background image

ZyXEL Confidential 

340QR5C1.doc 

31/38

 

Configuration 

Related 

Command 

       

Home

 

Command 

Description 

config 

The parameters of config are listed below. 

edit firewall 

active 
<yes|no> 

 

 

Activate or deactivate the saved firewall settings 

retrieve 

firewall 

 

 

 

Retrieve current saved firewall settings 

save 

firewall 

 

 

 

Save the current firewall settings 

display 

firewall 

 

 

 

Displays all the firewall settings 

 

 

set <set#>

 

 

Display current entries of a set configuration; 
including timeout values, name, default-permit, 
and number of rules in the set. 

 

 

set <set#>

rule <rule#> 

 

Display current entries of a rule in a set. 

 

 

attack 

 

 

Display all the attack alert settings in PNC 

 

 

e-mail 

 

 

Display all the e-mail settings in PNC 

 

 

 

 

Display all the available sub commands 

  

e-mail 

mail-server 
<mail server IP>

 

Edit the mail server IP to send the alert 

  

 

return-addr 
<e-mail address>

 

Edit the mail address for returning an email alert 

  

 

e-mail-to 

<e-mail 

address> 

 

Edit the mail address to send the alert 

  

 

policy 

<full 

hourly |daily | 
weekly> 

 

Edit email schedule when log is full or per hour, 
day, week. 

  

 

day 

<sunday 

monday | tuesday 
| wednesday | 
thursday | friday | 
saturday> 

 

Edit the day to send the log when the email policy 
is set to Weekly 

 

 

 

hour <0~23> 

 

Edit the hour to send the log when the email 
policy is set to daily or weekly 

 

 

 

minute <0~59> 

 

Edit the minute to send to log when the email 
policy is set to daily or weekly 

  

 

Subject 

<mail 

subject> 

 

Edit the email subject 

  

attack 

send-alert 
<yes|no> 

 

Activate or deactivate the firewall DoS attacks 
notification emails 

 

 

 

block <yes|no> 

 

Yes: Block the traffic when exceeds the 
tcp-max-incomplete threshold 

 

 

 

 

 

No: Delete the oldest half-open session when 
exceeds the tcp-max-incomplete threshold 

  

 

block-minute 
<0~255> 

 

Only valid when sets 'Block' to yes. The unit is 
minute 

  

 

minute-high 
<0~255> 

 

The threshold to start to delete the old half-opened 
sessions to minute-low 

  

 

minute-low 
<0~255> 

 

The threshold to stop deleting the old half-opened 
session 

  

 

max-incomplete-
high <0~255> 

 

The threshold to start to delete the old half-opened 
sessions to max-incomplete-low 

  

 

max-incomplete-
low <0~255> 

 

The threshold to stop deleting the half-opened 
session 

  

 

tcp-max-incompl
ete <0~255> 

 

The threshold to start executing the block field 

Содержание Prestige P-662HW-61

Страница 1: ...ZyXEL Confidential 340QR5C1 doc 1 38 ZyXEL Firmware Release Note Prestige 662HW 61 Standard Version Release 3 40 QR 5 C1 Date Feb 15 2005 Author Keil Chu...

Страница 2: ...wer management This high performance ADSL router is a high integrated advanced Firewall Bandwidth Management and IEEE 802 11g wireless features to meet the demand of high end market P662HW 61 provides...

Страница 3: ...C Web control function then the centralized logs can t display correct username and URL address in logs Condition N A 3 FEATURE CHANGE Symptom The default ESSID of wireless is changed to ZyXEL Conditi...

Страница 4: ...DNS server in smt3 2 or web LAN page it need reboot system to let DNS server work Condition N A 7 BUG FIX Symptom Routing table doesn t update when change different remote IP in SMT4 and encapsulation...

Страница 5: ...FIX Symptom For Zero Configuration feature when VC auto hunt successfully and the display PPPoE username password page but input wrong value the Web page will be always in testing state Condition N A...

Страница 6: ...is belong to static DHCP pool Condition N A 10 FEATURE CHANGE Symptom In CAC feature configure 4 groups name GROUP1 to GROUP4 by default Condition N A 11 BUG FIX Symptom In AV feature the E Mail scann...

Страница 7: ...Happens only when Cerberian server stop service and our reqest will get request error 20 BUG FIX Symptom In AV feature the message scanned by GGreat message will appear in Email when virus detected C...

Страница 8: ...on and LAN server should accept incoming request from external side if LAN PC is configured in NAT server set 13 BUG FIX Symptom System is configured as PPPoE after PPPoE is idle timeout and then star...

Страница 9: ...is login in system will allow the PC to connect Internet but if admin is timeout from eWC the PC still can connect Internet Condition N A Solution If Admin is timeout or logout the PC should redirect...

Страница 10: ...display error Condition N A 6 BUG FIX Symptom In Web GUI NAT page click edit details and change NAT setting to full feature and don t apply it but it always configured as full feature Condition N A 7...

Страница 11: ...dth in advance summary page and then the device gets reboot Condition N A 9 BUG FIX Symptom In MBM advance setting disable filter in class setting but doesn t work the traffics are still limited Condi...

Страница 12: ...h of filename to be 255 for Anti Virus 8 BUG FIX Symptom In Anti Virus system will only notify user one time if there are many viruses found on different attachments Condition N A 9 BUG FIX Symptom If...

