KeeNetic Lite KN-1310 Скачать руководство пользователя страница 315

Страница: 315 / 320

IPsec Encryption Levels

The encryption level defines a set of

IKE

and

IPsec SA

algorithms.

Below a complete list of algorithms is displayed for each level in order of decreasing

priority, as well as a set of commands crypto ike proposal to setup this profile manually.

In the list of algorithms is indicated:

• encryption with key length

• hash function for

HMAC

forming

•

PFS

mode (NO if disabled)

D.1 weak

AES128-SHA1-MODP1024

IKE

AES128-SHA1-MODP768

AES128-MD5-MODP1024

AES128-MD5-MODP768

3DES-SHA1-MODP1024

3DES-SHA1-MODP768

3DES-MD5-MODP1024

3DES-MD5-MODP768

DES-SHA1-MODP1024

DES-SHA1-MODP768

DES-MD5-MODP1024

DES-MD5-MODP768
DES-MD5-NO

IPsec SA

AES128-SHA1-NO

3DES-SHA1-NO

DES-SHA1-NO

AES128-MD5-NO

Keenetic Lite (KN-1310) — Command Reference Guide

315

Содержание Lite KN-1310

Страница 1: ...Smart Wi Fi Router with Power Amplifiers Managed Switch and Mode Selector Command Reference Guide Model Keenetic Lite KN 1310 OS Version 2 10 Edition 1 17 18 01 2018 help keenetic net Keenetic Limited...

Страница 2: ......

Страница 3: ...s manual covers the following topics Introduction to the CLI Describes how to use the Keenetic Lite Command Line Interface CLI its hierarchical structure authorization levels and its help features Com...

Страница 4: ...his context has no meaning for the command Interfaces used in the system and the relationships between them are shown in the diagrams below List of arguments if they exists and explanations to them Ar...

Страница 5: ...3 Product Overview 19 Introduction to the CLI 21 Command Reference 27 Glossary 291 Interface Hierarchy 299 HTTP API 301 SNMP MIB 309 IPsec Encryption Levels 315 Keenetic Lite KN 1310 Command Reference...

Страница 6: ...Command Reference Guide Keenetic Lite KN 1310 6 Contents Overview...

Страница 7: ...ut 24 2 5 Saving to startup settings 24 2 6 Delayed restart 25 Chapter 3 Command Reference 27 3 1 Core commands 27 3 1 1 copy 27 3 1 2 erase 27 3 1 3 exit 28 3 1 4 ls 28 3 1 5 more 29 3 2 access list...

Страница 8: ...ofile 53 3 12 1 crypto ipsec profile authentication local 54 3 12 2 crypto ipsec profile authentication remote 54 3 12 3 crypto ipsec profile dpd interval 55 3 12 4 crypto ipsec profile identity local...

Страница 9: ...ion eap md5 79 3 16 3 interface authentication eap ttls 80 3 16 4 interface authentication identity 80 3 16 5 interface authentication mschap 81 3 16 6 interface authentication mschap v2 82 3 16 7 int...

Страница 10: ...debug 106 3 16 46 interface ip dhcp client displace 107 3 16 47 interface ip dhcp client dns routes 107 3 16 48 interface ip dhcp client fallback 108 3 16 49 interface ip dhcp client hostname 108 3 16...

Страница 11: ...rface rf e2p set 131 3 16 88 interface security level 132 3 16 89 interface speed 133 3 16 90 interface speed nonegotiate 134 3 16 91 interface ssid 134 3 16 92 interface switchport access 135 3 16 93...

Страница 12: ...p host 162 3 25 ip hotspot 162 3 25 1 ip hotspot auto scan interface 163 3 25 2 ip hotspot auto scan interval 163 3 25 3 ip hotspot auto scan passive 164 3 25 4 ip hotspot auto scan timeout 165 3 25 5...

Страница 13: ...190 3 46 1 ndns book name 190 3 46 2 ndns check name 193 3 46 3 ndns drop name 194 3 46 4 ndns get booked 195 3 46 5 ndns get update 196 3 47 ntce shaping 198 3 48 ntp 198 3 49 ntp server 199 3 50 nt...

Страница 14: ...w associations 219 3 74 2 show clock date 220 3 74 3 show clock timezone list 221 3 74 4 show crypto ike key 222 3 74 5 show crypto map 222 3 74 6 show dot1x 224 3 74 7 show drivers 225 3 74 8 show in...

Страница 15: ...74 42 show vpn server 256 3 75 snmp community 256 3 76 snmp contact 257 3 77 snmp location 257 3 78 system 258 3 78 1 system button 258 3 78 2 system clock date 259 3 78 3 system clock timezone 260 3...

Страница 16: ...p echo 283 3 85 3 vpn server mppe 284 3 85 4 vpn server mppe optional 285 3 85 5 vpn server mru 285 3 85 6 vpn server mtu 286 3 85 7 vpn server multi login 286 3 85 8 vpn server pool range 287 3 85 9...

Страница 17: ...11 C 4 UDP MIB 312 C 5 HOST RESOURCES MIB 312 C 6 UCD SNMP MIB 312 Appendix D IPsec Encryption Levels 315 D 1 weak 315 D 2 normal 316 D 3 normal 3des 316 D 4 strong 317 D 5 weak pfs 317 D 6 normal pfs...

Страница 18: ...Command Reference Guide Keenetic Lite KN 1310 18 Table of Contents...

Страница 19: ...1G6KB 25 64Mb DDR2 Flash Winbond W25Q128JVFQ 16Mb SPI Ethernet Notes Chipset Ports Integrated 5 Notes Speed Label WAN port 100 Mbps 0 100 Mbps 1 100 Mbps 2 100 Mbps 3 100 Mbps 4 Wi Fi Notes Chipset Ba...

Страница 20: ...Command Reference Guide Keenetic Lite KN 1310 20 Chapter 1 Product Overview...

Страница 21: ...y default settings of Keenetic Lite RESET button is used to reset startup configuration to the factory default Files startup config and running config can be edited manually without participation of t...

Страница 22: ...ompletion To make the configuring process as comfortable as possible the CLI provides auto completion of commands and parameters hinting the operator which commands are available at the current level...

Страница 23: ...evel authentication configure authentication ip set interface IP parameters igmp set interface IGMP parameters up enable interface down disable interface config interface FastEthernet0 Vlan2 2 3 Prefi...

Страница 24: ...outingTable Added static route 1 1 2 0 24 via PPTP0 config ip route 1 1 3 0 24 PPTP1 Network RoutingTable Added static route 1 1 3 0 24 via PPTP1 config show running config ip route 1 1 1 0 255 255 25...

Страница 25: ...to reboot and return to the saved settings The system reboot command lets you set a delayed restart timer perform risky settings then turn off the timer and save the changes If connection to the devic...

Страница 26: ...Command Reference Guide Keenetic Lite KN 1310 26 Chapter 2 Introduction to the CLI...

Страница 27: ...file to be copied in file system path format Filename source Full path to the directory for the new file Filename destination Example Current settings can be saved as follows config copy running conf...

Страница 28: ...2 00 3 1 3 exit Description Leave the command node Prefix no No Change settings No Multiple input No Synopsis config exit Example config dyndns exit config History Version Description The exit command...

Страница 29: ...ntry type D name db entry type D name dhcp6c entry type R name TZ size 6 entry type R name passwd size 128 entry type D name dnscache entry type D name mnt entry type D name tmp entry type D name ppp...

Страница 30: ...not found the command tries to create it Such a list can be assigned to a network interface using interface ip access group command Command with no prefix removes the list of rules Prefix no Yes Chan...

Страница 31: ...ination port range destination port destination end port config acl no deny icmp esp gre ipip ip source source mask destination destination mask Arguments Description Value Argument TCP protocol Keywo...

Страница 32: ...There are two ways to enter the mask in the canonical form for example 255 255 255 0 and in the form of prefix with bit length for example 24 Destination port in the TCP or UDP header Integer destina...

Страница 33: ...on end port config acl permit icmp esp gre ipip ip source source mask destination destination mask config acl no permit tcp udp source source mask port src port operator source port range source port...

