Content About this Document ..................19 CLI Navigation ....................21 Accessing the Command Line Interface ........................22 Basic Navigation and Manipulation..........................24 Command Line Interface Top Level Structure ......................28 Command Line Interface Commands ........................29 Menu-driven CLI Navigation ............................30 Service Template Files and the CLI ..........................
Page 8
DNS Commands ..................139 dns add ....................................140 dns clear ..................................141 dns clrstats..................................142 dns delete..................................143 dns domain ..................................144 dns flush...................................145 dns fwdadd..................................146 dns fwddelete.................................147 dns fwdlist ..................................148 dns fwdtable ...................................149 dns list....................................150 dns nslookup ..................................151 dns start...................................152 dns stats...................................153 dns status ..................................154 dns stop ...................................155 dns toutfwd ..................................156 dns troff...................................157...
Page 11
IP Commands ....................223 ip apadd ...................................224 ip apdelete..................................226 ip aplist.....................................227 ip arpadd ..................................228 ip arpdelete..................................229 ip arplist...................................230 ip config ...................................231 ip flush....................................234 ip httpprobe ...................................235 ip ifconfig ..................................236 ip iflist....................................237 ip ifwait ....................................238 ip mcadd ..................................239 ip mcdelete ..................................240 ip mclist ...................................241 ip ping....................................242 ip rtadd ....................................243...
Page 19
Syslog Commands..................515 syslog config..................................516 syslog flush ..................................517 syslog list ..................................518 syslog ruleadd.................................519 syslog ruledelete................................520 syslog msgbuf show ..............................521 syslog msgbuf send................................522 System Commands..................523 system clearpassword ..............................524 system config..................................525 system flush ..................................526 system reboot................................527 system reset ...................................528 system setpassword..............................529 system settime ................................530 system stats ..................................531 TD Commands .....................
About this Document About this Document Introduction Welcome to the SpeedTouch™ Command Line Interface (CLI) Reference Guide! For the Service Provider, this Reference Guide aims to be a concise and practical document for creating a customized Service Template file, based on the SpeedTouch™ CLI command set, to be used by the end-user to configure the SpeedTouch™...
Page 22
About this Document Trademarks The following trademarks are used in this document: • SpeedTouch™ is a trademark of THOMSON Telecom. • Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corporation. • Windows and Internet Explorer are trademarks of Microsoft Corporation.
CLI Navigation CLI Navigation Introduction This chapter familiarizes the user with the SpeedTouch™ CLI. It describes general manipulations: • to navigate through the CLI • to perform some operations on the CLI. Contents This chapter covers the following topics: Topic Page Accessing the Command Line Interface Basic Navigation and Manipulation...
CLI Navigation Accessing the Command Line Interface Users can access the Command Line Interface via a Telnet session. This requires that TCP/IP connectivity exists between the host from which the Telnet session is opened and the SpeedTouch™. Users can access the Command Line Interface via: •...
Page 25
If the SpeedTouch™ is protected by a username and a system password, authentication will be required before access is granted. The following figure shows an example of the SpeedTouch™610 banner after opening a session and authentication. Username : johndoe Password : ******* ------------------------------------------------------------------------ ______ SpeedTouch 610 ___/_____/\ Version 4.2.7.29 _____/__ /\_____/___ \ Copyright (c) 1999-2003, /\ \...
CLI Navigation Basic Navigation and Manipulation Manipulation commands are commands that manipulate operations on the command line, for example changing the command group, go to the beginning of the command line, go to the end of the command line, etc. Command group navigation From top level, you can change to a command group by executing the name of the desired command group.
Page 27
CLI Navigation The Help Command Execute help or ? from top level to list all available commands and command groups for the SpeedTouch™. Example for the SpeedTouch™610 ADSL/POTS variant: =>help Following commands are available : help : Displays this help information menu : Displays menu : Displays this help information...
CLI Navigation Example: =>firewall help Following commands are available : assign : Assign a chain to an entry point. unassign : Clear a specific hook list : Shows a list of all the hooks with the chains attached. flush : Clears all hooks, chains and rules tron : Enables verbose console messaging.
Page 29
CLI Navigation Breaking off Commands You can break off a command by pressing CTRL+G. This can be useful in a situation where a user is prompted to enter a value which he does not know and wants to quit the command. Instead of being prompted over and over again for the same value, this allows to quit the command and return to the command line prompt.
CLI Navigation Command Line Interface Top Level Structure The table below shows the available command groups for the different SpeedTouch™ variants: Command group Available? adsl Only for the SpeedTouch™610 ADSL/POTS and SpeedTouch™610i ADSL/ISDN variants. Yes. atmf Only for variants equipped with an ATMF-25.6Mb/s port. autopvc Yes.
CLI Navigation Command Line Interface Commands Command Execution All CLI commands are commands that operate on, or configure, the SpeedTouch™ settings. The CLI commands can be executed: • from top level, preceded by the name of the command group from which the command should be executed. E.
CLI Navigation Menu-driven CLI Navigation Introduction To improve the user-friendliness of the SpeedTouch™ CLI, the CLI features a menu-driven interface. The semi-graphical menu offers an attractive and easy-to-use configuration environment for the CLI. Calling the menu To call the menu-driven interface, type menu at the CLI prompt. Example (for the SpeedTouch™610 ADSL/POTS variant): Leaving the menu To leave the menu-driven interface, use the TAB key to go to the Cancel field and press ENTER.
Page 33
CLI Navigation Browse through the CLI commands with the ARROW keys or select .. to go back up one level: Press ENTER to select the command. The figure below shows the menu after the add command has been selected: Entering parameter values Browse through the parameters with the ARROW keys: To enter a value for a parameter, press ENTER: Fill in the parameter value and press ENTER:...
Page 34
CLI Navigation Use the ARROW keys to scroll to the next parameter: When all the necessary parameters have been entered, use the TAB key to go to the OK field and press ENTER. Do not forget to save your changes by executing saveall (from any CLI prompt). Note Preset parameter values In case preset values are provided for a parameter, they are shown at the bottom of the menu.
CLI Navigation Service Template Files and the CLI Service Template Files The Service Template files, used by the Setup wizard, or directly uploaded via the SpeedTouch™ web pages, consist of a set of CLI commands. Only CLI commands, which are part of the SpeedTouch™ CLI command set, may be used in the .ini and .def files.
Page 36
CLI Navigation [<configuration>.ini] Available SpeedTouch™ CLI commands paragraphs [oam.ini] The atm oam CLI command subgroup [pfirewall.ini] The firewall CLI command group [phone.ini] The phonebook CLI command group [policy.ini] The ipsec policy and ipsec policy chain CLI command subgroups. [polrules.ini] The ipsec policy rules CLI command subgroup. [pppoa.ini] The pppoa CLI command group [pppoe.ini]...
CLI Navigation Direct FTP Access The SpeedTouch™ File System The SpeedTouch™ permanent storage, further referred to as 'file system', exists of nonvolatile memory responsible for storing, retrieving and maintaining the SpeedTouch™ software image(s), Service Template files and optionally default settings files. The file system of the SpeedTouch™...
Page 38
CLI Navigation FTP File Transfer To allow correct file transfers, set the transfer mode to “binary”. Turn on the hashing option to see the progression of the file transfer. Note Example: /home/doejohn{1}$ftp 10.0.0.138 Connected to 10.0.0.138 220 Inactivity timer = 120 seconds. Use 'site idle <secs>' to change. Name (10.0.0.138:doejohn): 331 SpeedTouch™...
ADSL Commands ADSL Commands Introduction The adsl command group is only applicable to the SpeedTouch™610 ADSL/POTS and ADSL/ISDN variants. Contents This chapter covers the following commands: Topic Page adsl config adsl info E-DOC-CTC-20040210-0028 v3.0...
ADSL Commands adsl config Show/set the Asymmetric Digital Subscriber Line (ADSL) configuration. Although the command is the same for both SpeedTouch™ ADSL/POTS and SpeedTouch™ ADSL/ISDN variants, the command features specific parameter values per variant: SYNTAX FOR ADSL/Plain Old Telephone Service (POTS) variants: adsl config [opermode = <{ansi|g.dmt_annex_a|g.lite|multimode}>] [maxbitspertoneUS = <number{10-14}>][trace = <{off|on}>]...
ADSL Commands adsl info Show ADSL statistics and information about the SpeedTouch™DSL line status. Although the same command is used for both SpeedTouch™ ADSL/POTS and SpeedTouch™ ADSL/ISDN variants, the command features specific output parameters and counters per variant. SYNTAX: adsl info EXAMPLE (for a SpeedTouch™...
Page 42
ADSL Commands .. Continued output .. Far End Failure No Failure Near end failure No failure Far end failures since reset Loss of frame: 0 failures Loss of signal: 0 failures Loss of power: 0 failures Loss of link: 0 failures Errored seconds: 0 seconds Far end failures last 15 minutes...
ATM Commands atm oam mode Configure the OAM data blocking mode. SYNTAX: atm oam mode port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> blocking = <{disabled|enabled}> where: port The port for which OAM blocking is configured. REQUIRED Choose between: • DSL0 • DSL1 •...
ATM Commands atm oam ping Sends ATM loopback cells. SYNTAX: atm oam ping dest = <string> [count = <number{1-1000000}>] [interval = <number{100-1000000}>] where: dest The destination address for the request. REQUIRED Can be any phonebook entry. count A number between 1 and 1000000. OPTIONAL Represents the number of pings to send.
ATM Commands atm oam status Show OAM data blocking mode of all ports. SYNTAX: atm oam status EXAMPLE: =>atm oam status OAM config dump ------------------- CLP bit value : 1 Loopback id : 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a 6a OAM data blocking mode -------------------------- Port dsl0: blocking...
ATMF Commands ATMF Commands Introduction The atmf command group is only applicable for SpeedTouch™610 variants equipped with an ATM Forum (ATMF) 25.6Mb/s port. Contents This chapter covers the following commands: Topic Page atmf add atmf ccconfig atmf cclist atmf ccsend atmf config atmf delete atmf flush...
ATMF Commands atmf add Add a Virtual Path (VP) or Virtual Channel (VC) cross-connection between the ATMF-25.6Mb/s interface and the WAN interface. SYNTAX: atmf add vpi = <number {0-7}> [vci = <number {0-511}>] [qos = <{default}>] where: A number between 0 and 7. REQUIRED Represents the Virtual Path identifier.
ATMF Commands atmf ccconfig Configure Continuity Check (CC) on a ATMF-25.6Mb/s interface cross-connection. SYNTAX: atmf ccconfig vpi = <number{0-7}> [vci = <number{0-511}>] [transmit = <{disabled|enabled}>] [receive = <{disabled|enabled}>] [auto = <{disabled|enabled}>] where: A number between 0 and 7. REQUIRED Represents the Virtual Path identifier. A number between 0 and 511.
ATMF Commands atmf ccsend Send CC activate/deactivate request to connection on ATMF-25.6Mb/s interface cross-connection. SYNTAX: atmf ccsend vpi = <number{0-7}> [vci = <number{0-511}>] [action = <{activate|deactivate}>] [direction = <{source|sink|both}>] where: A number between 0 and 7. REQUIRED Represents the Virtual Path identifier. vci] A number between 0 and 511.
ATMF Commands atmf config Show/set the ATMF-25.6Mb/s interface configuration. SYNTAX: atmf config [status = <line|on>] [policing = <{disabled|enabled}>] where: status Let the SpeedTouch™ assume that the physical link of the ATMF OPTIONAL connection is always enabled (on) or allow to check the physical link (line).
ATMF Commands atmf delete Delete a cross-connection on the ATMF-25.6Mb/s interface. SYNTAX: atmf delete vpi = <number {0-7}> [vci = <number {0-511}>] where: A number between 0 and 7. REQUIRED Represents the Virtual Path identifier. A number between 0 and 511. OPTIONAL Represents the Virtual Channel identifier.
AutoPVC Commands AutoPVC Commands Contents This chapter covers the following commands: Topic Page autopvc config autopvc info E-DOC-CTC-20040210-0028 v3.0...
AutoPVC Commands autopvc config Configure autopvc. SYNTAX: autopvc config [mode = <{pseudo|passive|active}>] [type = <{bridge|pppoerelay}>] [opmode = <{partial|full}>] [overwrite = <{disabled|enabled}>] [peakrate = <number{0-27786}>] where: mode Select the autopvc mode: OPTIONAL • pseudo: enable only pseudo-ILMI (VP/VC 15/16). When connection parameters are written to the MIB, display this information on CLI or web-interface but do not use these parameters for configuration.
Page 63
AutoPVC Commands EXAMPLE: =>autopvc config Autopvc mode : pseudo Autopvc opmode : partial Autopvc type : bridge Autopvc standard: down Autopvc pseudo : up UBR overwrite : disabled UBR peak rate : linerate => RELATED COMMANDS: autopvc info Show retrieved information. E-DOC-CTC-20040210-0028 v3.0...
AutoPVC Commands autopvc info Show retrieved information. SYNTAX: autopvc info [table = <{Vpc|Vcc}>] where: table Choose the autopvc table for which the information must be shown. OPTIONAL Choose between: • • Vcc. EXAMPLE (default configuration): =>autopvc info Address Type BestEff Par1 Par2 Par3...
Bridge Commands bridge config Show/set bridge ageing policy for dynamically learned Medium Access Control (MAC) addresses. SYNTAX: bridge config [age = <number {10 - 100000}>] [filter = <{no_WAN_broadcast|PPPoE_only|none}>] where: A number between 10 and 100000 (seconds). OPTIONAL Represents the lifetime of a dynamically learned MAC address. The default is 300.
Bridge Commands bridge ifadd Create a bridged Ethernet interface. SYNTAX: bridge ifadd [intf = <intfname>] [dest = <string>] where: intf The bridged Ethernet interface name. OPTIONAL If not specified, the destination name will double as interface name. dest The destination address for the new interface. OPTIONAL Typically a phonebook entry.
Bridge Commands bridge ifattach Attach (i.e. connect) a bridged Ethernet interface. SYNTAX: bridge ifattach intf = <intfname> where: intf The name of the interface to attach. REQUIRED Browse through the available entries via the ARROW UP and ARROW DOWN keys. EXAMPLE: =>bridge iflist : Internal...
Bridge Commands bridge ifconfig Configure a bridge interface. SYNTAX: bridge ifconfig intf = <intfname> [dest = <string>] [qos = <string>] [encaps = <{llc/snap|vcmux}>] [fcs = <{off|on}>] [portstate = <{disabled|learning|forwarding}>] [retry = <number {0-65535}>] where: intf The name of the bridge interface to configure. REQUIRED dest The destination for this interface.
Bridge Commands bridge ifdelete Delete a bridge interface. SYNTAX: bridge ifdelete intf = <intfname> where: intf The name of the interface name to be deleted. REQUIRED Browse through the available entries via the ARROW UP and ARROW DOWN keys. EXAMPLE: =>bridge ifdelete intf=TestBridge =>bridge iflist : Internal...
Bridge Commands bridge ifdetach Detach (i.e. disconnect) a bridge interface. SYNTAX: bridge ifdetach intf = <intfname> where: intf The name of the bridge interface to be detached. REQUIRED Browse through the available entries via the ARROW UP and ARROW DOWN keys. EXAMPLE: =>bridge iflist intf=TestBridge TestBridge: dest : TestBridge...
Bridge Commands bridge iflist Show the current state of all or the selected bridge interfaces. SYNTAX: bridge iflist [intf = <intfname>] where: intf The name of the bridge interface for which the configuration must be OPTIONAL shown. Browse through the available entries via the ARROW UP and ARROW DOWN keys.
Bridge Commands bridge macadd Add a static MAC address to the filtering database. This command allows to manually add static addresses, which should normally be dynamically discovered by the bridge itself. SYNTAX: bridge macadd intf = <intfname> hwaddr = <hardware-address> where: intf The name of the bridge interface for which the MAC address must be...
Bridge Commands bridge macdelete Remove a MAC address from the filtering database. SYNTAX: bridge macdelete hwaddr = <hardware-address> where: hwaddr The Ethernet MAC address of the entry which must be deleted. REQUIRED EXAMPLE: =>bridge maclist 00:0d:9d:47:dd:aa -- dynamic, ethport1 00:80:9f:01:23:45 -- static 00:90:d0:72:88:64 -- permanent 01:00:5e:00:00:67 -- static 01:00:5e:7f:ff:fa -- static...
CIP Commands cip ifadd Create a Classical IP oA interface at the local side of the Logical IP Subnet (LIS). SYNTAX: cip ifadd addr = <ip-address> [netmask = <ip-mask (dotted or cidr)>] [uniaddr = <portspec:address[.selector]>] where: addr The Classical IP oA interface's local IP address in the LIS. REQUIRED netmask The LIS's subnetmask.
