manualshive.com logo in svg

THOMSON SpeedTouch 585, Reference Manual, Page: 363 / 682

Share
Download
THOMSON SpeedTouch 585 Reference Manual Download Page 363

Firewall Commands

E-DOC-CTC-20050531-0058 v1.0

343

firewall rule debug stats

Show the firewall rule statistics.

SYNTAX:

where:

EXAMPLE:

RELATED COMMANDS:

firewall rule debug stats

[chain = <chain name>]

[index = <number>]

chain

The name of the chain for which the statistics must be shown.

Note

If not specified, the statistics for all the chains will be shown.

OPTIONAL

index

The number of the rule in the chain.

Note

If not specified, the statistics for all the rules in the chain are shown.

OPTIONAL

=>firewall rule debug stats
chain

index

packets

bytes

----------------------------------------------------------------------------
sink

1

0

0

2

4

192

forward

1

0

0

2

0

0

3

10

480

source

1

0

0

sink_fire

1

0

0

source_fire

1

0

0

forward_level

1

10

480

sink_system_service

1

1

48

2

0

0

3

0

0

4

0

0

5

0

0

6

0

0

7

0

0

8

0

0

9

0

0

10

0

0

11

0

0

12

0

0

13

0

0

14

1

48

15

0

0

16

0

0

17

2

96

forward_level_BlockAll

1

0

0

forward_level_Standard

1

0

0

forward_level_Disabled

1

10

480

=>

firewall rule debug clear 

Clear the firewall rule statistics.

Summary of Contents for SpeedTouch 585

Page 1: ...SpeedTouch 585 Wireless Residential ADSL Gateway CLI Reference Guide Release R5 3 1...

Page 2: ......

Page 3: ...SpeedTouch 585 CLI Reference Guide R5 3 1...

Page 4: ...ountries UNIX is a registered trademark of UNIX System Laboratories Incorporated Apple and Mac OS are registered trademarks of Apple Computer Incorporated registered in the United States and other cou...

Page 5: ...undle attach 18 atm bundle config 19 atm bundle clear 20 atm bundle delete 21 atm bundle detach 22 atm bundle flush 23 atm bundle ifadd 24 atm bundle ifconfig 25 atm bundle ifdelete 26 atm bundle list...

Page 6: ...elete 53 atm qosbook ctdlist 54 atm qosbook delete 55 atm qosbook flush 56 atm qosbook list 57 AutoPVC Commands 59 autopvc config 60 autopvc list 61 Config Commands 63 config delete 64 config dump 65...

Page 7: ...dhcp client flush 101 dhcp client ifadd 102 dhcp client ifattach 103 dhcp client ifconfig 104 dhcp client ifdelete 106 dhcp client iflist 107 dhcp client ifrelease 108 dhcp client ifrenew 110 dhcp cli...

Page 8: ...er option tmpllist 142 dhcp server pool add 143 dhcp server pool config 144 dhcp server pool delete 146 dhcp server pool flush 147 dhcp server pool list 148 dhcp server pool optadd 149 dhcp server poo...

Page 9: ...dsd debug proxy 187 dsd debug recycling 188 dsd debug stats 189 dsd intercept config 190 dsd intercept stats 192 dsd syslog config 193 dsd syslog list 194 dsd urlfilter config 195 dsd urlfilter rule...

Page 10: ...t 225 dsd webfilter server modify 226 dsd webfilter standard category add 227 dsd webfilter standard category create 228 dsd webfilter standard category delete 229 dsd webfilter standard category flus...

Page 11: ...h flush 271 eth bridge clear 272 eth bridge config 273 eth bridge flush 274 eth bridge ifadd 275 eth bridge ifattach 276 eth bridge ifconfig 277 eth bridge ifdelete 278 eth bridge ifdetach 279 eth bri...

Page 12: ...all clear 316 firewall list 317 firewall chain add 318 firewall chain delete 319 firewall chain flush 320 firewall chain list 321 firewall debug clear 322 firewall debug stats 323 firewall debug trace...

Page 13: ...tmgr delete 360 hostmgr flush 361 hostmgr list 362 IDS Commands 363 ids clear 364 ids config 365 ids parser list 366 ids parser modify 367 ids pattern clear 368 ids pattern list 369 ids pattern stats...

Page 14: ...p rtlist 404 ip auto flush 405 ip auto ifadd 406 ip auto ifattach 407 ip auto ifconfig 408 ip auto ifdelete 410 ip auto ifdetach 411 ip auto iflist 412 ip debug httpprobe 413 ip debug ping 414 ip debu...

Page 15: ...modify 449 label rule debug clear 450 label rule debug stats 451 label rule debug traceconfig 452 Language Commands 453 language config 454 language delete 455 language list 456 MLP Commands 457 mlp f...

Page 16: ...te 488 nat tmpllist 489 nat tmplinst 490 PPP Commands 491 ppp flush 492 ppp ifadd 493 ppp ifattach 494 ppp ifconfig 495 ppp ifdelete 499 ppp ifdetach 500 ppp iflist 501 ppp ifscan 502 ppp rtadd 503 pp...

Page 17: ...te 530 service system ifadd 531 service system ifdelete 532 service system ipadd 533 service system ipdelete 534 service system list 535 service system mapadd 536 service system mapdelete 537 service...

Page 18: ...67 software version 568 System Commands 569 system config 570 system flush 572 system locale 573 system reboot 575 system reset 576 system debug autosave 577 system debug stats 578 system ra config 57...

Page 19: ...ify 615 wireless macacl register 616 wireless secmode config 617 wireless secmode wep 618 wireless secmode wpa psk 619 wireless stations list 620 wireless wds add 621 wireless wds config 622 wireless...

Page 20: ...NTP Module 634 Software Module 635 UPnP Module 635 Wireless Module 635 Supported Key Names 637 Supported IP Protocols 638 Supported TCP UDP Port Names 639 Supported ICMP Type Names 642 Supported Syste...

Page 21: ...R5 3 1 For readability all are referred to as SpeedTouch throughout this document unless a specific variant is concerned Contents The CLI Reference Guide describes all the available CLI commands of t...

Page 22: ...ive mutually exclusive elements Square brackets indicate optional elements Braces indicate a required choice Braces within square brackets indicate a required choice within an optional element string...

Page 23: ...is chapter describes the commands of the adsl command group Contents This chapter covers the following commands adsl config Show set the Asymmetric Digital Subscriber Line ADSL configuration 4 adsl in...

Page 24: ...nfig opermode multimode multi_adsl2 multi_readsl2 multi_adsl2plus trace disabled enabled opermode The operational mode of the SpeedTouch Choose between multimode multi_adsl2 multi_readsl2 multi_adsl2p...

Page 25: ...ecific 0000 0000 StandardRevisionNr 00 00 Downstream Upstream Margin dB 26 0 18 0 Attenuation dB 0 0 2 0 OutputPower dBm 4 0 11 5 Available Bandwidth Cells s Kbit s Downstream 14490 6144 Upstream 1509...

Page 26: ...ADSL Commands E DOC CTC 20050531 0058 v1 0 6...

Page 27: ...dle flush Flush all bundles 23 atm bundle ifadd Add an interface on a bundle 24 atm bundle ifconfig Configure an interface from a bundle 25 atm bundle ifdelete Remove an interface from a bundle 26 atm...

Page 28: ...Delete an existing phonebook entry 46 atm phonebook flush Flush all the phonebook entries 47 atm phonebook list Display the current phonebook 48 atm qosbook add Add a new QoS book entry 49 atm qosbook...

Page 29: ...ATM Commands E DOC CTC 20050531 0058 v1 0 9 atm flush Flush all Asynchronous Transfer Mode ATM interfaces SYNTAX atm flush...

Page 30: ...n will double as interface name REQUIRED atm iflist atm_0_35 dest atm_pvc_0_35 Retry 10 QoS default Encaps vcmux Fcs disabled Ulp mac Connection State connected atm ifadd intf RtPPPoA_atm atm iflist a...

Page 31: ...default Encaps vcmux Fcs off Ulp mac Connection State connected RtPPPoA_atm dest RtPPPoA Retry 10 QoS default Encaps vcmux Fcs off Ulp ppp Connection State not connected atm ifattach intf RtPPPoA_atm...

Page 32: ...pe of encapsulation to be used for this ATM interface Choose between llc Logical Link Control LLC Sub Network Access Protocol SNAP vcmux Virtual Channel MUltipleXing VCMUX The default is llc OPTIONAL...

Page 33: ...m_pvc_8_35 Retry 10 QoS default Encaps llc Fcs disabled Ulp mac Connection State not connected atm ifconfig intf atm_8_35 dest atm_pvc_8_35 encaps vcmux ulp ppp atm iflist atm_0_35 dest atm_pvc_0_35 R...

Page 34: ...35 dest atm_pvc_0_35 Retry 10 QoS default Encaps vcmux Fcs off Ulp mac Connection State connected RtPPPoA_atm dest RtPPPoA Retry 10 QoS default Encaps vcmux Fcs off Ulp ppp Connection State connected...

Page 35: ...default Encaps vcmux Fcs off Ulp mac Connection State connected RtPPPoA_atm dest RtPPPoA Retry 10 QoS default Encaps vcmux Fcs off Ulp ppp Connection State connected atm ifdetach intf RtPPPoA_atm atm...

Page 36: ...e shown OPTIONAL atm iflist atm_0_35 dest atm_pvc_0_35 Retry 10 QoS default Encaps vcmux Fcs off Ulp mac Connection State connected RtPPPoA_atm dest RtPPPoA Retry 10 QoS default Encaps vcmux Fcs off U...

Page 37: ...string name The name of the new bundle REQUIRED atm bundle add name myBundle atm bundle list myBundle Connection state not connected Retry 10 Policy priority Propagate disabled TX requested bytes 0 re...

Page 38: ...bundle attach name string name The name of the bundle to be attached REQUIRED atm bundle attach name myBundle atm bundle list myBundle Connection state connected Retry 10 Policy priority Propagate di...

Page 39: ...ets of the same connection will be sent via the same interface The default is priority OPTIONAL propagate Enable or disable propagation of packets When propagation is enabled packets are sent via the...

Page 40: ...20 atm bundle clear Clear the bundle statistics SYNTAX where atm bundle clear name string name The name of the bundle for which the statistics must be cleared Note If not specified the statistics for...

Page 41: ...m bundle delete Delete a bundle of interfaces SYNTAX where RELATED COMMANDS atm bundle delete name string name The name of the bundle to be deleted REQUIRED atm bundle add Add a new bundle of interfac...

Page 42: ...50531 0058 v1 0 22 atm bundle detach Detach a bundle of interfaces SYNTAX where RELATED COMMANDS atm bundle detach intf string intf The name of the bundle to be detached REQUIRED atm bundle attach Att...

Page 43: ...ATM Commands E DOC CTC 20050531 0058 v1 0 23 atm bundle flush Flush all bundles SYNTAX atm bundle flush...

Page 44: ...name of the ATM interface to be added REQUIRED index A number between 0 and 6 Represents the index of the ATM interface OPTIONAL atm bundle ifadd name myBundle intf myATMintf atm bundle list myBundle...

Page 45: ...e name of the bundle from which an ATM interface must be configured REQUIRED intf The name of the ATM interface to be configured REQUIRED state Enable or disable the ATM interface The default is enabl...

Page 46: ...string intf string name The name of the bundle from which an ATM interface must be removed REQUIRED intf The name of the ATM interface to be removed REQUIRED atm bundle iflist Test dest none Retry 10...

Page 47: ...ection state not connected Retry 10 Policy priority TX requested bytes 0 requested frames 0 TX bytes 0 frames 0 RX bytes 0 frames 0 Interface Test State enabled Selector 0 15 TX bytes 0 frames 0 RX by...

Page 48: ...0 dsl1 atm2 atm3 aal5 atm5 or number state disabled enabled config port The port for which CAC is configured REQUIRED state Enable disable CAC for an ATM port REQUIRED Administrator atm cac config por...

Page 49: ...trator atm cac list CAC port dsl0 state enabled CAC port dsl1 state enabled CAC port atm2 state enabled CAC port aal5 state disabled CAC port atm5 state disabled Overbooking realtime 0 non realtime 0...

Page 50: ...D nrt A number between 0 and 1000 The non realtime overbooking percentage REQUIRED Administrator atm cac overbooking rt 20 nrt 500 Administrator atm cac list CAC port dsl0 state enabled CAC port dsl1...

Page 51: ...Choose between DSL0 Or specify a port number dsl0 has port number 0 REQUIRED vpi A number between 0 and 15 Represents the Virtual Path Identifier VPI number for which statistics will be retrieved REQ...

Page 52: ...clearing of the statistics after request OPTIONAL admin atm debug gstats of received octets 1802 of transmitted octets 4346 of received cells 34 of transmitted cells 82 of unknown cells 0 of errors o...

Page 53: ...between DSL0 Or specify a port number dsl0 has port number 0 REQUIRED clear Enable or disable clearing of the statistics after request OPTIONAL atm debug portstats port dsl0 of received octets 1961 o...

Page 54: ...r 0 or 1 Represents the Cell Loss Priority CLP bit value of the OAM cells The default is 1 OPTIONAL loopbackid A hexadecimal string Represents the loopback ID for processing of segment loopback cells...

Page 55: ...it value 1 Loopback id 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a OAM data blocking mode Port dsl0 blocking Port dsl1 blocking Port atm2 blocking Port atm3 blocking Port aal5 blocking Port atm5 b...

Page 56: ...p CLP bit value 1 Loopback id 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a OAM data blocking mode Port dsl0 blocking Port dsl1 blocking Port atm2 blocking Port atm3 blocking Port aal5 blocking Port...

Page 57: ...uccessful sequence 1 time 37890 usec loopback successful sequence 2 time 39118 usec loopback successful sequence 3 time 39116 usec loopback successful sequence 4 time 39187 usec loopback successful se...

Page 58: ...ist atm oam cclist PORT 0 VPI 15 VCI 16 End2End Mode Auto Segment Mode Auto PORT 0 VPI 0 VCI 35 End2End Mode Auto Segment Mode Auto PORT 0 VPI 8 VCI 35 End2End Mode Auto Segment Mode Auto PORT 0 VPI 0...

Page 59: ...RED vci A number between 0 and 511 Represents the VCI Note For a Virtual Path VP cross connection use 0 or do not specify OPTIONAL transmit Enable or disable transmission of CC cells OPTIONAL receive...

Page 60: ...e VPI REQUIRED vci A number between 0 and 511 Represents the VCI Note For a VP cross connection use 0 or do not specify OPTIONAL span Select the CC span Choose between end2end monitoring occurs on the...

Page 61: ...has port number 0 REQUIRED vpi A number between 0 and 15 Represents the VPI REQUIRED vci A number between 0 and 511 Represents the VCI Note For a VP cross connection use 0 or do not specify OPTIONAL...

Page 62: ...y a port number dsl0 has port number 0 REQUIRED vpi A number between 0 and 15 Represents the VPI REQUIRED vci A number between 0 and 511 Represents the VCI Note For a VP cross connection use 0 or do n...

Page 63: ...lb list List all VC loopback connections SYNTAX EXAMPLE RELATED COMMANDS atm oam vclb list atm oam vclb list PORT 0 VPI 0 VCI 36 PORT 1 VPI 0 VCI 37 atm oam vclb add Create a loopback connection for V...

Page 64: ...of a phonebook entry intended for the PPP to DHCP spoofing packet service must start with DHCP for example DHCP_Spoof01 REQUIRED addr The ATM address for this destination It is composed of a VPI and...

Page 65: ...m phonebook autolist Show the auto PVCs SYNTAX EXAMPLE RELATED COMMANDS Auto PVCs are only shown if they are supported by the Central Office DSLAM atm phonebook autolist atm phonebook autolist 8 35 at...

Page 66: ...et service atm phonebook delete name string name The name of the phonebook entry to be deleted Tip Use the command atm phonebook list to check whether the entry is in use Use 1 or not Use 0 REQUIRED a...

Page 67: ...e in use cannot be flushed 2 This command does not impact previously saved configurations atm phonebook flush atm phonebook list Name Use Address atm_pvc_0_35 1 0 35 RtPPPoA 0 8 35 atm phonebook flush...

Page 68: ...rent phonebook SYNTAX EXAMPLE RELATED COMMANDS atm phonebook list atm phonebook list Name Use Address atm_pvc_0_35 1 0 35 RtPPPoA 0 8 35 atm phonebook add Add a new phonebook entry atm phonebook autol...

Page 69: ...string name The name of the new QoS entry REQUIRED txctd The name of the Conformance Traffic Descriptor CTD for the transmit upstream direction OPTIONAL rxctd The name of the CTD for the receive downs...

Page 70: ...is shown in Kbits or bytes cells the output is shown in cps or cells The default is bytes OPTIONAL atm qosbook ctdlist Name Ref Conf Peak Sust Burst Minrate Frame Cdvt RT FD Kbits Kbits bytes Kbits by...

Page 71: ...second The default is 0 indicates linerate for UBR OPTIONAL sustrate A number between 0 and 27786 Represents the sustainable rate in kilobits per second VBR only The default is 0 OPTIONAL maxburst A...

Page 72: ...atching multiple of 48 bytes as can be seen when displaying the profile via the command atm qosbook ctdlist burst 144 RELATED COMMANDS atm qosbook ctdadd name Medium conformance VBR peakrate 27786 sus...

Page 73: ...efault is disabled OPTIONAL atm qosbook ctdlist Name Ref Conf Peak Sust Burst Minrate Frame Cdvt RT FD Kbits Kbits bytes Kbits bytes default 2 UBR linerate 0 0 0 0 0 disabled disabled High 0 CBR 27786...

Page 74: ...atm qosbook ctdlist atm qosbook ctdlist Name Ref Conf Peak Sust Burst Minrate Frame Cdvt RT FD Kbits Kbits bytes Kbits bytes default 2 UBR linerate 0 0 0 0 0 disabled disabled High 0 CBR 27786 0 0 0 0...

Page 75: ...ault is disabled OPTIONAL atm qosbook list Name Ref Type TX peak sust burst RX peak sust burst framediscard Kbits Kbits bytes Kbits Kbits bytes default 3 ubr linerate 0 0 linerate 0 0 disabled TestVBR...

Page 76: ...ATM Commands E DOC CTC 20050531 0058 v1 0 56 atm qosbook flush Flush all the QoS book entries SYNTAX The flush command does not impact previously saved configurations atm qosbook flush...