Страница 34: ...ort eq Operator greater to compare the port with the specified source port gt The destination address in the header of IP packet IP address destination Mask to be applied to the destination address in...

Страница 35: ...lient Prefix no Yes Change settings Yes Multiple input Yes Synopsis config cloud control client id connect name mag app modulus exponent config no cloud control client id connect Arguments Description...

Страница 36: ...oud control client name Description Rename the registered client Prefix no No Change settings Yes Multiple input No Synopsis config cloud control client id name name Arguments Description Value Argume...

Страница 37: ...The period of time that a session can remain idle without any end user Integer seconds interaction Can take values in the range from 30 to 600 inclusively Example config cloud control client a78d 30ab...

Страница 38: ...ion Mark component to install Final installation carried out with components commit command Prefix no No Change settings Yes Multiple input Yes Synopsis config comp install component Arguments Descrip...

Страница 39: ...ndbox Example config comp list firmware version 2 12 A 1 0 1 sandbox draft component name storage group USB storage libndm Swap priority normal depend usb size 363447 order 0 version 3 4 113 1 hash 2d...

Страница 40: ...ion Value Argument preset Minimal set of components will be marked minimal Recommended set of components will be marked for installation recommended Example config comp preset recommended lib libndmCo...

Страница 41: ...h the components list command String component Example config comp remove ntfs Component is queued for removal ntfs History Version Description The components remove command has been introduced 2 00 3...

Страница 42: ...x removes specified key Prefix no Yes Change settings Yes Multiple input Yes Synopsis config crypto ike key name psk type id any config no crypto ike key name Arguments Description Value Argument Name...

Страница 43: ...live Arguments Description Value Argument Timeout between keepalive packets in seconds Can take values from 5 to 3600 inclusively Integer nat keepalive Example config crypto ike nat keepalive 20 IpSec...

Страница 44: ...escription Set lifetime of IPsec IKE association By default the value 86400 is used Command with no prefix resets setting to default Prefix no Yes Change settings Yes Multiple input No Synopsis config...

Страница 45: ...mode set to ikev1 History Version Description The crypto ike policy mode command has been introduced 2 06 3 9 3 crypto ike policy negotiation mode Description Set exchange mode for IKEv1 see crypto i...

Страница 46: ...ue for data exchange on the IKE protocol Command with no prefix removes reference on IKE proposal Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ike policy proposal proposal conf...

Страница 47: ...Latin letters numbers dots hyphens and underscores are acceptable String name Example config crypto ike proposal test IpSec Manager Crypto ike proposal test successfully created History Version Descr...

Страница 48: ...n Description Add the selected type of encryption to IKE proposal The order of adding has a value for data exchange on the IKE protocol Command with no prefix removes the selected type of encryption P...

Страница 49: ...no prefix removes the selected algorithm Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ike proposal integrity integrity config ike proposal no integrity integrity Arguments Des...

Страница 50: ...Value Argument IPsec transformation name Latin letters numbers dots hyphens and underscores are acceptable String name Example config crypto ipsec transform set test IpSec Manager Crypto ipsec transf...

Страница 51: ...oduced 2 06 3 11 2 crypto ipsec transform set dh group Description Add the selected DH group to IPsec transformation to work in the PFS mode The order of adding has a value for data exchange on the IK...

Страница 52: ...rotocol Command with no prefix removes the selected algorithm Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ipsec transform hmac hmac config ipsec transform no hmac hmac Argumen...

Страница 53: ...m lifetime 8640 IpSec Manager Crypto ipsec transform set test lifetime set to 8640 s History Version Description The crypto ipsec transform set lifetime command has been introduced 2 06 3 12 crypto ip...

Страница 54: ...g to default Prefix no Yes Change settings Yes Multiple input No Synopsis config ipsec profile authentication local auth config ipsec profile no authentication local Arguments Description Value Argume...

Страница 55: ...Description The crypto ipsec profile authentication remote command has been introduced 2 06 3 12 3 crypto ipsec profile dpd interval Description Set parameters of method to detect a dead IKE peer By...

Страница 56: ...a local identifier of IPsec profile Command with no prefix removes the local identifier Prefix no Yes Change settings Yes Multiple input No Synopsis config ipsec profile identity local type id config...

Страница 57: ...address ID type is full domain name fqdn ID type is domain name dn ID type is e mail address email Remote host ID value String id Allow usage of any remote host Keyword any Example config ipsec profil...

Страница 58: ...profile mode command has been introduced 2 06 3 12 7 crypto ipsec profile policy Description Set the reference to existing IKE policy see crypto ike policy command Command with no prefix removes the r...

Страница 59: ...value String preshare key Example config ipsec profile preshared key testkey IpSec Manager Crypto ipsec profile test preshared key was set History Version Description The crypto ipsec profile preshare...

Страница 60: ...s Yes Multiple input No Synopsis config ipsec profile xauth identity identity config ipsec profile no xauth identity Arguments Description Value Argument Login for XAuth client mode String identity Ex...

Страница 61: ...2 06 3 13 crypto map Description Access to a group of commands to configure selected IPsec crypto map If crypto map is not found the command tries to create it Command with no prefix removes crypto m...

Страница 62: ...o Yes Change settings Yes Multiple input No Synopsis config crypto map connect config crypto map no connect Example config crypto map connect IpSec Manager Crypto map test autoconnect enabled History...

Страница 63: ...ents Description Value Argument Period of checking in seconds Can take values from 60 to 86400 Integer interval value Example config crypto map fallback check interval 120 IpSec Manager Crypto map tes...

Страница 64: ...ence Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto map match address access list config crypto map no match address Arguments Description Value Argument Packet filtering r...

Страница 65: ...r IPsec connection Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto map set peer remote ip config crypto map no set peer Arguments...

Страница 66: ...name of remote host String remote ip Example config crypto map set peer fallback test com IpSec Manager Crypto map test fallback remote peer is set to test com History Version Description The crypto m...

Страница 67: ...er of SYN packets exceeds the specified limit command changes it Path MTU Discovery mode allows automatically identifiy MSS limit Command with no prefix removes all limits from MSS Prefix no Yes Chang...

Страница 68: ...set transformations with help of transform set command Example config crypto map set transform test IpSec Manager Crypto map test ipsec transform set is set to test History Version Description The cr...

Страница 69: ...the corresponding access list will be ignored By default the setting is disabled Command with no prefix disables the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto...

Страница 70: ...o clients in Virtual IP server mode Command with no prefix removes the range Prefix no Yes Change settings Yes Multiple input No Synopsis config crypto map virtual ip range begin end size config crypt...

Страница 71: ...y bantime Description Set bantime for DNS server By default 30000 value is used Command with no prefix resets bantime to default Prefix no Yes Change settings Yes Multiple input No Synopsis config dns...

Страница 72: ...illiseconds 1 week Integer max ttl Example config dnspx max ttl 10000 Dns Proxy Dns proxy set max ttl to 10000 config dnspx no max ttl Dns Proxy Dns proxy max ttl cleared History Version Description T...

Страница 73: ...o ban DNS server By default 3 value is used All DNS servers can not be banned Command with no prefix resets threshold to default Prefix no Yes Change settings Yes Multiple input No Synopsis config dns...

Страница 74: ...s String name History Version Description The dyndns profile command has been introduced 2 00 3 15 1 dyndns profile domain Description Assign permanent domain name to the computer You need to register...

Страница 75: ...ument The password for authentication Maximum password length is 64 characters String password Example config dyndns password 1234 DynDns Profile test password saved History Version Description The dy...

Страница 76: ...ption Value Argument type Used if the domain name was registered on the dyndns com 3 site dyndns Used if the domain name was registered on the no ip com 4 site noip Used if the domain name was registe...

Страница 77: ...hours Integer hours Interval time in minutes Integer minutes Interval time in seconds Integer seconds Example config dyndns update interval 7 days DynDns Profile a timeout set to 604800 History Versi...

Страница 78: ...fig dyndns username test_user DynDns Profile test username saved History Version Description The dyndns profile username command has been introduced 2 00 3 16 interface Description Access to a group o...

Страница 79: ...entication support Command with no prefix disables CHAP Prefix no Yes Change settings Yes Multiple input No Interface type Secure Synopsis config if authentication chap config if no authentication cha...

