 00 3 44 isolate private Description Prohibit data transfer between any interfaces with security level private Command with no prefix cance...

Page 190: ...osts new host 123 has been created History Version Description The known host command has been introduced 2 00 3 46 ndns Description Access to a group of commands to manage KeenDNS service Prefix no N...

Page 191: ...red on the cloud server IP address HTTP traffic is tunneled to the Keenetic Lite cloud Hostname is registered on the Keenetic Lite WAN address direct Code for domain transmission to another Keenetic d...

Page 192: ...alt Binary jZnm2OcHFB9fT3pJ dst 148 251 63 154 17047 MsgCack t 444 item hl false o lock reply d Success prepare NDSS key Binary yPrQwfa 4yn676wk alt Binary SyptNue2bys mxiO dst 91 218 112 165 16047 M...

Page 193: ...k name name Arguments Description Value Argument The hostname for allocation String name Example ndns check name testname list item name testname domain mykeenetic by available no item name testname d...

Page 194: ...Name Delete DNS Hostname Booking code 200 icon tick hl true layout message client geo RU ip 81 200 27 56 format clean date 2016 09 22T10 52 35 685Z standalone false reason The name is un booked detail...

Page 195: ...hxe5EtXyc alt Binary t JluEWuGguJ 28h dst 46 105 148 81 17047 MsgCack t 161 item hl false o lock reply d Success prepare NDSS key Binary SyptNue2bys mxiO alt Binary yPrQwfa 4yn676wk dst 148 251 129 15...

Page 196: ...tle Domain Name field name address title IP Address field name updated title Updated type date variant date field name access title Access Mode default unknown field name transfer title Transfer name...

Page 197: ...e 2016 09 22T12 07 32 746Z standalone false menu src index __auth force __role context menu ref 2fndns 2fupdateBooking fields field name name title Public Name field name domain title Domain Name fiel...

Page 198: ...ynopsis config ntce shaping config no ntce shaping Example config ntce shaping Ntce Manager Shaping enabled History Version Description The ntce shaping command has been introduced Previous command na...

Page 199: ...server 2 ru pool ntp org server 2 ru pool ntp org has been added History Version Description The ntp server command has been introduced 2 00 3 50 ntp sync period Description Set a period for time sin...

Page 200: ...config no opkg chroot Opkg Manager Chroot disabled History Version Description The opkg chroot command has been introduced 2 05 C 3 3 52 opkg disk Description Configure partition for opkg software Th...

Page 201: ...ription Disable DNS proxy when opkg disk is mounted DNS override allows to replace embedded DNS proxy with a custom service such as BIND or Dnsmasq Command with no prefix disables DNS override Prefix...

Page 202: ...gured init script opt etc init d rc unslung config no opkg initrc Opkg Manager Init script reset to default opt etc initrc History Version Description The opkg initrc command has been introduced 2 05...

Page 203: ...ig opkg timezone UTC Opkg Manager Enabled timezone UTC config no opkg timezone Opkg Manager Timezone reset to undefined History Version Description The opkg timezone command has been introduced 2 05 C...

Page 204: ...r address of remote host Host name hostname Example config pchk host 8 8 8 8 PingCheck Profile profile TEST uses host 8 8 8 8 for testing History Version Description The ping check profile host comman...

Page 205: ...t by obtaining of which the Internet at the interface considered present By default value 1 is used Command with no prefix resets to default Prefix no Yes Change settings Yes Multiple input No Synopsi...

Page 206: ...e by TCP connection establishing to specified port connect Example config pchk mode connect PingCheck Profile profile TEST uses connect mode History Version Description The ping check profile mode com...

Page 207: ...config pchk power cycle PingCheck Profile profile 123 enable usb power cycle History Version Description The ping check profile power cycle command has been introduced 2 04 3 56 7 ping check profile...

Page 208: ...hk no timeout Arguments Description Value Argument Response time in seconds Can take values from 1 to 10 inclusively Integer time Example config pchk timeout 4 PingCheck Profile profile TEST timeout i...