Page 77: ...qosbook list atm qosbook list Name Ref Type TX peak sust burst RX peak sust burst framediscard Kbits Kbits bytes Kbits Kbits bytes default 3 ubr linerate 0 0 linerate 0 0 disabled TestVBR 0 vbr nrt 1...

Page 78: ...ATM Commands E DOC CTC 20050531 0058 v1 0 58...

Page 79: ...8 v1 0 59 AutoPVC Commands Introduction This chapter describes the commands of the autopvc command group Contents This chapter covers the following commands autopvc config Configure autopvc 60 autopvc...

Page 80: ...configuration active both ILMI VP VC 0 16 and pseudo ILMI VP VC 15 16 are enabled When the connection parameters are written to the MIB these parameters are used to configure phonebook entries qosboo...

Page 81: ...iceConnInfoExtension AtmServiceTypeExtension AAL5ProfileExtension table Select the autopvc table for which the information must be shown Choose between Port AtmLayer Vpc Vcc Address AddressRegistratio...

Page 82: ...AutoPVC Commands E DOC CTC 20050531 0058 v1 0 62...

Page 83: ...covers the following commands config delete Delete a user configuration file 64 config dump Show the saved configuration file 65 config flush Flush the loaded configuration 66 config list Show the cu...

Page 84: ...YNTAX where RELATED COMMANDS config delete filename string filename Name of the user configuration file to be deleted Note If not specified all the user configuration files that were saved in the Spee...

Page 85: ...Config Commands E DOC CTC 20050531 0058 v1 0 65 config dump Show the saved configuration file SYNTAX RELATED COMMANDS config dump config delete Delete a user configuration file...

Page 86: ...is flush command combines all the possible flush commands 2 This command does not affect saved configurations config flush flush_ip disabled enabled flush_ip Flush IP settings enabled or not disabled...

Page 87: ...d templates List the template files disabled or not enabled The default is disabled OPTIONAL config list templates enabled Configurations file s user ini Template file s No template files present Fact...

Page 88: ...nd string when loaded enabled or not disabled OPTIONAL filename Name of the configuration file to be loaded OPTIONAL ip rtlist Destination Source Gateway Intf Mtrc 10 0 0 0 24 10 0 0 0 24 10 0 0 140 e...

Page 89: ...e backup file is saved in the SpeedTouch permanent storage This file can be downloaded via the SpeedTouch web pages or via an FTP session SYNTAX where RELATED COMMANDS config save filename string file...

Page 90: ...Config Commands E DOC CTC 20050531 0058 v1 0 70...

Page 91: ...Clean the connection database by forcing timeouts 78 connection clear Kill all the connections 79 connection config Configure the connection handling 80 connection debug The connection debug commands...

Page 92: ...Enable disabled floating port for IKE helper OPTIONAL tracelevel A number between 1 and 4 Represents the SIP trace level Choose between 1 feature errors 2 feature traces 3 all errors 4 all traces The...

Page 93: ...Connection Commands E DOC CTC 20050531 0058 v1 0 73 RELATED COMMANDS connection appinfo Display CONN NAT application specific info connection applist List the available CONN NAT application helpers...

Page 94: ...tring application The name of a CONN NAT application helper Tip Use the command connection applist to obtain a list of CONN NAT application helpers REQUIRED connection appinfo application SIP SIP ALG...

Page 95: ...P udp 5060 disabled 6 0 trace level 1 JABBER tcp 5222 disabled 2 0 CU SeeMe udp 7648 enabled unavailable RAUDIO PNA tcp 7070 enabled unavailable RTSP tcp 554 enabled unavailable ILS tcp 389 unavailabl...

Page 96: ...s REQUIRED port The port number or port range this application handler should work on REQUIRED connection bindlist Application Proto Portrange Flags JABBER tcp 15222 JABBER tcp 5222 FTP tcp 21 IRC tcp...

Page 97: ...cation Proto Portrange Flags LOOSE UDP udp 67 JABBER tcp 15222 JABBER tcp 5222 FTP tcp 21 IRC tcp 6660 6669 H323 tcp 1720 ILS tcp 1002 ILS tcp 389 RTSP tcp 554 RAUDIO PNA tcp 7070 CU SeeMe udp 7648 SI...

Page 98: ...HED 15 7 INIT 16 192 168 1 64 1377 192 168 1 254 23 LocalNetwork 1390 tcp 0 RESP 17 192 168 1 254 23 192 168 1 64 1377 R loop 951 tcp 0 34 tcp ACTIVE TCPS_CLOSE_WAIT TCPS_FIN_WAIT_1 I 57 16 INIT 68 19...

Page 99: ...Connection Commands E DOC CTC 20050531 0058 v1 0 79 connection clear Kill all the connections SYNTAX EXAMPLE connection clear connection clear Connection to host lost...

Page 100: ...es on idle connections The default is disabled OPTIONAL udptrackmode Select the User Datagram Protocol UDP connection tracking mode Choose between strict replies to a request from a client must be in...

Page 101: ...e connection debug commands SYNTAX where EXAMPLE connection debug trace disabled enabled trace Enable or disable traces The default is disabled OPTIONAL connection debug connection traces disabled con...

Page 102: ...3 LocalNetwork 548 tcp 0 RESP 125 192 168 1 254 23 192 168 1 64 1979 R loop 396 tcp 0 connection describe id 62 ID proto state substate flags timeout 62 tcp ACTIVE TCPS_ESTABLISHED TCPS_ESTABLISHED 14...

Page 103: ...Connection Commands E DOC CTC 20050531 0058 v1 0 83 connection flush Flush the current connection configuration SYNTAX connection flush...

Page 104: ...istered connection modules Module FW holds private data F 10264 S 6592 Module IDS holds private data F 0 S 0 Module NAT holds private data F 0 S 0 Registered stream modules Module ROUTING holds privat...

Page 105: ...A number between 1 and 2048 Represents the number of connections to be displayed Note If not specified all the connections will be displayed OPTIONAL connection list ID proto state substate flags tim...

Page 106: ...Connection Commands E DOC CTC 20050531 0058 v1 0 86 connection refresh Invalidate all the cached decisions SYNTAX connection refresh...

Page 107: ...ns 0 Number of idle connections 1 Number of TCP connections 2 Number of UDP connections 1 Number of ICMP connections 0 Number of non TCP UDP ICMP connections 0 Number of TCP open connections 0 Number...

Page 108: ...idle udpkill icmpkill ipidle ipkill timer The name of the connection idle timer to be reset Note If not specified all the timers will be reset to their default values REQUIRED connection timerconfig t...

Page 109: ...e name of the connection idle timer ot be configured Choose between tcpidle tcpneg tcpkill udpidle udpkill icmpkill ipidle ipkill OPTIONAL value A number between 0 and 86400 seconds Represents the tim...

Page 110: ...tion helpers REQUIRED port The port number or port range this application handler should work on REQUIRED connection bindlist Application Proto Portrange IRC tcp 6750 JABBER tcp 15222 JABBER tcp 5222...

Page 111: ...ribes the commands of the cwmp CPE WAN Management Protocol command group Contents This chapter covers the following commands cwmp config Configure the cwmpd as seen from the ACS 92 cwmp traceconfig En...

Page 112: ...cwmp daemon Choose between readonly full The default is readonly OPTIONAL periodicInform Set the periodicInform flag of the cwmp daemon Choose between enabled disabled The default is enabled OPTIONAL...

Page 113: ...lag of the cwmp daemon Choose between enabled disabled The default is enabled OPTIONAL cwmp config State disabled Mode readonly Max Envelopes 2 Connection Request Port 80 Periodic Inform enabled Perio...

Page 114: ...OPTIONAL level Set the tracelevel 0 4 Choose between 0 no trace or debug message output 1 feature related warnings errors and exceptions black box debugging 2 feature related informational messages b...

Page 115: ...ACS server OPTIONAL port Set the port of the ACS server The default is 7002 OPTIONAL path Set the path of URL used to contact the ACS server OPTIONAL username Set the username for ACS Digest Authentic...

Page 116: ...CWMP Commands E DOC CTC 20050531 0058 v1 0 96...

Page 117: ...DOC CTC 20050531 0058 v1 0 97 Debug Commands Introduction This chapter describes the commands of the debug command group Contents This chapter covers the following commands debug exec Execute a Trace...

Page 118: ...ds E DOC CTC 20050531 0058 v1 0 98 debug exec Execute a Trace Debug command SYNTAX where This command is for qualified personnel only debug exec cmd quoted string cmd A quoted Trace Debug command stri...

Page 119: ...d a DHCP server to the DHCP server list 115 dhcp relay config Set the DHCP relay configuration settings 116 dhcp relay delete Delete a DHCP server from the DHCP server list 117 dhcp relay flush Flush...

Page 120: ...server pool 146 dhcp server pool flush Flush all DHCP server pools 147 dhcp server pool list List all DHCP server pools 148 dhcp server pool optadd Add an option instance to the DHCP server pool 149 d...

Page 121: ...mmands E DOC CTC 20050531 0058 v1 0 101 dhcp client flush Delete all the DHCP leases attached to dynamic interfaces SYNTAX The flush command does not impact previously saved configurations dhcp client...

Page 122: ...created REQUIRED dhcp client iflist No dynamic interfaces defined dhcp client ifadd intf myPPP_ppp dhcp client iflist myPPP_ppp INIT flags uc dns rt IP address 0 0 0 0 HW address SpeedTouch 00 DHCP s...

Page 123: ...1 DNS 1 Number of leases 1 Total size of table 36 in use 1 free 97 dhcp client ifattach intf myPPP_ppp dhcp client iflist myPPP_ppp SELECTING flags bc dns rt IP address 0 0 0 0 HW address SpeedTouch 0...

Page 124: ...stname should not be associated with this lease OPTIONAL userid The user class identifier option to be associated with the lease OPTIONAL addr The preferred dynamic IP address OPTIONAL leasetime A num...

Page 125: ...br of retransmissions 2 Number of leases 1 Total size of table 36 in use 1 free 97 dhcp client ifconfig intf myPPP_ppp clientid myClientID hostname myHostName userid myUserID addr 10 0 0 1 leasetime 0...

Page 126: ...t myPPP_ppp INIT flags bc dns rt IP address 10 0 0 1 HW address SpeedTouch 00 90 d0 01 47 f1 DHCP server 10 10 1 1 hostname myHostName client identifier 00 myClientID user class identifier myUserID me...

Page 127: ...yClientID user class identifier myUserID metric rt 1 DNS 1 Number of leases 1 Total size of table 36 in use 1 free 97 dhcp client iflist myPPP_ppp INIT flags bc dns rt IP address 10 0 0 1 HW address S...

Page 128: ...W address 00 90 d0 01 47 de DHCP server 255 255 255 255 hostname NewLease req leasetime 10800 s trying to get a lease for 8 min 32 sec transmission of DISCOVER in 57 sec retransmission timeout 64 nbr...

Page 129: ...s sent 0 INFORMs sent 0 Number of dynamic interfaces 1 Memory usage Table size of dyn leases 19 in use 1 free 94 dhcp client ifrelease intf eth0 CTRL Q STATE ACTIVATE STATE IDLE STATE ACTIVATE dhcc in...

Page 130: ...ease req leasetime 10800 s lease renewal in 5 days 58 min 48 sec lease rebinding in 8 days 20 h 6 min 18 sec lease expires in 10 days 2 h 28 min 48 sec Number of leases 1 Total size of table 19 in use...

Page 131: ...ew intf eth0 dhcp client stats DHCP client statistics Corrupted packet recv 0 OFFERs recv 1 ACKs recv 1 NAKs recv 0 Pure BOOTP REPLIES 0 Other message types 0 DISCOVERs sent 1 REQUESTs sent 1 DECLINEs...

Page 132: ...nt 9 DECLINEs sent 0 RELEASEs sent 0 INFORMs sent 0 Number of dynamic interfaces 1 Memory usage Table size of dyn leases 19 in use 1 free 94 dhcp client debug clear dhcp client debug stats DHCP client...

Page 133: ...t debug stats DHCP client statistics Corrupted packet recv 0 OFFERs recv 1 ACKs recv 1 NAKs recv 0 Pure BOOTP REPLIES 0 Other message types 0 DISCOVERs sent 244 REQUESTs sent 9 DECLINEs sent 0 RELEASE...

Page 134: ...t trace configuration SYNTAX where EXAMPLE dhcp client debug traceconfig state disabled enabled state Enable or disable tracing The default is disabled OPTIONAL dhcp client debug traceconfig tracing d...

Page 135: ...intf none string giaddr ip address addr The IP address of the DHCP server REQUIRED intf The name of the relay interface Note Use none to indicate that no interface is specified OPTIONAL giaddr The gi...

Page 136: ...info status RFC3046 enabled or disabled The default is disabled OPTIONAL agentmismatch Forward drop DHCP reply packet when a relay agent info mismatch is detected RFC3046 enabled or not disabled The d...

Page 137: ...ATED COMMANDS dhcp relay delete addr ip address intf string addr The IP address of the DHCP server to be deleted REQUIRED intf The name of the dynamic interface Note Use none to indicate that no inter...

Page 138: ...Flush the DHCP relay settings SYNTAX EXAMPLE The flush command does not impact previously saved configurations dhcp relay flush dhcp relay list DHCP server Interface giaddr 127 0 0 1 eth0 192 168 1 25...

Page 139: ...DHCP request packet when the DHCP Relay Agent Option is enabled with the command dhcp relay config agentinfo enabled and the giaddr field is 0 RFC3046 enabled or not disabled The default is disabled O...

Page 140: ...he name of the dynamic interface to be listed Note If not specified all the relay interfaces will be shown OPTIONAL dhcp relay iflist eth0 admin state up oper state up max hops 4 trusted disabled remo...

Page 141: ...play the DHCP server list SYNTAX EXAMPLE RELATED COMMANDS dhcp relay list dhcp relay list DHCP server Interface giaddr 127 0 0 1 eth0 10 0 0 138 dhcp relay add Add a DHCP server to the DHCP server lis...

Page 142: ...DHCP relay statistics SYNTAX EXAMPLE dhcp relay debug stats dhcp relay debug stats DHCP relay statistics Client packet relayed 64 Server packet relayed 0 Bogus relay agent 0 Bogus giaddr recv 0 Corru...

Page 143: ...relay debug traceconfig Modify the DHCP relay trace configuration SYNTAX where EXAMPLE dhcp relay debug traceconfig state disabled enabled state Enable or disable tracing The default is disabled OPTI...

Page 144: ...1 0 124 dhcp server config Print the DHCP server configuration settings SYNTAX where EXAMPLE dhcp server config state disabled enabled state Enable or disable the DHCP server The default is enabled OP...

Page 145: ...DHCP Commands E DOC CTC 20050531 0058 v1 0 125 dhcp server flush Flush all DHCP server pool and lease entries SYNTAX The flush command does not impact previously saved configurations dhcp server flush...

Page 146: ...client disabled enabled verifyfirst Enable or disable IP address conflict network probing before handing out an address to a client The default is enabled OPTIONAL trustclient Select whether the IP ad...

Page 147: ...agent options dropped 0 Lease table got full no Ping table got full no Second dhcp server seen no Total size of lease table 32 in use 0 free 100 dhcp server debug clear dhcp server debug stats DHCP se...

Page 148: ...t the number of IP address offers sent in reply to DHCP requests ACKs sent the number of ACKnowledgement replies sent to successfully configured DHCP clients NAKs sent the number of Not AcKnowledgemen...

Page 149: ...DHCP Commands E DOC CTC 20050531 0058 v1 0 129 RELATED COMMANDS dhcp server debug clear Clear the DHCP server statistics...

Page 150: ...erver debug traceconfig Modify the DHCP server trace configuration SYNTAX where EXAMPLE dhcp server debug traceconfig state disabled enabled state Enable or disable tracing The default is disabled OPT...

Page 151: ...y the number of available IP addresses in the DHCP server pool Represents the IP address offset in the DHCP server pool preserved for this host Note Not specifying this parameter does not preserve an...

Page 152: ...DHCP Commands E DOC CTC 20050531 0058 v1 0 132 RELATED COMMANDS dhcp server lease delete Delete a DHCP server lease dhcp server lease list List all the DHCP server leases...

Page 153: ...ver lease table index Tip Use the command dhcp server lease list to obtain a list of the index numbers of all current DHCP leases OPTIONAL dhcp server lease list Lease Pool TTL State Clientid 0 0 0 0...

Page 154: ...ver leases will be flushed OPTIONAL dhcp server lease list Lease Pool TTL State Clientid 0 0 0 0 0 dhcp_pool_1 00 26 40 FREE 00 90 D0 12 34 56 1 10 0 0 1 local_pool 00 59 22 USED 01 23 45 67 89 AB 2 1...

Page 155: ...CP server lease table will be shown OPTIONAL dhcp server lease list Lease Pool TTL State Clientid 0 0 0 0 0 dhcp_pool_1 00 26 40 FREE 00 90 D0 12 34 56 1 10 0 0 1 local_pool 00 59 22 USED 01 23 45 67...

Page 156: ...ds E DOC CTC 20050531 0058 v1 0 136 dhcp server option flush Flush all DHCP server option templates and instances SYNTAX The flush command does not impact previously saved configurations dhcp server o...

Page 157: ...P server option instance Format is type value where type is 8 bit 16 bit 32 bit addr ascii or byte_array Note The type must be identical to the type of the DHCP server option template Use the command...

Page 158: ...ion instance to be deleted REQUIRED dhcp server option instlist yourInstance Tmpl name yourTmpl 2 Use 0 Value ascii 33 myInstance Tmpl name myTmpl 1 Use 0 Value 32 bit 64 dhcp server option instdelete...

Page 159: ...TAX EXAMPLE RELATED COMMANDS dhcp server option instlist dhcp server option instlist yourInstance Tmpl name yourTmpl 2 Use 0 Value ascii 33 myInstance Tmpl name myTmpl 1 Use 0 Value 32 bit 64 dhcp ser...

Page 160: ...r between 1 and 254 Specifies the DHCP server option code REQUIRED type Specifies the DHCP server option type Choose between 8 bit 16 bit 32 bit addr ascii byte_array REQUIRED dhcp server option tmpll...

Page 161: ...e The name of the DHCP server option template to be deleted REQUIRED dhcp server option tmpllist Name Option Type Use yourTmpl 2 ascii 0 myTmpl 1 32 bit 0 dhcp server option tmpldelete name yourTmpl d...