Страница 80: ...Prefix no Yes Change settings Yes Multiple input No Interface type Secure Synopsis config if authentication eap ttls config if no authentication eap ttls Example config if authentication eap ttls EAP...

Страница 81: ...identity command has been introduced 2 00 3 16 5 interface authentication mschap Description Enable MS CHAP authentication support Command with no prefix disables MS CHAP Prefix no Yes Change settings...

Страница 82: ...Description The interface authentication mschap v2 command has been introduced 2 00 3 16 7 interface authentication pap Description Enable PAP authentication support Command with no prefix disables P...

Страница 83: ...rd Example config if authentication password 1234 Password saved History Version Description The interface authentication password command has been introduced 2 00 3 16 9 interface authentication shar...

Страница 84: ...e WiFi Synopsis config if authentication wpa psk psk config if no authentication wpa psk Arguments Description Value Argument Pre agreed key in the form of a 256 bit hexadecimal number which consists...

Страница 85: ...istory Version Description The interface bandwidth limit command has been introduced 2 06 3 16 12 interface ccp Description Enable CCP support during establishing connection Command with no prefix dis...

Страница 86: ...alue Argument channel Number of radio channel number Radio channel number is detected automatically auto Example config if channel 8 Channel saved History Version Description The interface channel com...

Страница 87: ...ied channel By default 40 below value is used Command with no prefix resets to default Prefix no Yes Change settings Yes Multiple input No Interface type Radio Synopsis config if channel width width c...

Страница 88: ...bility lines is defined by the hardware capabilities of a particular adapter and provisions of the relevant additions to the IEEE 802 11 standard By default BGN value is used for 2 4 GHz Prefix no No...

Страница 89: ...ced 2 00 3 16 18 interface country code Description Assign to the interface a literal country code which influences the set of radio channels By default RU value is used Prefix no No Change settings Y...

Страница 90: ...n Description The interface debug command has been introduced 2 00 3 16 20 interface description Description Assign arbitrary descrption to the specified network interface Command with no prefix delet...

Страница 91: ...ig if no down Example config if down Interface disabled History Version Description The interface down command has been introduced 2 00 3 16 22 interface duplex Description Set the duplex mode of the...

Страница 92: ...ltiple input No Synopsis config if dyndns profile profile config if no dyndns profile Arguments Description Value Argument The name of DynDns profile String profile Example config if dyndns profile te...

Страница 93: ...isable Description Disable encryption on the wireless interface Prefix no No Change settings Yes Multiple input No Interface type WiFi Synopsis config if encryption disable Example config if encryptio...

Страница 94: ...bit WEP uses a 26 hexadecimal characters 13 characters ASCII Overall there can be 1 to 4 encryption keys with one of them default key must be assigned Command with no prefix removes key Prefix no Yes...

Страница 95: ...fig if no encryption mppe Example config if encryption mppe MPPE enabled History Version Description The interface encryption mppe command has been introduced 2 00 3 16 29 interface encryption wpa Des...

Страница 96: ...when any of the WPA is enabled Command with no prefix disables WPA2 support Prefix no Yes Change settings Yes Multiple input No Interface type WiFi Synopsis config if encryption wpa2 config if no enc...

Страница 97: ...ontrol command has been introduced 2 08 3 16 32 interface hide ssid Description Enable hidden SSID mode When using this feature Access Point will not be displayed in the list of available wireless net...

Страница 98: ...opsis config if igmp downstream config if no igmp downstream Example config if igmp downstream added downstream interface ISP History Version Description The interface igmp downstream command has been...

Страница 99: ...hange settings Yes Multiple input No Interface type IP Synopsis config if igmp upstream config if no igmp upstream Example config if igmp upstream upstream role assigned to ISP History Version Descrip...

Страница 100: ...ask and IP aliases On removing either the bridge itself or the bridge interface these settings even if they have been changed will be copied back to the vacant interface The command allows one to add...

Страница 101: ...s Interface type IP Synopsis config if ip access group acl direction config if no ip access group acl direction Arguments Description Value Argument List of filtering rules as previously created using...

Страница 102: ...nd the prefix with bit length for example 24 Example The network address defined by the IP address and mask can specified in either of the two ways specify a mask in the canonical form or set the pref...

Страница 103: ...hostname hostname config if no ip address dhcp Arguments Description Value Argument Name of the host to be placed in the DHCP option 12 field This name need not be the String hostname same as the host...

Страница 104: ...terface ip adjust ttl command has been introduced 2 00 Keyword set was added 2 09 3 16 42 interface ip adjust ttl send Description Modify the TTL for all packets of outgoing interface connections Comm...

Страница 105: ...Arguments Description Value Argument Additional address of the network interface IP address address Additional mask of the network interface There are two ways to specify the mask IP mask mask the can...

Страница 106: ...02 3 16 45 interface ip dhcp client debug Description Enable debug mode for DHCP client Detailed info about DHCP client working is saved to the system log Command with no prefix disables the debug mo...

Страница 107: ...lace interface Arguments Description Value Argument Name or alias of the interface whose static address will be displaced Interface name interface Example config if ip dhcp client displace Home Dhcp C...

Страница 108: ...ce type Ethernet Synopsis config if ip dhcp client fallback type config if no ip dhcp client fallback Arguments Description Value Argument The type of IP address Currently implemented only one type st...

Страница 109: ...p dhcp client name servers Description Use DNS server addresses which are received via DHCP This function is enabled by default Command with no prefix denies using of DNS server addresses which are re...

Страница 110: ...s released History Version Description The interface ip dhcp client release command has been introduced 2 03 3 16 52 interface ip dhcp client renew Description DHCP client releases lease IP address an...

Страница 111: ...l Description Set property global with a parameter to the interface This property is necessary to configure the default route DynDNS Client and NAT functioning Can represent global interfaces as leadi...

Страница 112: ...and with no prefix cancels the command Prefix no Yes Change settings Yes Multiple input No Interface type PPP Synopsis config if ip mru mru config if no ip mru Arguments Description Value Argument MRU...

Страница 113: ...fig if ip mtu 5000 MTU saved History Version Description The interface ip mtu command has been introduced 2 00 3 16 57 interface ip remote Description Set a remote peer static address Prefix no Yes Ch...

Страница 114: ...e IP Synopsis config if ip tcp adjust mss pmtu mss config if no ip tcp adjust mss Arguments Description Value Argument Set the upper limit of MSS equal to the minimum MTU along the path to the remote...

Страница 115: ...mmand with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Interface type PPP Synopsis config if ipcp dns routes config if no ipcp dns routes Example config if ipcp d...

Страница 116: ...IP headers by Van Jacobson s method Command with no prefix disables compression Prefix no Yes Change settings Yes Multiple input No Interface type PPP Synopsis config if ipcp vj cid config if no ipcp...

Страница 117: ...and SHA1 normal Level is compatible with most systems priority is given to 3DES and SHA1 normal 3des The strongest level PFS is mandatory priority is given to AES256 and SHA1 strong The same as weak b...

Страница 118: ...ion The interface ipsec ignore command has been introduced 2 10 3 16 65 interface ipsec ikev2 Description Enable IKEv2 protocol for IPSec connection that is automatically associated with the tunnel By...

Страница 119: ...Argument Secret PSK key value String key Example config if ipsec preshared key 12345678 Network Interface Secure Gre0 preshared key was set config if no ipsec preshared key Network Interface Secure Gr...

Страница 120: ...interface to be used as default IPv6 gateway By default the setting is disabled Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config if ipv6 f...

Страница 121: ...name servers command has been introduced 2 00 3 16 70 interface ipv6 prefix Description Configure prefix delegation When auto is set prefix is requested via DHCPv6 PD Command with no prefix removes t...

Страница 122: ...if ipv6cp IPv6CP enabled History Version Description The interface ipv6cp command has been introduced 2 00 3 16 72 interface lcp acfc Description Enable compression negotiation of the Data Link Layer...

Страница 123: ...echo interval count adaptive config if no lcp echo Arguments Description Value Argument Interval between sending LCP echo in seconds If within the specified time Integer interval interval there is no...