Page 209: ...th no prefix disables specified accelerator Prefix no Yes Change settings Yes Multiple input No Synopsis config ppe engine config no ppe engine Arguments Description Value Argument engine Software acc...

Page 210: ...d History Version Description The pppoe pass command has been introduced 2 00 3 59 schedule Description Access to a group of commands to configure the schedule If the schedule is not found the command...

Page 211: ...Action of the beginning start Action of the end stop The minutes Integer min The hours Integer hour Days of the week separated by commas 0 and 7 mean Sunday means daily Integer dow Example config sche...

Page 212: ...h Command with no prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis config service cloud control config no service cloud control Example config service cloud contro...

Page 213: ...hin the network As soon as there are enough settings the service will be enabled automatically Command with no prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis con...

Page 214: ...fig service http config no service http Example config service http HTTP server enabled History Version Description The service http command has been introduced 2 00 3 65 service igmp proxy Descriptio...

Page 215: ...prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis config service ipsec config no service ipsec Example config service ipsec IpSec Manager Service enabled History V...

Page 216: ...Change settings Yes Multiple input No Synopsis config service ntp client config no service ntp client Example config service ntp client NTP client enabled History Version Description The service ntp...

Page 217: ...gure the device Command with no prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis config service telnet config no service telnet Example config service tel Telnet s...

Page 218: ...ltiple input No Synopsis config service upnp config no service upnp History Version Description The service upnp command has been introduced 2 00 3 73 service vpn server Description Enable VPN server...

Page 219: ...ations Description Show list of wireless stations associated with an access point If you use no argument the entire list of wireless stations will be displayed Prefix no No Change settings No Multiple...

Page 220: ...mode 11n gi 800 rssi 41 mcs 15 History Version Description The show associations command has been introduced 2 00 3 74 2 show clock date Description Show the current system date Prefix no No Change se...

Page 221: ...no No Change settings No Multiple input No Synopsis show clock timezone list Example show clock timezone list timezones tz locality Adak stdoffset 36000 dstoffset 32400 tz locality Aden stdoffset 108...

Page 222: ...Name of selected IKE key String name Example show crypto ike key IpSec ike_key name test type address id 10 10 10 10 ike_key name test2 type any id History Version Description The show crypto ike key...

Page 223: ...true phase1 name test unique_id 572 ike_state ESTABLISHED establish_time 1451301596 rekey_time 0 reauth_time 1451304277 local_addr 10 10 10 15 remote_addr 10 10 10 20 ike_version 2 local_spi 00a6ebfc...

Page 224: ...on the interface To manage 802 1 client status on the interface authentication must be configured with interface authentication group of commands Prefix no No Change settings No Interface type Etherne...

Page 225: ...Example show drivers module name rt2860v2_sta size 546736 used 0 subs module name rt2860v2_ap size 554192 used 2 subs module name rndis_host size 5024 used 0 subs module name dwc_otg size 68416 used...

Page 226: ...e status of switch ports The command show interface displays different information depending on the interface type In particular for FastEthernet0 Vlan1 switch it shows current state of physical ports...

Page 227: ...alue Argument Full name or an alias of the interface to display Interface name name Output Value Element Root node members Interface name interface Link state of interface link Attribute of inheritanc...

Page 228: ...nnels Record number in the list channel index Channel number number Ability to expand channel above ext 40 above Ability to expand channel below ext 40 below Ability to expand channel up to 80 MHz vhc...

Page 229: ...channel index 7 number 8 ext 40 above yes ext 40 below yes vht 80 yes History Version Description The show interface channels command has been introduced 2 03 3 74 11 show interface country codes Des...

Page 230: ...code AL country Albania country code code DZ country Algeria country code code AR country Argentina country code code AM country Armenia country code code AU country Australia History Version Descrip...

Page 231: ...6 0 00 30 48 93 91 a7 6 0 f0 c1 f1 95 c3 fb 5 0 b8 ca 3a 8a c7 43 6 0 ec 43 f6 da 78 79 5 0 10 7b ef 59 7b 61 2 0 ec 43 f6 ff f8 8b 6 0 58 8b f3 65 8c 91 5 0 ec 43 f6 cf 0e ef 2 0 00 ee bd a1 18 51 6...