Страница 13: ...nt feature will be turn off after VC Encapsulation is hunted successfully Condition N A Modifications in V 3 40 QR 2 b1 06 02 2004 1 FEATURE ENHANCE Symptom Support DMZ interface and port based VLAN C...

Страница 14: ...ion N A 4 FEATURE ENHANCE Symptom VC auto hunt can t hunt Enet encap service Condition Only happens on some DHCP server that the DHCP server will check the MAC address in UDP layer 5 FEATURE ENHANCE S...

Страница 15: ...of Zero Configuration that s to prompt user to login Web Configurator if they have static IP address from ISP 2 In Web GUI Wizard if the configuration is saved with static IP address then system will...

Страница 16: ...IP function 7 BUG FIX Symptom Configured as 802 1x Dynamic WEP key re authentication timer is 60sec after 60 sec the client can t ping out Condition N A 8 BUG FIX Symptom Configured as WPA Mixed mode...

Страница 17: ...page again will not work but open another IE is OK Condition N A Modifications in V 3 40 QR 0 b3 03 31 2004 1 BUG FIX Symptom Create VPN second rule and dial it will cause exception Condition First r...

Страница 18: ...hod selects AES the rule can t dial successfully Condition N A 13 BUG FIX Symptom In Web GUI display DMZ in firewall default policy but system doesn t include DMZ feature Condition N A 14 BUG FIX Symp...

Страница 19: ...S for details Condition 4 FEATURE ENHANCE Symptom Support maximum to 20 VPN rules Condition N A 5 BUG FIX Symptom In debug mode type atba5 baud rate doesn t be changed Condition N A 6 BUG FIX Symptom...

Страница 20: ...menu countrycode countrycode set country code date year month date set display date domainname display domain name edit filename edit a text file enhanced return OK if commands are supported for PWC p...

Страница 21: ...ay load load the log setting buffer mail alertAddr mail address send alerts to this mail address display display mail setting logAddr mail address send logs to this mail address schedule display displ...

Страница 22: ...qid display a queue by a given number quit quit CI command mode reboot code reboot system code 0 cold boot 1 immediately boot 2 bootModule debug mode reslog disp display resources trace clear clear r...

Страница 23: ...net ftp web icmp snmp dns ip set server secure ip addr spt dump dump spt raw data root dump spt root data rn dump spt remote node data user dump spt user data slot dump spt slot data save save spt dat...

Страница 24: ...erface 3 mode 2 broadcast 5 mode 2 multicast 6 all packets status ch_name see LAN status init ch_name initialize LAN version see ethernet device type pkttest disp packet level set ether test packet di...

Страница 25: ...nd Enet LLC then the service bits will be 2 32 34 decimal 22 hex you must input 22 Need to perform save after this command Remove removeNodeId vpi vci Input remote node ID and vpi vci value to remove...

Страница 26: ...ter for wireless channel fildisp Display wireless filter setting 1130cmd Internal usage restart_stat Show WLAN restart statistics chg_dot11mod e Set WLAN state to mix mode B only or G only show_rxDesc...

Страница 27: ...dns query status table display dns query table server primary secondary third set dns server stats clear clear dns statistics disp display dns statistics table display dns table httpd debug on off se...

Страница 28: ...rge on off set RIP merge flag refuse gateway add an entry to the rip refuse list request addr port send rip request to some address and port reverse on off RIP Poisoned Reverse status display rip stat...

Страница 29: ...le counter flag nat timeout gre timeout set nat gre timeout value iamt timeout set nat iamt timeout value generic timeout set nat generic timeout value reset timeout set nat reset timeout value tcp ti...

Страница 30: ...le monitor on off turn on off traffice monotor Default is off time sec set blt re init interval brt related to bridge route table disp id display brt data reset id reset brt data cnt related to bridge...

Страница 31: ...ail schedule when log is full or per hour day week day sunday monday tuesday wednesday thursday friday saturday Edit the day to send the log when the email policy is set to Weekly hour 0 23 Edit the h...

Страница 32: ...le alert yes no Activate or deactivate the notification when a DoS attack occurs or there is a violation of any alert settings In case of such instances the function will send an email to the SMTP des...

Страница 33: ...ert a specified rule set to the firewall configuration set set rule rule Insert a specified rule in a set to the firewall configuration cli Display the choices of command list Firewall Related Command...

Страница 34: ...1 lan index 1 2 3 4 1 Select main LAN Interface 2 Select IP Alias 1 3 Select IP Alias 2 4 DMZ Select a LAN interface to edit Menu 3 2 lan active on off Turn on or off on IP Alias Interface Menu 3 2 1...

Страница 35: ...an node scr num Set the wan SCR value Menu 11 6 wan node mbs num Set the wan MBS value Menu 11 6 wan node wanip static dynamic address Set the wan IP address Menu 11 3 wan node remoteip address subnet...

Страница 36: ...Menu 15 2 ip nat server edit rule rulename string Configure the name of the rule Leave it to be default value if you don t want this command Menu 15 2 ip nat server edit rule forwardip IP address Con...

Страница 37: ...mp trap community community Set the community string of trap Menu 22 SNMP sys snmp trap destination IP address Set the destination address of trap Menu 22 SNMP sys snmp discard Discard changes sys snm...

Страница 38: ...et wep key value Menu 3 5 for wireless LAN wlan wep key default key set 1 4 Set default key set value Menu 3 5 for wireless LAN wlan macfilter enable Enable mac filter Menu 3 5 1 for wireless LAN wlan...

Отзывы: