THOMSON TG605s Cli Reference Manual

Business shdsl.bis gateway
Hide thumbs Also See for TG605s:
Table of Contents

Advertisement

THOMSON TG605s
Business SHDSL.bis Gateway
CLI Reference Guide R8.2

Advertisement

Table of Contents
loading

Summary of Contents for THOMSON TG605s

  • Page 1 THOMSON TG605s Business SHDSL.bis Gateway CLI Reference Guide R8.2...
  • Page 3 THOMSON TG605s CLI Reference Guide R8.2...
  • Page 4 THOMSON. The content of this document is furnished for informational use only, may be subject to change without notice, and should not be construed as a commitment by THOMSON. THOMSON assumes no responsibility or liability for any errors or inaccuracies that may appear in this document.
  • Page 5: Table Of Contents

    Contents Contents: ? Command....................31 .. Command....................33 atm Commands....................35 atm bundle add........................... 37 atm bundle attach..........................38 atm bundle clear..........................39 atm bundle config..........................40 atm bundle delete..........................41 atm bundle detach..........................42 atm bundle flush..........................43 atm bundle ifadd..........................44 atm bundle ifconfig..........................45 atm bundle ifdelete..........................
  • Page 6 Contents atm oam list............................66 atm oam modify..........................67 atm oam ping............................68 atm oam vclb add..........................69 atm oam vclb del..........................70 atm oam vclb list..........................71 atm phonebook add..........................72 atm phonebook autolist........................73 atm phonebook delete........................74 atm phonebook flush..........................75 atm phonebook list..........................76 atm qosbook add..........................
  • Page 7 Contents connection clean..........................103 connection clear..........................104 connection config..........................105 connection debug..........................106 connection describe.......................... 107 connection flush..........................108 connection info..........................109 connection list........................... 110 connection refresh..........................111 connection stats..........................112 connection timerclear........................113 connection timerconfig........................114 connection unbind..........................115 cwmp Commands..................117 cwmp config............................
  • Page 8 Contents dhcp client rqoptions list........................144 dhcp client rqoptions optionlist.......................145 dhcp client txoptions add.........................146 dhcp client txoptions delete......................147 dhcp client txoptions list........................148 dhcp client txoptions optionlist....................... 149 dhcp relay add...........................150 dhcp relay config..........................151 dhcp relay debug stats........................152 dhcp relay debug traceconfig......................153 dhcp relay delete..........................154 dhcp relay flush..........................155 dhcp relay ifconfig..........................
  • Page 9 Contents dhcp server option ruledelete......................181 dhcp server option tmpladd......................182 dhcp server option tmpldelete......................183 dhcp server option tmpllist......................184 dhcp server policy..........................185 dhcp server pool add........................186 dhcp server pool config........................187 dhcp server pool delete........................189 dhcp server pool flush........................190 dhcp server pool list......................... 191 dhcp server pool optadd........................
  • Page 10 Contents dns server debug spoof getaddress....................219 dns server debug spoof getflags.....................220 dns server debug spoof list......................221 dns server debug spoof update...................... 222 dns server debug stats........................223 dns server flush..........................224 dns server host add.......................... 225 dns server host delete........................226 dns server host flush........................
  • Page 11 Contents dyndns service modify........................254 env Commands..................255 env flush.............................256 env get..............................257 env list..............................258 env set..............................259 env unset............................260 eth Commands...................261 eth bridge add........................... 266 eth bridge clear..........................267 eth bridge config..........................268 eth bridge delete..........................269 eth bridge dynvlan actlist.........................270 eth bridge dynvlan add........................
  • Page 12 Contents eth bridge ifflush..........................294 eth bridge iflist..........................295 eth bridge igmpsnooping clear....................... 296 eth bridge igmpsnooping config..................... 297 eth bridge igmpsnooping ifconfig....................298 eth bridge igmpsnooping iflist......................299 eth bridge igmpsnooping list......................300 eth bridge list............................ 301 eth bridge macadd..........................302 eth bridge macdelete........................
  • Page 13 Contents eth filter operand ipprotoadd......................332 eth filter operand ipprotodelete.......................333 eth filter operand list........................334 eth filter operand priorityadd......................335 eth filter operand prioritydelete.......................336 eth filter operand reset........................337 eth filter operand vidadd........................338 eth filter operand viddelete......................339 eth filter template add........................340 eth filter template config........................341 eth filter template delete........................
  • Page 14 Contents eth switch info........................... 369 eth switch mirror capture.........................370 eth switch mirror egress........................371 eth switch mirror ingress......................... 372 eth switch qos config........................373 eth switch qos ifconfig........................374 eth switch qos list..........................375 eth switch qos weights........................376 eth switch shaper config........................377 eth switch shaper ifconfig........................378 eth switch shaper iflist........................
  • Page 15 Contents firewall debug clear.......................... 408 firewall debug stats...........................409 firewall debug traceconfig........................410 firewall level add..........................411 firewall level delete........................... 412 firewall level flush..........................413 firewall level list..........................414 firewall level modify......................... 415 firewall level set..........................416 firewall list............................417 firewall rule add..........................418 firewall rule debug clear........................
  • Page 16 Contents grp rtlist..............................447 grp rttadd............................448 grp rttdelete............................449 grp rttlist.............................450 help Command...................451 hostmgr Commands..................453 hostmgr add............................454 hostmgr clear.............................455 hostmgr config..........................456 hostmgr delete..........................457 hostmgr flush............................ 458 hostmgr list............................459 ids Commands................... 461 ids clear.............................. 462 ids config............................463 ids parser list............................. 464 ids parser modify..........................
  • Page 17 Contents igmp proxy config..........................483 igmp proxy debug clear........................484 igmp proxy debug stats........................485 igmp proxy debug traceconfig......................486 igmp proxy flush..........................487 igmp proxy grouplist........................488 igmp proxy ifconfig...........................489 igmp proxy iflist..........................490 igmp proxy mbslist........................... 491 interface Command................... 493 ip Commands.....................
  • Page 18 Contents ip ipconfig............................522 ip ipdelete............................523 ip iplist..............................524 ip mcast flush............................ 525 ip mcast rtadd........................... 526 ip mcast rtdelete..........................527 ip mcast rtlist.............................528 ip rtadd............................... 529 ip rtconfig............................530 ip rtdelete............................531 ip rtlist..............................532 ipqos Commands..................533 ipqos config............................534 ipqos ef config...........................535 ipqos ef list............................
  • Page 19 Contents ipsec config............................560 ipsec connection add........................561 ipsec connection advanced add...................... 562 ipsec connection advanced delete....................563 ipsec connection advanced list......................564 ipsec connection advanced modify....................565 ipsec connection delete........................567 ipsec connection descriptor add......................568 ipsec connection descriptor delete....................569 ipsec connection descriptor list....................... 570 ipsec connection descriptor modify....................
  • Page 20 Contents ipsec peer modify..........................598 ipsec peer options add........................599 ipsec peer options delete......................... 600 ipsec peer options list........................601 ipsec peer options modify....................... 602 ipsec peer subpeer add........................603 ipsec peer subpeer delete........................ 604 ipsec peer subpeer list........................605 ipsec peer subpeer modify......................
  • Page 21 Contents language Commands.................635 language config..........................636 language delete..........................637 language list............................638 mbus Commands..................639 mbus client authenticate........................640 mbus client config..........................641 mbus client exec..........................642 mbus client register.......................... 644 mbus client termsession........................645 mbus client unregister........................646 mbus debug clearstats........................647 mbus debug loadobjects........................
  • Page 22 Contents mlp Commands..................671 mlp debug export..........................672 mlp debug stats..........................673 mlp debug traceconfig........................674 mlp flush............................675 mlp import............................676 mlp privilege add..........................677 mlp privilege addzone........................678 mlp privilege config.......................... 679 mlp privilege delete.......................... 680 mlp privilege list..........................681 mlp privilege removezone........................682 mlp role add............................
  • Page 23 Contents pki cep cancel............................ 708 pki cep config............................ 709 pki cep list............................711 pki cep request..........................712 pki cep resubmit..........................713 pki clearall............................714 pki config............................715 pki crlconfig............................716 pki export............................717 pki flush..............................718 pki import............................719 pki list..............................720 pki refresh............................721 pki remove............................
  • Page 24 Contents ppp relay ifconfig..........................749 ppp relay ifdelete..........................750 ppp relay iflist............................751 ppp relay sesslist..........................752 ppp rtadd............................753 ppp rtdelete............................754 pptp Commands..................755 pptp flush............................756 pptp ifadd............................757 pptp list.............................. 758 pptp profadd............................759 pptp profdelete..........................760 pptp proflist............................761 saveall Command..................
  • Page 25 Contents service host stats..........................784 service host triggerlist........................785 service system ifadd......................... 786 service system ifdelete........................787 service system ipadd........................788 service system ipdelete........................789 service system list..........................790 service system mapadd........................791 service system mapdelete........................792 service system modify........................793 snmp Commands..................795 snmp community add........................796 snmp community delete........................797 snmp community list........................
  • Page 26 Contents software deletepassive........................822 software download........................... 823 software duplicate..........................824 software setpassive...........................825 software switch..........................826 software upgrade..........................827 software version..........................828 ssh Commands...................829 ssh config............................830 ssh publickey add..........................831 ssh publickey delete..........................832 ssh publickey list..........................833 ssh publickey show_own........................834 ssh show............................835 statecheck Commands................
  • Page 27 Contents system flush............................859 system locale............................. 860 system ra config..........................861 system reboot............................ 862 system reset............................863 system settime..........................864 system timedreboot.......................... 865 telnet Command..................867 tftp Commands..................869 tftp cleanup............................870 tftp fs cd............................. 871 tftp fs cleanup............................872 tftp fs df..............................873 tftp fs dir............................874 tftp fs move............................
  • Page 28 Contents tod action paramadd.........................895 tod action paramdelete........................896 tod action setvaladd..........................897 tod action setvaldelete........................898 tod config............................899 tod list..............................900 tod schedule add..........................901 tod schedule dayadd.........................902 tod schedule daydelete........................903 tod schedule delete...........................904 tod schedule list..........................905 tod schedule modify......................... 906 tod schedule timeadd........................907 tod schedule timedelete........................
  • Page 29 Contents upgrade profile modify........................930 upgrade start............................. 931 upnp Commands..................933 upnp config............................934 upnp flush............................935 upnp list............................. 936 user Commands..................937 user add............................. 938 user config............................939 user delete............................940 user flush............................941 user list...............................942 user rights............................943 xdsl Commands..................945 xdsl add..............................947 xdsl debug atmstats..........................948 xdsl debug clear..........................
  • Page 30 Contents xdsl profile add..........................968 xdsl profile delete..........................969 xdsl profile list........................... 970 xdsl profile modify..........................971 E-DOC-CTC-20080409-0002 v2.0...
  • Page 31: Command

    ? Command ? Command Displays this help information E-DOC-CTC-20080409-0002 v2.0...
  • Page 32 .. Command E-DOC-CTC-20080409-0002 v2.0...
  • Page 33: Command

    .. Command .. Command Exits group selection. E-DOC-CTC-20080409-0002 v2.0...
  • Page 34: Atm Commands

    atm Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 35: Atm Commands

    atm Commands atm Commands atm bundle add Add a new bundle of interfaces. see page 37 atm bundle attach Attach a bundle of interfaces. see page 38 atm bundle clear Clear bundle statistics. see page 39 atm bundle config Modify a bundle of interfaces. see page 40 atm bundle delete Delete a bundle of interfaces.
  • Page 36 atm Commands atm oam cc modify Modify CC on the connection. see page 63 atm oam cc send Send CC activate/deactivate to see page 64 connection. atm oam config Modify the ATM OAM settings. see page 65 atm oam list Display the ATM OAM settings.
  • Page 37: Atm Bundle Add

    atm Commands atm bundle add Add a new bundle of interfaces. SYNTAX: atm bundle add name = <string> where: name The new bundle name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 38: Atm Bundle Attach

    atm Commands atm bundle attach Attach a bundle of interfaces. SYNTAX: atm bundle attach name = <{}> where: name The name of the bundle. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 39: Atm Bundle Clear

    atm Commands atm bundle clear Clear bundle statistics. SYNTAX: atm bundle clear [name = <{}>] where: name The name of the bundle. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 40: Atm Bundle Config

    atm Commands atm bundle config Modify a bundle of interfaces. SYNTAX: atm bundle config name = <{}> [policy = <{priority|connection}>] [propagate = <{disabled|enabled}>] [retry = <number{0-65535}>] where: name The name of the bundle. REQUIRED policy The policy of the bundle. OPTIONAL propagate Enable/disable propagation of packets.
  • Page 41: Atm Bundle Delete

    atm Commands atm bundle delete Delete a bundle of interfaces. SYNTAX: atm bundle delete name = <{}> where: name The name of the bundle. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 42: Atm Bundle Detach

    atm Commands atm bundle detach Detach a bundle of interfaces. SYNTAX: atm bundle detach name = <{}> where: name The name of the bundle. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 43: Atm Bundle Flush

    atm Commands atm bundle flush Flush all bundles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 44: Atm Bundle Ifadd

    atm Commands atm bundle ifadd Add an interface on a bundle. SYNTAX: atm bundle ifadd name = <{}> intf = <{}> [index = <number{0-6}>] where: name The name of the bundle. REQUIRED intf The name of the ATM interface. REQUIRED index The index of the ATM interface.
  • Page 45: Atm Bundle Ifconfig

    atm Commands atm bundle ifconfig Configure an interface from a bundle. SYNTAX: atm bundle ifconfig name = <{}> intf = <{}> [state = <{disabled|enabled}>] [low = <number{0-15}>] [high = <number{0-15}>] where: name The name of the bundle. REQUIRED intf The name of the ATM interface. REQUIRED state Enable/disable interface.
  • Page 46: Atm Bundle Ifdelete

    atm Commands atm bundle ifdelete Remove an interface from a bundle. SYNTAX: atm bundle ifdelete name = <{}> intf = <{}> where: name The name of the bundle. REQUIRED intf The name of the ATM interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 47: Atm Bundle List

    atm Commands atm bundle list Display the current bundles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 48: Atm Cac Config

    atm Commands atm cac config Configure ATM connection admission control. SYNTAX: atm cac config port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> state = <{disabled|enabled}> where: port The port for which CAC is configured. REQUIRED state Enable/disable CAC for an ATM port. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 49: Atm Cac List

    atm Commands atm cac list List all CAC parameters. E-DOC-CTC-20080409-0002 v2.0...
  • Page 50: Atm Cac Overbooking

    atm Commands atm cac overbooking Configure ATM overbooking parameters. SYNTAX: atm cac overbooking [rt = <number{0-1000}>] [nrt = <number{0-1000}>] where: The realtime overbooking percentage. OPTIONAL The non-realtime overbooking percentage. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 51: Atm Debug Aal5Stats

    atm Commands atm debug aal5stats Display AAL5 port specific atm statistics. SYNTAX: atm debug aal5stats port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> vpi = <number{0-31}> [vci = <number{0-511}>] [clear = <{disabled|enabled}>] where: port The port number for which statistics will be REQUIRED retrieved.
  • Page 52: Atm Debug Gstats

    atm Commands atm debug gstats Display ATM global statistics. SYNTAX: atm debug gstats [clear = <{disabled|enabled}>] where: clear Clear the statistics after request. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 53: Atm Debug Portstats

    atm Commands atm debug portstats Display port specific atm statistics. SYNTAX: atm debug portstats port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> [clear = <{disabled|enabled}>] where: port The port for which statistics will be retrieved. REQUIRED clear Clear the statistics after the request. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 54: Atm Debug Traceconfig

    atm Commands atm debug traceconfig Display/Modify AAL5 debug trace configuration. SYNTAX: atm debug traceconfig [len = <number>] [intf = <{atm_8_35|atm_0_35|atm_0_32}>] [state = <{disabled|enabled}>] where: Maximum number of AAL5 payload bytes that OPTIONAL will be shown (0-2000, global setting). intf The name of the ATM interface to configure. OPTIONAL state Enable/disable AAL5 debug tracing.
  • Page 55: Atm Flush

    atm Commands atm flush Flush all ATM interfaces. E-DOC-CTC-20080409-0002 v2.0...
  • Page 56: Atm Ifadd

    atm Commands atm ifadd Create a new ATM interface. SYNTAX: atm ifadd intf = <string> where: intf The name for the new ATM interface. If not REQUIRED specified, the destination will double as interface name. E-DOC-CTC-20080409-0002 v2.0...
  • Page 57: Atm Ifattach

    atm Commands atm ifattach Attach an ATM interface. SYNTAX: atm ifattach intf = <{}> where: intf The name of the ATM interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 58: Atm Ifconfig

    atm Commands atm ifconfig Modify an ATM interface. SYNTAX: atm ifconfig intf = <{atm_8_35|atm_0_35|atm_0_32}> [dest = <{}>] [qos = <{default}>] [clp = <{0|1|classification}>] [clpthresh = <number{0-15}>] [encaps = <{llc|vcmux}>] [fcs = <{disabled|enabled|auto}>] [ulp = <{mac|ip|ppp}>] [retry = <number{0-65535}>] where: intf The name of the ATM interface to configure.
  • Page 59: Atm Ifdelete

    atm Commands atm ifdelete Delete an ATM interface. SYNTAX: atm ifdelete intf = <{}> where: intf The name of the ATM interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 60: Atm Ifdetach

    atm Commands atm ifdetach Detach an ATM interface. SYNTAX: atm ifdetach intf = <{}> where: intf The name of the ATM interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 61: Atm Iflist

    atm Commands atm iflist Display the ATM interfaces. SYNTAX: atm iflist [intf = <{atm_8_35|atm_0_35|atm_0_32}>] where: intf The name of an ATM interface. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 62: Atm Oam Cc List

    atm Commands atm oam cc list Display CC configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 63: Atm Oam Cc Modify

    atm Commands atm oam cc modify Modify CC on the connection. SYNTAX: atm oam cc modify port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> vpi = <number{0-31}> [vci = <number{0-511}>] [transmit = <{disabled|enabled}>] [receive = <{disabled|enabled}>] [auto = <{disabled|enabled}>] [span = <{segment|end2end}>] where: port The ATM port number.
  • Page 64: Atm Oam Cc Send

    atm Commands atm oam cc send Send CC activate/deactivate to connection. SYNTAX: atm oam cc send port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> vpi = <number{0-31}> [vci = <number{0-511}>] [span = <{segment|end2end}>] [action = <{activate|deactivate}>] [direction = <{source|sink|both}>] where: port The ATM port number. REQUIRED The Virtual Path Identifier.
  • Page 65: Atm Oam Config

    atm Commands atm oam config Modify the ATM OAM settings. SYNTAX: atm oam config [clp = <number{0-1}>] [loopbackid = <string>] where: The CLP bit value of the OAM cells. OPTIONAL loopbackid The loopback id (hexadecimal string) for OPTIONAL processing of segment loopback cells. E-DOC-CTC-20080409-0002 v2.0...
  • Page 66: Atm Oam List

    atm Commands atm oam list Display the ATM OAM settings. E-DOC-CTC-20080409-0002 v2.0...
  • Page 67: Atm Oam Modify

    atm Commands atm oam modify Modify the ATM OAM data blocking mode. SYNTAX: atm oam modify port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> blocking = <{disabled|enabled}> where: port The port for which OAM blocking is configured. REQUIRED blocking Enable/disable OAM blocking. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 68: Atm Oam Ping

    atm Commands atm oam ping Send ATM loopback cells. SYNTAX: atm oam ping dest = <{atm_pvc_8_35|atm_pvc_0_35| atm_pvc_0_32}> [count = <number{1-1000000}>] [interval = <number{100-1000000}>] where: dest The destination address for the request. REQUIRED count The number of pings to send. OPTIONAL interval The interval in milliseconds between packets.
  • Page 69: Atm Oam Vclb Add

    atm Commands atm oam vclb add Create a loopback connection for VC SYNTAX: atm oam vclb add port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> vpi = <number{0-31}> [vci = <number{0-511}>] where: port The ATM port number. REQUIRED The Virtual Path Identifier. REQUIRED The Virtual Channel Identifier.
  • Page 70: Atm Oam Vclb Del

    atm Commands atm oam vclb del Delete a loopback connection for VC SYNTAX: atm oam vclb del port = <{dsl0|dsl1|atm2|atm3|aal5|atm5} or number> vpi = <number{0-31}> [vci = <number{0-511}>] where: port The ATM port number. REQUIRED The Virtual Path Identifier. REQUIRED The Virtual Channel Identifier.
  • Page 71: Atm Oam Vclb List

    atm Commands atm oam vclb list List all VC loopback connections E-DOC-CTC-20080409-0002 v2.0...
  • Page 72: Atm Phonebook Add

    atm Commands atm phonebook add Add a new phonebook entry. SYNTAX: atm phonebook add name = <string> addr = <atmchannel : PVC syntax is [port.]vpi.vci port=dsl0|dsl1|...> where: name The phonebook name for this destination. REQUIRED addr The address for this destination. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 73: Atm Phonebook Autolist

    atm Commands atm phonebook autolist Display auto PVC's. E-DOC-CTC-20080409-0002 v2.0...
  • Page 74: Atm Phonebook Delete

    atm Commands atm phonebook delete Delete a phonebook entry. SYNTAX: atm phonebook delete name = <{}> where: name The name of the phonebook to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 75: Atm Phonebook Flush

    atm Commands atm phonebook flush Flush all phonebook entries. E-DOC-CTC-20080409-0002 v2.0...
  • Page 76: Atm Phonebook List

    atm Commands atm phonebook list Display the phonebook. E-DOC-CTC-20080409-0002 v2.0...
  • Page 77: Atm Qosbook Add

    atm Commands atm qosbook add Add a new qosbook entry. SYNTAX: atm qosbook add name = <string> [txctd = <{default}>] [rxctd = <{default}>] where: name The name for the new QoS entry. REQUIRED txctd The name of the CTD for transmit (upstream) OPTIONAL direction.
  • Page 78: Atm Qosbook Config

    atm Commands atm qosbook config Modify the qosbook configuration. SYNTAX: atm qosbook config [format = <{bytes|cells}>] where: format The input, output format of the qosbook. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 79: Atm Qosbook Ctdadd

    atm Commands atm qosbook ctdadd Add a new connection traffic descriptor. SYNTAX: atm qosbook ctdadd name = <string> conformance = <{UBR|CBR|VBR|UBR.1|UBR.2| UBR.mdcr|CBR.1|VBR.1|VBR.2|VBR.3|VBR.c|VBR.nt| VBR.t|GFR.1|GFR.2}> [peakrate = <number{0-27786}>] [sustrate = <number{0-27786}>] [maxburst = <number{48-12240}>] [minrate = <number{0-27786}>] [maxframe = <number{0-255}>] [celldelay = <number>] [realtime = <{enabled|disabled}>] [framediscard = <{enabled|disabled}>] where:...
  • Page 80: Atm Qosbook Ctddelete

    atm Commands atm qosbook ctddelete Delete a connection traffic descriptor. SYNTAX: atm qosbook ctddelete name = <{default}> [force = <{disabled|enabled}>] where: name The name of the CTD entry to delete. REQUIRED force Force delete even when the entry is still in use. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 81: Atm Qosbook Ctdlist

    atm Commands atm qosbook ctdlist Display all connection traffic descriptors. E-DOC-CTC-20080409-0002 v2.0...
  • Page 82: Atm Qosbook Delete

    atm Commands atm qosbook delete Delete a qosbook entry. SYNTAX: atm qosbook delete name = <{default}> [force = <{disabled|enabled}>] where: name The name of the qosbook entry to delete. REQUIRED force Force delete even when the entry is still in use. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 83: Atm Qosbook Flush

    atm Commands atm qosbook flush Flush all qosbook entries. E-DOC-CTC-20080409-0002 v2.0...
  • Page 84: Atm Qosbook List

    atm Commands atm qosbook list Display the qosbook. E-DOC-CTC-20080409-0002 v2.0...
  • Page 85: Autopvc Commands

    autopvc Commands autopvc Commands autopvc config Configure autopvc. see page 86 autopvc list Show retreived information. see page 87 E-DOC-CTC-20080409-0002 v2.0...
  • Page 86: Autopvc Config

    autopvc Commands autopvc config Configure autopvc. SYNTAX: autopvc config [mode = <{pseudo|passive|active}>] [type = <{bridge|pppoerelay|ipoa|ethoa|pppoa| pppoe}>] [overwrite = <{disabled|enabled}>] [peakrate = <number{0-27786}>] where: mode Autopvc mode. OPTIONAL type Type of autopvc. OPTIONAL overwrite Enable/disable UBR peak rate overwrite. OPTIONAL peakrate The UBR peak rate (in kilobits per second) '0' to OPTIONAL indicate linerate.
  • Page 87: Autopvc List

    autopvc Commands autopvc list Show retreived information. SYNTAX: autopvc list [table = <{Port|AtmLayer|Vpc|Vcc|Address| AddressRegistrationAdmin|AAL5Profile| AAL2CommonProfile|AAL2TrunkingProfile| AAL2LESProfile|AtmServiceConnInfoExtension| AtmServiceTypeExtension| AAL5ProfileExtension}>] where: table Autopvc table. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 88: Config Commands

    config Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 89: Config Commands

    config Commands config Commands config delete Delete a user configuration file. see page 90 config dump Show the saved configuration file see page 91 config flush Flush the loaded configuration. see page 92 config list Show the current configuration set see page 93 config load Load saved or default configuration.
  • Page 90: Config Delete

    config Commands config delete Delete a user configuration file. SYNTAX: config delete [filename = <user configuration filename>] where: filename configuration file to erase OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 91: Config Dump

    config Commands config dump Show the saved configuration file SYNTAX: config dump [sections = <string>] where: sections Sections to be dumped OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 92: Config Flush

    config Commands config flush Flush the loaded configuration. SYNTAX: config flush [flush_ip = <{enabled|disabled}>] where: flush_ip Flush IP settings or not. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 93: Config List

    config Commands config list Show the current configuration set SYNTAX: config list [templates = <{disabled|enabled}>] where: templates list template files OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 94: Config Load

    config Commands config load Load saved or default configuration. SYNTAX: config load [load_ip = <{enabled|disabled}>] [defaults = <{disabled|enabled}>] [flush = <{enabled|disabled}>] [echo = <{disabled|enabled}>] [filename = <string>] where: load_ip Load IP settings or not. OPTIONAL defaults Load default instead of saved configuration. OPTIONAL flush Flush current configuration before loading new...
  • Page 95: Config Save

    config Commands config save Store current configuration to backup file SYNTAX: config save filename = <user configuration filename> where: filename Filename for backupfile of current configuration REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 96 connection Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 97: Connection Commands

    connection Commands connection Commands connection appconfig Modify a CONN/NAT application see page 98 helper configuration connection appinfo Display CONN/NAT application see page 99 specific info connection applist Display the available CONN/NAT see page 100 application helpers. connection bind Create a CONN/NAT application see page 101 helper/port binding.
  • Page 98: Connection Appconfig

    connection Commands connection appconfig Modify a CONN/NAT application helper configuration SYNTAX: connection appconfig application = <{IP6TO4|PPTP|ESP|IKE|SIP| JABBER|CU/SeeMe|RAUDIO(PNA)|RTSP|ILS|H245| H323|IRC|GAME(UDP)|CONE(UDP)|LOOSE(UDP)|FTP}> [trace = <{disabled|enabled}>] [timeout = <number{0-32000}>] [childqos = <{DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [floating = <{disabled|enabled}>] [proxy = <{disabled|enabled}>] [tracelevel = <number{1-4}>] [SIP_ALG = <{disabled|enabled}>] [RTP_predict_for_term_SIP_ALG = <{disabled| enabled}>] where:...
  • Page 99: Connection Appinfo