Page 162: ...rver option templates SYNTAX EXAMPLE RELATED COMMANDS dhcp server option tmpllist dhcp server option tmpllist Name Option Type Use yourTmpl 2 ascii 0 myTmpl 1 32 bit 0 dhcp server option tmpladd Add a...

Page 163: ...erver pool add dhcp server pool list Pool Start End State PPP 0 dhcp_pool_1 0 0 0 0 0 0 0 0 FREE 1 My_LAN_Pool 10 0 0 1 10 0 0 254 USED 2 dhcp_pool_2 0 0 0 0 0 0 0 0 FREE 3 dhcp_pool_3 0 0 0 0 0 0 0 0...

Page 164: ...west IP address in the DHCP address range to use for leasing The default value of this parameter is 0 0 0 0 not specified which means that the lowest IP address of the pool will be defined by the remo...

Page 165: ...e IP address of the primary Windows Internet Naming Service WINS server for DHCP clients OPTIONAL secwins The IP address of the secondary WINS server for DHCP clients OPTIONAL leasetime A number of se...

Page 166: ...and dhcp server pool list to obtain a list of all current DHCP leases REQUIRED dhcp server pool list Pool Start End Intf State 0 LAN_Private 10 0 0 1 10 0 0 254 eth0 USED 1 My_Pool 192 6 11 101 192 6...

Page 167: ...pools SYNTAX EXAMPLE The flush command does not impact previously saved configurations dhcp server pool flush dhcp server pool list Pool Start End Intf State 0 LAN_Private 10 0 0 1 10 0 0 254 eth0 USE...

Page 168: ...me string name The name of the DHCP server pool to be shown Note If not specified all the DHCP server pools are shown OPTIONAL dhcp server pool list Pool Start End Intf State 0 LAN_Private 10 0 0 1 10...

Page 169: ...p Use the command dhcp server option instlist to obtain a list of DHCP server option instances REQUIRED dhcp server pool optadd name dhcp_pool_1 instname yourInstance dhcp server pool list name dhcp_p...

Page 170: ...erver pool list name dhcp_pool_1 Pool Start End Intf State 1 dhcp_pool_1 0 0 0 0 0 0 0 0 lan1 FREE DHCP server 0 0 0 0 unnumbered Netmask 0 0 0 0 Leasetime infinite Gateway 0 0 0 0 DNS domain lan DNS...

Page 171: ...mask dotted or cidr gateway ipaddress 0 name The name of the DHCP server pool to which a route must be added REQUIRED dst The IP destination address of the route for DHCP clients REQUIRED dstmsk The d...

Page 172: ...msk ip mask dotted or cidr gateway ipaddress 0 name The name of the DHCP server pool from which a route must be deleted REQUIRED dst The IP destination address of the route for DHCP clients REQUIRED d...

Page 173: ...erver pool ruleadd name string rulename string name The name of the DHCP server pool to which a selection rule must be added REQUIRED rulename The name of the DHCP server selection rule Tip Use the co...

Page 174: ...rver pool ruleadd name string rulename string name The name of the DHCP server pool from which a selection rule must be deleted REQUIRED rulename The name of the DHCP server selection rule to be delet...

Page 175: ...ns for MAC address different from 00 9f aa bb cc dd name The name of the new DHCP server rule REQUIRED type Specify the DHCP server rule type Choose between vci vendor class identifier uci user class...

Page 176: ...e Delete a DHCP server rule SYNTAX where RELATED COMMANDS dhcp server rule delete name string name A name of the DHCP server rule to be deleted REQUIRED dhcp server rule add Add a DHCP server rule for...

Page 177: ...DHCP Commands E DOC CTC 20050531 0058 v1 0 157 dhcp server rule flush Flush all the DHCP server rules SYNTAX dhcp server rule flush...

Page 178: ...31 0058 v1 0 158 dhcp server rule list List all DHCP server rules SYNTAX RELATED COMMANDS dhcp server rule list dhcp server rule add Add a DHCP server rule for DHCP pool selection dhcp server rule del...

Page 179: ...statistics 168 dns server debug stats Print the DNS server forwarder statistics 169 dns server debug spoof clear Clear the intercept cache table 170 dns server debug spoof getaddress Get the real ip f...

Page 180: ...resents the query timeout The default is 5 OPTIONAL retry A number between 0 and 10 Represents the number of query retries before giving up The default is 3 OPTIONAL search Use the search list to cons...

Page 181: ...dr The IP address of the DNS server to be added REQUIRED port The DNS server port number The default is 53 OPTIONAL dns client dnsadd addr 150 150 150 150 dns client dnslist Entry State Family Server...

Page 182: ...f the DNS server to be deleted Tip Use the command dns client dnslist to obtain a list of DNS servers REQUIRED dns client dnslist Entry State Family Server 1 CONNECTED IP port 53 addr 127 0 0 1 2 CONN...

Page 183: ...all DNS servers SYNTAX EXAMPLE RELATED COMMANDS dns client dnslist dns client dnslist Entry State Family Server 1 CONNECTED IP port 53 addr 127 0 0 1 2 CONNECTED IP port 53 addr 150 150 150 150 dns cl...

Page 184: ...DNS Commands E DOC CTC 20050531 0058 v1 0 164 dns client flush Remove all DNS servers SYNTAX dns client flush...

Page 185: ...mands E DOC CTC 20050531 0058 v1 0 165 dns client nslookup DNS lookup for a domain name or an address SYNTAX where dns client nslookup host string host The DNS domain name string for which to query RE...

Page 186: ...ry timeout The default is 15 OPTIONAL suppress Suppress not more than the specified amount of remote DNS server errors The default is 0 OPTIONAL state Enable or disable the local DNS server forwarder...

Page 187: ...DNS Commands E DOC CTC 20050531 0058 v1 0 167 dns server flush Flush all local DNS hosts and routes SYNTAX dns server flush...

Page 188: ...S packets forwarded 0 External answers received 0 Spoofed responses 0 Forward table full discard 0 Spurious answers 0 Unknown query types 0 dns server debug clear dns server debug stats Corrupted pack...

Page 189: ...s server debug stats dns server debug stats Corrupted packets received 100 Local questions resolved 3 Local negative answers sent 1 Total DNS packets forwarded 0 External answers received 0 Spoofed re...

Page 190: ...DNS Commands E DOC CTC 20050531 0058 v1 0 170 dns server debug spoof clear Clear the intercept cache table SYNTAX dns server debug spoof clear...

Page 191: ...for the given spoofed ip SYNTAX where EXAMPLE dns server debug spoof getaddress addr ip address addr The IP address of the spoofed server REQUIRED Administrator dns server debug spoof getaddress addr...

Page 192: ...ip SYNTAX where EXAMPLE dns server debug spoof getflags addr ip address addr The IP address of the spoofed server REQUIRED Administrator dns server debug spoof dns server debug spoof getflags addr 19...

Page 193: ...poof list Spoof IP FQDN Real IP Flags 198 18 1 1 eu thmulti com 0 0 0 0 Not resolved 198 18 1 2 thmulti com 0 0 0 0 Not resolved 198 18 1 3 com 0 0 0 0 Not resolved 198 18 1 4 edgmd588 eu thmulti com...

Page 194: ...mmands E DOC CTC 20050531 0058 v1 0 174 dns server debug spoof update Update the intercept cache table SYNTAX EXAMPLE dns server debug spoof update Administrator dns server debug spoof update Administ...

Page 195: ...The IP address of the host OPTIONAL ttl A number between 0 and 2147483647 seconds Represents the lifetime of the host The default is 0 in other words no limit on the lifetime OPTIONAL dns server host...

Page 196: ...name The name of the DNS host to be deleted REQUIRED dns server host list Address Hostname TTL s 150 150 150 150 myDNS 3600 local speedtouch 0 local dsldevice 0 dns server host delete name myDNS dns s...

Page 197: ...ver host flush Flush all the local DNS hosts SYNTAX EXAMPLE dns server host flush dns server host list Address Hostname TTL s 192 168 1 64 Unknown 00 10 a4 ad 32 cf 60 local dsldevice 1200 local speed...

Page 198: ...al DNS hosts SYNTAX EXAMPLE RELATED COMMANDS dns server host list dns server host list Address Hostname TTL s 192 168 1 64 Unknown 00 10 a4 ad 32 cf 60 local dsldevice 1200 local speedtouch 1200 dns s...

Page 199: ...main The DNS domain label OPTIONAL metric A number between 0 and 100 Represents the metric weight factor for this DNS route The lower the metric the higher the weight OPTIONAL intf An interface name D...

Page 200: ...s dns The IP address of the DNS server for which the forwarding route must be deleted REQUIRED dns server route list DNS Server Source Domain Metric Intf State 150 150 150 150 10 0 0 0 8 myDNS 0 eth0...

Page 201: ...dns server route flush Flush all DNS forwarding routes SYNTAX EXAMPLE dns server route flush dns server route list DNS Server Source Domain Metric Intf State 150 150 150 150 10 0 0 0 8 myDNS 0 eth0 UP...

Page 202: ...forwarding routes SYNTAX EXAMPLE RELATED COMMANDS dns server route list dns server route list DNS Server Source Domain Metric Intf State 150 150 150 150 10 0 0 0 8 myDNS 0 eth0 UP dns server route ad...

Page 203: ...the HTTP Intercept log file 194 dsd urlfilter config Display modify the URL filtering configuration 195 dsd urlfilter rule add Add a rule 196 dsd urlfilter rule delete Delete a rule 197 dsd urlfilter...

Page 204: ...ush Flush the server list 224 dsd webfilter server list List all web filter servers 225 dsd webfilter server modify Modify a web filter server 226 dsd webfilter standard category add Add a category to...

Page 205: ...dsd config Display modify the Differentiated Service Delivery DSD framework configuration SYNTAX where EXAMPLE dsd config state disabled enabled state Enable or disable the DSD framework The default...

Page 206: ...531 0058 v1 0 186 dsd debug connection list Display the internal connection pool usage SYNTAX where dsd debug connection list expand disabled enabled expand Enable or disable the expanded listing The...

Page 207: ...DP port or number state Enable or disable fixed proxy redirecting The default is disabled OPTIONAL dest The destination IP address to which requests will be forwarded OPTIONAL port The port to be used...

Page 208: ...g recycling state disabled enabled interval number httpidle number otheridle number state Enable disable stream recycling OPTIONAL interval Time between successive activity checks OPTIONAL httpidle Mi...

Page 209: ...9 dsd debug stats Display clear DSD framework and module statistics SYNTAX where dsd debug stats name intercept urlfilter recycling syslog all clear no yes name Specify the name of a module REQUIRED c...

Page 210: ...ryerrorurl The destination URL when the connection to the category server failed OPTIONAL monitorintercepturl The destination URL when the request is intercepted by the monitor thread OPTIONAL urlbloc...

Page 211: ...DSD Commands E DOC CTC 20050531 0058 v1 0 191 RELATED COMMANDS dsd intercept stats Display the HTTP Intercept statistics...

Page 212: ...ntercept stats Display the HTTP Intercept statistics SYNTAX EXAMPLE RELATED COMMANDS dsd intercept stats dsd intercept stats Total requests 2 Unauthorized requests 0 Request errors 2 dsd intercept con...

Page 213: ...le BlockCategory BlockIPAddress or BlockObscure event are logged errors only the HTTP requests that are blocked because of Server errors Category errors Monitor intercept loop detection bad requests o...

Page 214: ...sUpTime 00 22 37 HTTPI src 10 0 0 1 src_port 1965 dst 141 11 196 35 dst_port 80 event Se rverConnect dst_name aWebsite com icons Button_Document gif 86 SysUpTime 00 22 59 HTTPI src 10 0 0 1 src_port 1...

Page 215: ...f HTTP requests via a proxy server The default is disabled OPTIONAL blockipaddress Enable or disable blocking of HTTP requests if host name is IP address The default is disabled OPTIONAL blockobscured...

Page 216: ...RL Choose between block accept redirect REQUIRED redirect The redirection URL Note This parameter is only required when the action is redirect REQUIRED dsd urlfilter rule add url www speedtouch com ac...

Page 217: ...eleted REQUIRED url Definition of the URL filter OPTIONAL dsd urlfilter rule list Index Action Url Redirect 0 redirect www speedtouch com www speedtouch be 1 accept www baen com Rule list statistics 2...

Page 218: ...urlfilter rule flush dsd urlfilter rule list Index Action Url Redirect 0 redirect www speedtouch com www speedtouch be 1 accept www baen com Rule list statistics 2 present 128 total 0 0 used dsd urlfi...

Page 219: ...s SYNTAX EXAMPLE RELATED COMMANDS dsd urlfilter rule list dsd urlfilter rule list Index Action Url Redirect 0 redirect www speedtouch com www speedtouch be 1 accept www baen com Rule list statistics 2...

Page 220: ...tion URL Note This parameter is only required when the action is redirect REQUIRED dsd urlfilter rule list Index Action Url Redirect 0 redirect www speedtouch com www speedtouch be 1 accept www baen c...

Page 221: ...DSD Commands E DOC CTC 20050531 0058 v1 0 201 dsd webfilter cache flush Empty the internal cache SYNTAX dsd webfilter cache flush...

Page 222: ...DSD Commands E DOC CTC 20050531 0058 v1 0 202 dsd webfilter cache stats Display the cache statistics SYNTAX where dsd webfilter cache stats expand disabled enabled expand OPTIONAL...

Page 223: ...lter SYNTAX where dsd webfilter config state enabled disabled serverunreachable block all accept all uncategorized block accept license none trial standard professional ticket string sessionkey string...

Page 224: ...DSD Commands E DOC CTC 20050531 0058 v1 0 204 dsd webfilter list Display the web filter license state SYNTAX dsd webfilter list...

Page 225: ...v1 0 205 dsd webfilter professional category add Add a category to a group SYNTAX where dsd webfilter professional category add destid number srcid number destid Destination category or group REQUIRE...

Page 226: ...category create Create a category or group SYNTAX where dsd webfilter professional category create id number name quoted string type category group id Unique local ID for the category group REQUIRED n...

Page 227: ...C CTC 20050531 0058 v1 0 207 dsd webfilter professional category delete Delete a category or a group SYNTAX where dsd webfilter professional category delete id number id Unique local ID for the catego...

Page 228: ...DSD Commands E DOC CTC 20050531 0058 v1 0 208 dsd webfilter professional category flush Delete all categories and groups SYNTAX dsd webfilter professional category flush...

Page 229: ...DOC CTC 20050531 0058 v1 0 209 dsd webfilter professional category list List all categories and groups SYNTAX where dsd webfilter professional category list type category group type Choose between cat...

Page 230: ...210 dsd webfilter professional category remove Remove a category from a group SYNTAX where dsd webfilter professional category remove destid number srcid number destid Destination category or group R...

Page 231: ...0531 0058 v1 0 211 dsd webfilter professional config Display modify a webfilter SYNTAX where dsd webfilter professional config listversion string validcatmask string listversion a string OPTIONAL vali...

Page 232: ...al level add index number name string text quoted string otherurls block accept index number Level index 1 for next available REQUIRED name string Content category level name REQUIRED text quoted stri...

Page 233: ...al level delete index number name string text quoted string otherurls block accept index number Level index 1 for next available REQUIRED name string Content category level name REQUIRED text quoted s...

Page 234: ...DSD Commands E DOC CTC 20050531 0058 v1 0 214 dsd webfilter professional level flush Delete all levels SYNTAX dsd webfilter professional level flush...

Page 235: ...DSD Commands E DOC CTC 20050531 0058 v1 0 215 dsd webfilter professional level list Display the levels SYNTAX dsd webfilter professional level list...

Page 236: ...rofessional level modify index number name string text quoted string otherurls block accept index number Level index 1 for next available name string Content category level name REQUIRED text quoted s...

Page 237: ...DOC CTC 20050531 0058 v1 0 217 dsd webfilter professional level set Set the current web filtering level SYNTAX where dsd webfilter professional level set name string name Name of the current category...

Page 238: ...D Commands E DOC CTC 20050531 0058 v1 0 218 dsd webfilter professional rule clear Reset the level to a default rule SYNTAX where dsd webfilter professional rule clear level string level string REQUIRE...

Page 239: ...DSD Commands E DOC CTC 20050531 0058 v1 0 219 dsd webfilter professional rule list List all the rules SYNTAX dsd webfilter professional rule list...

Page 240: ...webfilter professional modify Modify a rule SYNTAX where dsd webfilter professional modify level string id number action block accept level string Level name REQUIRED id number Server category ID REQ...

Page 241: ...cho exec finger ftp ftp data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicn...

Page 242: ...kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmailsrv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp s...

Page 243: ...ain doom echo exec finger ftp ftp data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho...

Page 244: ...DSD Commands E DOC CTC 20050531 0058 v1 0 224 dsd webfilter server flush Flush the server list SYNTAX dsd webfilter server flush...

Page 245: ...DSD Commands E DOC CTC 20050531 0058 v1 0 225 dsd webfilter server list List all web filter servers SYNTAX dsd webfilter server list...

Page 246: ...main doom echo exec finger ftp ftpdata gopher h323 httpproxy ike ils imap2 imap3 ingresnet ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho...

Page 247: ...v1 0 227 dsd webfilter standard category add Add a category to a group SYNTAX where dsd webfilter standard category add destid number srcid number destid The destination category or group REQUIRED sr...

Page 248: ...v1 0 228 dsd webfilter standard category create Create a category or group SYNTAX where dsd webfilter standard category create id number name quoted string id Unique local ID for the category group R...

Page 249: ...E DOC CTC 20050531 0058 v1 0 229 dsd webfilter standard category delete Delete a category or group SYNTAX where dsd webfilter standard category delete id number id Unique local ID for the category gr...

Page 250: ...DSD Commands E DOC CTC 20050531 0058 v1 0 230 dsd webfilter standard category flush Delete all the levels SYNTAX dsd webfilter standard category flush...

Page 251: ...DSD Commands E DOC CTC 20050531 0058 v1 0 231 dsd webfilter standard category list Display the levels SYNTAX dsd webfilter standard category list...

Page 252: ...v1 0 232 dsd webfilter standard category remove Remove a category from a group SYNTAX where dsd webfilter standard category remove destid number srcid number destid Destination category or group REQUI...

Page 253: ...where dsd webfilter standard level add index number name string text quoted string otherurls block accept index Level index 1 for next available REQUIRED name Content category level name REQUIRED text...

Page 254: ...where dsd webfilter standard level delete index number name string text quoted string otherurls block accept index Level index 1 for next available REQUIRED name Content category level name REQUIRED t...

