THOMSON TG605s Cli Reference Manual Download

Page: 1 / 974

THOMSON TG605s

Business SHDSL.bis Gateway

Power

Ether

net

WLAN

Plug-in

DSL

Inter

net

CLI Reference Guide R8.2

Summary of Contents for TG605s

Page 1: ...THOMSON TG605s Business SHDSL bis Gateway P o w er E th er n et W LA N P lu g i n D S L In te rn et CLI Reference Guide R8 2 ...

Page 2: ......

Page 3: ...THOMSON TG605s CLI Reference Guide R8 2 ...

Page 4: ...Corporation Wi Fi WMM and the Wi Fi logo are registered trademarks of the Wi Fi Alliance Wi Fi CERTIFIED Wi Fi ZONE Wi Fi Protected Access Wi Fi Multimedia Wi Fi Protected Setup WPA WPA2 and their respective logos are trademarks of the Wi Fi Alliance UPnP is a certification mark of the UPnP Implementers Corporation Microsoft MS DOS Windows and Windows NT are either registered trademarks or tradema...

Page 5: ...flush 43 atm bundle ifadd 44 atm bundle ifconfig 45 atm bundle ifdelete 46 atm bundle list 47 atm cac config 48 atm cac list 49 atm cac overbooking 50 atm debug aal5stats 51 atm debug gstats 52 atm debug portstats 53 atm debug traceconfig 54 atm flush 55 atm ifadd 56 atm ifattach 57 atm ifconfig 58 atm ifdelete 59 atm ifdetach 60 atm iflist 61 atm oam cc list 62 atm oam cc modify 63 atm oam cc sen...

Page 6: ... qosbook add 77 atm qosbook config 78 atm qosbook ctdadd 79 atm qosbook ctddelete 80 atm qosbook ctdlist 81 atm qosbook delete 82 atm qosbook flush 83 atm qosbook list 84 autopvc Commands 85 autopvc config 86 autopvc list 87 config Commands 89 config delete 90 config dump 91 config flush 92 config list 93 config load 94 config save 95 connection Commands 97 connection appconfig 98 connection appin...

Page 7: ...bind 115 cwmp Commands 117 cwmp config 118 cwmp debug traceconfig 120 cwmp server config 121 debug Commands 123 debug exec 124 debug prompt 125 debug Prompt 126 dhcp Commands 127 dhcp client debug clear 131 dhcp client debug stats 132 dhcp client debug traceconfig 133 dhcp client flush 134 dhcp client ifadd 135 dhcp client ifattach 136 dhcp client ifconfig 137 dhcp client ifdelete 138 dhcp client ...

Page 8: ...ay iflist 157 dhcp relay list 158 dhcp relay modify 159 dhcp relay ruleadd 160 dhcp relay ruledelete 161 dhcp rule add 162 dhcp rule debug traceconfig 163 dhcp rule delete 164 dhcp rule flush 165 dhcp rule list 166 dhcp server config 167 dhcp server debug clear 168 dhcp server debug stats 169 dhcp server debug traceconfig 170 dhcp server flush 171 dhcp server lease add 172 dhcp server lease delete...

Page 9: ...l rtadd 194 dhcp server pool rtdelete 195 dhcp server pool ruleadd 196 dhcp server pool ruledelete 197 dhcp spoofing add 198 dhcp spoofing attach 199 dhcp spoofing config 200 dhcp spoofing debug traceconfig 201 dhcp spoofing delete 202 dhcp spoofing detach 203 dhcp spoofing flush 204 dhcp spoofing list 205 dhcp spoofing option add 206 dhcp spoofing option delete 207 dns Commands 209 dns client con...

Page 10: ...dns server route add 229 dns server route delete 230 dns server route flush 231 dns server route list 232 dsd Commands 233 dsd config 234 dsd debug config 235 dsd debug connection list 236 dsd debug proxy 237 dsd debug recycling 238 dsd debug stats 239 dsd intercept config 240 dsd syslog config 241 dsd syslog list 242 dyndns Commands 243 dyndns add 244 dyndns delete 245 dyndns flush 246 dyndns hos...

Page 11: ...bridge dynvlan delete 273 eth bridge dynvlan flush 274 eth bridge dynvlan list 275 eth bridge filter add 276 eth bridge filter attach 277 eth bridge filter config 278 eth bridge filter delete 279 eth bridge filter detach 280 eth bridge filter forwarding 281 eth bridge filter fwdintfadd 282 eth bridge filter fwdintfdel 283 eth bridge filter ifadd 284 eth bridge filter ifdel 285 eth bridge filter li...

Page 12: ...eth bridge select 309 eth bridge unknownvlan ifadd 310 eth bridge unknownvlan ifconfig 311 eth bridge unknownvlan ifdelete 312 eth bridge unknownvlan iflist 313 eth bridge vlan ifadd 314 eth bridge vlan ifconfig 315 eth bridge vlan ifdelete 316 eth bridge vlan iflist 317 eth bridge xtratag add 318 eth bridge xtratag config 319 eth bridge xtratag delete 320 eth bridge xtratag flush 321 eth bridge x...

Page 13: ...2 eth filter template flush 343 eth filter template list 344 eth filter template ruleadd 345 eth filter template ruledel 346 eth filter template rulemodify 347 eth filter template setpriority 348 eth filter template setvid 349 eth flush 350 eth ifadd 351 eth ifattach 352 eth ifconfig 353 eth ifdelete 354 eth ifdetach 355 eth iflist 356 eth oam add 357 eth oam config 358 eth oam configlist 359 eth ...

Page 14: ... 378 eth switch shaper iflist 379 eth switch share add 380 eth switch share delete 381 eth switch share list 382 eth switch storm ifconfig 383 eth switch storm iflist 384 eth vlan add 385 eth vlan delete 386 eth vlan flush 387 eth vlan list 388 exit Command 389 expr Commands 391 expr add 392 expr delete 395 expr flush 396 expr list 397 expr modify 398 firewall Commands 401 firewall chain add 402 f...

Page 15: ...ll rule debug clear 420 firewall rule debug stats 421 firewall rule debug traceconfig 422 firewall rule delete 423 firewall rule flush 424 firewall rule list 425 firewall rule modify 426 grp Commands 429 grp config 430 grp flush 431 grp ifconfig 432 grp iflist 433 grp rip bnadd 434 grp rip bndelete 435 grp rip bnlist 436 grp rip config 437 grp rip flush 438 grp rip ifconfig 439 grp rip nbadd 440 g...

Page 16: ...59 ids Commands 461 ids clear 462 ids config 463 ids parser list 464 ids parser modify 465 ids pattern clear 466 ids pattern list 467 ids pattern stats 468 ids signature list 469 ids signature modify 470 ids threshold clear 471 ids threshold list 472 ids threshold modify 473 igmp Commands 475 igmp host config 476 igmp host debug clear 477 igmp host debug stats 478 igmp host flush 479 igmp host ifc...

Page 17: ...t 491 interface Command 493 ip Commands 495 ip arpadd 497 ip arpdelete 498 ip arplist 499 ip auto flush 500 ip auto ifadd 501 ip auto ifattach 502 ip auto ifconfig 503 ip auto ifdelete 504 ip auto ifdetach 505 ip auto iflist 506 ip config 507 ip debug httpprobe 509 ip debug sendto 510 ip debug stats 511 ip debug traceconfig 512 ip flush 513 ip ifadd 514 ip ifattach 515 ip ifconfig 516 ip ifdelete ...

Page 18: ...34 ipqos ef config 535 ipqos ef list 536 ipqos ef stats 537 ipqos list 538 ipqos meter add 539 ipqos meter clear 540 ipqos meter config 541 ipqos meter delete 543 ipqos meter flush 544 ipqos meter list 545 ipqos meter start 546 ipqos meter stats 547 ipqos meter stop 548 ipqos queue clear 549 ipqos queue config 550 ipqos queue list 551 ipqos queue stats 552 ipsec Commands 553 ipsec clear all 556 ip...

Page 19: ...on network add 574 ipsec connection network delete 575 ipsec connection network list 576 ipsec connection network modify 577 ipsec connection options add 578 ipsec connection options delete 579 ipsec connection options list 580 ipsec connection options modify 581 ipsec connection start 582 ipsec connection stop 583 ipsec debug syslog 584 ipsec debug traceconfig 585 ipsec flush 586 ipsec peer add 5...

Page 20: ... 608 ipsec show config 609 ipsec show debug 610 ipsec show sadb 611 ipsec show sessions 612 ipsec show spd 613 ipsec show state 614 ipsec show stats 615 label Commands 617 label add 618 label chain add 619 label chain delete 620 label chain flush 621 label chain list 622 label delete 623 label flush 624 label list 625 label modify 626 label rule add 627 label rule debug clear 628 label rule debug ...

Page 21: ...s debug clearstats 647 mbus debug loadobjects 648 mbus debug stats 649 mbus debug traceconfig 650 mbus debug unloadobjects 651 mbus listcontexts 652 mbus listenums 653 mbus listobjects 654 mbus listsubscriptions 655 mbus listtypes 656 mbus pluginevent 657 mbus unregister 658 memm Commands 659 memm debug clearstats 660 memm debug lock stats 661 memm debug lock traceconfig 662 memm debug stats 663 m...

Page 22: ...lege delete 680 mlp privilege list 681 mlp privilege removezone 682 mlp role add 683 mlp role addpriv 684 mlp role config 685 mlp role delete 686 mlp role list 687 mlp role removepriv 688 nat Commands 689 nat config 690 nat flush 691 nat ifconfig 692 nat iflist 693 nat mapadd 694 nat mapdelete 695 nat maplist 696 nat tmpladd 697 nat tmpldelete 699 nat tmplinst 700 nat tmpllist 701 password Command...

Page 23: ... 720 pki refresh 721 pki remove 722 pki request 723 pki show 724 ppp Commands 725 ppp bundle add 727 ppp bundle config 728 ppp bundle delete 730 ppp bundle flush 731 ppp bundle ifadd 732 ppp bundle ifdelete 733 ppp bundle list 734 ppp bundle rtadd 735 ppp bundle rtdelete 736 ppp flush 737 ppp ifadd 738 ppp ifattach 739 ppp ifconfig 740 ppp ifdelete 743 ppp ifdetach 744 ppp iflist 745 ppp ifscan 74...

Page 24: ...list 761 saveall Command 763 script Commands 765 script add 766 script delete 767 script flush 768 script list 769 script run 770 service Commands 771 service host add 772 service host assign 773 service host category add 774 service host category delete 775 service host category list 776 service host category rename 777 service host delete 778 service host disable 779 service host flush 780 servi...

Page 25: ...e system modify 793 snmp Commands 795 snmp community add 796 snmp community delete 797 snmp community list 798 snmp community modify 799 snmp config 800 snmp get 801 snmp getnext 802 snmp ifadd 803 snmp ifattach 804 snmp ifconfig 805 snmp ifdelete 806 snmp ifdetach 807 snmp iflist 808 snmp walk 809 sntp Commands 811 sntp add 812 sntp config 813 sntp debug traceconfig 814 sntp delete 815 sntp flush...

Page 26: ...lickey list 833 ssh publickey show_own 834 ssh show 835 statecheck Commands 837 statecheck checkadd 838 statecheck checkdelete 839 statecheck config 840 statecheck groupadd 841 statecheck groupdelete 842 syslog Commands 843 syslog config 844 syslog flush 845 syslog list 846 syslog msgbuf flush 847 syslog msgbuf send 848 syslog msgbuf show 849 syslog ruleadd 850 syslog ruledelete 851 system Command...

Page 27: ...tftp fs df 873 tftp fs dir 874 tftp fs move 875 tftp fs pwd 876 tftp fs remove 877 tftp read 878 tftp write 879 tls Commands 881 tls acs client cert add 882 tls acs client cert delete 883 tls acs client cert list 884 tls acs client config 885 tls https server cert add 886 tls https server cert delete 887 tls https server cert list 888 tls https server config 889 tls self cert list 890 tod Commands...

Page 28: ...odify 906 tod schedule timeadd 907 tod schedule timedelete 908 traceroute Command 909 tunnel Commands 911 tunnel gre add 912 tunnel gre delete 913 tunnel gre flush 914 tunnel gre list 915 tunnel gre modify 916 tunnel ipip add 917 tunnel ipip delete 918 tunnel ipip flush 919 tunnel ipip list 920 tunnel ipip modify 921 tunnel list 922 upgrade Commands 923 upgrade config 924 upgrade debug sesslist 92...

Page 29: ...mmands 945 xdsl add 947 xdsl debug atmstats 948 xdsl debug clear 949 xdsl debug efmlinestats 950 xdsl debug efmsystemstats 951 xdsl debug info 952 xdsl debug lloopback 953 xdsl debug pafstats 954 xdsl debug pmdlinestats 955 xdsl debug pmdsystemstats 956 xdsl debug rloopback 957 xdsl debug showmdioreg 958 xdsl debug traceconfig 959 xdsl delete 960 xdsl ifadd 961 xdsl ifattach 962 xdsl ifconfig 963 ...

Page 30: ...Contents 30 E DOC CTC 20080409 0002 v2 0 xdsl profile add 968 xdsl profile delete 969 xdsl profile list 970 xdsl profile modify 971 ...

Page 31: ... Command E DOC CTC 20080409 0002 v2 0 31 Command Displays this help information ...

Page 32: ... Command 32 E DOC CTC 20080409 0002 v2 0 ...

Page 33: ... Command E DOC CTC 20080409 0002 v2 0 33 Command Exits group selection ...

Page 34: ...atm Commands 34 E DOC CTC 20080409 0002 v2 0 ...

Page 35: ... bundles see page 47 atm cac config Configure ATM connection admission control see page 48 atm cac list List all CAC parameters see page 49 atm cac overbooking Configure ATM overbooking parameters see page 50 atm debug aal5stats Display AAL5 port specific atm statistics see page 51 atm debug gstats Display ATM global statistics see page 52 atm debug portstats Display port specific atm statistics s...

Page 36: ...page 71 atm phonebook add Add a new phonebook entry see page 72 atm phonebook autolist Display auto PVC s see page 73 atm phonebook delete Delete a phonebook entry see page 74 atm phonebook flush Flush all phonebook entries see page 75 atm phonebook list Display the phonebook see page 76 atm qosbook add Add a new qosbook entry see page 77 atm qosbook config Modify the qosbook configuration see pag...

Page 37: ...atm Commands E DOC CTC 20080409 0002 v2 0 37 atm bundle add Add a new bundle of interfaces SYNTAX atm bundle add name string where name The new bundle name REQUIRED ...

Page 38: ...atm Commands 38 E DOC CTC 20080409 0002 v2 0 atm bundle attach Attach a bundle of interfaces SYNTAX atm bundle attach name where name The name of the bundle REQUIRED ...

Page 39: ...atm Commands E DOC CTC 20080409 0002 v2 0 39 atm bundle clear Clear bundle statistics SYNTAX atm bundle clear name where name The name of the bundle OPTIONAL ...

Page 40: ...bundle config name policy priority connection propagate disabled enabled retry number 0 65535 where name The name of the bundle REQUIRED policy The policy of the bundle OPTIONAL propagate Enable disable propagation of packets OPTIONAL retry The number of connection setup retries before giving up OPTIONAL ...

Page 41: ...atm Commands E DOC CTC 20080409 0002 v2 0 41 atm bundle delete Delete a bundle of interfaces SYNTAX atm bundle delete name where name The name of the bundle REQUIRED ...

Page 42: ...atm Commands 42 E DOC CTC 20080409 0002 v2 0 atm bundle detach Detach a bundle of interfaces SYNTAX atm bundle detach name where name The name of the bundle REQUIRED ...

Page 43: ...atm Commands E DOC CTC 20080409 0002 v2 0 43 atm bundle flush Flush all bundles ...

Page 44: ...002 v2 0 atm bundle ifadd Add an interface on a bundle SYNTAX atm bundle ifadd name intf index number 0 6 where name The name of the bundle REQUIRED intf The name of the ATM interface REQUIRED index The index of the ATM interface OPTIONAL ...

Page 45: ...ndle SYNTAX atm bundle ifconfig name intf state disabled enabled low number 0 15 high number 0 15 where name The name of the bundle REQUIRED intf The name of the ATM interface REQUIRED state Enable disable interface OPTIONAL low The low selector value OPTIONAL high The high selector value OPTIONAL ...

Page 46: ...ds 46 E DOC CTC 20080409 0002 v2 0 atm bundle ifdelete Remove an interface from a bundle SYNTAX atm bundle ifdelete name intf where name The name of the bundle REQUIRED intf The name of the ATM interface REQUIRED ...

Page 47: ...atm Commands E DOC CTC 20080409 0002 v2 0 47 atm bundle list Display the current bundles ...

Page 48: ...cac config Configure ATM connection admission control SYNTAX atm cac config port dsl0 dsl1 atm2 atm3 aal5 atm5 or number state disabled enabled where port The port for which CAC is configured REQUIRED state Enable disable CAC for an ATM port REQUIRED ...

Page 49: ...atm Commands E DOC CTC 20080409 0002 v2 0 49 atm cac list List all CAC parameters ...

Page 50: ... 0002 v2 0 atm cac overbooking Configure ATM overbooking parameters SYNTAX atm cac overbooking rt number 0 1000 nrt number 0 1000 where rt The realtime overbooking percentage OPTIONAL nrt The non realtime overbooking percentage OPTIONAL ...

Page 51: ...l1 atm2 atm3 aal5 atm5 or number vpi number 0 31 vci number 0 511 clear disabled enabled where port The port number for which statistics will be retrieved REQUIRED vpi The VPI number for which statistics will be retrieved REQUIRED vci The VCI number for which statistics will be retrieved OPTIONAL clear Clear the statistics after request OPTIONAL ...

Page 52: ...atm Commands 52 E DOC CTC 20080409 0002 v2 0 atm debug gstats Display ATM global statistics SYNTAX atm debug gstats clear disabled enabled where clear Clear the statistics after request OPTIONAL ...

Page 53: ...tstats Display port specific atm statistics SYNTAX atm debug portstats port dsl0 dsl1 atm2 atm3 aal5 atm5 or number clear disabled enabled where port The port for which statistics will be retrieved REQUIRED clear Clear the statistics after the request OPTIONAL ...

Page 54: ...guration SYNTAX atm debug traceconfig len number intf atm_8_35 atm_0_35 atm_0_32 state disabled enabled where len Maximum number of AAL5 payload bytes that will be shown 0 2000 global setting OPTIONAL intf The name of the ATM interface to configure OPTIONAL state Enable disable AAL5 debug tracing OPTIONAL ...

Page 55: ...atm Commands E DOC CTC 20080409 0002 v2 0 55 atm flush Flush all ATM interfaces ...

Page 56: ...56 E DOC CTC 20080409 0002 v2 0 atm ifadd Create a new ATM interface SYNTAX atm ifadd intf string where intf The name for the new ATM interface If not specified the destination will double as interface name REQUIRED ...

Page 57: ...atm Commands E DOC CTC 20080409 0002 v2 0 57 atm ifattach Attach an ATM interface SYNTAX atm ifattach intf where intf The name of the ATM interface REQUIRED ...

Page 58: ...pically a phonebook entry OPTIONAL qos The name of a qosbook entry defining the QoS parameters for the WAN link OPTIONAL clp The mode used to determine the CLP bit value OPTIONAL clpthresh Priority class threshold where CLP becomes 0 for all classes threshold OPTIONAL encaps The WAN protocol encapsulation to be used on this interface OPTIONAL fcs Whether or not to include the Ethernet FCS in the p...

Page 59: ...atm Commands E DOC CTC 20080409 0002 v2 0 59 atm ifdelete Delete an ATM interface SYNTAX atm ifdelete intf where intf The name of the ATM interface REQUIRED ...

Page 60: ...atm Commands 60 E DOC CTC 20080409 0002 v2 0 atm ifdetach Detach an ATM interface SYNTAX atm ifdetach intf where intf The name of the ATM interface REQUIRED ...

Page 61: ...atm Commands E DOC CTC 20080409 0002 v2 0 61 atm iflist Display the ATM interfaces SYNTAX atm iflist intf atm_8_35 atm_0_35 atm_0_32 where intf The name of an ATM interface OPTIONAL ...

Page 62: ...atm Commands 62 E DOC CTC 20080409 0002 v2 0 atm oam cc list Display CC configuration ...

Page 63: ...led receive disabled enabled auto disabled enabled span segment end2end where port The ATM port number REQUIRED vpi The Virtual Path Identifier REQUIRED vci The Virtual Channel Identifier OPTIONAL transmit Enable disable transmission of CC cells OPTIONAL receive Enable disable loss of continuity OPTIONAL auto Enable disable remote CC activation deactivation OPTIONAL span End2end or segment continu...

Page 64: ...mber vpi number 0 31 vci number 0 511 span segment end2end action activate deactivate direction source sink both where port The ATM port number REQUIRED vpi The Virtual Path Identifier REQUIRED vci The Virtual Channel Identifier OPTIONAL span Send CC action end2end or segment OPTIONAL action The CC action OPTIONAL direction Source sink or both default both OPTIONAL ...

Page 65: ...atm oam config Modify the ATM OAM settings SYNTAX atm oam config clp number 0 1 loopbackid string where clp The CLP bit value of the OAM cells OPTIONAL loopbackid The loopback id hexadecimal string for processing of segment loopback cells OPTIONAL ...

Page 66: ...atm Commands 66 E DOC CTC 20080409 0002 v2 0 atm oam list Display the ATM OAM settings ...

Page 67: ...am modify Modify the ATM OAM data blocking mode SYNTAX atm oam modify port dsl0 dsl1 atm2 atm3 aal5 atm5 or number blocking disabled enabled where port The port for which OAM blocking is configured REQUIRED blocking Enable disable OAM blocking REQUIRED ...

Page 68: ...s SYNTAX atm oam ping dest atm_pvc_8_35 atm_pvc_0_35 atm_pvc_0_32 count number 1 1000000 interval number 100 1000000 where dest The destination address for the request REQUIRED count The number of pings to send OPTIONAL interval The interval in milliseconds between packets OPTIONAL ...

Page 69: ... Create a loopback connection for VC SYNTAX atm oam vclb add port dsl0 dsl1 atm2 atm3 aal5 atm5 or number vpi number 0 31 vci number 0 511 where port The ATM port number REQUIRED vpi The Virtual Path Identifier REQUIRED vci The Virtual Channel Identifier OPTIONAL ...

Page 70: ... Delete a loopback connection for VC SYNTAX atm oam vclb del port dsl0 dsl1 atm2 atm3 aal5 atm5 or number vpi number 0 31 vci number 0 511 where port The ATM port number REQUIRED vpi The Virtual Path Identifier REQUIRED vci The Virtual Channel Identifier OPTIONAL ...

Page 71: ...atm Commands E DOC CTC 20080409 0002 v2 0 71 atm oam vclb list List all VC loopback connections ...

Page 72: ... atm phonebook add Add a new phonebook entry SYNTAX atm phonebook add name string addr atmchannel PVC syntax is port vpi vci port dsl0 dsl1 where name The phonebook name for this destination REQUIRED addr The address for this destination REQUIRED ...

Page 73: ...atm Commands E DOC CTC 20080409 0002 v2 0 73 atm phonebook autolist Display auto PVC s ...

Page 74: ...atm Commands 74 E DOC CTC 20080409 0002 v2 0 atm phonebook delete Delete a phonebook entry SYNTAX atm phonebook delete name where name The name of the phonebook to delete REQUIRED ...

Page 75: ...atm Commands E DOC CTC 20080409 0002 v2 0 75 atm phonebook flush Flush all phonebook entries ...

Page 76: ...atm Commands 76 E DOC CTC 20080409 0002 v2 0 atm phonebook list Display the phonebook ...

Page 77: ... new qosbook entry SYNTAX atm qosbook add name string txctd default rxctd default where name The name for the new QoS entry REQUIRED txctd The name of the CTD for transmit upstream direction OPTIONAL rxctd The name of the CTD for receive downstream direction OPTIONAL ...

Page 78: ...atm Commands 78 E DOC CTC 20080409 0002 v2 0 atm qosbook config Modify the qosbook configuration SYNTAX atm qosbook config format bytes cells where format The input output format of the qosbook OPTIONAL ...

Page 79: ...here name The name for the new CTD entry REQUIRED conformance The ATM service conformance definition REQUIRED peakrate The peak rate in kilobits per second Use 0 to indicate linerate for UBR OPTIONAL sustrate The sustainable rate in kilobits per second VBR only OPTIONAL maxburst The maximum burst size in bytes VBR or GFR OPTIONAL minrate The minimum rate in kilobits per second UBR m or GFR OPTIONA...

Page 80: ... atm qosbook ctddelete Delete a connection traffic descriptor SYNTAX atm qosbook ctddelete name default force disabled enabled where name The name of the CTD entry to delete REQUIRED force Force delete even when the entry is still in use OPTIONAL ...

Page 81: ...atm Commands E DOC CTC 20080409 0002 v2 0 81 atm qosbook ctdlist Display all connection traffic descriptors ...

Page 82: ...0002 v2 0 atm qosbook delete Delete a qosbook entry SYNTAX atm qosbook delete name default force disabled enabled where name The name of the qosbook entry to delete REQUIRED force Force delete even when the entry is still in use OPTIONAL ...

Page 83: ...atm Commands E DOC CTC 20080409 0002 v2 0 83 atm qosbook flush Flush all qosbook entries ...

Page 84: ...atm Commands 84 E DOC CTC 20080409 0002 v2 0 atm qosbook list Display the qosbook ...

Page 85: ...autopvc Commands E DOC CTC 20080409 0002 v2 0 85 autopvc Commands autopvc config Configure autopvc see page 86 autopvc list Show retreived information see page 87 ...

Page 86: ...o passive active type bridge pppoerelay ipoa ethoa pppoa pppoe overwrite disabled enabled peakrate number 0 27786 where mode Autopvc mode OPTIONAL type Type of autopvc OPTIONAL overwrite Enable disable UBR peak rate overwrite OPTIONAL peakrate The UBR peak rate in kilobits per second 0 to indicate linerate OPTIONAL ...

Page 87: ...reived information SYNTAX autopvc list table Port AtmLayer Vpc Vcc Address AddressRegistrationAdmin AAL5Profile AAL2CommonProfile AAL2TrunkingProfile AAL2LESProfile AtmServiceConnInfoExtension AtmServiceTypeExtension AAL5ProfileExtension where table Autopvc table OPTIONAL ...

Page 88: ...config Commands 88 E DOC CTC 20080409 0002 v2 0 ...

Page 89: ... see page 90 config dump Show the saved configuration file see page 91 config flush Flush the loaded configuration see page 92 config list Show the current configuration set see page 93 config load Load saved or default configuration see page 94 config save Store current configuration to backup file see page 95 ...

Page 90: ...onfig Commands 90 E DOC CTC 20080409 0002 v2 0 config delete Delete a user configuration file SYNTAX config delete filename user configuration filename where filename configuration file to erase OPTIONAL ...

Page 91: ...config Commands E DOC CTC 20080409 0002 v2 0 91 config dump Show the saved configuration file SYNTAX config dump sections string where sections Sections to be dumped OPTIONAL ...

Page 92: ...config Commands 92 E DOC CTC 20080409 0002 v2 0 config flush Flush the loaded configuration SYNTAX config flush flush_ip enabled disabled where flush_ip Flush IP settings or not OPTIONAL ...

Page 93: ...config Commands E DOC CTC 20080409 0002 v2 0 93 config list Show the current configuration set SYNTAX config list templates disabled enabled where templates list template files OPTIONAL ...

Page 94: ...ts disabled enabled flush enabled disabled echo disabled enabled filename string where load_ip Load IP settings or not OPTIONAL defaults Load default instead of saved configuration OPTIONAL flush Flush current configuration before loading new one OPTIONAL echo Echo each command string when loaded OPTIONAL filename Configuration filename OPTIONAL ...

Page 95: ... E DOC CTC 20080409 0002 v2 0 95 config save Store current configuration to backup file SYNTAX config save filename user configuration filename where filename Filename for backupfile of current configuration REQUIRED ...

Page 96: ...connection Commands 96 E DOC CTC 20080409 0002 v2 0 ...

Page 97: ...ll connections see page 104 connection config Modify global connection configuration see page 105 connection debug Connection debug commands see page 106 connection describe Describe the streams of a connection see page 107 connection flush Flush the connection configuration see page 108 connection info Display all modules with some info see page 109 connection list Display the currently known con...

Page 98: ...ed enabled where application The name of a CONN NAT application helper as listed by connection applist REQUIRED trace Enable disable CONN NAT application helper traces OPTIONAL timeout The maximum timeout in seconds to keep predicted child connections around OPTIONAL childqos Used QOS label for the predicted child connections OPTIONAL floating Enable disabled floating port for IKE helper OPTIONAL ...

Page 99: ... CONN NAT application specific info SYNTAX connection appinfo application IP6TO4 PPTP ESP IKE SIP JABBER CU SeeMe RAUDIO PNA RTSP ILS H245 H323 IRC GAME UDP CONE UDP LOOSE UDP FTP where application The name of a CONN NAT application helper as listed by connection applist REQUIRED ...

Page 100: ...connection Commands 100 E DOC CTC 20080409 0002 v2 0 connection applist Display the available CONN NAT application helpers ...

Page 101: ...onnection bind application IP6TO4 PPTP ESP IKE SIP JABBER CU SeeMe RAUDIO PNA RTSP ILS H245 H323 IRC GAME UDP CONE UDP LOOSE UDP FTP port port range where application The name of a CONN NAT application helper as listed by connection applist REQUIRED port The port number or range this application handler should work on REQUIRED ...