    connection Commands connection appinfo Display CONN/NAT application specific info SYNTAX: connection appinfo application = <{IP6TO4|PPTP|ESP|IKE|SIP| JABBER|CU/SeeMe|RAUDIO(PNA)|RTSP|ILS|H245| H323|IRC|GAME(UDP)|CONE(UDP)|LOOSE(UDP)|FTP}> where: application The name of a CONN/NAT application helper as REQUIRED listed by ':connection applist'. E-DOC-CTC-20080409-0002 v2.0...
  • Page 100: Connection Applist

    connection Commands connection applist Display the available CONN/NAT application helpers. E-DOC-CTC-20080409-0002 v2.0...
  • Page 101: Connection Bind

    connection Commands connection bind Create a CONN/NAT application helper/port binding. SYNTAX: connection bind application = <{IP6TO4|PPTP|ESP|IKE|SIP| JABBER|CU/SeeMe|RAUDIO(PNA)|RTSP|ILS|H245| H323|IRC|GAME(UDP)|CONE(UDP)|LOOSE(UDP)|FTP}> port = <port-range> where: application The name of a CONN/NAT application helper as REQUIRED listed by ':connection applist'. port The port number or range this application REQUIRED handler should work on.
  • Page 102: Connection Bindlist

    connection Commands connection bindlist Display the CONN/NAT application helper/port bindings. E-DOC-CTC-20080409-0002 v2.0...
  • Page 103: Connection Clean

    connection Commands connection clean Clean connection database by forcing timeouts. SYNTAX: connection clean [level = <number{0-9}>] where: level Scrubbing level. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 104: Connection Clear

    connection Commands connection clear Kill all connections. E-DOC-CTC-20080409-0002 v2.0...
  • Page 105: Connection Config

    connection Commands connection config Modify global connection configuration. SYNTAX: connection config [configchangemode = <{immediate|delayed}>] [probes = <{disabled|enabled}>] [udptrackmode = <{strict|loose}>] where: configchangemode Select how config changes are handled. OPTIONAL probes Enable/disable alive probes on idle connections. OPTIONAL udptrackmode UDP connection tracking mode. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 106: Connection Debug

    connection Commands connection debug Connection debug commands. SYNTAX: connection debug [trace = <{disabled|enabled}>] where: trace Enable/disable traces. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 107: Connection Describe

    connection Commands connection describe Describe the streams of a connection. SYNTAX: connection describe [id = <number{0-2048}>] [string = <string>] [beginstring = <string>] where: The connection ID to describe. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 108: Connection Flush

    connection Commands connection flush Flush the connection configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 109: Connection Info

    connection Commands connection info Display all modules with some info. E-DOC-CTC-20080409-0002 v2.0...
  • Page 110: Connection List

    connection Commands connection list Display the currently known connections. SYNTAX: connection list [nr = <number{1-2048}>] [history = <{disabled|enabled}>] [string = <string>] [beginstring = <string>] where: The number of connections to display. OPTIONAL history If enabled, show history. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition...
  • Page 111: Connection Refresh

    connection Commands connection refresh Invalidate all cached decisions. E-DOC-CTC-20080409-0002 v2.0...
  • Page 112: Connection Stats

    connection Commands connection stats Display connection and stream statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 113: Connection Timerclear

    connection Commands connection timerclear Clear connection timeout to default. SYNTAX: connection timerclear [timer = <{tcpidle|tcpneg|tcpkill|udpidle| udpkill|icmpkill|ipidle|ipkill|aiprefresh}>] where: timer The name of the connection idle timer. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 114: Connection Timerconfig

    connection Commands connection timerconfig Modify connection timeout handling. SYNTAX: connection timerconfig [timer = <{tcpidle|tcpneg|tcpkill|udpidle| udpkill|icmpkill|ipidle|ipkill|aiprefresh}>] [value = <number{0-86400}>] where: timer The name of the connection idle timer. OPTIONAL value The timer expire value in seconds. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 115: Connection Unbind

    connection Commands connection unbind Delete a CONN/NAT application helper/port binding. SYNTAX: connection unbind application = <{IP6TO4|PPTP|ESP|IKE|SIP| JABBER|CU/SeeMe|RAUDIO(PNA)|RTSP|ILS|H245| H323|IRC|GAME(UDP)|CONE(UDP)|LOOSE(UDP)|FTP}> port = <port-range> where: application The name of a CONN/NAT application helper as REQUIRED listed by ':connection applist'. port The port number or range this application REQUIRED handler should work on.
  • Page 116: Cwmp Commands

    cwmp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 117: Cwmp Commands

    cwmp Commands cwmp Commands cwmp config Configure the cwmpd as seen from see page 118 the ACS. cwmp debug traceconfig Enable or disable tracing. see page 120 cwmp server config Configure the cwmpd towards the see page 121 ACS. E-DOC-CTC-20080409-0002 v2.0...
  • Page 118: Cwmp Config

    cwmp Commands cwmp config Configure the cwmpd as seen from the ACS. SYNTAX: cwmp config [state = <{disabled|enabled}>] [mode = <{read-only|full}>] [periodicInform = <{disabled|enabled}>] [periodicInfInt = <number>] [sessionTimeout = <number>] [noIpTimeout = <number>] [maxEnvelopes = <number>] [connectionRequest = <{disabled|enabled}>] [connectionReqPath = <string>] [connectionReqUserName = <quoted string>] [connectionReqPsswd = <password>] [connectionReqAuth = <{none|basic|digest}>]...
  • Page 119 cwmp Commands connectionReqAuth Set the authentication type of modem CWMP OPTIONAL server for asynchronous connects. qos-class Set the quality of service class for outgoing OPTIONAL CWMP data. bootdelayrange Set the delay on boot before inform is sent. OPTIONAL upgradedelay Set whether to delay upgrade if services are OPTIONAL active.
  • Page 120: Cwmp Debug Traceconfig

    cwmp Commands cwmp debug traceconfig Enable or disable tracing. SYNTAX: cwmp debug traceconfig [level = <number>] where: level Set the tracelevel (0-2) OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 121: Cwmp Server Config

    cwmp Commands cwmp server config Configure the cwmpd towards the ACS. SYNTAX: cwmp server config [url = <string>] [username = <string>] [password = <password>] where: Set the HTTP URL used to contact the ACS OPTIONAL server. username Set the username for ACS Digest Authentication. OPTIONAL password Set the password for ACS Digest Authentication.
  • Page 122: Debug Commands

    debug Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 123: Debug Commands

    debug Commands debug Commands debug exec Execute a 'Trace & Debug' command. see page 124 For qualified personnel only. debug prompt Switch to 'Trace & Debug' prompt. see page 125 For qualified personnel only. debug Prompt Switch to extended 'Trace & Debug' see page 126 prompt.
  • Page 124: Debug Exec

    debug Commands debug exec Execute a 'Trace & Debug' command. For qualified personnel only. SYNTAX: debug exec cmd = <quoted string> where: Quoted 'Trace & Debug' command string REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 125: Debug Prompt

    debug Commands debug prompt Switch to 'Trace & Debug' prompt. For qualified personnel only. E-DOC-CTC-20080409-0002 v2.0...
  • Page 126: Debug Prompt

    debug Commands debug Prompt Switch to extended 'Trace & Debug' prompt. For qualified personnel only. E-DOC-CTC-20080409-0002 v2.0...
  • Page 127: Dhcp Commands

    dhcp Commands dhcp Commands dhcp client debug clear Clear DHCP client statistics see page 131 dhcp client debug stats Print DHCP client statistics see page 132 dhcp client debug traceconfig Modify DHCP client trace see page 133 configuration dhcp client flush Delete all DHCP clients.
  • Page 128 dhcp Commands dhcp relay delete Delete an entry from the DHCP see page 154 forward list. dhcp relay flush Flushes the DHCP relay settings. see page 155 dhcp relay ifconfig Configure a relay interface. see page 156 dhcp relay iflist Show the configuration of the relay see page 157 interfaces.
  • Page 129 dhcp Commands dhcp server option instlist List all DHCP server option instances see page 179 dhcp server option ruleadd Add a selection rule to a DHCP server see page 180 option instance dhcp server option ruledelete Delete a selection rule from a DHCP see page 181 server option instance dhcp server option tmpladd...
  • Page 130 dhcp Commands dhcp spoofing list List the available Spoofing- see page 205 Associations dhcp spoofing option-add Add a DHCP Option Code to a see page 206 Spoofing-Association. dhcp spoofing option-delete Delete a DHCP Option Code from a see page 207 Spoofing-Association.
  • Page 131: Dhcp Client Debug Clear

    dhcp Commands dhcp client debug clear Clear DHCP client statistics E-DOC-CTC-20080409-0002 v2.0...
  • Page 132: Dhcp Client Debug Stats

    dhcp Commands dhcp client debug stats Print DHCP client statistics E-DOC-CTC-20080409-0002 v2.0...
  • Page 133: Dhcp Client Debug Traceconfig

    dhcp Commands dhcp client debug traceconfig Modify DHCP client trace configuration SYNTAX: dhcp client debug traceconfig [state = <{disabled|enabled}>] where: state Enable/Disable tracing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 134: Dhcp Client Flush

    dhcp Commands dhcp client flush Delete all DHCP clients. E-DOC-CTC-20080409-0002 v2.0...
  • Page 135: Dhcp Client Ifadd

    dhcp Commands dhcp client ifadd Create a DHCP client. SYNTAX: dhcp client ifadd intf = <{ipsec0|lan1|dmz1|guest1}> where: intf The name of the interface on which a DHCP REQUIRED Client is defined. E-DOC-CTC-20080409-0002 v2.0...
  • Page 136: Dhcp Client Ifattach

    dhcp Commands dhcp client ifattach Activate a DHCP client. SYNTAX: dhcp client ifattach intf = <{wan1}> where: intf The name of the interface on which a DHCP REQUIRED Client is defined. E-DOC-CTC-20080409-0002 v2.0...
  • Page 137: Dhcp Client Ifconfig

    dhcp Commands dhcp client ifconfig Configure a DHCP client. SYNTAX: dhcp client ifconfig intf = <{wan1}> [label = <{None|DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [metric = <number{0-255}>] [dnsmetric = <number{0-100}>] [broadcast = <{disabled|enabled}>] [serverroute = <{disabled|enabled}>] [followlabel = <{disabled|enabled}>] where: intf The name of the dynamic interface to be REQUIRED configured.
  • Page 138: Dhcp Client Ifdelete

    dhcp Commands dhcp client ifdelete Delete a DHCP client. SYNTAX: dhcp client ifdelete intf = <{wan1}> where: intf The name of the interface on which a DHCP REQUIRED Client is defined. E-DOC-CTC-20080409-0002 v2.0...
  • Page 139: Dhcp Client Ifdetach

    dhcp Commands dhcp client ifdetach De-activate a DHCP client and releases its lease. SYNTAX: dhcp client ifdetach intf = <> where: intf The name of the interface on which a DHCP REQUIRED Client is defined. E-DOC-CTC-20080409-0002 v2.0...
  • Page 140: Dhcp Client Iflist

    dhcp Commands dhcp client iflist List DHCP clients. SYNTAX: dhcp client iflist [intf = <{wan1}>] [expand = <{disabled|enabled}>] where: intf The name of the interface on which a DHCP OPTIONAL Client is defined. expand Expand enabled/disabled. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 141: Dhcp Client Ifrenew

    dhcp Commands dhcp client ifrenew Renew a DHCP lease. SYNTAX: dhcp client ifrenew intf = <> where: intf The name of the interface on which a DHCP REQUIRED Client is defined. E-DOC-CTC-20080409-0002 v2.0...
  • Page 142: Dhcp Client Rqoptions Add

    dhcp Commands dhcp client rqoptions add Add a DHCP Option Code to the Parameter Request List. SYNTAX: dhcp client rqoptions add intf = <{wan1}> option = <{subnet-mask|time-offset|default- routers|time-servers|ien116-name-impress- servers|resource-location-servers|host- name|boot-file-size|merit-dump|domain-name| swap-server|root-path|extensions-path|ip- forwarding|non-local-source-routing|policy- filter|max-dgram-reassembly|default-ip-ttl| path-mtu-aging-timeout|path-mtu-plateau-table| interface-mtu|all-subnets-local|broadcast- address|perform-mask-discovery|...} or number> [index = <number{0-255}>] where: intf The name of the interface on which a DHCP...
  • Page 143: Dhcp Client Rqoptions Delete

    dhcp Commands dhcp client rqoptions delete Delete a DHCP Option Code from the Parameter Request List. SYNTAX: dhcp client rqoptions delete intf = <{wan1}> option = <{subnet-mask|time-offset|default- routers|time-servers|ien116-name-impress- servers|resource-location-servers|host- name|boot-file-size|merit-dump|domain-name| swap-server|root-path|extensions-path|ip- forwarding|non-local-source-routing|policy- filter|max-dgram-reassembly|default-ip-ttl| path-mtu-aging-timeout|path-mtu-plateau-table| interface-mtu|all-subnets-local|broadcast- address|perform-mask-discovery|...} or number> where: intf The name of the interface on which a DHCP REQUIRED Client is defined.
  • Page 144: Dhcp Client Rqoptions List

    dhcp Commands dhcp client rqoptions list List all DHCP Option Codes in the Parameter Request List. SYNTAX: dhcp client rqoptions list [intf = <{wan1}>] where: intf The name of the interface on which a DHCP OPTIONAL Client is defined. E-DOC-CTC-20080409-0002 v2.0...
  • Page 145: Dhcp Client Rqoptions Optionlist

    dhcp Commands dhcp client rqoptions optionlist List all DHCP Option Codes that can be used in the Parameter Request List. E-DOC-CTC-20080409-0002 v2.0...
  • Page 146: Dhcp Client Txoptions Add

    dhcp Commands dhcp client txoptions add Add an option. SYNTAX: dhcp client txoptions add intf = <{wan1}> option = <{subnet-mask|time-offset|default- routers|time-servers|ien116-name-impress- servers|resource-location-servers|host- name|boot-file-size|merit-dump|domain-name| swap-server|root-path|extensions-path|ip- forwarding|non-local-source-routing|policy- filter|max-dgram-reassembly|default-ip-ttl| path-mtu-aging-timeout|path-mtu-plateau-table| interface-mtu|all-subnets-local|broadcast- address|perform-mask-discovery|...} or number> [enterprise = <number{1-2147483647}>] [suboption = <number{1-254}>] value = <Value : (type)value; type being 8- bit, 16-bit, 32-bit, addr, >...
  • Page 147: Dhcp Client Txoptions Delete

    dhcp Commands dhcp client txoptions delete Delete an option. SYNTAX: dhcp client txoptions delete intf = <{wan1}> option = <{subnet-mask|time-offset|default- routers|time-servers|ien116-name-impress- servers|resource-location-servers|host- name|boot-file-size|merit-dump|domain-name| swap-server|root-path|extensions-path|ip- forwarding|non-local-source-routing|policy- filter|max-dgram-reassembly|default-ip-ttl| path-mtu-aging-timeout|path-mtu-plateau-table| interface-mtu|all-subnets-local|broadcast- address|perform-mask-discovery|...} or number> [enterprise = <number{1--1}>] [suboption = <number{1-254}>] where: intf The name of the interface on which a DHCP REQUIRED Client is defined.
  • Page 148: Dhcp Client Txoptions List

    dhcp Commands dhcp client txoptions list List all options. SYNTAX: dhcp client txoptions list [intf = <{wan1}>] [expand = <{disabled|enabled}>] where: intf The name of the interface on which a DHCP OPTIONAL Client is defined. expand Expand enabled/disabled. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 149: Dhcp Client Txoptions Optionlist

    dhcp Commands dhcp client txoptions optionlist Lists all DHCP Option Codes that can be used. E-DOC-CTC-20080409-0002 v2.0...
  • Page 150: Dhcp Relay Add

    dhcp Commands dhcp relay add Add an entry to the DHCP forward list. SYNTAX: dhcp relay add name = <string> where: name The forward entry name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 151: Dhcp Relay Config

    dhcp Commands dhcp relay config Sets the relay configuration settings. SYNTAX: dhcp relay config [agentinfo = <{disabled|enabled}>] [agentmismatch = <{disabled|enabled}>] where: agentinfo Set the relay agent info status (RFC3046). OPTIONAL agentmismatch Forward/Drop DHCP reply packet when a relay OPTIONAL agent info mismatch is detected (RFC3046). E-DOC-CTC-20080409-0002 v2.0...
  • Page 152: Dhcp Relay Debug Stats

    dhcp Commands dhcp relay debug stats Print DHCP relay statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 153: Dhcp Relay Debug Traceconfig

    dhcp Commands dhcp relay debug traceconfig Modify DHCP relay trace configuration SYNTAX: dhcp relay debug traceconfig [state = <{disabled|enabled}>] where: state Enable/Disable tracing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 154: Dhcp Relay Delete

    dhcp Commands dhcp relay delete Delete an entry from the DHCP forward list. SYNTAX: dhcp relay delete name = <{lan1_to_127.0.0.1|dmz1_to_127.0.0.1| guest1_to_127.0.0.1}> where: name The forward entry name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 155: Dhcp Relay Flush

    dhcp Commands dhcp relay flush Flushes the DHCP relay settings. E-DOC-CTC-20080409-0002 v2.0...
  • Page 156: Dhcp Relay Ifconfig

    dhcp Commands dhcp relay ifconfig Configure a relay interface. SYNTAX: dhcp relay ifconfig intf = <{guest1|dmz1|wan1|lan1|ipsec0}> [relay = <{disabled|enabled}>] [maxhops = <number{0-16}>] [remoteid = <password>] [trusted = <{disabled|enabled}>] where: intf The name of the relay interface to configure. REQUIRED relay Set the relay status.
  • Page 157: Dhcp Relay Iflist

    dhcp Commands dhcp relay iflist Show the configuration of the relay interfaces. SYNTAX: dhcp relay iflist [intf = <{guest1|dmz1|wan1|lan1|ipsec0}>] where: intf The name of the relay interface. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 158: Dhcp Relay List

    dhcp Commands dhcp relay list List the DHCP forward list. SYNTAX: dhcp relay list [name = <{lan1_to_127.0.0.1|dmz1_to_127.0.0.1| guest1_to_127.0.0.1}>] where: name The forward entry name. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 159: Dhcp Relay Modify

    dhcp Commands dhcp relay modify Modify an entry from the DHCP forward list. SYNTAX: dhcp relay modify name = <{lan1_to_127.0.0.1|dmz1_to_127.0.0.1| guest1_to_127.0.0.1}> [addr = <ip-address>] [intf = <{None|guest1|dmz1|wan1|lan1|ipsec0}>] [giaddr = <ip-address>] [script = <>] where: name The forward entry name. REQUIRED addr The DHCP server IP address.
  • Page 160: Dhcp Relay Ruleadd

    dhcp Commands dhcp relay ruleadd Add a selection rule to a DHCP forward entry SYNTAX: dhcp relay ruleadd name = <{lan1_to_127.0.0.1|dmz1_to_127.0.0.1| guest1_to_127.0.0.1}> [key = <{or|and}>] rulename = <> where: name The name of the forward entry. REQUIRED The logical key of the selection rule. OPTIONAL rulename The name of the DHCP selection rule.
  • Page 161: Dhcp Relay Ruledelete

    dhcp Commands dhcp relay ruledelete Delete a selection rule from a DHCP forward entry SYNTAX: dhcp relay ruledelete name = <{lan1_to_127.0.0.1|dmz1_to_127.0.0.1| guest1_to_127.0.0.1}> rulename = <> where: name The name of the forward entry. REQUIRED rulename The name of the DHCP selection rule. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 162: Dhcp Rule Add

    dhcp Commands dhcp rule add Add a rule for DHCP conditional selection SYNTAX: dhcp rule add name = <string> type = <{option|mac|vci|uci}> option [!] = <{subnet-mask|time-offset| default-routers|time-servers|ien116-servers| impress-servers|resource-location-servers| host-name|boot-file-size|merit-dump|domain- name|swap-server|root-path|extensions-path| ip-forwarding|non-local-source-routing|policy- filter|max-dgram-reassembly|default-ip-ttl| path-mtu-aging-timeout|path-mtu-plateau-table| interface-mtu|all-subnets-local|broadcast- address|perform-mask-discovery|...} or number> [enterprise = <number{1-2147483647}>] [suboption = <number{1-254}>] [value = <Value : (type)value;...
  • Page 163: Dhcp Rule Debug Traceconfig

    dhcp Commands dhcp rule debug traceconfig Modify DHCP rule trace configuration SYNTAX: dhcp rule debug traceconfig [state = <{disabled|enabled}>] where: state Enable/Disable tracing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 164: Dhcp Rule Delete

    dhcp Commands dhcp rule delete Delete a DHCP rule SYNTAX: dhcp rule delete name = <> where: name The name of the DHCP rule. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 165: Dhcp Rule Flush

    dhcp Commands dhcp rule flush Flush all DHCP rules E-DOC-CTC-20080409-0002 v2.0...
  • Page 166: Dhcp Rule List

    dhcp Commands dhcp rule list List all DHCP rules E-DOC-CTC-20080409-0002 v2.0...
  • Page 167: Dhcp Server Config

    dhcp Commands dhcp server config Print DHCP server configuration settings SYNTAX: dhcp server config [state = <{disabled|enabled}>] where: state Enable/Disable the DHCP server. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 168: Dhcp Server Debug Clear

    dhcp Commands dhcp server debug clear Clear DHCP server statistics E-DOC-CTC-20080409-0002 v2.0...
  • Page 169: Dhcp Server Debug Stats

    dhcp Commands dhcp server debug stats Print DHCP server statistics E-DOC-CTC-20080409-0002 v2.0...
  • Page 170: Dhcp Server Debug Traceconfig

    dhcp Commands dhcp server debug traceconfig Modify DHCP server trace configuration SYNTAX: dhcp server debug traceconfig [state = <{disabled|enabled}>] where: state Enable/Disable tracing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 171: Dhcp Server Flush

    dhcp Commands dhcp server flush Flush all DHCP server pool and lease entries E-DOC-CTC-20080409-0002 v2.0...
  • Page 172: Dhcp Server Lease Add

    dhcp Commands dhcp server lease add Add a DHCP server lease SYNTAX: dhcp server lease add clientid = <clientid> pool = <{LAN_private|GUEST_private| DMZ_private}> [addr = <ip-address>] [offset = <number>] [leasetime = <number>] [expirytime = <number>] [gateway = <ip-address|0|none>] [macaddr = <hardware-address>] where: clientid The DHCP client identification string of the host.
  • Page 173: Dhcp Server Lease Delete

    dhcp Commands dhcp server lease delete Delete a DHCP server lease SYNTAX: dhcp server lease delete [clientid = <clientid>] [index = <number>] [expand = <{disabled|enabled}>] where: clientid The DHCP client identification string. OPTIONAL index The DHCP server lease table index. OPTIONAL expand Expand enabled/disabled.
  • Page 174: Dhcp Server Lease Flush

    dhcp Commands dhcp server lease flush Flush all DHCP server leases SYNTAX: dhcp server lease flush [pool = <{LAN_private|GUEST_private| DMZ_private}>] where: pool The name of the DHCP server pool. Only the OPTIONAL leases belonging to this pool will be deleted. E-DOC-CTC-20080409-0002 v2.0...
  • Page 175: Dhcp Server Lease List

    dhcp Commands dhcp server lease list List all DHCP server leases SYNTAX: dhcp server lease list [clientid = <clientid>] [index = <number>] [expand = <{disabled|enabled}>] where: clientid The DHCP client identification string. OPTIONAL index The DHCP server lease table index. OPTIONAL expand Expand enabled/disabled.
  • Page 176: Dhcp Server Option Flush

    dhcp Commands dhcp server option flush Flush all DHCP server option templates and instances E-DOC-CTC-20080409-0002 v2.0...
  • Page 177: Dhcp Server Option Instadd

    dhcp Commands dhcp server option instadd Add a DHCP server option instance SYNTAX: dhcp server option instadd name = <string> tmplname = <> [policy = <{requested|always|rules}>] [dynamic = <{disabled|enabled}>] [maxuse = <number{1-255}>] [enterprise = <number{1-2147483647}>] [suboption = <number{1-254}>] value = <Value : (type)value; type being 8- bit, 16-bit, 32-bit, addr, >...
  • Page 178: Dhcp Server Option Instdelete

    dhcp Commands dhcp server option instdelete Delete a DHCP server option instance SYNTAX: dhcp server option instdelete name = <> [enterprise = <number{1--1}>] [suboption = <number{1-254}>] where: name The name of the DHCP server option instance. REQUIRED enterprise The enterprise number (see http://www.iana.org/ OPTIONAL assignments/enterprise- numbers) suboption...
  • Page 179: Dhcp Server Option Instlist

    dhcp Commands dhcp server option instlist List all DHCP server option instances SYNTAX: dhcp server option instlist [name = <>] where: name The name of the DHCP server option instance. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 180: Dhcp Server Option Ruleadd

    dhcp Commands dhcp server option ruleadd Add a selection rule to a DHCP server option instance SYNTAX: dhcp server option ruleadd name = <> [key = <{or|and}>] rulename = <> where: name The name of the DHCP server option instance. REQUIRED The logical key of the selection rule.
  • Page 181: Dhcp Server Option Ruledelete

    dhcp Commands dhcp server option ruledelete Delete a selection rule from a DHCP server option instance SYNTAX: dhcp server option ruledelete name = <> rulename = <> where: name The name of the DHCP server option instance. REQUIRED rulename The name of the DHCP selection rule. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 182: Dhcp Server Option Tmpladd

    dhcp Commands dhcp server option tmpladd Add a DHCP server option template SYNTAX: dhcp server option tmpladd name = <string> optionid = <number{1-254}> [dynamic = <{disabled|enabled}>] where: name The name of the DHCP server option template. REQUIRED optionid Specify the DHCP server option code. REQUIRED dynamic Enable/Disable option template as dynamic.
  • Page 183: Dhcp Server Option Tmpldelete

    dhcp Commands dhcp server option tmpldelete Delete a DHCP server option template SYNTAX: dhcp server option tmpldelete name = <> where: name The name of the DHCP server option template. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 184: Dhcp Server Option Tmpllist

    dhcp Commands dhcp server option tmpllist List all DHCP server option templates E-DOC-CTC-20080409-0002 v2.0...
  • Page 185: Dhcp Server Policy

    dhcp Commands dhcp server policy Print DHCP server policy settings SYNTAX: dhcp server policy [verifyfirst = <{disabled|enabled}>] [trustclient = <{disabled|enabled}>] [rtbehaviour = <{traditional|standard|msft}>] where: verifyfirst Enable/Disable IP address conflict network OPTIONAL probing before handing out an address to a client. trustclient Whether or not the IP address suggested by a OPTIONAL...
  • Page 186: Dhcp Server Pool Add

    dhcp Commands dhcp server pool add Add a DHCP server pool SYNTAX: dhcp server pool add name = <string> [index = <number>] where: name The name of the DHCP server pool. REQUIRED index The number of the pool before which you want OPTIONAL the new pool to be added.
  • Page 187: Dhcp Server Pool Config