Page 255: ...DSD Commands E DOC CTC 20050531 0058 v1 0 235 dsd webfilter standard level flush Delete all levels SYNTAX dsd webfilter standard level flush...

Page 256: ...DSD Commands E DOC CTC 20050531 0058 v1 0 236 dsd webfilter standard level list Display the levels SYNTAX dsd webfilter standard level list...

Page 257: ...where dsd webfilter standard level modify index number name string text quoted string otherurls block accept index Level index 1 for next available REQUIRED name Content category level name REQUIRED t...

Page 258: ...nds E DOC CTC 20050531 0058 v1 0 238 dsd webfilter standard level set Set current web filtering level SYNTAX where dsd webfilter standard level set name string name Name of the current category level...

Page 259: ...DSD Commands E DOC CTC 20050531 0058 v1 0 239 dsd webfilter standard rule clear Reset level to default rule SYNTAX where dsd webfilter standard rule clear level string level Level name REQUIRED...

Page 260: ...DSD Commands E DOC CTC 20050531 0058 v1 0 240 dsd webfilter standard rule list List all rules SYNTAX where dsd webfilter standard rule list level string level Level name OPTIONAL...

Page 261: ...0 241 dsd webfilter standard rule modify Modify a rule SYNTAX where dsd webfilter standard rule modify level string id number action block accept level Level name REQUIRED id Server category ID OPTION...

Page 262: ...DSD Commands E DOC CTC 20050531 0058 v1 0 242...

Page 263: ...is chapter describes the commands of the dyndns commnd group Contents This chapter covers the following commands dyndns add Add a dynamic DNS client 244 dyndns delete Delete a dynamic DNS client 245 d...

Page 264: ...EXAMPLE RELATED COMMANDS dyndns add name string name The name of the new dynamic DNS client Note A maximum of 5 clients can be configured REQUIRED dyndns add name WAN dyndns list WAN INIT user passwor...

Page 265: ...t SYNTAX where EXAMPLE RELATED COMMANDS dyndns delete name string name The name of the dynamic DNS client to be deleted REQUIRED dyndns list WAN INIT user password addr 0 0 0 0 dyndns delete name WAN...

Page 266: ...DynDNS Commands E DOC CTC 20050531 0058 v1 0 246 dyndns flush Delete all the dynamic DNS clients SYNTAX dyndns flush...

Page 267: ...31 0058 v1 0 247 dyndns list List all the dynamic DNS clients SYNTAX EXAMPLE RELATED COMMANDS dyndns list dyndns list WAN INIT user password addr 0 0 0 0 dyndns add Add a dynamic DNS client dyndns del...

Page 268: ...amic DNS authentication OPTIONAL password The password for dynamic DNS authentication OPTIONAL group The dynamic DNS host group OPTIONAL mx The mail exchanger OPTIONAL backmx Set up the mail exchanger...

Page 269: ...0 249 EXAMPLE dyndns list WAN INIT user password addr 0 0 0 0 dyndns modify name WAN intf RtPPPoE user DNSuser password _DEV_BA8C0C963BD84130 service gnudip dyndns list WAN RtPPPoE_ppp INIT options gn...

Page 270: ...NS host group Note A maximum of 4 different groups can be created REQUIRED name The name of an IP host to add Note A maximum of 20 hosts can be configured REQUIRED dyndns host add group local name loc...

Page 271: ...o be deleted REQUIRED dyndns host list local localhost com public publichost com legend not initialised o update in progress v update successful x error dyndns host delete name publichost com dyndns h...

Page 272: ...DynDNS Commands E DOC CTC 20050531 0058 v1 0 252 dyndns host flush Delete all hosts SYNTAX The hosts cannot be flushed if there is still a group referenced to the hosts dyndns host flush...

Page 273: ...ost names SYNTAX EXAMPLE RELATED COMMANDS dyndns host list dyndns host list local localhost com public publichost com legend not initialised o update in progress v update successful x error dyndns hos...

Page 274: ...rver members dyndns org port 80 request nic update update interval 0 retry interval 30 max retry 3 custom server members dyndns org port 80 request nic update update interval 0 retry interval 30 max r...

Page 275: ...ct one of the supported TCP UDP port names see Supported TCP UDP Port Names on page 639 or alternatively specify the port number OPTIONAL request The dynamic DNS request string OPTIONAL updateinterval...

Page 276: ...etry interval 30 max retry 3 statdns server members dyndns org port 80 request nic update update interval 0 retry interval 30 max retry 3 custom server mydyndns org port 80 request hereiam update inte...

Page 277: ...oup Contents This chapter covers the following commands env flush Flush all the non system environment variables 258 env get Get the current value of an environment variable 259 env list Show all the...

Page 278: ...L http www speedtouch com upgrade500 htm CONF_TPVERSION 2 0 0 COLUMNS 80 ROWS 24 SESSIONTIMEOUT 0 env flush env list _SNTPPOLL_POST_SYNC 60 _SNTPPOLL_PRE_SYNC 60 _COMPANY_NAME THOMSON _COMPANY_URL htt...

Page 279: ...ent variable SYNTAX where EXAMPLE RELATED COMMANDS env get var string var The name of the environment variable Tip Use the command env list to obtain a list of all environment variables REQUIRED env g...

Page 280: ...LABEL MOD_BCM6345_V1 0 57_ADSL_PHY_A2pB015c3_readsl d14k4 _PHYSLAYERTYPE POTS _BUILDNAME ZZUCAA5 306 _PRL DSLBB585AA _FIA QA _BOARD_NAME BANT K _COMPANY_ID TMM _COPYRIGHT Copyright c 1999 2004 THOMSON...

Page 281: ...Tip When creating an environment variable any name is allowed However spaces are NOT allowed and the name may NOT start with CONF HOST an underscore _ the dollar sign REQUIRED value A quoted translat...

Page 282: ...ng with an underscore _ CONF or HOST cannot be unset changed or deleted REQUIRED env list _COMPANY_NAME THOMSON multimedia _COMPANY_URL http www speedtouch com _PROD_NAME SpeedTouch CONF_DATE March 20...

Page 283: ...ifdetach Detach a bridge interface 279 eth bridge iflist Display the current bridge interfaces 280 eth bridge macadd Add a static MAC address to a bridge interface 281 eth bridge macdelete Remove a M...

Page 284: ...Eth Commands E DOC CTC 20050531 0058 v1 0 264 eth switch mirror ingress Enable or disable the specified port to be the Mirror Ingress Port 299...

Page 285: ...State connected Retry 10 PortNr 1 ethoa_8_35 Dest atm_8_35 Connection State connected Retry 10 PortNr 2 eth ifadd intf RtPPPoE_eth eth iflist ethoa_0_35 Dest atm_0_35 Connection State connected Retry...

Page 286: ...nected PortNr 1 ethoa_8_35 Dest atm_8_35 Retry 10 Connection State connected PortNr 2 RtPPPoE_eth Dest RtPPPoE_atm Port Retry 10 Connection State not connected PortNr unassigned eth ifattach intf RtPP...

Page 287: ...p should retry before giving up The default is 10 OPTIONAL eth iflist ethoa_0_35 Dest atm_0_35 Connection State connected Retry 10 PortNr 1 ethoa_8_35 Dest atm_8_35 Connection State connected Retry 10...

Page 288: ...Retry 10 Connection State connected PortNr 1 ethoa_8_35 Dest atm_8_35 Retry 10 Connection State connected PortNr 2 RtPPPoE_eth Dest RtPPPoE_atm Retry 10 Connection State connected PortNr 3 eth ifdelet...

Page 289: ...connected PortNr 1 ethoa_8_35 Dest atm_8_35 Retry 10 Connection State connected PortNr 2 RtPPPoE_eth Dest RtPPPoE_atm Retry 10 Connection State connected PortNr 3 eth ifdetach intf RtPPPoE_eth eth ifl...

Page 290: ...be displayed Note If not specified all the ETH interfaces will be displayed OPTIONAL eth iflist ethoa_0_35 Dest atm_0_35 Retry 10 Connection State connected PortNr 1 ethoa_8_35 Dest atm_8_35 Retry 10...

Page 291: ...Eth Commands E DOC CTC 20050531 0058 v1 0 271 eth flush Flush all the ETH interfaces SYNTAX The flush command does not impact previously saved configurations eth flush...

Page 292: ...1 Connection State connected Retry 10 Port ethport1 PortNr 1 PortState forwarding Interface up RX bytes 249662 frames 2508 TX bytes 1842822 frames 3054 dropframes 0 eth bridge clear eth bridge iflist...

Page 293: ...ccess Control MAC address The default is 300 OPTIONAL filter The bridge filter to be applied for all Wide Area Network WAN bridge ports Choose between no_WAN_broadcast broadcasts from the SpeedTouch i...

Page 294: ...Eth Commands E DOC CTC 20050531 0058 v1 0 274 eth bridge flush Flush bridge interfaces and parameters SYNTAX The flush command does not impact previously saved configurations eth bridge flush...

Page 295: ...nterface up RX bytes 1902578 frames 4844 TX bytes 239390 frames 2504 dropframes 0 eth bridge ifadd intf BrEthoA_br eth bridge iflist OBC dest Internal Connection State connected Retry 10 Port OBC Port...

Page 296: ..._atm Connection State not connected Retry 10 Port Unassigned PortNr Unknown PortState forwarding eth bridge ifattach intf BrEthoA_br eth bridge iflist OBC dest Internal BrEthoA_br dest BrEthhoA_atm Co...

Page 297: ...forwarding The default is forwarding OPTIONAL retry A number between 0 and 65535 Represents the number of times the SpeedTouch retries to set up a WAN connection before giving up The default is 10 OPT...

Page 298: ...ding Interface up RX bytes 1902578 frames 4844 TX bytes 239390 frames 2504 dropframes 0 BrEthoA_br dest none Connection State not connected Retry 10 Port Unassigned PortNr Unknown PortState forwarding...

Page 299: ...flist OBC dest Internal BrEthoA_br dest BrEthhoA_atm Connection State connected Retry 10 Port wan0 PortNr 6 PortState forwarding Interface down RX bytes 0 frames 0 TX bytes 0 frames 0 dropframes 0 eth...

Page 300: ...ry 10 Port ethport1 PortNr 1 PortState forwarding Interface up RX bytes 47178 frames 704 TX bytes 60290 frames 527 dropframes 0 ethport2 dest ethif2 Connection State connected Retry 10 Port ethport2 P...

Page 301: ...fa static 01 80 c2 00 00 00 permanent 01 80 c2 00 00 01 permanent 01 80 c2 00 00 02 permanent 01 80 c2 00 00 03 permanent 01 80 c2 00 00 0e permanent 01 80 c2 00 00 0f permanent 01 80 c2 00 00 10 per...

Page 302: ...80 c2 00 00 02 permanent 01 80 c2 00 00 03 permanent 01 80 c2 00 00 0e permanent 01 80 c2 00 00 0f permanent 01 80 c2 00 00 10 permanent ff ff ff ff ff ff permanent eth bridge macdelete hwaddr 00 80 9...

Page 303: ...permanent 01 80 c2 00 00 03 permanent 01 80 c2 00 00 04 permanent 01 80 c2 00 00 05 permanent 01 80 c2 00 00 06 permanent 01 80 c2 00 00 07 permanent 01 80 c2 00 00 08 permanent 01 80 c2 00 00 09 per...

Page 304: ...ated by dstintfs string or combination of strings separated by srcports The source bridge interfaces from which multicast packets must be dropped REQUIRED dstports The destination bridge interfaces fo...

Page 305: ...ddelete Delete a multicast group to be dropped from the database SYNTAX RELATED COMMANDS eth bridge mcddelete eth bridge mcdadd Add a multicast group to be dropped to the database eth bridge mcdlist D...

Page 306: ...cdlist Display the multicast group to be dropped from the database SYNTAX RELATED COMMANDS eth bridge mcdlist eth bridge mcdadd Add a multicast group to be dropped to the database eth bridge mcddelete...

Page 307: ...name will be used OPTIONAL id A number between 2 and 4094 Represents the bridge group ID REQUIRED eth bridge group list Index Name Bridge interfaces 1 default OBC ethport1 ethport2 ethport3 ethport4...

Page 308: ...the bridge group to be deleted REQUIRED eth bridge group list Index Name Bridge interfaces 1 default OBC ethport1 ethport2 ethport3 ethport4 2 myGroup usbport1 eth bridge group delete name myGroup et...

Page 309: ...Eth Commands E DOC CTC 20050531 0058 v1 0 289 eth bridge group flush Flush all bridge groups SYNTAX eth bridge group flush...

Page 310: ...bridge groups SYNTAX EXAMPLE RELATED COMMANDS eth bridge group list eth bridge group list Index Name Bridge interfaces 1 default OBC ethport1 ethport2 ethport3 ethport4 2 myGroup usbport1 eth bridge...

Page 311: ...e of the bridge interface to be moved to the bridge group REQUIRED name The name of the bridge group REQUIRED eth bridge group list Index Name Bridge interfaces 1 default OBC ethport1 ethport2 ethport...

Page 312: ...de 100BaseTFD 100Mb s communication speed in full duplex mode or enter a number between 0 auto and 5 100BaseTFD The default is auto Note This value should never be changed except in case of communicat...

Page 313: ...rnet types do NOT match Result Type will equal unknown and no Ethernet connectivity will exist RELATED COMMANDS eth device iflist eth device iflist Interface Type Result State ethif1 auto 100BaseTFD U...

Page 314: ...flush Set all the ports to the default settings All the ports are placed in group 0 SYNTAX EXAMPLE eth switch group flush eth switch group list Group 0 Ports 4 Group 1 Ports 1 Group 2 Ports 2 3 eth s...

Page 315: ...itch group list List all the configured switch groups SYNTAX EXAMPLE RELATED COMMANDS eth switch group list eth switch group list Group 0 Ports 4 Group 1 Ports 1 Group 2 Ports 2 3 eth switch group mov...

Page 316: ...r 0 3 port number 1 4 group A number between 0 and 4 Represents the group ID to which the port must be moved REQUIRED port A number between 01 and 4 Represents the port to be moved REQUIRED eth switch...

Page 317: ...rror capture port number 1 4 port The port to be the Mirror Capture Port Note If no port number is specified then the port number of the Mirror Capture Port is shown REQUIRED eth switch mirror capture...

Page 318: ...umber 1 4 state enabled disabled port The port to be the Mirror Egress Port Note If no port number is specified then the port number of the current Mirror Egress Port is shown REQUIRED state Enable or...

Page 319: ...mber 1 4 state enabled disabled port The port to be the Mirror Ingress Port Note If no port number is specified then the port number of the current Mirror Ingress Port is shown REQUIRED state Enable o...

Page 320: ...Eth Commands E DOC CTC 20050531 0058 v1 0 300...

Page 321: ...es the commands of the expr command group Contents This chapter covers the following commands expr add Add a subexpression to an expression 302 expr delete Delete an expression 305 expr flush Flush al...

Page 322: ...name or number dstportend supported TCP UDP port name or number icmptype supported ICMP type name or number icmpcode number 0 15 icmpcodeend number 0 15 If a value is preceded by a it means NOT For ex...

Page 323: ...elect one of the supported TCP UDP port names see Supported TCP UDP Port Names on page 639 or alternatively specify the port number OPTIONAL srcportend The source TCP UDP port range end inclusive Sele...

Page 324: ...1720 2 proto 17 dst prt 1718 3 proto 17 dst prt 1719 expr add name myEXPR type intf intf Internet intfgroup lan expr list name type use flags expression _myPPP_ppp intf 0 D 1 intf myPPP_ppp _eth0 int...

Page 325: ...8 ip 0 D 1 addr 10 0 0 138 _192 168 1 254 ip 0 D 1 addr 192 168 1 254 DiffServ serv 0 1 dscp 0 sip serv 1 1 proto 17 dst prt 5060 2 proto 6 dst prt 5060 h323 serv 1 1 proto 6 dst prt 1720 2 proto 17 d...

Page 326: ...Expr Commands E DOC CTC 20050531 0058 v1 0 306 expr flush Flush all the expressions SYNTAX expr flush...

Page 327: ...pecified all the expressions will be listed OPTIONAL type The expression type Choose between intf ip serv Note If not specified the expressions of all types will be shown OPTIONAL format Select the ou...

Page 328: ...P_LISTEN_sv_0 serv 1 D 1 proto 1 SENDTO_LISTEN_sv_0 serv 1 D 1 proto 17 PING_RESPONDER_sv_0 serv 1 D 1 proto 1 icmp type 8 HTTPI_sv_0 serv 1 D 1 proto 6 dst prt 8080 icmp serv 1 1 proto 1 igmp serv 2...

Page 329: ...oxy expr add name icmp type serv proto icmp expr add name igmp type serv proto igmp expr add name ftp type serv proto tcp dstport ftp expr add name telnet type serv proto tcp dstport telnet expr add n...

Page 330: ...name or number dstportend supported TCP UDP port name or number icmptype supported ICMP type name or number icmpcode number 0 15 icmpcodeend number 0 15 If a value is preceded by a it means NOT For e...

Page 331: ...The TCP UDP port or beginning of range the packet is coming from Select one of the supported TCP UDP port names see Supported TCP UDP Port Names on page 639 or alternatively specify the protocol numbe...

Page 332: ...Expr Commands E DOC CTC 20050531 0058 v1 0 312...

Page 333: ...figure the firewall trace options 324 firewall level add Add a security level 325 firewall level delete Delete a security level 327 firewall level flush Flush the security level configuration 328 fire...

Page 334: ...ations shown below SYN PSH SYN PSH URG SYN FIN SYN FIN PSH SYN FIN RST PSH FIN flag set without ACK All flags set No flags set exact check and permit only combinations of flag with the TCP state of a...

Page 335: ...all Commands E DOC CTC 20050531 0058 v1 0 315 EXAMPLE firewall config firewall config state enabled keep disabled tcpchecks fast icmpchecks enabled logdefault disabled logthreshold enabled tcpwindow 6...

Page 336: ...Firewall Commands E DOC CTC 20050531 0058 v1 0 316 firewall clear Flush the firewall configuration SYNTAX firewall clear...

Page 337: ...irewall list Config State enabled Keep disabled TcpChecks fast TcpWindow 65536 IcmpChecks enabled LogDefault disabled LogThreshold enabled Modules Module State Text Hooks fire enabled Firewall Adminis...

Page 338: ...em forward_level system sink_system_service system forward_level_BlockAll system forward_level_Standard system forward_level_Disabled system firewall chain add chain myCHAIN firewall chain list Chains...