Page 102: ...connection Commands 102 E DOC CTC 20080409 0002 v2 0 connection bindlist Display the CONN NAT application helper port bindings ...

Page 103: ...connection Commands E DOC CTC 20080409 0002 v2 0 103 connection clean Clean connection database by forcing timeouts SYNTAX connection clean level number 0 9 where level Scrubbing level OPTIONAL ...

Page 104: ...connection Commands 104 E DOC CTC 20080409 0002 v2 0 connection clear Kill all connections ...

Page 105: ...guration SYNTAX connection config configchangemode immediate delayed probes disabled enabled udptrackmode strict loose where configchangemode Select how config changes are handled OPTIONAL probes Enable disable alive probes on idle connections OPTIONAL udptrackmode UDP connection tracking mode OPTIONAL ...

Page 106: ...connection Commands 106 E DOC CTC 20080409 0002 v2 0 connection debug Connection debug commands SYNTAX connection debug trace disabled enabled where trace Enable disable traces OPTIONAL ...

Page 107: ... describe Describe the streams of a connection SYNTAX connection describe id number 0 2048 string string beginstring string where id The connection ID to describe OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 108: ...connection Commands 108 E DOC CTC 20080409 0002 v2 0 connection flush Flush the connection configuration ...

Page 109: ...connection Commands E DOC CTC 20080409 0002 v2 0 109 connection info Display all modules with some info ...

Page 110: ...connections SYNTAX connection list nr number 1 2048 history disabled enabled string string beginstring string where nr The number of connections to display OPTIONAL history If enabled show history OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 111: ...connection Commands E DOC CTC 20080409 0002 v2 0 111 connection refresh Invalidate all cached decisions ...

Page 112: ...connection Commands 112 E DOC CTC 20080409 0002 v2 0 connection stats Display connection and stream statistics ...

Page 113: ... 0002 v2 0 113 connection timerclear Clear connection timeout to default SYNTAX connection timerclear timer tcpidle tcpneg tcpkill udpidle udpkill icmpkill ipidle ipkill aiprefresh where timer The name of the connection idle timer OPTIONAL ...

Page 114: ...ig Modify connection timeout handling SYNTAX connection timerconfig timer tcpidle tcpneg tcpkill udpidle udpkill icmpkill ipidle ipkill aiprefresh value number 0 86400 where timer The name of the connection idle timer OPTIONAL value The timer expire value in seconds OPTIONAL ...

Page 115: ...onnection unbind application IP6TO4 PPTP ESP IKE SIP JABBER CU SeeMe RAUDIO PNA RTSP ILS H245 H323 IRC GAME UDP CONE UDP LOOSE UDP FTP port port range where application The name of a CONN NAT application helper as listed by connection applist REQUIRED port The port number or range this application handler should work on REQUIRED ...

Page 116: ...cwmp Commands 116 E DOC CTC 20080409 0002 v2 0 ...

Page 117: ...80409 0002 v2 0 117 cwmp Commands cwmp config Configure the cwmpd as seen from the ACS see page 118 cwmp debug traceconfig Enable or disable tracing see page 120 cwmp server config Configure the cwmpd towards the ACS see page 121 ...

Page 118: ... state The state of the cwmp daemon OPTIONAL mode Set the operation mode of the cwmp daemon OPTIONAL periodicInform Set periodicInform flag of the cwmp daemon OPTIONAL periodicInfInt Set the interval between two periodicInform messages in seconds OPTIONAL sessionTimeout Set HTTP session timeout in seconds OPTIONAL noIpTimeout Set time in seconds ip may be 0 after uploading new config file OPTIONAL...

Page 119: ...lass Set the quality of service class for outgoing CWMP data OPTIONAL bootdelayrange Set the delay on boot before inform is sent OPTIONAL upgradedelay Set whether to delay upgrade if services are active OPTIONAL am1Termination Set if am 1 session termination is enabled OPTIONAL persistentSubscription The cwmp daemon has persistent subscriptions OPTIONAL ...

Page 120: ...cwmp Commands 120 E DOC CTC 20080409 0002 v2 0 cwmp debug traceconfig Enable or disable tracing SYNTAX cwmp debug traceconfig level number where level Set the tracelevel 0 2 OPTIONAL ...

Page 121: ...d towards the ACS SYNTAX cwmp server config url string username string password password where url Set the HTTP URL used to contact the ACS server OPTIONAL username Set the username for ACS Digest Authentication OPTIONAL password Set the password for ACS Digest Authentication OPTIONAL ...

Page 122: ...debug Commands 122 E DOC CTC 20080409 0002 v2 0 ...

Page 123: ...ds debug exec Execute a Trace Debug command For qualified personnel only see page 124 debug prompt Switch to Trace Debug prompt For qualified personnel only see page 125 debug Prompt Switch to extended Trace Debug prompt For qualified personnel only see page 126 ...

Page 124: ...bug Commands 124 E DOC CTC 20080409 0002 v2 0 debug exec Execute a Trace Debug command For qualified personnel only SYNTAX debug exec cmd quoted string where cmd Quoted Trace Debug command string REQUIRED ...

Page 125: ...debug Commands E DOC CTC 20080409 0002 v2 0 125 debug prompt Switch to Trace Debug prompt For qualified personnel only ...

Page 126: ...debug Commands 126 E DOC CTC 20080409 0002 v2 0 debug Prompt Switch to extended Trace Debug prompt For qualified personnel only ...

Page 127: ... client rqoptions add Add a DHCP Option Code to the Parameter Request List see page 142 dhcp client rqoptions delete Delete a DHCP Option Code from the Parameter Request List see page 143 dhcp client rqoptions list List all DHCP Option Codes in the Parameter Request List see page 144 dhcp client rqoptions optionlist List all DHCP Option Codes that can be used in the Parameter Request List see page...

Page 128: ... a DHCP rule see page 164 dhcp rule flush Flush all DHCP rules see page 165 dhcp rule list List all DHCP rules see page 166 dhcp server config Print DHCP server configuration settings see page 167 dhcp server debug clear Clear DHCP server statistics see page 168 dhcp server debug stats Print DHCP server statistics see page 169 dhcp server debug traceconfig Modify DHCP server trace configuration se...

Page 129: ... page 190 dhcp server pool list List all DHCP server pools see page 191 dhcp server pool optadd Add an option instance to the DHCP server pool see page 192 dhcp server pool optdelete Delete an option instance from the DHCP server pool see page 193 dhcp server pool rtadd Add a route to the DHCP server pool see page 194 dhcp server pool rtdelete Delete a route from the DHCP server pool see page 195 ...

Page 130: ...p spoofing list List the available Spoofing Associations see page 205 dhcp spoofing option add Add a DHCP Option Code to a Spoofing Association see page 206 dhcp spoofing option delete Delete a DHCP Option Code from a Spoofing Association see page 207 ...

Page 131: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 131 dhcp client debug clear Clear DHCP client statistics ...

Page 132: ...dhcp Commands 132 E DOC CTC 20080409 0002 v2 0 dhcp client debug stats Print DHCP client statistics ...

Page 133: ...ands E DOC CTC 20080409 0002 v2 0 133 dhcp client debug traceconfig Modify DHCP client trace configuration SYNTAX dhcp client debug traceconfig state disabled enabled where state Enable Disable tracing OPTIONAL ...

Page 134: ...dhcp Commands 134 E DOC CTC 20080409 0002 v2 0 dhcp client flush Delete all DHCP clients ...

Page 135: ...ands E DOC CTC 20080409 0002 v2 0 135 dhcp client ifadd Create a DHCP client SYNTAX dhcp client ifadd intf ipsec0 lan1 dmz1 guest1 where intf The name of the interface on which a DHCP Client is defined REQUIRED ...

Page 136: ...p Commands 136 E DOC CTC 20080409 0002 v2 0 dhcp client ifattach Activate a DHCP client SYNTAX dhcp client ifattach intf wan1 where intf The name of the interface on which a DHCP Client is defined REQUIRED ...

Page 137: ... enabled where intf The name of the dynamic interface to be configured REQUIRED label Label for default gateway and static routes OPTIONAL metric Route metric for default gateway and static routes OPTIONAL dnsmetric DNS route metric OPTIONAL broadcast Operate client in unicast broadcast mode OPTIONAL serverroute Insert a route for the DHCP server IP OPTIONAL followlabel If enabled the DHCP client ...

Page 138: ...cp Commands 138 E DOC CTC 20080409 0002 v2 0 dhcp client ifdelete Delete a DHCP client SYNTAX dhcp client ifdelete intf wan1 where intf The name of the interface on which a DHCP Client is defined REQUIRED ...

Page 139: ...E DOC CTC 20080409 0002 v2 0 139 dhcp client ifdetach De activate a DHCP client and releases its lease SYNTAX dhcp client ifdetach intf where intf The name of the interface on which a DHCP Client is defined REQUIRED ...

Page 140: ...80409 0002 v2 0 dhcp client iflist List DHCP clients SYNTAX dhcp client iflist intf wan1 expand disabled enabled where intf The name of the interface on which a DHCP Client is defined OPTIONAL expand Expand enabled disabled OPTIONAL ...

Page 141: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 141 dhcp client ifrenew Renew a DHCP lease SYNTAX dhcp client ifrenew intf where intf The name of the interface on which a DHCP Client is defined REQUIRED ...

Page 142: ...t name boot file size merit dump domain name swap server root path extensions path ip forwarding non local source routing policy filter max dgram reassembly default ip ttl path mtu aging timeout path mtu plateau table interface mtu all subnets local broadcast address perform mask discovery or number index number 0 255 where intf The name of the interface on which a DHCP Client is defined REQUIRED ...

Page 143: ...rvers resource location servers host name boot file size merit dump domain name swap server root path extensions path ip forwarding non local source routing policy filter max dgram reassembly default ip ttl path mtu aging timeout path mtu plateau table interface mtu all subnets local broadcast address perform mask discovery or number where intf The name of the interface on which a DHCP Client is d...

Page 144: ...C 20080409 0002 v2 0 dhcp client rqoptions list List all DHCP Option Codes in the Parameter Request List SYNTAX dhcp client rqoptions list intf wan1 where intf The name of the interface on which a DHCP Client is defined OPTIONAL ...

Page 145: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 145 dhcp client rqoptions optionlist List all DHCP Option Codes that can be used in the Parameter Request List ...

Page 146: ...ing timeout path mtu plateau table interface mtu all subnets local broadcast address perform mask discovery or number enterprise number 1 2147483647 suboption number 1 254 value Value type value type being 8 bit 16 bit 32 bit addr index number 0 255 where intf The name of the interface on which a DHCP Client is defined REQUIRED option The name or number of the option REQUIRED enterprise The enterp...

Page 147: ...s path ip forwarding non local source routing policy filter max dgram reassembly default ip ttl path mtu aging timeout path mtu plateau table interface mtu all subnets local broadcast address perform mask discovery or number enterprise number 1 1 suboption number 1 254 where intf The name of the interface on which a DHCP Client is defined REQUIRED option The name or number of the option REQUIRED e...

Page 148: ...002 v2 0 dhcp client txoptions list List all options SYNTAX dhcp client txoptions list intf wan1 expand disabled enabled where intf The name of the interface on which a DHCP Client is defined OPTIONAL expand Expand enabled disabled OPTIONAL ...

Page 149: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 149 dhcp client txoptions optionlist Lists all DHCP Option Codes that can be used ...

Page 150: ...dhcp Commands 150 E DOC CTC 20080409 0002 v2 0 dhcp relay add Add an entry to the DHCP forward list SYNTAX dhcp relay add name string where name The forward entry name REQUIRED ...

Page 151: ...y configuration settings SYNTAX dhcp relay config agentinfo disabled enabled agentmismatch disabled enabled where agentinfo Set the relay agent info status RFC3046 OPTIONAL agentmismatch Forward Drop DHCP reply packet when a relay agent info mismatch is detected RFC3046 OPTIONAL ...

Page 152: ...dhcp Commands 152 E DOC CTC 20080409 0002 v2 0 dhcp relay debug stats Print DHCP relay statistics ...

Page 153: ...mmands E DOC CTC 20080409 0002 v2 0 153 dhcp relay debug traceconfig Modify DHCP relay trace configuration SYNTAX dhcp relay debug traceconfig state disabled enabled where state Enable Disable tracing OPTIONAL ...

Page 154: ... E DOC CTC 20080409 0002 v2 0 dhcp relay delete Delete an entry from the DHCP forward list SYNTAX dhcp relay delete name lan1_to_127 0 0 1 dmz1_to_127 0 0 1 guest1_to_127 0 0 1 where name The forward entry name REQUIRED ...

Page 155: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 155 dhcp relay flush Flushes the DHCP relay settings ...

Page 156: ...moteid password trusted disabled enabled where intf The name of the relay interface to configure REQUIRED relay Set the relay status OPTIONAL maxhops Set the maximum number of hops allowed in the DHCP packet OPTIONAL remoteid Set the remote id as specified in RFC3046 OPTIONAL trusted Drop Forward DHCP request packet when a relay agent info option is present and the giaddr field is 0 RFC3046 OPTION...

Page 157: ...nds E DOC CTC 20080409 0002 v2 0 157 dhcp relay iflist Show the configuration of the relay interfaces SYNTAX dhcp relay iflist intf guest1 dmz1 wan1 lan1 ipsec0 where intf The name of the relay interface OPTIONAL ...

Page 158: ...mmands 158 E DOC CTC 20080409 0002 v2 0 dhcp relay list List the DHCP forward list SYNTAX dhcp relay list name lan1_to_127 0 0 1 dmz1_to_127 0 0 1 guest1_to_127 0 0 1 where name The forward entry name OPTIONAL ...

Page 159: ...0 0 1 addr ip address intf None guest1 dmz1 wan1 lan1 ipsec0 giaddr ip address script where name The forward entry name REQUIRED addr The DHCP server IP address OPTIONAL intf The name of the relay interface None to indicate no interface is specified OPTIONAL giaddr The giaddr field to be used in relayed DHCP packets OPTIONAL script Script to be run when the forward entry is hit OPTIONAL ...

Page 160: ...e to a DHCP forward entry SYNTAX dhcp relay ruleadd name lan1_to_127 0 0 1 dmz1_to_127 0 0 1 guest1_to_127 0 0 1 key or and rulename where name The name of the forward entry REQUIRED key The logical key of the selection rule OPTIONAL rulename The name of the DHCP selection rule REQUIRED ...

Page 161: ...ledelete Delete a selection rule from a DHCP forward entry SYNTAX dhcp relay ruledelete name lan1_to_127 0 0 1 dmz1_to_127 0 0 1 guest1_to_127 0 0 1 rulename where name The name of the forward entry REQUIRED rulename The name of the DHCP selection rule REQUIRED ...

Page 162: ...all subnets local broadcast address perform mask discovery or number enterprise number 1 2147483647 suboption number 1 254 value Value type value type being addr ascii byte_array match exactly as_substring mac hardware address with wildcard ex 00 9f aa where name The name of the DHCP rule REQUIRED type Specify the DHCP rule type REQUIRED option The name or number of the option If a value is preced...

Page 163: ...ommands E DOC CTC 20080409 0002 v2 0 163 dhcp rule debug traceconfig Modify DHCP rule trace configuration SYNTAX dhcp rule debug traceconfig state disabled enabled where state Enable Disable tracing OPTIONAL ...

Page 164: ...dhcp Commands 164 E DOC CTC 20080409 0002 v2 0 dhcp rule delete Delete a DHCP rule SYNTAX dhcp rule delete name where name The name of the DHCP rule REQUIRED ...

Page 165: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 165 dhcp rule flush Flush all DHCP rules ...

Page 166: ...dhcp Commands 166 E DOC CTC 20080409 0002 v2 0 dhcp rule list List all DHCP rules ...

Page 167: ...p Commands E DOC CTC 20080409 0002 v2 0 167 dhcp server config Print DHCP server configuration settings SYNTAX dhcp server config state disabled enabled where state Enable Disable the DHCP server OPTIONAL ...

Page 168: ...dhcp Commands 168 E DOC CTC 20080409 0002 v2 0 dhcp server debug clear Clear DHCP server statistics ...

Page 169: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 169 dhcp server debug stats Print DHCP server statistics ...

Page 170: ...ands 170 E DOC CTC 20080409 0002 v2 0 dhcp server debug traceconfig Modify DHCP server trace configuration SYNTAX dhcp server debug traceconfig state disabled enabled where state Enable Disable tracing OPTIONAL ...

Page 171: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 171 dhcp server flush Flush all DHCP server pool and lease entries ...

Page 172: ...ification string of the host REQUIRED pool The name of the DHCP server pool REQUIRED addr The IP address for this client OPTIONAL offset The IP address offset in the pool preserved for this client OPTIONAL leasetime The time in seconds the client is allowed to use an address tip 0 means infinite leasetime OPTIONAL expirytime The time in seconds the DHCP server keeps the lease reserved tip 0 means ...

Page 173: ...lete Delete a DHCP server lease SYNTAX dhcp server lease delete clientid clientid index number expand disabled enabled where clientid The DHCP client identification string OPTIONAL index The DHCP server lease table index OPTIONAL expand Expand enabled disabled OPTIONAL ...

Page 174: ...2 v2 0 dhcp server lease flush Flush all DHCP server leases SYNTAX dhcp server lease flush pool LAN_private GUEST_private DMZ_private where pool The name of the DHCP server pool Only the leases belonging to this pool will be deleted OPTIONAL ...

Page 175: ...ist List all DHCP server leases SYNTAX dhcp server lease list clientid clientid index number expand disabled enabled where clientid The DHCP client identification string OPTIONAL index The DHCP server lease table index OPTIONAL expand Expand enabled disabled OPTIONAL ...

Page 176: ...dhcp Commands 176 E DOC CTC 20080409 0002 v2 0 dhcp server option flush Flush all DHCP server option templates and instances ...

Page 177: ... addr where name The name of the DHCP server option instance REQUIRED tmplname The name of the DHCP server option template REQUIRED policy The transmit policy type for the DHCP server option instance OPTIONAL dynamic Enable Disable option instance as dynamic OPTIONAL maxuse Maximum number of times an option instance can be used in DHCP pools OPTIONAL enterprise The enterprise number see http www i...

Page 178: ...ption instance SYNTAX dhcp server option instdelete name enterprise number 1 1 suboption number 1 254 where name The name of the DHCP server option instance REQUIRED enterprise The enterprise number see http www iana org assignments enterprise numbers OPTIONAL suboption The suboption number OPTIONAL ...

Page 179: ...mmands E DOC CTC 20080409 0002 v2 0 179 dhcp server option instlist List all DHCP server option instances SYNTAX dhcp server option instlist name where name The name of the DHCP server option instance OPTIONAL ...

Page 180: ... a selection rule to a DHCP server option instance SYNTAX dhcp server option ruleadd name key or and rulename where name The name of the DHCP server option instance REQUIRED key The logical key of the selection rule OPTIONAL rulename The name of the DHCP selection rule REQUIRED ...

Page 181: ... server option ruledelete Delete a selection rule from a DHCP server option instance SYNTAX dhcp server option ruledelete name rulename where name The name of the DHCP server option instance REQUIRED rulename The name of the DHCP selection rule REQUIRED ...

Page 182: ...ver option template SYNTAX dhcp server option tmpladd name string optionid number 1 254 dynamic disabled enabled where name The name of the DHCP server option template REQUIRED optionid Specify the DHCP server option code REQUIRED dynamic Enable Disable option template as dynamic OPTIONAL ...

Page 183: ...ands E DOC CTC 20080409 0002 v2 0 183 dhcp server option tmpldelete Delete a DHCP server option template SYNTAX dhcp server option tmpldelete name where name The name of the DHCP server option template REQUIRED ...

Page 184: ...dhcp Commands 184 E DOC CTC 20080409 0002 v2 0 dhcp server option tmpllist List all DHCP server option templates ...

Page 185: ...ble Disable IP address conflict network probing before handing out an address to a client OPTIONAL trustclient Whether or not the IP address suggested by a DHCP client should be taken into account OPTIONAL rtbehaviour Define the DHCP Server s route options behaviour The options that are involved are 3 33 121 and 249 Traditional will return 3 and or 33 standard will return 3 and or 33 or 121 msft w...

Page 186: ...2 v2 0 dhcp server pool add Add a DHCP server pool SYNTAX dhcp server pool add name string index number where name The name of the DHCP server pool REQUIRED index The number of the pool before which you want the new pool to be added OPTIONAL ...

Page 187: ...400 rebindtime number 0 1814400 unnumbered disabled enabled localgw disabled enabled where name The name of the DHCP server pool REQUIRED state Enable Disable the DHCP server pool admin state OPTIONAL intf The interface for which the pool is allowed to lease IP addresses OPTIONAL index The number of the pool before which you want the new pool to be added OPTIONAL poolstart The DHCP server pool sta...

Page 188: ...r for DHCP clients OPTIONAL leasetime The time in seconds a client is allowed to use an address tip 0 means infinite lease OPTIONAL renewtime The time in seconds before a client switches to renewing OPTIONAL rebindtime The time in seconds before a client switches to rebinding OPTIONAL unnumbered Assign an IP address from this pool to the DHCP server or not ppp pools only OPTIONAL localgw Proxy for...

Page 189: ...ds E DOC CTC 20080409 0002 v2 0 189 dhcp server pool delete Delete a DHCP server pool SYNTAX dhcp server pool delete name LAN_private GUEST_private DMZ_private where name The name of the DHCP server pool REQUIRED ...

Page 190: ...dhcp Commands 190 E DOC CTC 20080409 0002 v2 0 dhcp server pool flush Flush all DHCP server pools ...

Page 191: ...ands E DOC CTC 20080409 0002 v2 0 191 dhcp server pool list List all DHCP server pools SYNTAX dhcp server pool list name LAN_private GUEST_private DMZ_private where name The name of the DHCP server pool OPTIONAL ...

Page 192: ...r pool optadd Add an option instance to the DHCP server pool SYNTAX dhcp server pool optadd name LAN_private GUEST_private DMZ_private instname where name The name of the DHCP server pool REQUIRED instname The name of the DHCP server option instance REQUIRED ...

Page 193: ...l optdelete Delete an option instance from the DHCP server pool SYNTAX dhcp server pool optdelete name LAN_private GUEST_private DMZ_private instname where name The name of the DHCP server pool REQUIRED instname The name of the DHCP server option instance REQUIRED ...

Page 194: ...UEST_private DMZ_private dst ip address dstmsk ip mask dotted or cidr gateway ip address 0 where name The name of the DHCP server pool REQUIRED dst The IP destination address of the route for DHCP clients REQUIRED dstmsk The destination IP address mask OPTIONAL gateway The IP address of the next hop Must be directly connected to the DHCP client OPTIONAL ...

Page 195: ...vate GUEST_private DMZ_private dst ip address dstmsk ip mask dotted or cidr gateway ip address 0 where name The name of the DHCP server pool REQUIRED dst The IP destination address of the route for DHCP clients REQUIRED dstmsk The destination IP address mask OPTIONAL gateway The IP address of the next hop Must be directly connected to the DHCP client OPTIONAL ...

Page 196: ...ion rule to the DHCP server pool SYNTAX dhcp server pool ruleadd name LAN_private GUEST_private DMZ_private key or and rulename where name The name of the DHCP server pool REQUIRED key The logical key of the selection rule OPTIONAL rulename The name of the DHCP selection rule REQUIRED ...

Page 197: ... pool ruledelete Delete a selection rule from the DHCP server pool SYNTAX dhcp server pool ruledelete name LAN_private GUEST_private DMZ_private rulename where name The name of the DHCP server pool REQUIRED rulename The name of the DHCP selection rule REQUIRED ...

Page 198: ...ciation SYNTAX dhcp spoofing add name string pool_name LAN_private GUEST_private DMZ_private ifname wan1 where name The name of the Association REQUIRED pool_name The name of the pool to be associated REQUIRED ifname The name of the interface on which a DHCP Client is defined REQUIRED ...

Page 199: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 199 dhcp spoofing attach Enable a Spoofing Association SYNTAX dhcp spoofing attach name where name The name of the Association REQUIRED ...

Page 200: ...dhcp Commands 200 E DOC CTC 20080409 0002 v2 0 dhcp spoofing config Display modify dhcp spoofing state SYNTAX dhcp spoofing config state enabled disabled where state Enable Disable spoofing OPTIONAL ...

Page 201: ... DOC CTC 20080409 0002 v2 0 201 dhcp spoofing debug traceconfig Display modify DHCP spoofing trace configuratin SYNTAX dhcp spoofing debug traceconfig state disabled enabled where state Enable Disable tracing OPTIONAL ...

Page 202: ...dhcp Commands 202 E DOC CTC 20080409 0002 v2 0 dhcp spoofing delete Delete a Spoofing Association SYNTAX dhcp spoofing delete name where name The name of the Association REQUIRED ...

Page 203: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 203 dhcp spoofing detach Disable a Spoofing Association SYNTAX dhcp spoofing detach name where name The name of the Association REQUIRED ...

Page 204: ...dhcp Commands 204 E DOC CTC 20080409 0002 v2 0 dhcp spoofing flush Flush all the associations and the options ...

Page 205: ...dhcp Commands E DOC CTC 20080409 0002 v2 0 205 dhcp spoofing list List the available Spoofing Associations SYNTAX dhcp spoofing list name where name The name of the Association OPTIONAL ...

Page 206: ...CTC 20080409 0002 v2 0 dhcp spoofing option add Add a DHCP Option Code to a Spoofing Association SYNTAX dhcp spoofing option add name option number where name The name of the Association REQUIRED option The option id REQUIRED ...

Page 207: ...409 0002 v2 0 207 dhcp spoofing option delete Delete a DHCP Option Code from a Spoofing Association SYNTAX dhcp spoofing option delete name option number where name The name of the Association REQUIRED option The option id REQUIRED ...

Page 208: ...dns Commands 208 E DOC CTC 20080409 0002 v2 0 ...

Page 209: ...debug spoof getflags Get the error flags for the given spoofed ip see page 220 dns server debug spoof list List the intercept cache table see page 221 dns server debug spoof update update the intercept cache table see page 222 dns server debug stats Print the DNS server forwarder statistics see page 223 dns server flush Flush all local DNS hosts and routes see page 224 dns server host add Add a lo...

Page 210: ...h disabled enabled list string trace disabled enabled where timeout The query timeout in seconds OPTIONAL retry The number of query retries before giving up OPTIONAL state Enable disable the DNS client OPTIONAL search Use the searchlist to construct fully qualified domain names OPTIONAL list Slash separated list of domain name suffixes OPTIONAL trace Enable or disable verbose logging OPTIONAL ...

Page 211: ...mands E DOC CTC 20080409 0002 v2 0 211 dns client dnsadd Add a DNS server SYNTAX dns client dnsadd addr string port number where addr The DNS server IP address REQUIRED port The DNS server port number OPTIONAL ...

Page 212: ...nds 212 E DOC CTC 20080409 0002 v2 0 dns client dnsdelete Delete a DNS server SYNTAX dns client dnsdelete index number 1 99 where index The index number shown by the list command of the server to delete REQUIRED ...

Page 213: ...dns Commands E DOC CTC 20080409 0002 v2 0 213 dns client dnslist List all DNS servers ...

Page 214: ...dns Commands 214 E DOC CTC 20080409 0002 v2 0 dns client flush Remove all DNS servers ...

Page 215: ...ns Commands E DOC CTC 20080409 0002 v2 0 215 dns client nslookup DNS lookup for a domain name or an address SYNTAX dns client nslookup host string where host The DNS domain name string to query REQUIRED ...

Page 216: ...ain The DNS server domain name OPTIONAL timeout The forwarded DNS query timeout OPTIONAL suppress Suppress not more than specified amount of remote DNS server errors OPTIONAL state Enable disable the local DNS server forwarder OPTIONAL trace Enable disable verbose console logging OPTIONAL syslog Enable disable SYSLOG for DNS events OPTIONAL WANDownSpoofing Enable disable DNS spoofing when no appli...

Page 217: ...dns Commands E DOC CTC 20080409 0002 v2 0 217 dns server debug clear Clear the DNS server forwarder statistics ...

Page 218: ...dns Commands 218 E DOC CTC 20080409 0002 v2 0 dns server debug spoof clear Clear the intercept cache table ...

Page 219: ...s E DOC CTC 20080409 0002 v2 0 219 dns server debug spoof getaddress Get the real ip for the given spoofed ip SYNTAX dns server debug spoof getaddress addr ip address where addr The spoofed ip to look up REQUIRED ...

Page 220: ...s 220 E DOC CTC 20080409 0002 v2 0 dns server debug spoof getflags Get the error flags for the given spoofed ip SYNTAX dns server debug spoof getflags addr ip address where addr The spoofed ip to look up REQUIRED ...

Page 221: ...dns Commands E DOC CTC 20080409 0002 v2 0 221 dns server debug spoof list List the intercept cache table ...

Page 222: ...dns Commands 222 E DOC CTC 20080409 0002 v2 0 dns server debug spoof update update the intercept cache table ...

Page 223: ...dns Commands E DOC CTC 20080409 0002 v2 0 223 dns server debug stats Print the DNS server forwarder statistics ...

Page 224: ...dns Commands 224 E DOC CTC 20080409 0002 v2 0 dns server flush Flush all local DNS hosts and routes ...

Page 225: ...0 225 dns server host add Add a local DNS host SYNTAX dns server host add name string addr ip address ttl number where name The name of an IP host to add REQUIRED addr The IP address of the host OPTIONAL ttl The lifetime of the host OPTIONAL ...

Page 226: ...dns Commands 226 E DOC CTC 20080409 0002 v2 0 dns server host delete Delete a local DNS host SYNTAX dns server host delete name string where name The name of an IP host to delete REQUIRED ...