CIP Commands cip ifdelete Delete a Classical IP oA interface at the local side of the LIS. SYNTAX: cip ifdelete addr = <ip-address> where: addr The Classical IP oA interface's local IP address in the LIS. REQUIRED EXAMPLE: =>cip iflist cip0 addr = 172.16.1.1 mask = 255.255.255.0...
CIP Commands cip pvcadd Create a PVC Address Resolution Protocol (ARP) entry for destinations which are not RFC1577/RFC2225 compliant. SYNTAX: cip pvcadd dest = <phonebook name> [destaddr = <ip-address>] [mtu = <number {273-20000}>] where: dest The ATM address (hardware address) of the destination host. REQUIRED Typically a phonebook name.
CIP Commands cip pvcdelete Delete a PVC ARP entry. SYNTAX: cip pvcdelete dest = <phonebook name> where: dest Typically a phonebook entry name. REQUIRED Represents the ATM address (hardware address) or name of the entry to be deleted. EXAMPLE: =>cip pvclist CIPPVC1 atmport = 80...
Config Commands config backup Store current configuration to backup file. SYNTAX: config backup filename = <user configuration filename> where: filename Filename for backup file of current configuration. REQUIRED RELATED COMMANDS: config dump Show the saved configuration file. config list Save complete runtime configuration. E-DOC-CTC-20040210-0028 v3.0...
Config Commands config dump Show the saved configuration file. SYNTAX: config dump RELATED COMMANDS: config backup Store current configuration to backup file. config list Load complete saved or default configuration. E-DOC-CTC-20040210-0028 v3.0...
Config Commands config erase Erase a user configuration file. If no filename is specified, all the user configuration files, saved in the SpeedTouch™ permanent storage, are Note deleted. SYNTAX: config erase [filename = <user configuration filename>] where: filename Name of the configuration file to erase. OPTIONAL RELATED COMMANDS: config flush...
Config Commands config list Show the current configuration set. SYNTAX: config list [templates = <{no|yes}>] where: templates List the template files (yes) or not (no) OPTIONAL The default is no. EXAMPLE: =>config list templates=yes Configurations file(s): user.ini Template file(s) No template files present Factory template file(s) : pppoe.tpl pppoa.tpl...
Config Commands config load Load complete saved (backup) or default configuration file. Use the command config flush before using the command config load. Note E-DOC-CTC-20040210-0028 v3.0...
Page 94
Config Commands SYNTAX: config load [load_ip = <{no|yes}>] [defaults = <{yes|no}>] [flush = <{yes|no}>] [echo = <{no|yes}>] [filename = <string>] where: load_ip Load IP settings (yes) or not (no). OPTIONAL Not keeping the IP settings could cause lost IP connectivity in Note the LAN.
Config Commands config save Save the current configuration, i.e. all existing configurations and modifications entered by the user. The result of executing this command is a user.ini file saved in the SpeedTouch™ permanent storage. This file can be downloaded via the SpeedTouch™ web pages or via an FTP session. SYNTAX: config save RELATED COMMANDS:...
Page 98
DHCP Commands Topic Page dhcp server lease list dhcp server pool add dhcp server pool config dhcp server pool delete dhcp server pool flush dhcp server pool list E-DOC-CTC-20040210-0028 v3.0...
DHCP Commands dhcp client ifadd Create a DHCP lease for a specific interface. SYNTAX: dhcp client ifadd intf = <interface name> where: intf The name of the dynamic interface to be created. REQUIRED EXAMPLE: =>dhcp client iflist No dynamic interfaces defined. =>dhcp client ifadd intf=NewEthoa =>dhcp client iflist NewETHoA...
DHCP Commands dhcp client ifattach Attach a DHCP lease to a dynamic interface. Create the interface first with the command dhcp client ifadd. Note SYNTAX: dhcp client ifattach intf = <interface name> where: intf The name of the dynamic interface to be attached. REQUIRED EXAMPLE: =>dhcp client iflist...
DHCP Commands dhcp client ifdelete Delete a dynamic interface. SYNTAX: dhcp client ifdelete intf = <interface name> where: intf The name of the dynamic interface to be deleted. REQUIRED EXAMPLE: =>dhcp client iflist NewETHoA [SELECTING] flags= IP address 10.0.0.10 HW address 00:90:d0:01:47:de DHCP server 255.255.255.255...
DHCP Commands dhcp client iflist Show all dynamic interfaces. SYNTAX: dhcp client iflist EXAMPLE: =>dhcp client iflist NewETHoA [INIT] flags= IP address 0.0.0.0 HW address 00:90:d0:01:47:de DHCP server 255.255.255.255 Number of leases: Total size of table: 19, in use: 1, free: 94 % =>...
DHCP Commands dhcp client ifrelease Release a lease attached to a dynamic interface. SYNTAX: dhcp client ifrelease intf = <interface name> where: intf The name of the dynamic interface. REQUIRED E-DOC-CTC-20040210-0028 v3.0...
Page 109
DHCP Commands EXAMPLE: =>dhcp client iflist NewETHoA [SELECTING] flags= IP address 10.0.0.10 HW address 00:90:d0:01:47:de DHCP server 255.255.255.255 hostname NewLease req.leasetime 10800 s trying to get a lease for 8 min, 32 sec transmission of DISCOVER in 57 sec retransmission timeout: nbr of retransmissions: Number of leases: Total size of table: 19,...
Page 110
DHCP Commands The SpeedTouch™ is configured as DHCP client on its Ethernet interface eth0. =>dhcp client iflist eth0 [BOUND] flags= IP address 10.0.0.3 HW address 00:90:d0:01:47:f1 DHCP server 10.10.1.1 lease renewal in days, 58 min, 45 sec lease rebinding in days, 20 h, 6 min, 18 sec lease expires in...
DHCP Commands dhcp client ifrenew Renew the lease of a dynamic interface. SYNTAX: dhcp client ifrenew intf = <interface name> where: intf The name of the dynamic interface. REQUIRED E-DOC-CTC-20040210-0028 v3.0...
Page 112
DHCP Commands EXAMPLE: =>dhcp client iflist NewETHoA [BOUND] flags= IP address 10.0.0.10 HW address 00:90:d0:01:47:f1 DHCP server 255.255.255.255 hostname NewLease req.leasetime = 10800 s lease renewal in days, 58 min, 48 sec lease rebinding in days, 20 h, 6 min, 18 sec lease expires in 10 days, 2 h, 28 min, 48 sec...
Page 113
DHCP Commands The SpeedTouch™ is configured as DHCP client on its Ethernet interface eth0. =>dhcp client stats DHCP client statistics: Corrupted packet recv OFFERs recv ACKs recv NAKs recv Pure BOOTP REPLIES Other message types DISCOVERs sent REQUESTs sent DECLINEs sent RELEASEs sent INFORMs...
DHCP Commands dhcp relay add Add a DHCP server to the DHCP server list. SYNTAX: dhcp relay add addr = <ip-address> [intf = <none|interface_name>] [giaddr = <ip-address>] where: addr The DHCP server IP address. REQUIRED intf The name of the relay interface. OPTIONAL Use None to indicate that no interface is specified.
DHCP Commands dhcp relay config Set the relay configuration settings. SYNTAX: dhcp server config [agentinfo = <{off|on}>] [agentmismatch = <{off|on}>] [trace = <{off|on}>] where: agentinfo Sets the relay agent info status (RFC3046) off or on. OPTIONAL The default is off. agentmismatch Forward/Drop DHCP reply packet when a relay agent info mismatch OPTIONAL...
DHCP Commands dhcp relay delete Delete a DHCP server from the DHCP server list. SYNTAX: dhcp relay delete addr = <ip-address> [intf = <interface name>] where: addr The DHCP server IP address. REQUIRED intf The name of the dynamic interface. OPTIONAL RELATED COMMANDS: dhcp relay add...
DHCP Commands dhcp relay iflist Show all dynamic interfaces. SYNTAX: dhcp relay iflist [intf = <interface name>] where: intf The name of the dynamic interface to be configured. OPTIONAL EXAMPLE: =>dhcp relay iflist pppoa_pppoa : admin state = down oper state = down max hops = 4 trusted = no remote id =...
DHCP Commands dhcp relay list List the DHCP server list. SYNTAX: dhcp relay list EXAMPLE: =>dhcp relay list DHCP server Interface giaddr ------------------------------------------------------- 127.0.0.1 eth0 10.0.0.138 => RELATED COMMANDS: dhcp relay add Add a DHCP server to the DHCP server list. dhcp relay config Set the relay configuration settings.
DHCP Commands dhcp server clear Clear SpeedTouch™ DHCP server statistics. SYNTAX: dhcp server clear EXAMPLE: =>dhcp client stats Corrupted packet recv OFFERs recv 9575 ACKs recv NAKs recv Pure BOOTP REPLIES Other message types DISCOVERs sent 9552 REQUESTs sent DECLINEs sent RELEASEs sent INFORMs...
DHCP Commands dhcp server config Show/set SpeedTouch™ DHCP server configuration settings. SYNTAX: dhcp server config [autodhcp = <{off|on}>] [scantime = <number>] [state = <{disabled|enabled}>] [trace = <{off|on}>] where: autodhcp Allow the SpeedTouch™ to present itself as DHCP client OPTIONAL (AutoDHCP mode) at boot time and probe for another DHCP server on the network for some time before starting its own DHCP server (on) or immediately start the DHCP server (off).
DHCP Commands dhcp server flush Flush all DHCP server pool and lease entries. The flush command does not impact previously saved configurations. Note SYNTAX: dhcp server flush RELATED COMMANDS: dhcp server stats Show current DHCP server state and statistics. dhcp server config Show/set current DHCP server configuration.
DHCP Commands dhcp server policy Show/set SpeedTouch™ DHCP server policy. SYNTAX: dhcp server policy [verifyfirst = <off|on>] [trustclient = <off|on>] where: verifyfirst Probe the network for conflicting IP addresses before giving a OPTIONAL suggested IP address to the requesting DHCP client (on) or not (off). trustclient Take the IP address suggested by a DHCP client into account (on) or OPTIONAL...
DHCP Commands dhcp server stats Show SpeedTouch™ DHCP server statistics. SYNTAX: dhcp server stats EXAMPLE: =>dhcp server stats DHCP Server State: Stopped DHCP server statistics: Corrupted packet recv DISCOVER 2451 REQUEST DECLINE RELEASE INFORM Pure BOOTP REQUESTS Other message types OFFERs sent 2451 ACKs sent...
Page 128
DHCP Commands OFFERs sent the number of IP address offers sent in reply to DHCP requests. ACKs sent the number of ACKnowledgement replies sent to successfully configured DHCP clients. NAKs sent the number of Not-AcKnowledgement replies sent to wrongly configured DHCP clients. Relay agent options dropped Lease table got full whether the maximum number of DHCP leases is reached or not.
DHCP Commands dhcp server lease add Assign a DHCP server lease to a DHCP host in the local network. SYNTAX: dhcp server lease add clientid = <client-id> pool = <string> [addr = <ip-address>] [offset = <number>] [leasetime = <number>] [hostname = <{hostname|""}>] where: clientid The DHCP client identification string of the booting host.
Page 130
DHCP Commands EXAMPLE: =>dhcp server lease list Lease Pool State Clientid 0.0.0.0 dhcp_pool_1 00:26:40 FREE 00:90:D0:12:34:56 =>dhcp server lease add clientid=01:23:55:67:89:ab pool=Local_pool leasetime=3600 =>dhcp server lease list Lease Pool State Clientid 0.0.0.0 dhcp_pool_1 00:26:40 FREE 00:90:D0:12:34:56 10.0.0.1 local_pool 00:59:22 USED 01:23:45:67:89:AB =>...
DHCP Commands dhcp server lease delete Delete a DHCP lease. SYNTAX: dhcp server lease delete [clientid = <clientid|none>] [index = <number>] where: clientid The DHCP client identification string of the DHCP lease. OPTIONAL If no DHCP client is specified, all DHCP clients are deleted. index The index number of the entry to be deleted.
DHCP Commands dhcp server lease flush Flush complete DHCP server configuration and dynamic leases. The flush command does not impact previously saved configurations. Note SYNTAX: dhcp server lease flush [pool = <string>] where: pool The name of the DHCP server pool to be flushed. OPTIONAL Only the leases belonging to this pool will be deleted.
DHCP Commands dhcp server lease list List current DHCP leases, indicated by their index number. SYNTAX: dhcp server lease list [clientid = <clientid|none>] [index = <number>] where: clientid The DHCP client identification string of the DHCP lease. OPTIONAL If no DHCP client is specified, all DHCP clients are listed. index The index number of the entry to be deleted.
DHCP Commands dhcp server pool add Add a DHCP server pool. SYNTAX: dhcp server pool add [name = <string>] [index = <number>] where: name A name for the DHCP server pool. If not specified, the name is OPTIONAL “dhcp_pool_x”, where x is a subsequent number. index The number of the pool before which you want the new pool to OPTIONAL...
DHCP Commands dhcp server pool config Configure an existing DHCP server pool. Before you are able to configure the DHCP server pool, you must create it via the command dhcp server pool add. SYNTAX: dhcp server pool config name = <string> [index = <number>] [intf = <string>] [poolstart = <ip-address>]...
Page 136
DHCP Commands server The IP address of the DHCP server for DHCP clients. OPTIONAL primdns The IP address of the primary DNS server for the DHCP clients. OPTIONAL Default value of this parameter is 0 (not specified), which means that the IP address of the DNS server will be communicated by the remote server as soon as the PPP IPCP subnetmasking connection is established or that the SpeedTouch™...
DHCP Commands dhcp server pool delete Delete a DHCP server pool. SYNTAX: dhcp server pool delete name = <string> where: name The name of the DHCP server pool to delete. REQUIRED Use the command dhcp server pool list to see a list of Note all current DHCP leases.
DHCP Commands dhcp server pool flush Flush all DHCP server pools. The flush command does not impact previously saved configurations. Note SYNTAX: dhcp server pool flush EXAMPLE: =>dhcp server pool list Pool Start Intf State 0 LAN_Private 10.0.0.1 10.0.0.254 eth0 USED 1 My_Pool 192.6.11.101...
DHCP Commands dhcp server pool list List current DHCP server pools. SYNTAX: dhcp server pool list [name = <string>] where: name The name of the DHCP server pool to be shown. OPTIONAL Use the command dhcp server pool list to see a list of Note all current DHCP server pools.
DNS Commands DNS Commands Contents This chapter covers the following commands: Topic Page dns add dns clear dns clrstats dns delete dns domain dns flush dns fwdadd dns fwddelete dns fwdlist dns fwdtable dns list dns nslookup dns start dns stats dns status dns stop dns toutfwd...
DNS Commands dns add Add an entry to the local Domain Name System (DNS) table. SYNTAX: dns add hostname = <string> [addr = <ip-address>] where: hostname The name of the IP host to add (without the (sub)domain name). REQUIRED addr The IP address of the host (without mask).
DNS Commands dns clear Clear the local DNS table. SYNTAX: dns clear EXAMPLE: =>dns list Domain: business.lan Hostname IP Address SpeedTouch™ *.*.*.* TestHost 10.0.0.140 HTTP_Server 10.0.0.8 FTP_Server 10.0.0.7 Total Table Size: 73 entries Amount used: 4 (5%) =>dns clear =>dns list Domain: business.lan Hostname IP Address...
DNS Commands dns clrstats Clear the DNS statistics. SYNTAX: dns clrstats EXAMPLE: =>dns stats DNS Statistics: Corrupted packets recv Local questions resolved Local neg answers sent Total DNS packets fwd External answers recv Fwd table full, discard Spurious answers Unknown query types Total number of packets received =>dns clrstats DNS statistics cleared.
DNS Commands dns delete Delete an entry from the local DNS table by index. SYNTAX: dns delete index = <number> where: index The index of the entry to be deleted. REQUIRED Use dns list to see a list of the index numbers of all current DNS Note entries.
DNS Commands dns domain Set the local DNS domain name. SYNTAX: dns domain domain = <string> where: domain The local DNS domain name of this domain. REQUIRED EXAMPLE: =>dns list Domain: business.lan Hostname IP Address SpeedTouch™ *.*.*.* TestHost 10.0.0.140 HTTP_Server 10.0.0.8 FTP_Server 10.0.0.7...
DNS Commands dns flush Flush the complete SpeedTouch™ DNS server/forwarder configuration and static entries. The flush command does not impact previously saved configurations. Note SYNTAX: dns flush EXAMPLE: =>dns list Domain: office.home.lan Hostname IP Address Z7V1D8 10.0.0.29 SpeedTouch™ *.*.*.* TestHost 10.0.0.140 Default 10.0.0.8...
DNS Commands dns fwdadd Add a DNS forwarding entry. The entries in the forwarding list determine which DNS server should be used for which PC. If an identification cannot be established within the local LAN, the request is forwarded to another DNS server, on another network (Internet/LAN to LAN connection).