Page 232: ...020 FFFF 0x0022 FFC1 0x0024 9201 0x0026 FFFF 0x0028 43EC 0x002A 04F6 0x002C 052B 0x002E FFFF 0x0030 758E 0x0032 4301 0x0034 FF22 0x0036 0025 0x0038 FFFF 0x003A 012D 0x003C FFFF 0x003E FAD9 0x0040 88CC...

Page 233: ...nt0 stat rxpackets 137033 rxbytes 23915722 rxerrors 0 rxdropped 0 txpackets 847802 txbytes 1192583473 txerrors 0 txdropped 0 timestamp 11754 721178 History Version Description The show interface stat...

Page 234: ...ce wps status Description Show the access point WPS status Prefix no No Change settings No Multiple input No Interface type WiFi Synopsis show interface name wps status Arguments Description Value Arg...

Page 235: ...isplay the contents of the ARP cache Prefix no No Change settings No Multiple input No Synopsis show ip arp Example show ip arp IP MAC Interface 192 168 75 209 9c b7 0d 91 e7 31 Home 82 135 72 150 00...

Page 236: ...s show ip dhcp bindings pool Arguments Description Value Argument The pool name String pool Example show ip dhcp bindings _WEBADMIN lease ip 192 168 15 211 mac 00 26 c7 4a e0 16 expires 289 hostname l...

Page 237: ...lease default yes 25200 state down debug no History Version Description The show ip dhcp pool command has been introduced 2 03 3 74 20 show ip hotspot Description Show hotspot hosts Prefix no No Chang...

Page 238: ...mcs 7 host mac 20 aa 4b 5c 09 0e via 20 aa 4b 5c 09 0e ip 192 168 1 51 hostname Julia PC name interface id Bridge0 name Home description Home network Wired and wireless hosts expires 212967 registered...

Page 239: ...ample show ip name server server address 82 131 72 251 domain global no server address 82 131 72 15 domain global no server address 82 132 76 130 domain zydata ru global yes History Version Descriptio...

Page 240: ...2 44423 82 138 7 164 6482 16 tcp 10 1 30 34 46655 96 55 147 21 443 2 96 55 147 21 443 82 138 7 164 46655 0 udp 10 1 30 34 6482 213 199 179 158 40006 1 213 199 179 158 40006 82 138 7 164 6482 1 History...

Page 241: ...Home 0 History Version Description The show ip route command has been introduced 2 00 3 74 24 show ipsec Description Show info about IPsec IKE strongSwan service status Prefix no No Change settings N...

Page 242: ...HA1_96 PRF_HMAC_SHA1 MODP_1024 test 304 INSTALLED TUNNEL reqid 185 ESP in UDP SPIs ca59bfcf_i cde23d83_o test 304 AES_CBC_256 HMAC_SHA1_96 10055 bytes_i 164 pkts 0s ago 10786 bytes_o 139 pkts 0s ago r...

Page 243: ...x no No Change settings No Multiple input No Synopsis show ipv6 prefixes Example show ipv6 prefixes prefix prefix 2001 db8 64 interface ISP valid lifetime infinite preferred lifetime infinite prefix p...

Page 244: ...interface Home route_ destination fd01 db8 43 64 gateway interface Home History Version Description The show ipv6 routes command has been introduced 2 00 3 74 28 show last change Description Show when...

Page 245: ...g normal operation I Jul 12 12 08 40 wmond WifiMaster0 AccessPoint0 STA d8 b3 77 36 05 c1 occurred MIC different in key handshaking I Jul 12 12 08 40 radvd 228 attempting to reread config file I Jul 1...

Page 246: ...yes access direct ttp direct yes interface GigabitEthernet1 address 41 189 34 56 History Version Description The show ndns command has been introduced 2 07 3 74 31 show netfilter Description Show inf...