Page 227: ...dns Commands E DOC CTC 20080409 0002 v2 0 227 dns server host flush Flush all local DNS hosts ...

Page 228: ...dns Commands 228 E DOC CTC 20080409 0002 v2 0 dns server host list List all local DNS hosts ...

Page 229: ...eries from machines of which the source IP address matches the source prefix of the DNS entry will be forwarded to the corresponding DNS server OPTIONAL srcmask The IP address mask for the source prefix OPTIONAL domain Domain matching string If configured only those DNS queries of which the domain name in the query matches with the string configured for the entry will be forwarded to the correspon...

Page 230: ...rwarding entry or template SYNTAX dns server route delete dns ip address domain string intf loop ipsec0 lan1 wan1 dmz1 guest1 where dns The IP address of a DNS server REQUIRED domain The DNS domain string OPTIONAL intf The interface associated with the DNS entry or DNS Template OPTIONAL ...

Page 231: ...dns Commands E DOC CTC 20080409 0002 v2 0 231 dns server route flush Removes all DNS forwarding entries and templates ...

Page 232: ...dns Commands 232 E DOC CTC 20080409 0002 v2 0 dns server route list Lists all DNS forwarding entries and templates ...

Page 233: ...ol usage see page 236 dsd debug proxy Display modify HTTPI fixed proxy settings see page 237 dsd debug recycling Display modify HTTPI recycling settings see page 238 dsd debug stats Display clear DSD framework and module statistics see page 239 dsd intercept config Display modify HTTP Intercept configuration see page 240 dsd syslog config Display modify HTTPI logging configuration see page 241 dsd...

Page 234: ...dsd Commands 234 E DOC CTC 20080409 0002 v2 0 dsd config Display modify DSD framework configuration SYNTAX dsd config state disabled automatic where state DSD framework operation mode OPTIONAL ...

Page 235: ...dsd Commands E DOC CTC 20080409 0002 v2 0 235 dsd debug config Display modify DSD debug settings SYNTAX dsd debug config turbomode disabled enabled where turbomode Enable disable turbomode OPTIONAL ...

Page 236: ...d Commands 236 E DOC CTC 20080409 0002 v2 0 dsd debug connection list Display internal connection pool usage SYNTAX dsd debug connection list expand disabled enabled where expand Expanded listing OPTIONAL ...

Page 237: ...ngres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk telnet or number where state Enable disable fixed proxy redirecting OPTIONAL dest Destination IP where reques...

Page 238: ...ycling state disabled enabled interval number httpidle number otheridle number where state Enable disable stream recycling OPTIONAL interval Time between successive activity checks OPTIONAL httpidle Minimal idle count for recycling filtered http streams OPTIONAL otheridle Minimal idle count for recycling other streams OPTIONAL ...

Page 239: ...39 dsd debug stats Display clear DSD framework and module statistics SYNTAX dsd debug stats name intercept urlfilter recycling syslog all clear no yes where name Specify the name of a module OPTIONAL clear Clear the specified statistics OPTIONAL ...

Page 240: ...n OPTIONAL servertimeout Server timeout for redirect action OPTIONAL connecterrorurl Destination url when connection to server failed OPTIONAL categoryerrorurl Destination url when connection to category server failed OPTIONAL monitorintercepturl Destination url when request is intercepted by monitor thread OPTIONAL unauthorizedrequrl Destination url when requested url is blocked by some rule or s...

Page 241: ...C CTC 20080409 0002 v2 0 241 dsd syslog config Display modify HTTPI logging configuration SYNTAX dsd syslog config syslog none unauthorized errors intercepted all where syslog Define which type of events to log OPTIONAL ...

Page 242: ...dsd Commands 242 E DOC CTC 20080409 0002 v2 0 dsd syslog list Display HTTPI log file ...

Page 243: ... a fully qualified host name see page 247 dyndns host delete Delete a host name see page 248 dyndns host flush Delete all host names see page 249 dyndns host list List all host names see page 250 dyndns list List all dynamic DNS clients see page 251 dyndns modify Modify a dynamic DNS client see page 252 dyndns service list List all dynamic DNS services see page 253 dyndns service modify Modify spe...

Page 244: ...dyndns Commands 244 E DOC CTC 20080409 0002 v2 0 dyndns add Add a dynamic DNS client SYNTAX dyndns add name string where name The dynamic DNS client name REQUIRED ...

Page 245: ...dyndns Commands E DOC CTC 20080409 0002 v2 0 245 dyndns delete Delete a dynamic DNS client SYNTAX dyndns delete name where name The dynamic DNS client name REQUIRED ...

Page 246: ...dyndns Commands 246 E DOC CTC 20080409 0002 v2 0 dyndns flush Delete all dynamic DNS clients ...

Page 247: ...s E DOC CTC 20080409 0002 v2 0 247 dyndns host add Add a fully qualified host name SYNTAX dyndns host add group name string where group The dynamic DNS host group REQUIRED name The name of an IP host to add REQUIRED ...

Page 248: ...dyndns Commands 248 E DOC CTC 20080409 0002 v2 0 dyndns host delete Delete a host name SYNTAX dyndns host delete name where name The name of an IP host to delete REQUIRED ...

Page 249: ...dyndns Commands E DOC CTC 20080409 0002 v2 0 249 dyndns host flush Delete all host names ...

Page 250: ...dyndns Commands 250 E DOC CTC 20080409 0002 v2 0 dyndns host list List all host names ...

Page 251: ...dyndns Commands E DOC CTC 20080409 0002 v2 0 251 dyndns list List all dynamic DNS clients ...

Page 252: ...e REQUIRED intf The dynamic DNS client interface OPTIONAL user The username for dynamic DNS authentication OPTIONAL password The password for dynamic DNS authentication OPTIONAL group The dynamic DNS host group OPTIONAL mx The mail exchanger OPTIONAL backmx Set up the mail exchanger as a backup MX OPTIONAL wildcard Allow use of hostname wildcards OPTIONAL offline Set the host to offline mode OPTIO...

Page 253: ...dyndns Commands E DOC CTC 20080409 0002 v2 0 253 dyndns service list List all dynamic DNS services ...

Page 254: ...p smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk telnet or number request string updateinterval number 0 2097120 retryinterval number 0 600 max_retry number 1 5 where name The dynamic DNS service REQUIRED server The dynamic DNS server hostname OPTIONAL port The dynamic DNS server port OPTIONAL request The dynamic DNS request string OPTIONAL updateinterval Number of ...

Page 255: ...sh Remove all non system environment variables see page 256 env get Gets an environment variable see page 257 env list List all environment variables see page 258 env set Sets an environment variable see page 259 env unset Deletes an environment variable see page 260 ...

Page 256: ...env Commands 256 E DOC CTC 20080409 0002 v2 0 env flush Remove all non system environment variables ...

Page 257: ...ION _BUILDVARIANT _MODEM_ACCESS_CODE __SEC_MODEM_ACCESS_CODE _OUI _CUSTOVARIANT _MODEMLABEL _PHYSLAYERTYPE _BUILDNAME _PRL _FIA _BOARD_NAME _COMPANY_ID _COPYRIGHT _TPVERSION _PROD_ID _PROD_FRIENDLY_NAME _VARIANT_ID _VARIANT_FRIENDLY_NAME _MACADDR _LMACADDR _WIZ_AUTOPOPUP _SNTPPOLL_POST_SYNC _SNTPPOLL_PRE_SYNC CONF_REGION CONF_PROVIDER CONF_DATE where var The name of the variable REQUIRED ...

Page 258: ...env Commands 258 E DOC CTC 20080409 0002 v2 0 env list List all environment variables ...

Page 259: ... 20080409 0002 v2 0 259 env set Sets an environment variable SYNTAX env set var string value translated string where var The name of the variable REQUIRED value A translated quoted string defining the variable value REQUIRED ...

Page 260: ...ERSION _BUILDVARIANT _MODEM_ACCESS_CODE __SEC_MODEM_ACCESS_CODE _OUI _CUSTOVARIANT _MODEMLABEL _PHYSLAYERTYPE _BUILDNAME _PRL _FIA _BOARD_NAME _COMPANY_ID _COPYRIGHT _TPVERSION _PROD_ID _PROD_FRIENDLY_NAME _VARIANT_ID _VARIANT_FRIENDLY_NAME _MACADDR _LMACADDR _WIZ_AUTOPOPUP _SNTPPOLL_POST_SYNC _SNTPPOLL_PRE_SYNC CONF_REGION CONF_PROVIDER CONF_DATE where var The name of the variable REQUIRED ...

Page 261: ...vlan list Display a dynamic VLAN membership entry see page 275 eth bridge filter add Add a filter see page 276 eth bridge filter attach Enable a filter see page 277 eth bridge filter config Change filter configuration see page 278 eth bridge filter delete Delete a filter see page 279 eth bridge filter detach Disable a filter see page 280 eth bridge filter forwarding Action set forwarding configura...

Page 262: ...e page 299 eth bridge igmpsnooping list Display bridge instance snooped groups see page 300 eth bridge list Display the current bridge instances see page 301 eth bridge macadd Add a static MAC address to a bridge interface see page 302 eth bridge macdelete Remove a MAC address from the database see page 303 eth bridge maclist Display the MAC address database see page 304 eth bridge rule add Add a ...

Page 263: ...e page 323 eth device iflist Show status of ethernet interfaces see page 324 eth filter operand add Add a filter operand see page 325 eth filter operand config Set the operand to a certain type will reset content first see page 326 eth filter operand delete Delete a filter operand see page 328 eth filter operand flush Remove all filter operands this will only delete the ones not in use flush see p...

Page 264: ...erivation see page 349 eth flush Flush all ETH interfaces see page 350 eth ifadd Create a new ETH interface see page 351 eth ifattach Attach an ETH interface see page 352 eth ifconfig Modify an ETH interface see page 353 eth ifdelete Delete an ETH interface see page 354 eth ifdetach Detach an ETH interface see page 355 eth iflist Display the ETH interfaces see page 356 eth oam add Enable Ethernet ...

Page 265: ...g Configure per port qos parameters see page 374 eth switch qos list Display qos configuration see page 375 eth switch qos weights Configure the queue weights see page 376 eth switch shaper config Configure common ingress shaper parameters see page 377 eth switch shaper ifconfig Configure per port shaper parameters see page 378 eth switch shaper iflist Display shaper configuration per port see pag...

Page 266: ...eth Commands 266 E DOC CTC 20080409 0002 v2 0 eth bridge add Add a new bridge instance SYNTAX eth bridge add brname string where brname The name of the new bridge instance REQUIRED ...

Page 267: ...eth Commands E DOC CTC 20080409 0002 v2 0 267 eth bridge clear Clear bridge statistics SYNTAX eth bridge clear brname bridge where brname The name of a bridge instance OPTIONAL ...

Page 268: ...roadcast vlan disabled enabled precedencemap string where brname The name of a bridge instance OPTIONAL age The lifetime in seconds of a dynamically learned MAC address OPTIONAL filter The bridge filter to be applied for all WAN bridge interfaces OPTIONAL vlan Enable disable the use of the VLAN id of the received VLAN packets OPTIONAL precedencemap The IP QoS precedence mapping table OPTIONAL ...

Page 269: ...eth Commands E DOC CTC 20080409 0002 v2 0 269 eth bridge delete Delete a bridge instance SYNTAX eth bridge delete brname bridge where brname The name of a bridge instance REQUIRED ...

Page 270: ...eth Commands 270 E DOC CTC 20080409 0002 v2 0 eth bridge dynvlan actlist Display the active MAC entries for the dynamic VLAN membership ...

Page 271: ... masked hardware address vlan default wan dmz guest remvlan default wan dmz guest where id The id of the dynamic VLAN membership entry OPTIONAL hwaddr The masked ethernet MAC address of the dynamic VLAN membership entry REQUIRED vlan The VLAN for the dynamic VLAN membership entry REQUIRED remvlan The VLAN that will be removed from the bridge interface OPTIONAL ...

Page 272: ...C CTC 20080409 0002 v2 0 eth bridge dynvlan config Modify the dynamic VLAN membership configuration SYNTAX eth bridge dynvlan config timeout number 0 100000 where timeout Timeout in seconds for the dynamic entries OPTIONAL ...

Page 273: ...eth Commands E DOC CTC 20080409 0002 v2 0 273 eth bridge dynvlan delete Delete a dynamic VLAN membership entry SYNTAX eth bridge dynvlan delete id number 0 100000 where id REQUIRED ...

Page 274: ...eth Commands 274 E DOC CTC 20080409 0002 v2 0 eth bridge dynvlan flush Flush all dynamic VLAN membership entries ...

Page 275: ...eth Commands E DOC CTC 20080409 0002 v2 0 275 eth bridge dynvlan list Display a dynamic VLAN membership entry ...

Page 276: ...0409 0002 v2 0 eth bridge filter add Add a filter SYNTAX eth bridge filter add brname bridge name string filter where brname The name of an bridge REQUIRED name The name of the filter REQUIRED filter Ethernet filter to used OPTIONAL ...

Page 277: ...DOC CTC 20080409 0002 v2 0 277 eth bridge filter attach Enable a filter SYNTAX eth bridge filter attach brname bridge name where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED ...

Page 278: ...0 eth bridge filter config Change filter configuration SYNTAX eth bridge filter config brname bridge name filter where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED filter Ethernet filter to used OPTIONAL ...

Page 279: ...DOC CTC 20080409 0002 v2 0 279 eth bridge filter delete Delete a filter SYNTAX eth bridge filter delete brname bridge name where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED ...

Page 280: ...0 E DOC CTC 20080409 0002 v2 0 eth bridge filter detach Disable a filter SYNTAX eth bridge filter detach brname bridge name where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED ...

Page 281: ...ction set forwarding configuration SYNTAX eth bridge filter forwarding brname bridge name mode ToFwdIntfsOnly AlsoToFwdIntfs NotToFwdIntfs Drop where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED mode The forwarding type to set REQUIRED ...

Page 282: ... filter action SYNTAX eth bridge filter fwdintfadd brname bridge name intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED intf The name of the bridge interface to add REQUIRED ...

Page 283: ... filter action SYNTAX eth bridge filter fwdintfdel brname bridge name intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED intf The name of the bridge interface to remove REQUIRED ...

Page 284: ...ith a filter SYNTAX eth bridge filter ifadd brname bridge name intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED intf The name of the bridge interface to add REQUIRED ...

Page 285: ...m a filter SYNTAX eth bridge filter ifdel brname bridge name intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of an bridge REQUIRED name The name of the filter to configure REQUIRED intf The name of the bridge interface to remove REQUIRED ...

Page 286: ... v2 0 eth bridge filter list Display the bridge filters SYNTAX eth bridge filter list brname bridge name expand disabled enabled where brname The name of an bridge REQUIRED name The name of an filter OPTIONAL expand Expanded listing OPTIONAL ...

Page 287: ...mands E DOC CTC 20080409 0002 v2 0 287 eth bridge flush Flush all bridge instances with their interfaces and properties SYNTAX eth bridge flush brname bridge where brname The name of a bridge instance OPTIONAL ...

Page 288: ...E DOC CTC 20080409 0002 v2 0 eth bridge ifadd Add a new bridge interface SYNTAX eth bridge ifadd brname bridge intf string where brname The name of a bridge instance OPTIONAL intf The new bridge interface name REQUIRED ...

Page 289: ...C CTC 20080409 0002 v2 0 289 eth bridge ifattach Attach a bridge interface SYNTAX eth bridge ifattach brname bridge intf where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface REQUIRED ...

Page 290: ...led enabled wan disabled enabled igmpsnooping disabled enabled priotransparent disabled enabled bpdufiltering disabled enabled xtratagging none c vlan s vlan where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface to configure REQUIRED dest The destination for this interface Typically an ATM or a physical interface name OPTIONAL portstate The bridge portstate for ...

Page 291: ...ilter Enable disable discard of multicast packets for this interface OPTIONAL dynvlan Enable disable dynamic VLAN membership checking for this interface OPTIONAL wan Enable disable WAN for this interface OPTIONAL igmpsnooping Enable disable IGMP snooping for this interface OPTIONAL priotransparent Enable disable priority preservation for this interface OPTIONAL bpdufiltering Enable disable BPDU fi...

Page 292: ...e ifdelete Delete a bridge interface SYNTAX eth bridge ifdelete brname bridge intf ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface REQUIRED ...

Page 293: ...e ifdetach Detach a bridge interface SYNTAX eth bridge ifdetach brname bridge intf ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface REQUIRED ...

Page 294: ...mmands 294 E DOC CTC 20080409 0002 v2 0 eth bridge ifflush flush the bridge interfaces detach delete all interfaces SYNTAX eth bridge ifflush brname bridge where brname The name of a bridge instance OPTIONAL ...

Page 295: ...ist brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl string string beginstring string where brname The name of a bridge instance OPTIONAL intf The name of a bridge interface OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 296: ...ar Clear snooping statistics SYNTAX eth bridge igmpsnooping clear brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of a bridge instance OPTIONAL intf The bridge interface currently to be cleared OPTIONAL ...

Page 297: ...e igmpsnooping config brname bridge state disabled enabled floodrp disabled enabled floodmcast disabled enabled where brname The name of a bridge instance OPTIONAL state Enable Disable the IGMP Snooping OPTIONAL floodrp Enable Disable flooding reports to all ports OPTIONAL floodmcast Enable Disable flooding unregistered multicasts OPTIONAL ...

Page 298: ... Host Router Auto fastleave disabled enabled exptrack disabled enabled mrdp disabled enabled rgmp disabled enabled where brname The bridge instance currently to be configured OPTIONAL intf The bridge interface currently to be configured REQUIRED portmode Mode of the bridge port OPTIONAL fastleave Enable Disable Fast Immediate Leave OPTIONAL exptrack Enable Disable Explicit Host Tracking OPTIONAL m...

Page 299: ...ist Display bridge interface IGMP status SYNTAX eth bridge igmpsnooping iflist brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface OPTIONAL ...

Page 300: ...mands 300 E DOC CTC 20080409 0002 v2 0 eth bridge igmpsnooping list Display bridge instance snooped groups SYNTAX eth bridge igmpsnooping list brname bridge where brname The name of a bridge instance OPTIONAL ...

Page 301: ... list Display the current bridge instances SYNTAX eth bridge list brname bridge string string beginstring string where brname The name of a bridge instance OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 302: ...cadd brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl hwaddr hardware address vlan default wan dmz guest where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface REQUIRED hwaddr The ethernet MAC address of the new entry REQUIRED vlan The VLAN OPTIONAL ...

Page 303: ...ete Remove a MAC address from the database SYNTAX eth bridge macdelete brname bridge hwaddr hardware address vlan default wan dmz guest where brname The name of a bridge instance OPTIONAL hwaddr The ethernet MAC address of the entry REQUIRED vlan The VLAN OPTIONAL ...

Page 304: ...eth Commands 304 E DOC CTC 20080409 0002 v2 0 eth bridge maclist Display the MAC address database SYNTAX eth bridge maclist brname bridge where brname The name of a bridge instance OPTIONAL ...

Page 305: ... bridge rule add type shared independant vlan default wan dmz guest vlan2 default wan dmz guest isi number 0 32 where type Type of constraint REQUIRED vlan The VLAN where the constraint belongs to REQUIRED vlan2 The second VLAN for a shared constraint OPTIONAL isi The indenpendent set id for an independent constraint OPTIONAL ...

Page 306: ...ommands 306 E DOC CTC 20080409 0002 v2 0 eth bridge rule delete Delete a constraint from the VLAN learning system SYNTAX eth bridge rule delete index number 0 32 where index Index of the constraint REQUIRED ...

Page 307: ...eth Commands E DOC CTC 20080409 0002 v2 0 307 eth bridge rule flush Flush all constraints from the VLAN learning system ...

Page 308: ...eth Commands 308 E DOC CTC 20080409 0002 v2 0 eth bridge rule list Display all constraints from the VLAN learning system ...

Page 309: ...E DOC CTC 20080409 0002 v2 0 309 eth bridge select Select the default bridge for configuring interfaces from if not setting SYNTAX eth bridge select brname bridge where brname The name of a bridge instance REQUIRED ...

Page 310: ...nvlan ifadd brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl untagged disabled enabled where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface to add to the unknown VLAN REQUIRED untagged Enable disable interface as untagged for this unknown VLAN OPTIONAL ...

Page 311: ...knownvlan ifconfig brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl untagged disabled enabled where brname The name of a bridge instance OPTIONAL intf The bridge interface from the unknown VLAN to configure REQUIRED untagged Enable disable interface as untagged for this unknown VLAN OPTIONAL ...

Page 312: ...nterface from unknown VLAN SYNTAX eth bridge unknownvlan ifdelete brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface to remove from the unknown VLAN REQUIRED ...

Page 313: ...eth Commands E DOC CTC 20080409 0002 v2 0 313 eth bridge unknownvlan iflist Display all interfaces of the unknown VLAN ...

Page 314: ...dge vlan ifadd name default wan dmz guest intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl untagged disabled enabled where name The VLAN name REQUIRED intf The name of the bridge interface to add to the VLAN REQUIRED untagged Enable disable interface as untagged for this VLAN OPTIONAL ...

Page 315: ... bridge vlan ifconfig name default wan dmz guest intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl untagged disabled enabled where name The VLAN name REQUIRED intf The bridge interface from the VLAN to configure REQUIRED untagged Enable disable interface as untagged for this VLAN REQUIRED ...

Page 316: ...ridge interface from virtual LAN SYNTAX eth bridge vlan ifdelete name default wan dmz guest intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where name The VLAN name REQUIRED intf The name of the bridge interface to remove from the VLAN REQUIRED ...

Page 317: ...eth Commands E DOC CTC 20080409 0002 v2 0 317 eth bridge vlan iflist Display all vitual LAN s ...

Page 318: ...t_8_35 Internet_0_35 eth br dsl innervid 1 4094 all outervid 1 4094 notag transparent where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface REQUIRED innervid The inner VLAN id all 1 4094 all all inner vid will be translated to the outer vid REQUIRED outervid The outer VLAN id notag 1 4094 transparent notag outer not tagged transparent tagged as inner REQUIRED ...

Page 319: ...nternet_8_35 Internet_0_35 eth br dsl innervid 1 4094 all outervid 1 4094 notag transparent where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface REQUIRED innervid The inner VLAN id all 1 4094 all all inner vid will be translated to the outer vid REQUIRED outervid The outer VLAN id notag 1 4094 transparent notag outer not tagged transparent tagged as inner REQUI...

Page 320: ...atag delete brname bridge intf OBC ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl innervid 1 4094 all where brname The name of a bridge instance OPTIONAL intf The name of the bridge interface REQUIRED innervid The inner VLAN id all 1 4094 all all inner vid will be translated to the outer vid REQUIRED ...

Page 321: ...eth Commands E DOC CTC 20080409 0002 v2 0 321 eth bridge xtratag flush Flush all extra tag mapping entries ...

Page 322: ...eth Commands 322 E DOC CTC 20080409 0002 v2 0 eth bridge xtratag list Display all extra tag mapping entries ...

Page 323: ...ernet interface SYNTAX eth device ifconfig intf ethif1 ethif2 ethif3 ethif4 type auto 10BaseTHD 10BaseTFD 100BaseTHD 100BaseTFD or number state enabled disabled where intf The name of a physical interface REQUIRED type The ethernet type OPTIONAL state The interface state OPTIONAL ...

Page 324: ...eth Commands 324 E DOC CTC 20080409 0002 v2 0 eth device iflist Show status of ethernet interfaces ...

Page 325: ...eth Commands E DOC CTC 20080409 0002 v2 0 325 eth filter operand add Add a filter operand SYNTAX eth filter operand add operand string where operand The name of the new operand operand REQUIRED ...

Page 326: ...Other LLCNLPID LLCOther ipprotocol number 0 254 action Delete Insert Modify offset number priority number 0 7 size number vid number 1 4095 protocol IP UpperLayer where operand The name of an operand REQUIRED type The type to set REQUIRED operator The compare operator REQUIRED protocollevel The protocol level from where to start offset size calculations REQUIRED length The length of the compare va...

Page 327: ... protocol level in bytes the Match Modify action should start in bytes REQUIRED priority The VLAN priority to filter on OPTIONAL size The size of the frame at this protocol level REQUIRED vid The VID to filter on OPTIONAL protocol The protocol level of the checksum REQUIRED ...

Page 328: ...eth Commands 328 E DOC CTC 20080409 0002 v2 0 eth filter operand delete Delete a filter operand SYNTAX eth filter operand delete operand where operand The name of the operand to delete REQUIRED ...

Page 329: ...eth Commands E DOC CTC 20080409 0002 v2 0 329 eth filter operand flush Remove all filter operands this will only delete the ones not in use flush ...

Page 330: ... operand frameclassadd Add another frameclass in the set SYNTAX eth filter operand frameclassadd operand frameclass Eth2 SNAPEType SNAP8021H SNAPOther LLCNLPID LLCOther where operand The name of an operand REQUIRED frameclass The frame class to add REQUIRED ...

Page 331: ...rand frameclassdelete Delete a frameclasse from the set SYNTAX eth filter operand frameclassdelete operand frameclass Eth2 SNAPEType SNAP8021H SNAPOther LLCNLPID LLCOther where operand The name of an operand REQUIRED frameclass The frameclass to remove REQUIRED ...

Page 332: ...09 0002 v2 0 eth filter operand ipprotoadd Add another ip protocol in the set SYNTAX eth filter operand ipprotoadd operand ipprotocol number 0 255 where operand The name of an operand REQUIRED ipprotocol The IP protocol to add REQUIRED ...

Page 333: ... 0002 v2 0 333 eth filter operand ipprotodelete Delete a ip protocol from the set SYNTAX eth filter operand ipprotodelete operand ipprotocol where operand The name of an operand REQUIRED ipprotocol The IP protocol to remove REQUIRED ...

Page 334: ...DOC CTC 20080409 0002 v2 0 eth filter operand list Display the filter operands SYNTAX eth filter operand list operand expand disabled enabled where operand The name of an operand OPTIONAL expand Expanded listing OPTIONAL ...

Page 335: ... 0002 v2 0 335 eth filter operand priorityadd Add another priority in the set SYNTAX eth filter operand priorityadd operand priority number 0 7 where operand The name of an operand REQUIRED priority The vlan priority to add REQUIRED ...

Page 336: ...0409 0002 v2 0 eth filter operand prioritydelete Delete a ip priority from the set SYNTAX eth filter operand prioritydelete operand priority where operand The name of an operand REQUIRED priority The vlan priority to remove REQUIRED ...

Page 337: ... DOC CTC 20080409 0002 v2 0 337 eth filter operand reset Reset an operand to its default initial state removes all content set to SYNTAX eth filter operand reset operand where operand The name of an operand REQUIRED ...

Page 338: ...8 E DOC CTC 20080409 0002 v2 0 eth filter operand vidadd Add another VID in the set SYNTAX eth filter operand vidadd operand vid number 1 4095 where operand The name of an operand REQUIRED vid The VID to add REQUIRED ...

Page 339: ... E DOC CTC 20080409 0002 v2 0 339 eth filter operand viddelete Delete a VID from the set SYNTAX eth filter operand viddelete operand vid where operand The name of an operand REQUIRED vid The VID to remove REQUIRED ...

Page 340: ...s Egress VID Priority level number 0 65535 tracing disabled enabled mark disabled enabled where filter The name of the filter REQUIRED location The filter location OPTIONAL level The filter level lower level is processed first priority OPTIONAL tracing Enable disabled tracing of packets OPTIONAL mark Enable disabled marking of packets OPTIONAL ...

Page 341: ...ss Egress VID Priority level number 0 65535 tracing disabled enabled mark disabled enabled where filter The name of an filter REQUIRED location The filter location OPTIONAL level The filter level lower level is processed first priority OPTIONAL tracing Enable disabled tracing of packets OPTIONAL mark Enable disabled marking of packets OPTIONAL ...

Page 342: ...eth Commands 342 E DOC CTC 20080409 0002 v2 0 eth filter template delete Delete a filter SYNTAX eth filter template delete filter where filter The name of an filter REQUIRED ...

Page 343: ...eth Commands E DOC CTC 20080409 0002 v2 0 343 eth filter template flush Remove all filters ...

Page 344: ...44 E DOC CTC 20080409 0002 v2 0 eth filter template list Display the filters SYNTAX eth filter template list filter expand disabled enabled where filter The name of an filter OPTIONAL expand Expanded listing OPTIONAL ...

Page 345: ...er operand negate disabled enabled order number 100 100 operator Ignore AND OR where filter The name of an filter REQUIRED operand The name of the operand to connect with REQUIRED negate negate or not the operand outcome OPTIONAL order The operand order in thes filter lower order is processed first priority OPTIONAL operator Operand operator OPTIONAL ...

Page 346: ... 20080409 0002 v2 0 eth filter template ruledel Remove an operand rule from a filter SYNTAX eth filter template ruledel filter ruleid where filter The name of an filter REQUIRED ruleid The name of the operand to remove REQUIRED ...

Page 347: ...isabled enabled order number 100 100 operator Ignore AND OR where filter The name of an filter REQUIRED ruleid The name of the operand to remove REQUIRED operand The name of the operand to connect with OPTIONAL negate negate or not the operand outcome OPTIONAL order The operand order in thes filter lower order is processed first priority OPTIONAL operator Operand operator OPTIONAL ...

Page 348: ...ble disable priority derivation SYNTAX eth filter template setpriority filter state disabled enabled priority number 0 15 where filter The name of an filter REQUIRED state Enable disabled priority derivation for this filters OPTIONAL priority The priority to set in the derivation REQUIRED ...