Page 339: ...ce system forward_level system sink_system_service system forward_level_BlockAll system forward_level_Standard system forward_level_Disabled system myCHAIN user firewall chain delete chain myCHAIN fir...

Page 340: ...Firewall Commands E DOC CTC 20050531 0058 v1 0 320 firewall chain flush Flush all chains SYNTAX firewall chain flush...

Page 341: ...utput in clear text cli the chains are shown via the CLI commands configuration The default is pretty OPTIONAL firewall chain list Chains Name Description sink system forward system source system sink...

Page 342: ...seq ack win errors detected 5 ICMP errors with partial info 0 ICMP errors without cause 0 ICMP replies without request 0 Packet replay errors 0 firewall debug clear firewall debug stats Statistics Us...

Page 343: ...kets parsed 2554 Packets parsed in hook sink 1461 Packets parsed in hook forward 12 Packets parsed in hook source 1041 Packets dropped in hook sink 0 Packets dropped in hook forward 0 Packets dropped...

Page 344: ...ble tcpchecks traces The default is disabled OPTIONAL udpchecks Disable or enable udpchecks traces The default is disabled OPTIONAL icmpchecks Disable or enable icmpchecks traces The default is disabl...

Page 345: ...ecurity level is readonly enabled or not disabled The default is enabled OPTIONAL udptrackmode Select the UDP connection tracking mode Choose between strict replies to a request from a client must be...

Page 346: ...pass through your SpeedTouch firewall level add name Test text Another level in the firewall firewall level list Level Config Active level Disabled nr name udptrack service readonly description 1 Blo...

Page 347: ...ll 3 Disabled loose enabled yes Disabled the firewall All traffic is allowed to pass through your SpeedTouch 4 Test strict disabled yes Another level in the firewall firewall level add name Test text...

Page 348: ...Firewall Commands E DOC CTC 20050531 0058 v1 0 328 firewall level flush Flush the security level configuration SYNTAX firewall level flush...

Page 349: ...ns and block all incoming traffic Services and Application Sharing are allowed to open pinholes in the firewall 3 Disabled loose enabled yes Disabled the firewall All traffic is allowed to pass throug...

Page 350: ...Firewall Commands E DOC CTC 20050531 0058 v1 0 330 firewall level delete Delete a security level...

Page 351: ...nly enabled or not disabled OPTIONAL udptrackmode Select the UDP connection tracking mode Choose between strict replies to a request from a client must be in a specific window to the client loose inbo...

Page 352: ...ffic is allowed to pass through your SpeedTouch 4 Test strict disabled yes Another level in the firewall firewall level modify name Test udptrackmode loose firewall level list Level Config Active leve...

Page 353: ...description 1 BlockAll strict disabled yes Use this Security Level to block all traffic from and to the Internet 2 Standard loose enabled yes Use this Security Level to allow all outgoing connections...

Page 354: ...f_0 PING_RESPONDER_if_0 _Internet _lan1 _wan1 _dmz1 _guest1 dstip private ssdp_ip mdap_ip _10 0 0 138 _192 168 1 254 _192 168 2 254 _192 168 3 254 serv PPTPD_sv_0 PPTPGRE_sv_0 HTTP_sv_0 HTTPs_sv_0 RIP...

Page 355: ...e of the source interface expression OPTIONAL srcip The name of the source IP expression OPTIONAL dstintf The name of the destination interface expression OPTIONAL dstip The name of the destination IP...

Page 356: ...delete Delete a firewall rule SYNTAX where RELATED COMMANDS firewall rule delete chain string index number chain The name of the chain in which a rule must be deleted REQUIRED index The number of the...

Page 357: ...8 v1 0 337 firewall rule flush Flush all firewall rules SYNTAX where firewall rule flush chain string chain The name of the chain for which the rules must be flushed Note If not specified the rules of...

Page 358: ...retty cli chain The name of the chain for which the rules must be listed Note If not specified the rules of all the chains are shown OPTIONAL format Select the output format in which the list must be...

Page 359: ...cept TELNET_sv_0 TELNET_if_0 15 CDE FTP accept FTP_sv_0 FTP_if_0 16 CDE HTTPs accept HTTPs_sv_0 HTTPs_if_0 17 CDE HTTP accept HTTP_sv_0 HTTP_if_0 forward 1 CDE link forward_fire 2 CDE link forward_hos...

Page 360: ...The name of the chain which contains the rule REQUIRED index The number of the rule in the chain REQUIRED newindex The number of the rule in the chain OPTIONAL name The name of the new rule OPTIONAL...

Page 361: ...s chain index packets bytes sink 1 0 0 2 4 192 forward 1 0 0 2 0 0 3 10 480 source 1 0 0 sink_fire 1 0 0 source_fire 1 0 0 forward_level 1 10 480 sink_system_service 1 1 48 2 0 0 16 0 0 17 2 96 forwar...

Page 362: ...Firewall Commands E DOC CTC 20050531 0058 v1 0 342 RELATED COMMANDS firewall rule debug stats Show the firewall rule statistics...

Page 363: ...of the rule in the chain Note If not specified the statistics for all the rules in the chain are shown OPTIONAL firewall rule debug stats chain index packets bytes sink 1 0 0 2 4 192 forward 1 0 0 2...

Page 364: ...onfig Display or modify the rule trace configuration SYNTAX where EXAMPLE firewall rule debug traceconfig trace disabled enabled trace Enable or disable rule traces The default is disabled OPTIONAL fi...

Page 365: ...g Protocol GRP configuration settings 346 grp flush Flush the GRP interface settings and parameters 347 grp rtlist Show the current routes in the GRP interfaces routing table 348 grp rip config Config...

Page 366: ...ance of the connected route type The default is 0 OPTIONAL kdistance A number between 0 and 255 Sets the distance of the kernel route type The default is 1 OPTIONAL rdistance A number between 0 and 25...

Page 367: ...GRP Commands E DOC CTC 20050531 0058 v1 0 347 grp flush Flush the GRP interface settings and parameters SYNTAX grp flush...

Page 368: ...The destination IP address mask either in dotted or in numerical cidr notation OPTIONAL grp rtlist Codes K kernel C connected S static R rip FIB route destination 10 0 0 0 24 Route type C distance 0 N...

Page 369: ...pecified as such The actual RIP version to be used is negotiated with the remote side rip_v1 RIP version 1 is used rip_v2 RIP version 2 is used The default is rip_v2 OPTIONAL defmetric A number betwee...

Page 370: ...enabled Global RIP queries received 0 Global RIP route changes 0 Default version send rip_v2 receive rip_v2 Default redistribution metric is 1 Sending routing table updates every 30 seconds with 5 Ro...

Page 371: ...GRP Commands E DOC CTC 20050531 0058 v1 0 351 grp rip flush Flush the RIP interface settings and global parameters SYNTAX grp rip flush...

Page 372: ...remote side rip_v1 RIP version 1 is used rip_v2 RIP version 2 is used rip_v1 2 RIP version 1 and RIP version 2 are used The default is rip_unspec OPTIONAL rxversion Configure the RIP receive version t...

Page 373: ...OC CTC 20050531 0058 v1 0 353 EXAMPLE grp rip ifconfig intf myPPP_ppp rip disabled txversion rip_unspec rxversion rip_unspec authmode none authstr passive disabled splithorizon enabled grp rip ifconfi...

Page 374: ...ds Import of connected routes is enabled Import of kernel routes is enabled Import of static routes is enabled Import of default kernel route is enabled Import of default static route is enabled Expor...

Page 375: ...r covers the following commands hostmgr add Add host device info to the host manager 356 hostmgr clear Remove all the hosts from the list 358 hostmgr config Configure the host manager parameters 359 h...

Page 376: ...ge_device ipintf string ethintf string physintf string mac_addr The MAC address of the host to be added REQUIRED ip_addr The host IP address OPTIONAL name The host name OPTIONAL type The host type Cho...

Page 377: ...twork ethif4 MyComputer hostmgr add mac_addr 00 10 a4 33 56 53 name Play type Playstation hostmgr list MAC address IP address Flags Type Intf Hw Intf Hostname 00 10 a4 33 56 53 0 0 0 0 Playstation eth...

Page 378: ...DS hostmgr clear hostmgr list MAC address IP address Flags Type Intf Hw Intf Hostname 00 10 a4 33 56 53 0 0 0 0 Playstation ethif1 ethif1 Play 00 10 a4 ad 32 cf 192 168 1 64 C Generic Device LocalNetw...

Page 379: ...Enable or disable the host manager daemon The default is enabled OPTIONAL scantime A number between 10 an 600 seconds Represents the time between two scans The default is 30 seconds OPTIONAL autosave...

Page 380: ...Type Intf Hw Intf Hostname 00 10 a4 33 56 53 0 0 0 0 Playstation ethif1 ethif1 Play 00 10 a4 ad 32 cf 192 168 1 64 C Generic Device LocalNetwork ethif4 MyComputer hostmgr delete mac_addr 00 10 a4 fa...

Page 381: ...Hostmgr Commands E DOC CTC 20050531 0058 v1 0 361 hostmgr flush Flush the host manager configuration The host manager configuration is cleaned and returned to default values SYNTAX hostmgr flush...

Page 382: ...list hostmgr list MAC address IP address Flags Type Intf Hw Intf Hostname 00 10 a4 33 56 53 0 0 0 0 Playstation ethif1 ethif1 Play 00 10 a4 ad 32 cf 192 168 1 64 C Generic Device LocalNetwork ethif4...

Page 383: ...figuration 366 ids parser modify Modify the IDS parser configuration 367 ids pattern clear Reset the pattern tracker 368 ids pattern list Display the patterns in the pattern tracker 369 ids pattern st...

Page 384: ...IDS Commands E DOC CTC 20050531 0058 v1 0 364 ids clear Reset the IDS statistics SYNTAX RELATED COMMANDS ids clear ids parser list Display the IDS parser configuration...

Page 385: ...System IDS configuration SYNTAX where EXAMPLE ids config state disabled enabled trace disabled enabled state Enable or disable IDS checks The default is enabled OPTIONAL trace Enable or disable traci...

Page 386: ...66 ids parser list Display the IDS parser configuration SYNTAX where EXAMPLE ids parser list parser parser parser The name of the parser REQUIRED ids parser list parser state fragment enabled scan ena...

Page 387: ...ngth fragment size 0 log drop enabled fragment small fragment size 0 log drop enabled fragment fragment size overrun 0 log drop enabled fragment fragment overlap 0 log drop enabled fragment fragment o...

Page 388: ...maximum number of hash collisions 1 of hash entries with collisions 0 09 of hash entries unused 99 31 ids pattern clear ids pattern stats Pattern tracker statistics memory 32768 bytes maximum number o...

Page 389: ...S pattern list that will be shown Choose between 10 100 full or alternatively specify a number The default is full OPTIONAL ids pattern list 1 40002 UDP count 1 period 00001564 00001565 2 30002 UDP 25...

Page 390: ...ker statistics memory 32768 bytes maximum number of patterns 512 number of active patterns 8 number of recycled patterns 0 number of pattern searches 9 number of new patterns 8 maximum number of hash...

Page 391: ...an tcp_syn_scan stealth_tcp_null_scan stealth_tcp_fin_scan stealth_tcp_xmas_scan stealth_tcp_full_xmas_scan stealth_tcp_vecna_scan stealth_tcp_syn fin_scan udp_port_scan ping_sweep_scan tcp_syn_flood...

Page 392: ...alth_tcp_fin_scan stealth_tcp_xmas_scan stealth_tcp_full_xmas_scan stealth_tcp_vecna_scan stealth_tcp_syn fin_scan udp_port_scan ping_sweep_scan tcp_syn_flood udp_flood ping_flood icmp_unreachable_sto...

Page 393: ...isabled 3 ids tcp rate 10 300 enabled 4 ids udp rate 1 200 disabled 5 ids icmp rate 1 200 disabled 6 ids ip rate 1 200 disable ids threshold clear ids threshold list index name window limit scaling 1...

Page 394: ...t ids threshold list index name window limit scaling 1 ids scan 20 20 enabled 2 ids flood 2 100 disabled 3 ids tcp rate 1 200 disabled 4 ids udp rate 1 200 disabled 5 ids icmp rate 1 200 disabled 6 id...

Page 395: ...ng Enable or disable scaling of the threshold window OPTIONAL ids threshold list index name window limit scaling 1 ids scan 20 20 enabled 2 ids flood 2 100 disabled 3 ids tcp rate 1 200 disabled 4 ids...

Page 396: ...IDS Commands E DOC CTC 20050531 0058 v1 0 376...

Page 397: ...DOC CTC 20050531 0058 v1 0 377 Interface Commands Introduction This chapter describes the commands of the interface command group Contents This chapter covers the following commands interface list Di...

Page 398: ...ted 0 interface list expand enabled Name Type State Use UL Interfaces ethif1 physical connected 1 bridge Flags INTERNAL Phys intf 0 type eth speed 100 Mbps ethif4 physical connected 1 bridge Flags INT...

Page 399: ...an IP interface 395 ip ipconfig Modify an IP address configuration 396 ip ipdelete Remove an IP address from an IP interface 397 ip iplist Display all the configured IP addresses 398 ip mcadd Add a mu...

Page 400: ...0058 v1 0 380 ip debug sendto Send UDP packets 415 ip debug stats Display IP statistics 417 ip debug traceconfig Display modify the IP stack trace configuration 418 ip debug traceroute Send ICMP UDP p...

Page 401: ...hernet MAC address of the entry to be added OPTIONAL ip arplist Interface IP address HW address Type 2 eth0 10 0 0 1 00 10 a4 ad 32 cf STATIC ip arpadd intf eth0 ip 10 0 0 2 ip arplist Interface IP ad...

Page 402: ...hernet MAC address of the entry to be deleted OPTIONAL ip arplist Interface IP address HW address Type 2 eth0 10 0 0 1 00 10 a4 ad 32 cf STATIC 2 eth0 10 0 0 2 00 00 00 00 00 00 DYNAMIC 2 eth0 10 0 0...

Page 403: ...arplist ip arplist Interface IP address HW address Type 2 eth0 10 0 0 1 00 10 a4 ad 32 cf STATIC 2 eth0 10 0 0 2 00 00 00 00 00 00 DYNAMIC 2 eth0 10 0 0 3 00 a0 24 ae 66 e1 STATIC ip arpadd Add an ent...

Page 404: ...packets are packets with the route to follow specified in the header The default is disabled for security reasons OPTIONAL netbroadcasts Disable or enable net directed broadcasts The default is disabl...

Page 405: ...dress configuration of the SpeedTouch itself and besides the checking of traffic on a constants level additional checking is performed on the IP addresses that are determined by the configuration more...

Page 406: ...urations for example from PPP or CIP links remain SYNTAX The flush command does not impact previously saved configurations The command ip flush deletes all local IP connectivity Do not use this comman...

Page 407: ...wan 1500 0 0 0 DOWN 2 RtPPPoE_ppp wan 1500 0 0 0 DOWN 3 LocalNetwork lan 1500 84105 123358 0 UP 00 0e 50 0f fc 2c ip ifadd intf myIPintf dest RtPPPoE_eth ip iflist Interface Group MTU RX TX TX Drop St...

Page 408: ...nternet wan 1500 0 0 0 DOWN 2 RtPPPoE_ppp wan 1500 0 0 0 DOWN 3 LocalNetwork lan 1500 86589 125262 0 UP 00 0e 50 0f fc 2c 4 myIPintf wan 1500 0 0 0 DOWN 00 0e 50 0f fc 2c ip ifattach intf myIPintf ip...

Page 409: ...der to be used on this interface Note The default value depends on the connection and packet service for which the interface was created OPTIONAL status The administrative state of the interface Choos...

Page 410: ...2c ip ifconfig intf myIPintf mtu 1500 status up hwaddr 00 0e 50 0f fc 2c group wan linksensing enabled primary enabled ip ifconfig intf myIPintf ip iflist Interface Group MTU RX TX TX Drop Status HW...

Page 411: ...DOWN 2 RtPPPoE_ppp wan 1500 0 0 0 DOWN 3 LocalNetwork lan 1500 86589 125262 0 UP 00 0e 50 0f fc 2c 4 myIPintf wan 1500 0 0 0 UP 00 0e 50 0f fc 2c ip ifdelete intf myIPintf ip iflist Interface Group M...

Page 412: ...unicastpkts 0 brcastpkts 0 TX unicastpkts 0 brcastpkts 0 droppkts 0 Oper state DOWN Admin State UP Flags PRIMARY ARP BROADCAST BOUND ARPTABLE MULTICAST LINKSENSING STATIC ip ifdetach intf myIPintf ip...

Page 413: ...d OPTIONAL ip iflist Interface Group MTU RX TX TX Drop Status HW address 0 loop local 65535 123966 75177 0 UP 00 0e 50 0f fc 2c 1 Internet wan 1500 0 0 0 DOWN 2 RtPPPoE_ppp wan 1500 0 0 0 DOWN 3 Local...

Page 414: ...erface name REQUIRED timeout A number between 1 and 600000 seconds Represents the timeout OPTIONAL adminstatus The administrative state of the interface Choose between down up OPTIONAL operstatus The...

Page 415: ...pical net subnet routes automatically according to the default or specified subnet mask enabled or not disabled The default is disabled OPTIONAL ip iplist Interface Type IP address Point to point Mask...

Page 416: ...his IP address the primary address for the interface enabled or not disabled The default is disabled OPTIONAL ip iplist Interface Type IP address Point to point Mask 1 eth0 Ethernet 10 0 0 138 255 255...

Page 417: ...k 1 eth0 Ethernet 10 0 0 2 255 255 255 0 1 eth0 Ethernet 10 0 0 138 255 255 255 0 1 eth0 Ethernet 169 254 141 11 255 255 0 0 0 loop Ethernet 127 0 0 1 255 0 0 0 ip ipdelete addr 10 0 0 2 ip iplist Int...

Page 418: ...OMMANDS ip iplist ip iplist Interface Type IP address Point to point Mask 2 LocalNetwork Ethernet 10 0 0 138 255 255 255 0 2 LocalNetwork Ethernet 192 168 1 254 255 255 255 0 0 loop Ethernet 127 0 0 1...

Page 419: ...dr intf The IP interface name REQUIRED addr The multicast IP address REQUIRED mask The multicast IP address mask associated with this address Note Use 0 for promiscuous mode OPTIONAL ip mcadd intf ETH...

Page 420: ...f The IP interface name REQUIRED addr The multicast IP address REQUIRED mask The multicast IP address mask associated with this address Note Use 0 for promiscuous mode OPTIONAL ip mclist Interface Add...

Page 421: ...ticast addresses SYNTAX EXAMPLE RELATED COMMANDS ip mclist ip mclist Interface Address Mask 2 ETHoA_1 192 178 14 11 255 255 255 255 ip mcadd Add a multicast address to a multicast capable interface ip...

Page 422: ...nterface routes the outgoing IP interface name Note The parameters gateway and intf are mutually exclusive OPTIONAL srcintf Use this interface for source address selection OPTIONAL metric The metric f...

Page 423: ...rameters gateway and intf are mutually exclusive OPTIONAL intf Only for special interface routes the outgoing IP interface name Note The parameters gateway and intf are mutually exclusive OPTIONAL ip...

Page 424: ...Interface Metric Status 10 0 0 138 32 127 0 0 1 loop 0 UP 127 0 0 1 32 127 0 0 1 loop 0 UP 10 0 0 0 24 10 0 0 138 eth0 0 UP ip rtlist expand enabled Destination Label Gateway Interface Metric Status...

Page 425: ...IP Commands E DOC CTC 20050531 0058 v1 0 405 ip auto flush Flush the autoIP interfaces SYNTAX ip auto flush...

Page 426: ...for which a link local address has to be allocated REQUIRED dest The preferred link local IP address OPTIONAL ip auto ifadd intf eth0 ip auto iflist eth0 INIT 0 0 0 0 poolstart 169 254 1 1 poolend 169...

Page 427: ...ched REQUIRED ip auto iflist ipsec0 INIT 0 0 0 0 poolstart 169 254 1 1 poolend 169 254 254 254 netmask 255 255 0 0 claim 10 defence 5 probe 4 interval 2 sec probes sent 0 collisions 0 ip auto ifattach...

Page 428: ...address of the link local address pool The default is 169 254 254 254 OPTIONAL netmask The netmask of the link local IP address pool The default is 16 OPTIONAL claim A number between 0 and 65535 Repre...

Page 429: ...69 254 254 254 netmask 255 255 0 0 claim 10 defence 5 probe 4 interval 2 sec probes sent 0 collisions 0 ip auto ifconfig intf ipsec0 claim 5 probe 5 ip auto iflist ipsec0 INIT 0 0 0 0 poolstart 169 25...

Page 430: ...tf The name of the IP interface to be deleted REQUIRED ip auto iflist ipsec0 SELECTING 169 254 80 236 poolstart 169 254 1 1 poolend 169 254 254 254 netmask 255 255 0 0 claim 10 defence 5 probe 4 inter...

Page 431: ...d REQUIRED ip auto iflist ipsec0 SELECTING 169 254 80 236 poolstart 169 254 1 1 poolend 169 254 254 254 netmask 255 255 0 0 claim 10 defence 5 probe 4 interval 2 sec probes sent 2 collisions 0 ip auto...

Page 432: ...the autoIP interface to be listed Note If not specified all the autoIP interfaces are shown OPTIONAL ip auto iflist eth0 CLAIMED 169 254 138 1 poolstart 169 254 1 1 poolend 169 254 254 254 netmask 255...

Page 433: ...nse back from the HTTP Server the probe retrieves the base HTML page only as body and does not request hyperlinks within this page The SpeedTouch will send the HTTP request receive the reply and repor...

Page 434: ...g ICMP packets enabled or only send ICMP packets disabled The default is enabled OPTIONAL ip debug ping addr 10 0 0 148 listen disabled ip debug ping addr 10 0 0 148 listen enabled 9 bytes from 10 0 0...

Page 435: ...nterval between two sent UDP packets The default is 100 OPTIONAL listen Listen for incoming ICMP packets enabled or only send ICMP packets disabled The default is disabled OPTIONAL srcaddr The IP sour...

Page 436: ...cport 19 dstport 1025 ip debug sendto addr 10 0 0 148 listen on srcport 19 dstport 1025 1 bytes from 10 0 0 148 1025 41 A ip debug sendto addr 10 0 0 148 count 3 listen on srcport 19 dstport 1025 1 by...

Page 437: ...s received 8599 IP header errors 0 Datagrams forwarded 23 Datagram forwarding errors 3 Datagram forwarding resource errors 0 Total Fragments received 0 Fragments dropped due to resources or timeouts 0...

Page 438: ...default is none OPTIONAL forward Define the forward packets that will be traced The default is none OPTIONAL output Define the output packets that will be traced The default is none OPTIONAL drop Def...

Page 439: ...the traceroute packet s The default is 1 OPTIONAL interval A number between 100 and 10000000 milliseconds Represents the intermediate interval between two packets The default is 1000 OPTIONAL maxhops...

Page 440: ...0058 v1 0 420 EXAMPLE ip debug traceroute addr 192 193 195 250 count 3 size 1 interval 1000 maxhops 30 dstport 33433 maxfail 5 type icmp utime yes ip debug traceroute addr 192 193 195 250 ttl 1 192 19...

Page 441: ...ntiation 422 ipqos list Display the IPQoS configuration 424 ipqos ef config Configure the IPQoS Expedited Forwarding EF timer for an interface 425 ipqos ef list Display the IPQoS EF timers 426 ipqos e...

Page 442: ...maxbytes number 0 128 dest The destination interface for the IPQoS queues instantiation This is an ATM phonebook entry REQUIRED state Disable or enable IPQoS for the interface The default is disabled...

Page 443: ...ue 2 used for WFQ or WRR The default is 25 OPTIONAL weight3 A number between 1 and 97 Represents the weight of queue 3 used for WFQ or WRR The default is 25 OPTIONAL weight4 A number between 1 and 97...

Page 444: ...DS ipqos list ipqos list Name State Discard Priority Size Size Rate Burst Weights Packets KBytes KBytes Weights atm_pvc_0_35 disabled early wfq 250 56 80 2 25 25 25 25 atm_pvc_8_35 enabled early wfq 2...

Page 445: ...abled OPTIONAL timeout A number between 100 and 10000 milliseconds Represents the timeout The default is 1000 OPTIONAL mtu A number between 68 and 65535 Represents the MTU of the IP interface in case...

Page 446: ...MPLE RELATED COMMANDS ipqos ef list ipqos ef list Interface State Timeout MTU ms bytes loop disabled 1000 65535 Rt_PPPoA2 enabled 1000 1500 eth0 disabled 1000 1500 ipqos ef config Configure the IPQoS...

Page 447: ...timer statistics SYNTAX EXAMPLE RELATED COMMANDS ipqos ef stats ipqos ef stats Interface State Remain ms loop active 900 Rt_PPPoA2 active 900 eth0 disabled 0 ipqos ef config Configure the IPQoS Exped...

Page 448: ...added marked removed dropped replaced PVC_1 0 1240 0 1240 0 0 0 1 0 0 0 0 0 0 2 0 0 0 0 0 0 3 234 0 234 0 0 0 4 0 0 0 0 0 0 5 1345 0 1345 0 0 0 ipqos queue clear ipqos queue stats Name Queue packets p...

Page 449: ...0 is the Best Effort queue OPTIONAL propagate Higher priority packets will be queued in a lower priority queue instead of being dropped as soon as the destination queue is in overflow state The packet...

Page 450: ...number between 0 and 1000 Represents the maximum packet marking probability in parts per mille for early discard strategy The default is 1000 OPTIONAL ipqos queue list Name Queue Propagate ECN AckFilt...

Page 451: ...es usecs atm_pvc_0_35 0 disabled disabled 100 20 13 4 50000 1000 1 disabled disabled disabled 100 20 13 4 50000 1000 2 disabled disabled disabled 100 20 13 4 50000 1000 3 disabled disabled disabled 10...

Page 452: ...queues instantiation This is an ATM phonebook entry Note If not specified the IPQoS subqueue statistics for all the interfaces will be shown OPTIONAL ipqos queue stats Name Queue packets packets packe...

Page 453: ...n add Add a new label chain 440 label chain delete Delete a label chain 441 label chain flush Flush all label chains 442 label chain list Display a list of chains 443 label rule add Add a label rule 4...

Page 454: ...0 disabled 0 0 disabled default increase default prioritize disabled disabled disabled tos 0 disabled 0 0 disabled label add name myLABEL label list Name Class Def Ack Bidirect Inherit Tosmark Type Va...

Page 455: ...0 disabled 0 0 disabled VoIP overwrite 14 14 enabled enabled disabled tos 0 disabled 0 0 disabled default increase default prioritize disabled disabled disabled tos 0 disabled 0 0 disabled myLABEL ign...

Page 456: ...Label Commands E DOC CTC 20050531 0058 v1 0 436 label flush Flush all labels SYNTAX The flush command does not impact previously saved configurations label flush...

Page 457: ...active increase 8 8 disabled disabled disabled tos 0 disabled 0 0 disabled Management increase 12 12 disabled disabled disabled tos 0 disabled 0 0 disabled Video increase 10 10 disabled disabled disab...

Page 458: ...lass and ackclass but use the class as set by Layer 2 VLAN user priority ATM QoS overwrite Change the class to defclass and ackclass overwriting the value set by Layer 2 VLAN user priority ATM QoS inc...

Page 459: ...and 255 Represents the TTL in the IP packet used for ttl overwrite The default is 0 OPTIONAL trace Enable or disable IP tracing for this label The default is disabled OPTIONAL label list Name Class De...

Page 460: ...escription routing_labels system rt_user_labels user rt_default_labels user qos_labels system qos_user_labels user qos_default_labels user label chain add chain myChain label chain list Chains Name De...

Page 461: ...e Description routing_labels system rt_user_labels user rt_default_labels user qos_labels system qos_user_labels user qos_default_labels user myChain user label chain delete chain myChain label chain...

Page 462: ...Label Commands E DOC CTC 20050531 0058 v1 0 442 label chain flush Flush all label chains SYNTAX label chain flush...

Page 463: ...on is shown via the CLI commands configuration The default is pretty OPTIONAL label chain list Chains Name Description routing_labels system rt_user_labels user rt_default_labels user qos_labels syste...

Page 464: ...er of the rule before which the new rule must be added Tip Use the command label rule list to obtain the index number of the applicable rule OPTIONAL name The name of the new rule OPTIONAL clink The n...

Page 465: ...ault wan label rule add chain myChain name myRule dstip 150 150 150 150 serv DiffServ log enabled state enabled label myLABEL label rule list Rules flags C Constant D Dynamic E Enable L Log Chain Nr F...

Page 466: ...os_user_labels 2 CDE link qos_default_labels qos_default_labels 1 C E VoIP sip 2 C E VoIP h323 3 C E Interactive telnet 19 E Management icmp 20 C E Video rtsp 21 C E Video igmp 22 C E default default...

Page 467: ...abel rules The chains themselves are not removed SYNTAX where The flush command does not impact previously saved configurations label rule flush chain string chain The name of the chain to be flushed...

Page 468: ...enabled label Interactive label rule add chain qos_default_labels index 9 serv pop3s log disabled state enabled label Interactive label rule add chain qos_default_labels index 10 serv pop3 log disabl...

Page 469: ...he chain which contains the rule REQUIRED index The number of the rule in the chain REQUIRED newindex The new number of the rule in the chain OPTIONAL name The name of the new rule OPTIONAL clink The...

Page 470: ...e position of the rule in the chain Note If not specified the statistics for all the rules in a chain will be cleared OPTIONAL label rule debug stats chain qos_labels chain index packets bytes qos_lab...

Page 471: ...own OPTIONAL index The index number of the rule for which the statistics must be shown Tip Use the command label rule list to obtain the index number of the applicable rule Note If not specified the s...

Page 472: ...econfig Display or modify the rule trace configuration SYNTAX where EXAMPLE label rule debug traceconfig trace disabled enabled trace Disable or enable rule traces The default is disabled OPTIONAL lab...

Page 473: ...duction This chapter describes the commands of the language command group Contents This chapter covers the following commands language config Select a language 454 language delete Delete one or all la...

Page 474: ...X where EXAMPLE RELATED COMMANDS language config language string language Language code OSI language code 2 chars for language Example en for english OPTIONAL language config language en language dele...

Page 475: ...ives SYNTAX where RELATED COMMANDS language delete file string all yes no file The filename of the language archive to be removed OPTIONAL all Remove all languages archives yes or not no The default i...

Page 476: ...rchives SYNTAX EXAMPLE RELATED COMMANDS language list language list CODE LANGUAGE VERSION FILENAME en English 5 3 0 10 0 system The currently selected language is indicated by a next to the OSI langua...

Page 477: ...1 mlp debug traceconfig Modify the MLP trace settings 462 mlp privilege add Add a privilege 463 mlp privilege addzone Add a zone to a privilege 464 mlp privilege config Modify a privilege 465 mlp priv...

Page 478: ...MLP Commands E DOC CTC 20050531 0058 v1 0 458 mlp flush Flush all the Multi Level access Policies MLP structures SYNTAX mlp flush...

Page 479: ...mlp import Import all the scores SYNTAX where RELATED COMMANDS mlp import trace disabled enabled full trace Select the import trace level Choose between disabled enabled full The default is disabled O...

Page 480: ...MLP Commands E DOC CTC 20050531 0058 v1 0 460 mlp debug export Export all the scores SYNTAX RELATED COMMANDS mlp debug export mlp import Import all the scores...

Page 481: ...E DOC CTC 20050531 0058 v1 0 461 mlp debug stats Display MLP statistics SYNTAX EXAMPLE mlp debug stats mlp debug stats Roles cur free max 8 7 15 Privileges cur free max 35 25 60 ListItems cur free ma...

Page 482: ...g traceconfig Modify the MLP trace settings SYNTAX where EXAMPLE mlp debug traceconfig trace disabled enabled full trace Select the trace level Choose between disabled enabled full The default is disa...

Page 483: ...scription anyaccess access All access privileges granted AP1 access LAN_Local_all AP2 access LAN_Local with all secured channels AP3 access LAN_Local with all channels access to sensitive files AP15 a...

Page 484: ...be added mlp privilege addzone name string zone string name The name of the privilege in which a zone must be added REQUIRED zone The name of the new zone REQUIRED mlp privilege list type access name...

Page 485: ...ege descr My test privilege score a12 def4 mlp privilege list verbose all anyaccess access All access privileges granted unsecure_connection channel_ftp channel_telnet channel_http channel_mdap channe...

Page 486: ...s to sensitive file AP10 access LAN access to sensitive file secured channels except telnet AP11 access All origins_noHTTP AP12 access All origins_from all secured channels no http AP13 access All ori...

Page 487: ...service Privilege type Description anyservice service All service privileges granted SP1 service Limited_Read SP2 service detailed_Read SP3 service Write_to_LAN SP4 service Write_FWD_RT_normal_FW_cfg...

Page 488: ...e removed mlp privilege removezone name string zone string name The name of the privilege in which a zone must be removed REQUIRED zone The name of the zone to be removed REQUIRED mlp privilege list n...

Page 489: ...ew pages remote assistance via HTTP HTTPS from LAN LAN_Admin Administrator Only LAN related configurations from any Channel Origin WAN_Admin Administrator Only WAN related configurations from any Chan...

Page 490: ...f the role REQUIRED access The name of the access privilege to be added REQUIRED service The name of the service privilege to be added REQUIRED mlp role list name myRole verbose all myRole User My use...

Page 491: ...he role to be configured REQUIRED parent The name of the parent role OPTIONAL descr The role description Note The maximum length is 63 characters OPTIONAL mlp role list name myRole verbose all myRole...

Page 492: ...Only LAN related configurations from any Channel Origin WAN_Admin Administrator Only WAN related configurations from any Channels Origin myRole Guest My user access mlp role delete name myRole mlp ro...

Page 493: ...erUser Any service and any channels from WAN Administrator TechnicalSupport Any service and any access from LAN Local origin only PowerUser Administrator GUI Service overview page via http https from...

Page 494: ...The name of the role REQUIRED access The name of the access privilege to be deleted REQUIRED service The name of the service privilege to be deleted OPTIONAL mlp role list name myRole verbose all myR...

Page 495: ...nat iflist Display the address translation configuration on all the interfaces 479 nat mapadd Add an address mapping to a Network Address Translation NAT enabled interface 480 nat mapdelete Delete an...

Page 496: ...g Display modify global NAT configuration options SYNTAX where EXAMPLE nat config trace disabled enabled trace Enable or disable traces The default is disabled REQUIRED nat config NAT traces disabled...

Page 497: ...NAT Commands E DOC CTC 20050531 0058 v1 0 477 nat flush Flush the current NAT configuration SYNTAX nat flush...

Page 498: ...n is disabled enabled Address translation is enabled transparent An inside address is translated into the same outside IP address In fact no translation happens and the IP packets passing through the...

Page 499: ...the address translation configuration on all the interfaces SYNTAX EXAMPLE RELATED COMMANDS nat iflist nat iflist Interface NAT loop disabled Internet enabled RtPPPoE_ppp enabled LocalNetwork transpa...

Page 500: ...only apply if the destination IP address is part of the outside address es Outbound Represents the address es to be used as source address after translation Allowed values are An IP address A B C D o...

Page 501: ...otocol to be used as filter for inbound outbound traffic The NAT map only applies if the protocol of the IP packet matches the map protocol Select an IP protocol see Supported IP Protocols on page 638...

Page 502: ...side Address Inside Address Use 1 NAPT myPPP_ppp 100 100 100 1 unmapped 0 1 NAPT eth0 any 80 127 0 0 1 8080 0 2 NAPT eth0 any 1080 127 0 0 1 8080 0 3 NAPT eth0 any 8080 127 0 0 1 8080 0 maplist intf m...

Page 503: ...side Address Inside Address Use 1 NAPT myPPP_ppp 100 100 100 1 unmapped 0 1 NAPT eth0 any 80 127 0 0 1 8080 0 2 NAPT eth0 any 1080 127 0 0 1 8080 0 3 NAPT eth0 any 8080 127 0 0 1 8080 0 nat mapdelete...

Page 504: ...Idx Type Interface Outside Address Inside Address Use 1 NAPT myPPP_ppp 100 100 100 1 unmapped 0 1 NAPT eth0 any 80 127 0 0 1 8080 0 2 NAPT eth0 any 1080 127 0 0 1 8080 0 3 NAPT eth0 any 8080 127 0 0 1...

Page 505: ...ter intf then the setting for this parameter is ignored OPTIONAL timeout A number between 0 and 6553 seconds Represents the lifetime for this template OPTIONAL type The type of NAT map to be used Choo...