Page 247: ...he show ntce hosts command has been introduced Previous command name is show dpi hosts 2 09 3 74 33 show ntp status Description Show NTP system settings NTP state general info The time elapsed since t...

Page 248: ...splays information about all profiles Prefix no No Change settings No Multiple input No Synopsis show ping check profile_name Arguments Description Value Argument Profile name String profile_name Exam...

Page 249: ...ip_conntrack_tcp_timeout_established 1200 set net ipv4 netfilter ip_conntrack_udp_timeout 60 set net ipv4 tcp_fin_timeout 30 set net ipv4 tcp_keepalive_time 120 set net ipv6 conf all forwarding 1 host...

Page 250: ...0 up interface PPTP0 description Office VPN peer crypton zydata ru lcp echo 30 3 ipcp default route ipcp name servers ccp security level public authentication identity 00441 authentication password 12...

Page 251: ...24ba6e5c1fec3957e587a21535b tag cli tag cifs tag http tag ftp user test password md5 baadfb946f5d516379cfd75e31e409d9 tag readonly service dhcp service dns proxy service ftp service cifs service http...

Page 252: ...ple input No Interface type Radio Synopsis show site survey name Arguments Description Value Argument Full name or an alias of the interface You can see the list of available interfaces with help of s...

Page 253: ...how system Example config show system hostname Undefined domainname WORKGROUP cpuload 0 memory 13984 28976 swap 0 0 uptime 153787 History Version Description The show system command has been introduce...

Page 254: ...l will be displayed tcp Rules with UDP protocol will be displayed udp Rules with specified interface name will be displayed Interface name interface Rules with specified port will be displayed Integer...

Page 255: ...mware_progress components ddns dot1x interface extras miniupnpd nathelper ftp nathelper pptp nathelper sip ppe trafficcontrol cloudcontrol base components corewireless dhcpd l2tp igmp easyconfig pingc...

Page 256: ...xdropped 0 txpackets 1504 txbytes 652230 txerrors 0 txdropped 0 Core Configurator done History Version Description The show vpn server command has been introduced 2 04 3 75 snmp community Description...

Page 257: ...d Command with no prefix resets setting Prefix no Yes Change settings Yes Multiple input No Synopsis config snmp contact contact config no snmp contact Arguments Description Value Argument SNMP contac...

Page 258: ...sion Description The snmp location command has been introduced 2 08 3 78 system Description Access to a group of commands to configure global parameters Prefix no No Change settings No Multiple input...

Page 259: ...em reboot Reboot Switch Wi Fi on off WifiToggle Switch Guest Wi Fi on off WifiGuestApToggle Start WPS for the Guest Wi Fi Guest Wi Fi should be enabled WpsStartGuestAp Start WPS 2 4GHz only WpsStartMa...

Page 260: ...s timezone to default GMT Prefix no Yes Change settings Yes Multiple input No Synopsis system clock timezone locality system no clock timezone locality Arguments Description Value Argument Name of the...

Page 261: ...ystem configuration asynchronously Prefix no No Change settings Yes Multiple input No Synopsis system configuration save Example system configuration save Saving configuration History Version Descript...

Page 262: ...Arguments Description Value Argument The domain name to assign String domain Example system domainname zydata Domainname saved History Version Description The system domainname command has been introd...

Page 263: ...e device Command with no prefix turns LEDs on Prefix no Yes Change settings Yes Multiple input No Synopsis system led shutdown mode system no led shutdown Arguments Description Value Argument mode Shu...

Page 264: ...iption Enable repeated message reduction By default the setting is enabled Command with no prefix disables the feature Prefix no Yes Change settings Yes Multiple input No Synopsis system log reduction...

Page 265: ...og server command has been introduced 2 00 3 78 13 system log suppress Description Add message suppression rule Prefix no Yes Change settings Yes Multiple input Yes Synopsis system log suppress ident...

Page 266: ...Description The system mode command has been introduced 2 05 3 78 15 system reboot Description Reboot the system If the parameter is set reboot is executed after a timeout in seconds If the timer is...