DNS Commands dns fwddelete Delete a DNS forwarding entry. SYNTAX: dns fwddelete src = <ip-address> mask = <ip-mask (dotted or cidr)> [dns = <ip-address>] where: The source IP address (pool) of the hosts to remove the entry for. REQUIRED mask The source IP (sub)netmask.
DNS Commands dns fwdlist List all forwarding entries. SYNTAX: dns fwdlist EXAMPLE: =>dns fwdlist DNS forwarding servers: MASK Direct 10.0.0.138 10.0.0.0 255.255.255.0 192.6.11.150 192.6.11.0 255.255.255.0 => RELATED COMMANDS: dns fwdadd Add a DNS forwarding entry. dns fwddelete Delete a DNS forwarding entry. dns fwdtable Show DNS forwarding table.
DNS Commands dns fwdtable Show DNS forwarding table, i.e. list all currently unresolved DNS requests. SYNTAX: dns fwdtable EXAMPLE: =>dns fwdtable Forwarding table: Ip Address (port#):id(hex) (expiry) dns server tries 10.10.10.12 (54751):8331 (13 sec) 10.10.10.112 Timeout: 15 seconds Table size: 10 amount of table used: 1 (10%) =>...
DNS Commands dns list List the contents of the local DNS table. SYNTAX: dns list EXAMPLE: =>dns list Domain: office.home.lan Hostname IP Address Z7V1D8 10.0.0.29 SpeedTouch™ *.*.*.* TestHost 10.0.0.140 Default 10.0.0.8 ftpserver 172.16.0.1 Total Table Size: 73 entries Amount used: 5 (6%) =>...
DNS Commands dns nslookup Look up a name or an IP address via local DNS. SYNTAX: dns nslookup lookup = <string> where: lookup The DNS hostname or IP address to query. REQUIRED EXAMPLE: =>dns list Domain: office.home.lan Hostname IP Address Z7V1D8 10.0.0.29 SpeedTouch™...
DNS Commands dns start Start the local DNS server and forwarder. SYNTAX: dns start EXAMPLE: =>dns status DNS server status: Stopped DNS table size in use: free: 94 % DNS forwarding table size in use: free: 100 % DNS forwarding dns servers table size in use: free: 84 %...
DNS Commands dns stats Show the DNS server/forwarder statistics. SYNTAX: dns stats EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch™ is configured as DNS server. =>dns list Domain: SpeedLAN.local Hostname IP Address SpeedTouch™ *.*.*.* Server 10.10.1.1 Client 10.0.0.3 Total Table Size: 73 entries Amount used: 3 (4%) =>dns stats DNS Statistics:...
DNS Commands dns status Show the current status of the DNS server/forwarder. SYNTAX: dns status EXAMPLE: =>dns status DNS server status: Stopped DNS table size in use: free: 94 % DNS forwarding table size in use: free: 100 % DNS forwarding dns servers table size in use: free: 84 %...
DNS Commands dns stop Stop the local DNS server/forwarder. SYNTAX: dns stop EXAMPLE: =>dns status DNS server status: Started DNS table size in use: free: 94 % DNS forwarding table size in use: free: 100 % DNS forwarding dns servers table size in use: free: 84 %...
DNS Commands dns toutfwd Set the DNS forwarding timeout. SYNTAX: dns toutfwd timeout = <number> where: timeout A number (of seconds). REQUIRED Represents the query forwarding timeout. This parameter determines how long the SpeedTouch™ DNS server should try to contact a (remote) DNS server before (temporarily) declaring the DNS requests unresolved.
DNS Commands dns troff Disable verbose console messaging. No debug traces are generated. SYNTAX: dns troff EXAMPLE: =>dns status DNS server status: Started DNS table size in use: free: 94 % DNS forwarding table size in use: free: 100 % DNS forwarding dns servers table size in use: free:...
DNS Commands dns tron Enable verbose console messaging. Debug traces are generated. SYNTAX: dns tron EXAMPLE: =>dns status DNS server status: Started DNS table size in use: free: 94 % DNS forwarding table size in use: free: 100 % DNS forwarding dns servers table size in use: free: 84 %...
Env Commands Env Commands Contents This chapter covers the following commands Topic Page env flush env get env list env set env unset E-DOC-CTC-20040210-0028 v3.0...
Env Commands env get Get the current value of a environment variable. SYNTAX: env get var = <string> where: The name of the environment variable. REQUIRED Use the command env list to see a list of all environment variables. EXAMPLE: =>env get var=ATM_addr 8*35 =>...
Env Commands env set Create and set a non-system environment variable or change the value of a non-system environment variable. SYNTAX: env set var = <string> value = <translated string> where: The name of the environment variable. REQUIRED When creating an environment variable, any name is allowed, however spaces are not allowed and the name may not start with “CONF”, “HOST”, an underscore “_”...
The name of the environment variable to delete. REQUIRED System variables (built-in variables with names starting with an underscore “_”, “CONF” or “HOST”) cannot be unset, changed or deleted. EXAMPLE: =>env list _COMPANY_NAME=THOMSON multimedia _COMPANY_URL=http://www.speedtouch.com _PROD_NAME=SpeedTouch ..CONF_DATE=March 2004 HOST_SETUP=user ATM_addr=8*35 =>env unset var=ATM_addr...
Eth Commands Eth Commands Contents This chapter covers the following commands: Topic Page eth config eth ifconfig eth iflist E-DOC-CTC-20040210-0028 v3.0...
Eth Commands eth config Enable/disable the Ethernet interface. SYNTAX: eth config intf = <number {1-4}> [state = <{enabled|disabled}>] where: intf The Ethernet interface to be configured. REQUIRED state Enable or disable the Ethernet interface. OPTIONAL The default is enabled. EXAMPLE: =>eth config ETH Intf 1 port state = UP [forwarding]...
Eth Commands eth ifconfig Configure the Ethernet port. SYNTAX: eth ifconfig intf = <number {1-4}> type = <{auto|10BaseTHD|10BaseTFD|100BaseTHD|100BaseTFD} or number> where: intf The Ethernet interface to be configured. REQUIRED type The Ethernet type. REQUIRED Select either: • auto: Auto negotiation of Ethernet communication speed (10Mb/s or 100Mb/s) and Duplex mode (half duplex or full duplex).
Eth Commands eth iflist Show the Ethernet port configuration and current operating status. SYNTAX: eth iflist EXAMPLE: =>eth iflist Intf Type Result Type auto 100BaseTFD auto 100BaseTFD auto 100BaseTFD auto 100BaseTFD => DESCRIPTION: Type Indicates the configured Ethernet communication speed and duplex mode. Result type Indicates the effective operating status if Type equals auto.
ETHoA Commands ethoa ifadd Create a new ETHoA interface. SYNTAX: ethoa ifadd [intf = <string>] [dest = <phonebook entry>] where: intf The name for the new ETHoA interface. OPTIONAL If not specified, the destination will double as interface name. dest The destination for the new ETHoA interface.
ETHoA Commands ethoa ifconfig Configure an ETHoA interface. SYNTAX: ethoa ifconfig intf = <intfname> [dest = <intfname>] [qos = <string>] [encaps = <{llc/snap|vcmux}>] [retry = <number {0-65535}>] where: intf The name of the ETHoA interface to be configured. REQUIRED dest The destination for this interface.
ETHoA Commands ethoa iflist Show all or a specified ETHoA interface(s). SYNTAX: ethoa iflist [intf = <intfname>] where: intf The name of the ETHoA interface. OPTIONAL If not specified, all ETHoA interfaces are shown. Note EXAMPLE: =>ethoa iflist Newethoa : dest : Br3 Retry : 10 QoS : default Encaps : llc/snap...
Firewall Commands firewall assign Assign a chain to an entry point. An entry point, also referred to as hook or a Packet Interception Point (PIP), is the location where packets are intercepted to be compared against a chain of rules. SYNTAX: firewall assign hook = <{input|sink|forward|source|output}>...
Page 183
Firewall Commands EXAMPLE: =>firewall list assign hook=sink chain=sink assign hook=forward chain=forward assign hook=source chain=source =>firewall chain create chain=Telnet =>firewall assign hook=sink chain=Telnet =>firewall list assign hook=sink chain=Telnet assign hook=forward chain=forward assign hook=source chain=source => RELATED COMMANDS: firewall flush Clear all hooks. firewall list Show a list of all chain assignments.
Firewall Commands firewall list Show the association(s) between all hooks or a specified hook and their chain(s). SYNTAX: firewall list [hook = <{input|sink|forward|source|output}>] where: hook The name of the hook for which the associations must be shown. OPTIONAL Choose between: •...
Firewall Commands firewall unassign Clear a specific hook. SYNTAX: firewall unassign hook = <{input|sink|forward|source|output}> where: hook The name of the hook to be cleared. REQUIRED Choose between: • input • sink • forward • source • output. RELATED COMMANDS: firewall assign Assign a chain to a hook.
Firewall Commands firewall chain create Create a new chain. SYNTAX: firewall chain create chain = <string> where: chain The name of the chain to be created. REQUIRED EXAMPLE: =>firewall chain list Tempo, source, forward, sink =>firewall chain create chain=Telnet =>firewall chain list Telnet, Tempo, source, forward, sink =>...
Firewall Commands firewall chain list Show a list of all current chains. SYNTAX: firewall chain list EXAMPLE INPUT/OUTPUT: =>firewall chain list source, forward, sink =>firewall chain create chain=Telnet =>firewall chain list Telnet, source, forward, sink => RELATED COMMANDS: firewall assign Assign a chain to an entry point.
Firewall Commands firewall rule clear Clear statistics SYNTAX: firewall rule clear [chain = <string>] [index = <number>] where: chain The name of the chain in which the rule is to be found. OPTIONAL If no chain is specified, the statistics of all the chains will Note be cleared.
Firewall Commands firewall rule create Create a rule. If a value is preceded by a “!”, it means "NOT". Note E.g. "dstintfgrp=!wan" means "if dstintfgrp is different from WAN". SYNTAX: firewall rule create chain = <string> [index = <number>] [srcintf [!]= <string>] [srcintfgrp [!]= <{wan|local|lan} or number>] [src [!]= <ip-address>] [dstintf [!]= <string>]...
Page 195
Firewall Commands srcintfgrp The interface group the packet should [or should NOT] arrive on. OPTIONAL Choose between: • • local • lan. NOT applicable if used in a chain assigned to the output Note hook. The source IP address (range) the packet should [or should NOT] OPTIONAL come from.
Page 196
Firewall Commands prot The protocol (name or number) expected [or NOT expected] in OPTIONAL the IP packet. Choose between: • icmp • igmp • ipinip • • • • • ipcomp or, alternatively, specify the protocol number. Expect TCP SYN flag set (yes) or not (no). OPTIONAL In combination with TCP ACK, this allows selection of incoming versus outgoing TCP connections.
Page 197
Firewall Commands icmptype The expected [or NOT expected] ICMP type (name or number) of OPTIONAL the packet. Select one of the supported ICMP type names (See “ Supported ICMP Type Names” on page 557 for a listing of ICMP type names supported by the SpeedTouch™).
Firewall Commands firewall rule delete Delete a rule. SYNTAX: firewall rule delete chain = <string> index = <number> where: chain The name of the chain in which the rule must be deleted. REQUIRED index The index number of the rule in the chain. REQUIRED Use firewall rule list first to determine the index number Note...
Firewall Commands firewall rule flush Flush all rules created for a chain(s). The chain itself is not removed. The flush command does not impact previously saved configurations. Note SYNTAX: firewall rule flush [chain = <string>] where: chain The name of the chain to be emptied. OPTIONAL If this parameter is not specified, all rules for all chains Note...
Firewall Commands firewall rule list Show a list of rules. SYNTAX: firewall rule list [chain = <string>] where: chain The name of the chain for which the rules must be listed. OPTIONAL If this parameter is not specified, all rules for all chains Note are shown.
Firewall Commands firewall rule stats Show statistics, i.e. the number of packets and bytes which have passed the hooks. SYNTAX: firewall rule stats [chain = <string>] [index = <number>] where: chain The name of the chain for which the statistics must be listed. OPTIONAL In case this parameter is not specified, the statistics for the rules applicable to all chains are shown.
Page 202
Firewall Commands EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouch™ is configured as DHCP client on its Ethernet interface eth0. =>firewall rule list chain=Sending :firewall rule create chain=Sending index=0 srcintfgrp=lan src=10.0.0.3/32 dst=10.10.1.1/32 prot=icmp action=count :firewall rule create chain=Sending index=1 srcintfgrp=lan src=10.10.1.1/32 dst=10.0.0.3/32 prot=icmp action=count =>firewall rule stats Chain source,...
GRP Commands grp config Set Gateway Routing Protocol (GRP) configuration settings. SYNTAX: grp config [cdistance = <number{0-255}>] [kdistance = <number{0-255}>] [rdistance = <number{0-255}>] [trace = <{off|on}>] where: cdistance A number between 0 and 255. OPTIONAL Sets the distance of the connected route type. The default is 0.
GRP Commands grp ifconfig Configure the interface's routing parameters. SYNTAX: grp ifconfig intf = <available interface names> metric = <number{1-16}> where: intf The name of the interface. REQUIRED Use the command grp iflist for a list of available interfaces or Note browse the available interfaces with the ARROW UP and ARROW DOWN keys.
GRP Commands grp iflist Show current interfaces. SYNTAX: grp iflist [intf = <available interface names>] where: intf The name of the interface to be shown. OPTIONAL EXAMPLE: =>grp iflist Interface : DIALUP_PPP2 index metric : 9180 flags : <UP,POINTTOPOINT> address : 129.16.1.1/24 Interface : eth0 index metric...
GRP Commands grp rtlist Show the current routes in the GRP interfaces routing table. SYNTAX: grp rtlist [dst = <ip-address>] [dstmask = <ip-mask(dotted or cidr)>] where: The destination IP address of the route. OPTIONAL Supports ip/mask notation. dstmask The destination IP address mask, either in dotted or in numerical cidr OPTIONAL notation.
GRP Commands grp rip bnadd Add an IP address to the Routing Information Protocol (RIP) black network list. SYNTAX: grp rip bnadd addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] where: addr The IP network address. REQUIRED Supports ip/mask notation. netmask The subnetmask associated with this IP address, either in dotted or in OPTIONAL...
GRP Commands grp rip bndelete Delete an IP address from the RIP black network list. SYNTAX: grp rip bndelete addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] where: addr The IP network address to be deleted. REQUIRED Supports ip/mask notation. netmask The subnetmask associated with this IP address, either in dotted or in OPTIONAL...
GRP Commands grp rip bnlist Show the RIP black network list. SYNTAX: grp rip bnlist EXAMPLE: =>grp rip bnlist RIP black network address list =================================== 192.6.11.150/24 => RELATED COMMANDS: grp rip bnadd Add an IP address to the RIP black network list. grp rip bndelete Delete an IP address from the RIP black network list.
Page 213
GRP Commands impcrt Enable (on) or disable (off) the import of connected routes. OPTIONAL The default is on. impkrt Enable (on) or disable (off) the import of kernel routes. OPTIONAL The default is on. impsrt Enable (on) or disable (off) the import of static routes. OPTIONAL The default is is on.
GRP Commands grp rip ifconfig Configure a RIP interface. SYNTAX: grp rip ifconfig intf = <interface name> [rip = <{off|on}>] [txversion = <{rip_unspec|rip_v1|rip_v2|rip_v1-2}>] [rxversion = <{rip_unspec|rip_v1|rip_v2|rip_v1-2}>] [authmode = <{none|cleartext}>] [authstring = <quoted string>] [passive = <{off|on}>] [splithorizon = <{off|on}>] where: intf The name of the RIP interface to be configured.
Page 216
GRP Commands authstring Configure the authentication string for the RIP authentication OPTIONAL password. Leave authstring unspecified in case the authentication mode is none. passive Enable (on) or disable (off) the passive interface status for this interface. OPTIONAL The default is on. splithorizon Enable (on) or disable (off) the split horizon status for this interface.
GRP Commands grp rip nblist Show the RIP neighbor list. SYNTAX: grp rip nblist EXAMPLE: =>grp rip nblist RIP neighbor list ====================== 192.6.11.150 => RELATED COMMANDS: grp rip nbadd Add a RIP neighbor to the RIP neighbor list. grp rip nbdelete Delete a RIP neighbor from the RIP neighbor list.
GRP Commands grp rip rtfadd Add a route filter to the RIP route filter list. SYNTAX: grp rip rtfadd addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] direction = <{incoming|outgoing}> intf = <string> where: addr The IP network address which must be filtered out. REQUIRED netmask The subnetmask associated with this address.