Страница 124: ...ynopsis config if lcp pfc cid config if no lcp pfc Arguments Description Value Argument Enable compression of Connection ID into headers Keyword cid Example config if lcp pfc cid PFC compression enabl...

Страница 125: ...0 3 16 76 interface mac access list type Description Set the type for filtering list of the interface Type is not defined by default none value assigned Prefix no No Change settings Yes Multiple input...

Страница 126: ...rface Warning Change MAC address on Wi Fi interface is prohibited Prefix no Yes Change settings Yes Multiple input No Interface type MAC Synopsis config if mac address address config if no mac address...

Страница 127: ...he interface Prefix no No Change settings Yes Multiple input No Interface type MAC IP Synopsis config if mac clone Example config if mac clone MAC address saved History Version Description The interfa...

Страница 128: ...Description Assign Ping Check profile to the interface Command with no prefix cancels the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config if ping check profile profile con...

Страница 129: ...ription Value Argument The transmitter power as the percentage of the maximum power from 1 to 100 Integer power Example config if power 90 Power level applied History Version Description The interface...

Страница 130: ...config if preamble short Short preamble enabled History Version Description The interface preamble short command has been introduced 2 00 3 16 85 interface rekey interval Description Set the period of...

Страница 131: ...with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config if rename rename config if no rename Arguments Description Value Argument New interface name Stri...

Страница 132: ...tions coming to the public interface i e in the direction public private and public public The device itself accepts network connections allows control only from private interfaces Data transfer betwe...

Страница 133: ...tion are the functions designed to solve fundamentally different problems Enabling NAT between Home and PPPoE0 interfaces in the configuration shown above does not prohibit access to the network Home...

Страница 134: ...settings Yes Multiple input No Interface type Ethernet Synopsis config if speed nonegotiate config if no speed nonegotiate Example config if speed nonegotiate Network Interface Ethernet GigabitEthern...

Страница 135: ...Wireless Network Name SSID String ssid SSID will be assigned automatically Keyword auto Example config if ssid WIRELESS SSID saved History Version Description The interface ssid command has been intr...

Страница 136: ...orwarding of downstream traffic from a different VLAN called friend Friend packets are transmitted without a tag Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple i...

Страница 137: ...ch is set with switchport access command The port is an output one only for VLAN with PVID ID Once a frame is transferred to the port the VLAN marker gets removed Enable the VLAN trunk mode that is th...

Страница 138: ...g if no switchport trunk vlan vid Arguments Description Value Argument VLAN ID Can take values from 1 to 4094 inclusively Integer vid Example config if switchport trunk vlan 100 Network Interface Swit...

Страница 139: ...p of commands to configure TSP Command with no prefix disables TSP Prefix no Yes Change settings Yes Multiple input No Interface type TunnelSixInFour Group entry config if tsp Synopsis config if tsp c...

Страница 140: ...es Multiple input No Interface type TunnelSixInFour Synopsis config if tsp prefix length length config if tsp no prefix length Arguments Description Value Argument Prefix length Can only take values 4...

Страница 141: ...ttings Yes Multiple input No Interface type TunnelSixInFour Synopsis config if tsp user user config if tsp no user Arguments Description Value Argument TSP username String user History Version Descrip...

Страница 142: ...if no tunnel destination Network Interface Tunnel Gre0 destination was reset History Version Description The interface tunnel destination command has been introduced 2 08 3 16 99 interface tunnel eoi...

Страница 143: ...sets the setting Prefix no Yes Change settings Yes Multiple input No Interface type Tunnel Synopsis config if tunnel source auto interface address config if no tunnel source Arguments Description Valu...

Страница 144: ...ion The interface tx burst command has been introduced 2 07 3 16 102 interface tx queue Description Set the size of the queue of outgoing packets on the interface By default 1000 is set Command with n...

Страница 145: ...enabled History Version Description The interface up command has been introduced 2 00 3 16 104 interface usb power cycle Description Turn off power on the usb modem for a specified period of time Thi...

Страница 146: ...g if wmm WMM extensions enabled History Version Description The interface wmm command has been introduced 2 00 3 16 106 interface wps Description Enable WPS functionality Prefix no Yes Change settings...

Страница 147: ...e interface wps auto self pin command has been introduced 2 04 3 16 108 interface wps button Description Start WPS process using a software button Process takes 2 minutes or until the first connection...

Страница 148: ...Receive WiFi configuration from Keenetic Lite receive PIN code of the remote peer String pin Example config if wps peer receive 99586683 Receiving WiFi configuration process started peer PIN mode His...

Страница 149: ...es entry from ARP table If you use no arguments the whole list of ARP entrys will be removed Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ip arp ip mac config no ip arp ip Argu...

Страница 150: ...String class Example config ip dhcp class STB One Dhcp Server Vendor class STB One has been created History Version Description The ip dhcp class command has been introduced 2 00 3 18 1 ip dhcp class...

Страница 151: ...eaving the old value IP address and vice versa to change the IP address leaving the old MAC address value intact Command with no prefix removes the host Prefix no Yes Change settings Yes Multiple inpu...

Страница 152: ...2 characters Note In the current version of the system no more than one pool per interface is supported For DHCP server to function correctly it is required that the range of IP addresses set by range...

Страница 153: ...istory Version Description The ip dhcp pool bind command has been introduced 2 00 3 20 2 ip dhcp pool class Description Access to a group of commands to configure DHCP vendor class for selected pool I...

Страница 154: ...iple input Yes Synopsis config dhcp pool class option number type data config dhcp pool class no option number Arguments Description Value Argument number 6 option DNS server 6 42 option NTP server 42...

Страница 155: ...specified the address of the Ethernet interface determined automatically for a given range range will be used Command with no prefix cancels the setting Prefix no Yes Change settings Yes Multiple inpu...

Страница 156: ...DNS server IP address address1 Address of secondary DNS server IP address address2 Example config dhcp pool dns server 192 168 1 88 pool test_pool name server list has been saved History Version Desc...

Страница 157: ...s Yes Multiple input No Synopsis config dhcp pool enable config dhcp pool no enable Example config dhcp pool enable Dhcp Server pool 111 is enabled History Version Description The ip dhcp pool enable...

Страница 158: ...he chosen interface is used as the default gateway and DNS server if other addresses are not specified using commands ip dhcp pool default router and ip dhcp pool dns server Command with no prefix rem...

Страница 159: ...S update has been enabled History Version Description The ip dhcp pool update dns command has been introduced 2 06 3 20 11 ip dhcp pool wpad Description Configure DHCP option 252 WPAD protocol By defa...

Страница 160: ...Multiple input Yes Synopsis config ip dhcp relay lan interface config no ip dhcp relay lan interface Arguments Description Value Argument Full name or an alias of Ethernet interface through which DHC...

Страница 161: ...act address of the server is not specified see ip dhcp relay server the requests will be broadcasted It is recommended to specify server address Command with no prefix removes the setting Prefix no Ye...

Страница 162: ...ger Added static record for zydata local address 192 168 1 22 config no ip host zydata local 192 168 1 22 Dns Manager Record zydata local address 192 168 1 22 deleted History Version Description The i...

Страница 163: ...very Manager Subnetwork scanning on interface WifiMaster0 AccessPoint1 is enabled config hotspot auto scan no interface WifiMaster0 AccessPoint1 Hotspot Discovery Manager Subnetwork scanning on interf...

Страница 164: ...ate in hosts per seconds Command with no prefix resets setting to default Prefix no Yes Change settings Yes Multiple input No Interface type IP Synopsis config hotspot auto scan passive rate hps confi...

Страница 165: ...an timeout 31 Hotspot Discovery Manager Auto scan host offline timeout is set to 31 s config hotspot auto scan no timeout Hotspot Discovery Manager Auto scan host offline timeout reset to default Hist...

Страница 166: ...hotspot default policy command has been introduced 2 09 3 25 6 ip hotspot host Description Setup bypass or block rules for specific Hotspot clients Host rules override interface based policy Section...

Страница 167: ...to host 54 e4 3a 8a f3 a7 History Version Description The ip hotspot host command has been introduced 2 06 3 25 7 ip hotspot policy Description Define the Hotspot policy for a specific interface Polic...

Страница 168: ...troduced 2 06 3 25 8 ip hotspot wake Description Send Wake on LAN packet to private and protected interfaces of the host Prefix no No Change settings No Multiple input No Interface type IP Synopsis co...

Страница 169: ...ger duration Duration of suspicious activity observation in minutes By default 3 value is used Integer observation window Example config ip http lockout policy 10 30 2 Http Manager Bruteforce detectio...

Страница 170: ...proxy Prefix no Yes Change settings Yes Multiple input Yes Group entry config http proxy Synopsis config ip http proxy name config no ip http proxy name Arguments Description Value Argument HTTP proxy...

Страница 171: ...tp proxy domain Description Set domain name that specifies the FQDN of the virtual host Command with no prefix removes the setting Prefix no Yes Change settings Yes Multiple input No Synopsis config h...

Страница 172: ...The ip http proxy domain ndns command has been introduced 2 08 3 28 4 ip http proxy upstream Description Set HTTP server address for request redirecting Command with no prefix removes the setting Pref...

Страница 173: ...e HTTP server is allowed for public private and protected interfaces Keyword public Access to the HTTP server is allowed for private interfaces Keyword private Access to the HTTP server is allowed for...

Страница 174: ...NS addresses static settings will be active However if after registering dynamic addresses the static settings are changed by the user they become active until the new dynamic addresses are registered...

Страница 175: ...s of network network or network behind the interface interface For example command ip nat Home means that all packets from the network Home passing through the router will undergo IP spoofing Prefix n...

Страница 176: ...ule added History Version Description The ip nat vpn command has been introduced 2 04 3 34 ip route Description Add a static route to the routing table to describe a rule of IP packets transmission th...

Страница 177: ...channel connected that requires no additional addressing within the channel If priority interface ip global is set on the interface the route is added to the system table only if there is no other hig...

Страница 178: ...c then the destination address translation DNAT will occure If to address corresponds to the interface with secutity level public then source address translation SNAT will occure TCP UDP port number i...

Страница 179: ...ing requests will be translated The end of the range of ports Integer end port The destination address after translation IP address to address TCP UDP port number after translation If one is not speci...

Страница 180: ...parameters for public interfaces By default feature is enabled Command with no prefix disables bruteforce detection Prefix no Yes Change settings Yes Multiple input No Interface type IP Synopsis conf...

Страница 181: ...ort number is used Command with no prefix resets port number to default Prefix no Yes Change settings Yes Multiple input No Synopsis config telnet port number config telnet no port Arguments Descripti...

Страница 182: ...ption The ip telnet security level command has been introduced 2 08 3 37 4 ip telnet session max count Description Set the maximal number of simultaneous sessions for telnet connection By default 4 is...

Страница 183: ...ent The lifetime of inactive session Can take values from 5 to 2 32 1 seconds inclusively Integer timeout Example config telnet session timeout 6 Telnet Server a session timeout value set to 6 seconds...

Страница 184: ...00 Kbps History Version Description The ip traffic shape host command has been introduced 2 05 The schedule argument was added 2 08 3 39 ipv6 firewall Description Enable IPv6 firewall By default the s...

Страница 185: ...S server IPv6 addresses Addresses saved in this fashion are called static as opposite to dynamic as registered by PPP or DHCP services ipv6 name server command can be entered multiple times if several...

Страница 186: ...eters Prefix no Yes Change settings Yes Multiple input Yes Synopsis config ipv6 route prefix default interface config no ipv6 route prefix default interface Arguments Description Value Argument IPv6 p...

Страница 187: ...nd the subnet to an interface Command with no prefix cancels binding Prefix no Yes Change settings Yes Multiple input No Synopsis config subnet bind interface config subnet no bind interface Arguments...

Страница 188: ...able SLAAC stateless autoconfiguration slaac Enable DHCPv6 server stateful autoconfiguration dhcp Example config subnet mode slaac Mode changed History Version Description The ipv6 subnet mode command...

Страница 189: ...The ipv6 subnet stateless dhcp command has been introduced 2 00 3 44 isolate private Description Prohibit data transfer between any interfaces with security level private Command with no prefix cance...

Страница 190: ...osts new host 123 has been created History Version Description The known host command has been introduced 2 00 3 46 ndns Description Access to a group of commands to manage KeenDNS service Prefix no N...

Страница 191: ...red on the cloud server IP address HTTP traffic is tunneled to the Keenetic Lite cloud Hostname is registered on the Keenetic Lite WAN address direct Code for domain transmission to another Keenetic d...

Страница 192: ...alt Binary jZnm2OcHFB9fT3pJ dst 148 251 63 154 17047 MsgCack t 444 item hl false o lock reply d Success prepare NDSS key Binary yPrQwfa 4yn676wk alt Binary SyptNue2bys mxiO dst 91 218 112 165 16047 M...

Страница 193: ...k name name Arguments Description Value Argument The hostname for allocation String name Example ndns check name testname list item name testname domain mykeenetic by available no item name testname d...

Страница 194: ...Name Delete DNS Hostname Booking code 200 icon tick hl true layout message client geo RU ip 81 200 27 56 format clean date 2016 09 22T10 52 35 685Z standalone false reason The name is un booked detail...

Страница 195: ...hxe5EtXyc alt Binary t JluEWuGguJ 28h dst 46 105 148 81 17047 MsgCack t 161 item hl false o lock reply d Success prepare NDSS key Binary SyptNue2bys mxiO alt Binary yPrQwfa 4yn676wk dst 148 251 129 15...

Страница 196: ...tle Domain Name field name address title IP Address field name updated title Updated type date variant date field name access title Access Mode default unknown field name transfer title Transfer name...

Страница 197: ...e 2016 09 22T12 07 32 746Z standalone false menu src index __auth force __role context menu ref 2fndns 2fupdateBooking fields field name name title Public Name field name domain title Domain Name fiel...

Страница 198: ...ynopsis config ntce shaping config no ntce shaping Example config ntce shaping Ntce Manager Shaping enabled History Version Description The ntce shaping command has been introduced Previous command na...

Страница 199: ...server 2 ru pool ntp org server 2 ru pool ntp org has been added History Version Description The ntp server command has been introduced 2 00 3 50 ntp sync period Description Set a period for time sin...

Страница 200: ...config no opkg chroot Opkg Manager Chroot disabled History Version Description The opkg chroot command has been introduced 2 05 C 3 3 52 opkg disk Description Configure partition for opkg software Th...

Страница 201: ...ription Disable DNS proxy when opkg disk is mounted DNS override allows to replace embedded DNS proxy with a custom service such as BIND or Dnsmasq Command with no prefix disables DNS override Prefix...

Страница 202: ...gured init script opt etc init d rc unslung config no opkg initrc Opkg Manager Init script reset to default opt etc initrc History Version Description The opkg initrc command has been introduced 2 05...

Страница 203: ...ig opkg timezone UTC Opkg Manager Enabled timezone UTC config no opkg timezone Opkg Manager Timezone reset to undefined History Version Description The opkg timezone command has been introduced 2 05 C...

Страница 204: ...r address of remote host Host name hostname Example config pchk host 8 8 8 8 PingCheck Profile profile TEST uses host 8 8 8 8 for testing History Version Description The ping check profile host comman...

Страница 205: ...t by obtaining of which the Internet at the interface considered present By default value 1 is used Command with no prefix resets to default Prefix no Yes Change settings Yes Multiple input No Synopsi...

Страница 206: ...e by TCP connection establishing to specified port connect Example config pchk mode connect PingCheck Profile profile TEST uses connect mode History Version Description The ping check profile mode com...

Страница 207: ...config pchk power cycle PingCheck Profile profile 123 enable usb power cycle History Version Description The ping check profile power cycle command has been introduced 2 04 3 56 7 ping check profile...

Страница 208: ...hk no timeout Arguments Description Value Argument Response time in seconds Can take values from 1 to 10 inclusively Integer time Example config pchk timeout 4 PingCheck Profile profile TEST timeout i...