Page 267: ...lt value to the specified parameter before the first change Prefix no Yes Change settings Yes Multiple input Yes Synopsis system set name value system no set name Arguments Description Value Argument...

Page 268: ...ription Access to a group of commands to test the environment Prefix no No Change settings No Multiple input No Group entry tools Synopsis config tools History Version Description The tools command ha...

Page 269: ...The tools arping command has been introduced 2 00 3 79 2 tools ping Description Send Echo Request requests of ICMP protocol to specified network node and register received Echo Reply responses The tim...

Page 270: ...p min avg max 1 06 1 49 2 35 ms Process terminated History Version Description The tools ping command has been introduced 2 00 3 79 3 tools ping6 Description Send Echo Request requests of ICMPv6 proto...

Page 271: ...cd icmp_req 1 ttl 64 time 7 18 ms 60 bytes from fd4b f12b 5d59 0 1108 4407 b772 20cd fd4b f12b 5d59 0 1108 4407 b772 20cd icmp_req 2 ttl 64 time 8 42 ms 60 bytes from fd4b f12b 5d59 0 1108 4407 b772 2...

Page 272: ...s traceroute Description Show the route to a network host Prefix no No Change settings No Multiple input No Synopsis tools traceroute host count count interval interval wait time wait time packet size...

Page 273: ...ts String source interface type TCP protocol tcp UDP protocol Used by default udp ICMP protocol icmp Type Of Service Default value 0 Value must be in the range 0 255 Integer tos Example tools tracerou...

Page 274: ...ters Prefix no No Change settings No Multiple input No Group entry udpxy Synopsis config udpxy History Version Description The udpxy command has been introduced 2 03 3 80 1 udpxy buffer size Descripti...

Page 275: ...dpxy no buffer timeout Arguments Description Value Argument Timeout value in seconds Can take values from 1 to 60 1 unlimited timeout Integer timeout Example udpxy buffer timeout 10 Udpxy Manager a ho...

Page 276: ...as been introduced 2 02 3 80 4 udpxy port Description Specify port for HTTP requests By default 4022 value is used Command with no prefix resets setting to default Prefix no Yes Change settings Yes Mu...

Page 277: ...m 0 to 3600 Integer renew interval Example udpxy renew interval 120 Udpxy Manager a renew subscription interval value set to 120 sec History Version Description The udpxy renew interval command has be...

Page 278: ...ents Description Value Argument protocol Rule for TCP protocol will be added deleted tcp Rule for UDP protocol will be added deleted udp Rule for specified interface name will be added Interface name...

Page 279: ...n Description The upnp lan command has been introduced 2 00 3 83 upnp redirect Description Add UPnP port translation rule Command with no prefix removes rule from the list If you use no arguments the...

Page 280: ...Integer index History Version Description The upnp redirect command has been introduced 2 00 3 84 user Description Access to a group of commands to configure user account parameters If specified user...

Page 281: ...input No Synopsis config user password md5 hash password config user no password Arguments Description Value Argument MD5 hash value String hash Value of the password in open form from which the hash...

Page 282: ...cli Access to the Web interface http Connection to an integrated FTP server ftp Connection to the Windows files and printers service cifs Access to the BitTorrent client GUI torrent Restrict commands...

Page 283: ...Value Argument Full name or an alias of the interface You can see the list of available interfaces with help of interface command Interface name interface Example vpn server interface FastEthernet0 Vl...

Page 284: ...end LCP echo request frames only if no traffic was received from the peer since the last echo request was sent Keyword adaptive Example vpn server lcp echo 5 3 LCP echo parameters updated History Vers...

Page 285: ...mppe optional vpn server no mppe optional Example vpn server mppe optional Core Configurator done History Version Description The vpn server mppe optional command has been introduced 2 04 3 85 5 vpn...

Page 286: ...ix no Yes Change settings Yes Multiple input No Synopsis vpn server mtu value vpn server no mtu Arguments Description Value Argument MTU value Can take values from 128 to 1500 inclusively Integer valu...

Page 287: ...nge settings Yes Multiple input No Synopsis vpn server pool range begin size vpn server no pool range Arguments Description Value Argument Start address of pool IP address begin Pool size If not defin...

Page 288: ...duced 2 04 3 86 yandexdns Description Access to a groupe of commands to configure Yandex DNS profiles Prefix no No Change settings No Multiple input No Group entry yandexdns Synopsis config yandexdns...

Page 289: ...es for adults family History Version Description The yandexdns assign command has been introduced 2 01 3 86 2 yandexdns check availability Description Check availability of Yandex DNS service Prefix n...

Page 290: ...yandexdns enable yandexdns no enable Example yandexdns enable YandexDns Client Yandex DNS is enabled History Description Version The yandexdns enable command has been introduced 2 01 Command Reference...

Page 291: ...sponds to a visual prompt by typing in a command on a specified line receives a response back from the system and then enters another command and so forth Compression Control Protocol is used for esta...

Page 292: ...secret from the private key of one party and the public key of the other Since the IPsec symmetrical keys are derived from this DH key shared between the peers at no point are symmetric keys actually...

Page 293: ...ted communication channel by using the Diffie Hellman key exchange algorithm to generate a shared secret key to encrypt further IPsec communications Internet Protocol is the principal communications p...

Page 294: ...CP packets The LCP packet either accepts or rejects the identity of its linked peer agrees up on packet size limits and looks for common misconfiguration errors LCP packets are divided into three clas...

Page 295: ...ment user service and security functions as well as internet data mining eavesdropping and internet censorship Although DPI technology has been used for Internet management for many years some advocat...

Page 296: ...d at 1 Mbps and header at 2 Mbps Total short preamble transfer time is a constant at 96 usec Not compatible with legacy IEEE 802 11 systems operating at 1 and 2 Mbps Protocol Field Compression is a me...

Page 297: ...itself acquire a TCP IP address and use a discovery protocol based on the HTTP to announce its presence on the network to other devices Virtual LAN is a local area network with a definition that maps...

Page 298: ...less networks to add new devices and to enable security Wired Equivalent Privacy is a security algorithm for IEEE 802 11 wireless networks WEP recognizable by the key of 10 or 26 hexadecimal digits is...

Page 299: ...Peer Ppp Vlan Secure Ethernet OpenVpn Pvc FastEthernet GigabitEthernet Pppoe PppTunnel Pptp L2tp Figure A 2 Tunnel interfaces Ethernet Secure IP SecureIPTunnel Peer Tunnel6to4 Tunnel6 Tunnel6in4 Tunne...

Page 300: ...et Ppp Usb UsbModem YotaOne UsbEthernet UsbLte CdcEthernet Figure A 4 Wi Fi interfaces Wireless WiFi Radio Ethernet WiFiMaster WiFiStation AccessPoint Command Reference Guide Keenetic Lite KN 1310 300...

Page 301: ...es and their parameters The words command and resource are used interchangeably in this manual Parameters are listed in the Arguments table of each command They can be passed as part of the request us...

Page 302: ...quests must be submitted in a free form JSON 1 that is interpreted as a batch of parameters and nested settings depending on the data type Conversely HTTP GET returns JSON data that was previously POS...

Page 303: ...t resource apply to all nested resources within the nearest surrounding scope Example B 2 Create and enable a PPP interface Call interface to create a new PPPoE connection as described in Section 3 16...

Page 304: ...type application json version interface name Home Response is an array of two elements in accordance with the request version release 2 12 A 1 0 1 arch mips ndm exact 0 cbf8590 cdate 15 Jan 2018 bsp e...

Page 305: ...to factory defaults authentication is not required Example B 4 XML API call Execute the show interface command for the WAN interface named ISP This interface exists by default in Keenetic Lite POST c...

Page 306: ...ement is always sent from the user agent to the device The device always responds with a response The id attribute can be used to establish one to one correspondence between them Figure B 1 Request El...

Page 307: ...3 on page 23 B 2 2 Configuration Request Configuration request can be used to get configured parameters Web interface uses this kind of request to fill out the HTML forms Figure B 4 Configuration Req...