Page 349: ...d Action enable disable VID derivation SYNTAX eth filter template setvid filter state disabled enabled vid number 1 4095 where filter The name of an filter REQUIRED state Enable disabled VID derivation for this filters OPTIONAL vid The VID to set in the derivation REQUIRED ...

Page 350: ...eth Commands 350 E DOC CTC 20080409 0002 v2 0 eth flush Flush all ETH interfaces ...

Page 351: ...eth Commands E DOC CTC 20080409 0002 v2 0 351 eth ifadd Create a new ETH interface SYNTAX eth ifadd intf string where intf The name for the new ETH interface REQUIRED ...

Page 352: ...eth Commands 352 E DOC CTC 20080409 0002 v2 0 eth ifattach Attach an ETH interface SYNTAX eth ifattach intf where intf The name of the ETH interface REQUIRED ...

Page 353: ...priotag disabled enabled vlan default wan dmz guest where intf The name of the ETH interface to configure REQUIRED dest The destination interface for this ETH interface OPTIONAL retry The number of times the ETH connection setup should retry before giving up OPTIONAL wan Enable Disable WAN for this ETH interface OPTIONAL priotag Enable Disable VLAN priority tagging OPTIONAL vlan The VLAN for this ...

Page 354: ...eth Commands 354 E DOC CTC 20080409 0002 v2 0 eth ifdelete Delete an ETH interface SYNTAX eth ifdelete intf where intf The name of the ETH interface REQUIRED ...

Page 355: ...eth Commands E DOC CTC 20080409 0002 v2 0 355 eth ifdetach Detach an ETH interface SYNTAX eth ifdetach intf where intf The name of the ETH interface REQUIRED ...

Page 356: ...t Display the ETH interfaces SYNTAX eth iflist intf eth_wan1 eth_dmz1 eth_guest1 string string beginstring string where intf The name of an ETH interface OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 357: ... 0002 v2 0 357 eth oam add Enable Ethernet OAM E OAM on an interface SYNTAX eth oam add name ethport1 ethport2 ethport3 ethport4 Internet_8_35 Internet_0_35 eth br dsl where name The interface for which to add E OAM support REQUIRED ...

Page 358: ...E DOC CTC 20080409 0002 v2 0 eth oam config Modify global E OAM settings SYNTAX eth oam config oui string vendorcode number or string where oui OUI of the vendor OPTIONAL vendorcode Vendor Specific Information OPTIONAL ...

Page 359: ...eth Commands E DOC CTC 20080409 0002 v2 0 359 eth oam configlist Display global E OAM settings ...

Page 360: ...eth Commands 360 E DOC CTC 20080409 0002 v2 0 eth oam debug tracing Modify E OAM tracing level SYNTAX eth oam debug tracing level number 0 15 where level E OAM trace level REQUIRED ...

Page 361: ...eth Commands E DOC CTC 20080409 0002 v2 0 361 eth oam delete Disable E OAM on an interface SYNTAX eth oam delete name where name The interface for which to remove E OAM support REQUIRED ...

Page 362: ...th Commands 362 E DOC CTC 20080409 0002 v2 0 eth oam list Display the E OAM configuration of an interface s SYNTAX eth oam list name where name The interface for which to list E OAM information OPTIONAL ...

Page 363: ...h oam loopback Enable disable E OAM remote loopback for an interface SYNTAX eth oam loopback name state disabled enabled where name The interface for which to enable disable E OAM loopback REQUIRED state Enable disable E OAM remote loopback OPTIONAL ...

Page 364: ...400 locallostlinktimer number 1 86400 maxnbrofpduspersecond number 1 100 mode passive active where name The interface for which to configure E OAM REQUIRED state Enable disable E OAM OPTIONAL pdutimer PDU Timer OPTIONAL locallostlinktimer Local Lost Link Timer OPTIONAL maxnbrofpduspersecond Max Nbr of PDUs per second OPTIONAL mode The OAM mode on the interface OPTIONAL ...

Page 365: ...9 0002 v2 0 365 eth oam varreq Request a variable from the remote side SYNTAX eth oam varreq name branch number leaf number where name The interface on which to request the variable REQUIRED branch Branch REQUIRED leaf Leaf REQUIRED ...

Page 366: ...eth Commands 366 E DOC CTC 20080409 0002 v2 0 eth switch group flush To set all ports to the default settings all ports in group 0 ...

Page 367: ...eth Commands E DOC CTC 20080409 0002 v2 0 367 eth switch group list List all configured groups ...

Page 368: ...68 E DOC CTC 20080409 0002 v2 0 eth switch group move Move a specified port to a specified group SYNTAX eth switch group move group number 0 4 port number 1 4 where group The group id REQUIRED port The port REQUIRED ...

Page 369: ...eth Commands E DOC CTC 20080409 0002 v2 0 369 eth switch info Display switch capabilities ...

Page 370: ...h Commands 370 E DOC CTC 20080409 0002 v2 0 eth switch mirror capture Define the specified port to be the Mirror Capture Port SYNTAX eth switch mirror capture port number 1 4 where port The port REQUIRED ...

Page 371: ...2 0 371 eth switch mirror egress Enable or disable the specified port to be a Transmitted Port Mirroring SYNTAX eth switch mirror egress port number 1 4 state enabled disabled where port The port REQUIRED state Enable disable state OPTIONAL ...

Page 372: ...02 v2 0 eth switch mirror ingress Enable or disable the specified port to be a Received Port Mirroring SYNTAX eth switch mirror ingress port number 1 4 state enabled disabled where port The port REQUIRED state Enable disable state OPTIONAL ...

Page 373: ...s config Configure common qos parameters SYNTAX eth switch qos config state enabled disabled nbrOfQueues number 0 4 realtime enabled disabled where state Enable disable QoS REQUIRED nbrOfQueues Number of queues OPTIONAL realtime Enable disable realtime OPTIONAL ...

Page 374: ...os ifconfig Configure per port qos parameters SYNTAX eth switch qos ifconfig port number 1 4 mode none 802 1p high diffserv tos flowcontrol disabled enabled where port The port REQUIRED mode Classifier REQUIRED flowcontrol Enable disable flow control OPTIONAL ...

Page 375: ...eth Commands E DOC CTC 20080409 0002 v2 0 375 eth switch qos list Display qos configuration ...

Page 376: ...hts SYNTAX eth switch qos weights queue0 number 0 100 queue1 number 0 100 queue2 number 0 100 queue3 number 0 100 where queue0 Weight of queue 0 in WFQ in REQUIRED queue1 Weight of queue 1 in WFQ in REQUIRED queue2 Weight of queue 2 in WFQ in REQUIRED queue3 Weight of queue 3 in WFQ in REQUIRED ...

Page 377: ...ed disabled control enabled disabled unknown enabled disabled discard enabled disabled where shaper The shaper instance REQUIRED unicast Shape unicast traffic OPTIONAL multicast Shape multicast traffic OPTIONAL broadcast Shape broadcast traffic OPTIONAL control Shape MAC control traffic OPTIONAL unknown Shape traffic with unknown destination address OPTIONAL discard Discard frame at overflow else ...

Page 378: ...4 ingress enabled disabled shaper number 0 1 state enabled disabled speed number 64000 100000000 burstsize 6 10 18 34 66 126 where port The port REQUIRED ingress Ingress port enabled egress port disabled REQUIRED shaper The shaper instance REQUIRED state Enable disable shaping OPTIONAL speed Speed in bits sec OPTIONAL burstsize Burst size in KBytes OPTIONAL ...

Page 379: ...eth Commands E DOC CTC 20080409 0002 v2 0 379 eth switch shaper iflist Display shaper configuration per port ...

Page 380: ...mmands 380 E DOC CTC 20080409 0002 v2 0 eth switch share add Add a port to be shared SYNTAX eth switch share add port number 1 4 shared number 1 4 where port The port REQUIRED shared The shared port REQUIRED ...

Page 381: ...mands E DOC CTC 20080409 0002 v2 0 381 eth switch share delete Delete a shared port SYNTAX eth switch share delete port number 1 4 shared number 1 4 where port The port REQUIRED shared The shared port REQUIRED ...

Page 382: ...eth Commands 382 E DOC CTC 20080409 0002 v2 0 eth switch share list Display shared ports ...

Page 383: ...er 2 8 broadcast enabled disabled multicast enabled disabled unknown enabled disabled where port The port REQUIRED state Enable disable storm control OPTIONAL rate Rate in 10ths of percent OPTIONAL burstsize Burst size in KBytes OPTIONAL broadcast Storm control for broadcast traffic OPTIONAL multicast Storm control for multicast traffic OPTIONAL unknown Storm control for traffic with unknown desti...

Page 384: ...eth Commands 384 E DOC CTC 20080409 0002 v2 0 eth switch storm iflist Display storm control configuration per port ...

Page 385: ... v2 0 385 eth vlan add Add a new virtual LAN SYNTAX eth vlan add name string vid number 2 4094 addrule disabled enabled where name The new VLAN name REQUIRED vid The new VLAN id REQUIRED addrule Add the default bridge constraint OPTIONAL ...

Page 386: ...eth Commands 386 E DOC CTC 20080409 0002 v2 0 eth vlan delete Delete a virtual LAN SYNTAX eth vlan delete name default wan dmz guest where name The VLAN name REQUIRED ...

Page 387: ...eth Commands E DOC CTC 20080409 0002 v2 0 387 eth vlan flush Flush all virtual LAN s ...

Page 388: ...eth Commands 388 E DOC CTC 20080409 0002 v2 0 eth vlan list Display all virtual LAN s ...

Page 389: ...exit Command E DOC CTC 20080409 0002 v2 0 389 exit Command Exits this shell ...

Page 390: ...expr Commands 390 E DOC CTC 20080409 0002 v2 0 ...

Page 391: ...v2 0 391 expr Commands expr add Add an expression see page 392 expr delete Delete an expression see page 395 expr flush Flush all expressions see page 396 expr list List expressions see page 397 expr modify Modify an expression see page 398 ...

Page 392: ...gmp ipinip tcp udp ah esp ipcomp or number srcport at echo at nbp at rtmp at zis auth bgp biff bootpc bootps finger ftp ftp data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptr...

Page 393: ...alk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk or number icmptype echo reply destination unreachable source quench redirect exceeded parameter problems timestamp request timestamp reply information request information reply address mask request address mask reply or number icmpcode number 0 15 ...

Page 394: ... OPTIONAL srcport The TCP UDP source port number or range begin If a value is preceded by a it means NOT OPTIONAL srcportend The source TCP UDP source port range end inclusive OPTIONAL dstport The TCP UDP destination port number or range begin If a value is preceded by a it means NOT OPTIONAL dstportend The TCP UDP destination port range end OPTIONAL icmptype The ICMP type name or number of the pa...

Page 395: ...te name wan local lan tunnel dmz guest private ssdp_ip mdap_ip icmp igmp imaps pop2 pop3 pop3s smtp ssh dns nntp ipsec esp ah ike DiffServ sip h323 dhcp rtsp ssdp_serv mdap_serv syslog index number where name The name of an expression to delete REQUIRED index The index of a subexpression OPTIONAL ...

Page 396: ...expr Commands 396 E DOC CTC 20080409 0002 v2 0 expr flush Flush all expressions ...

Page 397: ...r_192_168_2_254 _addr_192_168_3_254 private ssdp_ip mdap_ip IKE NAT T_sv_0 ESP_sv_0 IKE_sv_0 DHCP R_sv_0 icmp igmp ftp telnet http httpproxy https RPC NBT SMB imap imap3 imap4 ssl imaps pop2 pop3 pop3s smtp ssh dns type intf ip serv mac format pretty cli string string beginstring string where name The name of an expression to list OPTIONAL type The type of an expression OPTIONAL format The format ...

Page 398: ...roto icmp igmp ipinip tcp udp ah esp ipcomp or number srcport at echo at nbp at rtmp at zis auth bgp biff bootpc bootps finger ftp ftp data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp ...

Page 399: ... nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk or number icmptype echo reply destination unreachable source quench redirect exceeded parameter problems timestamp request timestamp reply information request information reply address mask request address mask reply or number icmpcode numb...

Page 400: ...ue is preceded by a it means NOT OPTIONAL srcport The TCP UDP source port number or range begin If a value is preceded by a it means NOT OPTIONAL srcportend The source TCP UDP source port range end inclusive OPTIONAL dstport The TCP UDP destination port number or range begin If a value is preceded by a it means NOT OPTIONAL dstportend The TCP UDP destination port range end OPTIONAL icmptype The IC...

Page 401: ... level see page 411 firewall level delete Delete a security level see page 412 firewall level flush Flush security level configuration see page 413 firewall level list List all security levels see page 414 firewall level modify Modify a security level see page 415 firewall level set Set Display active security level see page 416 firewall list Display firewall configuration see page 417 firewall ru...

Page 402: ...firewall Commands 402 E DOC CTC 20080409 0002 v2 0 firewall chain add Add a chain SYNTAX firewall chain add chain string where chain The name of the chain to add REQUIRED ...

Page 403: ...firewall Commands E DOC CTC 20080409 0002 v2 0 403 firewall chain delete Delete a chain SYNTAX firewall chain delete chain chain name where chain The name of the chain to delete REQUIRED ...

Page 404: ...firewall Commands 404 E DOC CTC 20080409 0002 v2 0 firewall chain flush Flush all chains ...

Page 405: ...firewall Commands E DOC CTC 20080409 0002 v2 0 405 firewall chain list Display a list of chains SYNTAX firewall chain list format pretty cli where format The format of the chain list OPTIONAL ...

Page 406: ...firewall Commands 406 E DOC CTC 20080409 0002 v2 0 firewall clear Clear firewall configuration ...

Page 407: ...sabled enabled tcpwindow number 0 1073725440 where state Disable Enable the firewall OPTIONAL keep Disable Enable keeping existing connections when firewall rules change OPTIONAL tcpchecks Select level of TCP checks OPTIONAL udpchecks Disable Enable UDP checks OPTIONAL icmpchecks Disable Enable ICMP checks OPTIONAL logdefault Disable Enable logging of default firewall rule OPTIONAL logthreshold Di...

Page 408: ...firewall Commands 408 E DOC CTC 20080409 0002 v2 0 firewall debug clear Clear firewall statistics ...

Page 409: ...firewall Commands E DOC CTC 20080409 0002 v2 0 409 firewall debug stats Display firewall statistics ...

Page 410: ...reset or number forward none all accept deny drop reset or number source none all accept deny drop reset or number where tcpchecks Disable Enable tcpchecks traces OPTIONAL udpchecks Disable Enable udpchecks traces OPTIONAL icmpchecks Disable Enable icmpchecks traces OPTIONAL sink The action the firewall traces for sink traffic OPTIONAL forward The action the firewall traces for forward traffic OPT...

Page 411: ...ere name The name of the security level to add REQUIRED index The index of the security level OPTIONAL readonly Select whether the security level is readonly OPTIONAL udptrackmode Select UDP connection tracking mode OPTIONAL service Enable Disable host service definitions for this security level OPTIONAL proxy Enable Disable proxy system services for this security level OPTIONAL text The descripti...

Page 412: ...all Commands 412 E DOC CTC 20080409 0002 v2 0 firewall level delete Delete a security level SYNTAX firewall level delete name security level name where name The name of the security level to delete REQUIRED ...

Page 413: ...firewall Commands E DOC CTC 20080409 0002 v2 0 413 firewall level flush Flush security level configuration ...

Page 414: ...el list List all security levels SYNTAX firewall level list format pretty cli string string beginstring string where format The format of the security level list OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 415: ... accept where name The name of the security level to modify REQUIRED index The index of this security level OPTIONAL readonly Select whether the security level is readonly OPTIONAL udptrackmode Select UDP connection tracking mode OPTIONAL service Enable Disable service definitions for this security level OPTIONAL proxy Enable Disable proxy system services for this security level OPTIONAL text The ...

Page 416: ...Commands 416 E DOC CTC 20080409 0002 v2 0 firewall level set Set Display active security level SYNTAX firewall level set name security level name where name The name of the security level to set active OPTIONAL ...

Page 417: ...firewall Commands E DOC CTC 20080409 0002 v2 0 417 firewall list Display firewall configuration SYNTAX firewall list format pretty cli where format The format of the firewall list OPTIONAL ...

Page 418: ...where chain The name of the chain which contains the rule REQUIRED index The index of the rule in the chain OPTIONAL name The name of the new rule OPTIONAL clink The name of the chain to be parsed when this rule applies OPTIONAL srcintf The name of the source interface expression If a value is preceded by a it means NOT OPTIONAL srcip The name of the source ip expression If a value is preceded by ...

Page 419: ... E DOC CTC 20080409 0002 v2 0 419 log Disable Enable logging when this rule applies OPTIONAL state Disable Enable this rule OPTIONAL action The action to be taken when this rule applies link when clink is used REQUIRED ...

Page 420: ...C CTC 20080409 0002 v2 0 firewall rule debug clear Clear rule statistics SYNTAX firewall rule debug clear chain chain name index number where chain The name of the chain OPTIONAL index The index of the rule in the chain OPTIONAL ...

Page 421: ... 20080409 0002 v2 0 421 firewall rule debug stats Display rule statistics SYNTAX firewall rule debug stats chain chain name index number where chain The name of the chain OPTIONAL index The index of the rule in the chain OPTIONAL ...

Page 422: ...ds 422 E DOC CTC 20080409 0002 v2 0 firewall rule debug traceconfig Display Modify rule trace configuration SYNTAX firewall rule debug traceconfig state disabled enabled where state Disable Enable rule traces OPTIONAL ...

Page 423: ...0409 0002 v2 0 423 firewall rule delete Delete a rule SYNTAX firewall rule delete chain chain name index number where chain The name of the chain in which to delete the rule REQUIRED index The number of the rule in the chain REQUIRED ...

Page 424: ...firewall Commands 424 E DOC CTC 20080409 0002 v2 0 firewall rule flush Flush all rules SYNTAX firewall rule flush chain chain name where chain The name of the chain to flush OPTIONAL ...

Page 425: ...SYNTAX firewall rule list chain chain name format pretty cli string string beginstring string where chain The name of the chain to list the rules of OPTIONAL format The format of the rule list OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 426: ...ndex of the rule in the chain OPTIONAL name The name of the new rule OPTIONAL clink The name of the chain to be parsed when this rule applies OPTIONAL srcintf The name of the source interface expression If a value is preceded by a it means NOT OPTIONAL srcip The name of the source ip expression If a value is preceded by a it means NOT OPTIONAL dstintf The name of the destination interface expressi...

Page 427: ...firewall Commands E DOC CTC 20080409 0002 v2 0 427 state Disable Enable this rule OPTIONAL action The action to be taken when this rule applies link when clink is used OPTIONAL ...

Page 428: ...grp Commands 428 E DOC CTC 20080409 0002 v2 0 ...

Page 429: ... 438 grp rip ifconfig Configure a RIP interface see page 439 grp rip nbadd Add a RIP neighbor to the neighbor list see page 440 grp rip nbdelete Delete a RIP neighbor from the neighbor list see page 441 grp rip nblist List the RIP neighbor list see page 442 grp rip rtfadd Add a route filter to the RIP route filter list see page 443 grp rip rtfdelete Delete a route filter from the RIP route filter ...

Page 430: ...er 0 255 rdistance number 0 255 trace disabled enabled where cdistance Set the distance of the connected route type Default distance is 0 OPTIONAL kdistance Set the distance of the kernel route type Default distance is 1 OPTIONAL rdistance Set the distance of the RIP route type Default distance is 120 OPTIONAL trace Enable Disable tracing OPTIONAL ...

Page 431: ...grp Commands E DOC CTC 20080409 0002 v2 0 431 grp flush Flush grp interface settings and parameters ...

Page 432: ... 0002 v2 0 grp ifconfig Configure routing parameters of an interface SYNTAX grp ifconfig intf guest1 dmz1 wan1 lan1 ipsec0 loop metric number 1 16 where intf The name of the interface REQUIRED metric The metric of the interface REQUIRED ...

Page 433: ...grp Commands E DOC CTC 20080409 0002 v2 0 433 grp iflist Show the current interfaces SYNTAX grp iflist intf guest1 dmz1 wan1 lan1 ipsec0 loop where intf The name of the interface OPTIONAL ...

Page 434: ...2 v2 0 grp rip bnadd Add an IP address to the RIP black network list SYNTAX grp rip bnadd addr ip address netmask ip mask dotted or cidr where addr The IP network address REQUIRED netmask The subnetmask associated with this address OPTIONAL ...

Page 435: ...5 grp rip bndelete Delete an IP address from the RIP black network list SYNTAX grp rip bndelete addr ip address netmask ip mask dotted or cidr where addr The IP network address REQUIRED netmask The subnetmask associated with this address OPTIONAL ...

Page 436: ...grp Commands 436 E DOC CTC 20080409 0002 v2 0 grp rip bnlist List the RIP black neighbor list ...

Page 437: ...metric 1 16 for imported routes Default metric value is 1 OPTIONAL updatetime Set the routing table update timer value Default is 30 seconds OPTIONAL timeouttime Set the routing info timeout timer value Default is 180 seconds OPTIONAL garbagetime Set the garbage collection timer value Default is 120 seconds OPTIONAL impcrt Enable Disable the import of connected routes OPTIONAL impkrt Enable Disabl...

Page 438: ...grp Commands 438 E DOC CTC 20080409 0002 v2 0 grp rip flush Flush RIP interface settings and global parameters ...

Page 439: ...password passive disabled enabled splithorizon disabled enabled where intf The name of the RIP interface to configure REQUIRED rip Enable Disable the RIP status OPTIONAL txversion Set the RIP transmit version OPTIONAL rxversion Set the RIP receive version OPTIONAL authmode Set the RIP authentication mode OPTIONAL authstr Set the RIP authentication password OPTIONAL passive Enable Disable the passi...

Page 440: ...grp Commands 440 E DOC CTC 20080409 0002 v2 0 grp rip nbadd Add a RIP neighbor to the neighbor list SYNTAX grp rip nbadd addr ip address where addr The neighbor IP address REQUIRED ...

Page 441: ...grp Commands E DOC CTC 20080409 0002 v2 0 441 grp rip nbdelete Delete a RIP neighbor from the neighbor list SYNTAX grp rip nbdelete addr ip address where addr The neighbor IP address REQUIRED ...

Page 442: ...grp Commands 442 E DOC CTC 20080409 0002 v2 0 grp rip nblist List the RIP neighbor list ...

Page 443: ... cidr direction incoming outgoing intf None guest1 dmz1 wan1 lan1 ipsec0 where addr The IP network address which must be filtered out REQUIRED netmask The subnetmask associated with this address OPTIONAL direction Specify if the filtering must be applied to incoming or ougoing packets REQUIRED intf The name of the interface to which the filtering must be applied REQUIRED ...

Page 444: ...ted or cidr direction incoming outgoing intf None guest1 dmz1 wan1 lan1 ipsec0 where addr The IP network address which must be filtered out REQUIRED netmask The subnetmask associated with this address OPTIONAL direction Specify if the filtering must be applied to incoming or ougoing packets REQUIRED intf The name of the interface to which the filtering must be applied REQUIRED ...

Page 445: ...grp Commands E DOC CTC 20080409 0002 v2 0 445 grp rip rtflist List the RIP route filter list ...

Page 446: ...grp Commands 446 E DOC CTC 20080409 0002 v2 0 grp rip show Show the RIP settings and the routes in the RIP database ...

Page 447: ...list Show the current routes in the grp routing table SYNTAX grp rtlist dst ip address dstmsk ip mask dotted or cidr where dst The destination IP address using this route Supports ip mask notation OPTIONAL dstmsk The destination IP address mask OPTIONAL ...

Page 448: ...guest1 dmz1 wan1 lan1 ipsec0 loop where dst The destination IP address which has to be translated Supports ip mask notation REQUIRED dstmsk The destination IP address mask OPTIONAL tdst The translated destination IP address Supports ip mask notation REQUIRED tdstmsk The translated destination IP address mask OPTIONAL rttype The route type which has to be translated REQUIRED intf The name of the in...

Page 449: ...None guest1 dmz1 wan1 lan1 ipsec0 loop where dst The destination IP address which has to be translated Supports ip mask notation REQUIRED dstmsk The destination IP address mask OPTIONAL tdst The translated destination IP address Supports ip mask notation REQUIRED tdstmsk The translated destination IP address mask OPTIONAL rttype The route type which has to be translated REQUIRED intf The name of t...

Page 450: ...grp Commands 450 E DOC CTC 20080409 0002 v2 0 grp rttlist List the grp route translation list ...

Page 451: ...help Command E DOC CTC 20080409 0002 v2 0 451 help Command Displays this help information ...

Page 452: ...hostmgr Commands 452 E DOC CTC 20080409 0002 v2 0 ...

Page 453: ...age 454 hostmgr clear Remove all host devices see page 455 hostmgr config Configure Device Discovery deamon see page 456 hostmgr delete Delete host device see page 457 hostmgr flush Flush Device Discovery configuration i e clear to defaults see page 458 hostmgr list List all host devices see page 459 ...

Page 454: ...e quoted string dns_name string type Unknown L2 FXS L2 USB L2 BT L3 IP L7 UPNP L2 PPPOERELAY L2 WLAN interface string ip_intf string where mac_addr Host MAC address REQUIRED host_type Host type OPTIONAL host_name Host name OPTIONAL user_friendly_name Host user friendly name OPTIONAL dns_name Host DNS name OPTIONAL type Host connection type OPTIONAL interface Host Ethernet interface XREF OPTIONAL i...

Page 455: ...hostmgr Commands E DOC CTC 20080409 0002 v2 0 455 hostmgr clear Remove all host devices ...

Page 456: ...Discovery deamon SYNTAX hostmgr config state disabled enabled scantime number 10 600 autosave disabled enabled where state Enable disable Device Discovery deamon OPTIONAL scantime Time between two discovery scans sec OPTIONAL autosave Enable disable automatic saves to flash OPTIONAL ...

Page 457: ... delete Delete host device SYNTAX hostmgr delete mac_addr hardware address type Unknown L2 FXS L2 USB L2 BT L3 IP L7 UPNP L2 PPPOERELAY L2 WLAN index number where mac_addr Host MAC address REQUIRED type Host connection type OPTIONAL index Host index OPTIONAL ...

Page 458: ...hostmgr Commands 458 E DOC CTC 20080409 0002 v2 0 hostmgr flush Flush Device Discovery configuration i e clear to defaults ...

Page 459: ...hostmgr Commands E DOC CTC 20080409 0002 v2 0 459 hostmgr list List all host devices SYNTAX hostmgr list expand disabled enabled where expand Expanded listing OPTIONAL ...

Page 460: ...ids Commands 460 E DOC CTC 20080409 0002 v2 0 ...

Page 461: ... ids pattern clear Reset pattern tracker see page 466 ids pattern list Display patterns in pattern tracker see page 467 ids pattern stats Display pattern tracker statistics see page 468 ids signature list Display ids signature configuration see page 469 ids signature modify Modify ids signature configuration see page 470 ids threshold clear Reset IDS thresholds see page 471 ids threshold list Disp...

Page 462: ...ids Commands 462 E DOC CTC 20080409 0002 v2 0 ids clear Clear IDS statistics ...

Page 463: ...TC 20080409 0002 v2 0 463 ids config Display Modify IDS configuration SYNTAX ids config state disabled enabled trace disabled enabled where state Enable Disable ids checks OPTIONAL trace Enable Disable ids traces OPTIONAL ...

Page 464: ...ids Commands 464 E DOC CTC 20080409 0002 v2 0 ids parser list Display ids parser configuration SYNTAX ids parser list parser parser where parser The name of the parser OPTIONAL ...

Page 465: ...TC 20080409 0002 v2 0 465 ids parser modify Modify ids parser configuration SYNTAX ids parser modify parser parser state disabled enabled where parser The name of the parser OPTIONAL state The state of the parser REQUIRED ...

Page 466: ...ids Commands 466 E DOC CTC 20080409 0002 v2 0 ids pattern clear Reset pattern tracker ...

Page 467: ...Commands E DOC CTC 20080409 0002 v2 0 467 ids pattern list Display patterns in pattern tracker SYNTAX ids pattern list size 10 100 full or number where size Modify the size of pattern tracker list OPTIONAL ...

Page 468: ...ids Commands 468 E DOC CTC 20080409 0002 v2 0 ids pattern stats Display pattern tracker statistics ...

Page 469: ..._scan tcp_port_scan tcp_syn_scan stealth_tcp_null_scan stealth_tcp_fin_scan stealth_tcp_xmas_scan stealth_tcp_full_xmas_scan stealth_tcp_vecna_scan stealth_tcp_syn fin_scan udp_port_scan ping_sweep_scan tcp_syn_flood udp_flood ping_flood icmp_unreachable_storm smurf_broadcast_attack smurf_storm_attack fraggle_broadcast_attack fraggle_storm_attack land_attack where signature The name of the signatu...

Page 470: ...can stealth_tcp_null_scan stealth_tcp_fin_scan stealth_tcp_xmas_scan stealth_tcp_full_xmas_scan stealth_tcp_vecna_scan stealth_tcp_syn fin_scan udp_port_scan ping_sweep_scan tcp_syn_flood udp_flood ping_flood icmp_unreachable_storm smurf_broadcast_attack smurf_storm_attack fraggle_broadcast_attack fraggle_storm_attack land_attack state disabled enabled where signature The name of the signature OPT...

Page 471: ...ids Commands E DOC CTC 20080409 0002 v2 0 471 ids threshold clear Reset IDS thresholds ...

Page 472: ...ids Commands 472 E DOC CTC 20080409 0002 v2 0 ids threshold list Display IDS thresholds ...

Page 473: ...hold SYNTAX ids threshold modify index number window number limit number scaling disabled enabled where index The index of the threshold REQUIRED window The time window of the threshold OPTIONAL limit The limit of the threshold OPTIONAL scaling Scaling of the threshold window OPTIONAL ...