Страница 209: ...th no prefix disables specified accelerator Prefix no Yes Change settings Yes Multiple input No Synopsis config ppe engine config no ppe engine Arguments Description Value Argument engine Software acc...

Страница 210: ...d History Version Description The pppoe pass command has been introduced 2 00 3 59 schedule Description Access to a group of commands to configure the schedule If the schedule is not found the command...

Страница 211: ...Action of the beginning start Action of the end stop The minutes Integer min The hours Integer hour Days of the week separated by commas 0 and 7 mean Sunday means daily Integer dow Example config sche...

Страница 212: ...h Command with no prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis config service cloud control config no service cloud control Example config service cloud contro...

Страница 213: ...hin the network As soon as there are enough settings the service will be enabled automatically Command with no prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis con...

Страница 214: ...fig service http config no service http Example config service http HTTP server enabled History Version Description The service http command has been introduced 2 00 3 65 service igmp proxy Descriptio...

Страница 215: ...prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis config service ipsec config no service ipsec Example config service ipsec IpSec Manager Service enabled History V...

Страница 216: ...Change settings Yes Multiple input No Synopsis config service ntp client config no service ntp client Example config service ntp client NTP client enabled History Version Description The service ntp...

Страница 217: ...gure the device Command with no prefix stops the service Prefix no Yes Change settings Yes Multiple input No Synopsis config service telnet config no service telnet Example config service tel Telnet s...

Страница 218: ...ltiple input No Synopsis config service upnp config no service upnp History Version Description The service upnp command has been introduced 2 00 3 73 service vpn server Description Enable VPN server...

Страница 219: ...ations Description Show list of wireless stations associated with an access point If you use no argument the entire list of wireless stations will be displayed Prefix no No Change settings No Multiple...

Страница 220: ...mode 11n gi 800 rssi 41 mcs 15 History Version Description The show associations command has been introduced 2 00 3 74 2 show clock date Description Show the current system date Prefix no No Change se...

Страница 221: ...no No Change settings No Multiple input No Synopsis show clock timezone list Example show clock timezone list timezones tz locality Adak stdoffset 36000 dstoffset 32400 tz locality Aden stdoffset 108...

Страница 222: ...Name of selected IKE key String name Example show crypto ike key IpSec ike_key name test type address id 10 10 10 10 ike_key name test2 type any id History Version Description The show crypto ike key...

Страница 223: ...true phase1 name test unique_id 572 ike_state ESTABLISHED establish_time 1451301596 rekey_time 0 reauth_time 1451304277 local_addr 10 10 10 15 remote_addr 10 10 10 20 ike_version 2 local_spi 00a6ebfc...

Страница 224: ...on the interface To manage 802 1 client status on the interface authentication must be configured with interface authentication group of commands Prefix no No Change settings No Interface type Etherne...

Страница 225: ...Example show drivers module name rt2860v2_sta size 546736 used 0 subs module name rt2860v2_ap size 554192 used 2 subs module name rndis_host size 5024 used 0 subs module name dwc_otg size 68416 used...

Страница 226: ...e status of switch ports The command show interface displays different information depending on the interface type In particular for FastEthernet0 Vlan1 switch it shows current state of physical ports...

Страница 227: ...alue Argument Full name or an alias of the interface to display Interface name name Output Value Element Root node members Interface name interface Link state of interface link Attribute of inheritanc...

Страница 228: ...nnels Record number in the list channel index Channel number number Ability to expand channel above ext 40 above Ability to expand channel below ext 40 below Ability to expand channel up to 80 MHz vhc...

Страница 229: ...channel index 7 number 8 ext 40 above yes ext 40 below yes vht 80 yes History Version Description The show interface channels command has been introduced 2 03 3 74 11 show interface country codes Des...

Страница 230: ...code AL country Albania country code code DZ country Algeria country code code AR country Argentina country code code AM country Armenia country code code AU country Australia History Version Descrip...

Страница 231: ...6 0 00 30 48 93 91 a7 6 0 f0 c1 f1 95 c3 fb 5 0 b8 ca 3a 8a c7 43 6 0 ec 43 f6 da 78 79 5 0 10 7b ef 59 7b 61 2 0 ec 43 f6 ff f8 8b 6 0 58 8b f3 65 8c 91 5 0 ec 43 f6 cf 0e ef 2 0 00 ee bd a1 18 51 6...

Страница 232: ...020 FFFF 0x0022 FFC1 0x0024 9201 0x0026 FFFF 0x0028 43EC 0x002A 04F6 0x002C 052B 0x002E FFFF 0x0030 758E 0x0032 4301 0x0034 FF22 0x0036 0025 0x0038 FFFF 0x003A 012D 0x003C FFFF 0x003E FAD9 0x0040 88CC...

Страница 233: ...nt0 stat rxpackets 137033 rxbytes 23915722 rxerrors 0 rxdropped 0 txpackets 847802 txbytes 1192583473 txerrors 0 txdropped 0 timestamp 11754 721178 History Version Description The show interface stat...

Страница 234: ...ce wps status Description Show the access point WPS status Prefix no No Change settings No Multiple input No Interface type WiFi Synopsis show interface name wps status Arguments Description Value Arg...

Страница 235: ...isplay the contents of the ARP cache Prefix no No Change settings No Multiple input No Synopsis show ip arp Example show ip arp IP MAC Interface 192 168 75 209 9c b7 0d 91 e7 31 Home 82 135 72 150 00...

Страница 236: ...s show ip dhcp bindings pool Arguments Description Value Argument The pool name String pool Example show ip dhcp bindings _WEBADMIN lease ip 192 168 15 211 mac 00 26 c7 4a e0 16 expires 289 hostname l...

Страница 237: ...lease default yes 25200 state down debug no History Version Description The show ip dhcp pool command has been introduced 2 03 3 74 20 show ip hotspot Description Show hotspot hosts Prefix no No Chang...

Страница 238: ...mcs 7 host mac 20 aa 4b 5c 09 0e via 20 aa 4b 5c 09 0e ip 192 168 1 51 hostname Julia PC name interface id Bridge0 name Home description Home network Wired and wireless hosts expires 212967 registered...

Страница 239: ...ample show ip name server server address 82 131 72 251 domain global no server address 82 131 72 15 domain global no server address 82 132 76 130 domain zydata ru global yes History Version Descriptio...

Страница 240: ...2 44423 82 138 7 164 6482 16 tcp 10 1 30 34 46655 96 55 147 21 443 2 96 55 147 21 443 82 138 7 164 46655 0 udp 10 1 30 34 6482 213 199 179 158 40006 1 213 199 179 158 40006 82 138 7 164 6482 1 History...

Страница 241: ...Home 0 History Version Description The show ip route command has been introduced 2 00 3 74 24 show ipsec Description Show info about IPsec IKE strongSwan service status Prefix no No Change settings N...

Страница 242: ...HA1_96 PRF_HMAC_SHA1 MODP_1024 test 304 INSTALLED TUNNEL reqid 185 ESP in UDP SPIs ca59bfcf_i cde23d83_o test 304 AES_CBC_256 HMAC_SHA1_96 10055 bytes_i 164 pkts 0s ago 10786 bytes_o 139 pkts 0s ago r...

Страница 243: ...x no No Change settings No Multiple input No Synopsis show ipv6 prefixes Example show ipv6 prefixes prefix prefix 2001 db8 64 interface ISP valid lifetime infinite preferred lifetime infinite prefix p...

Страница 244: ...interface Home route_ destination fd01 db8 43 64 gateway interface Home History Version Description The show ipv6 routes command has been introduced 2 00 3 74 28 show last change Description Show when...

Страница 245: ...g normal operation I Jul 12 12 08 40 wmond WifiMaster0 AccessPoint0 STA d8 b3 77 36 05 c1 occurred MIC different in key handshaking I Jul 12 12 08 40 radvd 228 attempting to reread config file I Jul 1...

Страница 246: ...yes access direct ttp direct yes interface GigabitEthernet1 address 41 189 34 56 History Version Description The show ndns command has been introduced 2 07 3 74 31 show netfilter Description Show inf...

Страница 247: ...he show ntce hosts command has been introduced Previous command name is show dpi hosts 2 09 3 74 33 show ntp status Description Show NTP system settings NTP state general info The time elapsed since t...