    dhcp Commands dhcp server pool config Configure a DHCP server pool SYNTAX: dhcp server pool config name = <{LAN_private|GUEST_private| DMZ_private}> [state = <{disabled|enabled}>] [intf = <{ipsec0|lan1|wan1|dmz1|guest1}>] [index = <number>] [poolstart = <ip-address>] [poolend = <ip-address>] [netmask = <ip-mask(dotted or cidr)>] [gateway = <ip-address|0|none>] [server = <ip-address|none>] [primdns = <ip-address|none>]...
  • Page 188 dhcp Commands secdns The IP address of the secondary DNS server for OPTIONAL DHCP clients. dnsmetric The DHCP server pool DNS route metric. OPTIONAL primwins The IP address of the primary WINS server for OPTIONAL DHCP clients. secwins The IP address of the secondary WINS server for OPTIONAL DHCP clients.
  • Page 189: Dhcp Server Pool Delete

    dhcp Commands dhcp server pool delete Delete a DHCP server pool SYNTAX: dhcp server pool delete name = <{LAN_private|GUEST_private| DMZ_private}> where: name The name of the DHCP server pool. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 190: Dhcp Server Pool Flush

    dhcp Commands dhcp server pool flush Flush all DHCP server pools E-DOC-CTC-20080409-0002 v2.0...
  • Page 191: Dhcp Server Pool List

    dhcp Commands dhcp server pool list List all DHCP server pools SYNTAX: dhcp server pool list [name = <{LAN_private|GUEST_private| DMZ_private}>] where: name The name of the DHCP server pool. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 192: Dhcp Server Pool Optadd

    dhcp Commands dhcp server pool optadd Add an option instance to the DHCP server pool SYNTAX: dhcp server pool optadd name = <{LAN_private|GUEST_private| DMZ_private}> instname = <> where: name The name of the DHCP server pool. REQUIRED instname The name of the DHCP server option instance. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 193: Dhcp Server Pool Optdelete

    dhcp Commands dhcp server pool optdelete Delete an option instance from the DHCP server pool SYNTAX: dhcp server pool optdelete name = <{LAN_private|GUEST_private| DMZ_private}> instname = <> where: name The name of the DHCP server pool. REQUIRED instname The name of the DHCP server option instance. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 194: Dhcp Server Pool Rtadd

    dhcp Commands dhcp server pool rtadd Add a route to the DHCP server pool SYNTAX: dhcp server pool rtadd name = <{LAN_private|GUEST_private| DMZ_private}> dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [gateway = <ip-address|0>] where: name The name of the DHCP server pool. REQUIRED The IP destination address of the route for DHCP REQUIRED...
  • Page 195: Dhcp Server Pool Rtdelete

    dhcp Commands dhcp server pool rtdelete Delete a route from the DHCP server pool SYNTAX: dhcp server pool rtdelete name = <{LAN_private|GUEST_private| DMZ_private}> dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [gateway = <ip-address|0>] where: name The name of the DHCP server pool. REQUIRED The IP destination address of the route for DHCP REQUIRED...
  • Page 196: Dhcp Server Pool Ruleadd

    dhcp Commands dhcp server pool ruleadd Add a selection rule to the DHCP server pool SYNTAX: dhcp server pool ruleadd name = <{LAN_private|GUEST_private| DMZ_private}> [key = <{or|and}>] rulename = <> where: name The name of the DHCP server pool. REQUIRED The logical key of the selection rule.
  • Page 197: Dhcp Server Pool Ruledelete

    dhcp Commands dhcp server pool ruledelete Delete a selection rule from the DHCP server pool SYNTAX: dhcp server pool ruledelete name = <{LAN_private|GUEST_private| DMZ_private}> rulename = <> where: name The name of the DHCP server pool. REQUIRED rulename The name of the DHCP selection rule. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 198: Dhcp Spoofing Add

    dhcp Commands dhcp spoofing add Add a Spoofing-Association SYNTAX: dhcp spoofing add name = <string> pool_name = <{LAN_private|GUEST_private| DMZ_private}> ifname = <{wan1}> where: name The name of the Association. REQUIRED pool_name The name of the pool to be associated. REQUIRED ifname The name of the interface on which a DHCP REQUIRED...
  • Page 199: Dhcp Spoofing Attach

    dhcp Commands dhcp spoofing attach Enable a Spoofing-Association SYNTAX: dhcp spoofing attach name = <{|||}> where: name The name of the Association. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 200: Dhcp Spoofing Config

    dhcp Commands dhcp spoofing config Display/modify dhcp spoofing state SYNTAX: dhcp spoofing config [state = <{enabled|disabled}>] where: state Enable/Disable spoofing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 201: Dhcp Spoofing Debug Traceconfig

    dhcp Commands dhcp spoofing debug traceconfig Display/modify DHCP spoofing trace configuratin SYNTAX: dhcp spoofing debug [state = <{disabled|enabled}>] traceconfig where: state Enable/Disable tracing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 202: Dhcp Spoofing Delete

    dhcp Commands dhcp spoofing delete Delete a Spoofing-Association SYNTAX: dhcp spoofing delete name = <{|||}> where: name The name of the Association. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 203: Dhcp Spoofing Detach

    dhcp Commands dhcp spoofing detach Disable a Spoofing-Association SYNTAX: dhcp spoofing detach name = <{|||}> where: name The name of the Association. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 204: Dhcp Spoofing Flush

    dhcp Commands dhcp spoofing flush Flush all the associations and the options. E-DOC-CTC-20080409-0002 v2.0...
  • Page 205: Dhcp Spoofing List

    dhcp Commands dhcp spoofing list List the available Spoofing-Associations SYNTAX: dhcp spoofing list [name = <{|||}>] where: name The name of the Association. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 206: Dhcp Spoofing Option-Add

    dhcp Commands dhcp spoofing option-add Add a DHCP Option Code to a Spoofing-Association. SYNTAX: dhcp spoofing option-add name = <{|||}> option = <number> where: name The name of the Association. REQUIRED option The option id. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 207: Dhcp Spoofing Option-Delete

    dhcp Commands dhcp spoofing option-delete Delete a DHCP Option Code from a Spoofing-Association. SYNTAX: dhcp spoofing option-delete name = <{|||}> option = <number> where: name The name of the Association. REQUIRED option The option id. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 208: Dns Commands

    dns Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 209: Dns Commands

    dns Commands dns Commands dns client config Modify the DNS resolver see page 210 configuration. dns client dnsadd Add a DNS server. see page 211 dns client dnsdelete Delete a DNS server. see page 212 dns client dnslist List all DNS servers. see page 213 dns client flush Remove all DNS servers.
  • Page 210: Dns Client Config

    dns Commands dns client config Modify the DNS resolver configuration. SYNTAX: dns client config [timeout = <number{1-900}>] [retry = <number{0-10}>] [state = <{disabled|enabled}>] [search = <{disabled|enabled}>] [list = <string>] [trace = <{disabled|enabled}>] where: timeout The query timeout in seconds. OPTIONAL retry The number of query retries before giving up.
  • Page 211: Dns Client Dnsadd

    dns Commands dns client dnsadd Add a DNS server. SYNTAX: dns client dnsadd addr = <string> [port = <number>] where: addr The DNS server IP address. REQUIRED port The DNS server port number. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 212: Dns Client Dnsdelete

    dns Commands dns client dnsdelete Delete a DNS server. SYNTAX: dns client dnsdelete index = <number{1-99}> where: index The index number (shown by the 'list' REQUIRED command) of the server to delete. E-DOC-CTC-20080409-0002 v2.0...
  • Page 213: Dns Client Dnslist

    dns Commands dns client dnslist List all DNS servers. E-DOC-CTC-20080409-0002 v2.0...
  • Page 214: Dns Client Flush

    dns Commands dns client flush Remove all DNS servers. E-DOC-CTC-20080409-0002 v2.0...
  • Page 215: Dns Client Nslookup

    dns Commands dns client nslookup DNS lookup for a domain name or an address. SYNTAX: dns client nslookup host = <string> where: host The DNS domain name string to query. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 216: Dns Server Config

    dns Commands dns server config DNS server configuration settings SYNTAX: dns server config [domain = <string>] [timeout = <number{0-2147483646}>] [suppress = <number>] [state = <{disabled|enabled}>] [trace = <{disabled|enabled}>] [syslog = <{disabled|enabled}>] [WANDownSpoofing = <{disabled|enabled}>] [WDSpoofedIP = <ip-address>] where: domain The DNS server domain name. OPTIONAL timeout The forwarded DNS query timeout.
  • Page 217: Dns Server Debug Clear

    dns Commands dns server debug clear Clear the DNS server/forwarder statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 218: Dns Server Debug Spoof Clear

    dns Commands dns server debug spoof clear Clear the intercept cache table E-DOC-CTC-20080409-0002 v2.0...
  • Page 219: Dns Server Debug Spoof Getaddress

    dns Commands dns server debug spoof getaddress Get the real ip for the given spoofed ip SYNTAX: dns server debug spoof addr = <ip-address> getaddress where: addr The spoofed ip to look up. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 220: Dns Server Debug Spoof Getflags

    dns Commands dns server debug spoof getflags Get the error flags for the given spoofed ip SYNTAX: dns server debug spoof addr = <ip-address> getflags where: addr The spoofed ip to look up. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 221: Dns Server Debug Spoof List

    dns Commands dns server debug spoof list List the intercept cache table. E-DOC-CTC-20080409-0002 v2.0...
  • Page 222: Dns Server Debug Spoof Update

    dns Commands dns server debug spoof update update the intercept cache table E-DOC-CTC-20080409-0002 v2.0...
  • Page 223: Dns Server Debug Stats

    dns Commands dns server debug stats Print the DNS server/forwarder statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 224: Dns Server Flush

    dns Commands dns server flush Flush all local DNS hosts and routes. E-DOC-CTC-20080409-0002 v2.0...
  • Page 225: Dns Server Host Add

    dns Commands dns server host add Add a local DNS host SYNTAX: dns server host add name = <string> [addr = <ip-address>] [ttl = <number>] where: name The name of an IP host to add. REQUIRED addr The IP address of the host. OPTIONAL The lifetime of the host.
  • Page 226: Dns Server Host Delete

    dns Commands dns server host delete Delete a local DNS host SYNTAX: dns server host delete name = <string> where: name The name of an IP host to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 227: Dns Server Host Flush

    dns Commands dns server host flush Flush all local DNS hosts E-DOC-CTC-20080409-0002 v2.0...
  • Page 228: Dns Server Host List

    dns Commands dns server host list List all local DNS hosts E-DOC-CTC-20080409-0002 v2.0...
  • Page 229: Dns Server Route Add

    dns Commands dns server route add Creates a DNS forwarding entry or template SYNTAX: dns server route add dns = <ip-address> [src = <ip-address>] [srcmask = <ip-mask(dotted or cidr)>] [domain = <string>] [metric = <number{0-100}>] [label = <{None|DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] where: The IP address of a DNS server.
  • Page 230: Dns Server Route Delete

    dns Commands dns server route delete Deletes a DNS forwarding entry or template SYNTAX: dns server route delete dns = <ip-address> [domain = <string>] [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] where: The IP address of a DNS server. REQUIRED domain The DNS domain string. OPTIONAL intf The interface associated with the DNS entry or...
  • Page 231: Dns Server Route Flush

    dns Commands dns server route flush Removes all DNS forwarding entries and templates E-DOC-CTC-20080409-0002 v2.0...
  • Page 232: Dns Server Route List

    dns Commands dns server route list Lists all DNS forwarding entries and templates E-DOC-CTC-20080409-0002 v2.0...
  • Page 233: Dsd Commands

    dsd Commands dsd Commands dsd config Display/modify DSD framework see page 234 configuration dsd debug config Display/modify DSD debug settings see page 235 dsd debug connection list Display internal connection pool see page 236 usage dsd debug proxy Display/modify HTTPI fixed proxy see page 237 settings dsd debug recycling...
  • Page 234: Dsd Config

    dsd Commands dsd config Display/modify DSD framework configuration SYNTAX: dsd config [state = <{disabled|automatic}>] where: state DSD framework operation mode OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 235: Dsd Debug Config

    dsd Commands dsd debug config Display/modify DSD debug settings SYNTAX: dsd debug config [turbomode = <{disabled|enabled}>] where: turbomode Enable/disable turbomode OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 236: Dsd Debug Connection List

    dsd Commands dsd debug connection list Display internal connection pool usage SYNTAX: dsd debug connection list [expand = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 237: Dsd Debug Proxy

    dsd Commands dsd debug proxy Display/modify HTTPI fixed proxy settings SYNTAX: dsd debug proxy [state = <{disabled|enabled}>] [dest = <ip-address>] [port = <{at-echo|at-nbp|at-rtmp|at-zis|auth| bgp|biff|bootpc|bootps|chargen|data|gopher| h323|httpproxy|ike|ils|imap2|imap3|ingres- net|ipcserver|ipx|irc-o|irc-u|kerberos|ldap| login|netbios-dgm|netbios-ns|netbios-ssn| netwall|netware-ip|new-rwho|nfds|nicname|nntp| ntalk|ntp|pcmail-srv|pop2|pop3|printer|qotd| realaudio|rip|rtelnet|rtsp|sip|smtp|snmp| snmptrap|snpp|sntp|sql*net|sql-net|sqlserv| sunrpc|syslog|systat|talk|telnet|...} or number>] where: state Enable/disable fixed proxy redirecting OPTIONAL dest Destination IP where requests will be forwarded...
  • Page 238: Dsd Debug Recycling

    dsd Commands dsd debug recycling Display/modify HTTPI recycling settings SYNTAX: dsd debug recycling [state = <{disabled|enabled}>] [interval = <number>] [httpidle = <number>] [otheridle = <number>] where: state Enable/disable stream recycling OPTIONAL interval Time between successive activity checks OPTIONAL httpidle Minimal idle count for recycling (filtered) http OPTIONAL streams otheridle...
  • Page 239: Dsd Debug Stats

    dsd Commands dsd debug stats Display/clear DSD framework and module statistics SYNTAX: dsd debug stats [name = <{intercept|urlfilter|recycling| syslog|all}>] [clear = <{no|yes}>] where: name Specify the name of a module OPTIONAL clear Clear the specified statistics OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 240: Dsd Intercept Config

    dsd Commands dsd intercept config Display/modify HTTP Intercept configuration SYNTAX: dsd intercept config [WDSpoofedIP = <ip-address>] [servertimeout = <number>] [connecterrorurl = <string>] [categoryerrorurl = <string>] [monitorintercepturl = <string>] [unauthorizedrequrl = <string>] [imageredirect = <{disabled|enabled}>] [imageredirecturl = <string>] [alwaysuseip = <{disabled|enabled}>] where: WDSpoofedIP IP address indicating unavailable WAN...
  • Page 241: Dsd Syslog Config

    dsd Commands dsd syslog config Display/modify HTTPI logging configuration SYNTAX: dsd syslog config [syslog = <{none|unauthorized|errors| intercepted|all}>] where: syslog Define which type of events to log OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 242: Dsd Syslog List

    dsd Commands dsd syslog list Display HTTPI log file E-DOC-CTC-20080409-0002 v2.0...
  • Page 243: Dyndns Commands

    dyndns Commands dyndns Commands dyndns add Add a dynamic DNS client. see page 244 dyndns delete Delete a dynamic DNS client. see page 245 dyndns flush Delete all dynamic DNS clients. see page 246 dyndns host add Add a fully qualified host name see page 247 dyndns host delete Delete a host name...
  • Page 244: Dyndns Add

    dyndns Commands dyndns add Add a dynamic DNS client. SYNTAX: dyndns add name = <string> where: name The dynamic DNS client name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 245: Dyndns Delete

    dyndns Commands dyndns delete Delete a dynamic DNS client. SYNTAX: dyndns delete name = <> where: name The dynamic DNS client name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 246: Dyndns Flush

    dyndns Commands dyndns flush Delete all dynamic DNS clients. E-DOC-CTC-20080409-0002 v2.0...
  • Page 247: Dyndns Host Add

    dyndns Commands dyndns host add Add a fully qualified host name SYNTAX: dyndns host add group = <> name = <string> where: group The dynamic DNS host group. REQUIRED name The name of an IP host to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 248: Dyndns Host Delete

    dyndns Commands dyndns host delete Delete a host name SYNTAX: dyndns host delete name = <> where: name The name of an IP host to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 249: Dyndns Host Flush

    dyndns Commands dyndns host flush Delete all host names E-DOC-CTC-20080409-0002 v2.0...
  • Page 250: Dyndns Host List

    dyndns Commands dyndns host list List all host names E-DOC-CTC-20080409-0002 v2.0...
  • Page 251: Dyndns List

    dyndns Commands dyndns list List all dynamic DNS clients. E-DOC-CTC-20080409-0002 v2.0...
  • Page 252: Dyndns Modify

    dyndns Commands dyndns modify Modify a dynamic DNS client. SYNTAX: dyndns modify name = <> [intf = <{wan1}>] [user = <string>] [password = <password>] [group = <>] [mx = <string>] [backmx = <{disabled|enabled}>] [wildcard = <{disabled|enabled}>] [offline = <{disabled|enabled}>] [service = <{dyndns|statdns|custom|No-IP| DtDNS|gnudip}>] [status = <{disabled|enabled}>] [trace = <{disabled|enabled}>]...
  • Page 253: Dyndns Service List

    dyndns Commands dyndns service list List all dynamic DNS services E-DOC-CTC-20080409-0002 v2.0...
  • Page 254: Dyndns Service Modify

    dyndns Commands dyndns service modify Modify specific dynamic DNS service settings SYNTAX: dyndns service modify name = <{dyndns|statdns|custom|No-IP|DtDNS| gnudip}> [server = <string>] [port = <{at-echo|at-nbp|at-rtmp|at-zis|auth| bgp|biff|bootpc|bootps|chargen|data|gopher| h323|httpproxy|ike|ils|imap2|imap3|ingres- net|ipcserver|ipx|irc-o|irc-u|kerberos|ldap| login|netbios-dgm|netbios-ns|netbios-ssn| netwall|netware-ip|new-rwho|nfds|nicname|nntp| ntalk|ntp|pcmail-srv|pop2|pop3|printer|qotd| realaudio|rip|rtelnet|rtsp|sip|smtp|snmp| snmptrap|snpp|sntp|sql*net|sql-net|sqlserv| sunrpc|syslog|systat|talk|telnet|...} or number>] [request = <string>] [updateinterval = <number{0-2097120}>] [retryinterval = <number{0-600}>] [max_retry = <number{1-5}>] where:...
  • Page 255: Env Commands

    env Commands env Commands env flush Remove all non-system environment see page 256 variables. env get Gets an environment variable. see page 257 env list List all environment variables. see page 258 env set Sets an environment variable. see page 259 env unset Deletes an environment variable.
  • Page 256: Env Flush

    env Commands env flush Remove all non-system environment variables. E-DOC-CTC-20080409-0002 v2.0...
  • Page 257: Env Get

    env Commands env get Gets an environment variable. SYNTAX: env get var = <{_ETHERNET|_COMPANY_NAME| _COMPANY_URL|_PROD_NAME|_PROD_URL|_FII| _BUILD|_BOOTLOADER_VERSION|_BUILDVARIANT| _MODEM_ACCESS_CODE|__SEC_MODEM_ACCESS_CODE| _OUI|_CUSTOVARIANT|_MODEMLABEL|_PHYSLAYERTYPE| _BUILDNAME|_PRL|_FIA|_BOARD_NAME| _COMPANY_ID|_COPYRIGHT|_TPVERSION| _PROD_ID|_PROD_FRIENDLY_NAME|_VARIANT_ID| _VARIANT_FRIENDLY_NAME|_MACADDR|_LMACADDR| _WIZ_AUTOPOPUP|_SNTPPOLL_POST_SYNC| _SNTPPOLL_PRE_SYNC|CONF_REGION|CONF_PROVIDER| CONF_DATE}> where: The name of the variable. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 258: Env List

    env Commands env list List all environment variables. E-DOC-CTC-20080409-0002 v2.0...
  • Page 259: Env Set

    env Commands env set Sets an environment variable. SYNTAX: env set var = <string> value = <translated string> where: The name of the variable. REQUIRED value A translated quoted string defining the variable REQUIRED value. E-DOC-CTC-20080409-0002 v2.0...
  • Page 260: Env Unset

    env Commands env unset Deletes an environment variable. SYNTAX: env unset var = <{_ETHERNET|_COMPANY_NAME| _COMPANY_URL|_PROD_NAME|_PROD_URL|_FII| _BUILD|_BOOTLOADER_VERSION|_BUILDVARIANT| _MODEM_ACCESS_CODE|__SEC_MODEM_ACCESS_CODE| _OUI|_CUSTOVARIANT|_MODEMLABEL|_PHYSLAYERTYPE| _BUILDNAME|_PRL|_FIA|_BOARD_NAME| _COMPANY_ID|_COPYRIGHT|_TPVERSION| _PROD_ID|_PROD_FRIENDLY_NAME|_VARIANT_ID| _VARIANT_FRIENDLY_NAME|_MACADDR|_LMACADDR| _WIZ_AUTOPOPUP|_SNTPPOLL_POST_SYNC| _SNTPPOLL_PRE_SYNC|CONF_REGION|CONF_PROVIDER| CONF_DATE}> where: The name of the variable. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 261: Eth Commands

    eth Commands eth Commands eth bridge add Add a new bridge instance. see page 266 eth bridge clear Clear bridge statistics. see page 267 eth bridge config Modify/Display the bridge see page 268 configuration settings. eth bridge delete Delete a bridge instance. see page 269 eth bridge dynvlan actlist Display the active MAC entries for the...
  • Page 262 eth Commands eth bridge ifattach Attach a bridge interface. see page 289 eth bridge ifconfig Modify a bridge interface see page 290 configuration. eth bridge ifdelete Delete a bridge interface. see page 292 eth bridge ifdetach Detach a bridge interface. see page 293 eth bridge ifflush flush the bridge interfaces: detach/...
  • Page 263 eth Commands eth bridge unknownvlan ifdelete Delete bridge interface from unknown see page 312 'VLAN'. eth bridge unknownvlan iflist Display all interfaces of the unknown see page 313 'VLAN'. eth bridge vlan ifadd Add bridge interface to virtual LAN. see page 314 eth bridge vlan ifconfig Modify bridge interface from virtual see page 315...
  • Page 264 eth Commands eth filter operand viddelete Delete a VID from the set. see page 339 eth filter template add Add a filter. see page 340 eth filter template config Config a filter. see page 341 eth filter template delete Delete a filter. see page 342 eth filter template flush Remove all filters.
  • Page 265 eth Commands eth switch group flush To set all ports to the default settings see page 366 (all ports in group 0). eth switch group list List all configured groups. see page 367 eth switch group move Move a specified port to a specified see page 368 group.
  • Page 266: Eth Bridge Add

    eth Commands eth bridge add Add a new bridge instance. SYNTAX: eth bridge add brname = <string> where: brname The name of the new bridge instance. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 267: Eth Bridge Clear

    eth Commands eth bridge clear Clear bridge statistics. SYNTAX: eth bridge clear [brname = <{bridge}>] where: brname The name of a bridge instance. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 268: Eth Bridge Config

    eth Commands eth bridge config Modify/Display the bridge configuration settings. SYNTAX: eth bridge config [brname = <{bridge}>] [age = <number{10-1000000}>] [filter = <{none|no_WAN_broadcast}>] [vlan = <{disabled|enabled}>] [precedencemap = <string>] where: brname The name of a bridge instance. OPTIONAL The lifetime (in seconds) of a dynamically OPTIONAL learned MAC address.
  • Page 269: Eth Bridge Delete

    eth Commands eth bridge delete Delete a bridge instance. SYNTAX: eth bridge delete brname = <{bridge}> where: brname The name of a bridge instance. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 270: Eth Bridge Dynvlan Actlist

    eth Commands eth bridge dynvlan actlist Display the active MAC entries for the dynamic VLAN membership. E-DOC-CTC-20080409-0002 v2.0...
  • Page 271: Eth Bridge Dynvlan Add

    eth Commands eth bridge dynvlan add Add a dynamic VLAN membership entry. SYNTAX: eth bridge dynvlan add [id = <number{0-100000}>] hwaddr = <masked-hardware-address> vlan = <{default|wan|dmz|guest}> [remvlan = <{default|wan|dmz|guest}>] where: The id of the dynamic VLAN membership entry. OPTIONAL hwaddr The (masked) ethernet MAC address of the REQUIRED dynamic VLAN membership entry.
  • Page 272: Eth Bridge Dynvlan Config

    eth Commands eth bridge dynvlan config Modify the dynamic VLAN membership configuration. SYNTAX: eth bridge dynvlan config [timeout = <number{0-100000}>] where: timeout Timeout in seconds for the dynamic entries. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 273: Eth Bridge Dynvlan Delete

    eth Commands eth bridge dynvlan delete Delete a dynamic VLAN membership entry. SYNTAX: eth bridge dynvlan delete id = <number{0-100000}> where: REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 274: Eth Bridge Dynvlan Flush

    eth Commands eth bridge dynvlan flush Flush all dynamic VLAN membership entries. E-DOC-CTC-20080409-0002 v2.0...
  • Page 275: Eth Bridge Dynvlan List

    eth Commands eth bridge dynvlan list Display a dynamic VLAN membership entry. E-DOC-CTC-20080409-0002 v2.0...
  • Page 276: Eth Bridge Filter Add

    eth Commands eth bridge filter add Add a filter. SYNTAX: eth bridge filter add brname = <{bridge}> name = <string> [filter = <{}>] where: brname The name of an bridge. REQUIRED name The name of the filter. REQUIRED filter Ethernet filter to used OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 277: Eth Bridge Filter Attach

    eth Commands eth bridge filter attach Enable a filter. SYNTAX: eth bridge filter attach brname = <{bridge}> name = <{}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 278: Eth Bridge Filter Config

    eth Commands eth bridge filter config Change filter configuration SYNTAX: eth bridge filter config brname = <{bridge}> name = <{}> [filter = <{}>] where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED filter Ethernet filter to used OPTIONAL...
  • Page 279: Eth Bridge Filter Delete

    eth Commands eth bridge filter delete Delete a filter. SYNTAX: eth bridge filter delete brname = <{bridge}> name = <{}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 280: Eth Bridge Filter Detach

    eth Commands eth bridge filter detach Disable a filter. SYNTAX: eth bridge filter detach brname = <{bridge}> name = <{}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 281: Eth Bridge Filter Forwarding

    eth Commands eth bridge filter forwarding Action: set forwarding configuration. SYNTAX: eth bridge filter forwarding brname = <{bridge}> name = <{}> mode = <{ToFwdIntfsOnly|AlsoToFwdIntfs| NotToFwdIntfs|Drop}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED mode The forwarding type to set.
  • Page 282: Eth Bridge Filter Fwdintfadd

    eth Commands eth bridge filter fwdintfadd Add Forwarding interface: filter action. SYNTAX: eth bridge filter fwdintfadd brname = <{bridge}> name = <{}> intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED intf The name of the bridge interface to add.
  • Page 283: Eth Bridge Filter Fwdintfdel

    eth Commands eth bridge filter fwdintfdel Remove Forwarding interface: filter action. SYNTAX: eth bridge filter fwdintfdel brname = <{bridge}> name = <{}> intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED intf The name of the bridge interface to remove.
  • Page 284: Eth Bridge Filter Ifadd