Page 474: ...igmp Commands 474 E DOC CTC 20080409 0002 v2 0 ...

Page 475: ... 482 igmp proxy config Configure the IGMP proxy see page 483 igmp proxy debug clear Clear IGMP proxy statistics see page 484 igmp proxy debug stats Print IGMP proxy statistics see page 485 igmp proxy debug traceconfig Modify IGMP proxy trace configuration see page 486 igmp proxy flush Flush all IGMP proxy settings and learned groups see page 487 igmp proxy grouplist Show the learned groups on an I...

Page 476: ... 476 E DOC CTC 20080409 0002 v2 0 igmp host config Display Modify global IGMP configuration SYNTAX igmp host config requirera disabled enabled where requirera Enable Disable the router alert IP option check OPTIONAL ...

Page 477: ...igmp Commands E DOC CTC 20080409 0002 v2 0 477 igmp host debug clear Clear IGMP statistics ...

Page 478: ...igmp Commands 478 E DOC CTC 20080409 0002 v2 0 igmp host debug stats Print IGMP statistics ...

Page 479: ...igmp Commands E DOC CTC 20080409 0002 v2 0 479 igmp host flush Flush the IGMP settings ...

Page 480: ...2 0 igmp host ifconfig Configure an IGMP interface SYNTAX igmp host ifconfig intf loop ipsec0 lan1 wan1 dmz1 guest1 version none IGMPv1 IGMPv2 IGMPv3 where intf The IP interface name REQUIRED version The IGMP version of the IP interface REQUIRED ...

Page 481: ...igmp Commands E DOC CTC 20080409 0002 v2 0 481 igmp host iflist Show the configuration of the IGMP interfaces SYNTAX igmp host iflist expand disabled enabled where expand Expanded listing OPTIONAL ...

Page 482: ...DOC CTC 20080409 0002 v2 0 igmp host list Show the IGMP groups SYNTAX igmp host list intf loop ipsec0 lan1 wan1 dmz1 guest1 expand disabled enabled where intf The IP interface name OPTIONAL expand Expanded listing OPTIONAL ...

Page 483: ...n seconds for an IGMP client in reply to general queries OPTIONAL lmqi The maximum response time in seconds for an IGMP client in reply to group specific queries OPTIONAL rv The robustness variable allows tuning for expected IGMP packet loss OPTIONAL advinter The interval in seconds for unsolicited MRD advertisements see rfc4286 OPTIONAL initadvinter The interval in seconds for initial unsolicited...

Page 484: ...igmp Commands 484 E DOC CTC 20080409 0002 v2 0 igmp proxy debug clear Clear IGMP proxy statistics ...

Page 485: ...igmp Commands E DOC CTC 20080409 0002 v2 0 485 igmp proxy debug stats Print IGMP proxy statistics ...

Page 486: ...mmands 486 E DOC CTC 20080409 0002 v2 0 igmp proxy debug traceconfig Modify IGMP proxy trace configuration SYNTAX igmp proxy debug traceconfig state disabled enabled where state Enable Disable tracing OPTIONAL ...

Page 487: ...igmp Commands E DOC CTC 20080409 0002 v2 0 487 igmp proxy flush Flush all IGMP proxy settings and learned groups ...

Page 488: ... v2 0 igmp proxy grouplist Show the learned groups on an IGMP proxy interface SYNTAX igmp proxy grouplist intf lan1 expand disabled enabled where intf The name of the IGMP proxy interface to be listed OPTIONAL expand Expanded listing OPTIONAL ...

Page 489: ...k disabled enabled mrd disabled enabled where intf The name of the IGMP proxy interface to be configured REQUIRED state The state of the IGMP proxy interface OPTIONAL version The IGMP version of the IGMP proxy interface OPTIONAL fastleave Enable Disable the immediate deletion of a group when a leave is received OPTIONAL exptrack Enable Disable explicit host tracking OPTIONAL mrd Enable Disable sen...

Page 490: ...igmp Commands 490 E DOC CTC 20080409 0002 v2 0 igmp proxy iflist Show the configuration of an IGMP proxy interface SYNTAX igmp proxy iflist expand disabled enabled where expand Expanded listing OPTIONAL ...

Page 491: ...igmp Commands E DOC CTC 20080409 0002 v2 0 491 igmp proxy mbslist Show the IGMP proxy membership database merge of all learned groups ...

Page 492: ...interface Command 492 E DOC CTC 20080409 0002 v2 0 ...

Page 493: ...20080409 0002 v2 0 493 interface Command Display interfaces SYNTAX interface list expand disabled enabled reverse disabled enabled where expand Expanded listing OPTIONAL reverse Reverse listing lower layer iso upper layer OPTIONAL ...

Page 494: ...ip Commands 494 E DOC CTC 20080409 0002 v2 0 ...

Page 495: ...auto iflist Shows the autoIP interfaces see page 506 ip config Display Modify global IP stack configuration see page 507 ip debug httpprobe Send HTTP probe to measure the round trip time taken to connect and access see page 509 ip debug sendto Send UDP packets see page 510 ip debug stats Display statistics see page 511 ip debug traceconfig Display Modify IP stack trace configuration see page 512 i...

Page 496: ...Flush the multicast routing table see page 525 ip mcast rtadd Add a multicast route to the multicast routing table see page 526 ip mcast rtdelete Delete a multicast route from the multicast routing table see page 527 ip mcast rtlist Display the multicast routing table see page 528 ip rtadd Add a route to the routing table see page 529 ip rtconfig Modify a route of the routing table see page 530 ip...

Page 497: ... of a broadcast IP interface SYNTAX ip arpadd intf lan1 wan1 dmz1 guest1 ip ip range hwaddr hardware address where intf The IP interface name REQUIRED ip The IP address range of the entry to add REQUIRED hwaddr The hardware address e g Ethernet MAC address of the entry to add OPTIONAL ...

Page 498: ... entry SYNTAX ip arpdelete intf lan1 wan1 dmz1 guest1 ip ip range hwaddr hardware address where intf The IP interface name REQUIRED ip The IP address range of the entry to delete REQUIRED hwaddr The hardware address e g Ethernet MAC address of the entry to delete OPTIONAL ...

Page 499: ...ip Commands E DOC CTC 20080409 0002 v2 0 499 ip arplist Display the ARP cache ...

Page 500: ...ip Commands 500 E DOC CTC 20080409 0002 v2 0 ip auto flush Flushes autoIP interfaces ...

Page 501: ...d Creates a new autoIP interface SYNTAX ip auto ifadd intf loop ipsec0 lan1 wan1 dmz1 guest1 addr ip address where intf The name of the IP interface for which a link local address has to be allocated REQUIRED addr The preferred link local IP address OPTIONAL ...

Page 502: ... Commands 502 E DOC CTC 20080409 0002 v2 0 ip auto ifattach Select and assign a link local address to an autoIP interface SYNTAX ip auto ifattach intf where intf The name of the autoIP interface REQUIRED ...

Page 503: ...red link local IP address OPTIONAL poolstart The start IP address of the link local address pool OPTIONAL poolend The end IP address of the link local address pool OPTIONAL netmask The netmask of the link local IP address pool OPTIONAL claim The number of link local address selection retries before giving up OPTIONAL defence The number of times the link local address is defended before releasing t...

Page 504: ...ip Commands 504 E DOC CTC 20080409 0002 v2 0 ip auto ifdelete Deletes an existing autoIP interface SYNTAX ip auto ifdelete intf where intf The name of the autoIP interface REQUIRED ...

Page 505: ... Commands E DOC CTC 20080409 0002 v2 0 505 ip auto ifdetach Release the link local address for the given autoIP interface SYNTAX ip auto ifdetach intf where intf The name of the autoIP interface REQUIRED ...

Page 506: ...ip Commands 506 E DOC CTC 20080409 0002 v2 0 ip auto iflist Shows the autoIP interfaces SYNTAX ip auto iflist intf where intf The name of a autoIP interface OPTIONAL ...

Page 507: ...ng Disable Enable IP routing functionality OPTIONAL redirects Disable Enable sending of ICMP redirect messages OPTIONAL checkoptions Disallow Allow packets with IP options OPTIONAL netbroadcasts Disallow Allow net directed broadcasts OPTIONAL ttl Set the default time to live for locally generated IP packets OPTIONAL fraglimit Set the maximum number of IP fragments waiting for completion Avoids buf...

Page 508: ...ip Commands 508 E DOC CTC 20080409 0002 v2 0 bitrate window sec Set the window to calculate the bitrate multiple of 10 OPTIONAL acceleration Disable Enable IP acceleration OPTIONAL ...

Page 509: ...pprobe Send HTTP probe to measure the round trip time taken to connect and access SYNTAX ip debug httpprobe url string version 1 0 1 1 where url The Uniform Resource location identifying the HTTP server REQUIRED version The version of the HTTP Server OPTIONAL ...

Page 510: ... addr The destination IP address REQUIRED count The number of datagrams to send OPTIONAL size The size of the datagram OPTIONAL interval The interval in milliseconds between datagrams OPTIONAL listen Don t send just listen for incoming datagrams OPTIONAL dffield Enables setting of the don t fragment flag in the IP headers of the ping packet s OPTIONAL srcaddr The IP source address to use OPTIONAL ...

Page 511: ...ip Commands E DOC CTC 20080409 0002 v2 0 511 ip debug stats Display statistics SYNTAX ip debug stats proto ip udp tcp icmp where proto The protocol for which to display the statistics REQUIRED ...

Page 512: ...ne label telnet host broadcast all path none label telnet host broadcast all mode line dump arp none all where input Define the packets that will be traced OPTIONAL forward Define the packets that will be traced OPTIONAL output Define the packets that will be traced OPTIONAL drop Define the packet drops that will be traced OPTIONAL path Define the packet that will be path traced OPTIONAL mode Pack...

Page 513: ...ip Commands E DOC CTC 20080409 0002 v2 0 513 ip flush Flush all static IP parameters Dynamic info e g from PPP links remains ...

Page 514: ...ip Commands 514 E DOC CTC 20080409 0002 v2 0 ip ifadd Create an IP interface SYNTAX ip ifadd intf string dest where intf An IP interface name REQUIRED dest An network interface name REQUIRED ...

Page 515: ...ip Commands E DOC CTC 20080409 0002 v2 0 515 ip ifattach Attach an IP interface SYNTAX ip ifattach intf where intf An IP interface name REQUIRED ...

Page 516: ...P interface name REQUIRED mtu The maximum packet size including IP header to use on this interface OPTIONAL status The administrative state of the interface OPTIONAL hwaddr The hardware address e g Ethernet MAC address of this interface OPTIONAL group The group this interface belongs to Can be used by e g firewalling OPTIONAL linksensing The IP interface s awareness of link state transitions OPTIO...

Page 517: ...ip Commands E DOC CTC 20080409 0002 v2 0 517 ip ifdelete Delete an IP interface SYNTAX ip ifdelete intf lan1 wan1 dmz1 guest1 where intf An IP interface name REQUIRED ...

Page 518: ...ip Commands 518 E DOC CTC 20080409 0002 v2 0 ip ifdetach Detach an IP interface SYNTAX ip ifdetach intf loop lan1 wan1 dmz1 guest1 where intf An IP interface name REQUIRED ...

Page 519: ...9 ip iflist Display all IP interfaces SYNTAX ip iflist expand disabled enabled string string beginstring string where expand Expanded listing OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 520: ...z1 guest1 timeout number 1 600000 adminstatus down up operstatus down up linkstatus down up where intf An IP interface name REQUIRED timeout The timeout in seconds OPTIONAL adminstatus The administrative state of the interface OPTIONAL operstatus The operational state of the interface OPTIONAL linkstatus The link state of the interface OPTIONAL ...

Page 521: ...ress netmask ip mask dotted or cidr pointopoint ip address addroute disabled enabled where intf The IP interface name REQUIRED addr The new IP address to add REQUIRED netmask The subnetmask associated with this address OPTIONAL pointopoint The remote address in case of a point to point link OPTIONAL addroute Add typical net subnet routes automatically OPTIONAL ...

Page 522: ...uration SYNTAX ip ipconfig addr ip address preferred disabled enabled primary disabled enabled where addr The IP address to configure REQUIRED preferred Make IP address the preferred address for that subnet OPTIONAL primary Make IP address the primary address for the interface OPTIONAL ...

Page 523: ...ip Commands E DOC CTC 20080409 0002 v2 0 523 ip ipdelete Remove an IP address from an IP interface SYNTAX ip ipdelete addr ip address where addr The IP address to delete REQUIRED ...

Page 524: ...ip Commands 524 E DOC CTC 20080409 0002 v2 0 ip iplist Display all configured IP addresses ...

Page 525: ...ip Commands E DOC CTC 20080409 0002 v2 0 525 ip mcast flush Flush the multicast routing table ...

Page 526: ...ss grp ip address dstintf loop ipsec0 lan1 wan1 dmz1 guest1 ttl number 1 255 ttlincr disabled enabled where srcintf The source IP interface REQUIRED src The source IP address OPTIONAL grp The multicast group IP address REQUIRED dstintf The destination IP interface REQUIRED ttl The time to live for that destination IP interface OPTIONAL ttlincr Increment TTL before packet is send OPTIONAL ...

Page 527: ...table SYNTAX ip mcast rtdelete srcintf loop ipsec0 lan1 wan1 dmz1 guest1 src ip address grp ip address dstintf loop ipsec0 lan1 wan1 dmz1 guest1 where srcintf The source IP interface REQUIRED src The source IP address OPTIONAL grp The multicast group IP address REQUIRED dstintf The destination IP interface REQUIRED ...

Page 528: ...ip Commands 528 E DOC CTC 20080409 0002 v2 0 ip mcast rtlist Display the multicast routing table SYNTAX ip mcast rtlist expand disabled enabled where expand Expanded listing OPTIONAL ...

Page 529: ...destination IP address es using this route Supports ip mask notation REQUIRED dstmsk The destination IP address mask OPTIONAL label The name of a label OPTIONAL gateway The IP address of the next hop direct connected gateway or extended route OPTIONAL intf Only for special interface routes the outgoing IP interface name OPTIONAL srcintf Use this interface for source address selection OPTIONAL stat...

Page 530: ...st The destination IP address es using this route Supports ip mask notation REQUIRED dstmsk The destination IP address mask OPTIONAL label The name of a label OPTIONAL gateway The IP address of the next hop direct connected gateway or extended route OPTIONAL intf Only for special interface routes the outgoing IP interface name OPTIONAL srcintf Use this interface for source address selection OPTION...

Page 531: ...VoIP RTP VoIP Signal default gateway ip address intf loop ipsec0 lan1 wan1 dmz1 guest1 where dst The destination IP address specification of the route to delete Supports ip mask notation REQUIRED dstmsk The destination IP address mask OPTIONAL label The name of a label OPTIONAL gateway The IP address of the next hop OPTIONAL intf The outgoing IP interface name For special interface routes only OPT...

Page 532: ...ip Commands 532 E DOC CTC 20080409 0002 v2 0 ip rtlist Display the routing table SYNTAX ip rtlist expand disabled enabled where expand Expanded listing OPTIONAL ...

Page 533: ...S meter statistics see page 540 ipqos meter config Modify an IP QoS meter configuration see page 541 ipqos meter delete Delete an IP QoS meter see page 543 ipqos meter flush Flush all IP QoS meters see page 544 ipqos meter list Display the IP QoS meters see page 545 ipqos meter start Start an IP QoS meter see page 546 ipqos meter stats Display the IP QoS meter statistics see page 547 ipqos meter s...

Page 534: ...OPTIONAL discard The packet discard strategy in case of congestion OPTIONAL priority The subqueue priority algorithm OPTIONAL realtimerate The percentage of the bandwith OPTIONAL burstsize Burstsize in kilo bytes KB OPTIONAL weight1 The weight of queue 1 used for weighted fair queueing WFQ or weighted round robin WRR OPTIONAL weight2 The weight of queue 2 used for weighted fair queueing WFQ or wei...

Page 535: ...qos ef config intf loop ipsec0 lan1 wan1 dmz1 guest1 state disabled enabled timeout number 100 10000 mtu number 68 65535 where intf The IP interface name REQUIRED state Enable disable IP QoS EF timer for the interface OPTIONAL timeout The timeout in mili seconds OPTIONAL mtu The MTU of the IP interface in case of EF data OPTIONAL ...

Page 536: ...ipqos Commands 536 E DOC CTC 20080409 0002 v2 0 ipqos ef list Display the IP QoS EF timers ...

Page 537: ...ipqos Commands E DOC CTC 20080409 0002 v2 0 537 ipqos ef stats Display the IP QoS EF timer statistics ...

Page 538: ...ipqos Commands 538 E DOC CTC 20080409 0002 v2 0 ipqos list Display the IP QoS configuration ...

Page 539: ...ipqos Commands E DOC CTC 20080409 0002 v2 0 539 ipqos meter add Add an IP QoS meter SYNTAX ipqos meter add name string where name The name of the IP QoS meter REQUIRED ...

Page 540: ...ipqos Commands 540 E DOC CTC 20080409 0002 v2 0 ipqos meter clear Clear the IP QoS meter statistics ...

Page 541: ...flash override CRITIC ECP internetwork control network control or number classification decrease overwrite ignore offset class number 0 15 where name The name of the IP QoS meter REQUIRED label The name of the label OPTIONAL intf The name of the interface OPTIONAL droprate The drop rate in kilo bits per second Kbps OPTIONAL markrate The mark rate in kilo bits per second Kbps OPTIONAL burst The bur...

Page 542: ...ipqos Commands 542 E DOC CTC 20080409 0002 v2 0 classification The type of classification for marked packets OPTIONAL class The class or offset used for classification OPTIONAL ...

Page 543: ...ipqos Commands E DOC CTC 20080409 0002 v2 0 543 ipqos meter delete Delete an IP QoS meter SYNTAX ipqos meter delete name where name The name of the IP QoS meter REQUIRED ...

Page 544: ...ipqos Commands 544 E DOC CTC 20080409 0002 v2 0 ipqos meter flush Flush all IP QoS meters ...

Page 545: ...ipqos Commands E DOC CTC 20080409 0002 v2 0 545 ipqos meter list Display the IP QoS meters ...

Page 546: ...ipqos Commands 546 E DOC CTC 20080409 0002 v2 0 ipqos meter start Start an IP QoS meter SYNTAX ipqos meter start name where name The name of the stopped IP QoS meter REQUIRED ...

Page 547: ...ipqos Commands E DOC CTC 20080409 0002 v2 0 547 ipqos meter stats Display the IP QoS meter statistics ...

Page 548: ...ipqos Commands 548 E DOC CTC 20080409 0002 v2 0 ipqos meter stop Stop an IP QoS meter SYNTAX ipqos meter stop name where name The name of the started IP QoS meter REQUIRED ...

Page 549: ...ipqos Commands E DOC CTC 20080409 0002 v2 0 549 ipqos queue clear Clear the IP QoS statistics ...

Page 550: ... The number of the subqueue REQUIRED propagate Propagate the packets in lower priority queue iso dropping OPTIONAL ecnmarking Enable Explicit Congestion Notification for IP packets in this subqueue OPTIONAL ackfiltering Enable filtering of TCP ACK packets OPTIONAL maxpackets The maximum number of packets in the subqueue OPTIONAL maxbytes The maximum subqueue size in kilo bytes KB OPTIONAL respacke...

Page 551: ...080409 0002 v2 0 551 ipqos queue list Display the IP QoS subqueue configuration SYNTAX ipqos queue list dest atm_pvc_8_35 atm_pvc_0_35 atm_pvc_0_32 where dest The destination of the interface Typically a phonebook entry OPTIONAL ...

Page 552: ...TC 20080409 0002 v2 0 ipqos queue stats Display the IP QoS subqueue statistics SYNTAX ipqos queue stats dest atm_pvc_8_35 atm_pvc_0_35 atm_pvc_0_32 where dest The destination of the interface Typically a phonebook entry OPTIONAL ...

Page 553: ...iptor add Adds a phase 2 IPSec security descriptor see page 568 ipsec connection descriptor delete Deletes a phase 2 IPSec security descriptor see page 569 ipsec connection descriptor list List phase 2 IPSec security descriptors see page 570 ipsec connection descriptor modify Changes a phase 2 IPSec security descriptor see page 571 ipsec connection list List connection profiles see page 572 ipsec ...

Page 554: ... page 593 ipsec peer descriptor delete Deletes a phase 1 IKE security descriptor see page 594 ipsec peer descriptor list List phase 1 IKE security descriptors see page 595 ipsec peer descriptor modify Changes a phase 1 IKE security descriptor see page 596 ipsec peer list List peer gateway profiles see page 597 ipsec peer modify Changes a peer gateway profile see page 598 ipsec peer options add Add...

Page 555: ...how debug Display all debug information see page 610 ipsec show sadb Display SADB contents see page 611 ipsec show sessions Display sessions see page 612 ipsec show spd Display SPD contents see page 613 ipsec show state Display all dynamic states information see page 614 ipsec show stats Display statistics SNMP see page 615 ...

Page 556: ...ipsec Commands 556 E DOC CTC 20080409 0002 v2 0 ipsec clear all Delete all SAs tunnels ...

Page 557: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 557 ipsec clear sad Delete all sadb entries ...

Page 558: ... CTC 20080409 0002 v2 0 ipsec clear session Delete a session a P1 SA and all associated P2 SAs tunnels SYNTAX ipsec clear session localid remoteid where localid Session s local ID REQUIRED remoteid Session s remote ID REQUIRED ...

Page 559: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 559 ipsec clear spd Delete all spdb entries ...

Page 560: ...ed enabled autoroute enabled disabled autoproxyarp enabled disabled where state Enable disable VPN processing OPTIONAL autoroute Enable disable auto addition of routes in VPN dialup client server scenarios OPTIONAL autoproxyarp Enable disable auto addition of Proxy ARP entries in VPN dialup client server scenarios OPTIONAL ...

Page 561: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 561 ipsec connection add Adds a connection profile SYNTAX ipsec connection add name string where name The name for this new connection profile REQUIRED ...

Page 562: ...Commands 562 E DOC CTC 20080409 0002 v2 0 ipsec connection advanced add Adds a connection profile SYNTAX ipsec connection advanced add name string where name The name for this new connection profile REQUIRED ...

Page 563: ...mands E DOC CTC 20080409 0002 v2 0 563 ipsec connection advanced delete Deletes a connection profile SYNTAX ipsec connection advanced delete name where name The name of the connection profile to delete REQUIRED ...

Page 564: ...ipsec Commands 564 E DOC CTC 20080409 0002 v2 0 ipsec connection advanced list List connection profiles ...

Page 565: ...state enabled disabled where name The name of the connection profile to change REQUIRED peer Peer gateway profile i e the gate to talk to OPTIONAL localnetwork Local trusted network either a network attribute or a special keyword for dynamic cases OPTIONAL remotenetwork Remote trusted network either a network attribute or a special keyword for dynamic cases OPTIONAL localmatch Phase 2 responder si...

Page 566: ...ipsec Commands 566 E DOC CTC 20080409 0002 v2 0 state Enable disable this connection profile OPTIONAL ...

Page 567: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 567 ipsec connection delete Deletes a connection profile SYNTAX ipsec connection delete name where name The name of the connection profile to delete REQUIRED ...

Page 568: ...8 E DOC CTC 20080409 0002 v2 0 ipsec connection descriptor add Adds a phase 2 IPSec security descriptor SYNTAX ipsec connection descriptor add name string where name The name for the security descriptor profile REQUIRED ...

Page 569: ...or delete Deletes a phase 2 IPSec security descriptor SYNTAX ipsec connection descriptor delete name AES_SHA1_TUN AES_MD5_TUN AES_SHA1_PFS_TUN AES_MD5_PFS_TUN DES_SHA1_TUN DES_MD5_TUN AES_SHA1_Adv_TUN NullEnc_SHA1_TUN where name Security descriptor profile to delete REQUIRED ...

Page 570: ...ipsec Commands 570 E DOC CTC 20080409 0002 v2 0 ipsec connection descriptor list List phase 2 IPSec security descriptors ...

Page 571: ...number lifetime_kbytes number encapsulation tunnel transport where name Security descriptor profile to change REQUIRED crypto Specify the crypto algorithm to use OPTIONAL keylen Specify the key length for the crypto algorithm OPTIONAL integrity Specify the integrity algorithm to use OPTIONAL pfs Enable Disable perfect forward secrecy PFS OPTIONAL lifetime_secs The lifetime expressed in seconds Lif...

Page 572: ...ipsec Commands 572 E DOC CTC 20080409 0002 v2 0 ipsec connection list List connection profiles ...

Page 573: ...ate disabled enabled where name The name of the connection profile to change REQUIRED peer Peer gateway profile i e the gate to talk to OPTIONAL localnetwork Local trusted network either a network attribute or a special keyword for dynamic cases OPTIONAL remotenetwork Remote trusted network either a network attribute or a special keyword for dynamic cases OPTIONAL alwayson Is this connection be on...

Page 574: ...ipsec Commands 574 E DOC CTC 20080409 0002 v2 0 ipsec connection network add Adds a network SYNTAX ipsec connection network add name string where name The name for this new network attribute REQUIRED ...

Page 575: ...sec Commands E DOC CTC 20080409 0002 v2 0 575 ipsec connection network delete Deletes a network SYNTAX ipsec connection network delete name where name The name of the network attribute to delete REQUIRED ...

Page 576: ...ipsec Commands 576 E DOC CTC 20080409 0002 v2 0 ipsec connection network list List networks ...

Page 577: ... finger ftp ftp data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk ornumber where name The name of the network a...

Page 578: ...nds 578 E DOC CTC 20080409 0002 v2 0 ipsec connection options add Adds a connection options group SYNTAX ipsec connection options add name string where name The name for this new connection options group REQUIRED ...

Page 579: ... E DOC CTC 20080409 0002 v2 0 579 ipsec connection options delete Deletes a connection options group SYNTAX ipsec connection options delete name where name The name of the connection options group to delete REQUIRED ...

Page 580: ...ipsec Commands 580 E DOC CTC 20080409 0002 v2 0 ipsec connection options list List connection options groups ...

Page 581: ...s force_set force_clear min_mtu number 0 1432 add_route enabled disabled routed enabled disabled where name The name of the connection options group to change REQUIRED virtual_if Virtual interface name OPTIONAL force_df DF bit copy behavior OPTIONAL min_mtu Minimum MTU for this SA OPTIONAL add_route Add a route for this connection OPTIONAL routed Should this connection be routed OPTIONAL ...

Page 582: ...sec Commands 582 E DOC CTC 20080409 0002 v2 0 ipsec connection start Manually start negotiation for a connection SYNTAX ipsec connection start name where name The name of the connection to start REQUIRED ...

Page 583: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 583 ipsec connection stop Manually stop a connection SYNTAX ipsec connection stop name where name The name of the connection to stop REQUIRED ...

Page 584: ...84 E DOC CTC 20080409 0002 v2 0 ipsec debug syslog Enable disable VPN informational syslog messages SYNTAX ipsec debug syslog state enabled disabled where state Enable disable VPN informational syslog messages OPTIONAL ...

Page 585: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 585 ipsec debug traceconfig Set trace detail SYNTAX ipsec debug traceconfig detail none low medium high where detail Debug detail OPTIONAL ...

Page 586: ...ipsec Commands 586 E DOC CTC 20080409 0002 v2 0 ipsec flush Flushes IPSEC configuration ...

Page 587: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 587 ipsec peer add Adds a peer gateway profile SYNTAX ipsec peer add name string where name The name for this new peer profile REQUIRED ...

Page 588: ...ipsec Commands 588 E DOC CTC 20080409 0002 v2 0 ipsec peer auth add Adds an authentication group SYNTAX ipsec peer auth add name string where name The name for this new authentication attribute REQUIRED ...

Page 589: ...ec Commands E DOC CTC 20080409 0002 v2 0 589 ipsec peer auth delete Deletes an authentication group SYNTAX ipsec peer auth delete name where name The name of the authentication attribute to delete REQUIRED ...

Page 590: ...ipsec Commands 590 E DOC CTC 20080409 0002 v2 0 ipsec peer auth list List authentication groups ...

Page 591: ...y Changes an authentication group SYNTAX ipsec peer auth modify name type preshared cert secret password where name The name of the authentication attribute to change REQUIRED type Authentication method OPTIONAL secret For secret based authentication the secret OPTIONAL ...

Page 592: ...ipsec Commands 592 E DOC CTC 20080409 0002 v2 0 ipsec peer delete Deletes a peer gateway profile SYNTAX ipsec peer delete name where name The name of the peer profile to delete REQUIRED ...

Page 593: ...Commands E DOC CTC 20080409 0002 v2 0 593 ipsec peer descriptor add Adds a phase 1 IKE security descriptor SYNTAX ipsec peer descriptor add name string where name The name for the security descriptor REQUIRED ...

Page 594: ...ipsec peer descriptor delete Deletes a phase 1 IKE security descriptor SYNTAX ipsec peer descriptor delete name AES_SHA1 AES_MD5 3DES_SHA1 3DES_MD5 DES_SHA1 DES_MD5 AES_SHA1_Adv 3DES_SHA1_Adv where name Security descriptor profile to delete REQUIRED ...

Page 595: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 595 ipsec peer descriptor list List phase 1 IKE security descriptors ...

Page 596: ...256 integrity MD5 SHA1 group MODP768 MODP1024 MODP1536 lifetime_secs number where name Security descriptor profile to change REQUIRED crypto Specify the crypto algorithm to use OPTIONAL keylen Specify the key length for the crypto algorithm OPTIONAL integrity Specify the integrity algorithm to use OPTIONAL group Specify the DH group MOD768 DH1 MOD1024 DH2 MOD1536 DH5 OPTIONAL lifetime_secs The lif...