GRP Commands grp rip rtfdelete Delete a route filter from the RIP route filter list. SYNTAX: grp rip rtfdelete addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] direction = <{incoming|outgoing}> intf = <string> where: addr The IP network address which must be filtered out. REQUIRED OPTIONAL netmask...
GRP Commands grp rip show Show the RIP settings and the routes in the RIP database. SYNTAX: grp rip show EXAMPLE: =>grp rip show RIP routing protocol config dump ------------------------------------ RIP daemon is active Global RIP queries received : 0 Global RIP route changes : 3 Default version : send rip_v2, receive rip_v2 Default redistribution metric is 1...
IP Commands IP Commands Contents This chapter covers the following commands: Topic Page ip apadd ip apdelete ip aplist ip arpadd ip arpdelete ip arplist ip config ip flush ip httpprobe ip ifconfig ip iflist ip ifwait ip mcadd ip mcdelete ip mclist ip ping ip rtadd...
IP Commands ip apadd Assign an Internet Protocol (IP) address to an IP interface. SYNTAX: ip apadd addr = <ip-address> [netmask = <ip-mask (dotted or cidr)>] intf = <interface name> [pointopoint = <ip-address>] [addrtrans = <{none|pat}>] [addroute = <{no|yes}>] where: addr The new IP address to be added.
IP Commands ip apdelete Remove an IP address from an IP interface. SYNTAX: ip apdelete addr = <ip-address> where: addr The IP address to be deleted. REQUIRED EXAMPLE: =>ip aplist 2 eth0 Type:Ethernet HWaddr 00:80:9f:24:ab:cf BRHWaddr ff:ff:ff:ff:ff:ff inet addr:10.0.0.2 Bcast:10.0.0.255 Mask:255.255.255.0 UP RUNNING MTU:1500...
IP Commands ip aplist Show a list of all configured IP addresses. SYNTAX: ip aplist EXAMPLE: =>ip aplist 2 eth0 Type:Ethernet HWaddr 00:80:9f:24:ab:cf BRHWaddr ff:ff:ff:ff:ff:ff inet addr: 10.0.0.2 Bcast: 10.0.0.255 Mask: 255.255.255.0 UP RUNNING MTU:1500 ReasmMAX:65535 Group:2 IPRX bytes:0 unicastpkts:0 brcastpkts:0 IPTX bytes:0...
IP Commands ip arpadd Add an entry to the ARP cache of a broadcast IP interface. SYNTAX: ip arpadd intf = <interface name> ip = <ip-range> [hwaddr = <hardware-address>] where: intf The IP interface name. REQUIRED The IP address [range] of the entry to be added. REQUIRED hwaddr The hardware address (e.g.
IP Commands ip arpdelete Remove an entry from the ARP cache. SYNTAX: ip arpdelete intf = <interface name> ip = <ip-range> [hwaddr = <hardware-address>] where: intf The interface name. REQUIRED The IP address [range] of the entry to be deleted. REQUIRED hwaddr The hardware address (e.g.
IP Commands ip arplist Show the ARP cache. SYNTAX: ip arplist EXAMPLE: =>ip arplist Intf IP-address HW-address Type eth0 10.0.0.1 00:01:42:5f:7d:81 DYNAMIC eth0 10.0.0.8 00:a0:24:ae:66:e1 DYNAMIC eth0 10.0.1.99 52:41:53:20:20:4d STATIC eth0 10.0.1.100 52:41:53:20:f0:90 STATIC eth0 10.0.0.2 00:10:a4:d0:9a:db STATIC => RELATED COMMANDS: ip arpadd Add a static entry to the ARP cache.
IP Commands ip config Show/set global IP stack configuration options. SYNTAX: ip config [forwarding = <{off|on}>] [firewalling = <{off|on}>] [redirects = <{off|on}>] [sourcerouting = <{off|on}>] [netbroadcasts = <{off|on}>] [ttl = <number{0-255}>] [fraglimit = <number{1-1024}>] [defragmode = <{normal|always|nat}>] [addrcheck = <{off|own|static|dynamic}>] [mssclamping = <{off|on}>] where: forwarding...
Page 234
IP Commands fraglimit A number between 1 and 1024. OPTIONAL Represents the maximum number of IP packet fragments waiting for completion. Generally, the fragmentation limit is 64. By limiting the fragmentation limit, the depletion of the buffer is avoided. defragmode Define which packets are reassembled under which circumstances.
Page 235
IP Commands EXAMPLE: =>ip config Forwarding on Firewalling off Sendredirects off Sourcerouting on NetBroadcasts off Default TTL 128 Fraglimit 32 fragments Fragcount currently 0 fragments Defragment mode : always Address checks : static Mss clamping : on =>ip config firewalling=on ttl=64 fraglimit=64 defragmode=nat =>ip config Forwarding on Firewalling on...
IP Commands ip flush Flush complete IP configuration. Dynamic configurations (e.g. from PPP or CIP links) remain. 1.The flush command does not impact previously saved configurations. Note 2. As the command ip flush causes all local IP connectivity to be deleted, do not use this command during an IP based local connection, e.g.
IP Commands ip httpprobe Send HTTP probe to measure the Round Trip Time (RTT) taken to connect and access data from a HTTP server. SYNTAX: ip httpprobe url = <string> [version = <{1.0|1.1}>] where: The Uniform Resource Locator (URL) identifying the HTTP server. REQUIRED version The HTTP version to be used for the request.
IP Commands ip ifconfig Configure IP interface parameters. SYNTAX: ip ifconfig intf = <interface name> [mtu = <number{68-20000}>] [status = <{down|up}>] [hwaddr = <hardware-address>] [group = <{wan|local|lan}> or number] [linksensing = <{off|on}>] where: intf The IP interface name. REQUIRED A number between 68 and 20000. OPTIONAL Represents the maximum transmission unit, i.e.
IP Commands ip iflist Show all IP interfaces. SYNTAX: ip iflist EXAMPLE: =>ip iflist Interface TX-DROP STATUS HWADDR loop 1500 eth0 3000 21045795 1019664 00:80:9f:24:ab:cf ETHoA 1500 00:80:9f:24:ab:cf cip0 9180 => RELATED COMMANDS: ip ifconfig Configure interface parameters. E-DOC-CTC-20040210-0028 v3.0...
IP Commands ip ifwait Wait for a status change of an IP interface. SYNTAX: ip ifwait intf = <interface name> [timeout = <number{1-600000}>] [adminstatus = <{down|up}>] [operstatus = <{down|up}>] [linkstatus = <{down|up}>] where: intf The IP interface name. REQUIRED timeout A number between 1 and 600000 (seconds).
IP Commands ip mcadd Add a MC address to a MC capable interface. SYNTAX: ip mcadd intf = <interface name> addr = <ip-address> [mask = <ip-mask(dotted or cidr)>] where: intf The IP interface name. REQUIRED addr The Multicast IP address. OPTIONAL mask The Multicast IP address mask associated with this address...
IP Commands ip mcdelete Delete a MC address to a MC capable interface. SYNTAX: ip mcadd intf = <interface name> addr = <ip-address> [mask = <ip-mask(dotted or cidr)>] where: intf The IP interface name. REQUIRED addr The Multicast IP address. OPTIONAL mask The Multicast IP address mask associated with this address...
IP Commands ip mclist List all MC addresses. SYNTAX: ip mclist RELATED COMMANDS: ip mcadd Add a MC address to a MC capable interface. ip mcdelete Delete a MC address to a MC capable interface. E-DOC-CTC-20040210-0028 v3.0...
IP Commands ip ping Send ICMP ECHO_REQUEST packets. SYNTAX: ip ping addr = <ip-address> [count = <number{1-1000000}>] [size = <number{1-20000}>] [interval = <number{100-1000000}>] [listen = <{off|on}>] where: addr The destination IP address. REQUIRED count A number between 1 and 1000000. OPTIONAL Represents the number of pings to send.
IP Commands ip rtadd Add a route to the SpeedTouch™ routing table. SYNTAX: ip rtadd dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [label = <string>] [gateway = <ip-address>] [intf = <interface name>] [metric = <number{0-100}>] where: The destination IP address(es) for this route. REQUIRED Supports cidr notation.
IP Commands ip rtdelete Delete a route from the routing table. SYNTAX: ip rtdelete dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [label = <string>] [gateway = <ip-address>] [intf = <interface name>] where: The destination IP address(es) for this route. REQUIRED Supports cidr notation.
IP Commands ip rtlist Show the current routing table. SYNTAX: ip rtlist EXAMPLE: =>ip rtlist Destination Label Gateway Intf Mtrc Status 10.0.0.0/24 10.0.0.140 eth0 [UP] 10.0.0.140/32 10.0.0.140 eth0 [UP] 127.0.0.1/32 127.0.0.1 loop [UP] => RELATED COMMANDS: ip rtadd Add a route to the routing table. ip rtdelete Remove a route from the routing table.
IP Commands ip sendto Send UDP packets. SYNTAX: ip sendto addr = <ip-address> [count = <number{1-1000000}>] [size = <number{1-20000}>] [interval = <number{100-1000000}>] [listen = <{off|on}>] [srcport = <number{1-65535}>] dstport = <number{1-65535}> where: addr The destination IP address. REQUIRED count A number between 1 (default) and 1000000. OPTIONAL Represents the number of UDP packets to send.
IP Commands ip auto ifadd Create a new autoIP interface. SYNTAX: ip auto ifadd intf = <interface name> [addr = <ip-address>] where: intf The name of the IP interface for which a link-local address has to be REQUIRED allocated. addr The preferred link-local IP address.
IP Commands ip auto ifattach Select and assign a link-local address to an autoIP interface. SYNTAX: ip auto ifattach intf = <interface name> where: intf The name of the IP interface for which a link-local address has to be REQUIRED attached.
IP Commands ip auto ifdelete Delete an existing autoIP interface. SYNTAX: ip auto ifdelete intf = <interface name> where: intf The name of the IP interface to be deleted. REQUIRED Typically, a phonebook entry. RELATED COMMANDS: ip auto flush Flush the autoIP interfaces. ip auto ifadd Create a new autoIP interface.
IP Commands ip auto ifdetach Release the link-local address for the given autoIP interface. SYNTAX: ip auto ifdetach intf = <interface name> where: intf The name of the IP interface for which a link-local address has to be REQUIRED detached. RELATED COMMANDS: ip auto ifattach Select and assign a link-local address to an autoIP interface.
IP Commands ip auto iflist Show the autoIP interfaces. SYNTAX: ip auto iflist [intf = <interface name>] where: intf The name of the interface to be listed. If no name is specified, all the OPTIONAL autoIP interfaces are shown. EXAMPLE: =>ip auto iflist eth0 : [CLAIMED] 169.254.138.1...
IPoA Commands ipoa ifadd Create a new IPoA interface. SYNTAX: ipoa ifadd [intf = <string>] [dest = <phonebook entry>] where: intf The name for the new IPoA interface. OPTIONAL If not specified, the destination will double as interface name. dest The destination for the new IPoA interface.
IPoA Commands ipoa ifconfig Configure an IPoA interface. SYNTAX: ipoa ifconfig intf = <string> [dest = <intfname>] [qos = <string>] [encaps = <{llc/snap|vcmux}>] [retry = <number {0-65535}>] where: intf The name of the IPoA interface to configure. REQUIRED dest The destination for this interface. Typically a phonebook entry. OPTIONAL This parameter needs only to be specified in case of an interface created without specified destination.
Page 262
IPoA Commands ipoa ifattach Attach (i.e. connect) an IPoA interface. ipoa ifdelete Delete an IPoA interface. ipoa ifdetach Detach an IPoA interface. ipoa iflist Show current IPoA interfaces. E-DOC-CTC-20040210-0028 v3.0...
IPoA Commands ipoa iflist Show all or a specified IPoA interface(s). SYNTAX: ipoa iflist [intf = <intfname>] where: intf The name of the IPoA interface. OPTIONAL If not specified all IPoA interfaces are listed. EXAMPLE: =>ipoa iflist Newipoa dest : Br3 Retry : 10 QoS : default Encaps : llc/snap...
IPQoS Commands ipqos config Configure Internet Protocol (IP) Quality of Service (QoS) for a given destination interface for the IP QoS queues instantiation. When enabling/disabling of IP QoS, take the following into account: Note • if the WAN interface (e.g. PPPoA, IPoA, ...) is detached at the time of enabling/disabling IP QoS, then the WAN interface has to be attached in order for the enabling/disabling of IP QoS to take effect.
Page 269
IPQoS Commands priority Select the queue scheduling algorithm. Choose between: OPTIONAL • wfq: Weighted Fair Queueing (WFQ) is used for the middle four queues. The realtime queue has priority over the WFQ queues, which have priority over the best-effort queue. •...
Page 270
IPQoS Commands EXAMPLE: =>ipqos config dest=PVC_1 state=enabled discard=early priority=wfq =>ipqos list Name State Discard Priority Packets Kbytes Rate Burstsize Weights PVC_1 enabled early 25% 25% 25% 25% => RELATED COMMANDS: ipqos list List IP QoS configuration. E-DOC-CTC-20040210-0028 v3.0...
IPQoS Commands ipqos list List IP QoS configuration. SYNTAX: ipqos list EXAMPLE: =>ipqos list Name State Discard Priority Packets Kbytes Rate Burstsize Weights PVC_1 enabled early 100% 25% 25% 25% 25% => RELATED COMMANDS: ipqos config Configure IP QoS for a given destination interface for the IP QoS queues instantiation. E-DOC-CTC-20040210-0028 v3.0...
IPQoS Commands ipqos queue list List IP QoS subqueue configuration. SYNTAX: ipqos queue list EXAMPLE (the default configuration is shown): =>ipqos queue list Name Queue Propagate Packets Kbytes PVC_1 0 disabled disabled disabled disabled disabled => RELATED COMMANDS: ipqos queue config Configure IP QoS subqueues.
IPSec Commands IPSec Commands Introduction To use the IP Security and IPSec enabled VPN features of the SpeedTouch™, the IPSec VPN software key must be installed. See the Application Note “SpeedTouch™610 Operation and Maintenance” or ask your Service Provider for more information.
IPSec Commands ipsec saclear Flush all Internet Key Exchange (IKE) and Authentication Header (AH)/Encapsulating Security Payload (ESP) Security Associations (SAs). SYNTAX: ipsec saclear RELATED COMMANDS: ipsec salist Show a list of the current SAs. E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec salist Show all currently active IKE (Phase 1) and AH/ESP (Phase 2) SAs. SYNTAX: ipsec salist RELATED COMMANDS: ipsec saclear Flush all current SAs. E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec show Show IKE and certificate(s) configuration. SYNTAX: ipsec show [format = <{pretty|cli}>] where: format Show intuitive output (pretty) or reflect configuration via CLI OPTIONAL commands configuration (cli). The default is pretty. E-DOC-CTC-20040210-0028 v3.0...
Page 284
IPSec Commands EXAMPLE: =>ipsec show VPN Status : running module traces disabled NAT detection disabled Descriptors =========== IKE_3DES (IKE) : "identity 3des sha1 minutes 60 dhgroup 2 OR identity 3des md5 minutes 60 dhgroup 2" IKE_AES (IKE) : "identity aes sha1 minutes 60 dhgroup 2 OR identity a es md5 minutes 60 dhgroup 2"...
IPSec Commands ipsec cert clearall Physically delete the secure storage of certificates currently installed on the SpeedTouch™. Use this command with extreme caution. Recovery of deleted certificates is NOT possible! Note SYNTAX: ipsec cert clearall [force = <{yes|no}>] where: force If you are really sure to clear the secure storage, specify yes.
Page 286
IPSec Commands RELATED COMMANDS: ipsec cert remove Remove one item from the secure storage. E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec cert export Export an individual certificate from the secure storage to a file on the SpeedTouch™ file system (/dl subdirectory). Typically this command is used to save offline certificates to the SpeedTouch™ file system for later use. Certification files on the SpeedTouch™...
IPSec Commands ipsec cert import Import an individual certificate from a certificate file, stored on the SpeedTouch™ file system (/dl subdirectory). This command can also be used for to import offline certificates. In this case, before importing the file, first put the signed certificate - in Public Key Cryptography Standard (PKCS)#7 text format - on the SpeedTouch™...
IPSec Commands ipsec cert list Show a listing of the secure storage content. The secure storage contains the certificate information and is a PKCS#12 password protected file. SYNTAX: ipsec cert list [item = <number>] where: item Secure storage item number. OPTIONAL Not specifying the item will generate a listing of all content.
IPSec Commands ipsec cert refresh Reload the Certificate management subsystem into SpeedTouch™ memory. SYNTAX: ipsec cert refresh RELATED COMMANDS: ipsec cert clearall Delete secure storage. ipsec cert export Export an item from the secure storage to file. ipsec cert import Import certificate/CRL from file or pasted text (PKCS#7).
IPSec Commands ipsec cert remove Delete an item from the secure storage's certification list. If a CA certification is removed, all certifications in the secure storage being signed by this CA will become Note invalid! SYNTAX: ipsec cert remove item = <number> where: item Secure storage item number.
IPSec Commands ipsec cert request Generate an offline certificate request to generate the public and private key pair (if successful). SYNTAX: ipsec cert request subjectdn = <distinguished name> [force = <{yes|no}>] where: subjectdn The Distinguished Name (DN) for the certificate. REQUIRED The Subject DN reflects the subject name for the requested certificate.
Page 296
IPSec Commands subjectdn The DN for the certificate. OPTIONAL The Subject DN reflects the subject name for the requested certifi- cate. To be valid, the value of the parameter subjectdn must be a valid DN in string representation as specified in RFC1779. If used, the subject DN should at least always contain the common name item (cn= ) and one or more of the following other items: •...
Page 297
IPSec Commands altsubjectdn The distinguished name for X509v3 extension. OPTIONAL The Subject DN reflects the subject name for the requested certificate. To be valid, the value of the parameter subjectdn must be a valid DN in string representation as specified in RFC1779. If used, the subject DN should at least always contain the common name item (cn= ) and one or more of the following other items: •...
IPSec Commands ipsec cert cep request Generate the public and private key and launche the CEP request. SYNTAX: ipsec cert cep request [force = <{yes|no}>] where: force Ignore current certificates (yes) or not (no). OPTIONAL The default is yes. E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec cert cep resubmit Resubmit the current CEP request and/or check whether the launched CEP request is signed already by the CA. If so, the signed certificate will be imported into the secure storage. SYNTAX: ipsec cert cep resubmit E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec connection add Create a VPN connection profile. SYNTAX: ipsec connection add name = <string> where: name A name for the VPN connection profile. REQUIRED RELATED COMMANDS: ipsec connection config Configure a VPN connection profile. ipsec connection delete Delete a VPN connection profile.
IPSec Commands ipsec connection config Configure an existing VPN connection profile. Before being able to configure a profile, it must be added via the command ipsec connection add. SYNTAX: ipsec connection config conn = <> [peer = <>] [localrange = <ip-range>] [remoterange = <ip-range>] [descriptor = <{def_auth|def_encrypt}>] where:...
Page 304
IPSec Commands RELATED COMMANDS: ipsec connection add Configure a VPN connection profile. ipsec connection delete Delete a VPN connection profile. ipsec connection list Show a listing of VPN connection profiles. ipsec connection start Manually start the negotiation of a VPN connection. ipsec connection stop Manually stop the a VPN connection.
IPSec Commands ipsec connection delete Delete a connection profile. SYNTAX: ipsec connection delete conn = <> where: conn The name of the VPN connection profile to delete. REQUIRED E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec connection list Show a listing of available VPN connection profiles and their current configuration. SYNTAX: ipsec connection list E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec connection start Manually start the negotiation of a VPN connection. Before being able to start a connection, the VPN connection profile has to be added via the command ipsec connection add and configured via the command ipsec connection config. SYNTAX: ipsec connection start conn = <string>...
IPSec Commands ipsec connection stop Manually stop a VPN connection. You can only stop VPN connection for which a negotiation has been (automatically or manually) started before. SYNTAX: ipsec connection stop conn = <string> where: conn The name of the VPN connection to stop. REQUIRED Use the command ipsec connection list for a list of avail- Note...
IPSec Commands ipsec descriptor add Add an IKE (Phase 1) and AH/ESP (Phase 2) security descriptor. Adding a security descriptor allows to group the different mathematical operations which need to be applied on packets intended to pass a secure tunnel. SYNTAX: ipsec descriptor add name = <string>...
Page 310
IPSec Commands value A quoted string which describes the actual security descriptor. REQUIRED Phase 1 ISAKMP value syntax (from left to right, optionally of multiple multiple descriptions seperated by AND and/or OR statements): value= [<{IDENTITY|AGGRESSIVE}>] <{DES|3DES|RC5|AES|NULL}> [KEYLENGTH <number>] [HMAC <{MD5|SHA1}>] [DHGROUP <number>] [<{KB|MINUTES|SECONDS}>...
Page 311
IPSec Commands • • ESP. A Phase 2 descriptor must contain either AH, ESP, or both. In case of ESP, an encryption algorithm must be specified; in case of AH, the integrity algorithm (HMAC) and a hashing algorithm must be specified. 4.
Page 312
IPSec Commands Example of a Phase 2 IPSec security descriptor with several OR statements: =>ipsec descriptor add name=DESC_Test2 phase=IPSEC value=ESP DES HMAC MD5 MINUTES 3600 or ESP DES HMAC SHA1 MINUTES 3600 or ESP AES HMAC MD5 MINUTES 3600 => Example of a Phase 2 IPSec security descriptor with mixed AND and OR statements: =>ipsec descriptor add name=DESC_Test3...
IPSec Commands ipsec descriptor delete Delete an IKE (Phase 1) and AH/ESP (Phase 2) security descriptor. SYNTAX: ipsec descriptor delete name = <string> phase = <{IKE|IPSEC|1|2|I|II}> where: name The name of the security descriptor to delete. REQUIRED Use the command ipsec descriptor list for a listing of avail- Note able security descriptors.
IPSec Commands ipsec peer add Add a peer gateway profile. SYNTAX: ipsec peer add name = <string> where: name A name for the peer gateway profile. REQUIRED RELATED COMMANDS: ipsec peer config Configure a peer gateway profile. ipsec descriptor delete Delete a security descriptor.
IPSec Commands ipsec peer config Configure an existing peer IPSec gateway profile. Before being able to configure a profile, it must be added via the command ipsec peer add. SYNTAX: ipsec peer config peer = <> [addr = <ip-address>] [localid = <Identity : address, range or id string>] [remoteid = <Identity : address, range or id string>] [auth = <{preshared|cert|cert_or_shared}>] [secret = <password>]...
IPSec Commands ipsec peer delete Delete a peer gateway profile. SYNTAX: ipsec peer delete peer = <string> where: peer The name of the peer gateway profile to delete. REQUIRED Use the command ipsec peer list to show available peer Note gateway profiles.
IPSec Commands ipsec peer list Show a listing of available peer gateway profiles. SYNTAX: ipsec peer list RELATED COMMANDS: ipsec peer add Add a peer gateway profile. ipsec peer config Configure a peer gateway profile. ipsec peer delete Delete a peer gateway profile. E-DOC-CTC-20040210-0028 v3.0...
IPSec Commands ipsec policy assign Assign a chain to a hook. A hook (also called Packet Interception Point (PIP) or entry point) is the location where packets are intercepted to be compared against a chain of rules. SYNTAX: ipsec policy assign hook = <{input|output}>...
IPSec Commands ipsec policy flush Clear all hooks. If a hook is provided, that hook is cleared. The chain itself is not removed. The flush command does not impact previously saved configurations. Note SYNTAX: ipsec policy flush RELATED COMMANDS: ipsec policy assign Assign a chain to a hook.
IPSec Commands ipsec policy list Show a list of the chain assigments per hook. SYNTAX: ipsec policy list [hook = <{input|output}>] where: hook The name of the hook to show the associations for. OPTIONAL Choose between: • input • output. In case this parameter is not specified, the associations for all hooks are shown.
IPSec Commands ipsec policy unassign Unassign all chains from a hook. SYNTAX: ipsec policy unassign hook = <{input|output}> where: hook The hook's name to unassign all chain from. REQUIRED Choose between: • input : The point off incoming traffic. At this point it can be determined whether the packet is allowed to reach the SpeedTouch™...
IPSec Commands ipsec policy chain create Create a new chain. SYNTAX: policy chain create chain = <string> where: chain The name of the chain to create. REQUIRED RELATED COMMANDS: ipsec policy chain delete Delete a chain. ipsec policy chain list Show a list of all current chains.
IPSec Commands ipsec policy chain delete Delete a chain. SYNTAX: policy chain delete chain = <chain name> where: chain The name of the chain to delete. REQUIRED Use the command ipsec policy chain list for a list of existing Note chains.
IPSec Commands ipsec policy chain flush Flush all chains. SYNTAX: ipsec policy chain flush RELATED COMMANDS: ipsec policy chain delete Delete a chain. ipsec policy chain list Show a list of all current chains. ipsec policy rule delete Delete a rule. ipsec policy rule flush Delete all rules in a chain.
IPSec Commands ipsec policy chain list Show a list of all current chains. SYNTAX: ipsec policy chain list EXAMPLE (default configuration): =>ipsec policy chain list :ipsec policy chain create chain="_auto_out" :ipsec policy chain create chain="_auto_in" => RELATED COMMANDS: ipsec policy list Show a list of all hooks.
IPSec Commands ipsec policy rule clear Clear statistics of one/all rule(s) assigned to one/all chain(s). SYNTAX: ipsec policy rule clear [chain = <chain name>] [index = <number>] where: chain The name of the chain in which the rule is to be found. OPTIONAL If not specified, the statistics for all chains are cleared.
IPSec Commands ipsec policy rule create Create a rule. If a value is preceded by a “!”, it means "NOT". Note E.g. "srcport=!80" means "if srcport is different from 80". SYNTAX: policy rule create chain = <chain name> [index = <number>] [srcintf [!]= <string>] [src [!]= <ip-range>] [dst [!]= <ip-range>]...
Page 331
IPSec Commands prot The protocol (name or number) expected [or NOT expected] in the OPTIONAL IP packet. Select one of the following protocol names: • icmp • igmp • ipinip • • • • • ipcomp or, alternatively, specify the protocol number. srcport The TCP/UDP port (or beginning of range) the packet should [or OPTIONAL...
Page 332
IPSec Commands RELATED COMMANDS: ipsec policy chain list Show a list of all current chains. ipsec policy list Show a list of all hooks. ipsec policy rule clear Clear statistics of a given rule. ipsec policy rule delete Delete a specified rule in a chain. ipsec policy rule flush Delete all rules in a chain.
IPSec Commands ipsec policy rule delete Delete a rule. SYNTAX: ipsec policy rule delete chain = <string> index = <number> where: chain The name of the chain in which to delete the rule. REQUIRED index The index number of the rule in the chain. REQUIRED Use the command ipsec rule list to determine the index Note...
IPSec Commands ipsec policy rule flush Flush all rules created for one or all chains. The chain itself is not removed. SYNTAX: ipsec policy rule flush [chain = <chain name>] where: chain The name of the chain to empty. OPTIONAL If not specified, all rules for all chains are deleted.
IPSec Commands ipsec policy rule list Show a list of rules for one or all chains. SYNTAX: ipsec policy rule list [chain = <chain name>] where: chain The name of the chain of which the rules must be listed. OPTIONAL If not specified, all rules for all chains are shown.
IPSec Commands ipsec policy rule stats Show statistics for one or all rules of one or all chains. SYNTAX: ipsec policy rule stats [chain = <chain name>] [index = <number>] chain The name of the chain of which the statistics must be listed. OPTIONAL If not specified, the statistics for the rules applicable to all Note...
Label Commands label add Create a new label. SYNTAX: label add name = <string> where: name The name of the label to be added. REQUIRED EXAMPLE: =>label list Name Class Defclass Ackclass Ttlover Tosmark Trace DSCP_AF11 overwrite disabled 0 disabled 0 disabled DSCP_AF12 overwrite...
Label Commands label config Configure a label. SYNTAX: label config name = <string> [classification = <{ignore|overwrite|increase}>] [defclass = <number{0-15}>] [ackclass = <number{0-15}>] [ttloverwrite = <{disabled|enabled}>] [ttl = <number{0-255}>] [tosmarking = <{disabled|enabled}>] [tos = <number{0-255}>] [trace = <{disabled|enabled}>] where: name The name of the label to be configured. REQUIRED classification Select the method of classification, i.e.
Page 340
Label Commands ttloverwrite Enable or disable ttl overwrite. OPTIONAL When on forwarding the Time To Live (TTL) field of the IP header is decremented, an IGMP packet with TTL=1 would be dropped. To support forwarding of IGMP packets, the TTL value can be overwritten.
Label Commands label delete Delete a label. SYNTAX: label delete name = <string> [force = <{no|yes}>] where: name The name of the label to be deleted. REQUIRED force Force delete and cleanup references even when the label is still in OPTIONAL use.
Label Commands label flush Delete all labels that are not in use. The flush command does not impact previously saved configurations. Note SYNTAX: label flush EXAMPLE: In the example below, the label “Label1” is not in use: =>label list Name Class Defclass Ackclass Ttlover Tosmark...
Label Commands label list Show the association(s) between all hooks or a specified hook and their chain(s). SYNTAX: label list [name = <string>] where: name The name of the label to be shown. OPTIONAL If no name is specified, all labels will be shown. Note EXAMPLE: =>label list...
Label Commands label chain flush Flush all chains. SYNTAX: label chain flush RELATED COMMANDS: label chain create Create a chain. label chain delete Delete a chain. label chain list Show a list of all chains. E-DOC-CTC-20040210-0028 v3.0...
Label Commands label chain list Show a list of all current chains. SYNTAX: label chain list EXAMPLE: =>label chain list :label chain create chain=user_labels :label chain create chain=_auto_labels => RELATED COMMANDS: label chain create Create a chain. label chain delete Delete a chain.
Label Commands label rule clear Clear statistics for a given rule or all the rules. SYNTAX: label rule clear [chain = <string>] [index = <number>] where: chain The name of the chain in which the rule is to be found. OPTIONAL If this parameter is not specified, the statistics for all the Note...
Label Commands label rule create Create a rule. If a value is preceded by a “!”, it means "NOT". Note E.g. "srcintfgrp=!wan" means "if srcintfgrp is different from WAN". SYNTAX: label rule create chain = <string> [index = <number>] [srcintf [!]= <string>] [srcintfgrp [!]= <{wan|local|lan} or number>] [src [!]= <ip-range>] [dst [!]= <ip-address>]...
Page 352
Label Commands prot The protocol (name or number) expected in the IP packet. OPTIONAL Select one of the following protocol names: • icmp • igmp • ipinip • • • • • ipcomp or, alternatively, specify the protocol number. srcport The TCP/UDP port (or beginning of range) the packet is coming OPTIONAL from.
Page 353
Label Commands RELATED COMMANDS: label rule clear Clear statistics for a given rule. label rule delete Delete a specified rule in a chain. label rule flush Delete all rules in a chain. label rule list Show a list of all (or a specified) chains' rules. label rule stats Show statistics for all (or a specified) chains' rules.
Label Commands label rule delete Delete a rule. SYNTAX: label rule delete chain = <string> index = <number> where: chain The name of the chain in which a rule must be deleted. REQUIRED index The index number of the rule in the chain. REQUIRED Use the command label rule list first to determine the Note...
Label Commands label rule flush Flush all rules created for a chain(s). The chain itself is not removed. The flush command does not impact previously saved configurations. Note SYNTAX: label rule flush [chain = <string>] where: chain The name of the chain to be emptied. OPTIONAL If this parameter is not specified, all rules for all chains Note...
Label Commands label rule list Show a list of rules. SYNTAX: label rule list [chain = <string>] where: chain The name of the chain for which the rules must be listed. OPTIONAL If this parameter is not specified, all rules for all chains Note are shown.
Label Commands label rule stats Show statistics. SYNTAX: label rule stats [chain = <string>] [index = <number>] where: chain The name of the chain for which the statistics must be listed. OPTIONAL If this parameter is not specified, the statistics for the rules applicable to all chains are shown.
Language Commands Language Commands Contents This chapter covers the following commands: Topic Page language config language list language remove E-DOC-CTC-20040210-0028 v3.0...
Language Commands language config Select a language. SYNTAX: language config [language = <string>] where: language Language code: OSI language code (2 chars) for language. OPTIONAL Example: en for english. RELATED COMMANDS: language list List available languages archives. language remove Remove one or all language archives. E-DOC-CTC-20040210-0028 v3.0...
Language Commands language list List the available languages archives. The currently selected language is indicated by a “*” next to the OSI language code. Note SYNTAX: language list EXAMPLE: =>language list CODE LANGUAGE VERSION FILENAME en* english 4.2.7.3 <system> => RELATED COMMANDS: language config Select a language.
Language Commands language remove Remove one or all language archives. SYNTAX: language remove [file = <string>] [all <{yes|no}>] where: file The filename of the language archive to be removed. OPTIONAL Removes all languages archives. OPTIONAL Choose between: • • RELATED COMMANDS: language config Select a language.
NAT Commands nat applist List available Network Address Translation / Port Address Translation (NAT/PAT) protocol helpers. Certain protocols are ‘sensitive‘ to NAT/PAT in that they do not function properly when dealing with it. This list shows which ‘NAT/PAT-sensitive‘ applications are supported on the SpeedTouch™, i.e. the inherent knowledge of the SpeedTouch™...
NAT Commands nat bind Create a new helper/port binding. SYNTAX: nat bind application = <string> port = <{<supported TCP/UDP port name>|<number>}> [port_end = <{<supported TCP/UDP port name>|<number>}>] where: application The name of a NAT/PAT application helper. The name must be REQUIRED spelled exactly as listed in the application list.
NAT Commands nat bindlist List current NAT/PAT helper/port bindings. SYNTAX: nat bindlist EXAMPLE: =>nat bindlist Application Proto Port H323 1720 1002 6667 PPTP 1723 RAUDIO(PNA) 7070 RTSP 5060 => RELATED COMMANDS: nat applist List available NAT/PAT protocol helpers. nat bind Create a new helper/port binding.
NAT Commands nat clear Clear NAT/PAT connection database. SYNTAX: nat clear [addr = <ip-address>] where: addr An address-translation enabled IP address. OPTIONAL If no IP address is specified, all IP addresses are cleared. Note E-DOC-CTC-20040210-0028 v3.0...
NAT Commands nat config Configure NAT parameters for IP session. SYNTAX: nat config [timeout_ICMP = <string>] [timeout_UDP = <string>] [timeout_TCP = <string>] [timeout_TCP_nego = <string>] [timeout_other = <string>] [ike_port = <{fixed|floated}>] where: timeout_ICMP The interval of time for which an ICMP protocol session is allowed OPTIONAL to remain valid without any activity.
NAT Commands nat create Create a static NAT/PAT entry. Typically used to install specific servers behind the SpeedTouch™ NAT/PAT device. SYNTAX: nat create protocol = <{<supported IP protocol name>|<number>}> inside_addr = <ip-address> [inside_port = <{<supported TCP/UDP port name>|<number>}>] outside_addr = <ip-address> [outside_port = <{<supported TCP/UDP port name>|<number>}>] [foreign_addr = <ip-address>] [foreign_port = <{<supported TCP/UDP port name>|<number>}>]...
Page 370
NAT Commands foreign_port The port of the routable host. OPTIONAL Select one of the supported TCP/UDP port names (See “ Supported TCP/UDP Port Names” on page 554 for a listing of TCP/UDP port names supported by the SpeedTouch™). Alternatively, specify the protocol number. Do not use 0 in case a foreign IP address is specified.
NAT Commands nat defserver Define the default server behind the SpeedTouch™ NAT/PAT device that receives all (unknown) incoming packets. In typical LAN configurations, one local 'default' server will be responsible for all WAN-LAN mail, http, ftp, ... connec- tivity. This command allows to specify this server. For specific services, use nat create. SYNTAX: nat defserver [addr = <ip-address>]...
NAT Commands nat delete Delete a static NAT/PAT entry. SYNTAX: nat delete protocol = <{<supported IP protocol name>|<number>}> inside_addr = <ip-address> [inside_port = <{<supported TCP/UDP port name>|<number>}>] outside_addr = <ip-address> [outside_port = <{<supported TCP/UDP port name>|<number>}>] [foreign_addr = <ip-address>] [foreign_port = <{<supported TCP/UDP port name>|<number>}>] where: protocol The IP protocol name (or number) of the incoming stream.
Page 373
NAT Commands foreign_port The port of the routable host. OPTIONAL Select one of the supported TCP/UDP port names (See “ Supported TCP/UDP Port Names” on page 554 for a listing of TCP/UDP port names supported by the SpeedTouch™). Alternatively, specify the protocol number. Applicable for TCP and UDP protocols only.
NAT Commands nat disable Disable NAT or PAT on the specified SpeedTouch™ IP address. SYNTAX: nat disable addr = <ip-address> where: addr The SpeedTouch™ IP address for which NAT/PAT must be disabled. REQUIRED EXAMPLE: =>nat list Indx Prot Inside-addr:Port Outside-addr:Port Foreign-addr:Port Flgs Expir State Control 10.0.0.138:80 172.16.0.5:1080...
NAT Commands nat enable Enable NAT/PAT on a SpeedTouch™ IP address. SYNTAX: nat enable addr = <ip-address> [type = <{none|pat}>] where: addr The IP address to use for outgoing address translation. Must be one of REQUIRED the own IP addresses of the SpeedTouch™. Use the command ip aplist to obtain a list of all configured IP Note addresses.
NAT Commands nat flush Flush complete NAT/PAT configuration. The flush command does not impact previously saved configurations. Note SYNTAX: nat flush RELATED COMMANDS: nat create Create a static NAT/PAT entry. nat delete Delete a static NAT/PAT entry. nat disable Disable NAT/PAT on a SpeedTouch™ IP address. nat enable Enable NAT/PAT on one of the SpeedTouch™...
NAT Commands nat list Lists NAT/PAT connection database. SYNTAX: nat list [addr = <ip-address>] where: addr An address-translation enabled IP address. OPTIONAL If no address is specified, all IP addresses are shown. Note EXAMPLE: =>nat list Indx Prot Inside-addr:Port Outside-addr:Port Foreign-addr:Port Flgs Expir State Control 10.0.0.138:80 172.16.0.5:1080...
NAT Commands nat multinatadd Add a MultiNAT configuration. SYNTAX: nat multinatadd intf = <string> inside_addr = <ip-range> outside_addr = <ip-range> [addroute = <{no|yes}>] where: intf The IP interface name where MultiNAT has to be applied. REQUIRED inside_addr The IP address of the host behind the address translation device that will REQUIRED receive the incoming traffic.
NAT Commands nat multinatlist List MultiNAT configurations. SYNTAX: nat multinatlist [intf = <string>] where: intf The IP interface name for which the MultiNAT configuration must be OPTIONAL listed. If no name is specified, all MultiNAT configurations are listed. Note EXAMPLE: =>nat multinatlist Indx Intf...
NAT Commands nat unbind Delete an existing helper/port binding. SYNTAX: nat unbind application = <string> port = <{<supported TCP/UDP port name>|<number>}> [port_end = <{<supported TCP/UDP port name>|<number>}>] where: application The name of a NAT/PAT application helper. REQUIRED The name must be spelled exactly as listed in the application list. Use the command nat applist to list the names of the Note NAT/PAT application helpers.
Phonebook Commands phonebook add Add a phonebook entry. SYNTAX: phonebook add name = <string> addr = <atmchannel : PVC syntax is [port.]vpi.vci port=dsl0|dsl1|...> type = <{any|ethoa|pppoa|ipoa}> where: name A free to choose phonebook name for the destination. REQUIRED Two limitations apply: •...
Page 385
Phonebook Commands EXAMPLE: =>phonebook list Name Type Address PVC1 8.35 PVC2 ethoa 8.36 ethoa 8.38 CIPPVC3 ipoa 8.82 =>phonebook add name=PVC_Test addr=8.68 type=pppoa =>phonebook list Name Type Address PVC1 8.35 PVC2 ethoa 8.36 ethoa 8.38 CIPPVC3 ipoa 8.82 PVC_Test pppoa 8.68 =>...
Phonebook Commands phonebook autolist Show auto PVCs, if supported by the Central Office DSLAM. SYNTAX: phonebook autolist EXAMPLE INPUT/OUTPUT: =>phonebook autolist 8.35 => RELATED COMMANDS: phonebook list Show current phonebook. E-DOC-CTC-20040210-0028 v3.0...
Phonebook Commands phonebook delete Remove an unused phonebook entry. SYNTAX: phonebook delete name = <string> where: name The name of the phonebook entry to be deleted. REQUIRED Only applicable for phonebook entries that are not used, i.e. not configured for any packet service. Use the command phonebook list to check whether the entry is Note in use (Use=1) or not (Use=0).
Phonebook Commands phonebook flush Flush complete phonebook. 1. Phonebook entries that are in use, cannot be flushed. Note 2.The flush command does not impact previously saved configurations. SYNTAX: phonebook flush EXAMPLE: =>phonebook list Name Type Address PVC1 8.35 PVC2 ethoa 8.36 ethoa 8.38...
Phonebook Commands phonebook list Show current phonebook. SYNTAX: phonebook list EXAMPLE INPUT/OUTPUT: =>phonebook list Name Type Address PVC1 8.35 PVC2 ethoa 8.36 ethoa 8.38 CIPPVC3 ipoa 8.82 PVC_Test pppoa 8.68 => RELATED COMMANDS: phonebook add Add a phonebook entry. phonebook autolist Show auto PVCs.
PPPoA Commands pppoa ifadd Create a new PPPoA interface. SYNTAX: pppoa ifadd [intf = <string>] [dest = <phonebook entry>] where: intf The name for the new PPP interface. OPTIONAL If not specified, the destination will double as interface name. dest The ATM channel to be used for this PPP interface.
Page 394
PPPoA Commands EXAMPLE: =>pppoa iflist pppoa: dest : pppoa [00:00:00] Retry : 10 QoS default encaps VC-MUX mode = IP routing flags = echo magic accomp restart mru addr route savepwd dns metric = 0 trans addr = pat mru = 1500 route : dst=0.0.0.0/0 - src=10.0.0.0/1 (metric 1) auth = auto user = johndoe@ISP...
PPPoA Commands pppoa ifconfig Configure a PPPoA interface. The interface to be configured may not be connected at the time of configuration. Note Use the command pppoa ifdetach prior to using the command pppoa ifconfig. SYNTAX: pppoa ifconfig intf = <intfname> [dest = <phonebook entry>] [user = <string>] [password = <password>]...
Page 397
PPPoA Commands encaps The WAN protocol encapsulation to be used on this interface. OPTIONAL Choose between: • vcmux • llc. The default is vcmux. pcomp Try (on) or do not try (off) to negotiate PPPoA protocol compression OPTIONAL (LCP PCOMP). The default is off. accomp Try (on), do never try (off) or negotiate (negotiate) to negotiate PPPoA OPTIONAL...
Page 398
PPPoA Commands A number between 293 and 8192. OPTIONAL Represents the maximum packet size the SpeedTouch™ should negotiate to be able to receive. The default is 1500. laddr The local IP address of the peer-to-peer connection. OPTIONAL Specifying a local IP address forces the remote side of the PPPoA link (if it allows to) to accept this IP address as the SpeedTouch™...
Page 399
PPPoA Commands idletrigger Consider the link being idle if no traffic is sent and/or received during the OPTIONAL idle time. Choose between: • RxTx: The idle time period restarts when a packet is transmitted or received (default value) • Rx: The idle time period restarts when a packet is received. Transmitted packets are ignored •...
PPPoA Commands pppoa iflist Show current configuration of a specific or all PPPoA interface(s). SYNTAX: pppoa iflist [intf = <intfname>] where: intf The name of the PPPoA interface for which the configuration must be OPTIONAL shown. If this parameter is not specified, all PPPoA interfaces are shown. EXAMPLE INPUT/OUTPUT: =>pppoa iflist pppoa: dest : pppoa...
PPPoA Commands pppoa rtadd Automatically add a route configuration to the routing table in case the specified PPPoA interface link comes up. This route configuration will determine which local hosts are allowed to use this link and/or which remote destinations should be or should not be reachable.
Page 404
PPPoA Commands srcmsk The source IP mask. OPTIONAL Depending on the source netmask: • Everybody is allowed to use this PPPoA connection (srcmsk=0) • Only members of the same subnet as the host which opened the PPPoA connection are allowed to use the PPPoA connection (srcmsk=1) •...
PPPoA Commands pppoa rtdelete Delete the route specification for a PPPoA link. Use the command pppoa ifdetach for this interface prior to deleting route configurations. Note SYNTAX: pppoa rtdelete intf = <intfname> where: intf The PPPoA interface name for which to delete the route settings. REQUIRED EXAMPLE: =>pppoa iflist...
PPPoE Commands pppoe ifadd Create a new PPPoE interface. SYNTAX: pppoe ifadd [intf = <string>] [dest = <RELAY|phonebook entry>] where: intf The name for the new PPPoE interface. OPTIONAL If not specified, the destination parameter must be specified. In this case the name of the destination will double as interface name.
Page 410
PPPoE Commands EXAMPLE: =>pppoe iflist PPPoE1: dest : pppoe1 [00:00:00] Retry : 10 mode = IP routing flags = echo magic accomp restart mru addr savepwd dns metric = 0 mru = 1492 auth = auto user = password = admin state = down oper state = down link state = not-connected...
PPPoE Commands pppoe ifconfig Configure a PPPoE interface. The interface to be configured may not be connected at the time of configuration. Note Use the command pppoe ifdetach prior to using the command pppoe ifconfig. SYNTAX: pppoe ifconfig intf = <string> [dest = <string>] [user = <string>] [password = <password>]...
Page 413
PPPoE Commands servicename The Service Name for a PPPoE connection. OPTIONAL Use the command pppoe ifscan to see the available service names, if any. pcomp Try (on) or do not try (off) to negotiate PPPoE protocol compression OPTIONAL (LCP PCOMP). The default is off. accomp Try (on), do never try (off) or negotiate (negotiate) to negotiate PPPoE OPTIONAL...
Page 414
PPPoE Commands A number between 293 and 8192. OPTIONAL Represents the maximum packet size the SpeedTouch™ should negotiate to be able to receive. The default is 1492. laddr The local IP address of the peer-to-peer connection. OPTIONAL Specifying a local IP address forces the remote side of the PPPoE link (if it allows to) to accept this IP address as the SpeedTouch™...
Page 415
PPPoE Commands idletrigger Consider the link being idle if no traffic is sent and/or received during the OPTIONAL idle time. Choose between: • RxTx: The idle time period restarts when a packet is transmitted or received. • Rx: The idle time period restarts when a packet is received. Transmitted packets are ignored.
PPPoE Commands pppoe iflist Show current configuration of all or a specified PPPoE interface(s). SYNTAX: pppoe iflist [intf = <intfname>] where: intf The name of the PPPoE interface. OPTIONAL If this parameter is not specified, all PPPoE interfaces are shown. EXAMPLE INPUT/OUTPUT : =>pppoe iflist PPPoE1: dest : PPPoE1...
PPPoE Commands pppoe ifscan Scan a PPPoE interface for available Access Concentrator names and Service Names. Use the command pppoe ifdetach for this interface before performing a scan on it. Note SYNTAX: pppoe ifscan intf = <intfname> [time = <number{0-36000}>] where: intf The name of the Routed PPPoE interface to be scanned.
PPPoE Commands pppoe rtadd Automatically add a route configuration to the routing table in case the specified PPPoE interface link comes up. This route configuration will determine which local hosts are allowed to use this link and/or which remote destinations should be or should not be reachable.
Page 421
PPPoE Commands srcmsk The source IP mask. OPTIONAL Depending on the source netmask: • Everybody is allowed to use this PPPoE connection (dstmsk=0) • Only members of the same subnet as the host which opened the PPPoE connection are allowed to use the PPPoE connection (dstmsk=1) •...
PPPoE Commands pppoe rtdelete Delete the route specification for a PPPoE link. Use the command pppoe ifdetach for this interface prior to deleting route configurations. Note SYNTAX: pppoe rtdelete intf = <intfname> where: intf The PPPoE interface name for which to delete the route settings. REQUIRED EXAMPLE: =>pppoe iflist...
PPPoE Commands pppoe relay add Add an Ethernet port to the PPPoE relay list. SYNTAX: pppoe relay add port = <port name> where: port The Ethernet port to be added to the PPPoE relay agent list. REQUIRED RELATED COMMANDS: pppoe relay delete Delete an Ethernet port from the PPPoE relay agent list.
PPPoE Commands pppoe relay delete Delete an Ethernet port from the PPPoE relay agent list. SYNTAX: pppoe relay delete port = <port name> where: port The Ethernet port to be deleted from the PPPoE relay agent list. REQUIRED RELATED COMMANDS: pppoe relay add Add an Ethernet port to the PPPoE relay list.
PPPoE Commands pppoe relay flush Remove all Ethernet ports from the PPPoE relay agent list and terminate all sessions. SYNTAX: pppoe relay flush RELATED COMMANDS: pppoe relay add Add an Ethernet port to the PPPoE relay list. pppoe relay delete Delete an Ethernet port from the PPPoE relay agent list.
PPPoE Commands pppoe relay portlist List all Ethernet ports added to the PPPoE relay agent list. SYNTAX: pppoe relay portlist RELATED COMMANDS: pppoe relay add Add an Ethernet port to the PPPoE relay list. pppoe relay delete Delete an Ethernet port from the PPPoE relay agent list. pppoe relay flush Remove all Ethernet ports from the PPPoE relay agent list and terminate all sessions.
PPPoE Commands pppoe relay sesslist List all active PPPoE relay sessions. SYNTAX: pppoe relay sesslist RELATED COMMANDS: pppoe relay add Add an Ethernet port to the PPPoE relay list. pppoe relay delete Delete an Ethernet port from the PPPoE relay agent list. pppoe relay flush Remove all Ethernet ports from the PPPoE relay agent list and terminate all sessions.
PPTP Commands pptp ifadd Add a Point-to-Point Tunneling Protocol (PPTP) profile (backwards compatible with previous release, use profiles instead). SYNTAX: pptp ifadd dest = <string> [rate = <number{10-10000}>] [encaps = <{vcmux|nlpid}>] [ac = <{never|always|keep}>] where: dest The WAN destination for this PPTP tunnel. Typically a phonebook entry. REQUIRED rate A number between 10 and 10000.
PPTP Commands pptp list Show current PPTP configuration. SYNTAX: pptp list EXAMPLE INPUT/OUTPUT: =>pptp list Dialstr Destination Encaps State User DIALUP_PPP3 default vcmux never CONNECTED (10.0.0.2) => E-DOC-CTC-20040210-0028 v3.0...
PPTP Commands pptp profadd Define a new PPTP profile. SYNTAX: pptp profadd name = <string> [qos = <string>] [encaps = <{vcmux|nlpid}>] [ac = <{never|always|keep}>] where: name The name for the PPTP profile. REQUIRED The name of the qosbook entry, containing the settings for this profile. OPTIONAL This parameter never needs to be specified.
Page 434
PPTP Commands EXAMPLE: =>pptp proflist Profile Encaps Relay_PPP1 default nlpid always =>pptp profadd name=PPTPLink encaps=vcmux ac=never =>pptp proflist Profile Encaps Relay_PPP1 default nlpid always PPTPLink default vcmux never => RELATED COMMANDS: pptp profdelete Delete a PPTP profile. pptp proflist Show current PPTP profiles. E-DOC-CTC-20040210-0028 v3.0...
QoSBook Commands qosbook add Add a Quality of Service (QoS) book entry. SYNTAX: qosbook add name = <string> class = <{ubr|cbr|vbr-rt|vbr-nrt}> [tx_peakrate = <number{0-27786}>] [tx_sustrate = <number{0-27786}>] [tx_maxburst = <number{0-12240}>] [rx_peakrate = <number{0-27786}>] [rx_sustrate = <number{0-27786}>] [rx_maxburst = <number{0-12240}>] [framediscard = <{enabled|disabled}>] where: name The name for the new QoS entry.
Page 439
QoSBook Commands EXAMPLE: =>qosbook list Name Ref Type TX peak sust burst RX peak sust burst framediscard (Kbits) (Kbits) (bytes) (Kbits) (Kbits) (bytes) default 3 linerate 0 linerate 0 disabled =>qosbook add name=TestVBR class=vbr-nrt tx_peakrate=1500 tx_sustrate=1000 tx_maxburst=100 rx_sustrate=1000 rx_maxburst=100 framediscard=enabled =>qosbook list Name Ref Type...
QoSBook Commands qosbook config Set or change qosbook config parameters. SYNTAX: qosbook config [format = <{bytes|cells}>] format The input/output format of the qosbook. OPTIONAL Choose between: • bytes • cells. The default is bytes. EXAMPLE: =>qosbook list Name Ref Type TX peak sust burst...
QoSBook Commands qosbook delete Remove a Quality of Service book entry. SYNTAX: qosbook delete name = <string> [force = <{no|yes}>] where: name The name of the QoS book entry to be deleted. REQUIRED force Force deletion of the entry even if it is still in use (yes) or do not OPTIONAL force the deletion (no).
QoSBook Commands qosbook flush Flush complete Quality of Service book. The flush command does not impact previously saved configurations. Note SYNTAX: qosbook flush E-DOC-CTC-20040210-0028 v3.0...
QoSBook Commands qosbook list Show current Quality of Service book. SYNTAX: qosbook list EXAMPLE: =>qosbook list Name Ref Type TX peak sust burst RX peak sust burst framediscard (Kbits) (Kbits) (bytes) (Kbits) (Kbits) (bytes) default 3 linerate 0 linerate 0 disabled TestVBR 0 vbr-nrt 1500...
Script Commands Script Commands Introduction Scripting is not a general purpose mechanism but is only used in the autoPVC/ILMI mechanism. It is not recommended to change the default scripts. Note Contents This chapter covers the following commands: Topic Page script add script delete script flush script list...
Script Commands script add Add a line to a script. SYNTAX: script add name = <string> [index = <number>] command = <quoted string> where: name Name of script. REQUIRED index Line number (0 = add). OPTIONAL command Command. REQUIRED RELATED COMMANDS: script delete Delete a complete script or a line from a script.
Script Commands script delete Delete a complete script or a line from a script. SYNTAX: script delete name = <string> [index = <number>] where: name Name of script to be deleted. REQUIRED The names of the different scripts can be viewed with Note the command script list.
Script Commands script list List script(s). SYNTAX: script list [name = <string>] where: name Name of the script to be shown. OPTIONAL If no name is specified, all the scripts are listed. EXAMPLE Some of the default scripts are shown below: =>script list Script: autopvc_add_qos 0: qosbook add name _auto_$1_$2 class $3 tx_peakrate $4 tx_sustrate $5 tx_maxburst $6...
Script Commands script run Run a script. SYNTAX: script run name = <string> [par1 = <string>] [par2 = <string>] [par3 = <string>] [par4 = <string>] [par5 = <string>] [par6 = <string>] [par7 = <string>] [par8 = <string>] [par9 = <string>] where: name Name of the script to be run.
SHDSL Commands SHDSL Commands Introduction The shdsl command group is ONLY applicable for the SpeedTouch™610s SHDSL variant. Contents This chapter covers the following commands: Topic Page shdsl line shdsl loopback shdsl stats shdsl version shdsl config monitoring shdsl config show shdsl config side shdsl config CO 4-wire_mode shdsl config CO annex...
SHDSL Commands shdsl line Show Symmetric High speed Digital Subscriber Line (SHDSL) line information and basic statistics. SYNTAX: shdsl line EXAMPLE: =>shdsl line SHDSL Line in 4 Wires; actual mode=STANDARD, configured mode=STANDARD Line UP at 4608 kbit/s (aggregate rate) for 00:00:02 now Total bytes since power on Downstream : 637847580 bytes Upstream : 1075038105 bytes...
SHDSL Commands shdsl version Show SHDSL version information. SYNTAX: shdsl version EXAMPLE: =>shdsl version GSI firmware SHDSL : local FW rel. R2.5.1, remote FW rel. 0x0025 Vendor & Version Infos CountryCode : 0f EOC Version : 01 SHDSL Version : 01 Code (ALCB): 41 4c 43 42 Specific Code...
SHDSL Commands shdsl config side Change behaviour CO/CPE of the SpeedTouch™. SYNTAX: shdsl config side Startup = <{CO|CPE}> where: Startup Select the side to be used at startup. REQUIRED Choose between: • the Central Office side must be used at startup •...
SHDSL Commands shdsl config CO annex Configure SHDSL annex, then restart the line. SYNTAX: shdsl config CO annex annex = <{sym_NA|sym_EU|asym_NA_768|asym_NA_1536| asym_EU_2048|asym_EU_2304}> where: annex Power Spectral Density (PSD) mask to comply with, depending on REQUIRED the region/payload rate. The selected PSD mask must comply to the regional demands and required payload rate.
SHDSL Commands shdsl config CO rate Set the rate to be used. SYNTAX: shdsl config CO rate [Min = <{192|256|320|384|448|512|576|640|704|768| 832|896|960|1024|1088|1152|1216|1280|1344|1408|1472| 1536|1600|1664|1728|1792|1856|1920|1984|2048|2112| 2176|2240|2304|2312}>] [Max = <{192|256|320|384|448|512|576|640|704|768| 832|896|960|1024|1088|1152|1216|1280|1344|1408|1472| 1536|1600|1664|1728|1792|1856|1920|1984|2048|2112| 2176|2240|2304|2312}>] where: Min rate for CO Side (for 1 loop). OPTIONAL Max rate for CO Side (for 1 loop). OPTIONAL EXAMPLE: =>shdsl config CO show...
SHDSL Commands shdsl config CO show Show SHDSL CO configuration. SYNTAX: shdsl config CO show EXAMPLE: =>shdsl config CO show Symmetric PSD mask for North America Variant : 4W 4-Wire init mode : current=STANDARD (1), configured=STANDARD (1) Wires Rates (kbit/s ) : Min 2304 Max 2304 Mode Fixed...
SHDSL Commands shdsl config CO wires Configure the number of wires to be used: 2 wires or 4 wires. SYNTAX: shdsl config CO wires Startup = <{2w|4w}> where: Startup Number of wires at startup: REQUIRED • 2 wires fixed • 4 wires fixed.
SHDSL Commands shdsl config CPE delay Configure 4W handshake activation delay (seconds). SYNTAX: shdsl config CPE delay delay = <{0|10|20|30|40|50|60|70|80|90}> where: delay A number (in seconds). REQUIRED Represents the delay before handshake is started in 4W-mode (to allow the CO side to bring both lines to idle). Choose between: •...
SHDSL Commands shdsl config CPE psd Configure the PSD mask to be used, then restart the SHDSL line. SYNTAX: shdsl config CPE psd mask = <{sym_NA|sym_EU|asym_NA_768|asym_NA_1536| asym_EU_2048|asym_EU_2304|auto}> where: mask The selected PSD mask must comply to the regional demands and REQUIRED required payload rate.
SHDSL Commands shdsl config CPE wires Configure the number of wires to be used: 2 wires, 4 wires or auto (i.e. adapt with the CO Side). SYNTAX: shdsl config CPE wires Startup = <{auto|2w|4w}> where: Startup Number of wires at startup. REQUIRED Choose between: •...
SIP Commands sip flush Remove the visible users, set the proxy to disable. The flush command does not impact previously saved configurations. Note SYNTAX: sip flush E-DOC-CTC-20040210-0028 v3.0...
SIP Commands sip logcall List the calls. SYNTAX: sip logcall [user_uri = <string>] where: user_uri Session Initiation Protocol (SIP) Uniform Resource Identifier (URI) OPTIONAL of the user. If no SIP URI is specified, the calls of all the users are listed. RELATED COMMANDS: sip loglocation List the registered users.
SIP Commands sip loglocation List the registered users. SYNTAX: sip loglocation [user_uri = <string>] user_uri SIP URI of the user. OPTIONAL If no SIP URI is specified, the calls of all the users are listed. RELATED COMMANDS: sip logcall List the calls. E-DOC-CTC-20040210-0028 v3.0...
SIP Commands sip regdelete Remove a user allowed to register. SYNTAX: sip regdelete user_uri = <string> contact = <ip-address> subnet_mask = <ip-mask(dotted or cidr)> where: user_uri SIP URI of the inside user. REQUIRED contact User's subnetwork or IP address. REQUIRED subnet_mask User's IP subnetwork.
SIP Commands sip reglist List the users allowed to register. SYNTAX: sip reglist [user_uri = <string>] [contact = <ip-address>] [subnet_mask = <ip-mask(dotted or cidr)>] where: user_uri SIP URI of the inside user. OPTIONAL contact User's subnetwork or IP address. OPTIONAL subnet_mask User's IP subnetwork.
SIP Commands sip screen increate Add an unauthorized caller to user Black list. SYNTAX: sip screen increate user_uri = <string> caller_uri = <string> where: user_uri SIP URI of the inside user. REQUIRED caller_uri SIP URI of the caller. REQUIRED RELATED COMMANDS: sip screen indelete Remove an unauthorized caller from user Black list.
SIP Commands sip screen indelete Remove an unauthorized caller from user Black list. SYNTAX: sip screen indelete user_uri = <string> caller_uri = <string> where: user_uri SIP URI of the inside user. REQUIRED caller_uri SIP URI of the caller. REQUIRED RELATED COMMANDS: sip screen increate Add an unauthorized caller to user Black list.
SIP Commands sip screen inlist List unauthorized callers from user Black list. SYNTAX: sip screen inlist [user_uri = <string>] where: user_uri SIP URI of the inside user. OPTIONAL If no SIP URI is specified, all the unauthorized callers from all the users are listed.
SIP Commands sip screen outcreate Add an unauthorized callee to user Black list. SYNTAX: sip screen outcreate user_uri = <string> callee_uri = <string> where: user_uri SIP URI of the user. REQUIRED callee_uri SIP URI of the callee. REQUIRED RELATED COMMANDS: sip screen outdelete Remove an unauthorized callee from user Black list.
SIP Commands sip screen outdelete Remove an unauthorized callee from user Black list. SYNTAX: sip screen outdelete user_uri = <string> callee_uri = <string> where: user_uri SIP URI of the user. REQUIRED callee_uri SIP URI of the callee. REQUIRED RELATED COMMANDS: sip screen outcreate Add an unauthorized callee to user Black list.
SIP Commands sip screen outlist List unauthorized callees from user Black list. SYNTAX: sip screen outlist [user_uri = <string>] where: user_uri SIP URI of the inside user. OPTIONAL If no SIP URI is specified, all the unauthorized callees from all the users are listed.
Read-write SNMP community name private Read-only SNMP community name public SNMP System Contact : Service Provider : SpeedTouch 610 SNMP System Name SNMP System Location : Customer Premises All SNMP traps : DISABLED Delay, in secs before first trap is sent : 90 =>...
SNMP Commands snmp flush Flush the SNMP trap list, i.e. delete all configured SNMP trap destination IP addresses. SYNTAX: snmp flush RELATED COMMANDS: snmp list Show all SNMP parameters and the SNMP trap list. snmp trapadd Add a new trap destination to the SNMP trap list. snmp trapdelete Delete a trap destination from the SNMP trap list.
SNMP Commands snmp get Get from the supplied SNMP Object IDentifier (OID), e.g. get ObjectId=.1.3.6.1.2.1.1.1.0. SYNTAX: snmp get [ObjectId = <string>] where: ObjectID The Object Identifier. Object id to get from ... must include the OPTIONAL instance which is 0 for scalar objects, e.g. .1.3.6.1.2.1.1.1.0 sysDe- scription.
SNMP Commands snmp getNext GetNext from the supplied SNMP OID. SYNTAX: snmp getNext [ObjectId = <string>] where: [ObjectID] The Object Identifier. OPTIONAL Object id to getNext from e.g. .1.3.6.1.2.1.1 system returns sysDescription. EXAMPLE: =>snmp getNext ObjectId=.1.3.6.1.2.1.1.4.0 VB_octetStr .1.3.6.1.2.1.1.5.0 Sascha => RELATED COMMANDS: snmp get Get from the supplied SNMP OID.
SNMP Commands snmp list List all SNMP global parameters and the SNMP trap list. SYNTAX: snmp list EXAMPLE: =>snmp list Read-write SNMP community name private Read-only SNMP community name public SNMP System Contact : Service Provider SNMP System Name : SpeedTouch610 SNMP System Location : Customer Premises All SNMP traps...
SNMP Commands snmp trapadd Add a new SNMP trap destination to the SNMP trap list. SYNTAX: snmp trapadd addr = <ip-address> [port = <number{1-65535}>] [interval = <number{0-60}>] where: addr The SNMP trap destination IP address. REQUIRED port A port number between 1 and 65535. OPTIONAL Represents the SNMP trap destination port number.
SNMP Commands snmp trapdelete Delete an SNMP trap destination from the SNMP trap list. SYNTAX: snmp trapdelete addr = <ip-address> [port = <number{1-65535}>] where: addr The SNMP trap destination IP address. REQUIRED port A port number between 1 and 65535. OPTIONAL Represents the SNMP trap destination port number.
SNMP Commands snmp walk Walk from the supplied SNMP Object IDentifier (OID). SYNTAX: snmp walk [ObjectId = <string>] where: ObjectID The Object Identifier. OPTIONAL Object id to walk from e.g. .1.3.6.1.2.1.1 system walks the system group. EXAMPLE: =>snmp walk ObjectId=.1.3.6.1.2.1.1 VB_octetStr .1.3.6.1.2.1.1.1.0 SpeedTouch™...
SNTP Commands SNTP Commands Contents This chapter covers the following commands: Topic Page sntp add sntp config sntp del sntp flush sntp list E-DOC-CTC-20040210-0028 v3.0...
SNTP Commands sntp add Add a Network Time Protocol (NTP) server to the NTP server list to synchronize the internal SpeedTouch™ real time clock (SNTP client) with. SYNTAX: sntp add addr = <ip-address> [version = <number{1-4}>] where: addr The IP address of the NTP server to add to the list. REQUIRED version The SNTP version of the NTP server.
SNTP Commands sntp config Show/set SpeedTouch™ SNTP client configuration. SYNTAX: sntp config [enable = <{yes|no}>] [poll = <number{1-60}>] where: enable Enable or disable the SpeedTouch™ SNTP client. OPTIONAL By default, the NTP server list is empty, and hence the SpeedTouch™ SNTP client is disabled. poll A number between 1 and 60 minutes.
SNTP Commands sntp del Delete NTP server from NTP server list. SYNTAX: sntp del addr = <ip-address> where: addr The IP address of the NTP server to remove from the list. REQUIRED EXAMPLE: =>sntp list IP Address Version Status 100.101.110.111 contacting ...
SNTP Commands sntp flush Delete all NTP servers from NTP server list and clear the SpeedTouch™ SNTP client configuration. SYNTAX: sntp flush E-DOC-CTC-20040210-0028 v3.0...
SNTP Commands sntp list Show a listing of added NTP servers and their current status. SYNTAX: sntp list EXAMPLE: =>sntp list IP Address Version Status 100.101.110.111 contacting ... 100.101.110.112 Unable to contact 100.101.110.113 Synchronized => DESCRIPTION: Following NTP server states are possible: Not used The SpeedTouch™...
Software Commands software cleanup Check whether a disk clean-up is required. If necessary, garbage collection is performed. SYNTAX: software cleanup RELATED COMMANDS: software deletepassive Delete the passive software. software setpassive Mark an uploaded file as passive software version. E-DOC-CTC-20040210-0028 v3.0...
Software Commands software deletepassive Delete passive software. SYNTAX: software deletepassive EXAMPLE: =>software version Active SW : LLT5AA4.272 Passive SW : LLT5AA4.270 =>software deletepassive =>software version Active SW : LLT5AA4.272 Passive SW => RELATED COMMANDS: software cleanup Remove all unused files from the passive software subdirectory. software duplicate Duplicate the active software as passive software.
Software Commands software duplicate Duplicate the active software as passive software. SYNTAX: software duplicate EXAMPLE: =>software version Active SW : LLT5AA4.272 Passive SW =>software duplicate =>software version Active SW : LLT5AA4.272 Passive SW : LLT5AA4.272 => RELATED COMMANDS: software cleanup Remove all unused files from the passive software subdirectory.
Software Commands software setpassive Mark a file as passive software version. Only correctly uploaded software, valid for the SpeedTouch™, can be marked as passive software., SYNTAX: software setpassive file = <string> where: file The filename (without directory path) of the software package. REQUIRED EXAMPLE: =>software version...
Software Commands software switch Switch active and passive versions and reboot the SpeedTouch™. Because rebooting implies a flush of all non-saved configurations it is highly recommended to save the current configu- ration if needed, e.g. via saveall or :config save before executing a software switch. SYNTAX: software switch EXAMPLE:...
Software Commands software version Show the active and passive software versions. SYNTAX: software version EXAMPLE: =>software version Active SW : LLT5AA4.272 Passive SW : LLT5AA4.271 => RELATED COMMANDS: software switch Switch active and passive software versions and reboot the SpeedTouch™. E-DOC-CTC-20040210-0028 v3.0...
Software Commands software addon list List available modules (via Software key activation information). If a software key has not been enabled then the Software key status is No key. SYNTAX: software addon list EXAMPLE: =>software addon list IPSEC_VPN module info : Software key status : Key Enabled Filename : IPSEC_VPN.swk Link : http://www.speedtouch.com/homeprod/addon.htm...
Switch Commands Switch Commands Contents This chapter covers the following commands: Topic Page switch group flush switch group list switch group move switch mirror capture switch mirror egress switch mirror ingress E-DOC-CTC-20040210-0028 v3.0...
Switch Commands switch group flush Set all ports to the default settings, i.e. all ports in group 0. SYNTAX: switch group flush EXAMPLE: =>switch group list Group 0 Ports: 4 Group 1 Ports: 1 Group 2 Ports: 2 3 =>switch group flush =>switch group list Group 0 Ports: 1 2 3 4 =>...
Switch Commands switch group list List all configured groups. SYNTAX: switch group list EXAMPLE: =>switch group list Group 0 Ports: 4 Group 1 Ports: 1 Group 2 Ports: 2 3 RELATED COMMANDS: switch group flush Set all ports to the default settings (all ports in group 0). switch group move Move a specified port to a specified group.
Switch Commands switch group move Move a specified port to a specified group. SYNTAX: switch group move group = <number{0-4}> port = <number{1-4}> where: group The group id to which the port must be moved. REQUIRED port The port to be moved. REQUIRED EXAMPLE: =>switch group list...
Switch Commands switch mirror capture Define the specified port to be the Mirror Capture Port. Only one port can be the Mirror Capture Port at any one time. Note SYNTAX: switch mirror capture port = <number{1-4}> where: port The port to be the Mirror Capture Port. REQUIRED If no port number is specified, then the port number of the Mirror Capture Port is shown.
Switch Commands switch mirror egress Enable or disable the specified port to be the Mirror Egress Port. Only one port can be the Mirror Egress Port at any one time. Note But a port can be the Mirror Egress Port and the Mirror Ingress Port at the same time. SYNTAX: switch mirror egress port = <number{1-4}>...
Switch Commands switch mirror ingress Enable or disable the specified port to be the Mirror Ingress Port. Only one port can be the Mirror Ingress Port at any one time. Note But a port can be the Mirror Egress Port and the Mirror Ingress Port at the same time. SYNTAX: switch mirror ingress port = <number{1-4}>...
Syslog Commands syslog config Show/set SpeedTouch™ Syslog configuration. SYNTAX: syslog config [activate = <{no|yes}>] [timeout = <number{0-60}>] where: activate Allow the SpeedTouch™ Syslog daemon to send messages to OPTIONAL collectors, present in the collector rule list (yes), or not (no). The default is no (sending of syslog messages is disabled).
Syslog Commands syslog list Show a list of all collectors and their applicable rules. The SpeedTouch™ Syslog collector rule list can hold up to 16 rules. Note SYNTAX: syslog list EXAMPLE: =>syslog list 1: all.debug 10.0.0.1 2: kern,auth,security,ftp.warning 10.10.10.101 => RELATED COMMANDS: syslog ruleadd Add a new rule to the SpeedTouch™...
Syslog Commands syslog ruleadd Add a rule, i.e. a new collector and applicable rules to send SpeedTouch™ syslog messages, to the SpeedTouch™ Syslog collector list. This list can hold up to 16 rules. SYNTAX: syslog ruleadd fac = <{<supported facility names (comma separated)>|all}> sev = <supported severity name>...
Syslog Commands syslog ruledelete Delete a rule from the SpeedTouch™ Syslog collector rule list. SYNTAX: syslog ruledelete rule_index = <number{1-16}> where: rule_index Specify the index of the rule to delete. REQUIRED Use the command syslog list to identify the index number Note of the rule to delete.
Syslog Commands syslog msgbuf show Show syslog messages in the internal SpeedTouch™ Syslog message buffer. SYNTAX: syslog msgbuf show [fac = <supported facility name>] [sev = <supported severity name>] [hist = <{no|yes}>] where: Optionally, Specify the facility name of the syslog messages to show. OPTIONAL Use one of the supported facility names (See “...
System Commands System Commands Contents This chapter covers the following commands: Topic Page system clearpassword system config system flush system reboot system reset system setpassword system settime system stats E-DOC-CTC-20040210-0028 v3.0...
System Commands system clearpassword Clear current SpeedTouch™ system password. To avoid unrestricted and unauthorized access to the SpeedTouch™, it is highly recommended to make sure Note the SpeedTouch™ is protected by a system password (can be set via the command system setpassword) and to change the password on a regular basis.
System Commands system config Show/set SpeedTouch™ system configuration parameters. For a good operation of UPnP™ and the discovery mechanism, it is highly recommended not to change the Note system config settings. SYNTAX: system config [upnp = <{disabled|enabled}>] [mdap = <{disabled|enabled}>] [drst = <{disabled|enabled}>] [led = <{green|red|orange|flash|off}>] [digestauth = <{disabled|enabled}>]...
System Commands system flush Flush current SpeedTouch™ system configuration, i.e. the System password and the system config settings (dcache excluded). 1. To avoid unrestricted and unauthorized access to the SpeedTouch™, it is highly recommended to make Note sure the SpeedTouch™ is protected by a system password (via the command system setpassword) and to change the password on a regular basis.
System Commands system reboot Reboot the SpeedTouch™. Non-saved configuration settings are lost after reboot. SYNTAX: system reboot EXAMPLE: =>system reboot ..(lost session connectivity due to reboot) ..E-DOC-CTC-20040210-0028 v3.0...
System Commands system reset Reset the SpeedTouch™ to its factory default settings and reboot the device. All user and Service Provider specific settings and all saved configuration changes are lost after reboot. SYNTAX: system reset factory yes/no = <{yes|no}> proceed no/yes = <{no|yes}> where: factory yes/no Proceed with resetting the SpeedTouch™...
System Commands system setpassword Set/change the current SpeedTouch™ system password. To avoid unrestricted and unauthorized access to the SpeedTouch™, it is highly recommended to make sure Note the SpeedTouch™ is protected by a system password (via the command system setpassword) and to change the password on a regular basis SYNTAX: system setpassword...
System Commands system settime Show/set the SpeedTouch™ internal system clock. When synchronization with an external NTP server via the SpeedTouch™ SNTP client fails, this command allows to manually configure its internal clock. In cases without regular synchronization, accurate real-time clock settings can not be garantueed. Note SYNTAX: system settime...
System Commands system stats Show/set the SpeedTouch™ cpu and memory statistics. SYNTAX: system stats [reset = <{no|yes}>] where: reset Reset cpu statistics. OPTIONAL EXAMPLE: =>system stats Cpu statistics: --------------- Maximum cpu load: 75% Minimum cpu load: 4% Average cpu load: 13% Current cpu load: 10% Memory statistics: ------------------...
Page 534
System Commands E-DOC-CTC-20040210-0028 v3.0...
UPnP Commands upnp config Configure UPnP™ parameter(s). SYNTAX: upnp config [maxage = <number{60-999999}>] [defcservice = <string>] [writemode = <{full|natonly|readonly}>] [safenat = <{disabled|enabled}>] [preferredaddress = <ip-address>] where: maxage This parameter allows to configure how often the SpeedTouch™ OPTIONAL sends a notification message to advertise its presence as an Internet Gateway Device IGD) on the network.
UPnP Commands upnp list List the devices and services currently offered by the SpeedTouch™. Use this command to check whether a PPP connection is properly configured and thus advertised as a PPP service. SYNTAX: upnp list [verbose = <number{0-2}>] where: verbose Verbose level.
Abbreviations Abbreviations The table below lists all the abbreviations used in the CLI Guide. Abbreviation Description AAL5 ATM Adaption Layer 5 Access Control List ADSL Asymmetric Digital Subscriber Line Advanced Encryption System Assured Forwarding Authentication Header Access Point Address Resolution Protocol Asynchronous Transfer Mode ATMF ATM Forum...
Page 542
Abbreviations Abbreviation Description General Routing Encapsulation Gateway Routing Protocol HDLC High-level Data Link Control HTTP HyperText Transfer Protocol ICMP Internet Control Message Protocol Internet Gateway Device IGMP Internet Group Management Protocol Internet Locator Service Internet Key Exchange IMAP Interim Mail Access Protocol IMAP Interactive Mail Access Protocol Internet Protocol...
Page 543
Abbreviations Abbreviation Description Network Time Protocol Operation and Maintenance On Board Controller Object IDentifier Password Authentication Protocol Private Branch Exchange Per Hop Behavior Packet Interception Point PKCS Public Key Cryptography Standard Public Key Infrastructure Post Office Protocol POTS Plain Old Telephone Service Point-to-Point Protocol PPPoA PPP over ATM...
Page 544
Abbreviations Abbreviation Description Switched Virtual Channel Transmission Control Protocol TFTP Trivial File Transfer Protocol TKIP Temporal Key Integrity Protocol Type of Service User Datagram Protocol UPnP Universal Plug and Play Uniform Resource Identifier Uniform Resource Locator Virtual Channel VCMUX Virtual Channel MUltipleXing VDSL Very high speed Digital Subscriber Line VLSM...
Syslog Messages DHCP Server Module Facility Severity Contents LOCAL2 WARNING DHCP server: %s cannot be send due to invalid server identifier LOCAL2 WARNING DHCP server: DHCPACK cannot be send due to invalid server identifier LOCAL2 WARNING DHCP server: DHCPNAK cannot be send due to invalid server identifier LOCAL2 WARNING DHCP Auto DHCP: server detected on LAN, own dhcp server disabled...
Syslog Messages IPSec Module Facility Severity Contents USER INFO AddSa: SPIs:<spi/otherspi> Loc:<myid> Rem:<hisid> (<ip-address>) Prot:<prot>-<alg><keysize> Exp:<expiry> USER INFO AddSuite: SPIs:<spi/otherspi> Loc:<myid> Rem:<hisid> (<ip-address>) Prot:<prot>-<alg><keysize> Exp:<expiry> USER INFO Cert/map id mismatch: <hisid> using <dn> USER INFO Cert: <hisid> using <dn> to establish to <myid> USER INFO "Cert status unknown;...
Syslog Messages PPP Module Facility Severity Contents LOCAL0 WARNING PPP Link up (<intf name>) LOCAL0 WARNING PPP Link down (<intf name>) AUTH ERROR PPP PAP authentication failed (<intf name>) [protocol reject] AUTH INFO PPP PAP on intf <intf_id> no response to PAP authenticate-request AUTH NOTICE PPP PAP remote user <remote_user_name>...
Syslog Messages RIP Module Facility Severity Contents LOCAL1 INFO RIP Packet received from unknown interface LOCAL1 INFO RIP Packet size is smaller than minimum size LOCAL1 INFO RIP Packet size is greater than maximum size LOCAL1 INFO RIP Wrong RIP packet alignment LOCAL1 INFO RIP RIP version 0 with command <command-name>...
Syslog Messages Facility Severity Contents LOCAL1 INFO RIP Unsupported family from <ip-address> LOCAL1 INFO RIP RIP routing table is full LOCAL1 INFO RIP Neighbor <ip-address> is not connected to direct network LOCAL1 INFO RIP Interface <intf-name> has not any valid local IP address for sending RIPv2 packets LOCAL1 INFO RIP Interface <intf-name>...
Syslog Messages SNTP Module Facility Severity Contents WARNING SNTP Unable to contact server: <SNTP server ip> WARNING SNTP Server not synchronized: <SNTP server ip> WARNING SNTP Invalid response from server: <SNTP server ip> WARNING SNTP Synchronized to server: <SNTP server ip> ERROR SNTP No server(s) configured, check configuration WARNING...
Supported Key Names Supported Key Names Contents This chapter lists all the key names supported by the SpeedTouch™, that can be used for completing CLI command parameters. Supported Internet Protocol (IP) Protocol Names For more information on the listed IP protocols, see RFC1340 or www.iana.org. Protocol name Number Description...
Supported Key Names Supported TCP/UDP Port Names For more information on the listed TCP/UDP port assignments, see RFC1340 or www.iana.org. Portname Number Description echo Echo discard Discard systat Active Users daytime Daytime qotd Quote of the Day chargen Character Generator ftp-data File Transfer (Default data) File Transfer (Control)
Page 557
Supported Key Names Portname Number Description sntp Simple Network Time Protocol (SNTP) Network Time Protocol (NTP) ingres-net INGRES-NET Service netbios-ns NETBIOS Naming System netbios-dgm NETBIOS Datagram Service netbios-ssn NETBIOS Session Service imap2 Interim Mail Access Protocol (IMAP) v2 sql-net SQL-NET pcmail-srv PCMail Server snmp...
Page 558
Supported Key Names Portname Number Description talk Like Tenex link, but across machine ntalk NTalk utime UNIX Time Local routing process (on site); uses variant of Xerox NS Routing Information Protocol (RIP) timed Timeserver netwall For emergency broadcasts uucp uucpd uucp-rlogin uucpd remote login new-rwho...
Supported Key Names Supported ICMP Type Names For more information on the listed ICMP type names, see RFC1340 or www.iana.org. ICMP Type name Number Description echo-reply Echo Reply destination-unreachable Destination Unreachable source-quench Source Quench redirect Redirect echo-request Echo router-advertisement Router Advertisement router-solicitation Router Solicitation time-exceeded...
Supported Key Names Supported Syslog Facilities For more information on the listed Syslog facilities, see RFC3164. Facilty Name Hierarchy Syslog facility Code (listed according descending importance) kern Kernel messages user User-level messages mail Mail system daemon System daemons auth Authorization messages syslog Syslog daemon messages Line printer subsystem...
Supported Key Names Supported Syslog Severities For more information on the listed Syslog severities, see RFC3164. Severity Name Hierarchy Syslog severity Code (listed according descending importance) emerg Emergency conditions, system unusable alert Alert conditions, immediate action is required crit Critical conditions Error conditions warning Warning conditions...