    eth Commands eth bridge filter ifadd Connect an interface with a filter. SYNTAX: eth bridge filter ifadd brname = <{bridge}> name = <{}> intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED intf The name of the bridge interface to add.
  • Page 285: Eth Bridge Filter Ifdel

    eth Commands eth bridge filter ifdel Remove an interface from a filter. SYNTAX: eth bridge filter ifdel brname = <{bridge}> name = <{}> intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> where: brname The name of an bridge. REQUIRED name The name of the filter to configure. REQUIRED intf The name of the bridge interface to remove.
  • Page 286: Eth Bridge Filter List

    eth Commands eth bridge filter list Display the bridge filters. SYNTAX: eth bridge filter list brname = <{bridge}> [name = <{}>] [expand = <{disabled|enabled}>] where: brname The name of an bridge. REQUIRED name The name of an filter. OPTIONAL expand Expanded listing.
  • Page 287: Eth Bridge Flush

    eth Commands eth bridge flush Flush all bridge instances with their interfaces and properties. SYNTAX: eth bridge flush [brname = <{bridge}>] where: brname The name of a bridge instance. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 288: Eth Bridge Ifadd

    eth Commands eth bridge ifadd Add a new bridge interface. SYNTAX: eth bridge ifadd [brname = <{bridge}>] intf = <string> where: brname The name of a bridge instance. OPTIONAL intf The new bridge interface name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 289: Eth Bridge Ifattach

    eth Commands eth bridge ifattach Attach a bridge interface. SYNTAX: eth bridge ifattach [brname = <{bridge}>] intf = <{}> where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 290: Eth Bridge Ifconfig

    eth Commands eth bridge ifconfig Modify a bridge interface configuration. SYNTAX: eth bridge ifconfig [brname = <{bridge}>] intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> [dest = <{}>] [portstate = <{disabled|learning|forwarding}>] [retry = <number{0-65535}>] [priotag = <{disabled|enabled}>] [vlan = <{default|wan|dmz|guest}>] [prioconfig = <{disabled|overwrite|increase}>] [ipprec = <{disabled|precedence|dscp}>] [priority = <number{0-7}>] [regenprio = <string>]...
  • Page 291 eth Commands regenprio The priority regeneration table for tagged OPTIONAL ingress packets. ingressfiltering Enable/disable discard of tagged ingress packets OPTIONAL if the interface is not part of the VLAN. acceptvlanonly Enable/disable receipt of tagged ingress packets. OPTIONAL mcastfilter Enable/disable discard of multicast packets for OPTIONAL this interface.
  • Page 292: Eth Bridge Ifdelete

    eth Commands eth bridge ifdelete Delete a bridge interface. SYNTAX: eth bridge ifdelete [brname = <{bridge}>] intf = <{ethport1|ethport2|ethport3|ethport4| Internet_8_35|Internet_0_35|eth-br-dsl}> where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 293: Eth Bridge Ifdetach

    eth Commands eth bridge ifdetach Detach a bridge interface. SYNTAX: eth bridge ifdetach [brname = <{bridge}>] intf = <{ethport1|ethport2|ethport3|ethport4| Internet_8_35|Internet_0_35|eth-br-dsl}> where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 294: Eth Bridge Ifflush

    eth Commands eth bridge ifflush flush the bridge interfaces: detach/delete all interfaces. SYNTAX: eth bridge ifflush [brname = <{bridge}>] where: brname The name of a bridge instance. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 295: Eth Bridge Iflist

    eth Commands eth bridge iflist Display the current bridge interfaces. SYNTAX: eth bridge iflist [brname = <{bridge}>] [intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}>] [string = <string>] [beginstring = <string>] where: brname The name of a bridge instance. OPTIONAL intf The name of a bridge interface. OPTIONAL string String matching condition...
  • Page 296: Eth Bridge Igmpsnooping Clear

    eth Commands eth bridge igmpsnooping clear Clear snooping statistics. SYNTAX: eth bridge igmpsnooping clear [brname = <{bridge}>] [intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}>] where: brname The name of a bridge instance. OPTIONAL intf The bridge interface currently to be cleared. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 297: Eth Bridge Igmpsnooping Config

    eth Commands eth bridge igmpsnooping config Configure bridge instance IGMP Snooping flags. SYNTAX: eth bridge igmpsnooping config [brname = <{bridge}>] [state = <{disabled|enabled}>] [floodrp = <{disabled|enabled}>] [floodmcast = <{disabled|enabled}>] where: brname The name of a bridge instance. OPTIONAL state Enable/Disable the IGMP Snooping. OPTIONAL floodrp Enable/Disable flooding reports to all ports.
  • Page 298: Eth Bridge Igmpsnooping Ifconfig

    eth Commands eth bridge igmpsnooping ifconfig Configure bridge interface IGMP snooping flags and mode. SYNTAX: eth bridge igmpsnooping [brname = <{bridge}>] ifconfig intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> [portmode = <{Host|Router|Auto}>] [fastleave = <{disabled|enabled}>] [exptrack = <{disabled|enabled}>] [mrdp = <{disabled|enabled}>] [rgmp = <{disabled|enabled}>] where: brname The bridge instance currently to be configured.
  • Page 299: Eth Bridge Igmpsnooping Iflist

    eth Commands eth bridge igmpsnooping iflist Display bridge interface IGMP status. SYNTAX: eth bridge igmpsnooping iflist [brname = <{bridge}>] [intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}>] where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 300: Eth Bridge Igmpsnooping List

    eth Commands eth bridge igmpsnooping list Display bridge instance snooped groups. SYNTAX: eth bridge igmpsnooping list [brname = <{bridge}>] where: brname The name of a bridge instance. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 301: Eth Bridge List

    eth Commands eth bridge list Display the current bridge instances. SYNTAX: eth bridge list [brname = <{bridge}>] [string = <string>] [beginstring = <string>] where: brname The name of a bridge instance. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 302: Eth Bridge Macadd

    eth Commands eth bridge macadd Add a static MAC address to a bridge interface. SYNTAX: eth bridge macadd [brname = <{bridge}>] intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> hwaddr = <hardware-address> [vlan = <{default|wan|dmz|guest}>] where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface.
  • Page 303: Eth Bridge Macdelete

    eth Commands eth bridge macdelete Remove a MAC address from the database. SYNTAX: eth bridge macdelete [brname = <{bridge}>] hwaddr = <hardware-address> [vlan = <{default|wan|dmz|guest}>] where: brname The name of a bridge instance. OPTIONAL hwaddr The ethernet MAC address of the entry. REQUIRED vlan The VLAN.
  • Page 304: Eth Bridge Maclist

    eth Commands eth bridge maclist Display the MAC address database. SYNTAX: eth bridge maclist [brname = <{bridge}>] where: brname The name of a bridge instance. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 305: Eth Bridge Rule Add

    eth Commands eth bridge rule add Add a new constraint to the VLAN learning system. SYNTAX: eth bridge rule add type = <{shared|independant}> vlan = <{default|wan|dmz|guest}> [vlan2 = <{default|wan|dmz|guest}>] [isi = <number{0-32}>] where: type Type of constraint. REQUIRED vlan The VLAN where the constraint belongs to. REQUIRED vlan2 The second VLAN for a shared constraint.
  • Page 306: Eth Bridge Rule Delete

    eth Commands eth bridge rule delete Delete a constraint from the VLAN learning system. SYNTAX: eth bridge rule delete index = <number{0-32}> where: index Index of the constraint. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 307: Eth Bridge Rule Flush

    eth Commands eth bridge rule flush Flush all constraints from the VLAN learning system. E-DOC-CTC-20080409-0002 v2.0...
  • Page 308: Eth Bridge Rule List

    eth Commands eth bridge rule list Display all constraints from the VLAN learning system. E-DOC-CTC-20080409-0002 v2.0...
  • Page 309: Eth Bridge Select

    eth Commands eth bridge select Select the default bridge for configuring interfaces from (if not setting SYNTAX: eth bridge select brname = <{bridge}> where: brname The name of a bridge instance. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 310: Eth Bridge Unknownvlan Ifadd

    eth Commands eth bridge unknownvlan ifadd Add bridge interface to unknown 'VLAN'. SYNTAX: eth bridge unknownvlan ifadd [brname = <{bridge}>] intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> [untagged = <{disabled|enabled}>] where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface to add to the REQUIRED unknown 'VLAN'.
  • Page 311: Eth Bridge Unknownvlan Ifconfig

    eth Commands eth bridge unknownvlan ifconfig Modify bridge interface from unknown 'VLAN'. SYNTAX: eth bridge unknownvlan [brname = <{bridge}>] ifconfig intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> [untagged = <{disabled|enabled}>] where: brname The name of a bridge instance. OPTIONAL intf The bridge interface from the unknown 'VLAN' REQUIRED to configure.
  • Page 312: Eth Bridge Unknownvlan Ifdelete

    eth Commands eth bridge unknownvlan ifdelete Delete bridge interface from unknown 'VLAN'. SYNTAX: eth bridge unknownvlan [brname = <{bridge}>] ifdelete intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface to remove from REQUIRED the unknown 'VLAN'.
  • Page 313: Eth Bridge Unknownvlan Iflist

    eth Commands eth bridge unknownvlan iflist Display all interfaces of the unknown 'VLAN'. E-DOC-CTC-20080409-0002 v2.0...
  • Page 314: Eth Bridge Vlan Ifadd

    eth Commands eth bridge vlan ifadd Add bridge interface to virtual LAN. SYNTAX: eth bridge vlan ifadd name = <{default|wan|dmz|guest}> intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> [untagged = <{disabled|enabled}>] where: name The VLAN name. REQUIRED intf The name of the bridge interface to add to the REQUIRED VLAN.
  • Page 315: Eth Bridge Vlan Ifconfig

    eth Commands eth bridge vlan ifconfig Modify bridge interface from virtual LAN. SYNTAX: eth bridge vlan ifconfig name = <{default|wan|dmz|guest}> intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> untagged = <{disabled|enabled}> where: name The VLAN name. REQUIRED intf The bridge interface from the VLAN to configure. REQUIRED untagged Enable/disable interface as untagged for this...
  • Page 316: Eth Bridge Vlan Ifdelete

    eth Commands eth bridge vlan ifdelete Delete bridge interface from virtual LAN. SYNTAX: eth bridge vlan ifdelete name = <{default|wan|dmz|guest}> intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> where: name The VLAN name. REQUIRED intf The name of the bridge interface to remove from REQUIRED the VLAN.
  • Page 317: Eth Bridge Vlan Iflist

    eth Commands eth bridge vlan iflist Display all vitual LAN's. E-DOC-CTC-20080409-0002 v2.0...
  • Page 318: Eth Bridge Xtratag Add

    eth Commands eth bridge xtratag add Add an extra tag mapping entry. SYNTAX: eth bridge xtratag add [brname = <{bridge}>] intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> innervid = <{[1-4094]|all|}> outervid = <{[1-4094]|notag|transparent|}> where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface.
  • Page 319: Eth Bridge Xtratag Config

    eth Commands eth bridge xtratag config Configure an extra tag mapping entry. SYNTAX: eth bridge xtratag config [brname = <{bridge}>] intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> innervid = <{[1-4094]|all|}> outervid = <{[1-4094]|notag|transparent|}> where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface.
  • Page 320: Eth Bridge Xtratag Delete

    eth Commands eth bridge xtratag delete Delete an extra tag mapping entry. SYNTAX: eth bridge xtratag delete [brname = <{bridge}>] intf = <{OBC|ethport1|ethport2|ethport3| ethport4|Internet_8_35|Internet_0_35|eth-br- dsl}> innervid = <{[1-4094]|all|}> where: brname The name of a bridge instance. OPTIONAL intf The name of the bridge interface. REQUIRED innervid The inner VLAN id [all,1-4094] (all = all inner vid...
  • Page 321: Eth Bridge Xtratag Flush

    eth Commands eth bridge xtratag flush Flush all extra tag mapping entries. E-DOC-CTC-20080409-0002 v2.0...
  • Page 322: Eth Bridge Xtratag List

    eth Commands eth bridge xtratag list Display all extra tag mapping entries. E-DOC-CTC-20080409-0002 v2.0...
  • Page 323: Eth Device Ifconfig

    eth Commands eth device ifconfig Configure ethernet interface. SYNTAX: eth device ifconfig intf = <{ethif1|ethif2|ethif3|ethif4}> [type = <{auto|10BaseTHD|10BaseTFD|100BaseTHD| 100BaseTFD} or number>] [state = <{enabled|disabled}>] where: intf The name of a physical interface. REQUIRED type The ethernet type. OPTIONAL state The interface state. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 324: Eth Device Iflist

    eth Commands eth device iflist Show status of ethernet interfaces. E-DOC-CTC-20080409-0002 v2.0...
  • Page 325: Eth Filter Operand Add

    eth Commands eth filter operand add Add a filter operand. SYNTAX: eth filter operand add operand = <string> where: operand The name of the new operand operand. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 326: Eth Filter Operand Config

    eth Commands eth filter operand config Set the operand to a certain type (will reset content first). SYNTAX: eth filter operand config operand = <{}> type = <{CheckDAClass|CheckFrameClass| CheckVLANPriority|CheckVID|CheckIPProto| CheckSize|Match|Modify|CheckCheckSum| UpdateCheckSum}> operator = <{Equal|Less|LessEqual|InSet}> protocollevel = <{EthernetFrame|Protocol| EthernetPayload|ULPHeader|ULPPayload}> length = <number> mask = <string>...
  • Page 327 eth Commands offset At which offset from protocol level in bytes the REQUIRED Match/Modify action should start (in bytes). priority The VLAN priority to filter on. OPTIONAL size The size of the frame at this protocol level. REQUIRED The VID to filter on. OPTIONAL protocol The protocol level of the checksum.
  • Page 328: Eth Filter Operand Delete

    eth Commands eth filter operand delete Delete a filter operand. SYNTAX: eth filter operand delete operand = <{}> where: operand The name of the operand to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 329: Eth Filter Operand Flush

    eth Commands eth filter operand flush Remove all filter operands (this will only delete the ones not in use: flush E-DOC-CTC-20080409-0002 v2.0...
  • Page 330: Eth Filter Operand Frameclassadd

    eth Commands eth filter operand frameclassadd Add another frameclass in the set. SYNTAX: eth filter operand operand = <{}> frameclassadd frameclass = <{Eth2|SNAPEType|SNAP8021H| SNAPOther|LLCNLPID|LLCOther}> where: operand The name of an operand. REQUIRED frameclass The frame class to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 331: Eth Filter Operand Frameclassdelete

    eth Commands eth filter operand frameclassdelete Delete a frameclasse from the set. SYNTAX: eth filter operand operand = <{}> frameclassdelete frameclass = <{Eth2|SNAPEType|SNAP8021H| SNAPOther|LLCNLPID|LLCOther}> where: operand The name of an operand. REQUIRED frameclass The frameclass to remove. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 332: Eth Filter Operand Ipprotoadd

    eth Commands eth filter operand ipprotoadd Add another ip protocol in the set. SYNTAX: eth filter operand ipprotoadd operand = <{}> ipprotocol = <number{0-255}> where: operand The name of an operand. REQUIRED ipprotocol The IP protocol to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 333: Eth Filter Operand Ipprotodelete

    eth Commands eth filter operand ipprotodelete Delete a ip protocol from the set. SYNTAX: eth filter operand operand = <{}> ipprotodelete ipprotocol = <{}> where: operand The name of an operand. REQUIRED ipprotocol The IP protocol to remove. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 334: Eth Filter Operand List

    eth Commands eth filter operand list Display the filter operands. SYNTAX: eth filter operand list [operand = <{}>] [expand = <{disabled|enabled}>] where: operand The name of an operand. OPTIONAL expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 335: Eth Filter Operand Priorityadd

    eth Commands eth filter operand priorityadd Add another priority in the set. SYNTAX: eth filter operand priorityadd operand = <{}> priority = <number{0-7}> where: operand The name of an operand. REQUIRED priority The vlan priority to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 336: Eth Filter Operand Prioritydelete

    eth Commands eth filter operand prioritydelete Delete a ip priority from the set. SYNTAX: eth filter operand operand = <{}> prioritydelete priority = <{}> where: operand The name of an operand. REQUIRED priority The vlan priority to remove. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 337: Eth Filter Operand Reset

    eth Commands eth filter operand reset Reset an operand to its default initial state (removes all content, set to SYNTAX: eth filter operand reset operand = <{}> where: operand The name of an operand. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 338: Eth Filter Operand Vidadd

    eth Commands eth filter operand vidadd Add another VID in the set. SYNTAX: eth filter operand vidadd operand = <{}> vid = <number{1-4095}> where: operand The name of an operand. REQUIRED The VID to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 339: Eth Filter Operand Viddelete

    eth Commands eth filter operand viddelete Delete a VID from the set. SYNTAX: eth filter operand viddelete operand = <{}> vid = <{}> where: operand The name of an operand. REQUIRED The VID to remove. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 340: Eth Filter Template Add

    eth Commands eth filter template add Add a filter. SYNTAX: eth filter template add filter = <string> [location = <{Ingress|Egress|VID|Priority}>] [level = <number{0-65535}>] [tracing = <{disabled|enabled}>] [mark = <{disabled|enabled}>] where: filter The name of the filter. REQUIRED location The filter location. OPTIONAL level The filter level (lower level is processed first =...
  • Page 341: Eth Filter Template Config

    eth Commands eth filter template config Config a filter. SYNTAX: eth filter template config filter = <{}> [location = <{Ingress|Egress|VID|Priority}>] [level = <number{0-65535}>] [tracing = <{disabled|enabled}>] [mark = <{disabled|enabled}>] where: filter The name of an filter. REQUIRED location The filter location. OPTIONAL level The filter level (lower level is processed first =...
  • Page 342: Eth Filter Template Delete

    eth Commands eth filter template delete Delete a filter. SYNTAX: eth filter template delete filter = <{}> where: filter The name of an filter. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 343: Eth Filter Template Flush

    eth Commands eth filter template flush Remove all filters. E-DOC-CTC-20080409-0002 v2.0...
  • Page 344: Eth Filter Template List

    eth Commands eth filter template list Display the filters. SYNTAX: eth filter template list [filter = <{}>] [expand = <{disabled|enabled}>] where: filter The name of an filter. OPTIONAL expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 345: Eth Filter Template Ruleadd

    eth Commands eth filter template ruleadd Connect an operand rule with a filter. SYNTAX: eth filter template ruleadd filter = <{}> operand = <{}> [negate = <{disabled|enabled}>] [order = <number{-100-100}>] [operator = <{Ignore|AND|OR}>] where: filter The name of an filter. REQUIRED operand The name of the operand to connect with.
  • Page 346: Eth Filter Template Ruledel

    eth Commands eth filter template ruledel Remove an operand rule from a filter. SYNTAX: eth filter template ruledel filter = <{}> ruleid = <{}> where: filter The name of an filter. REQUIRED ruleid The name of the operand to remove. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 347: Eth Filter Template Rulemodify

    eth Commands eth filter template rulemodify Modify an operand rule from a filter. SYNTAX: eth filter template rulemodify filter = <{}> ruleid = <{}> [operand = <{}>] [negate = <{disabled|enabled}>] [order = <number{-100-100}>] [operator = <{Ignore|AND|OR}>] where: filter The name of an filter. REQUIRED ruleid The name of the operand to remove.
  • Page 348: Eth Filter Template Setpriority

    eth Commands eth filter template setpriority Action: enable/disable priority derivation SYNTAX: eth filter template filter = <{}> setpriority [state = <{disabled|enabled}>] priority = <number{0-15}> where: filter The name of an filter. REQUIRED state Enable/disabled priority derivation for this filters OPTIONAL priority The priority to set in the derivation.
  • Page 349: Eth Filter Template Setvid

    eth Commands eth filter template setvid Action: enable/disable VID derivation SYNTAX: eth filter template setvid filter = <{}> [state = <{disabled|enabled}>] vid = <number{1-4095}> where: filter The name of an filter. REQUIRED state Enable/disabled VID derivation for this filters OPTIONAL The VID to set in the derivation.
  • Page 350: Eth Flush

    eth Commands eth flush Flush all ETH interfaces. E-DOC-CTC-20080409-0002 v2.0...
  • Page 351: Eth Ifadd

    eth Commands eth ifadd Create a new ETH interface. SYNTAX: eth ifadd intf = <string> where: intf The name for the new ETH interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 352: Eth Ifattach

    eth Commands eth ifattach Attach an ETH interface. SYNTAX: eth ifattach intf = <{}> where: intf The name of the ETH interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 353: Eth Ifconfig

    eth Commands eth ifconfig Modify an ETH interface. SYNTAX: eth ifconfig intf = <{eth_wan1|eth_dmz1|eth_guest1}> [dest = <{bridge|eth_wan1|eth_dmz1| eth_guest1}>] [retry = <number{0-65535}>] [wan = <{disabled|enabled}>] [priotag = <{disabled|enabled}>] [vlan = <{default|wan|dmz|guest}>] where: intf The name of the ETH interface to configure. REQUIRED dest The destination interface for this ETH interface.
  • Page 354: Eth Ifdelete

    eth Commands eth ifdelete Delete an ETH interface. SYNTAX: eth ifdelete intf = <{}> where: intf The name of the ETH interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 355: Eth Ifdetach

    eth Commands eth ifdetach Detach an ETH interface. SYNTAX: eth ifdetach intf = <{}> where: intf The name of the ETH interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 356: Eth Iflist

    eth Commands eth iflist Display the ETH interfaces. SYNTAX: eth iflist [intf = <{eth_wan1|eth_dmz1|eth_guest1}>] [string = <string>] [beginstring = <string>] where: intf The name of an ETH interface. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 357: Eth Oam Add

    eth Commands eth oam add Enable Ethernet OAM (E-OAM) on an interface. SYNTAX: eth oam add name = <{ethport1|ethport2|ethport3|ethport4| Internet_8_35|Internet_0_35|eth-br-dsl}> where: name The interface for which to add E-OAM support. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 358: Eth Oam Config

    eth Commands eth oam config Modify global E-OAM settings. SYNTAX: eth oam config [oui = <string>] [vendorcode = <number or string>] where: OUI of the vendor. OPTIONAL vendorcode Vendor Specific Information. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 359: Eth Oam Configlist

    eth Commands eth oam configlist Display global E-OAM settings. E-DOC-CTC-20080409-0002 v2.0...
  • Page 360: Eth Oam Debug Tracing

    eth Commands eth oam debug tracing Modify E-OAM tracing level. SYNTAX: eth oam debug tracing level = <number{0-15}> where: level E-OAM trace level. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 361: Eth Oam Delete

    eth Commands eth oam delete Disable E-OAM on an interface. SYNTAX: eth oam delete name = <{}> where: name The interface for which to remove E-OAM REQUIRED support. E-DOC-CTC-20080409-0002 v2.0...
  • Page 362: Eth Oam List

    eth Commands eth oam list Display the E-OAM configuration of an interface(s). SYNTAX: eth oam list [name = <{}>] where: name The interface for which to list E-OAM OPTIONAL information. E-DOC-CTC-20080409-0002 v2.0...
  • Page 363: Eth Oam Loopback

    eth Commands eth oam loopback Enable/disable E-OAM remote loopback for an interface. SYNTAX: eth oam loopback name = <{}> [state = <{disabled|enabled}>] where: name The interface for which to enable/disable E-OAM REQUIRED loopback. state Enable/disable E-OAM remote loopback. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 364: Eth Oam Modify

    eth Commands eth oam modify Modify E-OAM settings for an interface. SYNTAX: eth oam modify name = <{}> [state = <{disabled|enabled}>] [pdutimer = <number{1-86400}>] [locallostlinktimer = <number{1-86400}>] [maxnbrofpduspersecond = <number{1-100}>] [mode = <{passive|active}>] where: name The interface for which to configure E-OAM. REQUIRED state Enable/disable E-OAM.
  • Page 365: Eth Oam Varreq

    eth Commands eth oam varreq Request a variable from the remote side. SYNTAX: eth oam varreq name = <{}> branch = <number> leaf = <number> where: name The interface on which to request the variable. REQUIRED branch Branch. REQUIRED leaf Leaf.
  • Page 366: Eth Switch Group Flush

    eth Commands eth switch group flush To set all ports to the default settings (all ports in group 0). E-DOC-CTC-20080409-0002 v2.0...
  • Page 367: Eth Switch Group List

    eth Commands eth switch group list List all configured groups. E-DOC-CTC-20080409-0002 v2.0...
  • Page 368: Eth Switch Group Move

    eth Commands eth switch group move Move a specified port to a specified group. SYNTAX: eth switch group move group = <number{0-4}> port = <number{1-4}> where: group The group id. REQUIRED port The port. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 369: Eth Switch Info

    eth Commands eth switch info Display switch capabilities E-DOC-CTC-20080409-0002 v2.0...
  • Page 370: Eth Switch Mirror Capture

    eth Commands eth switch mirror capture Define the specified port to be the Mirror Capture Port. SYNTAX: eth switch mirror capture port = <number{1-4}> where: port The port. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 371: Eth Switch Mirror Egress

    eth Commands eth switch mirror egress Enable or disable the specified port to be a Transmitted Port Mirroring. SYNTAX: eth switch mirror egress port = <number{1-4}> [state = <{enabled|disabled}>] where: port The port. REQUIRED state Enable/disable state. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 372: Eth Switch Mirror Ingress

    eth Commands eth switch mirror ingress Enable or disable the specified port to be a Received Port Mirroring. SYNTAX: eth switch mirror ingress port = <number{1-4}> [state = <{enabled|disabled}>] where: port The port. REQUIRED state Enable/disable state. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 373: Eth Switch Qos Config

    eth Commands eth switch qos config Configure common qos parameters. SYNTAX: eth switch qos config state = <{enabled|disabled}> [nbrOfQueues = <number{0-4}>] [realtime = <{enabled|disabled}>] where: state Enable/disable QoS. REQUIRED nbrOfQueues Number of queues. OPTIONAL realtime Enable/disable realtime. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 374: Eth Switch Qos Ifconfig

    eth Commands eth switch qos ifconfig Configure per port qos parameters. SYNTAX: eth switch qos ifconfig port = <number{1-4}> mode = <{none|802.1p|high|diffserv|tos}> [flowcontrol = <{disabled|enabled}>] where: port The port. REQUIRED mode Classifier. REQUIRED flowcontrol Enable/disable flow-control. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 375: Eth Switch Qos List

    eth Commands eth switch qos list Display qos configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 376: Eth Switch Qos Weights

    eth Commands eth switch qos weights Configure the queue weights. SYNTAX: eth switch qos weights queue0 = <number{0-100}> queue1 = <number{0-100}> queue2 = <number{0-100}> queue3 = <number{0-100}> where: queue0 Weight of queue 0 in WFQ (in %). REQUIRED queue1 Weight of queue 1 in WFQ (in %). REQUIRED queue2 Weight of queue 2 in WFQ (in %).
  • Page 377: Eth Switch Shaper Config

    eth Commands eth switch shaper config Configure common ingress shaper parameters. SYNTAX: eth switch shaper config shaper = <number{0-1}> [unicast = <{enabled|disabled}>] [multicast = <{enabled|disabled}>] [broadcast = <{enabled|disabled}>] [control = <{enabled|disabled}>] [unknown = <{enabled|disabled}>] [discard = <{enabled|disabled}>] where: shaper The shaper instance. REQUIRED unicast Shape unicast traffic.
  • Page 378: Eth Switch Shaper Ifconfig