Page 597: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 597 ipsec peer list List peer gateway profiles ...

Page 598: ...5 AES_SHA1_Adv 3DES_SHA1_Adv auth options where name The name of the peer profile to change REQUIRED remoteaddr Black IP address hostname of the peer IPSEC gateway OPTIONAL backupaddr Black IP address hostname of the redundant peer IPSEC gateway OPTIONAL exchmode Authenticated key exchange mode OPTIONAL localid The ID by which the peer gate identifies this gate OPTIONAL remoteid The ID of the peer...

Page 599: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 599 ipsec peer options add Adds a peer options group SYNTAX ipsec peer options add name string where name The name for this new peer options group REQUIRED ...

Page 600: ...sec Commands 600 E DOC CTC 20080409 0002 v2 0 ipsec peer options delete Deletes a peer options group SYNTAX ipsec peer options delete name where name The name of the peer options group to delete REQUIRED ...

Page 601: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 601 ipsec peer options list List peer options groups ...

Page 602: ...dr Selected black IP address of the local IPSEC gateway OPTIONAL nat t NAT Traversal support OPTIONAL dpd Enable Disable the Death Peer Detection support OPTIONAL dpd_idle_period The number of seconds before the remote peer is considered idle OPTIONAL dpd_xmits The maximum number of Death Peer Detection R_U_THERE messages before the remote peer is considered as death OPTIONAL dpd_timeout Number of...

Page 603: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 603 ipsec peer subpeer add Adds a subpeer gateway profile SYNTAX ipsec peer subpeer add name string where name The name for this new subpeer profile REQUIRED ...

Page 604: ...ec Commands 604 E DOC CTC 20080409 0002 v2 0 ipsec peer subpeer delete Deletes a subpeer gateway profile SYNTAX ipsec peer subpeer delete name where name The name of the subpeer profile to delete REQUIRED ...

Page 605: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 605 ipsec peer subpeer list List subpeer profiles ...

Page 606: ...at type value type being remoteid Identity format type value type being phyif lan1 wan1 dmz1 guest1 any server where name The name of the peer profile to change REQUIRED localid The ID by which the peer gate identifies this gate OPTIONAL remoteid The ID of the peer gate OPTIONAL phyif Interface this peer applies to OPTIONAL server VPN dialup server descriptor OPTIONAL ...

Page 607: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 607 ipsec show all Display all information ...

Page 608: ...ipsec Commands 608 E DOC CTC 20080409 0002 v2 0 ipsec show cli Display all information in CLI format ...

Page 609: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 609 ipsec show config Display all configuration information ...

Page 610: ...ipsec Commands 610 E DOC CTC 20080409 0002 v2 0 ipsec show debug Display all debug information ...

Page 611: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 611 ipsec show sadb Display SADB contents ...

Page 612: ...ipsec Commands 612 E DOC CTC 20080409 0002 v2 0 ipsec show sessions Display sessions SYNTAX ipsec show sessions expand disabled enabled where expand Expand enabled disabled OPTIONAL ...

Page 613: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 613 ipsec show spd Display SPD contents ...

Page 614: ...ipsec Commands 614 E DOC CTC 20080409 0002 v2 0 ipsec show state Display all dynamic states information ...

Page 615: ...ipsec Commands E DOC CTC 20080409 0002 v2 0 615 ipsec show stats Display statistics SNMP ...

Page 616: ...label Commands 616 E DOC CTC 20080409 0002 v2 0 ...

Page 617: ... all label see page 624 label list Display the labels see page 625 label modify Modify a label configuration see page 626 label rule add Add a rule see page 627 label rule debug clear Clear rule statistics see page 628 label rule debug stats Display rule statistics see page 629 label rule debug traceconfig Display Modify rule trace configuration see page 630 label rule delete Delete a rule see pag...

Page 618: ...label Commands 618 E DOC CTC 20080409 0002 v2 0 label add Add a label SYNTAX label add name string where name The name of a label to add REQUIRED ...

Page 619: ...label Commands E DOC CTC 20080409 0002 v2 0 619 label chain add Add a chain SYNTAX label chain add chain string where chain The name of the chain to add REQUIRED ...

Page 620: ...label Commands 620 E DOC CTC 20080409 0002 v2 0 label chain delete Delete a chain SYNTAX label chain delete chain chain name where chain The name of the chain to delete REQUIRED ...

Page 621: ...label Commands E DOC CTC 20080409 0002 v2 0 621 label chain flush Flush all chains ...

Page 622: ...label Commands 622 E DOC CTC 20080409 0002 v2 0 label chain list Display a list of chains SYNTAX label chain list format pretty cli where format The format of the chain list OPTIONAL ...

Page 623: ...abel Commands E DOC CTC 20080409 0002 v2 0 623 label delete Delete a label SYNTAX label delete name DSCP Interactive Management Video VoIP RTP VoIP Signal default where name The name of a label REQUIRED ...

Page 624: ...label Commands 624 E DOC CTC 20080409 0002 v2 0 label flush Flush all label ...

Page 625: ...abel Commands E DOC CTC 20080409 0002 v2 0 625 label list Display the labels SYNTAX label list name DSCP Interactive Management Video VoIP RTP VoIP Signal default where name The name of a label OPTIONAL ...

Page 626: ... flash override CRITIC ECP internetwork control network control or number trace disabled enabled where name The name of a label to modify REQUIRED classification The Method of classification OPTIONAL defclass The default class of assigned connection OPTIONAL ackclass The class of ACK segments of TCP connection OPTIONAL bidirectional The label is also valid for returning stream OPTIONAL inheritance...

Page 627: ...ain which contains the rule REQUIRED index The index of the rule in the chain OPTIONAL name The name of the new rule OPTIONAL clink The name of the chain to be parsed when this rule applies OPTIONAL srcintf The name of the source interface expression If a value is preceded by a it means NOT OPTIONAL srcip The name of the source ip expression If a value is preceded by a it means NOT OPTIONAL dstip ...

Page 628: ...OC CTC 20080409 0002 v2 0 label rule debug clear Clear rule statistics SYNTAX label rule debug clear chain chain name index number where chain The name of the chain OPTIONAL index The index of the rule in the chain OPTIONAL ...

Page 629: ...C 20080409 0002 v2 0 629 label rule debug stats Display rule statistics SYNTAX label rule debug stats chain chain name index number where chain The name of the chain OPTIONAL index The index of the rule in the chain OPTIONAL ...

Page 630: ...nds 630 E DOC CTC 20080409 0002 v2 0 label rule debug traceconfig Display Modify rule trace configuration SYNTAX label rule debug traceconfig state disabled enabled where state Disable Enable rule traces OPTIONAL ...

Page 631: ...080409 0002 v2 0 631 label rule delete Delete a rule SYNTAX label rule delete chain chain name index number where chain The name of the chain in which to delete the rule REQUIRED index The number of the rule in the chain REQUIRED ...

Page 632: ...label Commands 632 E DOC CTC 20080409 0002 v2 0 label rule flush Flush all rules SYNTAX label rule flush chain chain name where chain The name of the chain to flush OPTIONAL ...

Page 633: ...YNTAX label rule list chain chain name format pretty cli string string beginstring string where chain The name of the chain to list the rules of OPTIONAL format The format of the rule list OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 634: ...The new index of the rule in the chain OPTIONAL name The name of the new rule OPTIONAL clink The name of the chain to be parsed when this rule applies OPTIONAL srcintf The name of the source interface expression If a value is preceded by a it means NOT OPTIONAL srcip The name of the source ip expression If a value is preceded by a it means NOT OPTIONAL dstip The name of the destination ip expressi...

Page 635: ...DOC CTC 20080409 0002 v2 0 635 language Commands language config Select a language see page 636 language delete Delete one or all language archives see page 637 language list List available languages archives see page 638 ...

Page 636: ... 0002 v2 0 language config Select a language SYNTAX language config language string complete yes no where language Language code OSI language code 2 chars for language en English OPTIONAL complete Enable translation for expert pages OPTIONAL ...

Page 637: ... 20080409 0002 v2 0 637 language delete Delete one or all language archives SYNTAX language delete file string all yes no where file Filename name of language archive to delete OPTIONAL all Deletes all languages archives OPTIONAL ...

Page 638: ...language Commands 638 E DOC CTC 20080409 0002 v2 0 language list List available languages archives ...

Page 639: ...bug loadobjects Load sync object instances from plugins see page 648 mbus debug stats Display mbus statistics see page 649 mbus debug traceconfig Modify mbus trace settings see page 650 mbus debug unloadobjects Unload object instances see page 651 mbus listcontexts Display the context instances see page 652 mbus listenums Display the registered enumtypes see page 653 mbus listobjects Display the o...

Page 640: ...TAX mbus client authenticate type cleartext md5 crypt digest defaultuser username quoted string password password addr ip address where type Authentication type REQUIRED username User name OPTIONAL password password OPTIONAL addr IP address of peer who inititated the authentication request OPTIONAL ...

Page 641: ...mber path quoted string type indexpath keystrpath id number where writelock Get release mbus writelock OPTIONAL wlgetimeout Writelock get timeout in seconds forever 1 default nowait 0 OPTIONAL wlidletimeout Writelock idle timeout in seconds forever 1 default 30 OPTIONAL path Fully qualified mbus path OPTIONAL type Path type default indexpath OPTIONAL id sessionid to use OPTIONAL ...

Page 642: ...aramvalue applyonparamsapplyrecursive typetreepath non_persistent accesslist quoted string action flag flag read write attrchg modifier add delete allow_only allow_except replytype getallowed getdisallowed getasconfigured attribute ar_archg ar_read ar_write param_cached param_enums param_readable param_type param_writable param_xrefs objtype_cached objtype_max objtype_writable object_clean object_...

Page 643: ...eter name The right operand is a parameter value For boolean operators the operands are filters Example Name eth0 OPTIONAL path Fully qualified mbus path OPTIONAL flags Client command data flags OPTIONAL accesslist Comma separated names of accessrights groups OPTIONAL action Type of accessright action OPTIONAL modifier Accessrights modifier OPTIONAL replytype Type of accessrights reply OPTIONAL at...

Page 644: ... quoted string refresolv disabled enabled state_events disabled enabled where dmtree Select mbusd datamodel tree OPTIONAL type Path type default indexpath OPTIONAL dlink Daemon link default local_ipc OPTIONAL mbusd_addr Daemon address ip addr for inet OPTIONAL refresolv Use reference resolving default disabled OPTIONAL state_events Context should be notified when the MBus state changes default dis...

Page 645: ...mbus Commands E DOC CTC 20080409 0002 v2 0 645 mbus client termsession Terminate a session SYNTAX mbus client termsession id number where id id of session to terminate REQUIRED ...

Page 646: ...mbus Commands 646 E DOC CTC 20080409 0002 v2 0 mbus client unregister Unregister cli client from mbus ...

Page 647: ...mbus Commands E DOC CTC 20080409 0002 v2 0 647 mbus debug clearstats Reset mbus statistics ...

Page 648: ...SYNTAX mbus debug loadobjects dmtree igd atomic system path quoted string type indexpath keystrpath flush disabled enabled where dmtree Select mbusd datamodel tree OPTIONAL path Fully qualified mbus path OPTIONAL type Path type default indexpath OPTIONAL flush Flush objects before load default disabled OPTIONAL ...

Page 649: ...mbus Commands E DOC CTC 20080409 0002 v2 0 649 mbus debug stats Display mbus statistics ...

Page 650: ...mbus Commands 650 E DOC CTC 20080409 0002 v2 0 mbus debug traceconfig Modify mbus trace settings SYNTAX mbus debug traceconfig level number 0 4 where level Select mbus trace level 0 4 OPTIONAL ...

Page 651: ... SYNTAX mbus debug unloadobjects dmtree igd atomic system path quoted string type indexpath keystrpath flush disabled enabled where dmtree Select mbusd datamodel tree OPTIONAL path Fully qualified mbus path OPTIONAL type Path type OPTIONAL flush Flush objects before load default disabled OPTIONAL ...

Page 652: ...0080409 0002 v2 0 mbus listcontexts Display the context instances SYNTAX mbus listcontexts dmtree igd atomic system expand disabled enabled where dmtree Select mbusd datamodel tree OPTIONAL expand Details enabled disabled OPTIONAL ...

Page 653: ...Display the registered enumtypes SYNTAX mbus listenums dmtree igd atomic system name quoted string expand disabled enabled where dmtree Select mbusd datamodel tree OPTIONAL name Filter enumtypes by part of the name OPTIONAL expand Details enabled disabled OPTIONAL ...

Page 654: ...m path quoted string type indexpath keystrpath output tree list showflags disabled enabled where dmtree Select mbusd datamodel tree OPTIONAL path Fully qualified mbus path to list OPTIONAL type Path type default indexpath OPTIONAL output List output type OPTIONAL showflags Display object flags Clean or Dirty Persistent or Volatile OPTIONAL ...

Page 655: ... Commands E DOC CTC 20080409 0002 v2 0 655 mbus listsubscriptions Display the subscription instances SYNTAX mbus listsubscriptions dmtree igd atomic system where dmtree Select mbusd datamodel tree OPTIONAL ...

Page 656: ...Display the registered objecttypes SYNTAX mbus listtypes dmtree igd atomic system path quoted string expand disabled enabled where dmtree Select mbusd datamodel tree OPTIONAL path Fully qualified mbus path to list OPTIONAL expand Details enabled disabled OPTIONAL ...

Page 657: ...number 0 2 type addobj delobj updobj path quoted string name quoted string value quoted string orivalue quoted string where ctxid Plugin context id REQUIRED type Event type REQUIRED path Plugin event subpath REQUIRED name Plugin event name OPTIONAL value Plugin event value OPTIONAL orivalue Plugin event orivalue OPTIONAL ...

Page 658: ...mbus Commands 658 E DOC CTC 20080409 0002 v2 0 mbus unregister Unregister a client plugin context SYNTAX mbus unregister id number where id Select message based client plugin context id REQUIRED ...

Page 659: ...stics see page 661 memm debug lock traceconfig Modify lock trace settings see page 662 memm debug stats Display memm time statistics see page 663 memm debug tag Un tag memory manager objects see page 664 memm debug traceconfig Modify memm trace settings see page 665 memm listobjects Display objects see page 666 memm stats Display memm statistics see page 667 ...

Page 660: ...memm Commands 660 E DOC CTC 20080409 0002 v2 0 memm debug clearstats Clear time statistics ...

Page 661: ...memm Commands E DOC CTC 20080409 0002 v2 0 661 memm debug lock stats Display lock statistics ...

Page 662: ...mm debug lock traceconfig Modify lock trace settings SYNTAX memm debug lock traceconfig level number 0 4 name string where level Select memm trace level 0 4 OPTIONAL name application name filter for lock traces empty displays all lock traces OPTIONAL ...

Page 663: ...m Commands E DOC CTC 20080409 0002 v2 0 663 memm debug stats Display memm time statistics SYNTAX memm debug stats name quoted string where name Select typename s to list supports partial typename OPTIONAL ...

Page 664: ...0080409 0002 v2 0 memm debug tag Un tag memory manager objects SYNTAX memm debug tag name quoted string tag enabled disabled where name Select typename s to list supports partial typename OPTIONAL tag Set or unset the tag OPTIONAL ...

Page 665: ...memm Commands E DOC CTC 20080409 0002 v2 0 665 memm debug traceconfig Modify memm trace settings SYNTAX memm debug traceconfig level number 0 4 where level Select memm trace level 0 4 OPTIONAL ...

Page 666: ...SYNTAX memm listobjects name quoted string tagged no yes hidedeldynstr no yes where name Select typename s to list supports partial typename OPTIONAL tagged Show only tagged yes or untagged no objects OPTIONAL hidedeldynstr Hide yes show no deleted dynstrings default show OPTIONAL ...

Page 667: ...memm Commands E DOC CTC 20080409 0002 v2 0 667 memm stats Display memm statistics SYNTAX memm stats name quoted string where name Select typename s to list supports partial typename OPTIONAL ...

Page 668: ...menu Command 668 E DOC CTC 20080409 0002 v2 0 ...

Page 669: ...menu Command E DOC CTC 20080409 0002 v2 0 669 menu Command Displays menu ...

Page 670: ...mlp Commands 670 E DOC CTC 20080409 0002 v2 0 ...

Page 671: ...mlp privilege addzone Add a zone to a privilege see page 678 mlp privilege config Modify the privilege see page 679 mlp privilege delete Delete a privilege see page 680 mlp privilege list Display the privileges see page 681 mlp privilege removezone Remove a zone from a privilege see page 682 mlp role add Add a role see page 683 mlp role addpriv Add a privilege see page 684 mlp role config Modify t...

Page 672: ...mlp Commands 672 E DOC CTC 20080409 0002 v2 0 mlp debug export Export all scores ...

Page 673: ...mlp Commands E DOC CTC 20080409 0002 v2 0 673 mlp debug stats Display mlp statisctics ...

Page 674: ...mlp Commands 674 E DOC CTC 20080409 0002 v2 0 mlp debug traceconfig Modify mlp trace settings SYNTAX mlp debug traceconfig trace disabled enabled full where trace Select mlp trace level OPTIONAL ...

Page 675: ...mlp Commands E DOC CTC 20080409 0002 v2 0 675 mlp flush Flush all mlp structures ...

Page 676: ...mlp Commands 676 E DOC CTC 20080409 0002 v2 0 mlp import Import all scores SYNTAX mlp import trace disabled enabled full where trace Select import trace level OPTIONAL ...

Page 677: ...409 0002 v2 0 677 mlp privilege add Add a privilege SYNTAX mlp privilege add name string type access service descr quoted string where name Privilege name REQUIRED type Privilege type REQUIRED descr Privilege description OPTIONAL ...

Page 678: ...s r_remote_mgnt r_local r_qos w_lan w_wan w_fs_passive w_rtg w_fwdg w_nat w_frwl_norm w_frwl_adv w_frwl_ss w_ipsec w_certificates w_remote_mgnt w_local w_qos SND_lan SND_wan SND_local AND_lan AND_wan AND_frwl AND_local User_Admin MLP_Admin secure_ipsec_term secure_BR CLI CGI FTP MDAP secure_reset GUI_advanced mbus unsecure_connection Sensitve_file where name Privilege name REQUIRED zone Zone name ...

Page 679: ...9 mlp privilege config Modify the privilege SYNTAX mlp privilege config name descr quoted string score hex word hex word ex a12 c30f where name Select the privilege by name REQUIRED descr Set the description OPTIONAL score Set the score OPTIONAL ...

Page 680: ...mlp Commands 680 E DOC CTC 20080409 0002 v2 0 mlp privilege delete Delete a privilege SYNTAX mlp privilege delete name where name Privilege name REQUIRED ...

Page 681: ...002 v2 0 681 mlp privilege list Display the privileges SYNTAX mlp privilege list name type access service verbose minimal medium all where name Privilege name OPTIONAL type Privilege type OPTIONAL verbose Limit the output list OPTIONAL ...

Page 682: ...ficates r_remote_mgnt r_local r_qos w_lan w_wan w_fs_passive w_rtg w_fwdg w_nat w_frwl_norm w_frwl_adv w_frwl_ss w_ipsec w_certificates w_remote_mgnt w_local w_qos SND_lan SND_wan SND_local AND_lan AND_wan AND_frwl AND_local User_Admin MLP_Admin secure_ipsec_term secure_BR CLI CGI FTP MDAP secure_reset GUI_advanced mbus unsecure_connection Sensitve_file where name Privilege name REQUIRED zone Zone...

Page 683: ...s E DOC CTC 20080409 0002 v2 0 683 mlp role add Add a role SYNTAX mlp role add name string parent descr quoted string where name Role name REQUIRED parent Parent role name REQUIRED descr Role description OPTIONAL ...

Page 684: ...dmin PowerUser root SuperUser TechnicalSupport User WAN_Admin access anyaccess AP1 AP2 AP3 AP4 AP5 AP6 AP7 AP8 AP9 service anyservice SP1 SP10 SP11 SP12 SP13 SP14 SP15 SP16 SP17 SP18 SP19 SP2 SP3 SP4 SP5 SP6 SP7 SP8 SP9 where name Role name REQUIRED access Access privilege to add REQUIRED service Privilege name to add REQUIRED ...

Page 685: ...E DOC CTC 20080409 0002 v2 0 685 mlp role config Modify the role SYNTAX mlp role config name parent descr quoted string where name Role name REQUIRED parent Parent role name OPTIONAL descr Role description OPTIONAL ...

Page 686: ...mlp Commands 686 E DOC CTC 20080409 0002 v2 0 mlp role delete Delete a role SYNTAX mlp role delete name where name Role name REQUIRED ...

Page 687: ...mlp Commands E DOC CTC 20080409 0002 v2 0 687 mlp role list Display the roles SYNTAX mlp role list name verbose minimal medium all where name Role name OPTIONAL verbose Limit the output list OPTIONAL ...

Page 688: ... CTC 20080409 0002 v2 0 mlp role removepriv Remove a privilege SYNTAX mlp role removepriv name access service where name Role name REQUIRED access Access privilege to delete REQUIRED service Privilege name to delete OPTIONAL ...

Page 689: ...ge 693 nat mapadd Add an address mapping to a nat enabled interface see page 694 nat mapdelete Delete an address mapping from a nat enabled interface see page 695 nat maplist Display address mappings see page 696 nat tmpladd Add an address mapping template see page 697 nat tmpldelete Delete an address mapping template see page 699 nat tmplinst Instantiate address mapping templates for a given dyna...

Page 690: ...nat Commands 690 E DOC CTC 20080409 0002 v2 0 nat config Modify global NAT configuration SYNTAX nat config trace disabled enabled where trace Enable disable traces OPTIONAL ...

Page 691: ...nat Commands E DOC CTC 20080409 0002 v2 0 691 nat flush Flush current NAT configuration ...

Page 692: ... Modify address translation on an IP interface SYNTAX nat ifconfig intf loop ipsec0 lan1 wan1 dmz1 guest1 translation disabled enabled transparent where intf The IP interface name REQUIRED translation Disabled enabled or tranparent address translation REQUIRED ...

Page 693: ...nat Commands E DOC CTC 20080409 0002 v2 0 693 nat iflist Display all interfaces ...

Page 694: ...55 where intf The IP interface name REQUIRED type The type of mapping OPTIONAL outside_addr The outside typically public IP address range for NAT OPTIONAL inside_addr The inside typically private IP address range for NAT OPTIONAL access_list The range of inside addresses the mapping is restricted to OPTIONAL foreign_addr The range of destination addresses the mapping is restricted to OPTIONAL prot...

Page 695: ... 695 nat mapdelete Delete an address mapping from a nat enabled interface SYNTAX nat mapdelete intf loop ipsec0 lan1 wan1 dmz1 guest1 index number where intf The IP interface name REQUIRED index The map index as listed by nat maplist REQUIRED ...

Page 696: ... SYNTAX nat maplist intf loop ipsec0 lan1 wan1 dmz1 guest1 expand disabled enabled string string beginstring string where intf The IP interface name OPTIONAL expand Expanded listing OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 697: ...name scope for this template OPTIONAL group The IP interface group scope for this template OPTIONAL timeout Lifetime seconds for this template OPTIONAL type The type of template OPTIONAL outside_addr The outside typically public IP address or index range for NAT REQUIRED inside_addr The inside typically private IP address or index range for NAT OPTIONAL access_list The range of inside addresses th...

Page 698: ...nat Commands 698 E DOC CTC 20080409 0002 v2 0 weight The weight to be used for the template instance s OPTIONAL ...

Page 699: ...nat Commands E DOC CTC 20080409 0002 v2 0 699 nat tmpldelete Delete an address mapping template SYNTAX nat tmpldelete index number where index The template index as listed by nat tmpllist REQUIRED ...

Page 700: ... dynamic address SYNTAX nat tmplinst intf loop ipsec0 lan1 wan1 dmz1 guest1 addr_index ip address dynamic_addr ip address where intf The IP interface name REQUIRED addr_index The outside IP address index key to instantiate for REQUIRED dynamic_addr The dynamic address to substitute the index key with REQUIRED ...

Page 701: ...nat Commands E DOC CTC 20080409 0002 v2 0 701 nat tmpllist Display address mapping templates SYNTAX nat tmpllist expand disabled enabled where expand Expanded listing OPTIONAL ...

Page 702: ...password Command 702 E DOC CTC 20080409 0002 v2 0 ...

Page 703: ... Command E DOC CTC 20080409 0002 v2 0 703 password Command Encrypt a clear text password using an internal device independent key SYNTAX password encrypt string string where string Clear text password REQUIRED ...

Page 704: ...ping Command 704 E DOC CTC 20080409 0002 v2 0 ...

Page 705: ...ed srcaddr ip address where proto The interface type to be used REQUIRED addr The destination IP address REQUIRED dest The destination address for the request REQUIRED count The number of pings to send 0 is continuous ping OPTIONAL size The size of the ping datagram s OPTIONAL interval ms The interval in milliseconds between packets OPTIONAL DF bit Set the Don t Fragment bit or leave unset in the ...

Page 706: ...pki Commands 706 E DOC CTC 20080409 0002 v2 0 ...

Page 707: ...14 pki config Configure global PKI settings see page 715 pki crlconfig PKI CRL configuration see page 716 pki export Export an item from the secure storage to file see page 717 pki flush Flushes PKI configuration see page 718 pki import Import certificate CRL from file or pasted text PKCS 7 see page 719 pki list List secure storage content see page 720 pki refresh Reload certificate management sub...

Page 708: ...pki Commands 708 E DOC CTC 20080409 0002 v2 0 pki cep cancel Cancel current CEP request ...

Page 709: ...RL must contain the IP address of the CEP server OPTIONAL ca_id CA Identity string OPTIONAL md5 CA cert MD5 fingerprint in hexdump format 0A CB 9F OPTIONAL proxy_url Proxy server URL The URL must contain the IP address of the proxy server OPTIONAL subjectdn Distinguished name RFC1779 for the cert OPTIONAL keylen Keylength in bits OPTIONAL password The challenge word if needed OPTIONAL email Email ...

Page 710: ... Enable Disable transaction Id checking Disable for Baltimore CA OPTIONAL keyusage The key usage extension Format yes no digitalSignature nonRepudiation keyEncipherment dataEncipherment keyAgree ment keyCertSign cRLSign encipherOnly decipherOnly OPTIONAL ...

Page 711: ...pki Commands E DOC CTC 20080409 0002 v2 0 711 pki cep list Show outstanding request ...

Page 712: ...pki Commands 712 E DOC CTC 20080409 0002 v2 0 pki cep request Generates an CEP request SYNTAX pki cep request force enabled disabled where force Ignore current cert OPTIONAL ...

Page 713: ...pki Commands E DOC CTC 20080409 0002 v2 0 713 pki cep resubmit Resubmit current request and or check for result ...

Page 714: ...Commands 714 E DOC CTC 20080409 0002 v2 0 pki clearall Delete the secure storage Use with extreme caution SYNTAX pki clearall force enabled disabled where force If you are really sure enter enabled OPTIONAL ...

Page 715: ... CTC 20080409 0002 v2 0 715 pki config Configure global PKI settings SYNTAX pki config state disabled enabled trace disabled enabled where state Enable Disable PKI processing OPTIONAL trace Enable Disable traces OPTIONAL ...

Page 716: ...expired_crls Allow certs with expired CRL entries OPTIONAL dist_point1 The URI to fetch CRL s from The URI must contain the IP address of the LDAP or HTTP server OPTIONAL fetch_dynamically Enable Disable dynamic CRL retrieval OPTIONAL check_cert_extension Look for crlDistributionPoint extension OPTIONAL time_checking Enable Disable the handling of time restrictions OPTIONAL net_timeout Define maxi...

Page 717: ...80409 0002 v2 0 717 pki export Export an item from the secure storage to file SYNTAX pki export item number filename string where item Secure storage item number REQUIRED filename Filename to save secure storage item in REQUIRED ...

Page 718: ...pki Commands 718 E DOC CTC 20080409 0002 v2 0 pki flush Flushes PKI configuration ...

Page 719: ...pki Commands E DOC CTC 20080409 0002 v2 0 719 pki import Import certificate CRL from file or pasted text PKCS 7 SYNTAX pki import filename string where filename Filename to load cert from OPTIONAL ...

Page 720: ...pki Commands 720 E DOC CTC 20080409 0002 v2 0 pki list List secure storage content SYNTAX pki list item number where item Secure storage item number OPTIONAL ...

Page 721: ...pki Commands E DOC CTC 20080409 0002 v2 0 721 pki refresh Reload certificate management subsystem ...

Page 722: ...pki Commands 722 E DOC CTC 20080409 0002 v2 0 pki remove Remove an item from the secure storage use with caution SYNTAX pki remove item number where item Secure storage item number REQUIRED ...

Page 723: ...fline certificate request PKCS 10 SYNTAX pki request subjectdn Distinguished Name RFC1779 e g cn xxx c be force enabled disabled where subjectdn Distinguished name RFC1779 for the cert REQUIRED force Enable Disable the overwriting of the pending offline cert request OPTIONAL ...

Page 724: ...pki Commands 724 E DOC CTC 20080409 0002 v2 0 pki show Shows PKI configuration SYNTAX pki show format pretty cli where format Output format OPTIONAL ...

Page 725: ...37 ppp ifadd Create a new PPP interface see page 738 ppp ifattach Attach a PPP interface see page 739 ppp ifconfig Modify a PPP interface see page 740 ppp ifdelete Delete a PPP interface see page 743 ppp ifdetach Detach a PPP interface see page 744 ppp iflist Display the PPP interfaces see page 745 ppp ifscan Scan a PPP interface for available interfaces see page 746 ppp relay flush Remove all eth...

Page 726: ...ppp Commands 726 E DOC CTC 20080409 0002 v2 0 ppp rtadd Add a route to the routing table when PPP link comes up see page 753 ppp rtdelete Delete the route for a PPP link see page 754 ...

Page 727: ...ppp Commands E DOC CTC 20080409 0002 v2 0 727 ppp bundle add Add a new bundle of interfaces SYNTAX ppp bundle add name string where name The new bundle name REQUIRED ...

Page 728: ... 100 where name The name of the bundle REQUIRED class The prio class of the PPP packets OPTIONAL pool Acquire IP subnet and assign it to a free DHCP pool OPTIONAL epdtype Specifies the address space used to identify the endpoint OPTIONAL epdlocaladdr Specifies the serial device number used as endpoint discriminator OPTIONAL epdglobalmac Specifies the MAC address used as endpoint discriminator OPTI...

Page 729: ...gotiate IP subnet mask at remote side of the link OPTIONAL format The format used to represent the IP subnet OPTIONAL primdns Negotiate this IP address as primary DNS server OPTIONAL secdns Negotiate this IP address as secondary DNS server OPTIONAL dnsmetric DNS route metric to be used for the negotiated DNS servers OPTIONAL ...

Page 730: ...ppp Commands 730 E DOC CTC 20080409 0002 v2 0 ppp bundle delete Delete a bundle of interfaces SYNTAX ppp bundle delete name where name The name of the bundle REQUIRED ...

Page 731: ...ppp Commands E DOC CTC 20080409 0002 v2 0 731 ppp bundle flush Flush all bundles ...

Page 732: ...ommands 732 E DOC CTC 20080409 0002 v2 0 ppp bundle ifadd Add an interface on a bundle SYNTAX ppp bundle ifadd name intf where name The name of the bundle REQUIRED intf The name of the PPP interface REQUIRED ...

Page 733: ...s E DOC CTC 20080409 0002 v2 0 733 ppp bundle ifdelete Remove an interface from a bundle SYNTAX ppp bundle ifdelete name intf where name The name of the bundle REQUIRED intf The name of the PPP interface REQUIRED ...

Page 734: ...ppp Commands 734 E DOC CTC 20080409 0002 v2 0 ppp bundle list Display the current bundles ...

Page 735: ... ip address srcmsk ip mask dotted or cidr metric number 0 100 where name The name of the bundle REQUIRED dst The IP destination address specification for the route to be added when the link comes up REQUIRED dstmsk The IP destination mask Special values 1 remote net 32 remote host OPTIONAL label The name of the label OPTIONAL src The IP source address specification i e who can use this link OPTION...

Page 736: ...ppp Commands 736 E DOC CTC 20080409 0002 v2 0 ppp bundle rtdelete Delete a route from the routing table when bundle goes down SYNTAX ppp bundle rtdelete name where name The name of the bundle REQUIRED ...

Page 737: ...ppp Commands E DOC CTC 20080409 0002 v2 0 737 ppp flush Flush all PPP interfaces ...

Page 738: ...38 E DOC CTC 20080409 0002 v2 0 ppp ifadd Create a new PPP interface SYNTAX ppp ifadd intf string where intf The name for the new PPP interface If not specified the destination will double as interface name REQUIRED ...

Page 739: ...ppp Commands E DOC CTC 20080409 0002 v2 0 739 ppp ifattach Attach a PPP interface SYNTAX ppp ifattach intf where intf The name of the PPP interface REQUIRED ...

Page 740: ...disabled enabled retryinterval number 0 65535 passive disabled enabled silent disabled enabled echo disabled enabled echotolerance number 1 100 mru number 293 8192 laddr ip address raddr ip address netmask ip mask dotted or cidr format cidr dotted none savepwd disabled enabled demanddial disabled enabled doddelay number 0 3600 primdns ip address secdns ip address dnsmetric number 0 100 idletime nu...

Page 741: ...OPTIONAL concentrator The access concentrator is on this side of the PPP connection OPTIONAL auth Authentication protocol to be used OPTIONAL restart Automatically restart when LCP link goes down OPTIONAL retryinterval The number of seconds between retries OPTIONAL passive When LCP times out put link in a listening state OPTIONAL silent Do not send anything at startup just listen for incoming LCP ...

Page 742: ...ace OPTIONAL primdns Negotiate this IP address as primary DNS server OPTIONAL secdns Negotiate this IP address as secondary DNS server OPTIONAL dnsmetric DNS route metric to be used for the negotiated DNS servers OPTIONAL idletime Maximum time the link may be idle seconds OPTIONAL idletrigger Consider the link being idle if no traffic is sent and or received during the idle time OPTIONAL unnumbere...

Page 743: ...ppp Commands E DOC CTC 20080409 0002 v2 0 743 ppp ifdelete Delete a PPP interface SYNTAX ppp ifdelete intf where intf The name of the PPP interface REQUIRED ...

Page 744: ...ppp Commands 744 E DOC CTC 20080409 0002 v2 0 ppp ifdetach Detach a PPP interface SYNTAX ppp ifdetach intf where intf The name of the PPP interface REQUIRED ...

Page 745: ...0 745 ppp iflist Display the PPP interfaces SYNTAX ppp iflist intf string string beginstring string where intf The name of a PPP interface OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 746: ...0080409 0002 v2 0 ppp ifscan Scan a PPP interface for available interfaces SYNTAX ppp ifscan intf time number 0 36000 where intf The name of the PPP interface to scan REQUIRED time The time to scan for services in seconds OPTIONAL ...

Page 747: ...ppp Commands E DOC CTC 20080409 0002 v2 0 747 ppp relay flush Remove all ethernet interfaces from the PPP relay agent list and terminate all ...

Page 748: ...C 20080409 0002 v2 0 ppp relay ifadd Add an ethernet interface to the PPP relay list SYNTAX ppp relay ifadd intf bridge eth_wan1 eth_dmz1 eth_guest1 where intf The ethernet intf to be added to the PPP relay agent list REQUIRED ...

Page 749: ...dify an ethernet interface from the PPP relay agent list SYNTAX ppp relay ifconfig intf hwaddr hardware address where intf The ethernet intf to be added to the PPP relay agent list REQUIRED hwaddr The hardware address e g Ethernet MAC address of this interface REQUIRED ...

Page 750: ...0 E DOC CTC 20080409 0002 v2 0 ppp relay ifdelete Delete an ethernet interface from the PPP relay agent list SYNTAX ppp relay ifdelete intf where intf The ethernet intf to be added to the PPP relay agent list REQUIRED ...

Page 751: ...ppp Commands E DOC CTC 20080409 0002 v2 0 751 ppp relay iflist Display all ethernet interfaces added to the PPP relay agent list ...

Page 752: ...ppp Commands 752 E DOC CTC 20080409 0002 v2 0 ppp relay sesslist Display all active PPP relay sessions ...

Page 753: ...ss srcmsk ip mask dotted or cidr metric number 0 100 where intf The name of a PPP interface REQUIRED dst The IP destination address specification for the route to be added when the link comes up REQUIRED dstmsk The IP destination mask Special values 1 remote net 32 remote host OPTIONAL label The name of the label OPTIONAL src The IP source address specification i e who can use this link OPTIONAL s...

Page 754: ...ppp Commands 754 E DOC CTC 20080409 0002 v2 0 ppp rtdelete Delete the route for a PPP link SYNTAX ppp rtdelete intf where intf The PPP interface name for which to delete the route settings REQUIRED ...

Page 755: ...page 756 pptp ifadd Adds a PPTP profile backwards compatible with previous release use profiles see page 757 pptp list Shows PPTP configuration see page 758 pptp profadd Defines a new PPTP profile see page 759 pptp profdelete Deletes a PPTP profile see page 760 pptp proflist Lists PPTP profiles see page 761 ...

Page 756: ...pptp Commands 756 E DOC CTC 20080409 0002 v2 0 pptp flush Flushes the PPTP configuration ...

Page 757: ...dd dest string rate number 10 10000 encaps vcmux nlpid ac never always keep where dest The WAN destination for this PPTP tunnel Typically a phonebook name REQUIRED rate Transmit speed in kbits s for the WAN link OPTIONAL encaps The WAN protocol encapsulation OPTIONAL ac Enable disable sending address and control field 0xFF03 on the WAN link OPTIONAL ...

Page 758: ...pptp Commands 758 E DOC CTC 20080409 0002 v2 0 pptp list Shows PPTP configuration ...

Page 759: ...caps vcmux nlpid ac never always keep where name The name for the new PPTP profile REQUIRED qos The name of the qosbook entry containing the settings for this profile OPTIONAL encaps The WAN protocol encapsulation to be used with this profile OPTIONAL ac Enable disable sending address and control field 0xFF03 on the WAN link OPTIONAL ...

Page 760: ...pptp Commands 760 E DOC CTC 20080409 0002 v2 0 pptp profdelete Deletes a PPTP profile SYNTAX pptp profdelete name default where name The name of the profile to delete REQUIRED ...

Page 761: ...pptp Commands E DOC CTC 20080409 0002 v2 0 761 pptp proflist Lists PPTP profiles ...

Page 762: ...saveall Command 762 E DOC CTC 20080409 0002 v2 0 ...

Page 763: ...saveall Command E DOC CTC 20080409 0002 v2 0 763 saveall Command Saves current configuration ...

Page 764: ...script Commands 764 E DOC CTC 20080409 0002 v2 0 ...

Page 765: ... 765 script Commands script add Add line to script see page 766 script delete Delete complete script or line from script see page 767 script flush Flush scripts see page 768 script list List script see page 769 script run Run script see page 770 ...

Page 766: ...66 E DOC CTC 20080409 0002 v2 0 script add Add line to script SYNTAX script add name string index number command quoted string where name Name of script REQUIRED index Line number 0 add OPTIONAL command Command REQUIRED ...

Page 767: ...dd_qos autopvc_delete_qos autopvc_add_bridge autopvc_delete_pppoerelay autopvc_add_ipoa autopvc_delete_ipoa autopvc_add_ethoa autopvc_delete_ethoa autopvc_add_pppoa autopvc_delete_pppoa autopvc_add_pppoe autopvc_delete_pppoe autopvc_change_qos wlbrintfadd wlbrintfdel index number where name Name of script REQUIRED index Line number OPTIONAL ...

Page 768: ...script Commands 768 E DOC CTC 20080409 0002 v2 0 script flush Flush scripts ...

Page 769: ...c_add_qos autopvc_delete_qos autopvc_add_bridge autopvc_delete_pppoerelay autopvc_add_ipoa autopvc_delete_ipoa autopvc_add_ethoa autopvc_delete_ethoa autopvc_add_pppoa autopvc_delete_pppoa autopvc_add_pppoe autopvc_delete_pppoe autopvc_change_qos wlbrintfadd wlbrintfdel where name Name of script OPTIONAL ...

Page 770: ...d_bridge autopvc_delete_pppoerelay autopvc_add_ipoa autopvc_delete_ipoa autopvc_add_ethoa autopvc_delete_ethoa autopvc_add_pppoa autopvc_delete_pppoa autopvc_add_pppoe autopvc_delete_pppoe autopvc_change_qos wlbrintfadd wlbrintfdel pars quoted string where name Name of script REQUIRED pars Parameters separated with comma e q a b c REQUIRED ...

Page 771: ...list Display list of services see page 781 service host rule add Create define service portmap see page 782 service host rule delete Delete a service portmap see page 783 service host stats Service statistics see page 784 service host triggerlist List all triggers see page 785 service system ifadd Add an interface to the access list see page 786 service system ifdelete Delete an interface from the...

Page 772: ...vice host add Add a service SYNTAX service host add name quoted string mode server client custom category where name The name of the service REQUIRED mode server client or custom service OPTIONAL category The category to which the service belongs OPTIONAL ...

Page 773: ... Counter Strike Server World Wide Web HTTPS Server iMesh KaZaA Mail Server SMTP Microsoft Remote Desktop MSN Game Zone MSN Game Zone DX NNTPServer PPTP Server Secure Shell Server SSH Steam Games TelnetServer VNC Xbox Live host ip address log disabled enabled where name The name of the service REQUIRED host The IP address of the host OPTIONAL log Enable disable logging OPTIONAL ...

Page 774: ...service Commands 774 E DOC CTC 20080409 0002 v2 0 service host category add Create define service category SYNTAX service host category add name string where name The name of the category REQUIRED ...

Page 775: ...service Commands E DOC CTC 20080409 0002 v2 0 775 service host category delete Delete a service category SYNTAX service host category delete name where name The name of the category REQUIRED ...

Page 776: ...service Commands 776 E DOC CTC 20080409 0002 v2 0 service host category list List the available service categories ...

Page 777: ...80409 0002 v2 0 777 service host category rename Rename a service category SYNTAX service host category rename name new_name string where name The name of the existing category REQUIRED new_name The new name of the category REQUIRED ...

Page 778: ...ame AIM Talk BearShare BitTorrent Checkpoint FW1 VPN Counter Strike Server World Wide Web HTTPS Server iMesh KaZaA Mail Server SMTP Microsoft Remote Desktop MSN Game Zone MSN Game Zone DX NNTPServer PPTP Server Secure Shell Server SSH Steam Games TelnetServer VNC Xbox Live where name The name of the service REQUIRED ...

Page 779: ...name AIM Talk BearShare BitTorrent Checkpoint FW1 VPN Counter Strike Server World Wide Web HTTPS Server iMesh KaZaA Mail Server SMTP Microsoft Remote Desktop MSN Game Zone MSN Game Zone DX NNTPServer PPTP Server Secure Shell Server SSH Steam Games TelnetServer VNC Xbox Live where name The name of the service OPTIONAL ...

Page 780: ...service Commands 780 E DOC CTC 20080409 0002 v2 0 service host flush Flush all services ...

Page 781: ...trike Server World Wide Web HTTPS Server iMesh KaZaA Mail Server SMTP Microsoft Remote Desktop MSN Game Zone MSN Game Zone DX NNTPServer PPTP Server Secure Shell Server SSH Steam Games TelnetServer VNC Xbox Live string string beginstring string where name The name of the service OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL ...

Page 782: ...k ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk ornumber portrange port range triggerport at echo at nbp at rtmp at zis auth bgp biff bootpc bootps finger ftp ftp data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ...

Page 783: ...k ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk ornumber portrange port range triggerport at echo at nbp at rtmp at zis auth bgp biff bootpc bootps finger ftp ftp data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ...

Page 784: ...service Commands 784 E DOC CTC 20080409 0002 v2 0 service host stats Service statistics ...

Page 785: ...service Commands E DOC CTC 20080409 0002 v2 0 785 service host triggerlist List all triggers ...

Page 786: ...YNTAX service system ifadd name PPTP HTTP HTTPs FTP SSH TELNET RIP Query DNS S SNMP_AGENT SSDP MDAP GRE IPIP IKE IKE NAT T ESP PING_RESPONDER group wan local lan tunnel dmz guest or number where name The name of the service for this access list REQUIRED group The interface group for this access list REQUIRED ...

Page 787: ...t SYNTAX service system ifdelete name PPTP HTTP HTTPs FTP SSH TELNET RIP Query DNS S SNMP_AGENT SSDP MDAP GRE IPIP IKE IKE NAT T ESP PING_RESPONDER group wan local lan tunnel dmz guest or number where name The name of the service for this access list REQUIRED group The interface group for this access list REQUIRED ...

Page 788: ...e to the access list SYNTAX service system ipadd name PPTP HTTP HTTPs FTP SSH TELNET RIP Query DNS S SNMP_AGENT SSDP MDAP GRE IPIP IKE IKE NAT T ESP PING_RESPONDER ip ip range where name The name of the service for this access list REQUIRED ip The ip address range for this access list REQUIRED ...

Page 789: ...ge from the access list SYNTAX service system ipdelete name PPTP HTTP HTTPs FTP SSH TELNET RIP Query DNS S SNMP_AGENT SSDP MDAP GRE IPIP IKE IKE NAT T ESP PING_RESPONDER ip ip range where name The name of the service for this access list REQUIRED ip The ip address range for this access list REQUIRED ...

Page 790: ...KE NAT T ESP REM_UPD RAS SRAS IP_COMMANDS ICMP_PING SENDTO PING_RESPONDER ICMP_TRACEROUTE UDP_TRACEROUTE HTTPPROBE expand disabled enabled dynamics disabled enabled members disabled enabled string string beginstring string where name The name of the service OPTIONAL expand Expanded listing OPTIONAL dynamics Display dynamic sevices OPTIONAL members Display sevice group members OPTIONAL string Strin...

Page 791: ...ps chargen data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk telnet or number where name The name of the servic...

Page 792: ...bootps chargen data gopher h323 httpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk telnet or number where name The name of the se...

Page 793: ...elnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk telnet or number qoslabel None DSCP Interactive Management Video VoIP RTP VoIP Signal default routelabel None DSCP Interactive Management Video VoIP RTP VoIP Signal default srcintf loop ipsec0 lan1 wan1 dmz1 guest1 log disabled enabled forward disabled enabled natpmweight number 0 255 where name The name ...

Page 794: ...snmp Commands 794 E DOC CTC 20080409 0002 v2 0 ...

Page 795: ...799 snmp config Configure global SNMP parameters see page 800 snmp get Get from supplied object identity e g get objectid 1 3 6 1 2 1 1 1 0 see page 801 snmp getnext Get next from supplied object identity e g getnext objectid see page 802 snmp ifadd Create a new SNMP interface see page 803 snmp ifattach Attach an SNMP interface see page 804 snmp ifconfig Modify an SNMP interface see page 805 snmp ...

Page 796: ... community string to allow snmp access over IP SYNTAX snmp community add securityname RWCommunity ROCommunity communityname password where securityname Configure access rights restrictions control for the community name REQUIRED communityname Configure SNMP community name REQUIRED ...

Page 797: ...snmp community delete Delete an SNMP community string to prevent snmp access over IP SYNTAX snmp community delete securityname RWCommunity ROCommunity where securityname Access rights restrictions control of the community name to be deleted REQUIRED ...

Page 798: ...snmp Commands 798 E DOC CTC 20080409 0002 v2 0 snmp community list List all SNMP community strings in use for snmp access over IP ...

Page 799: ... community string to allow snmp access over IP SYNTAX snmp community modify securityname RWCommunity ROCommunity communityname password where securityname Configure access rights restrictions control for the community name REQUIRED communityname Configure SNMP community name REQUIRED ...

Page 800: ...config Configure global SNMP parameters SYNTAX snmp config sysContact quoted string sysName quoted string sysLocation quoted string where sysContact SNMP System Contact OPTIONAL sysName SNMP System Name OPTIONAL sysLocation SNMP System Location OPTIONAL ...

Page 801: ...p get Get from supplied object identity e g get objectid 1 3 6 1 2 1 1 1 0 SYNTAX snmp get objectid string where objectid Object identity to get from must include the instance which is 0 for scalar objects e g 1 3 6 1 2 1 1 1 0 sysDescription OPTIONAL ...

Page 802: ...0080409 0002 v2 0 snmp getnext Get next from supplied object identity e g getnext objectid SYNTAX snmp getnext objectid string where objectid Object identity to getNext from e g 1 3 6 1 2 1 1 system returns sysDescription OPTIONAL ...

Page 803: ...TAX snmp ifadd intf string dest loop ethif1 ethif2 ethif3 ethif4 ceoc bridge OBC ethport1 RELAY Internet_0_35 eth br dsl eth_wan1 eth_dmz1 eth_guest1 lan1 wan1 dmz1 guest1 where intf The name for the new SNMP interface REQUIRED dest The destination interface for this SNMP interface REQUIRED ...

Page 804: ...p ifattach Attach an SNMP interface SYNTAX snmp ifattach intf loop ethif1 ethif2 ethif3 ethif4 ceoc bridge OBC ethport1 RELAY Internet_0_35 eth br dsl eth_wan1 eth_dmz1 eth_guest1 lan1 wan1 dmz1 guest1 where intf The name of the SNMP interface REQUIRED ...

Page 805: ...BC ethport1 RELAY Internet_0_35 eth br dsl eth_wan1 eth_dmz1 eth_guest1 lan1 wan1 dmz1 guest1 securityname RWCommunity ROCommunity communityname password where intf The name of the SNMP interface to configure REQUIRED securityname Configure access rights restrictions control for the community name OPTIONAL communityname Configure SNMP community name OPTIONAL ...

Page 806: ...p ifdelete Delete an SNMP interface SYNTAX snmp ifdelete intf loop ethif1 ethif2 ethif3 ethif4 ceoc bridge OBC ethport1 RELAY Internet_0_35 eth br dsl eth_wan1 eth_dmz1 eth_guest1 lan1 wan1 dmz1 guest1 where intf The name of the SNMP interface REQUIRED ...

Page 807: ...p ifdetach Detach an SNMP interface SYNTAX snmp ifdetach intf loop ethif1 ethif2 ethif3 ethif4 ceoc bridge OBC ethport1 RELAY Internet_0_35 eth br dsl eth_wan1 eth_dmz1 eth_guest1 lan1 wan1 dmz1 guest1 where intf The name of the SNMP interface REQUIRED ...

Page 808: ...mp iflist Display the SNMP interfaces SYNTAX snmp iflist intf loop ethif1 ethif2 ethif3 ethif4 ceoc bridge OBC ethport1 RELAY Internet_0_35 eth br dsl eth_wan1 eth_dmz1 eth_guest1 lan1 wan1 dmz1 guest1 where intf The name of an SNMP interface OPTIONAL ...

Page 809: ...0409 0002 v2 0 809 snmp walk Walk from supplied object identity e g walk objectid 1 3 6 1 2 1 1 SYNTAX snmp walk objectid string where objectid Object identity to walk from e g 1 3 6 1 2 1 1 system walks the system group OPTIONAL ...

Page 810: ...sntp Commands 810 E DOC CTC 20080409 0002 v2 0 ...

Page 811: ...ntp config Modify Display configuration see page 813 sntp debug traceconfig Modify SNTP client trace configuration see page 814 sntp delete Delete NTP server from list see page 815 sntp flush Flush NTP server list and SNTP client configuration see page 816 sntp list List the NTP servers see page 817 ...

Page 812: ...ip address name string version number 1 4 where addr IP address of NTP server to be added to list OPTIONAL name DNS name of NTP server to be added to list If both the IP address and the DNS name are provided the IP address is ignored OPTIONAL version SNTP version of server 1 2 3 or 4 OPTIONAL ...

Page 813: ...lay configuration SYNTAX sntp config state enabled disabled poll number 1 10080 pollpresync number 1 60 where state Enable Disable SNTP client OPTIONAL poll polling interval 1 min 10080min 7days OPTIONAL pollpresync polling interval before first sync 1 min 60min OPTIONAL ...

Page 814: ...tp Commands 814 E DOC CTC 20080409 0002 v2 0 sntp debug traceconfig Modify SNTP client trace configuration SYNTAX sntp debug traceconfig state disabled enabled where state Enable Disable tracing OPTIONAL ...

Page 815: ...9 0002 v2 0 815 sntp delete Delete NTP server from list SYNTAX sntp delete addr ip address name string where addr IP address of NTP server to be removed from list OPTIONAL name DNS name of NTP server to be removed from list OPTIONAL ...

Page 816: ...sntp Commands 816 E DOC CTC 20080409 0002 v2 0 sntp flush Flush NTP server list and SNTP client configuration ...

Page 817: ...sntp Commands E DOC CTC 20080409 0002 v2 0 817 sntp list List the NTP servers ...

Page 818: ...software Commands 818 E DOC CTC 20080409 0002 v2 0 ...

Page 819: ... see page 822 software download Download parameters see page 823 software duplicate Duplicates active software version as passive software version see page 824 software setpassive Installs a file as passive software version see page 825 software switch Switches active passive software versions reboots see page 826 software upgrade Reboots the modem to initiate the SW upgrade New software available...

Page 820: ...software Commands 820 E DOC CTC 20080409 0002 v2 0 software addon list List available modules ...

Page 821: ...software Commands E DOC CTC 20080409 0002 v2 0 821 software cleanup Checks whether a disk clean up is required If necessary garbage collection ...

Page 822: ...software Commands 822 E DOC CTC 20080409 0002 v2 0 software deletepassive Deletes passive software ...

Page 823: ...ype The type of the file to be downloaded REQUIRED url Set the HTTP URL where the file is to be found including remote filename REQUIRED username Set the name to be used to authenticate to the download server OPTIONAL password Set the password the be used to authenticate to the download server OPTIONAL filesize Set the size of the file to be downloaded REQUIRED targetfilename Set the filename used...

Page 824: ...software Commands 824 E DOC CTC 20080409 0002 v2 0 software duplicate Duplicates active software version as passive software version ...

Page 825: ...s E DOC CTC 20080409 0002 v2 0 825 software setpassive Installs a file as passive software version SYNTAX software setpassive file string where file The filename without directory path of the software package REQUIRED ...

Page 826: ...software Commands 826 E DOC CTC 20080409 0002 v2 0 software switch Switches active passive software versions reboots ...

Page 827: ...software Commands E DOC CTC 20080409 0002 v2 0 827 software upgrade Reboots the modem to initiate the SW upgrade New software available on a ...

Page 828: ...software Commands 828 E DOC CTC 20080409 0002 v2 0 software version Displays the software version ...

Page 829: ...h publickey add Installs a public dsa key see page 831 ssh publickey delete Removes a public dsa key see page 832 ssh publickey list Displays list of installed dsa keys see page 833 ssh publickey show_own Displays the servers public dsa key see page 834 ssh show Show the SSH keys summary see page 835 ...

Page 830: ...ut number 0 60 auth_attempts number 1 50 shell disabled enabled sftp disabled enabled where auth Authentication is based on OPTIONAL auth_timeout Allowed time to type in username and password OPTIONAL auth_attempts Attempts untill SSH disconnects OPTIONAL shell Enable Disable shell OPTIONAL sftp Enable Disable sftp OPTIONAL ...

Page 831: ...0409 0002 v2 0 831 ssh publickey add Installs a public dsa key SYNTAX ssh publickey add name string role Administrator LAN_Admin PowerUser User WAN_Admin where name Name of the key REQUIRED role Role assigned to the key REQUIRED ...

Page 832: ...ssh Commands 832 E DOC CTC 20080409 0002 v2 0 ssh publickey delete Removes a public dsa key SYNTAX ssh publickey delete name string where name Name of the key REQUIRED ...

Page 833: ...ssh Commands E DOC CTC 20080409 0002 v2 0 833 ssh publickey list Displays list of installed dsa keys ...

Page 834: ...ssh Commands 834 E DOC CTC 20080409 0002 v2 0 ssh publickey show_own Displays the servers public dsa key ...

Page 835: ...ssh Commands E DOC CTC 20080409 0002 v2 0 835 ssh show Show the SSH keys summary ...

Page 836: ...statecheck Commands 836 E DOC CTC 20080409 0002 v2 0 ...

Page 837: ...atecheck checkadd Add a check object see page 838 statecheck checkdelete Delete a check object see page 839 statecheck config Configure checkd parameters see page 840 statecheck groupadd Add a group object see page 841 statecheck groupdelete Delete a group object see page 842 ...

Page 838: ...ring paramname string paramtype string uint bool matchtype equal differ statdelta match string where group The name of the group REQUIRED name The name of the check REQUIRED object The object to check REQUIRED paramname The parameter to check REQUIRED paramtype The parameter type REQUIRED matchtype The match type REQUIRED match The match value REQUIRED ...

Page 839: ...ands E DOC CTC 20080409 0002 v2 0 839 statecheck checkdelete Delete a check object SYNTAX statecheck checkdelete group string name string where group The name of the group REQUIRED name The name of the check REQUIRED ...

Page 840: ...ure checkd parameters SYNTAX statecheck config interval number timeout number groupop and or dmtree igd atomic where interval The interval between checks REQUIRED timeout Timeout after wich checking stops REQUIRED groupop Group operator type OPTIONAL dmtree Client type OPTIONAL ...

Page 841: ...Commands E DOC CTC 20080409 0002 v2 0 841 statecheck groupadd Add a group object SYNTAX statecheck groupadd name string checkop and or where name The name of the group REQUIRED checkop Check operator type OPTIONAL ...

Page 842: ...statecheck Commands 842 E DOC CTC 20080409 0002 v2 0 statecheck groupdelete Delete a group object SYNTAX statecheck groupdelete name string where name The name of the group REQUIRED ...

Page 843: ...slog configuration see page 846 syslog msgbuf flush Flush all messages in syslog message buffer see page 847 syslog msgbuf send Send messages to remote syslog server see page 848 syslog msgbuf show Show messages in the syslog message buffer see page 849 syslog ruleadd Add a new rule to the syslog configuration see page 850 syslog ruledelete Delete a rule in the syslog configuration see page 851 ...

Page 844: ...Display configuration SYNTAX syslog config activate disabled enabled timeout number 0 60 format standard welf where activate Syslog send to collectors enabled OPTIONAL timeout Syslog flooding timeout in secs to collectors OPTIONAL format Syslog contents format OPTIONAL ...

Page 845: ...syslog Commands E DOC CTC 20080409 0002 v2 0 845 syslog flush Flushes syslog rules ...

Page 846: ...syslog Commands 846 E DOC CTC 20080409 0002 v2 0 syslog list List the current syslog configuration ...

Page 847: ...syslog Commands E DOC CTC 20080409 0002 v2 0 847 syslog msgbuf flush Flush all messages in syslog message buffer ...

Page 848: ...emon auth syslog lpr news uucp cron security ftp local6 local7 sev emerg alert crit err warning notice info debug hist disabled enabled dest ip address where fac Syslog facility level OPTIONAL sev Syslog severity level OPTIONAL hist Syslog display message history over several bootups OPTIONAL dest Remote syslog server destination an ip address REQUIRED ...