Page 506: ...make use of this map Allowed values are An IP address A B C D or A D meaning A 0 0 D A range of IP addresses A B C D E An IP subnet A B C D M all addresses The default is the inside_addr OPTIONAL for...

Page 507: ...epresents the target TCP UDP ports to which the traffic has to be shifted Allowed values are TCP UDP port range P Q with Q P TCP UDP port number only for port shifting maps Note The size of inside_por...

Page 508: ...tes REQUIRED nat tmpllist Idx Type Interface Ifgroup Outside Address Inside Address Use 1 NAPT any lan 100 200 100 1 unmapped 0 2 NAPT myPPP_ppp any 100 100 100 1 unmapped 0 nat tmpldelete index 1 nat...

Page 509: ...isable expanded listing The default is disabled OPTIONAL nat tmpllist Idx Type Interface Ifgroup Outside Address Inside Address Use 1 NAPT any lan 100 200 100 1 unmapped 0 2 NAPT myPPP_ppp any 100 100...

Page 510: ...The outside IP address index key to instantiate for REQUIRED dynamic_addr The dynamic address to substitute the index key with REQUIRED nat tmplinst intf myPPP_ppp addr_index 100 100 100 1 dynamic_add...

Page 511: ...e PPP interfaces 501 ppp ifscan Scan a PPPoE interface for available Access Concentrator and Service names 502 ppp rtadd Add a route to the routing table when the PPP link comes up 503 ppp rtdelete De...

Page 512: ...PPP Commands E DOC CTC 20050531 0058 v1 0 492 ppp flush Flush all PPP interfaces SYNTAX The flush command does not impact previously saved configurations ppp flush...

Page 513: ...10 term reason IPCP state initial retransm 0 term reason acname service ppp ifadd intf Rt_PPPoA ppp iflist Internet dest RELAY 00 00 00 Retry 10 mode IP routing flags echo magic accomp restart mru ad...

Page 514: ...auto user johndoe ISP password admin state down oper state down link state not connected LCP state initial retransm 10 term reason IPCP state initial retransm 0 term reason ppp ifattach intf Rt_PPPoA...

Page 515: ...nabled silent disabled enabled echo disabled enabled mru number 293 8192 laddr ip address raddr ip address netmask ip mask dotted or cidr format cidr dotted none pool LAN_private none savepwd disabled...

Page 516: ...ween enabled the PPP connection is terminated on the Access Concentrator here the SpeedTouch itself disabled the SpeedTouch is PPP client The default is disabled OPTIONAL auth Select the authenticatio...

Page 517: ...k if a DHCP server pool is associated in other words if the pool parameter is specified OPTIONAL format The negotiated subnetmask specified in the netmask parameter is specified in the dotted format d...

Page 518: ...down oper state down link state not connected LCP state initial retransm 10 term reason IPCP state initial retransm 0 term reason acname service Rt_PPPoA dest 00 00 00 Retry 10 mode IP routing flags...

Page 519: ...PPPoA_atm local disconnect 00 00 00 Retry 10 mode IP routing flags echo magic accomp restart mru addr savepwd dns metric 0 mru 1500 auth auto user johndoe ISP password admin state down oper state down...

Page 520: ...ndoe ISP password admin state up oper state down link state connected LCP state reqsent retransm 5 term reason IPCP state initial retransm 0 term reason ppp ppp ifdetach intf Rt_PPPoA ppp iflist Inter...

Page 521: ...00s left 0s auth auto user password admin state down oper state down link state not connected LCP state initial retransm 10 term reason IPCP state initial retransm 0 term reason acname service Rt_PPPo...

Page 522: ...number between 0 and 36000 seconds Represents the time to scan for services OPTIONAL ppp iflist myRtPPPoE dest RtPPPoE_eth 00 00 00 Retry 10 mode IP routing flags echo magic accomp restart mru addr ro...

Page 523: ...ection acts as default route dstmsk 0 Only the remote sub net is reachable dstmsk 1 The actual destination mask will be the default netmask applicable for destination IP address Only the single remote...

Page 524: ...ansm 10 term reason IPCP state initial retransm 0 term reason ppp rtadd intf Rt_PPPoA dst 0 0 0 0 0 src 10 0 0 0 1 ppp iflist Internet dest RELAY 00 00 00 Retry 10 mode IP routing flags echo magic acc...

Page 525: ...r route savepwd dns metric 0 mru 1500 route dst 0 0 0 0 0 src 10 0 0 0 1 metric 1 auth auto user johndoe ISP password admin state down oper state down link state not connected LCP state initial retran...

Page 526: ...CTC 20050531 0058 v1 0 506 ppp relay flush Remove all Ethernet interfaces from the PPP relay agent list and terminate all sessions SYNTAX The flush command does not impact previously saved configurati...

Page 527: ...P relay agent list REQUIRED ppp relay iflist Interface HWaddr Status 1 ethoa_0_35 00 0e 50 0f fc 2d connected ppp relay ifadd intf ethoa_8_35 ppp relay iflist Interface HWaddr Status 1 ethoa_0_35 00 0...

Page 528: ...eted from the PPP relay agent list REQUIRED ppp relay iflist Interface HWaddr Status 1 ethoa_0_35 00 0e 50 0f fc 2d connected 2 ethoa_8_35 00 0e 50 0f fc 2d connected ppp relay ifdelete intf ethoa_8_3...

Page 529: ...NDS ppp relay iflist intf The Ethernet interface to be added to the PPP relay agent list REQUIRED ppp relay iflist Interface HWaddr Status 1 ethoa_0_35 00 0e 50 0f fc 2d connected 2 ethoa_8_35 00 0e 5...

Page 530: ...DOC CTC 20050531 0058 v1 0 510 ppp relay sesslist Add an Ethernet interface to the PPP relay list SYNTAX where ppp relay ifadd intf string intf The Ethernet interface to be added to the PPP relay agen...

Page 531: ...chapter covers the following commands pptp ifadd Add a Point to Point Tunneling Protocol PPTP profile 512 pptp flush Flush the complete PPTP configuration 513 pptp list Show the current PPTP configura...

Page 532: ...profile Choose between VC_MUX Network Layer Protocol IDentifiers NLPID The default is vcmux OPTIONAL ac The High level Data Link Control HDLC framing option applicable to PPTP interfaces using this P...

Page 533: ...PPTP Commands E DOC CTC 20050531 0058 v1 0 513 pptp flush Flush the complete PPTP configuration SYNTAX The flush command does not impact previously saved configurations pptp flush...

Page 534: ...s E DOC CTC 20050531 0058 v1 0 514 pptp list Show the current PPTP configuration SYNTAX EXAMPLE pptp list pptp list Dialstr Destination QoS Encaps AC State User DIALUP_PPP3 default vcmux never CONNECT...

Page 535: ...ween always Before relaying the encapsulated PPP frames over the PPPoA link make sure that the address and control field 0xFF03 is always in front of the frames never Before relaying the encapsulated...

Page 536: ...ing name The name of the PPTP profile to be deleted REQUIRED pptp proflist Profile QoS Encaps AC Relay_PPP1 default nlpid always PPTPLink default vcmux never pptp profdelete name PPTPLink pptp proflis...

Page 537: ...t Display all the current PPTP profiles SYNTAX EXAMPLE RELATED COMMANDS pptp proflist pptp proflist Profile QoS Encaps AC Relay_PPP1 default nlpid always PPTPLink default vcmux never pptp profadd Defi...

Page 538: ...PPTP Commands E DOC CTC 20050531 0058 v1 0 518...

Page 539: ...services 526 service host stats Show the host service statistics 527 service host triggerlist List all triggers 528 service host rule add Create define a host service portmap 529 service host rule del...

Page 540: ...name The name of an existing host service REQUIRED host The IP address of the LAN device OPTIONAL log Enable or disable logging OPTIONAL service host assign name MSN Messenger host 192 168 1 64 servic...

Page 541: ...21 service host config Get set global host service configuration options SYNTAX where EXAMPLE service host config trace disabled enabled trace Enable or disable traces The default is disabled REQUIRED...

Page 542: ...purposes custom The service is a user created service in other words a customized service The default is custom OPTIONAL service host list Service Name Host User Defined Mode Age of Empires unassigned...

Page 543: ...e host list Service Name Host User Defined Mode Age of Empires unassigned server AIM Talk unassigned client MSN Messenger unassigned server myService unassigned yes service host delete name myService...

Page 544: ...led OPTIONAL service host list Service Name Host User Defined Mode Age of Empires unassigned server AIM Talk unassigned client Aliens vs Predator unassigned server MSN Messenger 192 168 1 64 server se...

Page 545: ...Service Commands E DOC CTC 20050531 0058 v1 0 525 service host flush Flush all host services SYNTAX service host flush...

Page 546: ...White unassigned server Buddy Phone unassigned client Bungie net unassigned server Citrix Metaframe unassigned client CU SeeMe unassigned client Dark Reign 2 unassigned server Westwood Online unassig...

Page 547: ...C CTC 20050531 0058 v1 0 527 service host stats Show the host service statistics SYNTAX EXAMPLE service host stats service host stats Services 113 of 150 in use Service maps 225 of 300 in use Trigger...

Page 548: ...Service Commands E DOC CTC 20050531 0058 v1 0 528 service host triggerlist List all triggers SYNTAX EXAMPLE service host triggerlist service triggerlist Ip Triggerport Portrange Timeout...

Page 549: ...ort The inbound base port Select one of the supported TCP UDP port names see Supported TCP UDP Port Names on page 639 or alternatively specify the port number Note If not specified baseport is equal t...

Page 550: ...t The inbound base port Select one of the supported TCP UDP port names see Supported TCP UDP Port Names on page 639 or alternatively specify the port number Note If not specified baseport is equal to...

Page 551: ...me Protocol SrcPort DstPort Group State 1 SIPPBX udp 5060 disabled Description SIP PBX registrar and proxy Properties server Managed parameters state port acl map log Source Ip Selection auto Interfac...

Page 552: ...d Idx Name Protocol SrcPort DstPort Group State 1 SIPPBX udp 5060 disabled Description SIP PBX registrar and proxy Properties server Managed parameters state port acl map log Source Ip Selection auto...

Page 553: ...t Group State 1 SIPPBX udp 5060 disabled Description SIP PBX registrar and proxy Properties server Managed parameters state port acl map log Source Ip Selection auto Interface Access List any Ip Acces...

Page 554: ...t DstPort Group State 1 SIPPBX udp 5060 disabled Description SIP PBX registrar and proxy Properties server Managed parameters state port acl map log Source Ip Selection auto Interface Access List any...

Page 555: ...enabled 4 SLA_UDP_PING udp 7 enabled 5 SLA_ICMP_TRRT icmp 8 enabled 6 SLA_UDP_TRRT udp 33434 enabled 7 SYSLOG udp 514 enabled 8 HTTP tcp 80 enabled 9 HTTPs tcp 443 enabled 10 HTTPI tcp 8080 enabled 11...

Page 556: ...NS S SNMP_AGENT SSDP MDAP intf string port supported port or number name The name of the system service for this map REQUIRED intf The interface for this map REQUIRED port The port for this map Select...

Page 557: ...ELNET DNS S SNMP_AGENT SSDP MDAP intf string port supported port or number name The name of the system service for this map REQUIRED intf The interface for this map REQUIRED port The port for this map...

Page 558: ...rt supported port or number srcintf string log disabled enabled forward disabled enabled name The name of the system service for this map REQUIRED state Disable or enable this system service OPTIONAL...

Page 559: ...mechanism but is only used in the autoPVC ILMI mechanism Contents This chapter covers the following commands It is recommended not to change the default scripts script add Add a line to a script 540 s...

Page 560: ...NDS script add name string index number command quoted string name Name of the script in which a line must be added REQUIRED index Line number Note Use 0 to add a line OPTIONAL command Command REQUIRE...

Page 561: ...D COMMANDS script delete name string index number name Name of the script to be deleted REQUIRED index Line number to be deleted Tip Use the command script list to view the line numbers Note If not sp...

Page 562: ...Script Commands E DOC CTC 20050531 0058 v1 0 542 script flush Flush all scripts SYNTAX The flush command does not impact previously saved configurations script flush...

Page 563: ...ype any dynamic yes 2 bridge ifadd intf _auto_ 1_ 2 dest _auto_ 1_ 2 3 bridge ifconfig intf _auto_ 1_ 2 qos _auto_ 1_ 2 4 bridge ifattach intf _auto_ 1_ 2 Script autopvc_delete_bridge 0 bridge ifdetac...

Page 564: ...ipt run Run a script SYNTAX where script run name string pars string name Name of the script to be run Tip Use the command script list to obtain the names of the different scripts REQUIRED pars Parame...

Page 565: ...Management Protocol SNMP parameters 546 snmp get Get from the supplied SNMP Object IDentifier OID 547 snmp getnext GetNext from the supplied SNMP OID 548 snmp walk Walk from the supplied SNMP OID 549...

Page 566: ...Name quoted string sysLocation quoted string sysContact The SNMP system contact The default is Service Provider OPTIONAL sysName The SNMP system name The default is SpeedTouch 585 OPTIONAL sysLocation...

Page 567: ...ng ObjectID The Object Identifier Object ID to get from must include the instance which is 0 for scalar objects for example 1 3 6 1 2 1 1 1 0 sysDescription Note If not specified the sysDescription OI...

Page 568: ...DS snmp getnext ObjectId string ObjectID The Object Identifier Object ID to getnext from for example 1 3 6 1 2 1 1 system returns sysDescription OPTIONAL snmp getnext ObjectId 1 3 6 1 2 1 1 4 0 VB_oct...

Page 569: ...tem group OPTIONAL snmp walk ObjectId 1 3 6 1 2 1 1 VB_octetStr 1 3 6 1 2 1 1 1 0 SpeedTouch 585 VB_objId 1 3 6 1 2 1 1 2 0 1 3 6 1 4 1 637 61 2 VB_timeTicks 1 3 6 1 2 1 1 3 0 2927636 VB_octetStr 1 3...

Page 570: ...ess rights REQUIRED communityname Configure the SNMP community name REQUIRED snmp community add securityname RWCommunity communityname Please retype communityname for verification communityname snmp c...

Page 571: ...the community name to be deleted Choose between RWCommunity read write access rights ROCommunity read only access rights REQUIRED snmp community list Read write SNMP community name Read only SNMP com...

Page 572: ...t all SNMP community strings SYNTAX EXAMPLE RELATED COMMANDS snmp community list snmp community list Read write SNMP community name Read only SNMP community name snmp community add Configure an SNMP c...

Page 573: ...nmp community modify securityname RWCommunity ROCommunity communityname password securityname Configure access rights restrictions control for the community name Choose between RWCommunity read write...

Page 574: ...SNMP Commands E DOC CTC 20050531 0058 v1 0 554...

Page 575: ...up Contents This chapter covers the following commands sntp add Add a Network Time Protocol NTP server to the NTP server list 556 sntp config Modify display the SNTP client configuration 557 sntp dele...

Page 576: ...PTIONAL name The DNS name of NTP server to be added to list If both the IP address and the DNS name are provided the IP address is ignored Note This parameter is optional in this respect that either a...

Page 577: ...able or disable the SpeedTouch SNTP client The default is enabled OPTIONAL poll A number between 1 and 60 minutes Represents the time interval for the SNTP client to poll the configured NTP server and...

Page 578: ...e of an NTP server must be specified OPTIONAL name The DNS name of the NTP server to be removed to the list Note This parameter is optional in this respect that either an IP address or the name of an...

Page 579: ...SNTP Commands E DOC CTC 20050531 0058 v1 0 559 sntp flush Flush the NTP server list and the SNTP client configuration SYNTAX sntp flush...

Page 580: ...nt is unable to contact this NTP server It may be down or no end to end connectivity exists no connection no DSL Synchronized The SpeedTouch SNTP client was able to contact this NTP server If required...

Page 581: ...up is required 562 software deletepassive Delete the passive software version 563 software duplicate Duplicate the active software version as the passive software version 564 software setpassive Mark...

Page 582: ...cleanup Check whether a disk clean up is required If necessary garbage collection is performed SYNTAX RELATED COMMANDS software cleanup software deletepassive Delete the passive software version soft...

Page 583: ...5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0 Passive SW ZZUCAA5 30A 5 3 0 a 0 software deletepassive software version Flash image 5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0 Passive SW software cleanup C...

Page 584: ...software version Flash image 5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0 Passive SW software duplicate software version Flash image 5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0 Passive SW ZZUCAA5 30A 5...

Page 585: ...software version Flash image 5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0 Passive SW ZZUCAA5 30A 5 3 0 a 0 software deletepassive software version Flash image 5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0...

Page 586: ...e via saveall or config save before executing a software switch SYNTAX EXAMPLE RELATED COMMANDS software switch software version Flash image 5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0 Passive SW ZZUCA...

Page 587: ...are Commands E DOC CTC 20050531 0058 v1 0 567 software upgrade Reboot the modem to initiate the SW upgrade New software available on a remote LAN host will be uploaded to the modem SYNTAX software upg...

Page 588: ...E DOC CTC 20050531 0058 v1 0 568 software version Display the software version SYNTAX EXAMPLE software version software version Flash image 5 3 0 10 0 Active SW ZZUCAA5 30A 5 3 0 a 0 Passive SW ZZUCA...

Page 589: ...ystem locale Set get the regional settings 573 system reboot Reboot the SpeedTouch 575 system reset Reset the SpeedTouch to its factory or ISP defaults and reboot the device 576 system debug autosave...

Page 590: ...UPnP discovery The default is enabled OPTIONAL mdap Enable or disable proprietary discovery protocol The default is enabled OPTIONAL drst Enable or disable DrSpeedTouch access The default is disabled...

Page 591: ...ommands E DOC CTC 20050531 0058 v1 0 571 EXAMPLE system config upnp discovery enabled mdap discovery enabled drst support disabled reset button enabled digest authentication enabled defaultconnection...

Page 592: ...system configuration The system password and the system config settings dcache excluded are flushed SYNTAX EXAMPLE The flush command does not impact previously saved configurations system flush syste...

Page 593: ..._format iso date time time date duration_format dhmmss hmmss dec_symbol Set the decimal symbol Choose between The default is OPTIONAL group_symbol Set the group symbol Choose between The default is OP...

Page 594: ...Set the date time format Choose between iso date time time date The default is date time OPTIONAL duration_format Set the duration format Choose between dhmmss hmmss The default is dhmmss Note d days...