    eth Commands eth switch shaper ifconfig Configure per port shaper parameters. SYNTAX: eth switch shaper ifconfig port = <number{1-4}> ingress = <{enabled|disabled}> shaper = <number{0-1}> [state = <{enabled|disabled}>] [speed = <number{64000-100000000}>] [burstsize = <{6|10|18|34|66|126}>] where: port The port. REQUIRED ingress Ingress port = enabled;...
  • Page 379: Eth Switch Shaper Iflist

    eth Commands eth switch shaper iflist Display shaper configuration per port. E-DOC-CTC-20080409-0002 v2.0...
  • Page 380: Eth Switch Share Add

    eth Commands eth switch share add Add a port to be shared. SYNTAX: eth switch share add port = <number{1-4}> shared = <number{1-4}> where: port The port. REQUIRED shared The shared port. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 381: Eth Switch Share Delete

    eth Commands eth switch share delete Delete a shared port. SYNTAX: eth switch share delete port = <number{1-4}> shared = <number{1-4}> where: port The port. REQUIRED shared The shared port. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 382: Eth Switch Share List

    eth Commands eth switch share list Display shared ports. E-DOC-CTC-20080409-0002 v2.0...
  • Page 383: Eth Switch Storm Ifconfig

    eth Commands eth switch storm ifconfig Configure per port storm control parameters. SYNTAX: eth switch storm ifconfig port = <number{1-4}> [state = <{enabled|disabled}>] [rate = <{33|50|100|200}>] [burstsize = <number{2-8}>] [broadcast = <{enabled|disabled}>] [multicast = <{enabled|disabled}>] [unknown = <{enabled|disabled}>] where: port The port.
  • Page 384: Eth Switch Storm Iflist

    eth Commands eth switch storm iflist Display storm control configuration per port. E-DOC-CTC-20080409-0002 v2.0...
  • Page 385: Eth Vlan Add

    eth Commands eth vlan add Add a new virtual LAN. SYNTAX: eth vlan add name = <string> vid = <number{2-4094}> [addrule = <{disabled|enabled}>] where: name The new VLAN name. REQUIRED The new VLAN id. REQUIRED addrule Add the default bridge constraint. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 386: Eth Vlan Delete

    eth Commands eth vlan delete Delete a virtual LAN. SYNTAX: eth vlan delete name = <{default|wan|dmz|guest}> where: name The VLAN name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 387: Eth Vlan Flush

    eth Commands eth vlan flush Flush all virtual LAN's. E-DOC-CTC-20080409-0002 v2.0...
  • Page 388: Eth Vlan List

    eth Commands eth vlan list Display all virtual LAN's. E-DOC-CTC-20080409-0002 v2.0...
  • Page 389: Exit Command

    exit Command exit Command Exits this shell. E-DOC-CTC-20080409-0002 v2.0...
  • Page 390 expr Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 391: Expr Commands

    expr Commands expr Commands expr add Add an expression. see page 392 expr delete Delete an expression. see page 395 expr flush Flush all expressions. see page 396 expr list List expressions. see page 397 expr modify Modify an expression. see page 398 E-DOC-CTC-20080409-0002 v2.0...
  • Page 392: Expr Add

    expr Commands expr add Add an expression. SYNTAX: expr add name = <{wan|local|lan|tunnel|dmz|guest| private|ssdp_ip|mdap_ip|icmp|igmp|imaps|pop2| pop3|pop3s|smtp|ssh|dns|nntp|ipsec|esp|ah| ike|DiffServ|sip|h323|dhcp|rtsp|ssdp_serv| mdap_serv|syslog}> [type = <{intf|ip|serv|mac}>] mac [!] = <hardware-address> addr [!] = <ip-range> [mask [ = <ip-mask(dotted or cidr)>] [intf [!] = <{loop|ipsec0|lan1|wan1|dmz1| guest1}>] [intfgroup [!] = <{wan|local|lan|tunnel|dmz| guest} or number>] [tos [!] = <number{0-255}>] [precedence [!] = <{routine|priority|...
  • Page 393 expr Commands [dstport [!] = <{at-echo|at-nbp|at-rtmp|at- zis|auth|bgp|biff|bootpc|bootps|finger|ftp| ftp-data|gopher|h323|httpproxy|ike|ils|imap2| imap3|ingres-net|ipcserver|ipx|irc-o|irc-u| kerberos|ldap|login|netbios-dgm|netbios-ns| netbios-ssn|netwall|netware-ip|new-rwho|nfds| nicname|nntp|ntalk|ntp|pcmail-srv|pop2|pop3| printer|qotd|realaudio|rip|rtelnet|rtsp|sip| smtp|snmp|snmptrap|snpp|sntp|sql*net|sql- net|sqlserv|sunrpc|syslog|systat|talk|...}or number>] [dstportend = <{at-echo|at-nbp|at-rtmp|at- zis|auth|bgp|biff|bootpc|bootps|finger|ftp| ftp-data|gopher|h323|httpproxy|ike|ils|imap2| imap3|ingres-net|ipcserver|ipx|irc-o|irc-u| kerberos|ldap|login|netbios-dgm|netbios-ns| netbios-ssn|netwall|netware-ip|new-rwho|nfds| nicname|nntp|ntalk|ntp|pcmail-srv|pop2|pop3| printer|qotd|realaudio|rip|rtelnet|rtsp|sip| smtp|snmp|snmptrap|snpp|sntp|sql*net|sql- net|sqlserv|sunrpc|syslog|systat|talk|...}or number>] [icmptype [!] = <{echo-reply|destination- unreachable|source-quench|redirect|exceeded| parameter-problems|timestamp-request| timestamp-reply|information-request| information-reply|address-mask-request| address-mask-reply} or number>] [icmpcode [!] = <number{0-15}>] [icmpcodeend = <number{0-15}>] where:...
  • Page 394 expr Commands If a value is preceded by a “!”, it means NOT. precedence [!] The precedence in the IP packet (part of tos). OPTIONAL If a value is preceded by a “!”, it means NOT. dscp [!] The diffserv code point in the IP packet (part of OPTIONAL tos).
  • Page 395: Expr Delete

    expr Commands expr delete Delete an expression. SYNTAX: expr delete name = <{wan|local|lan|tunnel|dmz|guest| private|ssdp_ip|mdap_ip|icmp|igmp|imaps|pop2| pop3|pop3s|smtp|ssh|dns|nntp|ipsec|esp|ah| ike|DiffServ|sip|h323|dhcp|rtsp|ssdp_serv| mdap_serv|syslog}> [index = <number>] where: name The name of an expression to delete. REQUIRED index The index of a subexpression. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 396: Expr Flush

    expr Commands expr flush Flush all expressions. E-DOC-CTC-20080409-0002 v2.0...
  • Page 397: Expr List

    expr Commands expr list List expressions. SYNTAX: expr list [name = <{_intf_0|_intf_1|_intf_2|_intf_3| _intf_4|_intf_5|DHCP-R_if_0|wan|TELNET_if_0| DNS-S_if_0|PING_RESPONDER_if_0|MDAP_if_0| SSDP_if_0|GRE_if_0|IPIP_if_0|PPTPD_if_0| PPTPGRE_if_0|_addr_127_0_0_1|_addr_10_0_0_138| _addr_192_168_1_254|_addr_192_168_2_254| _addr_192_168_3_254|private|ssdp_ip|mdap_ip| IKE-NAT-T_sv_0|ESP_sv_0|IKE_sv_0|DHCP-R_sv_0| icmp|igmp|ftp|telnet|http|httpproxy|https|RPC| NBT|SMB|imap|imap3|imap4-ssl|imaps|pop2|pop3| pop3s|smtp|ssh|dns}>] [type = <{intf|ip|serv|mac}>] [format = <{pretty|cli}>] [string = <string>] [beginstring = <string>] where: name The name of an expression to list. OPTIONAL type The type of an expression.
  • Page 398: Expr Modify

    expr Commands expr modify Modify an expression. SYNTAX: expr modify name = <{wan|local|lan|tunnel|dmz|guest| private|ssdp_ip|mdap_ip|icmp|igmp|imaps|pop2| pop3|pop3s|smtp|ssh|dns|nntp|ipsec|esp|ah| ike|DiffServ|sip|h323|dhcp|rtsp|ssdp_serv| mdap_serv|syslog}> [type = <{intf|ip|serv|mac}>] index = <number> mac [!] = <hardware-address> addr [!] = <ip-range> [mask [ = <ip-mask(dotted or cidr)>] [intf [!] = <{loop|ipsec0|lan1|wan1|dmz1| guest1}>] [intfgroup [!] = <{wan|local|lan|tunnel|dmz| guest} or number>]...
  • Page 399 expr Commands [dstport [!] = <{at-echo|at-nbp|at-rtmp|at- zis|auth|bgp|biff|bootpc|bootps|finger|ftp| ftp-data|gopher|h323|httpproxy|ike|ils|imap2| imap3|ingres-net|ipcserver|ipx|irc-o|irc-u| kerberos|ldap|login|netbios-dgm|netbios-ns| netbios-ssn|netwall|netware-ip|new-rwho|nfds| nicname|nntp|ntalk|ntp|pcmail-srv|pop2|pop3| printer|qotd|realaudio|rip|rtelnet|rtsp|sip| smtp|snmp|snmptrap|snpp|sntp|sql*net|sql- net|sqlserv|sunrpc|syslog|systat|talk|...}or number>] [dstportend = <{at-echo|at-nbp|at-rtmp|at- zis|auth|bgp|biff|bootpc|bootps|finger|ftp| ftp-data|gopher|h323|httpproxy|ike|ils|imap2| imap3|ingres-net|ipcserver|ipx|irc-o|irc-u| kerberos|ldap|login|netbios-dgm|netbios-ns| netbios-ssn|netwall|netware-ip|new-rwho|nfds| nicname|nntp|ntalk|ntp|pcmail-srv|pop2|pop3| printer|qotd|realaudio|rip|rtelnet|rtsp|sip| smtp|snmp|snmptrap|snpp|sntp|sql*net|sql- net|sqlserv|sunrpc|syslog|systat|talk|...}or number>] [icmptype [!] = <{echo-reply|destination- unreachable|source-quench|redirect|exceeded| parameter-problems|timestamp-request| timestamp-reply|information-request| information-reply|address-mask-request| address-mask-reply} or number>] [icmpcode [!] = <number{0-15}>] [icmpcodeend = <number{0-15}>] where:...
  • Page 400 expr Commands tos [!] The Type Of Service specification in the IP OPTIONAL packet. If a value is preceded by a “!”, it means NOT. precedence [!] The precedence in the IP packet (part of tos). OPTIONAL If a value is preceded by a “!”, it means NOT. dscp [!] The diffserv code point in the IP packet (part of OPTIONAL...
  • Page 401: Firewall Commands

    firewall Commands firewall Commands firewall chain add Add a chain. see page 402 firewall chain delete Delete a chain. see page 403 firewall chain flush Flush all chains. see page 404 firewall chain list Display a list of chains. see page 405 firewall clear Clear firewall configuration.
  • Page 402: Firewall Chain Add

    firewall Commands firewall chain add Add a chain. SYNTAX: firewall chain add chain = <string> where: chain The name of the chain to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 403: Firewall Chain Delete

    firewall Commands firewall chain delete Delete a chain. SYNTAX: firewall chain delete chain = <chain name> where: chain The name of the chain to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 404: Firewall Chain Flush

    firewall Commands firewall chain flush Flush all chains. E-DOC-CTC-20080409-0002 v2.0...
  • Page 405: Firewall Chain List

    firewall Commands firewall chain list Display a list of chains. SYNTAX: firewall chain list [format = <{pretty|cli}>] where: format The format of the chain list. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 406: Firewall Clear

    firewall Commands firewall clear Clear firewall configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 407: Firewall Config

    firewall Commands firewall config Display/Modify firewall configuration. SYNTAX: firewall config [state = <{disabled|enabled}>] [keep = <{disabled|enabled}>] [tcpchecks = <{none|fast|exact}>] [udpchecks = <{disabled|enabled}>] [icmpchecks = <{disabled|enabled}>] [logdefault = <{disabled|enabled}>] [logthreshold = <{disabled|enabled}>] [tcpwindow = <number{0-1073725440}>] where: state Disable/Enable the firewall. OPTIONAL keep Disable/Enable keeping existing connections OPTIONAL...
  • Page 408: Firewall Debug Clear

    firewall Commands firewall debug clear Clear firewall statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 409: Firewall Debug Stats

    firewall Commands firewall debug stats Display firewall statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 410: Firewall Debug Traceconfig

    firewall Commands firewall debug traceconfig Display/Modify firewall trace configuration. SYNTAX: firewall debug traceconfig [tcpchecks = <{disabled|enabled}>] [udpchecks = <{disabled|enabled}>] [icmpchecks = <{disabled|enabled}>] [sink = <{none|all|accept|deny|drop|reset} or number>] [forward = <{none|all|accept|deny|drop|reset} or number>] [source = <{none|all|accept|deny|drop|reset} or number>] where: tcpchecks Disable/Enable tcpchecks traces. OPTIONAL udpchecks Disable/Enable udpchecks traces.
  • Page 411: Firewall Level Add

    firewall Commands firewall level add Add a new security level. SYNTAX: firewall level add name = <string> [index = <number>] [readonly = <{disabled|enabled}>] [udptrackmode = <{strict|loose}>] [service = <{disabled|enabled}>] [proxy = <{disabled|enabled}>] [text = <quoted string>] [policy = <{default|drop|accept}>] where: name The name of the security level to add.
  • Page 412: Firewall Level Delete

    firewall Commands firewall level delete Delete a security level. SYNTAX: firewall level delete name = <security level name> where: name The name of the security level to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 413: Firewall Level Flush

    firewall Commands firewall level flush Flush security level configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 414: Firewall Level List

    firewall Commands firewall level list List all security levels. SYNTAX: firewall level list [format = <{pretty|cli}>] [string = <string>] [beginstring = <string>] where: format The format of the security level list. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 415: Firewall Level Modify

    firewall Commands firewall level modify Modify a security level. SYNTAX: firewall level modify name = <security level name> [index = <number>] [readonly = <{disabled|enabled}>] [udptrackmode = <{strict|loose}>] [service = <{disabled|enabled}>] [proxy = <{disabled|enabled}>] [text = <quoted string>] [policy = <{default|drop|accept}>] where: name The name of the security level to modify.
  • Page 416: Firewall Level Set

    firewall Commands firewall level set Set/Display active security level. SYNTAX: firewall level set [name = <security level name>] where: name The name of the security level to set active. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 417: Firewall List

    firewall Commands firewall list Display firewall configuration. SYNTAX: firewall list [format = <{pretty|cli}>] where: format The format of the firewall list. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 418: Firewall Rule Add

    firewall Commands firewall rule add Add a rule. SYNTAX: firewall rule add chain = <chain name> [index = <number>] [name = <string>] [clink = <chain name>] [srcintf [!] = <{wan|local|lan|tunnel|dmz| guest}>] [srcip [!] = <{private|ssdp_ip|mdap_ip}>] [dstintf [!] = <{wan|local|lan|tunnel|dmz| guest}>] [dstip [!] = <{private|ssdp_ip|mdap_ip}>] [serv [!] = <{icmp|igmp|ftp|telnet|http| httpproxy|https|RPC|NBT|SMB|imap|esp|ah|...
  • Page 419 firewall Commands Disable/Enable logging when this rule applies. OPTIONAL state Disable/Enable this rule. OPTIONAL action The action to be taken when this rule applies REQUIRED ('link' when clink is used). E-DOC-CTC-20080409-0002 v2.0...
  • Page 420: Firewall Rule Debug Clear

    firewall Commands firewall rule debug clear Clear rule statistics. SYNTAX: firewall rule debug clear [chain = <chain name>] [index = <number>] where: chain The name of the chain. OPTIONAL index The index of the rule in the chain. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 421: Firewall Rule Debug Stats

    firewall Commands firewall rule debug stats Display rule statistics. SYNTAX: firewall rule debug stats [chain = <chain name>] [index = <number>] where: chain The name of the chain. OPTIONAL index The index of the rule in the chain. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 422: Firewall Rule Debug Traceconfig

    firewall Commands firewall rule debug traceconfig Display/Modify rule trace configuration. SYNTAX: firewall rule debug [state = <{disabled|enabled}>] traceconfig where: state Disable/Enable rule traces. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 423: Firewall Rule Delete

    firewall Commands firewall rule delete Delete a rule. SYNTAX: firewall rule delete chain = <chain name> index = <number> where: chain The name of the chain in which to delete the REQUIRED rule. index The number of the rule in the chain. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 424: Firewall Rule Flush

    firewall Commands firewall rule flush Flush all rules. SYNTAX: firewall rule flush [chain = <chain name>] where: chain The name of the chain to flush. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 425: Firewall Rule List

    firewall Commands firewall rule list Display a list of rules. SYNTAX: firewall rule list [chain = <chain name>] [format = <{pretty|cli}>] [string = <string>] [beginstring = <string>] where: chain The name of the chain to list the rules of. OPTIONAL format The format of the rule list.
  • Page 426: Firewall Rule Modify

    firewall Commands firewall rule modify Modify a rule. SYNTAX: firewall rule modify chain = <chain name> [index = <number>] [newindex = <number>] [name = <string>] [clink = <chain name>] [[!]srcintf] = <chain name>] [[!]srcip] = <chain name>] [[!]dstintf] = <chain name>] [[!]dstip] = <chain name>] [[!]serv] = <chain name>] [log = <{disabled|enabled}>]...
  • Page 427 firewall Commands state Disable/Enable this rule. OPTIONAL action The action to be taken when this rule applies OPTIONAL ('link' when clink is used). E-DOC-CTC-20080409-0002 v2.0...
  • Page 428 grp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 429: Grp Commands

    grp Commands grp Commands grp config Set the grp configuration settings. see page 430 grp flush Flush grp interface settings and see page 431 parameters. grp ifconfig Configure routing parameters of an see page 432 interface. grp iflist Show the current interfaces. see page 433 grp rip bnadd Add an IP address to the RIP black...
  • Page 430: Grp Config

    grp Commands grp config Set the grp configuration settings. SYNTAX: grp config [cdistance = <number{0-255}>] [kdistance = <number{0-255}>] [rdistance = <number{0-255}>] [trace = <{disabled|enabled}>] where: cdistance Set the distance of the connected route type. OPTIONAL Default distance is 0. kdistance Set the distance of the kernel route type.
  • Page 431: Grp Flush

    grp Commands grp flush Flush grp interface settings and parameters. E-DOC-CTC-20080409-0002 v2.0...
  • Page 432: Grp Ifconfig

    grp Commands grp ifconfig Configure routing parameters of an interface. SYNTAX: grp ifconfig intf = <{guest1|dmz1|wan1|lan1|ipsec0|loop}> metric = <number{1-16}> where: intf The name of the interface. REQUIRED metric The metric of the interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 433: Grp Iflist

    grp Commands grp iflist Show the current interfaces. SYNTAX: grp iflist [intf = <{guest1|dmz1|wan1|lan1|ipsec0|loop}>] where: intf The name of the interface. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 434: Grp Rip Bnadd

    grp Commands grp rip bnadd Add an IP address to the RIP black network list. SYNTAX: grp rip bnadd addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] where: addr The IP network address. REQUIRED netmask The subnetmask associated with this address. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 435: Grp Rip Bndelete

    grp Commands grp rip bndelete Delete an IP address from the RIP black network list. SYNTAX: grp rip bndelete addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] where: addr The IP network address. REQUIRED netmask The subnetmask associated with this address. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 436: Grp Rip Bnlist

    grp Commands grp rip bnlist List the RIP black neighbor list. E-DOC-CTC-20080409-0002 v2.0...
  • Page 437: Grp Rip Config

    grp Commands grp rip config Set the RIP configuration settings. SYNTAX: grp rip config state = <{disabled|enabled}> [version = <{rip_unspec|rip_v1|rip_v2}>] [defmetric = <number{1-16}>] [updatetime = <number{1-3600}>] [timeouttime = <number{1-3600}>] [garbagetime = <number{1-3600}>] [impcrt = <{disabled|enabled}>] [impkrt = <{disabled|enabled}>] [impdefkrt = <{disabled|enabled}>] [exprt = <{disabled|enabled}>] [expdefrt = <{disabled|enabled}>] [txdefrt = <{disabled|enabled}>]...
  • Page 438: Grp Rip Flush

    grp Commands grp rip flush Flush RIP interface settings and global parameters. E-DOC-CTC-20080409-0002 v2.0...
  • Page 439: Grp Rip Ifconfig

    grp Commands grp rip ifconfig Configure a RIP interface. SYNTAX: grp rip ifconfig intf = <{guest1|dmz1|wan1|lan1|ipsec0}> [rip = <{disabled|enabled}>] [txversion = <{rip_unspec|rip_v1|rip_v2| rip_v1-2}>] [rxversion = <{rip_unspec|rip_v1|rip_v2| rip_v1-2}>] [authmode = <{none|cleartext}>] [authstr = <password>] [passive = <{disabled|enabled}>] [splithorizon = <{disabled|enabled}>] where: intf The name of the RIP interface to configure.
  • Page 440: Grp Rip Nbadd

    grp Commands grp rip nbadd Add a RIP neighbor to the neighbor list. SYNTAX: grp rip nbadd addr = <ip-address> where: addr The neighbor IP address. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 441: Grp Rip Nbdelete

    grp Commands grp rip nbdelete Delete a RIP neighbor from the neighbor list. SYNTAX: grp rip nbdelete addr = <ip-address> where: addr The neighbor IP address. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 442: Grp Rip Nblist

    grp Commands grp rip nblist List the RIP neighbor list. E-DOC-CTC-20080409-0002 v2.0...
  • Page 443: Grp Rip Rtfadd

    grp Commands grp rip rtfadd Add a route filter to the RIP route filter list. SYNTAX: grp rip rtfadd addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] direction = <{incoming|outgoing}> intf = <{None|guest1|dmz1|wan1|lan1|ipsec0}> where: addr The IP network address which must be filtered REQUIRED out.
  • Page 444: Grp Rip Rtfdelete

    grp Commands grp rip rtfdelete Delete a route filter from the RIP route filter list. SYNTAX: grp rip rtfdelete addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] direction = <{incoming|outgoing}> intf = <{None|guest1|dmz1|wan1|lan1|ipsec0}> where: addr The IP network address which must be filtered REQUIRED out.
  • Page 445: Grp Rip Rtflist

    grp Commands grp rip rtflist List the RIP route filter list. E-DOC-CTC-20080409-0002 v2.0...
  • Page 446: Grp Rip Show

    grp Commands grp rip show Show the RIP settings and the routes in the RIP database. E-DOC-CTC-20080409-0002 v2.0...
  • Page 447: Grp Rtlist

    grp Commands grp rtlist Show the current routes in the grp routing table. SYNTAX: grp rtlist [dst = <ip-address>] [dstmsk = <ip-mask(dotted or cidr)>] where: The destination IP address using this route. OPTIONAL Supports ip/mask notation. dstmsk The destination IP address mask. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 448: Grp Rttadd

    grp Commands grp rttadd Add a translation rule to the grp route translation list. SYNTAX: grp rttadd dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] tdst = <ip-address> [tdstmsk = <ip-mask(dotted or cidr)>] rttype = <{kernel|connect|rip}> intf = <{None|guest1|dmz1|wan1|lan1|ipsec0| loop}> where: The destination IP address which has to be REQUIRED...
  • Page 449: Grp Rttdelete

    grp Commands grp rttdelete Delete a translation rule from the grp route translation list. SYNTAX: grp rttdelete dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] tdst = <ip-address> [tdstmsk = <ip-mask(dotted or cidr)>] rttype = <{kernel|connect|rip}> intf = <{None|guest1|dmz1|wan1|lan1|ipsec0| loop}> where: The destination IP address which has to be REQUIRED...
  • Page 450: Grp Rttlist

    grp Commands grp rttlist List the grp route translation list. E-DOC-CTC-20080409-0002 v2.0...
  • Page 451: Help Command

    help Command help Command Displays this help information E-DOC-CTC-20080409-0002 v2.0...
  • Page 452: Hostmgr Commands

    hostmgr Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 453: Hostmgr Commands

    hostmgr Commands hostmgr Commands hostmgr add Add host device see page 454 hostmgr clear Remove all host devices see page 455 hostmgr config Configure Device Discovery deamon see page 456 hostmgr delete Delete host device see page 457 hostmgr flush Flush Device Discovery configuration see page 458 (i.e.
  • Page 454: Hostmgr Add

    hostmgr Commands hostmgr add Add host device SYNTAX: hostmgr add mac_addr = <hardware-address> [host_type = <{Generic|Desktop|Laptop|STB|PDA| GS|Phone|GSM|Printer|MassStorage|None}>] [host_name = <string>] [user_friendly_name = <quoted string>] [dns_name = <string>] [type = <{Unknown|L2-FXS|L2-USB|L2-BT|L3-IP| L7-UPNP|L2-PPPOERELAY|L2-WLAN}>] [interface = <string>] [ip_intf = <string>] where: mac_addr Host MAC address REQUIRED host_type Host type...
  • Page 455: Hostmgr Clear

    hostmgr Commands hostmgr clear Remove all host devices E-DOC-CTC-20080409-0002 v2.0...
  • Page 456: Hostmgr Config

    hostmgr Commands hostmgr config Configure Device Discovery deamon SYNTAX: hostmgr config [state = <{disabled|enabled}>] [scantime = <number{10-600}>] [autosave = <{disabled|enabled}>] where: state Enable/disable Device Discovery deamon OPTIONAL scantime Time between two discovery scans (sec) OPTIONAL autosave Enable/disable automatic saves to flash OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 457: Hostmgr Delete

    hostmgr Commands hostmgr delete Delete host device SYNTAX: hostmgr delete mac_addr = <hardware-address> [type = <{Unknown|L2-FXS|L2-USB|L2-BT|L3-IP| L7-UPNP|L2-PPPOERELAY|L2-WLAN}>] [index = <number>] where: mac_addr Host MAC address REQUIRED type Host connection type OPTIONAL index Host index OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 458: Hostmgr Flush

    hostmgr Commands hostmgr flush Flush Device Discovery configuration (i.e. clear & to defaults) E-DOC-CTC-20080409-0002 v2.0...
  • Page 459: Hostmgr List

    hostmgr Commands hostmgr list List all host devices SYNTAX: hostmgr list [expand = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 460: Ids Commands

    ids Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 461: Ids Commands

    ids Commands ids Commands ids clear Clear IDS statistics. see page 462 ids config Display/Modify IDS configuration. see page 463 ids parser list Display ids parser configuration. see page 464 ids parser modify Modify ids parser configuration. see page 465 ids pattern clear Reset pattern tracker.
  • Page 462: Ids Clear

    ids Commands ids clear Clear IDS statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 463: Ids Config

    ids Commands ids config Display/Modify IDS configuration. SYNTAX: ids config [state = <{disabled|enabled}>] [trace = <{disabled|enabled}>] where: state Enable/Disable ids checks. OPTIONAL trace Enable/Disable ids traces. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 464: Ids Parser List

    ids Commands ids parser list Display ids parser configuration. SYNTAX: ids parser list [parser = <parser>] where: parser The name of the parser. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 465: Ids Parser Modify

    ids Commands ids parser modify Modify ids parser configuration. SYNTAX: ids parser modify [parser = <parser>] state = <{disabled|enabled}> where: parser The name of the parser. OPTIONAL state The state of the parser. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 466: Ids Pattern Clear