Страница 248: ...splays information about all profiles Prefix no No Change settings No Multiple input No Synopsis show ping check profile_name Arguments Description Value Argument Profile name String profile_name Exam...

Страница 249: ...ip_conntrack_tcp_timeout_established 1200 set net ipv4 netfilter ip_conntrack_udp_timeout 60 set net ipv4 tcp_fin_timeout 30 set net ipv4 tcp_keepalive_time 120 set net ipv6 conf all forwarding 1 host...

Страница 250: ...0 up interface PPTP0 description Office VPN peer crypton zydata ru lcp echo 30 3 ipcp default route ipcp name servers ccp security level public authentication identity 00441 authentication password 12...

Страница 251: ...24ba6e5c1fec3957e587a21535b tag cli tag cifs tag http tag ftp user test password md5 baadfb946f5d516379cfd75e31e409d9 tag readonly service dhcp service dns proxy service ftp service cifs service http...

Страница 252: ...ple input No Interface type Radio Synopsis show site survey name Arguments Description Value Argument Full name or an alias of the interface You can see the list of available interfaces with help of s...

Страница 253: ...how system Example config show system hostname Undefined domainname WORKGROUP cpuload 0 memory 13984 28976 swap 0 0 uptime 153787 History Version Description The show system command has been introduce...

Страница 254: ...l will be displayed tcp Rules with UDP protocol will be displayed udp Rules with specified interface name will be displayed Interface name interface Rules with specified port will be displayed Integer...

Страница 255: ...mware_progress components ddns dot1x interface extras miniupnpd nathelper ftp nathelper pptp nathelper sip ppe trafficcontrol cloudcontrol base components corewireless dhcpd l2tp igmp easyconfig pingc...

Страница 256: ...xdropped 0 txpackets 1504 txbytes 652230 txerrors 0 txdropped 0 Core Configurator done History Version Description The show vpn server command has been introduced 2 04 3 75 snmp community Description...

Страница 257: ...d Command with no prefix resets setting Prefix no Yes Change settings Yes Multiple input No Synopsis config snmp contact contact config no snmp contact Arguments Description Value Argument SNMP contac...

Страница 258: ...sion Description The snmp location command has been introduced 2 08 3 78 system Description Access to a group of commands to configure global parameters Prefix no No Change settings No Multiple input...

Страница 259: ...em reboot Reboot Switch Wi Fi on off WifiToggle Switch Guest Wi Fi on off WifiGuestApToggle Start WPS for the Guest Wi Fi Guest Wi Fi should be enabled WpsStartGuestAp Start WPS 2 4GHz only WpsStartMa...

Страница 260: ...s timezone to default GMT Prefix no Yes Change settings Yes Multiple input No Synopsis system clock timezone locality system no clock timezone locality Arguments Description Value Argument Name of the...

Страница 261: ...ystem configuration asynchronously Prefix no No Change settings Yes Multiple input No Synopsis system configuration save Example system configuration save Saving configuration History Version Descript...

Страница 262: ...Arguments Description Value Argument The domain name to assign String domain Example system domainname zydata Domainname saved History Version Description The system domainname command has been introd...

Страница 263: ...e device Command with no prefix turns LEDs on Prefix no Yes Change settings Yes Multiple input No Synopsis system led shutdown mode system no led shutdown Arguments Description Value Argument mode Shu...

Страница 264: ...iption Enable repeated message reduction By default the setting is enabled Command with no prefix disables the feature Prefix no Yes Change settings Yes Multiple input No Synopsis system log reduction...

Страница 265: ...og server command has been introduced 2 00 3 78 13 system log suppress Description Add message suppression rule Prefix no Yes Change settings Yes Multiple input Yes Synopsis system log suppress ident...

Страница 266: ...Description The system mode command has been introduced 2 05 3 78 15 system reboot Description Reboot the system If the parameter is set reboot is executed after a timeout in seconds If the timer is...

Страница 267: ...lt value to the specified parameter before the first change Prefix no Yes Change settings Yes Multiple input Yes Synopsis system set name value system no set name Arguments Description Value Argument...

Страница 268: ...ription Access to a group of commands to test the environment Prefix no No Change settings No Multiple input No Group entry tools Synopsis config tools History Version Description The tools command ha...

Страница 269: ...The tools arping command has been introduced 2 00 3 79 2 tools ping Description Send Echo Request requests of ICMP protocol to specified network node and register received Echo Reply responses The tim...

Страница 270: ...p min avg max 1 06 1 49 2 35 ms Process terminated History Version Description The tools ping command has been introduced 2 00 3 79 3 tools ping6 Description Send Echo Request requests of ICMPv6 proto...

Страница 271: ...cd icmp_req 1 ttl 64 time 7 18 ms 60 bytes from fd4b f12b 5d59 0 1108 4407 b772 20cd fd4b f12b 5d59 0 1108 4407 b772 20cd icmp_req 2 ttl 64 time 8 42 ms 60 bytes from fd4b f12b 5d59 0 1108 4407 b772 2...

Страница 272: ...s traceroute Description Show the route to a network host Prefix no No Change settings No Multiple input No Synopsis tools traceroute host count count interval interval wait time wait time packet size...

Страница 273: ...ts String source interface type TCP protocol tcp UDP protocol Used by default udp ICMP protocol icmp Type Of Service Default value 0 Value must be in the range 0 255 Integer tos Example tools tracerou...

Страница 274: ...ters Prefix no No Change settings No Multiple input No Group entry udpxy Synopsis config udpxy History Version Description The udpxy command has been introduced 2 03 3 80 1 udpxy buffer size Descripti...

Страница 275: ...dpxy no buffer timeout Arguments Description Value Argument Timeout value in seconds Can take values from 1 to 60 1 unlimited timeout Integer timeout Example udpxy buffer timeout 10 Udpxy Manager a ho...

Страница 276: ...as been introduced 2 02 3 80 4 udpxy port Description Specify port for HTTP requests By default 4022 value is used Command with no prefix resets setting to default Prefix no Yes Change settings Yes Mu...

Страница 277: ...m 0 to 3600 Integer renew interval Example udpxy renew interval 120 Udpxy Manager a renew subscription interval value set to 120 sec History Version Description The udpxy renew interval command has be...

Страница 278: ...ents Description Value Argument protocol Rule for TCP protocol will be added deleted tcp Rule for UDP protocol will be added deleted udp Rule for specified interface name will be added Interface name...

Страница 279: ...n Description The upnp lan command has been introduced 2 00 3 83 upnp redirect Description Add UPnP port translation rule Command with no prefix removes rule from the list If you use no arguments the...

Страница 280: ...Integer index History Version Description The upnp redirect command has been introduced 2 00 3 84 user Description Access to a group of commands to configure user account parameters If specified user...

Страница 281: ...input No Synopsis config user password md5 hash password config user no password Arguments Description Value Argument MD5 hash value String hash Value of the password in open form from which the hash...

Страница 282: ...cli Access to the Web interface http Connection to an integrated FTP server ftp Connection to the Windows files and printers service cifs Access to the BitTorrent client GUI torrent Restrict commands...

Страница 283: ...Value Argument Full name or an alias of the interface You can see the list of available interfaces with help of interface command Interface name interface Example vpn server interface FastEthernet0 Vl...

Страница 284: ...end LCP echo request frames only if no traffic was received from the peer since the last echo request was sent Keyword adaptive Example vpn server lcp echo 5 3 LCP echo parameters updated History Vers...

Страница 285: ...mppe optional vpn server no mppe optional Example vpn server mppe optional Core Configurator done History Version Description The vpn server mppe optional command has been introduced 2 04 3 85 5 vpn...

Страница 286: ...ix no Yes Change settings Yes Multiple input No Synopsis vpn server mtu value vpn server no mtu Arguments Description Value Argument MTU value Can take values from 128 to 1500 inclusively Integer valu...

Страница 287: ...nge settings Yes Multiple input No Synopsis vpn server pool range begin size vpn server no pool range Arguments Description Value Argument Start address of pool IP address begin Pool size If not defin...

Страница 288: ...duced 2 04 3 86 yandexdns Description Access to a groupe of commands to configure Yandex DNS profiles Prefix no No Change settings No Multiple input No Group entry yandexdns Synopsis config yandexdns...

Страница 289: ...es for adults family History Version Description The yandexdns assign command has been introduced 2 01 3 86 2 yandexdns check availability Description Check availability of Yandex DNS service Prefix n...

Страница 290: ...yandexdns enable yandexdns no enable Example yandexdns enable YandexDns Client Yandex DNS is enabled History Description Version The yandexdns enable command has been introduced 2 01 Command Reference...

Страница 291: ...sponds to a visual prompt by typing in a command on a specified line receives a response back from the system and then enters another command and so forth Compression Control Protocol is used for esta...

Страница 292: ...secret from the private key of one party and the public key of the other Since the IPsec symmetrical keys are derived from this DH key shared between the peers at no point are symmetric keys actually...

Страница 293: ...ted communication channel by using the Diffie Hellman key exchange algorithm to generate a shared secret key to encrypt further IPsec communications Internet Protocol is the principal communications p...

Страница 294: ...CP packets The LCP packet either accepts or rejects the identity of its linked peer agrees up on packet size limits and looks for common misconfiguration errors LCP packets are divided into three clas...

Страница 295: ...ment user service and security functions as well as internet data mining eavesdropping and internet censorship Although DPI technology has been used for Internet management for many years some advocat...

Страница 296: ...d at 1 Mbps and header at 2 Mbps Total short preamble transfer time is a constant at 96 usec Not compatible with legacy IEEE 802 11 systems operating at 1 and 2 Mbps Protocol Field Compression is a me...

Страница 297: ...itself acquire a TCP IP address and use a discovery protocol based on the HTTP to announce its presence on the network to other devices Virtual LAN is a local area network with a definition that maps...

Страница 298: ...less networks to add new devices and to enable security Wired Equivalent Privacy is a security algorithm for IEEE 802 11 wireless networks WEP recognizable by the key of 10 or 26 hexadecimal digits is...

Страница 299: ...Peer Ppp Vlan Secure Ethernet OpenVpn Pvc FastEthernet GigabitEthernet Pppoe PppTunnel Pptp L2tp Figure A 2 Tunnel interfaces Ethernet Secure IP SecureIPTunnel Peer Tunnel6to4 Tunnel6 Tunnel6in4 Tunne...

Страница 300: ...et Ppp Usb UsbModem YotaOne UsbEthernet UsbLte CdcEthernet Figure A 4 Wi Fi interfaces Wireless WiFi Radio Ethernet WiFiMaster WiFiStation AccessPoint Command Reference Guide Keenetic Lite KN 1310 300...

Страница 301: ...es and their parameters The words command and resource are used interchangeably in this manual Parameters are listed in the Arguments table of each command They can be passed as part of the request us...

Страница 302: ...quests must be submitted in a free form JSON 1 that is interpreted as a batch of parameters and nested settings depending on the data type Conversely HTTP GET returns JSON data that was previously POS...

Страница 303: ...t resource apply to all nested resources within the nearest surrounding scope Example B 2 Create and enable a PPP interface Call interface to create a new PPPoE connection as described in Section 3 16...

Страница 304: ...type application json version interface name Home Response is an array of two elements in accordance with the request version release 2 12 A 1 0 1 arch mips ndm exact 0 cbf8590 cdate 15 Jan 2018 bsp e...

Страница 305: ...to factory defaults authentication is not required Example B 4 XML API call Execute the show interface command for the WAN interface named ISP This interface exists by default in Keenetic Lite POST c...

Страница 306: ...ement is always sent from the user agent to the device The device always responds with a response The id attribute can be used to establish one to one correspondence between them Figure B 1 Request El...

Страница 307: ...3 on page 23 B 2 2 Configuration Request Configuration request can be used to get configured parameters Web interface uses this kind of request to fill out the HTML forms Figure B 4 Configuration Req...

Страница 308: ...Figure B 6 Response Packet packet response id 1 response content response response id 2 no response for id 2 packet Command Reference Guide Keenetic Lite KN 1310 308 Appendix B HTTP API...

Страница 309: ...sysUpTime SNMPv2 MIB sysContact SNMPv2 MIB sysName SNMPv2 MIB sysLocation SNMPv2 MIB sysServices C 2 IF MIB OID 1 3 6 1 2 1 2 and 1 3 6 1 2 1 31 The following data elements are supported Basical OID...

Страница 310: ...ts IF MIB ifInBroadcastPkts IF MIB ifOutMulticastPkts IF MIB ifOutBroadcastPkts IF MIB ifHCInOctets IF MIB ifHCInUcastPkts IF MIB ifHCInMulticastPkts IF MIB ifHCInBroadcastPkts IF MIB ifHCOutOctets IF...

Страница 311: ...st Keenetic Lite III counter overflow event time set in IF MIB ifCounterDiscontinuityTime Keenetic Omni Keenetic Omni II 16 bit per port packet counters only Last counter Keenetic Start II Keenetic Li...

Страница 312: ...B udpInErrors UDP MIB udpOutDatagrams UDP MIB udpHCInDatagrams UDP MIB udpHCOutDatagrams C 5 HOST RESOURCES MIB OID 1 3 6 1 2 1 25 The following data elements are supported HOST RESOURCES MIB hrSystem...

Страница 313: ...NMP MIB dskPercentNode System load info UCD SNMP MIB laIndex UCD SNMP MIB laNames UCD SNMP MIB laLoad UCD SNMP MIB laConfig UCD SNMP MIB laLoadInt UCD SNMP MIB ssCpuRawUser UCD SNMP MIB ssCpuRawNice U...

Страница 314: ...Command Reference Guide Keenetic Lite KN 1310 314 Appendix C SNMP MIB...

Страница 315: ...list of algorithms is indicated encryption with key length hash function for HMAC forming PFS mode NO if disabled D 1 weak AES128 SHA1 MODP1024 IKE AES128 SHA1 MODP768 AES128 MD5 MODP1024 AES128 MD5 M...

Страница 316: ...MODP1536 AES128 SHA1 MODP1024 3DES SHA1 MODP1536 3DES SHA1 MODP1024 AES128 SHA1 NO IPsec SA AES256 SHA1 NO 3DES SHA1 NO encryption aes cbc 256 Proposal encryption aes cbc 128 encryption 3des integrity...

Страница 317: ...roup 2 D 4 strong AES256 SHA1 MODP2048 IKE AES256 SHA1 MODP1536 AES128 SHA1 MODP2048 AES128 SHA1 MODP1536 AES256 SHA1 MODP1536 IPsec SA AES256 SHA1 MODP2048 AES256 SHA1 MODP2048 AES256 SHA1 MODP1536 e...

Страница 318: ...SHA1 NO 3DES SHA1 NO DES SHA1 NO AES128 MD5 NO 3DES MD5 NO AES128 SHA1 MODP1024 3DES SHA1 MODP1024 DES SHA1 MODP1024 AES128 SHA1 MODP768 3DES SHA1 MODP768 DES SHA1 MODP768 AES128 MD5 MODP1024 3DES MD...

Страница 319: ...1 MODP1024 IPsec SA AES128 SHA1 NO AES256 SHA1 NO 3DES SHA1 NO AES256 SHA1 MODP1536 AES128 SHA1 MODP1536 3DES SHA1 MODP1536 AES256 SHA1 MODP1024 3DES SHA1 MODP1024 encryption aes cbc 256 Proposal encr...

Страница 320: ...SHA1 NO AES256 SHA1 NO AES128 SHA1 NO AES256 SHA1 MODP1536 AES128 SHA1 MODP1536 3DES SHA1 MODP1536 AES256 SHA1 MODP1024 3DES SHA1 MODP1024 encryption aes cbc 256 Proposal encryption aes cbc 128 encry...

Результаты поиска

Содержание Lite KN-1310

Отзывы:

Бренды по названию

Популярные бренды

KeeNetic Lite KN-1310, Справочник по командам

Результаты поиска

Содержание Lite KN-1310

Отзывы:

Бренды по названию

Популярные бренды