Page 595: ...ds E DOC CTC 20050531 0058 v1 0 575 system reboot Reboot the SpeedTouch SYNTAX EXAMPLE Non saved configuration settings will be lost after reboot system reboot system reboot lost session connectivity...

Page 596: ...ARNING The modem will be reset to factory defaults clearing all user and ISP settings Specifying factory yes deletes user and ISP specific settings Connectivity with the ISP network might be lost fact...

Page 597: ...tem Commands E DOC CTC 20050531 0058 v1 0 577 system debug autosave Autosave debugging commands SYNTAX where system debug autosave trace disabled enabled trace Enable or disable autosave traces OPTION...

Page 598: ...mory used by the applications min The least amount of free memory detected during the uptime of the SpeedTouch system debug stats reset disabled enabled reset Reset the CPU statistics The default is d...

Page 599: ...ure disabled enabled port number timeout number secure Enable or disable https The default is enabled OPTIONAL port Set the destination port for remote access The default is 51003 OPTIONAL timeout Set...

Page 600: ...System Commands E DOC CTC 20050531 0058 v1 0 580 system rtc synchronize Do a SNTP update and synchronize the realtime clock SYNTAX system rtc synchronize...

Page 601: ...g disabled enabled date The system date formatted as dd mm yyyy Note If not specified the current date is preserved OPTIONAL time The system time formatted as hh mm ss Note If not specified the curren...

Page 602: ...System Commands E DOC CTC 20050531 0058 v1 0 582...

Page 603: ...command group Contents This chapter covers the following commands systemlog flush Flush all messages in the internal Syslog message buffer 584 systemlog show Show messages in the internal Syslog messa...

Page 604: ...Systemlog Commands E DOC CTC 20050531 0058 v1 0 584 systemlog flush Flush all messages in the internal Syslog message buffer SYNTAX systemlog flush...

Page 605: ...ote If not specified only the recent messages will be shown OPTIONAL syslog msgbuf show fac kern sev emerg hist enabled 0 SysUpTime 14 45 43 KERNEL Controlled restart after internal error or explicit...

Page 606: ...e If not specified the messages of all the facilities will be shown OPTIONAL sev Specify the lowest priority severity of the syslog messages to be shown All the syslog messages with severity as specif...

Page 607: ...Introduction This chapter describes the commands of the upnp command group Contents This chapter covers the following commands upnp config Configure the UPnP parameter s 588 upnp flush Flush the UPnP...

Page 608: ...Choose between full the host will accept all the UPnP SET and GET actions natonly GET and NAT related SET actions will be accepted all other actions will be ignored readonly the UPnP control point wi...

Page 609: ...UPnP Commands E DOC CTC 20050531 0058 v1 0 589 upnp flush Flush the UPnP configuration The UPnP configuration will be reset to the default configuration SYNTAX upnp flush...

Page 610: ...bose number 0 2 verbose Verbose level The default is 1 OPTIONAL upnp list device IGD xml Advertised on LocalNetwork 10 0 0 138 devices services Root Device urn schemas upnp org device InternetGatewayD...

Page 611: ...scribes the commands of the user command group Contents This chapter covers the following commands user add Add a user 592 user config Modify a user 594 user delete Delete a user 595 user flush Flush...

Page 612: ...racters REQUIRED role The role name Tip Use the command mlp role list to obtain the role name see mlp role list on page 473 for more information REQUIRED hash2 The MD5 hash Note The maximum length is...

Page 613: ...ministrator user list User Flags Role Administrator U Administrator tech R TechnicalSupport Administrator user add name JohnDoe password Please retype password for verification password role Administr...

Page 614: ...le list on page 473 for more information OPTIONAL descr A user description Note The maximum length is 63 characters OPTIONAL defuser Set this user as the default user enabled or not disabled Note When...

Page 615: ...ivileges user delete name string name The name of the user to be deleted REQUIRED Administrator user list User Flags Role Administrator U Administrator tech R TechnicalSupport JohnDoe Administrator Ad...

Page 616: ...he first user that logs on after initiating a new Telnet session will have the same administrative rights as a user with the role root user flush Administrator user list User Flags Role Administrator...

Page 617: ...d all the users will be listed OPTIONAL channel The selected channel Choose between ftp telnet http mdap serial Note If not specified all the channels will be listed OPTIONAL origin The selected origi...

Page 618: ...t w_frwl_norm w_frwl_adv w_frwe_mgnt w_ipsec w_certificates w_remote_mgnt w_local w_qos snd_lan snd_wan snd_local and_lan and_wan and_frwl and_local user_admin mlp_admin secure_ipsec_term secure_br cl...

Page 619: ...ficates r_remote_mgnt r_local r_qos w_lan w_wan w_fs_passive w_rtg w_fwdg w_nat w_frwl_norm w_frwl_adv w_frwe_mgnt w_ipsec w_certificates w_remote_mgnt w_local w_qos snd_lan snd_wan snd_local and_lan...

Page 620: ...User Commands E DOC CTC 20050531 0058 v1 0 600...

Page 621: ...Certificate Enrollment Protocol CHAP Challenge Handshake Authentication Protocol CIDR Classless Inter Domain Routing CLI Command Line Interface CLP Cell Loss Priority CO Central Office CPE Customer Pr...

Page 622: ...ntrol Protocol LDAP Light weight Directory Access Protocol LLC Logical Link Control MAC Medium Access Control MC MultiCast MD5 Message Digest 5 MGCP Media Gateway Control Protocol MLP Multi Level acce...

Page 623: ...ment SMTP Simple Mail Transfer Protocol SNAP Sub Network Access Protocol SNMP Simple Network Management Protocol SNR Signal to Noise Ratio SNTP Simple Network Time Protocol SSH Secure SHell SSID Servi...

Page 624: ...P Virtual Path VPI Virtual Path Identifier VPN Virtual Private Networking WAN Wide Area Network WDS Wireless Distribution System WEP Wired Equivalent Privacy WFQ Weighted Fair Queueing WINS Windows In...

Page 625: ...wireless macacl list Show a list of all configured ACL entries 614 wireless macacl modify Modify an existing ACL entry 615 wireless macacl register Start a registration process only for register mode...

Page 626: ...ly allowed to be used may be restricted The default is auto OPTIONAL ssid The network name also known as Service Set ID SSID OPTIONAL any Make the SSID public or not Choose between enabled the SpeedTo...

Page 627: ...enabled Channel 1 auto RTS Threshold 2347 Short Retry Limit 7 Long Retry Limit 4 Beacon Period 100 Rate 54 Mbps Interoperability 802 11b g Protection auto Protection Mode rtscts Protection Trigger lo...

Page 628: ...eshold 2347 Short Retry Limit 7 Long Retry Limit 4 Beacon Period 100 Rate 54 Mbps Interoperability 802 11b g Protection auto Protection Mode rtscts Protection Trigger local overlap Shortslot auto Fram...

Page 629: ...E DOC CTC 20050531 0058 v1 0 609 wireless debug stats Show the transfer statistics SYNTAX EXAMPLE wireless debug stats wireless debug stats Good Rx Packets 1040 Bad Rx Packets 0 Good Tx Packets 1234...

Page 630: ...o be performed on ACL entry Choose between allow the wireless client is allowed entry deny the wireless client is not allowed entry REQUIRED name The name of the wireless client OPTIONAL wireless maca...

Page 631: ...L mode Choose between lock The ACL is locked No new entries are allowed in the ACL unlock Every wireless client can associate to the SpeedTouch register A wireless client is only added to the ACL afte...

Page 632: ...ddr hardware address hwaddr The Ethernet MAC address of the ACL entry REQUIRED wireless macacl list Station Name hardware address Permission ST120g 00 02 2d 5f b6 9e accept Test2 01 67 d0 23 56 cd acc...

Page 633: ...the ACL settings to factory defaults Choose between disabled enabled REQUIRED wireless macacl list Station Name hardware address Permission ST120g 00 02 2d 5f b6 9e accept wireless macacl flush procee...

Page 634: ...0058 v1 0 614 wireless macacl list Show a list of all configured ACL entries SYNTAX EXAMPLE wireless macacl list wireless macacl list Station Name hardware address Permission ST120g 00 02 2d 5f b6 9e...

Page 635: ...ed REQUIRED permission The action to be performed on ACL entry Choose between allow the wireless client is allowed entry deny the wireless client is not allowed entry OPTIONAL name The name of the wir...

Page 636: ...ho tries to assiociate with the SpeedTouch during this period and who has the correct wireless settings will be added to the ACL SYNTAX where EXAMPLE If the register mode is not enabled when the regis...

Page 637: ...tected Access WPA Pre Shared Key PSK The default is disable in other words by default there is no security This is to enable an easy first use OPTIONAL wireless secmode config No security enabled open...

Page 638: ...tionkey The secret key to be used for WEP encryption Two key lengths 64 or 128 bits and two formats alphanumeric or hexadecimal are permitted for 64 bit encryption the key must consist of 10 hexadecim...

Page 639: ...illed in then the default presharedkey is used OPTIONAL encryption Select the data encryption protocol to be used Choose between TKIP the Temporal Key Integrity Protocol TKIP uses temporary keys deriv...

Page 640: ...620 wireless stations list List the currently associated stations SYNTAX EXAMPLE wireless stations list wireless stations list Station Name Hardware Address Authentication ST120g 00 02 2D 5F B6 9E WEP...

Page 641: ...added wireless wds add bssid hardware address name quoted string bssid The WDS Base Service Set Identifier BSSID REQUIRED name A user specified reference name OPTIONAL wireless wds list SpeedTouch180...

Page 642: ...bled enabled autoaccess disabled enabled state Enable or disable the WDS functionality The default is enabled OPTIONAL autoaccess Automatically grant WDS to other AP s enabled or not disabled The defa...

Page 643: ...X where EXAMPLE wireless wds delete bssid hardware address bssid The BSSID of the WDS station to be deleted REQUIRED wireless wds list SpeedTouch180 00 90 96 4F 38 E4 SpeedTouch Sascha 00 90 96 62 5D...

Page 644: ...Wireless Commands E DOC CTC 20050531 0058 v1 0 624 wireless wds flush Flush all WDS stations SYNTAX wireless wds flush...

Page 645: ...ess Commands E DOC CTC 20050531 0058 v1 0 625 wireless wds list List the WDS stations SYNTAX EXAMPLE wireless wds list wireless wds list SpeedTouch180 00 90 96 4F 38 E4 SpeedTouch Sascha 00 90 96 62 5...

Page 646: ...or not disabled The default is disabled OPTIONAL wireless wds scanresults rescan yes All associations with the AP will be lost due to the wireless network scan SSID channel bssid noise rssi SpeedTouch...

Page 647: ...ssages of the following modules Auto PVC Module 628 Configuration Module 628 DHCP Client Module 628 DHCP Relay Module 629 DHCP Server Module 629 Dyndns Module 630 Firewall Module 630 LOGIN Module 631...

Page 648: ...ION conf_version upgraded to version version KERN INFO SYSTEM reset by user user_id to factory defaults user settings deleted Facility Severity Contents LOCAL2 WARNING DHCC lease ip address ip address...

Page 649: ...ctive interface intf_id LOCAL2 WARNING DHCR relay Dropping boot request packet with spoofed giaddr field from intf_id LOCAL2 WARNING DHCR relay Dropping boot request received on unknown interface from...

Page 650: ...S_ STR_ID Update failed for client dyndns_client incomplete configuration DYNDNS WARNING DYNDNS_ STR_ID Update failed for client dyndns_client message host hostname has not been updated DYNDNS WARNING...

Page 651: ...CE LOGIN User logged in on connection_type ip address AUTH NOTICE LOGIN User user_id tried to log in on connection_type Facility Severity Contents KERN WARNING KERNEL cold reset KERN WARNING KERNEL wa...

Page 652: ...eived AUTH INFO PPP PAP Authenticate Request sent AUTH ERROR PPP PAP authentication failed intf name AUTH ERROR PPP CHAP authentication failed intf name AUTH INFO PPP CHAP authentication failed protoc...

Page 653: ...olete command command name received LOCAL1 INFO RIP Unknown RIP command received LOCAL1 INFO RIP Response does not come from default RIP port LOCAL1 INFO RIP Datagram doesn t come from a valid neighbo...

Page 654: ...rule_id Protocol protocol_name Src_ip ip_address Dst_ip ip_address Label label_name Facility Severity Contents AUTH NOTICE SESSION TIMEOUT Timeout after seconds sec Facility Severity Contents NTP WARN...

Page 655: ...WARNING SECURITY UPnP ActionName refused for ip ip_address NOTICE SECURITY UPnP ActionName Error_string for ip ip_address NOTICE SECURITY UPnP action ActionName from ip ip_address Error_string Facili...

Page 656: ...System Logging Messages E DOC CTC 20050531 0058 v1 0 636...

Page 657: ...s supported by the SpeedTouch that can be used for completing CLI command parameters Supported IP Protocols 638 Supported TCP UDP Port Names 639 Supported ICMP Type Names 642 Supported System Logging...

Page 658: ...0 Encapsulating Security Payload ESP ggp 3 Gateway Gateway Protocol GGP gre 47 General Routing Encapsulation GRE hmp 20 Host Monitoring Protocol HMP icmp 1 Internet Control Message Protocol ICMP igmp...

Page 659: ...time 37 Y Y Time nicname 43 Y Y Who Is dns 53 Y Y Domain Name System DNS domain 53 Y Y Domain Name System DNS sql net 66 Y Y Oracle SQL NET bootps 67 Y Y Bootstrap Protocol Server bootpc 68 Y Y Bootst...

Page 660: ...alk Name Binding Protocol NBP at echo 204 Y Y AppleTalk Echo at zis 206 Y Y AppleTalk Zone Information System ZIS ipx 213 Y Y Novell imap3 220 Y Y Internet Message Access Protocol IMAP v3 clearcase 37...

Page 661: ...pd uucp rlogin 540 Y Y uucpd remote login rtsp 554 Y Y Real Time Streaming Protocol RTSP whoami 565 Y Y whoami ipcserver 600 Y Y SUN IPC Server doom 666 Y Y Doom ID Software ils 1002 Y Y Internet Loca...

Page 662: ...e source quench 4 Source Quench redirect 5 Redirect echo request 8 Echo router advertisement 9 Router Advertisement router solicitation 10 Router Solicitation time exceeded 11 Time Exceeded parameter...

Page 663: ...system daemon 24 System daemons auth 32 Authorization messages syslog 40 Syslog daemon messages lpr 48 Line printer subsystem news 56 Network news subsystem uucp 64 UUCP subsystem cron 72 Clock daemo...

Page 664: ...ng descending importance emerg 0 Emergency conditions system unusable alert 1 Alert conditions immediate action is required crit 2 Critical conditions err 3 Error conditions warning 4 Warning conditio...

Page 665: ...rding 31 011110 af32 Assured Forwarding 32 011100 af33 Assured Forwarding 33 011010 af21 Assured Forwarding 21 010110 af22 Assured Forwarding 22 010110 af23 Assured Forwarding 23 010010 af11 Assured F...

Page 666: ...Supported Key Names E DOC CTC 20050531 0058 v1 0 646...

Page 667: ...334 hostmgr add 356 label add 434 label chain add 440 label rule add 444 mlp privilege add 463 mlp role add 469 script add 540 service host add 522 service host rule add 529 snmp community add 550 snt...

Page 668: ...e clear 272 firewall debug clear 322 firewall rule debug clear 341 hostmgr clear 358 ids clear 364 ids pattern clear 368 ids threshold clear 373 ipqos queue clear 428 label rule debug clear 450 config...

Page 669: ...lete 64 dhcp relay delete 117 dhcp server lease delete 133 dhcp server pool delete 146 dhcp server rule delete 156 dns server host delete 176 dns server route delete 180 dsd urlfilter rule delete 197...

Page 670: ...9 optdelete 150 rtadd 151 rtdelete 152 ruleadd 153 ruledelete 154 rule add 155 delete 156 flush 157 list 158 disable service host disable 524 dns client config 160 dnsadd 161 dnsdelete 162 dnslist 163...

Page 671: ...ove 232 level delete 234 flush 235 list 236 modify 237 set 238 level add 233 rule clear 239 list 240 modify 241 dump config dump 65 duplicate software duplicate 564 dyndns add 244 delete 245 flush 246...

Page 672: ...erver lease flush 134 dhcp server option flush 136 dhcp server pool flush 147 dhcp server rule flush 157 dns client flush 164 dns server flush 167 dns server host flush 177 dns server route flush 181...

Page 673: ...ifadd atm bundle ifadd 24 atm ifadd 10 dhcp client ifadd 102 eth bridge ifadd 275 eth ifadd 265 ip auto ifadd 406 ip ifadd 387 ppp ifadd 493 ppp relay ifadd 507 pptp ifadd 512 service system ifadd 531...

Page 674: ...rver option instadd 137 instdelete dhcp server option instdelete 138 instlist dhcp server option instlist 139 interface list 378 ip arpadd 381 arpdelete 382 arplist 383 auto flush 405 ifadd 406 ifatta...

Page 675: ...professional category list 209 dsd webfilter professional level list 215 dsd webfilter professional rule list 219 dsd webfilter server list 225 dsd webfilter standard category list 231 dsd webfilter...

Page 676: ...c modify 39 atm oam modify 36 dsd urlfilter rule modify 200 dsd webfilter professional level modify 216 dsd webfilter professional modify 220 dsd webfilter server modify 226 dsd webfilter standard rul...

Page 677: ...reboot 575 recycling dsd debug recycling 188 refresh connection refresh 86 register wireless macacl register 616 remove dsd webfilter professional category remove 210 dsd webfilter standard category...

Page 678: ...alk 549 sntp add 556 config 557 delete 558 flush 559 list 560 software cleanup 562 deletepassive 563 duplicate 564 switch 566 upgrade 567 version 568 stats connection stats 87 dhcp client debug stats...

Page 679: ...pllist 489 traceconfig cwmp traceconfig 94 dhcp client debug traceconfig 114 dhcp relay debug traceconfig 123 dhcp server debug traceconfig 130 firewall debug traceconfig 324 firewall rule debug trace...

Page 680: ...config 611 delete 612 flush 613 list 614 modify 615 register 616 reset 608 secmode config 617 wep 618 wpa psk 619 stations list 620 wds add 621 config 622 delete 623 flush 624 list 625 scanresults 62...

Page 681: ......

Page 682: ...Need more help Additional help is available online at www speedtouch com THOMSON 2005 All rights reserved E DOC CTC 20050531 0058 v1 0...

Reviews:

No comments