    ids Commands ids pattern clear Reset pattern tracker. E-DOC-CTC-20080409-0002 v2.0...
  • Page 467: Ids Pattern List

    ids Commands ids pattern list Display patterns in pattern tracker. SYNTAX: ids pattern list [size = <{10|100|full} or number>] where: size Modify the size of pattern tracker list. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 468: Ids Pattern Stats

    ids Commands ids pattern stats Display pattern tracker statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 469: Ids Signature List

    ids Commands ids signature list Display ids signature configuration. SYNTAX: ids signature list [signature = <fragment_sweep|zero- length_fragment_size|small_fragment_size| ip_protocol_scan|tcp_port_scan| tcp_syn_scan|stealth_tcp_null_scan| stealth_tcp_fin_scan|stealth_tcp_xmas_scan| stealth_tcp_full_xmas_scan| stealth_tcp_vecna_scan|stealth_tcp_syn- fin_scan|udp_port_scan|ping_sweep_scan| tcp_syn_flood|udp_flood|ping_flood| icmp_unreachable_storm|smurf_broadcast_attack| smurf_storm_attack|fraggle_broadcast_attack| fraggle_storm_attack|land_attack}>] where: signature The name of the signature. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 470: Ids Signature Modify

    ids Commands ids signature modify Modify ids signature configuration. SYNTAX: ids signature modify [signature = <fragment_sweep|zero- length_fragment_size|small_fragment_size| ip_protocol_scan|tcp_port_scan| tcp_syn_scan|stealth_tcp_null_scan| stealth_tcp_fin_scan|stealth_tcp_xmas_scan| stealth_tcp_full_xmas_scan| stealth_tcp_vecna_scan|stealth_tcp_syn- fin_scan|udp_port_scan|ping_sweep_scan| tcp_syn_flood|udp_flood|ping_flood| icmp_unreachable_storm|smurf_broadcast_attack| smurf_storm_attack|fraggle_broadcast_attack| fraggle_storm_attack|land_attack}>] state = <{disabled|enabled}> where: signature The name of the signature. OPTIONAL state The state of the sign. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 471: Ids Threshold Clear

    ids Commands ids threshold clear Reset IDS thresholds. E-DOC-CTC-20080409-0002 v2.0...
  • Page 472: Ids Threshold List

    ids Commands ids threshold list Display IDS thresholds. E-DOC-CTC-20080409-0002 v2.0...
  • Page 473: Ids Threshold Modify

    ids Commands ids threshold modify Modify IDS threshold. SYNTAX: ids threshold modify index = <number> [window = <number>] [limit = <number>] [scaling = <{disabled|enabled}>] where: index The index of the threshold. REQUIRED window The time window of the threshold. OPTIONAL limit The limit of the threshold.
  • Page 474 igmp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 475: Igmp Commands

    igmp Commands igmp Commands igmp host config Display/Modify global IGMP see page 476 configuration. igmp host debug clear Clear IGMP statistics. see page 477 igmp host debug stats Print IGMP statistics. see page 478 igmp host flush Flush the IGMP settings. see page 479 igmp host ifconfig Configure an IGMP interface.
  • Page 476: Igmp Host Config

    igmp Commands igmp host config Display/Modify global IGMP configuration. SYNTAX: igmp host config [requirera = <{disabled|enabled}>] where: requirera Enable/Disable the router alert IP option check. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 477: Igmp Host Debug Clear

    igmp Commands igmp host debug clear Clear IGMP statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 478: Igmp Host Debug Stats

    igmp Commands igmp host debug stats Print IGMP statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 479: Igmp Host Flush

    igmp Commands igmp host flush Flush the IGMP settings. E-DOC-CTC-20080409-0002 v2.0...
  • Page 480: Igmp Host Ifconfig

    igmp Commands igmp host ifconfig Configure an IGMP interface. SYNTAX: igmp host ifconfig intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> version = <{none|IGMPv1|IGMPv2|IGMPv3}> where: intf The IP interface name. REQUIRED version The IGMP version of the IP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 481: Igmp Host Iflist

    igmp Commands igmp host iflist Show the configuration of the IGMP interfaces. SYNTAX: igmp host iflist [expand = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 482: Igmp Host List

    igmp Commands igmp host list Show the IGMP groups. SYNTAX: igmp host list [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] [expand = <{disabled|enabled}>] where: intf The IP interface name. OPTIONAL expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 483: Igmp Proxy Config

    igmp Commands igmp proxy config Configure the IGMP proxy. SYNTAX: igmp proxy config [state = <{disabled|enabled}>] [qi = <number{1-86400}>] [qri = <number{1-3175}>] [lmqi = <number{1-3175}>] [rv = <number{2-10}>] [advinter = <number{4-180}>] [initadvinter = <number{1-4}>] [initadvcount = <number{1-10}>] [requirera = <{disabled|enabled}>] [localgroup = <{disabled|enabled}>] where: state...
  • Page 484: Igmp Proxy Debug Clear

    igmp Commands igmp proxy debug clear Clear IGMP proxy statistics E-DOC-CTC-20080409-0002 v2.0...
  • Page 485: Igmp Proxy Debug Stats

    igmp Commands igmp proxy debug stats Print IGMP proxy statistics E-DOC-CTC-20080409-0002 v2.0...
  • Page 486: Igmp Proxy Debug Traceconfig

    igmp Commands igmp proxy debug traceconfig Modify IGMP proxy trace configuration SYNTAX: igmp proxy debug traceconfig [state = <{disabled|enabled}>] where: state Enable/Disable tracing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 487: Igmp Proxy Flush

    igmp Commands igmp proxy flush Flush all IGMP proxy settings and learned groups E-DOC-CTC-20080409-0002 v2.0...
  • Page 488: Igmp Proxy Grouplist

    igmp Commands igmp proxy grouplist Show the learned groups on an IGMP proxy interface. SYNTAX: igmp proxy grouplist [intf = <{lan1}>] [expand = <{disabled|enabled}>] where: intf The name of the IGMP proxy interface to be OPTIONAL listed. expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 489: Igmp Proxy Ifconfig

    igmp Commands igmp proxy ifconfig Configure an IGMP proxy interface. SYNTAX: igmp proxy ifconfig intf = <{guest1|dmz1|wan1|lan1}> [state = <{inactive|downstream|upstream}>] [version = <{IGMPv1|IGMPv2|IGMPv3}>] [fastleave = <{disabled|enabled}>] [exptrack = <{disabled|enabled}>] [mrd = <{disabled|enabled}>] where: intf The name of the IGMP proxy interface to be REQUIRED configured.
  • Page 490: Igmp Proxy Iflist

    igmp Commands igmp proxy iflist Show the configuration of an IGMP proxy interface. SYNTAX: igmp proxy iflist [expand = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 491: Igmp Proxy Mbslist

    igmp Commands igmp proxy mbslist Show the IGMP proxy membership database (merge of all learned groups). E-DOC-CTC-20080409-0002 v2.0...
  • Page 492 interface Command E-DOC-CTC-20080409-0002 v2.0...
  • Page 493: Interface Command

    interface Command interface Command Display interfaces. SYNTAX: interface list [expand = <{disabled|enabled}>] [reverse = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL reverse Reverse listing (lower layer iso. upper layer). OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 494 ip Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 495: Ip Commands

    ip Commands ip Commands ip arpadd Add an entry to the ARP cache of a see page 497 broadcast IP interface. ip arpdelete Delete an ARP entry. see page 498 ip arplist Display the ARP cache. see page 499 ip auto flush Flushes autoIP interfaces.
  • Page 496 ip Commands ip ipadd Assign an IP address to an IP see page 521 interface. ip ipconfig Modify an IP address configuration. see page 522 ip ipdelete Remove an IP address from an IP see page 523 interface. ip iplist Display all configured IP addresses.
  • Page 497: Ip Arpadd

    ip Commands ip arpadd Add an entry to the ARP cache of a broadcast IP interface. SYNTAX: ip arpadd intf = <{lan1|wan1|dmz1|guest1}> ip = <ip-range> [hwaddr = <hardware-address>] where: intf The IP interface name. REQUIRED The IP address [range] of the entry to add. REQUIRED hwaddr The hardware address (e.g.
  • Page 498: Ip Arpdelete

    ip Commands ip arpdelete Delete an ARP entry. SYNTAX: ip arpdelete intf = <{lan1|wan1|dmz1|guest1}> ip = <ip-range> [hwaddr = <hardware-address>] where: intf The IP interface name. REQUIRED The IP address [range] of the entry to delete. REQUIRED hwaddr The hardware address (e.g. Ethernet MAC OPTIONAL address) of the entry to delete.
  • Page 499: Ip Arplist

    ip Commands ip arplist Display the ARP cache. E-DOC-CTC-20080409-0002 v2.0...
  • Page 500: Ip Auto Flush

    ip Commands ip auto flush Flushes autoIP interfaces. E-DOC-CTC-20080409-0002 v2.0...
  • Page 501: Ip Auto Ifadd

    ip Commands ip auto ifadd Creates a new autoIP interface. SYNTAX: ip auto ifadd intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> [addr = <ip-address>] where: intf The name of the IP interface for which a link- REQUIRED local address has to be allocated. addr The preferred link-local IP address.
  • Page 502: Ip Auto Ifattach

    ip Commands ip auto ifattach Select and assign a link-local address to an autoIP interface. SYNTAX: ip auto ifattach intf = <> where: intf The name of the autoIP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 503: Ip Auto Ifconfig

    ip Commands ip auto ifconfig Configures an autoIP interface. SYNTAX: ip auto ifconfig intf = <> [addr = <ip-address>] [poolstart = <ip-address>] [poolend = <ip-address>] [netmask = <ip-mask(dotted or cidr)>] [claim = <number{0-65535}>] [defence = <number{0-65535}>] [probe = <number{0-65535}>] [interval = <number{1-65535}>] where: intf The name of the autoIP interface to configure.
  • Page 504: Ip Auto Ifdelete

    ip Commands ip auto ifdelete Deletes an existing autoIP interface. SYNTAX: ip auto ifdelete intf = <> where: intf The name of the autoIP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 505: Ip Auto Ifdetach

    ip Commands ip auto ifdetach Release the link-local address for the given autoIP interface. SYNTAX: ip auto ifdetach intf = <> where: intf The name of the autoIP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 506: Ip Auto Iflist

    ip Commands ip auto iflist Shows the autoIP interfaces. SYNTAX: ip auto iflist [intf = <>] where: intf The name of a autoIP interface. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 507: Ip Config

    ip Commands ip config Display/Modify global IP stack configuration. SYNTAX: ip config [forwarding = <{disabled|enabled}>] [redirects = <{disabled|enabled}>] [checkoptions = <{disabled|enabled| transparent}>] [netbroadcasts = <{disabled|enabled}>] [ttl = <number{0-255}>] [fraglimit = <number{1-1024}>] [defragmode = <{disabled|enabled}>] [addrcheck = <{off|own|static|dynamic}>] [mssclamping = <{disabled|enabled}>] [natloopback = <{disabled|enabled}>] [arpclass = <{0|1|2|3|4|5|6|7|8|9|10|11|12|13| 14|15}>]...
  • Page 508 ip Commands bitrate-window(sec) Set the window to calculate the bitrate (multiple OPTIONAL of 10) acceleration Disable/Enable IP acceleration. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 509: Ip Debug Httpprobe

    ip Commands ip debug httpprobe Send HTTP probe to measure the round trip time taken to connect and access SYNTAX: ip debug httpprobe url = <string> [version = <{1.0|1.1}>] where: The Uniform Resource location identifying the REQUIRED HTTP server. version The version of the HTTP Server.
  • Page 510: Ip Debug Sendto

    ip Commands ip debug sendto Send UDP packets. SYNTAX: ip debug sendto addr = <ip-address> [count = <number{1-1000000}>] [size = <number{0-20000}>] [interval = <number{1-1000000}>] [listen = <{disabled|enabled}>] [dffield = <{disabled|enabled}>] [srcaddr = <ip-address>] [srcport = <number{1-65535}>] dstport = <number{1-65535}> [dstintf = <{loop|ipsec0|lan1|wan1|dmz1| guest1}>] where: addr...
  • Page 511: Ip Debug Stats

    ip Commands ip debug stats Display statistics. SYNTAX: ip debug stats proto = <{ip|udp|tcp|icmp}> where: proto The protocol for which to display the statistics. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 512: Ip Debug Traceconfig

    ip Commands ip debug traceconfig Display/Modify IP stack trace configuration. SYNTAX: ip debug traceconfig [input = <{none|label|-telnet|-host|- broadcast|all}>] [forward = <{none|label|-telnet|-host|- broadcast|all}>] [output = <{none|label|-telnet|-host|- broadcast|all}>] [drop = <{none|label|-telnet|-host|-broadcast| all}>] [path = <{none|label|-telnet|-host|-broadcast| all}>] [mode = <{line|dump}>] [arp = <{none|all}>] where: input Define the packets that will be traced.
  • Page 513: Ip Flush

    ip Commands ip flush Flush all static IP parameters. Dynamic info (e.g. from PPP links) remains. E-DOC-CTC-20080409-0002 v2.0...
  • Page 514: Ip Ifadd

    ip Commands ip ifadd Create an IP interface. SYNTAX: ip ifadd intf = <string> dest = <{}> where: intf An IP interface name. REQUIRED dest An network interface name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 515: Ip Ifattach

    ip Commands ip ifattach Attach an IP interface. SYNTAX: ip ifattach intf = <{}> where: intf An IP interface name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 516: Ip Ifconfig

    ip Commands ip ifconfig Modify an IP interface configuration. SYNTAX: ip ifconfig intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> [mtu = <number{68-65535}>] [status = <{down|up}>] [hwaddr = <hardware-address>] [group = <{wan|local|lan|tunnel|dmz|guest} or number>] [linksensing = <{disabled|enabled}>] [primary = <{disabled|enabled}>] [mcastpromisc = <{disabled|enabled}>] [symmetric = <{disabled|enabled}>] where: intf An IP interface name.
  • Page 517: Ip Ifdelete

    ip Commands ip ifdelete Delete an IP interface. SYNTAX: ip ifdelete intf = <{lan1|wan1|dmz1|guest1}> where: intf An IP interface name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 518: Ip Ifdetach

    ip Commands ip ifdetach Detach an IP interface. SYNTAX: ip ifdetach intf = <{loop|lan1|wan1|dmz1|guest1}> where: intf An IP interface name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 519: Ip Iflist

    ip Commands ip iflist Display all IP interfaces. SYNTAX: ip iflist [expand = <{disabled|enabled}>] [string = <string>] [beginstring = <string>] where: expand Expanded listing. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 520: Ip Ifwait

    ip Commands ip ifwait Wait for a status change of an IP interface. SYNTAX: ip ifwait intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> [timeout = <number{1-600000}>] [adminstatus = <{down|up}>] [operstatus = <{down|up}>] [linkstatus = <{down|up}>] where: intf An IP interface name. REQUIRED timeout The timeout in seconds. OPTIONAL adminstatus The administrative state of the interface.
  • Page 521: Ip Ipadd

    ip Commands ip ipadd Assign an IP address to an IP interface. SYNTAX: ip ipadd intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> addr = <ip-address> [netmask = <ip-mask(dotted or cidr)>] [pointopoint = <ip-address>] [addroute = <{disabled|enabled}>] where: intf The IP interface name. REQUIRED addr The new IP address to add.
  • Page 522: Ip Ipconfig

    ip Commands ip ipconfig Modify an IP address configuration. SYNTAX: ip ipconfig addr = <ip-address> [preferred = <{disabled|enabled}>] [primary = <{disabled|enabled}>] where: addr The IP address to configure. REQUIRED preferred Make IP address the preferred address for that OPTIONAL subnet. primary Make IP address the primary address for the OPTIONAL...
  • Page 523: Ip Ipdelete

    ip Commands ip ipdelete Remove an IP address from an IP interface. SYNTAX: ip ipdelete addr = <ip-address> where: addr The IP address to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 524: Ip Iplist

    ip Commands ip iplist Display all configured IP addresses. E-DOC-CTC-20080409-0002 v2.0...
  • Page 525: Ip Mcast Flush

    ip Commands ip mcast flush Flush the multicast routing table. E-DOC-CTC-20080409-0002 v2.0...
  • Page 526: Ip Mcast Rtadd

    ip Commands ip mcast rtadd Add a multicast route to the multicast routing table. SYNTAX: ip mcast rtadd srcintf = <{loop|ipsec0|lan1|wan1|dmz1| guest1}> [src = <ip-address>] grp = <ip-address> dstintf = <{loop|ipsec0|lan1|wan1|dmz1| guest1}> [ttl = <number{1-255}>] [ttlincr = <{disabled|enabled}>] where: srcintf The source IP interface.
  • Page 527: Ip Mcast Rtdelete

    ip Commands ip mcast rtdelete Delete a multicast route from the multicast routing table. SYNTAX: ip mcast rtdelete srcintf = <{loop|ipsec0|lan1|wan1|dmz1| guest1}> [src = <ip-address>] grp = <ip-address> dstintf = <{loop|ipsec0|lan1|wan1|dmz1| guest1}> where: srcintf The source IP interface. REQUIRED The source IP address. OPTIONAL The multicast group IP address.
  • Page 528: Ip Mcast Rtlist

    ip Commands ip mcast rtlist Display the multicast routing table. SYNTAX: ip mcast rtlist [expand = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 529: Ip Rtadd

    ip Commands ip rtadd Add a route to the routing table. SYNTAX: ip rtadd dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [label = <{None|DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [gateway = <ip-address>] [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] [srcintf = <{loop|ipsec0|lan1|wan1|dmz1| guest1}>] [static = <{enabled|disabled}>] [status = <{up|down}>] [metric = <number{0-255}>] where: The destination IP address(es) using this route.
  • Page 530: Ip Rtconfig

    ip Commands ip rtconfig Modify a route of the routing table. SYNTAX: ip rtconfig dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [label = <{None|DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [gateway = <ip-address>] [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] [srcintf = <{loop|ipsec0|lan1|wan1|dmz1| guest1|None}>] [static = <{disabled|enabled}>] [status = <{down|up}>] [metric = <number{0-255}>] where: The destination IP address(es) using this route.
  • Page 531: Ip Rtdelete

    ip Commands ip rtdelete Delete a route from the routing table. SYNTAX: ip rtdelete dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [label = <{None|DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [gateway = <ip-address>] [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] where: The destination IP address specification of the REQUIRED route to delete.
  • Page 532: Ip Rtlist

    ip Commands ip rtlist Display the routing table. SYNTAX: ip rtlist [expand = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 533: Ipqos Commands

    ipqos Commands ipqos Commands ipqos config Modify the IP QoS configuration for a see page 534 given destination of an interface. ipqos ef config Modify an IP QoS EF timer see page 535 configuration for an interface. ipqos ef list Display the IP QoS EF timers.
  • Page 534: Ipqos Config

    ipqos Commands ipqos config Modify the IP QoS configuration for a given destination of an interface. SYNTAX: ipqos config dest = <{atm_pvc_8_35|atm_pvc_0_35| atm_pvc_0_32}> [state = <{disabled|enabled}>] [discard = <{tail|early}>] [priority = <{wfq|strict|wrr}>] [realtimerate = <number{1-100}>] [burstsize = <number{1-64}>] [weight1 = <number{1-97}>] [weight2 = <number{1-97}>] [weight3 = <number{1-97}>] [weight4 = <number{1-97}>]...
  • Page 535: Ipqos Ef Config

    ipqos Commands ipqos ef config Modify an IP QoS EF timer configuration for an interface. SYNTAX: ipqos ef config intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> [state = <{disabled|enabled}>] [timeout = <number{100-10000}>] [mtu = <number{68-65535}>] where: intf The IP interface name. REQUIRED state Enable, disable IP QoS EF timer for the interface. OPTIONAL timeout The timeout in mili seconds.
  • Page 536: Ipqos Ef List

    ipqos Commands ipqos ef list Display the IP QoS EF timers. E-DOC-CTC-20080409-0002 v2.0...
  • Page 537: Ipqos Ef Stats

    ipqos Commands ipqos ef stats Display the IP QoS EF timer statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 538: Ipqos List

    ipqos Commands ipqos list Display the IP QoS configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 539: Ipqos Meter Add

    ipqos Commands ipqos meter add Add an IP QoS meter. SYNTAX: ipqos meter add name = <string> where: name The name of the IP QoS meter. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 540: Ipqos Meter Clear

    ipqos Commands ipqos meter clear Clear the IP QoS meter statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 541: Ipqos Meter Config

    ipqos Commands ipqos meter config Modify an IP QoS meter configuration. SYNTAX: ipqos meter config name = <{}> [label = <{DSCP|Interactive|Management|Video| VoIP-RTP|VoIP-Signal|default}>] [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] [droprate = <number{0-102400}>] [markrate = <number{0-102400}>] [burst = <number{0-64}>] [dropaction = <{count|drop}>] [markaction = <{count|mark}>] [tosmarking = <{disabled|enabled}>] [tos = <number{0-255}>] [dscp = <{ef|af11|af12|af13|af21|af22|af23|...
  • Page 542 ipqos Commands classification The type of classification for marked packets. OPTIONAL class The class or offset used for classification. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 543: Ipqos Meter Delete

    ipqos Commands ipqos meter delete Delete an IP QoS meter. SYNTAX: ipqos meter delete name = <{}> where: name The name of the IP QoS meter. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 544: Ipqos Meter Flush

    ipqos Commands ipqos meter flush Flush all IP QoS meters. E-DOC-CTC-20080409-0002 v2.0...
  • Page 545: Ipqos Meter List

    ipqos Commands ipqos meter list Display the IP QoS meters. E-DOC-CTC-20080409-0002 v2.0...
  • Page 546: Ipqos Meter Start

    ipqos Commands ipqos meter start Start an IP QoS meter. SYNTAX: ipqos meter start name = <{}> where: name The name of the stopped IP QoS meter. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 547: Ipqos Meter Stats

    ipqos Commands ipqos meter stats Display the IP QoS meter statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 548: Ipqos Meter Stop

    ipqos Commands ipqos meter stop Stop an IP QoS meter. SYNTAX: ipqos meter stop name = <{}> where: name The name of the started IP QoS meter. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 549: Ipqos Queue Clear

    ipqos Commands ipqos queue clear Clear the IP QoS statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 550: Ipqos Queue Config

    ipqos Commands ipqos queue config Modify the IP QoS subqueue configuration. SYNTAX: ipqos queue config dest = <{atm_pvc_8_35|atm_pvc_0_35| atm_pvc_0_32}> queue = <number{0-5}> [propagate = <{disabled|enabled}>] [ecnmarking = <{disabled|enabled}>] [ackfiltering = <{disabled|enabled}>] [maxpackets = <number{0-250}>] [maxbytes = <number{0-128}>] [respackets = <number{0-250}>] [resbytes = <number{0-128}>] [hold = <number>] [markprob = <number{1-1000}>]...
  • Page 551: Ipqos Queue List

    ipqos Commands ipqos queue list Display the IP QoS subqueue configuration. SYNTAX: ipqos queue list [dest = <{atm_pvc_8_35|atm_pvc_0_35| atm_pvc_0_32}>] where: dest The destination of the interface. Typically, a OPTIONAL phonebook entry. E-DOC-CTC-20080409-0002 v2.0...
  • Page 552: Ipqos Queue Stats

    ipqos Commands ipqos queue stats Display the IP QoS subqueue statistics. SYNTAX: ipqos queue stats [dest = <{atm_pvc_8_35|atm_pvc_0_35| atm_pvc_0_32}>] where: dest The destination of the interface. Typically, a OPTIONAL phonebook entry. E-DOC-CTC-20080409-0002 v2.0...
  • Page 553: Ipsec Commands

    ipsec Commands ipsec Commands ipsec clear all Delete all SAs/tunnels see page 556 ipsec clear sad Delete all sadb entries see page 557 ipsec clear session Delete a session (a P1 SA and all see page 558 associated P2 SAs/tunnels) ipsec clear spd Delete all spdb entries see page 559...
  • Page 554 ipsec Commands ipsec connection start Manually start negotiation for a see page 582 connection. ipsec connection stop Manually stop a connection. see page 583 ipsec debug syslog Enable/disable VPN informational see page 584 syslog messages ipsec debug traceconfig Set trace detail see page 585 ipsec flush Flushes IPSEC configuration.
  • Page 555 ipsec Commands ipsec show config Display all configuration information see page 609 ipsec show debug Display all debug information see page 610 ipsec show sadb Display SADB contents see page 611 ipsec show sessions Display sessions see page 612 ipsec show spd Display SPD contents see page 613 ipsec show state...
  • Page 556: Ipsec Clear All

    ipsec Commands ipsec clear all Delete all SAs/tunnels E-DOC-CTC-20080409-0002 v2.0...
  • Page 557: Ipsec Clear Sad

    ipsec Commands ipsec clear sad Delete all sadb entries E-DOC-CTC-20080409-0002 v2.0...
  • Page 558: Ipsec Clear Session

    ipsec Commands ipsec clear session Delete a session (a P1 SA and all associated P2 SAs/tunnels) SYNTAX: ipsec clear session localid = <> remoteid = <> where: localid Session's local ID REQUIRED remoteid Session's remote ID REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 559: Ipsec Clear Spd

    ipsec Commands ipsec clear spd Delete all spdb entries E-DOC-CTC-20080409-0002 v2.0...
  • Page 560: Ipsec Config

    ipsec Commands ipsec config Configure global VPN settings. SYNTAX: ipsec config [state = <{disabled|enabled}>] [autoroute = <{enabled|disabled}>] [autoproxyarp = <{enabled|disabled}>] where: state Enable/disable VPN processing. OPTIONAL autoroute Enable/disable auto addition of routes in VPN OPTIONAL dialup client/server scenarios. autoproxyarp Enable/disable auto addition of Proxy-ARP OPTIONAL entries in VPN dialup client/server scenarios.
  • Page 561: Ipsec Connection Add

    ipsec Commands ipsec connection add Adds a connection profile. SYNTAX: ipsec connection add name = <string> where: name The name for this new connection profile. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 562: Ipsec Connection Advanced Add

    ipsec Commands ipsec connection advanced add Adds a connection profile. SYNTAX: ipsec connection advanced add name = <string> where: name The name for this new connection profile. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 563: Ipsec Connection Advanced Delete

    ipsec Commands ipsec connection advanced delete Deletes a connection profile. SYNTAX: ipsec connection advanced name = <> delete where: name The name of the connection profile to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 564: Ipsec Connection Advanced List

    ipsec Commands ipsec connection advanced list List connection profiles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 565: Ipsec Connection Advanced Modify

    ipsec Commands ipsec connection advanced modify Changes a connection profile. SYNTAX: ipsec connection advanced name = <> modify [peer = <>] [localnetwork = <{retrieve_from_server| black_ip|from_initiator}>] [remotenetwork = <{retrieve_from_server| allocated_virtual_ip|black_ip| from_initiator}>] [localmatch = <{exactly_|one_of_|subnet_of_| subrange_of_|black_ip}>] [remotematch = <{exactly_|one_of_|subnet_of_| subrange_of_|black_ip}>] [localselector = <>] [remoteselector = <>] [alwayson = <{disabled|enabled}>] [descr = <{AES_SHA1_TUN|AES_MD5_TUN|...
  • Page 566 ipsec Commands state Enable/disable this connection profile. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 567: Ipsec Connection Delete

    ipsec Commands ipsec connection delete Deletes a connection profile. SYNTAX: ipsec connection delete name = <> where: name The name of the connection profile to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 568: Ipsec Connection Descriptor Add

    ipsec Commands ipsec connection descriptor add Adds a phase 2 (IPSec) security descriptor. SYNTAX: ipsec connection descriptor name = <string> where: name The name for the security descriptor profile. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 569: Ipsec Connection Descriptor Delete

    ipsec Commands ipsec connection descriptor delete Deletes a phase 2 (IPSec) security descriptor. SYNTAX: ipsec connection descriptor name = <{AES_SHA1_TUN|AES_MD5_TUN| delete AES_SHA1_PFS_TUN|AES_MD5_PFS_TUN| DES_SHA1_TUN|DES_MD5_TUN|AES_SHA1_Adv_TUN| NullEnc_SHA1_TUN}> where: name Security descriptor profile to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 570: Ipsec Connection Descriptor List

    ipsec Commands ipsec connection descriptor list List phase 2 (IPSec) security descriptors. E-DOC-CTC-20080409-0002 v2.0...
  • Page 571: Ipsec Connection Descriptor Modify

    ipsec Commands ipsec connection descriptor modify Changes a phase 2 (IPSec) security descriptor. SYNTAX: ipsec connection descriptor name = <{AES_SHA1_TUN|AES_MD5_TUN| modify AES_SHA1_PFS_TUN|AES_MD5_PFS_TUN| DES_SHA1_TUN|DES_MD5_TUN|AES_SHA1_Adv_TUN| NullEnc_SHA1_TUN}> [crypto = <{DES|3DES|AES|NULL}>] [keylen = <{0|128|192|256}>] [integrity = <{HMAC-MD5|HMAC-SHA1}>] [pfs = <{disabled|enabled}>] [lifetime_secs = <number>] [lifetime_kbytes = <number>] [encapsulation = <{tunnel|transport}>] where: name...
  • Page 572: Ipsec Connection List

    ipsec Commands ipsec connection list List connection profiles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 573: Ipsec Connection Modify

    ipsec Commands ipsec connection modify Changes a connection profile. SYNTAX: ipsec connection modify name = <> [peer = <>] [localnetwork = <{retrieve_from_server| black_ip}>] [remotenetwork = <{retrieve_from_server| allocated_virtual_ip|black_ip}>] [alwayson = <{disabled|enabled}>] [descr = <{AES_SHA1_TUN|AES_MD5_TUN| AES_SHA1_PFS_TUN|AES_MD5_PFS_TUN| DES_SHA1_TUN|DES_MD5_TUN|AES_SHA1_Adv_TUN| NullEnc_SHA1_TUN}>] [options = <>] [state = <{disabled|enabled}>] where: name The name of the connection profile to change.
  • Page 574: Ipsec Connection Network Add

    ipsec Commands ipsec connection network add Adds a network. SYNTAX: ipsec connection network add name = <string> where: name The name for this new network attribute. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 575: Ipsec Connection Network Delete

    ipsec Commands ipsec connection network delete Deletes a network. SYNTAX: ipsec connection network name = <> delete where: name The name of the network attribute to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 576: Ipsec Connection Network List

    ipsec Commands ipsec connection network list List networks. E-DOC-CTC-20080409-0002 v2.0...
  • Page 577: Ipsec Connection Network Modify

    ipsec Commands ipsec connection network modify Changes a network. SYNTAX: ipsec connection network name = <> modify [type = <{address|subnet|range}>] [ip = <quoted string>] [proto = <{ah|egp|esp|ggp|gre|hmp|icmp|igmp| pup|rdp|rsvp|tcp|udp|vines|xns-idp|6to4|ipip} or number>] [port [.] = <{at-echo|at-nbp|at-rtmp|at-zis| auth|bgp|biff|bootpc|bootps|finger|ftp|ftp- data|gopher|h323|httpproxy|ike|ils|imap2| imap3|ingres-net|ipcserver|ipx|irc-o|irc-u| kerberos|ldap|login|netbios-dgm|netbios-ns| netbios-ssn|netwall|netware-ip|new-rwho|nfds| nicname|nntp|ntalk|ntp|pcmail-srv|pop2|pop3| printer|qotd|realaudio|rip|rtelnet|rtsp|sip| smtp|snmp|snmptrap|snpp|sntp|sql*net|sql- net|sqlserv|sunrpc|syslog|systat|talk|...}...
  • Page 578: Ipsec Connection Options Add

    ipsec Commands ipsec connection options add Adds a connection options group. SYNTAX: ipsec connection options add name = <string> where: name The name for this new connection options REQUIRED group. E-DOC-CTC-20080409-0002 v2.0...
  • Page 579: Ipsec Connection Options Delete

    ipsec Commands ipsec connection options delete Deletes a connection options group. SYNTAX: ipsec connection options name = <> delete where: name The name of the connection options group to REQUIRED delete. E-DOC-CTC-20080409-0002 v2.0...
  • Page 580: Ipsec Connection Options List

    ipsec Commands ipsec connection options list List connection options groups. E-DOC-CTC-20080409-0002 v2.0...
  • Page 581: Ipsec Connection Options Modify

    ipsec Commands ipsec connection options modify Changes a connection options group. SYNTAX: ipsec connection options name = <> modify [virtual_if = <string>] [force_df = <{pass|force_set|force_clear}>] [min_mtu = <number{0-1432}>] [add_route = <{enabled|disabled}>] [routed = <{enabled|disabled}>] where: name The name of the connection options group to REQUIRED change.
  • Page 582: Ipsec Connection Start

    ipsec Commands ipsec connection start Manually start negotiation for a connection. SYNTAX: ipsec connection start name = <> where: name The name of the connection to start. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 583: Ipsec Connection Stop

    ipsec Commands ipsec connection stop Manually stop a connection. SYNTAX: ipsec connection stop name = <> where: name The name of the connection to stop. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 584: Ipsec Debug Syslog

    ipsec Commands ipsec debug syslog Enable/disable VPN informational syslog messages SYNTAX: ipsec debug syslog [state = <{enabled|disabled}>] where: state Enable/disable VPN informational syslog OPTIONAL messages. E-DOC-CTC-20080409-0002 v2.0...
  • Page 585: Ipsec Debug Traceconfig

    ipsec Commands ipsec debug traceconfig Set trace detail SYNTAX: ipsec debug traceconfig [detail = <{none|low|medium|high}>] where: detail Debug detail OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 586: Ipsec Flush

    ipsec Commands ipsec flush Flushes IPSEC configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 587: Ipsec Peer Add

    ipsec Commands ipsec peer add Adds a peer gateway profile. SYNTAX: ipsec peer add name = <string> where: name The name for this new peer profile. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 588: Ipsec Peer Auth Add

    ipsec Commands ipsec peer auth add Adds an authentication group. SYNTAX: ipsec peer auth add name = <string> where: name The name for this new authentication attribute. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 589: Ipsec Peer Auth Delete

    ipsec Commands ipsec peer auth delete Deletes an authentication group. SYNTAX: ipsec peer auth delete name = <> where: name The name of the authentication attribute to REQUIRED delete. E-DOC-CTC-20080409-0002 v2.0...
  • Page 590: Ipsec Peer Auth List

    ipsec Commands ipsec peer auth list List authentication groups. E-DOC-CTC-20080409-0002 v2.0...
  • Page 591: Ipsec Peer Auth Modify

    ipsec Commands ipsec peer auth modify Changes an authentication group. SYNTAX: ipsec peer auth modify name = <> [type = <{preshared|cert}>] [secret = <password>] where: name The name of the authentication attribute to REQUIRED change. type Authentication method. OPTIONAL secret For secret based authentication, the secret.
  • Page 592: Ipsec Peer Delete

    ipsec Commands ipsec peer delete Deletes a peer gateway profile. SYNTAX: ipsec peer delete name = <> where: name The name of the peer profile to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 593: Ipsec Peer Descriptor Add

    ipsec Commands ipsec peer descriptor add Adds a phase 1 (IKE) security descriptor. SYNTAX: ipsec peer descriptor add name = <string> where: name The name for the security descriptor. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 594: Ipsec Peer Descriptor Delete

    ipsec Commands ipsec peer descriptor delete Deletes a phase 1 (IKE) security descriptor. SYNTAX: ipsec peer descriptor delete name = <{AES_SHA1|AES_MD5|3DES_SHA1|3DES_MD5| DES_SHA1|DES_MD5|AES_SHA1_Adv|3DES_SHA1_Adv}> where: name Security descriptor profile to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 595: Ipsec Peer Descriptor List

    ipsec Commands ipsec peer descriptor list List phase 1 (IKE) security descriptors. E-DOC-CTC-20080409-0002 v2.0...
  • Page 596: Ipsec Peer Descriptor Modify

    ipsec Commands ipsec peer descriptor modify Changes a phase 1 (IKE) security descriptor. SYNTAX: ipsec peer descriptor modify name = <{AES_SHA1|AES_MD5|3DES_SHA1|3DES_MD5| DES_SHA1|DES_MD5|AES_SHA1_Adv|3DES_SHA1_Adv}> [crypto = <{DES|3DES|AES}>] [keylen = <{0|128|192|256}>] [integrity = <{MD5|SHA1}>] [group = <{MODP768|MODP1024|MODP1536}>] [lifetime_secs = <number>] where: name Security descriptor profile to change. REQUIRED crypto Specify the crypto algorithm to use.
  • Page 597: Ipsec Peer List

    ipsec Commands ipsec peer list List peer gateway profiles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 598: Ipsec Peer Modify

    ipsec Commands ipsec peer modify Changes a peer gateway profile. SYNTAX: ipsec peer modify name = <> [remoteaddr = <IP address or hostname>] [backupaddr = <IP address or hostname>] [exchmode = <{main|aggressive}>] [localid = <Identity : format(type)value; type being >] [remoteid = <Identity : format(type)value;...
  • Page 599: Ipsec Peer Options Add

    ipsec Commands ipsec peer options add Adds a peer options group. SYNTAX: ipsec peer options add name = <string> where: name The name for this new peer options group. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 600: Ipsec Peer Options Delete

    ipsec Commands ipsec peer options delete Deletes a peer options group. SYNTAX: ipsec peer options delete name = <> where: name The name of the peer options group to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 601: Ipsec Peer Options List

    ipsec Commands ipsec peer options list List peer options groups. E-DOC-CTC-20080409-0002 v2.0...
  • Page 602: Ipsec Peer Options Modify

    ipsec Commands ipsec peer options modify Changes a peer options group. SYNTAX: ipsec peer options modify name = <> [localaddr = <ip-address>] [nat-t = <{enabled|disabled}>] [dpd = <{disabled|enabled}>] [dpd_idle_period = <number{10-3600}>] [dpd_xmits = <number{1-5}>] [dpd_timeout = <number{5-120}>] [inactivity = <number>] [nat-t_keepalive = <number>] where: name...
  • Page 603: Ipsec Peer Subpeer Add

    ipsec Commands ipsec peer subpeer add Adds a subpeer gateway profile. SYNTAX: ipsec peer subpeer add name = <string> where: name The name for this new subpeer profile. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 604: Ipsec Peer Subpeer Delete

    ipsec Commands ipsec peer subpeer delete Deletes a subpeer gateway profile. SYNTAX: ipsec peer subpeer delete name = <> where: name The name of the subpeer profile to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 605: Ipsec Peer Subpeer List

    ipsec Commands ipsec peer subpeer list List subpeer profiles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 606: Ipsec Peer Subpeer Modify

    ipsec Commands ipsec peer subpeer modify Configure a subpeer gateway profile. SYNTAX: ipsec peer subpeer modify name = <> [localid = <Identity : format(type)value; type being >] [remoteid = <Identity : format(type)value; type being >] [phyif = <{lan1|wan1|dmz1|guest1|any}>] [server = <>] where: name The name of the peer profile to change.
  • Page 607: Ipsec Show All

    ipsec Commands ipsec show all Display all information E-DOC-CTC-20080409-0002 v2.0...
  • Page 608: Ipsec Show Cli

    ipsec Commands ipsec show cli Display all information in CLI format E-DOC-CTC-20080409-0002 v2.0...
  • Page 609: Ipsec Show Config

    ipsec Commands ipsec show config Display all configuration information E-DOC-CTC-20080409-0002 v2.0...
  • Page 610: Ipsec Show Debug

    ipsec Commands ipsec show debug Display all debug information E-DOC-CTC-20080409-0002 v2.0...
  • Page 611: Ipsec Show Sadb

    ipsec Commands ipsec show sadb Display SADB contents E-DOC-CTC-20080409-0002 v2.0...
  • Page 612: Ipsec Show Sessions

    ipsec Commands ipsec show sessions Display sessions SYNTAX: ipsec show sessions [expand = <{disabled|enabled}>] where: expand Expand enabled/disabled. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 613: Ipsec Show Spd

    ipsec Commands ipsec show spd Display SPD contents E-DOC-CTC-20080409-0002 v2.0...
  • Page 614: Ipsec Show State

    ipsec Commands ipsec show state Display all dynamic states information E-DOC-CTC-20080409-0002 v2.0...
  • Page 615: Ipsec Show Stats

    ipsec Commands ipsec show stats Display statistics (SNMP) E-DOC-CTC-20080409-0002 v2.0...
  • Page 616: Label Commands

    label Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 617: Label Commands

    label Commands label Commands label add Add a label. see page 618 label chain add Add a chain. see page 619 label chain delete Delete a chain. see page 620 label chain flush Flush all chains. see page 621 label chain list Display a list of chains.
  • Page 618: Label Add

    label Commands label add Add a label. SYNTAX: label add name = <string> where: name The name of a label to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 619: Label Chain Add

    label Commands label chain add Add a chain. SYNTAX: label chain add chain = <string> where: chain The name of the chain to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 620: Label Chain Delete

    label Commands label chain delete Delete a chain. SYNTAX: label chain delete chain = <chain name> where: chain The name of the chain to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 621: Label Chain Flush

    label Commands label chain flush Flush all chains. E-DOC-CTC-20080409-0002 v2.0...
  • Page 622: Label Chain List

    label Commands label chain list Display a list of chains. SYNTAX: label chain list [format = <{pretty|cli}>] where: format The format of the chain list. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 623: Label Delete

    label Commands label delete Delete a label. SYNTAX: label delete name = <{DSCP|Interactive|Management|Video| VoIP-RTP|VoIP-Signal|default}> where: name The name of a label. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 624: Label Flush

    label Commands label flush Flush all label. E-DOC-CTC-20080409-0002 v2.0...
  • Page 625: Label List

    label Commands label list Display the labels. SYNTAX: label list [name = <{DSCP|Interactive|Management|Video| VoIP-RTP|VoIP-Signal|default}>] where: name The name of a label. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 626: Label Modify

    label Commands label modify Modify a label configuration. SYNTAX: label modify name = <{DSCP|Interactive|Management|Video| VoIP-RTP|VoIP-Signal|default}> [classification = <{ignore|overwrite| increase}>] [defclass = <{0|1|2|3|4|5|6|7|8|9|10|11|12|13| 14|15|dscp|default}>] [ackclass = <{0|1|2|3|4|5|6|7|8|9|10|11|12|13| 14|15|prioritize|defclass}>] [bidirectional = <{disabled|enabled}>] [inheritance = <{disabled|enabled}>] [tosmarking = <{disabled|enabled}>] [tos = <number{0-255}>] [dscp = <{ef|af11|af12|af13|af21|af22|af23| af31|af32|af33|af41|af42|af43|cs0|cs1|cs2|cs3| cs4|cs5|cs6|cs7} or number>] [precedence = <{routine|priority|immediate|...
  • Page 627: Label Rule Add

    label Commands label rule add Add a rule. SYNTAX: label rule add chain = <chain name> [index = <number>] [name = <string>] [clink = <chain name>] [srcintf [!] = <{wan|local|lan|tunnel|dmz| guest}>] [srcip [!] = <{private|ssdp_ip|mdap_ip}>] [dstip [!] = <{private|ssdp_ip|mdap_ip}>] [serv [!] = <{icmp|igmp|ftp|telnet|http| httpproxy|https|RPC|NBT|SMB|imap|esp|ah| ike|DiffServ|sip|h323|dhcp|rtsp|ssdp_serv| mdap_serv|syslog}>]...
  • Page 628: Label Rule Debug Clear

    label Commands label rule debug clear Clear rule statistics. SYNTAX: label rule debug clear [chain = <chain name>] [index = <number>] where: chain The name of the chain. OPTIONAL index The index of the rule in the chain. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 629: Label Rule Debug Stats

    label Commands label rule debug stats Display rule statistics. SYNTAX: label rule debug stats [chain = <chain name>] [index = <number>] where: chain The name of the chain. OPTIONAL index The index of the rule in the chain. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 630: Label Rule Debug Traceconfig

    label Commands label rule debug traceconfig Display/Modify rule trace configuration. SYNTAX: label rule debug traceconfig [state = <{disabled|enabled}>] where: state Disable/Enable rule traces. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 631: Label Rule Delete

    label Commands label rule delete Delete a rule. SYNTAX: label rule delete chain = <chain name> index = <number> where: chain The name of the chain in which to delete the REQUIRED rule. index The number of the rule in the chain. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 632: Label Rule Flush

    label Commands label rule flush Flush all rules. SYNTAX: label rule flush [chain = <chain name>] where: chain The name of the chain to flush. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 633: Label Rule List

    label Commands label rule list Display a list of rules. SYNTAX: label rule list [chain = <chain name>] [format = <{pretty|cli}>] [string = <string>] [beginstring = <string>] where: chain The name of the chain to list the rules of. OPTIONAL format The format of the rule list.
  • Page 634: Label Rule Modify

    label Commands label rule modify Modify a rule. SYNTAX: label rule modify chain = <chain name> [index = <number>] [newindex = <number>] [name = <string>] [clink = <chain name>] [[!]srcintf] = <chain name>] [[!]srcip] = <chain name>] [[!]dstip] = <chain name>] [[!]serv] = <chain name>] [log = <{disabled|enabled}>] [state = <{disabled|enabled}>]...
  • Page 635: Language Commands

    language Commands language Commands language config Select a language. see page 636 language delete Delete one or all language archives. see page 637 language list List available languages archives. see page 638 E-DOC-CTC-20080409-0002 v2.0...
  • Page 636: Language Config

    language Commands language config Select a language. SYNTAX: language config [language = <string>] [complete = <{yes|no}>] where: language Language code : OSI language code (2 chars) for OPTIONAL language (en=English) complete Enable translation for expert pages. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 637: Language Delete

    language Commands language delete Delete one or all language archives. SYNTAX: language delete [file = <string>] [all = <{yes|no}>] where: file Filename : name of language archive to delete OPTIONAL Deletes all languages archives. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 638: Language List

    language Commands language list List available languages archives. E-DOC-CTC-20080409-0002 v2.0...
  • Page 639: Mbus Commands

    mbus Commands mbus Commands mbus client authenticate Authenticate a session see page 640 mbus client config Modify client parameters see page 641 mbus client exec Execute mbus command see page 642 mbus client register Register cli client to mbus see page 644 mbus client termsession Terminate a session see page 645...
  • Page 640: Mbus Client Authenticate

    mbus Commands mbus client authenticate Authenticate a session SYNTAX: mbus client authenticate type = <{cleartext|md5|crypt|digest| defaultuser}> [username = <quoted string>] [password = <password>] [addr = <ip-address>] where: type Authentication type REQUIRED username User name OPTIONAL password password OPTIONAL addr IP address of peer who inititated the OPTIONAL authentication request.
  • Page 641: Mbus Client Config

    mbus Commands mbus client config Modify client parameters SYNTAX: mbus client config [writelock = <{enabled|disabled}>] [wlgetimeout = <number>] [wlidletimeout = <number>] [path = <quoted string>] [type = <{indexpath|keystrpath}>] [id = <number>] where: writelock Get/release mbus writelock OPTIONAL wlgetimeout Writelock get timeout in seconds (forever=-1, OPTIONAL *default=nowait=0) wlidletimeout...
  • Page 642: Mbus Client Exec

    mbus Commands mbus client exec Execute mbus command SYNTAX: mbus client exec cmd = <{getpath|getcount|getnames|getvalues| setvalue|addobject|deleteobject|subscribe| unsubscribe|getaccessrights|setaccessrights}> [param = <quoted string>] [value = <quoted string>] [gettype = <{parameter|path|object}>] [depth = <number>] [processcmd = <{enabled|disabled}>] [onerrorrollback = <{enabled|disabled}>] [usecallback = <{enabled|disabled}>] [filter = <quoted string>] [path = <quoted string>] [flags = <[+/-]flag[+/-flag...]{indexpath...
  • Page 643 mbus Commands usecallback Use result callback function (default=enabled) OPTIONAL filter The filter should be formatted as '(operator OPTIONAL operand operand)'. Possible operators are ==, ! =, <, <=, >, >=, and, or, not. The left operand is a parameter name. The right operand is a parameter value.
  • Page 644: Mbus Client Register

    mbus Commands mbus client register Register cli client to mbus SYNTAX: mbus client register [dmtree = <{igd|atomic|system}>] [type = <{indexpath|keystrpath}>] [dlink = <{local_ipc|remote_inet}>] [mbusd_addr = <quoted string>] [refresolv = <{disabled|enabled}>] [state_events = <{disabled|enabled}>] where: dmtree Select mbusd datamodel tree. OPTIONAL type Path type (default = indexpath) OPTIONAL...
  • Page 645: Mbus Client Termsession

    mbus Commands mbus client termsession Terminate a session SYNTAX: mbus client termsession id = <number> where: id of session to terminate REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 646: Mbus Client Unregister

    mbus Commands mbus client unregister Unregister cli client from mbus E-DOC-CTC-20080409-0002 v2.0...
  • Page 647: Mbus Debug Clearstats

    mbus Commands mbus debug clearstats Reset mbus statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 648: Mbus Debug Loadobjects

    mbus Commands mbus debug loadobjects Load/sync object instances from plugins SYNTAX: mbus debug loadobjects [dmtree = <{igd|atomic|system}>] [path = <quoted string>] [type = <{indexpath|keystrpath}>] [flush = <{disabled|enabled}>] where: dmtree Select mbusd datamodel tree. OPTIONAL path Fully qualified mbus path OPTIONAL type Path type (default = indexpath OPTIONAL...
  • Page 649: Mbus Debug Stats

    mbus Commands mbus debug stats Display mbus statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 650: Mbus Debug Traceconfig

    mbus Commands mbus debug traceconfig Modify mbus trace settings. SYNTAX: mbus debug traceconfig [level = <number{0-4}>] where: level Select mbus trace level (0-4). OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 651: Mbus Debug Unloadobjects

    mbus Commands mbus debug unloadobjects Unload object instances SYNTAX: mbus debug unloadobjects [dmtree = <{igd|atomic|system}>] [path = <quoted string>] [type = <{indexpath|keystrpath}>] [flush = <{disabled|enabled}>] where: dmtree Select mbusd datamodel tree. OPTIONAL path Fully qualified mbus path OPTIONAL type Path type OPTIONAL flush Flush objects before load (default=disabled)
  • Page 652: Mbus Listcontexts

    mbus Commands mbus listcontexts Display the context instances SYNTAX: mbus listcontexts [dmtree = <{igd|atomic|system}>] [expand = <{disabled|enabled}>] where: dmtree Select mbusd datamodel tree. OPTIONAL expand Details enabled/disabled OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 653: Mbus Listenums

    mbus Commands mbus listenums Display the registered enumtypes SYNTAX: mbus listenums [dmtree = <{igd|atomic|system}>] [name = <quoted string>] [expand = <{disabled|enabled}>] where: dmtree Select mbusd datamodel tree. OPTIONAL name Filter enumtypes by (part of) the name OPTIONAL expand Details enabled/disabled OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 654: Mbus Listobjects

    mbus Commands mbus listobjects Display the object instances SYNTAX: mbus listobjects [dmtree = <{igd|atomic|system}>] [path = <quoted string>] [type = <{indexpath|keystrpath}>] [output = <{tree|list}>] [showflags = <{disabled|enabled}>] where: dmtree Select mbusd datamodel tree. OPTIONAL path Fully qualified mbus path to list. OPTIONAL type Path type (default = indexpath)
  • Page 655: Mbus Listsubscriptions

    mbus Commands mbus listsubscriptions Display the subscription instances SYNTAX: mbus listsubscriptions [dmtree = <{igd|atomic|system}>] where: dmtree Select mbusd datamodel tree. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 656: Mbus Listtypes

    mbus Commands mbus listtypes Display the registered objecttypes SYNTAX: mbus listtypes [dmtree = <{igd|atomic|system}>] [path = <quoted string>] [expand = <{disabled|enabled}>] where: dmtree Select mbusd datamodel tree. OPTIONAL path Fully qualified mbus path to list. OPTIONAL expand Details enabled/disabled OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 657: Mbus Pluginevent

    mbus Commands mbus pluginevent Simulate event from plugin SYNTAX: mbus pluginevent ctxid = <number{0--2}> type = <{addobj|delobj|updobj}> path = <quoted string> [name = <quoted string>] [value = <quoted string>] [orivalue = <quoted string>] where: ctxid Plugin context id REQUIRED type Event type REQUIRED path...
  • Page 658: Mbus Unregister

    mbus Commands mbus unregister Unregister a client/plugin context SYNTAX: mbus unregister id = <number> where: Select message-based client/plugin context id. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 659: Memm Commands

    memm Commands memm Commands memm debug clearstats Clear time statistics. see page 660 memm debug lock stats Display lock statistics. see page 661 memm debug lock traceconfig Modify lock trace settings. see page 662 memm debug stats Display memm time statistics. see page 663 memm debug tag (Un)tag memory manager objects.
  • Page 660: Memm Debug Clearstats

    memm Commands memm debug clearstats Clear time statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 661: Memm Debug Lock Stats

    memm Commands memm debug lock stats Display lock statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 662: Memm Debug Lock Traceconfig

    memm Commands memm debug lock traceconfig Modify lock trace settings. SYNTAX: memm debug lock traceconfig [level = <number{0-4}>] [name = <string>] where: level Select memm trace level (0-4). OPTIONAL name application name filter for lock traces (empty OPTIONAL displays all lock traces) E-DOC-CTC-20080409-0002 v2.0...
  • Page 663: Memm Debug Stats

    memm Commands memm debug stats Display memm time statistics. SYNTAX: memm debug stats [name = <quoted string>] where: name Select typename(s) to list (supports partial OPTIONAL typename) E-DOC-CTC-20080409-0002 v2.0...
  • Page 664: Memm Debug Tag

    memm Commands memm debug tag (Un)tag memory manager objects. SYNTAX: memm debug tag [name = <quoted string>] [tag = <{enabled|disabled}>] where: name Select typename(s) to list (supports partial OPTIONAL typename) Set (or unset) the tag OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 665: Memm Debug Traceconfig

    memm Commands memm debug traceconfig Modify memm trace settings. SYNTAX: memm debug traceconfig [level = <number{0-4}>] where: level Select memm trace level (0-4). OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 666: Memm Listobjects

    memm Commands memm listobjects Display objects. SYNTAX: memm listobjects [name = <quoted string>] [tagged = <{no|yes}>] [hidedeldynstr = <{no|yes}>] where: name Select typename(s) to list (supports partial OPTIONAL typename) tagged Show only tagged (yes) or untagged (no) objects OPTIONAL hidedeldynstr Hide (yes) / show (no) deleted dynstrings OPTIONAL (default = show)
  • Page 667: Memm Stats