Page 849: ... syslog msgbuf show fac kern user mail daemon auth syslog lpr news uucp cron security ftp local6 local7 sev emerg alert crit err warning notice info debug hist disabled enabled where fac Syslog facility level OPTIONAL sev Syslog severity level OPTIONAL hist Syslog display message history over several bootups OPTIONAL ...

Page 850: ... syslog ruleadd fac kern user mail daemon auth syslog lpr news uucp cron security ftp local6 local7 all or comma seperated sev emerg alert crit err warning notice info debug dest ip address where fac Syslog rule facility REQUIRED sev Syslog rule severity REQUIRED dest Syslog rule destination an ip address REQUIRED ...

Page 851: ...syslog Commands E DOC CTC 20080409 0002 v2 0 851 syslog ruledelete Delete a rule in the syslog configuration SYNTAX syslog ruledelete rule_index number 1 16 where rule_index Syslog rule index REQUIRED ...

Page 852: ...system Commands 852 E DOC CTC 20080409 0002 v2 0 ...

Page 853: ...lues see page 857 system flush Flush system configuration see page 859 system locale Set Get regional settings see page 860 system ra config Configure Remote assistance params see page 861 system reboot Reboot the modem see page 862 system reset Reset to factory or ISP defaults user specific settings will be cleared see page 863 system settime Set Get date time timezone daylight savings time uptim...

Page 854: ...nabled disabled autosavedelay number 0 600 where upnp Enable Disable upnp discovery OPTIONAL tr64 Enable Disable TR 64 discovery OPTIONAL mdap Enable Disable mdap discovery OPTIONAL led Set system LED color OPTIONAL resetbutton Enable Disable reset to factory defaults pushbutton OPTIONAL digestauth Enable Disable HTTP digest authentication OPTIONAL defaultconnection The name of the default interne...

Page 855: ...system Commands E DOC CTC 20080409 0002 v2 0 855 system debug autosave Autosave debugging commands SYNTAX system debug autosave trace disabled enabled where trace Enable Disable autosave traces OPTIONAL ...

Page 856: ...system Commands 856 E DOC CTC 20080409 0002 v2 0 system debug stats Cpu and memory statistics SYNTAX system debug stats reset disabled enabled where reset Reset cpu statistics OPTIONAL ...

Page 857: ...saving status OPTIONAL mode Set daylight saving mode OPTIONAL startdate Set the start date of the daylight saving in the absolute mode OPTIONAL starttime Set the start time of the daylight saving in the absolute mode OPTIONAL enddate Set the end date of the daylight saving in the absolute mode OPTIONAL endtime Set the end time of the daylight saving in the absolute mode OPTIONAL startweekday Set t...

Page 858: ...the daylight saving in the relative mode OPTIONAL endhour Set the end hour of the daylight saving in the relative mode OPTIONAL endweek Set the end week of the daylight saving in the relative mode OPTIONAL endmonth Set the end month of the daylight saving in the relative mode OPTIONAL ...

Page 859: ...system Commands E DOC CTC 20080409 0002 v2 0 859 system flush Flush system configuration ...

Page 860: ...dyy time_format iso hmmss datetime_format iso date time time date duration_format dhmmss hmmss where dec_symbol Set decimal symbol OPTIONAL group_symbol Set digit grouping symbol OPTIONAL date_separator Set date separator OPTIONAL date_format Set date format OPTIONAL time_format Set time format OPTIONAL datetime_format Set date time format OPTIONAL duration_format Set duration format OPTIONAL ...

Page 861: ...stem ra config Configure Remote assistance params SYNTAX system ra config secure disabled enabled port number timeout number where secure Enable Disable https OPTIONAL port Set destination port OPTIONAL timeout Set connection timeout in minutes OPTIONAL ...

Page 862: ...system Commands 862 E DOC CTC 20080409 0002 v2 0 system reboot Reboot the modem ...

Page 863: ...0 863 system reset Reset to factory or ISP defaults user specific settings will be cleared SYNTAX system reset factory yes no proceed no yes where factory Option to reset to factory REQUIRED proceed Confirmation for resetting the modem REQUIRED ...

Page 864: ...r hh mm daylightsaving disabled enabled geotimezonename quoted string rtc disabled enabled where date Set the system date OPTIONAL time Set the system time OPTIONAL timezone Set the system timezone 12 00 13 00 OPTIONAL daylightsaving Enable Disable daylight saving OPTIONAL geotimezonename Set the geographical timezone by name OPTIONAL rtc Enable Disable the real time clock OPTIONAL ...

Page 865: ...t or change editing mode timed reboot SYNTAX system timedreboot state disabled enabled time number 0 983040 date string where state Enable Disable timed reboot OPTIONAL time Change default countdown time Min OPTIONAL date Set date time to reboot DD MM YYYY HH MM OPTIONAL ...

Page 866: ...telnet Command 866 E DOC CTC 20080409 0002 v2 0 ...

Page 867: ...tpproxy ike ils imap2 imap3 ingres net ipcserver ipx irc o irc u kerberos ldap login netbios dgm netbios ns netbios ssn netwall netware ip new rwho nfds nicname nntp ntalk ntp pcmail srv pop2 pop3 printer qotd realaudio rip rtelnet rtsp sip smtp snmp snmptrap snpp sntp sql net sql net sqlserv sunrpc syslog systat talk telnet or number where addr The IP address of the server REQUIRED port The port ...

Page 868: ...tftp Commands 868 E DOC CTC 20080409 0002 v2 0 ...

Page 869: ...ee page 872 tftp fs df Show available free space see page 873 tftp fs dir Show directory contents see page 874 tftp fs move Rename a file see page 875 tftp fs pwd Show the current directory see page 876 tftp fs remove Delete a file see page 877 tftp read Fetches a file from a remote TFTP server TFTP get see page 878 tftp write Transfers a local file to a TFTP server TFTP put see page 879 ...

Page 870: ...tftp Commands 870 E DOC CTC 20080409 0002 v2 0 tftp cleanup FLASH Garbage Collect ...

Page 871: ...tftp Commands E DOC CTC 20080409 0002 v2 0 871 tftp fs cd Change Directory SYNTAX tftp fs cd dir string where dir Directory name OPTIONAL ...

Page 872: ...tftp Commands 872 E DOC CTC 20080409 0002 v2 0 tftp fs cleanup FLASH Garbage Collect ...

Page 873: ...tftp Commands E DOC CTC 20080409 0002 v2 0 873 tftp fs df Show available free space ...

Page 874: ...tftp Commands 874 E DOC CTC 20080409 0002 v2 0 tftp fs dir Show directory contents SYNTAX tftp fs dir dir string where dir Directory name OPTIONAL ...

Page 875: ...tftp Commands E DOC CTC 20080409 0002 v2 0 875 tftp fs move Rename a file SYNTAX tftp fs move src string dst string where src Source file REQUIRED dst Destination file REQUIRED ...

Page 876: ...tftp Commands 876 E DOC CTC 20080409 0002 v2 0 tftp fs pwd Show the current directory ...

Page 877: ...tftp Commands E DOC CTC 20080409 0002 v2 0 877 tftp fs remove Delete a file SYNTAX tftp fs remove file string where file File to be removed REQUIRED ...

Page 878: ...tches a file from a remote TFTP server TFTP get SYNTAX tftp read src file string server string dst file string where src file Source file in TFTP server REQUIRED server Server address REQUIRED dst file Destination file in modem path name relative to dl OPTIONAL ...

Page 879: ... Transfers a local file to a TFTP server TFTP put SYNTAX tftp write src file string server string dst file string where src file Source file in modem absolute path name REQUIRED server Server address REQUIRED dst file Destination file in TFTP server OPTIONAL ...

Page 880: ...tls Commands 880 E DOC CTC 20080409 0002 v2 0 ...

Page 881: ...rt list List certificates see page 884 tls acs client config Display modify tls settings see page 885 tls https server cert add Add a new certificate see page 886 tls https server cert delete Delete a certificate see page 887 tls https server cert list List certificates see page 888 tls https server config Display modify tls settings see page 889 tls self cert list List certificates see page 890 ...

Page 882: ...tls Commands 882 E DOC CTC 20080409 0002 v2 0 tls acs client cert add Add a new certificate SYNTAX tls acs client cert add filename string where filename name of the certificate file REQUIRED ...

Page 883: ...tls Commands E DOC CTC 20080409 0002 v2 0 883 tls acs client cert delete Delete a certificate SYNTAX tls acs client cert delete index number where index Certificate index REQUIRED ...

Page 884: ... DOC CTC 20080409 0002 v2 0 tls acs client cert list List certificates SYNTAX tls acs client cert list index number expand disabled enabled where index Certificate index OPTIONAL expand Display more information OPTIONAL ...

Page 885: ...ent config state disabled enabled auth serv disabled enabled valid date disabled enabled valid domain disabled enabled where state SSL TLS client for ACS state OPTIONAL auth serv Request server authentication OPTIONAL valid date Check certificate validity date OPTIONAL valid domain Check certificate domain OPTIONAL ...

Page 886: ...tls Commands 886 E DOC CTC 20080409 0002 v2 0 tls https server cert add Add a new certificate SYNTAX tls https server cert add filename string where filename name of the certificate file REQUIRED ...

Page 887: ...tls Commands E DOC CTC 20080409 0002 v2 0 887 tls https server cert delete Delete a certificate SYNTAX tls https server cert delete index number where index Certificate index REQUIRED ...

Page 888: ...OC CTC 20080409 0002 v2 0 tls https server cert list List certificates SYNTAX tls https server cert list index number expand disabled enabled where index Certificate index OPTIONAL expand Display more information OPTIONAL ...

Page 889: ...ify tls settings SYNTAX tls https server config state disabled enabled auth client disabled enabled valid date disabled enabled where state SSL TLS server for HTTPS state OPTIONAL auth client Request client authentication OPTIONAL valid date Check certificate validity date OPTIONAL ...

Page 890: ... 890 E DOC CTC 20080409 0002 v2 0 tls self cert list List certificates SYNTAX tls self cert list index number expand disabled enabled where index Certificate index OPTIONAL expand Display more information OPTIONAL ...

Page 891: ...od action setvaldelete Delete a setvalue object see page 898 tod config Configure tod parameters see page 899 tod list List config see page 900 tod schedule add Add a schedule object see page 901 tod schedule dayadd Add a day object see page 902 tod schedule daydelete Delete a day object see page 903 tod schedule delete Delete a schedule object see page 904 tod schedule list List schedules see pag...

Page 892: ...tod Commands 892 E DOC CTC 20080409 0002 v2 0 tod action add Add an action object SYNTAX tod action add id number where id The id of the actiom OPTIONAL ...

Page 893: ...tod Commands E DOC CTC 20080409 0002 v2 0 893 tod action delete Delete an action object SYNTAX tod action delete actionid number where actionid The id of the action REQUIRED ...

Page 894: ...tod Commands 894 E DOC CTC 20080409 0002 v2 0 tod action list List actions ...

Page 895: ... actionid number setvalueid number id number object string param string value string where actionid The id of the action REQUIRED setvalueid The id of the setvalue action REQUIRED id The id of the setvalue param OPTIONAL object Mbus object path OPTIONAL param Mbus parameter name OPTIONAL value Parameter value OPTIONAL ...

Page 896: ...paramdelete Delete a setvalue parameter SYNTAX tod action paramdelete actionid number setvalueid number paramid number where actionid The id of the action REQUIRED setvalueid The id of the setvalue action REQUIRED paramid The id of the setvalue param REQUIRED ...

Page 897: ...v2 0 897 tod action setvaladd Add a setvalue object SYNTAX tod action setvaladd actionid number id number on active inactive where actionid The id of the action REQUIRED id The id of the setvalue actiom OPTIONAL on Active inactive OPTIONAL ...

Page 898: ... 20080409 0002 v2 0 tod action setvaldelete Delete a setvalue object SYNTAX tod action setvaldelete actionid number setvalueid number where actionid The id of the action REQUIRED setvalueid The id of the setvalue action REQUIRED ...

Page 899: ...mmands E DOC CTC 20080409 0002 v2 0 899 tod config Configure tod parameters SYNTAX tod config acchain string state enabled disabled where acchain firewall chain name OPTIONAL state enable disable ToD OPTIONAL ...

Page 900: ...tod Commands 900 E DOC CTC 20080409 0002 v2 0 tod list List config ...

Page 901: ...ds E DOC CTC 20080409 0002 v2 0 901 tod schedule add Add a schedule object SYNTAX tod schedule add id number type none accesscontrol action where id The id of the schedule OPTIONAL type The schedule type REQUIRED ...

Page 902: ... v2 0 tod schedule dayadd Add a day object SYNTAX tod schedule dayadd scheduleid number id number weekday mo tu we th fr sa su where scheduleid The id of the schedule REQUIRED id The id of the day OPTIONAL weekday The day of the week REQUIRED ...

Page 903: ...DOC CTC 20080409 0002 v2 0 903 tod schedule daydelete Delete a day object SYNTAX tod schedule daydelete scheduleid number dayid number where scheduleid The id of the schedule REQUIRED dayid The id of the day REQUIRED ...

Page 904: ...tod Commands 904 E DOC CTC 20080409 0002 v2 0 tod schedule delete Delete a schedule object SYNTAX tod schedule delete scheduleid number where scheduleid The id of the schedule REQUIRED ...

Page 905: ...tod Commands E DOC CTC 20080409 0002 v2 0 905 tod schedule list List schedules ...

Page 906: ... timeout reference string name string action string state enabled disabled where expiretime The absolute expire time OPTIONAL nrofminutes The number of minutes OPTIONAL count The timer count 0 periodical OPTIONAL scheduleid The id of the schedule REQUIRED mode The mode OPTIONAL reference Access control reference OPTIONAL name Friendly name OPTIONAL action Action OPTIONAL state Enable disable OPTIO...

Page 907: ...ute number endhour number endminute number action string where scheduleid The id of the schedule REQUIRED dayid The id of the day REQUIRED id The id of the timerange OPTIONAL starthour The start hour of the range REQUIRED startminute The start minute of the range REQUIRED endhour The end hour of the range REQUIRED endminute The end minute of the range REQUIRED action Action OPTIONAL ...

Page 908: ...tod schedule timedelete Delete a timerange object SYNTAX tod schedule timedelete scheduleid number dayid number timeid number where scheduleid The id of the schedule REQUIRED dayid The id of the day REQUIRED timeid The id of the timerange REQUIRED ...

Page 909: ...s REQUIRED count The number of times to reissue a traceroute request with the same time to live OPTIONAL size The size of the packet payload OPTIONAL interval The interval in milliseconds between packets OPTIONAL maxhops The upper limit on the number of routers through which a packet can pass OPTIONAL dstport The UDP destination port number to send to OPTIONAL maxfail The max number of consecutive...

Page 910: ...tunnel Commands 910 E DOC CTC 20080409 0002 v2 0 ...

Page 911: ...4 tunnel gre list list all gre tunnels see page 915 tunnel gre modify configure a gre tunnel see page 916 tunnel ipip add add an ipip tunnel see page 917 tunnel ipip delete delete an ipip tunnel see page 918 tunnel ipip flush remove all ipip tunnels see page 919 tunnel ipip list list all ipip tunnels see page 920 tunnel ipip modify configure an ipip tunnel see page 921 tunnel list Lists all tunnel...

Page 912: ...oted string source ip address destination ip address key string checksum disabled enabled where ifname the name of this gre interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header REQUIRED key tunnel key OPTIONAL checksum gre checksum option OPTIONAL ...

Page 913: ...tunnel Commands E DOC CTC 20080409 0002 v2 0 913 tunnel gre delete delete a gre tunnel SYNTAX tunnel gre delete ifname where ifname the name of this gre interface REQUIRED ...

Page 914: ...tunnel Commands 914 E DOC CTC 20080409 0002 v2 0 tunnel gre flush remove all gre tunnels ...

Page 915: ...tunnel Commands E DOC CTC 20080409 0002 v2 0 915 tunnel gre list list all gre tunnels ...

Page 916: ...ify ifname source ip address destination ip address key string checksum disabled enabled where ifname the name of the gre interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header REQUIRED key tunnel key OPTIONAL checksum gre checksum option OPTIONAL ...

Page 917: ...add an ipip tunnel SYNTAX tunnel ipip add ifname quoted string source ip address destination ip address where ifname the name of this ipip interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header REQUIRED ...

Page 918: ...tunnel Commands 918 E DOC CTC 20080409 0002 v2 0 tunnel ipip delete delete an ipip tunnel SYNTAX tunnel ipip delete ifname where ifname the name of this ipip interface REQUIRED ...

Page 919: ...tunnel Commands E DOC CTC 20080409 0002 v2 0 919 tunnel ipip flush remove all ipip tunnels ...

Page 920: ...tunnel Commands 920 E DOC CTC 20080409 0002 v2 0 tunnel ipip list list all ipip tunnels ...

Page 921: ...ify configure an ipip tunnel SYNTAX tunnel ipip modify ifname source ip address destination ip address where ifname the name of the ipip interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header REQUIRED ...

Page 922: ...tunnel Commands 922 E DOC CTC 20080409 0002 v2 0 tunnel list Lists all tunnels ...

Page 923: ...e debug traceconfig Enable disable upgrade daemon tracing see page 926 upgrade profile add Add a new file profile description see page 927 upgrade profile delete Delete a file profile description see page 928 upgrade profile list Display a list of the file profile descriptions see page 929 upgrade profile modify Modify a file profile description see page 930 upgrade start Start a new upgrade see p...

Page 924: ...2 0 upgrade config Change the upgrade daemon configuration SYNTAX upgrade config state disabled enabled protocol tftp ftp http https where state The upgrade daemon state OPTIONAL protocol The transfer protocol to be used for file download OPTIONAL ...

Page 925: ...upgrade Commands E DOC CTC 20080409 0002 v2 0 925 upgrade debug sesslist Display the list of sessions ...

Page 926: ...mmands 926 E DOC CTC 20080409 0002 v2 0 upgrade debug traceconfig Enable disable upgrade daemon tracing SYNTAX upgrade debug traceconfig state disabled enabled where state The upgrade daemon trace state REQUIRED ...

Page 927: ...i bin maxsize KBytes number action none config_load script_load reboot upgrade where extension The extension of the new file profile REQUIRED maxsize KBytes The maximum filesize in KBytes allowed for files with the extension of this profile OPTIONAL action The action to be done when the file with the extension of this profile is downloaded REQUIRED ...

Page 928: ...s 928 E DOC CTC 20080409 0002 v2 0 upgrade profile delete Delete a file profile description SYNTAX upgrade profile delete extension sts ini bin where extension The extension of the file profile to be deleted REQUIRED ...

Page 929: ...upgrade Commands E DOC CTC 20080409 0002 v2 0 929 upgrade profile list Display a list of the file profile descriptions ...

Page 930: ...ini bin maxsize KBytes number action none config_load script_load reboot upgrade where extension The extension of the new file profile REQUIRED maxsize KBytes The maximum filesize in KBytes allowed for files with the extension of this profile OPTIONAL action The action to be done when the file with the extension of this profile is downloaded REQUIRED ...

Page 931: ...start Start a new upgrade SYNTAX upgrade start protocol tftp ftp http https server string filename string where protocol The protocol to be used for the download REQUIRED server The server name or IP address OPTIONAL filename The file to be downloaded OPTIONAL ...

Page 932: ...upnp Commands 932 E DOC CTC 20080409 0002 v2 0 ...

Page 933: ...ands E DOC CTC 20080409 0002 v2 0 933 upnp Commands upnp config Config upnp parameter s see page 934 upnp flush Flushes upnp config i e to defaults see page 935 upnp list List all registered devices see page 936 ...

Page 934: ...readonly safenat disabled enabled preferredaddresses string where maxage ssdp advertisements MAX AGE default 1800 OPTIONAL writemode Configuration access level for UPnP OPTIONAL safenat Enable disable check on safe nat entries limited to own host OPTIONAL preferredaddresses CSV list of preferred ip addresses for UPnP 1 per lan ip interface OPTIONAL ...

Page 935: ...upnp Commands E DOC CTC 20080409 0002 v2 0 935 upnp flush Flushes upnp config i e to defaults ...

Page 936: ...upnp Commands 936 E DOC CTC 20080409 0002 v2 0 upnp list List all registered devices SYNTAX upnp list verbose number 0 2 where verbose Verbose level default 1 OPTIONAL ...

Page 937: ...r Commands user add Add a user see page 938 user config Modify the user see page 939 user delete Delete a user see page 940 user flush Flush the users see page 941 user list Display the users see page 942 user rights Display session rights see page 943 ...

Page 938: ...in disabled enabled deflocadmin disabled enabled where name User name REQUIRED password User password REQUIRED role Role name REQUIRED hash2 The MD5 hash OPTIONAL descr User description OPTIONAL defuser Set this user as the default user OPTIONAL defremadmin Set this user as the default remote administrator OPTIONAL deflocadmin Set this user as the default local administrator OPTIONAL ...

Page 939: ...d enabled defremadmin disabled enabled deflocadmin disabled enabled where name User name REQUIRED password User password OPTIONAL role Role name OPTIONAL descr User description OPTIONAL defuser Set this user as the default user OPTIONAL defremadmin Set this user as the default remote administrator OPTIONAL deflocadmin Set this user as the default local administrator OPTIONAL ...

Page 940: ...user Commands 940 E DOC CTC 20080409 0002 v2 0 user delete Delete a user SYNTAX user delete name Administrator tech where name User name REQUIRED ...

Page 941: ...user Commands E DOC CTC 20080409 0002 v2 0 941 user flush Flush the users ...

Page 942: ...ers SYNTAX user list name Administrator tech channel ftp telnet http mdap serial origin lan wan local secure disabled enabled where name User name OPTIONAL channel The selected channel OPTIONAL origin The selected origin OPTIONAL secure The selected security level OPTIONAL ...

Page 943: ...user Commands E DOC CTC 20080409 0002 v2 0 943 user rights Display session rights ...

Page 944: ...xdsl Commands 944 E DOC CTC 20080409 0002 v2 0 ...

Page 945: ...mstats Display PMD statistics system side see page 956 xdsl debug rloopback Configure Remote Loopback applies to CO mode only see page 957 xdsl debug showmdioreg Show the value of a MDIO register by name see page 958 xdsl debug traceconfig Set the trace level see page 959 xdsl delete Delete a wire pair from a DSL interface see page 960 xdsl ifadd Create a DSL interface see page 961 xdsl ifattach A...

Page 946: ...xdsl Commands 946 E DOC CTC 20080409 0002 v2 0 xdsl profile modify Modify a DSL interface profile see page 971 ...

Page 947: ...TC 20080409 0002 v2 0 947 xdsl add Add a wire pair to a DSL interface SYNTAX xdsl add name DSL interface wirepair DSL linkID where name The name of a DSL interface REQUIRED wirepair A DSL link identifier e g link0 REQUIRED ...

Page 948: ...xdsl Commands 948 E DOC CTC 20080409 0002 v2 0 xdsl debug atmstats Display ATM statistics ...

Page 949: ...xdsl Commands E DOC CTC 20080409 0002 v2 0 949 xdsl debug clear Clear statistics SYNTAX xdsl debug clear counter atm efm pmd paf clause30SystemSide where counter Clear statistics OPTIONAL ...

Page 950: ...xdsl Commands 950 E DOC CTC 20080409 0002 v2 0 xdsl debug efmlinestats Display IEEE 802 3 Clause30 Statistics Line Side ...

Page 951: ...xdsl Commands E DOC CTC 20080409 0002 v2 0 951 xdsl debug efmsystemstats Display IEEE 802 3 Clause30 Statistics System Side ...

Page 952: ...xdsl Commands 952 E DOC CTC 20080409 0002 v2 0 xdsl debug info Display DSL line device information ...

Page 953: ...figure Local Loopback applies to CPE mode only SYNTAX xdsl debug lloopback enabled no yes timeout number 0 1000 type digital analog where enabled Enable disable the Local Loopback REQUIRED timeout Local Loopback timeout 0 1000 min OPTIONAL type Local Loopback type OPTIONAL ...

Page 954: ...xdsl Commands 954 E DOC CTC 20080409 0002 v2 0 xdsl debug pafstats Display PAF statistics ...

Page 955: ...xdsl Commands E DOC CTC 20080409 0002 v2 0 955 xdsl debug pmdlinestats Display PMD statistics line side ...

Page 956: ...xdsl Commands 956 E DOC CTC 20080409 0002 v2 0 xdsl debug pmdsystemstats Display PMD statistics system side ...

Page 957: ...igure Remote Loopback applies to CO mode only SYNTAX xdsl debug rloopback enabled no yes timeout number 0 1000 type cpe repeater where enabled Enable disable the Remote Loopback REQUIRED timeout Remote Loopback timeout 0 1000 min OPTIONAL type Remote Loopback type OPTIONAL ...

Page 958: ... debug showmdioreg Show the value of a MDIO register by name SYNTAX xdsl debug showmdioreg linkno 0 1 2 3 name capability pcs control pme available pme aggregate aggr disc aggr size where linkno link number OPTIONAL name name of MDIO registers REQUIRED ...

Page 959: ...xdsl Commands E DOC CTC 20080409 0002 v2 0 959 xdsl debug traceconfig Set the trace level SYNTAX xdsl debug traceconfig level 0 1 2 3 4 where level level of trace OPTIONAL ...

Page 960: ...C 20080409 0002 v2 0 xdsl delete Delete a wire pair from a DSL interface SYNTAX xdsl delete name DSL interface wirepair DSL linkID where name The name of a DSL interface REQUIRED wirepair A DSL link identifier e g link0 REQUIRED ...

Page 961: ...s E DOC CTC 20080409 0002 v2 0 961 xdsl ifadd Create a DSL interface SYNTAX xdsl ifadd name string profile DSL profile where name The name for a new DSL interface REQUIRED profile A co or cpe profile name REQUIRED ...

Page 962: ...xdsl Commands 962 E DOC CTC 20080409 0002 v2 0 xdsl ifattach Activate a DSL interface SYNTAX xdsl ifattach name DSL interface where name The name of a DSL interface REQUIRED ...

Page 963: ...mode auto 1pair 2pair 3pair 4pair int channel DSL channel where name The name of a DSL interface REQUIRED ul mode The DSL upper layer protocol Asynchronous Transfer Mode ATM or Ethernet in the First Mile EFM OPTIONAL wire mode The device s DSL wire configuration 1 pair 2 pair OPTIONAL int channel The internal communication channel none or dsl0 OPTIONAL ...

Page 964: ...xdsl Commands 964 E DOC CTC 20080409 0002 v2 0 xdsl ifdelete Delete a DSL interface SYNTAX xdsl ifdelete name DSL interface where name The name of a DSL interface REQUIRED ...

Page 965: ...xdsl Commands E DOC CTC 20080409 0002 v2 0 965 xdsl ifdetach de Activate a DSL interface SYNTAX xdsl ifdetach name DSL interface where name The name of a DSL interface REQUIRED ...

Page 966: ...xdsl Commands 966 E DOC CTC 20080409 0002 v2 0 xdsl iflist List all DSL interfaces SYNTAX xdsl iflist name DSL interface where name The name of a DSL interface OPTIONAL ...

Page 967: ...xdsl Commands E DOC CTC 20080409 0002 v2 0 967 xdsl list List all wire pairs and their assignment ...

Page 968: ...968 E DOC CTC 20080409 0002 v2 0 xdsl profile add Add a DSL interface profile SYNTAX xdsl profile add name string type co cpe where name The name of a new DSL interface profile REQUIRED type The profile type REQUIRED ...

Page 969: ...xdsl Commands E DOC CTC 20080409 0002 v2 0 969 xdsl profile delete Delete a DSL interface profile SYNTAX xdsl profile delete name DSL profile where name The name of a DSL interface profile REQUIRED ...

Page 970: ...xdsl Commands 970 E DOC CTC 20080409 0002 v2 0 xdsl profile list Display a DSL interface profile SYNTAX xdsl profile list name DSL profile where name The name of a DSL interface profile OPTIONAL ...

Page 971: ...712 3776 3840 3904 3968 4032 4096 4160 4224 4288 4352 4416 4480 4544 4608 4672 4736 4800 4864 4928 4992 5056 5120 5184 5248 5312 5376 5440 5504 5568 5632 5696 maxbw 192 256 320 384 448 512 576 640 704 768 832 896 960 1024 1088 1984 2048 2112 2176 2240 2304 2312 2368 2432 2496 2560 2624 2688 2752 2816 2880 2944 3008 3072 3136 3200 3264 3328 3392 3456 3520 3584 3648 3712 3776 3840 3904 3968 4032 409...

Page 972: ...may decrease but at which the modem must remain synchronized Current noise margin value dB OPTIONAL marginworst Worst noise margin value dB OPTIONAL margincurrentenable Enable disable marginscurrent OPTIONAL marginworstenable Enable disable marginsworst OPTIONAL monitoring Enable Disable Transmission Quality SNR monitoring OPTIONAL atmupfast Enable or disable the local ATM TC layer at the beginnin...

Page 973: ...E DOC CTC 20080409 0002 v2 0 973 lineprobing Enable or disable line probing OPTIONAL simulate lp Enable or disable line probing simulation OPTIONAL vendor specific The vendor specific octets to use e g FF00 OPTIONAL ...

Search results

Summary of Contents for TG605s

Reviews:

Related manuals for TG605s

Brands by name

Popular brands

THOMSON TG605s, Cli Reference Manual

Search results

Summary of Contents for TG605s

Reviews:

Related manuals for TG605s

Brands by name

Popular brands