Page 308: ...Figure B 6 Response Packet packet response id 1 response content response response id 2 no response for id 2 packet Command Reference Guide Keenetic Lite KN 1310 308 Appendix B HTTP API...

Page 309: ...sysUpTime SNMPv2 MIB sysContact SNMPv2 MIB sysName SNMPv2 MIB sysLocation SNMPv2 MIB sysServices C 2 IF MIB OID 1 3 6 1 2 1 2 and 1 3 6 1 2 1 31 The following data elements are supported Basical OID...

Page 310: ...ts IF MIB ifInBroadcastPkts IF MIB ifOutMulticastPkts IF MIB ifOutBroadcastPkts IF MIB ifHCInOctets IF MIB ifHCInUcastPkts IF MIB ifHCInMulticastPkts IF MIB ifHCInBroadcastPkts IF MIB ifHCOutOctets IF...

Page 311: ...st Keenetic Lite III counter overflow event time set in IF MIB ifCounterDiscontinuityTime Keenetic Omni Keenetic Omni II 16 bit per port packet counters only Last counter Keenetic Start II Keenetic Li...

Page 312: ...B udpInErrors UDP MIB udpOutDatagrams UDP MIB udpHCInDatagrams UDP MIB udpHCOutDatagrams C 5 HOST RESOURCES MIB OID 1 3 6 1 2 1 25 The following data elements are supported HOST RESOURCES MIB hrSystem...

Page 313: ...NMP MIB dskPercentNode System load info UCD SNMP MIB laIndex UCD SNMP MIB laNames UCD SNMP MIB laLoad UCD SNMP MIB laConfig UCD SNMP MIB laLoadInt UCD SNMP MIB ssCpuRawUser UCD SNMP MIB ssCpuRawNice U...

Page 314: ...Command Reference Guide Keenetic Lite KN 1310 314 Appendix C SNMP MIB...

Page 315: ...list of algorithms is indicated encryption with key length hash function for HMAC forming PFS mode NO if disabled D 1 weak AES128 SHA1 MODP1024 IKE AES128 SHA1 MODP768 AES128 MD5 MODP1024 AES128 MD5 M...

Page 316: ...MODP1536 AES128 SHA1 MODP1024 3DES SHA1 MODP1536 3DES SHA1 MODP1024 AES128 SHA1 NO IPsec SA AES256 SHA1 NO 3DES SHA1 NO encryption aes cbc 256 Proposal encryption aes cbc 128 encryption 3des integrity...

Page 317: ...roup 2 D 4 strong AES256 SHA1 MODP2048 IKE AES256 SHA1 MODP1536 AES128 SHA1 MODP2048 AES128 SHA1 MODP1536 AES256 SHA1 MODP1536 IPsec SA AES256 SHA1 MODP2048 AES256 SHA1 MODP2048 AES256 SHA1 MODP1536 e...

Page 318: ...SHA1 NO 3DES SHA1 NO DES SHA1 NO AES128 MD5 NO 3DES MD5 NO AES128 SHA1 MODP1024 3DES SHA1 MODP1024 DES SHA1 MODP1024 AES128 SHA1 MODP768 3DES SHA1 MODP768 DES SHA1 MODP768 AES128 MD5 MODP1024 3DES MD...

Page 319: ...1 MODP1024 IPsec SA AES128 SHA1 NO AES256 SHA1 NO 3DES SHA1 NO AES256 SHA1 MODP1536 AES128 SHA1 MODP1536 3DES SHA1 MODP1536 AES256 SHA1 MODP1024 3DES SHA1 MODP1024 encryption aes cbc 256 Proposal encr...

Page 320: ...SHA1 NO AES256 SHA1 NO AES128 SHA1 NO AES256 SHA1 MODP1536 AES128 SHA1 MODP1536 3DES SHA1 MODP1536 AES256 SHA1 MODP1024 3DES SHA1 MODP1024 encryption aes cbc 256 Proposal encryption aes cbc 128 encry...

Reviews:

No comments

Brands by name

Popular brands

Load more brands