    memm Commands memm stats Display memm statistics. SYNTAX: memm stats [name = <quoted string>] where: name Select typename(s) to list (supports partial OPTIONAL typename) E-DOC-CTC-20080409-0002 v2.0...
  • Page 668 menu Command E-DOC-CTC-20080409-0002 v2.0...
  • Page 669: Menu Command

    menu Command menu Command Displays menu E-DOC-CTC-20080409-0002 v2.0...
  • Page 670: Mlp Commands

    mlp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 671: Mlp Commands

    mlp Commands mlp Commands mlp debug export Export all scores. see page 672 mlp debug stats Display mlp statisctics. see page 673 mlp debug traceconfig Modify mlp trace settings. see page 674 mlp flush Flush all mlp structures. see page 675 mlp import Import all scores.
  • Page 672: Mlp Debug Export

    mlp Commands mlp debug export Export all scores. E-DOC-CTC-20080409-0002 v2.0...
  • Page 673: Mlp Debug Stats

    mlp Commands mlp debug stats Display mlp statisctics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 674: Mlp Debug Traceconfig

    mlp Commands mlp debug traceconfig Modify mlp trace settings. SYNTAX: mlp debug traceconfig [trace = <{disabled|enabled|full}>] where: trace Select mlp trace level. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 675: Mlp Flush

    mlp Commands mlp flush Flush all mlp structures. E-DOC-CTC-20080409-0002 v2.0...
  • Page 676: Mlp Import

    mlp Commands mlp import Import all scores. SYNTAX: mlp import [trace = <{disabled|enabled|full}>] where: trace Select import trace level. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 677: Mlp Privilege Add

    mlp Commands mlp privilege add Add a privilege. SYNTAX: mlp privilege add name = <string> type = <{access|service}> [descr = <quoted string>] where: name Privilege name. REQUIRED type Privilege type. REQUIRED descr Privilege description. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 678: Mlp Privilege Addzone

    mlp Commands mlp privilege addzone Add a zone to a privilege. SYNTAX: mlp privilege addzone name = <> zone = <{Read/LAN/WAN/Local|Write/LAN/WAN/ Local|r_lan|r_wan|r_fs_view|r_certificates| r_remote_mgnt|r_local|r_qos|w_lan|w_wan| w_fs_passive|w_rtg|w_fwdg|w_nat|w_frwl_norm| w_frwl_adv|w_frwl_ss|w_ipsec|w_certificates| w_remote_mgnt|w_local|w_qos|SND_lan|SND_wan| SND_local|AND_lan|AND_wan|AND_frwl|AND_local| User_Admin|MLP_Admin|secure_ipsec_term| secure_BR|CLI|CGI|FTP|MDAP|secure_reset| GUI_advanced|mbus|unsecure_connection| Sensitve_file|...}> where: name Privilege name. REQUIRED zone Zone name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 679: Mlp Privilege Config

    mlp Commands mlp privilege config Modify the privilege. SYNTAX: mlp privilege config name = <> [descr = <quoted string>] [score = <{hex-word}[:{hex-word}] ex: 'a12:c30f'>] where: name Select the privilege by name. REQUIRED descr Set the description. OPTIONAL score Set the score. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 680: Mlp Privilege Delete

    mlp Commands mlp privilege delete Delete a privilege. SYNTAX: mlp privilege delete name = <> where: name Privilege name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 681: Mlp Privilege List

    mlp Commands mlp privilege list Display the privileges. SYNTAX: mlp privilege list [name = <>] [type = <{access|service}>] [verbose = <{minimal|medium|all}>] where: name Privilege name. OPTIONAL type Privilege type. OPTIONAL verbose Limit the output list. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 682: Mlp Privilege Removezone

    mlp Commands mlp privilege removezone Remove a zone from a privilege. SYNTAX: mlp privilege removezone name = <> zone = <{Read/LAN/WAN/Local|Write/LAN/WAN/ Local|r_lan|r_wan|r_fs_view|r_certificates| r_remote_mgnt|r_local|r_qos|w_lan|w_wan| w_fs_passive|w_rtg|w_fwdg|w_nat|w_frwl_norm| w_frwl_adv|w_frwl_ss|w_ipsec|w_certificates| w_remote_mgnt|w_local|w_qos|SND_lan|SND_wan| SND_local|AND_lan|AND_wan|AND_frwl|AND_local| User_Admin|MLP_Admin|secure_ipsec_term| secure_BR|CLI|CGI|FTP|MDAP|secure_reset| GUI_advanced|mbus|unsecure_connection| Sensitve_file|...}> where: name Privilege name. REQUIRED zone Zone name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 683: Mlp Role Add

    mlp Commands mlp role add Add a role. SYNTAX: mlp role add name = <string> parent = <> [descr = <quoted string>] where: name Role name. REQUIRED parent Parent role name. REQUIRED descr Role description. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 684: Mlp Role Addpriv

    mlp Commands mlp role addpriv Add a privilege. SYNTAX: mlp role addpriv name = <{Administrator|LAN_Admin|PowerUser| root|SuperUser|TechnicalSupport|User| WAN_Admin}> access = <{anyaccess|AP1|AP2|AP3|AP4|AP5|AP6| AP7|AP8|AP9}> service = <{anyservice|SP1|SP10|SP11|SP12| SP13|SP14|SP15|SP16|SP17|SP18|SP19|SP2|SP3| SP4|SP5|SP6|SP7|SP8|SP9}> where: name Role name. REQUIRED access Access privilege to add. REQUIRED service Privilege name to add. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 685: Mlp Role Config

    mlp Commands mlp role config Modify the role. SYNTAX: mlp role config name = <> [parent = <>] [descr = <quoted string>] where: name Role name. REQUIRED parent Parent role name. OPTIONAL descr Role description. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 686: Mlp Role Delete

    mlp Commands mlp role delete Delete a role. SYNTAX: mlp role delete name = <> where: name Role name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 687: Mlp Role List

    mlp Commands mlp role list Display the roles. SYNTAX: mlp role list [name = <>] [verbose = <{minimal|medium|all}>] where: name Role name. OPTIONAL verbose Limit the output list. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 688: Mlp Role Removepriv

    mlp Commands mlp role removepriv Remove a privilege. SYNTAX: mlp role removepriv name = <> access = <> [service = <>] where: name Role name. REQUIRED access Access privilege to delete. REQUIRED service Privilege name to delete. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 689: Nat Commands

    nat Commands nat Commands nat config Modify global NAT configuration. see page 690 nat flush Flush current NAT configuration. see page 691 nat ifconfig Modify address translation on an IP see page 692 interface. nat iflist Display all interfaces. see page 693 nat mapadd Add an address mapping to a nat see page 694...
  • Page 690: Nat Config

    nat Commands nat config Modify global NAT configuration. SYNTAX: nat config [trace = <{disabled|enabled}>] where: trace Enable/disable traces. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 691: Nat Flush

    nat Commands nat flush Flush current NAT configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 692: Nat Ifconfig

    nat Commands nat ifconfig Modify address translation on an IP interface. SYNTAX: nat ifconfig intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> translation = <{disabled|enabled|transparent}> where: intf The IP interface name. REQUIRED translation Disabled, enabled or tranparent address REQUIRED translation. E-DOC-CTC-20080409-0002 v2.0...
  • Page 693: Nat Iflist

    nat Commands nat iflist Display all interfaces. E-DOC-CTC-20080409-0002 v2.0...
  • Page 694: Nat Mapadd

    nat Commands nat mapadd Add an address mapping to a nat enabled interface. SYNTAX: nat mapadd intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> [type = <{napt|nat}>] [outside_addr = <ip-range>] [inside_addr = <ip-range>] [access_list = <ip-range>] [foreign_addr = <ip-range>] [protocol = <{ah|egp|esp|ggp|gre|hmp|icmp| igmp|pup|rdp|rsvp|tcp|udp|vines|xns-idp|6to4| ipip} or number>] [outside_port = <port-range>] [inside_port = <port-range>] [mode = <{auto|inbound|outbound}>]...
  • Page 695: Nat Mapdelete

    nat Commands nat mapdelete Delete an address mapping from a nat enabled interface. SYNTAX: nat mapdelete intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> index = <number> where: intf The IP interface name. REQUIRED index The map index as listed by ':nat maplist'. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 696: Nat Maplist

    nat Commands nat maplist Display address mappings. SYNTAX: nat maplist [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] [expand = <{disabled|enabled}>] [string = <string>] [beginstring = <string>] where: intf The IP interface name. OPTIONAL expand Expanded listing. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 697: Nat Tmpladd

    nat Commands nat tmpladd Add an address mapping template. SYNTAX: nat tmpladd [intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}>] [group = <{wan|local|lan|tunnel|dmz|guest} or number>] [timeout = <number{0-65535}>] [type = <{napt|nat}>] outside_addr = <ip-range> [inside_addr = <ip-range>] [access_list = <ip-range>] [foreign_addr = <ip-range>] [protocol = <{ah|egp|esp|ggp|gre|hmp|icmp| igmp|pup|rdp|rsvp|tcp|udp|vines|xns-idp|6to4| ipip} or number>] [outside_port = <port-range>]...
  • Page 698 nat Commands weight The weight to be used for the template OPTIONAL instance(s). E-DOC-CTC-20080409-0002 v2.0...
  • Page 699: Nat Tmpldelete

    nat Commands nat tmpldelete Delete an address mapping template. SYNTAX: nat tmpldelete index = <number> where: index The template index as listed by ':nat tmpllist'. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 700: Nat Tmplinst

    nat Commands nat tmplinst Instantiate address mapping templates for a given dynamic address. SYNTAX: nat tmplinst intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> addr_index = <ip-address> dynamic_addr = <ip-address> where: intf The IP interface name. REQUIRED addr_index The outside IP address index/key to instantiate REQUIRED for.
  • Page 701: Nat Tmpllist

    nat Commands nat tmpllist Display address mapping templates. SYNTAX: nat tmpllist [expand = <{disabled|enabled}>] where: expand Expanded listing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 702 password Command E-DOC-CTC-20080409-0002 v2.0...
  • Page 703: Password Command

    password Command password Command Encrypt a clear text password using an internal device-independent key. SYNTAX: password encrypt string = <string> where: string Clear text password. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 704 ping Command E-DOC-CTC-20080409-0002 v2.0...
  • Page 705: Ping Command

    ping Command ping Command Send ICMP ECHO_REQUEST packets. SYNTAX: ping proto = <{ip|atm}> addr = <ip-address> dest = <{atm_pvc_8_35|atm_pvc_0_35| atm_pvc_0_32}> [count = <number{0-1000000}>] [size = <number{28-20028}>] [interval(ms) = <number{100-1000000}>] [DF-bit = <{disabled|enabled}>] [srcaddr = <ip-address>] where: proto The interface type to be used. REQUIRED addr The destination IP address.
  • Page 706 pki Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 707: Pki Commands

    pki Commands pki Commands pki cep cancel Cancel current CEP request. see page 708 pki cep config CEP configuration. see page 709 pki cep list Show outstanding request. see page 711 pki cep request Generates an CEP request. see page 712 pki cep resubmit Resubmit current request and/or see page 713...
  • Page 708: Pki Cep Cancel

    pki Commands pki cep cancel Cancel current CEP request. E-DOC-CTC-20080409-0002 v2.0...
  • Page 709: Pki Cep Config

    pki Commands pki cep config CEP configuration. SYNTAX: pki cep config [url = <quoted string>] [ca_id = <quoted string>] [md5 = <quoted string>] [proxy_url = <quoted string>] [subjectdn = <Distinguished Name (RFC1779): e.g. cn=xxx, c=be>] [keylen = <number>] [password = <password>] [email = <quoted string>] [dnsname = <quoted string>] [ipaddress = <ip-address>]...
  • Page 710 pki Commands chktid Enable/Disable transaction Id checking. ('Disable' OPTIONAL for Baltimore CA). keyusage The key usage extension. Format : [yes/no], OPTIONAL [digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment,keyAg ment,keyCertSign,cRLSign,encipherOnly,decipherOnly] E-DOC-CTC-20080409-0002 v2.0...
  • Page 711: Pki Cep List

    pki Commands pki cep list Show outstanding request. E-DOC-CTC-20080409-0002 v2.0...
  • Page 712: Pki Cep Request

    pki Commands pki cep request Generates an CEP request. SYNTAX: pki cep request [force = <{enabled|disabled}>] where: force Ignore current cert. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 713: Pki Cep Resubmit

    pki Commands pki cep resubmit Resubmit current request and/or check for result. E-DOC-CTC-20080409-0002 v2.0...
  • Page 714: Pki Clearall

    pki Commands pki clearall Delete the secure storage. Use with extreme caution. SYNTAX: pki clearall [force = <{enabled|disabled}>] where: force If you are really sure, enter 'enabled'. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 715: Pki Config

    pki Commands pki config Configure global PKI settings. SYNTAX: pki config [state = <{disabled|enabled}>] [trace = <{disabled|enabled}>] where: state Enable/Disable PKI processing. OPTIONAL trace Enable/Disable traces. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 716: Pki Crlconfig

    pki Commands pki crlconfig PKI CRL configuration. SYNTAX: pki crlconfig [checking_enabled = <{disabled|enabled}>] [use_expired_crls = <{disabled|enabled}>] [dist_point1 = <quoted string>] [fetch_dynamically = <{disabled|enabled}>] [check_cert_extension = <{disabled|enabled}>] [time_checking = <{disabled|enabled}>] [net_timeout = <number>] [http_proxy_address = <ip-address>] [http_proxy_port = <number>] where: checking_enabled Enable/Disable CRL checking.
  • Page 717: Pki Export

    pki Commands pki export Export an item from the secure storage to file. SYNTAX: pki export item = <number> filename = <string> where: item Secure storage item number. REQUIRED filename Filename to save secure storage item in. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 718: Pki Flush

    pki Commands pki flush Flushes PKI configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 719: Pki Import

    pki Commands pki import Import certificate/CRL from file or pasted text (PKCS#7). SYNTAX: pki import [filename = <string>] where: filename Filename to load cert from. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 720: Pki List

    pki Commands pki list List secure storage content. SYNTAX: pki list [item = <number>] where: item Secure storage item number. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 721: Pki Refresh

    pki Commands pki refresh Reload certificate management subsystem. E-DOC-CTC-20080409-0002 v2.0...
  • Page 722: Pki Remove

    pki Commands pki remove Remove an item from the secure storage (use with caution). SYNTAX: pki remove item = <number> where: item Secure storage item number. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 723: Pki Request

    pki Commands pki request Generates an offline certificate request (PKCS#10). SYNTAX: pki request subjectdn = <Distinguished Name (RFC1779): e.g. cn=xxx, c=be> [force = <{enabled|disabled}>] where: subjectdn Distinguished name (RFC1779) for the cert. REQUIRED force Enable/Disable the overwriting of the pending OPTIONAL offline cert request.
  • Page 724: Pki Show

    pki Commands pki show Shows PKI configuration. SYNTAX: pki show [format = <{pretty|cli}>] where: format Output format. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 725: Ppp Commands

    ppp Commands ppp Commands ppp bundle add Add a new bundle of interfaces. see page 727 ppp bundle config Modify the configuration of a bundle see page 728 ppp bundle delete Delete a bundle of interfaces. see page 730 ppp bundle flush Flush all bundles.
  • Page 726 ppp Commands ppp rtadd Add a route to the routing table when see page 753 PPP link comes up. ppp rtdelete Delete the route for a PPP link. see page 754 E-DOC-CTC-20080409-0002 v2.0...
  • Page 727: Ppp Bundle Add

    ppp Commands ppp bundle add Add a new bundle of interfaces. SYNTAX: ppp bundle add name = <string> where: name The new bundle name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 728: Ppp Bundle Config

    ppp Commands ppp bundle config Modify the configuration of a bundle SYNTAX: ppp bundle config name = <{}> [class = <{0|1|2|3|4|5|6|7|8|9|10|11|12|13|14| 15}>] [pool = <{none}>] [epdtype = <{null|localaddr|ipv4|globalmac}>] [epdlocaladdr = <string>] [epdglobalmac = <hardware-address>] [epdipv4 = <ip-address>] [mrru = <number{293-8192}>] [ssnhf = <{disabled|enabled}>] [laddr = <ip-address>] [raddr = <ip-address>]...
  • Page 729 ppp Commands raddr Negotiate this IP address at remote side of the OPTIONAL link. netmask Negotiate IP subnet mask at remote side of the OPTIONAL link. format The format used to represent the IP subnet. OPTIONAL primdns Negotiate this IP address as primary DNS server. OPTIONAL secdns Negotiate this IP address as secondary DNS...
  • Page 730: Ppp Bundle Delete

    ppp Commands ppp bundle delete Delete a bundle of interfaces. SYNTAX: ppp bundle delete name = <{}> where: name The name of the bundle. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 731: Ppp Bundle Flush

    ppp Commands ppp bundle flush Flush all bundles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 732: Ppp Bundle Ifadd

    ppp Commands ppp bundle ifadd Add an interface on a bundle. SYNTAX: ppp bundle ifadd name = <{}> intf = <{}> where: name The name of the bundle. REQUIRED intf The name of the PPP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 733: Ppp Bundle Ifdelete

    ppp Commands ppp bundle ifdelete Remove an interface from a bundle. SYNTAX: ppp bundle ifdelete name = <{}> intf = <{}> where: name The name of the bundle. REQUIRED intf The name of the PPP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 734: Ppp Bundle List

    ppp Commands ppp bundle list Display the current bundles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 735: Ppp Bundle Rtadd

    ppp Commands ppp bundle rtadd Add a route to the routing table when bundle comes up SYNTAX: ppp bundle rtadd name = <{}> dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [label = <{None|DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [src = <ip-address>] [srcmsk = <ip-mask(dotted or cidr)>] [metric = <number{0-100}>] where: name...
  • Page 736: Ppp Bundle Rtdelete

    ppp Commands ppp bundle rtdelete Delete a route from the routing table when bundle goes down SYNTAX: ppp bundle rtdelete name = <{}> where: name The name of the bundle REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 737: Ppp Flush

    ppp Commands ppp flush Flush all PPP interfaces. E-DOC-CTC-20080409-0002 v2.0...
  • Page 738: Ppp Ifadd

    ppp Commands ppp ifadd Create a new PPP interface. SYNTAX: ppp ifadd intf = <string> where: intf The name for the new PPP interface. If not REQUIRED specified, the destination will double as interface name. E-DOC-CTC-20080409-0002 v2.0...
  • Page 739: Ppp Ifattach

    ppp Commands ppp ifattach Attach a PPP interface. SYNTAX: ppp ifattach intf = <{}> where: intf The name of the PPP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 740: Ppp Ifconfig

    ppp Commands ppp ifconfig Modify a PPP interface. SYNTAX: ppp ifconfig intf = <{}> [dest = <{bridge|RELAY|eth_wan1|eth_dmz1| eth_guest1}>] [emptyauth = <{disabled|enabled}>] [user = <string>] [password = <password>] [acname = <quoted string>] [servicename = <quoted string>] [class = <{0|1|2|3|4|5|6|7|8|9|10|11|12|13|14| 15}>] [pool = <{none}>] [multilink = <{disabled|enabled}>] [pcomp = <{disabled|enabled}>] [accomp = <{enabled|disabled|negotiate}>]...
  • Page 741 ppp Commands user The username for remote PAP/CHAP OPTIONAL authentication. password The password for remote PAP/CHAP OPTIONAL authentication. acname The access concentrator name for a PPP session. OPTIONAL servicename The service name for a PPP session. OPTIONAL class The prio class of the PPP packets. OPTIONAL pool Acquire IP subnet and assign it to a free DHCP...
  • Page 742 ppp Commands savepwd Select whether or not password is saved. OPTIONAL demanddial Enable dial-on-demand feature. Nothing OPTIONAL happens until packets are sent to this PPP interface. doddelay During this initial interval (seconds) packets do OPTIONAL not trigger PPP interface. primdns Negotiate this IP address as primary DNS server.
  • Page 743: Ppp Ifdelete

    ppp Commands ppp ifdelete Delete a PPP interface. SYNTAX: ppp ifdelete intf = <{}> where: intf The name of the PPP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 744: Ppp Ifdetach

    ppp Commands ppp ifdetach Detach a PPP interface. SYNTAX: ppp ifdetach intf = <{}> where: intf The name of the PPP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 745: Ppp Iflist

    ppp Commands ppp iflist Display the PPP interfaces. SYNTAX: ppp iflist [intf = <{}>] [string = <string>] [beginstring = <string>] where: intf The name of a PPP interface. OPTIONAL string String matching condition OPTIONAL beginstring Beginstring matching condition OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 746: Ppp Ifscan

    ppp Commands ppp ifscan Scan a PPP interface for available interfaces. SYNTAX: ppp ifscan intf = <{}> [time = <number{0-36000}>] where: intf The name of the PPP interface to scan. REQUIRED time The time to scan for services (in seconds). OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 747: Ppp Relay Flush

    ppp Commands ppp relay flush Remove all ethernet interfaces from the PPP relay agent list and terminate all E-DOC-CTC-20080409-0002 v2.0...
  • Page 748: Ppp Relay Ifadd

    ppp Commands ppp relay ifadd Add an ethernet interface to the PPP relay list. SYNTAX: ppp relay ifadd intf = <{bridge|eth_wan1|eth_dmz1|eth_guest1}> where: intf The ethernet intf to be added to the PPP relay REQUIRED agent list. E-DOC-CTC-20080409-0002 v2.0...
  • Page 749: Ppp Relay Ifconfig

    ppp Commands ppp relay ifconfig Modify an ethernet interface from the PPP relay agent list. SYNTAX: ppp relay ifconfig intf = <{}> hwaddr = <hardware-address> where: intf The ethernet intf to be added to the PPP relay REQUIRED agent list. hwaddr The hardware address (e.g.
  • Page 750: Ppp Relay Ifdelete

    ppp Commands ppp relay ifdelete Delete an ethernet interface from the PPP relay agent list. SYNTAX: ppp relay ifdelete intf = <{}> where: intf The ethernet intf to be added to the PPP relay REQUIRED agent list. E-DOC-CTC-20080409-0002 v2.0...
  • Page 751: Ppp Relay Iflist

    ppp Commands ppp relay iflist Display all ethernet interfaces added to the PPP relay agent list. E-DOC-CTC-20080409-0002 v2.0...
  • Page 752: Ppp Relay Sesslist

    ppp Commands ppp relay sesslist Display all active PPP relay sessions. E-DOC-CTC-20080409-0002 v2.0...
  • Page 753: Ppp Rtadd

    ppp Commands ppp rtadd Add a route to the routing table when PPP link comes up. SYNTAX: ppp rtadd intf = <{}> dst = <ip-address> [dstmsk = <ip-mask(dotted or cidr)>] [label = <{None|DSCP|Interactive|Management| Video|VoIP-RTP|VoIP-Signal|default}>] [src = <ip-address>] [srcmsk = <ip-mask(dotted or cidr)>] [metric = <number{0-100}>] where: intf...
  • Page 754: Ppp Rtdelete

    ppp Commands ppp rtdelete Delete the route for a PPP link. SYNTAX: ppp rtdelete intf = <{}> where: intf The PPP interface name for which to delete the REQUIRED route settings. E-DOC-CTC-20080409-0002 v2.0...
  • Page 755: Pptp Commands

    pptp Commands pptp Commands pptp flush Flushes the PPTP configuration. see page 756 pptp ifadd Adds a PPTP profile (backwards see page 757 compatible with previous release, use profiles pptp list Shows PPTP configuration. see page 758 pptp profadd Defines a new PPTP profile. see page 759 pptp profdelete Deletes a PPTP profile.
  • Page 756: Pptp Flush

    pptp Commands pptp flush Flushes the PPTP configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 757: Pptp Ifadd

    pptp Commands pptp ifadd Adds a PPTP profile (backwards compatible with previous release, use profiles SYNTAX: pptp ifadd dest = <string> [rate = <number{10-10000}>] [encaps = <{vcmux|nlpid}>] [ac = <{never|always|keep}>] where: dest The WAN destination for this PPTP tunnel. REQUIRED Typically a phonebook name.
  • Page 758: Pptp List

    pptp Commands pptp list Shows PPTP configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 759: Pptp Profadd

    pptp Commands pptp profadd Defines a new PPTP profile. SYNTAX: pptp profadd name = <string> [qos = <{default}>] [encaps = <{vcmux|nlpid}>] [ac = <{never|always|keep}>] where: name The name for the new PPTP profile. REQUIRED The name of the qosbook entry, containing the OPTIONAL settings for this profile.
  • Page 760: Pptp Profdelete

    pptp Commands pptp profdelete Deletes a PPTP profile. SYNTAX: pptp profdelete name = <{default}> where: name The name of the profile to delete. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 761: Pptp Proflist

    pptp Commands pptp proflist Lists PPTP profiles. E-DOC-CTC-20080409-0002 v2.0...
  • Page 762: Saveall Command

    saveall Command E-DOC-CTC-20080409-0002 v2.0...
  • Page 763: Saveall Command

    saveall Command saveall Command Saves current configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 764: Script Commands

    script Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 765: Script Commands

    script Commands script Commands script add Add line to script. see page 766 script delete Delete complete script or line from see page 767 script. script flush Flush scripts. see page 768 script list List script. see page 769 script run Run script.
  • Page 766: Script Add

    script Commands script add Add line to script. SYNTAX: script add name = <string> [index = <number>] command = <quoted string> where: name Name of script. REQUIRED index Line number (0 = add). OPTIONAL command Command. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 767: Script Delete

    script Commands script delete Delete complete script or line from script. SYNTAX: script delete name = <{autopvc_add_qos|autopvc_delete_qos| autopvc_add_bridge|autopvc_delete_pppoerelay| autopvc_add_ipoa|autopvc_delete_ipoa| autopvc_add_ethoa|autopvc_delete_ethoa| autopvc_add_pppoa|autopvc_delete_pppoa| autopvc_add_pppoe|autopvc_delete_pppoe| autopvc_change_qos|wlbrintfadd|wlbrintfdel}> [index = <number>] where: name Name of script. REQUIRED index Line number. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 768: Script Flush

    script Commands script flush Flush scripts. E-DOC-CTC-20080409-0002 v2.0...
  • Page 769: Script List

    script Commands script list List script. SYNTAX: script list [name = <{autopvc_add_qos|autopvc_delete_qos| autopvc_add_bridge|autopvc_delete_pppoerelay| autopvc_add_ipoa|autopvc_delete_ipoa| autopvc_add_ethoa|autopvc_delete_ethoa| autopvc_add_pppoa|autopvc_delete_pppoa| autopvc_add_pppoe|autopvc_delete_pppoe| autopvc_change_qos|wlbrintfadd|wlbrintfdel}>] where: name Name of script. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 770: Script Run

    script Commands script run Run script. SYNTAX: script run name = <{autopvc_add_qos|autopvc_delete_qos| autopvc_add_bridge|autopvc_delete_pppoerelay| autopvc_add_ipoa|autopvc_delete_ipoa| autopvc_add_ethoa|autopvc_delete_ethoa| autopvc_add_pppoa|autopvc_delete_pppoa| autopvc_add_pppoe|autopvc_delete_pppoe| autopvc_change_qos|wlbrintfadd|wlbrintfdel}> pars = <quoted string> where: name Name of script. REQUIRED pars Parameters separated with comma e.q. a,b,c . REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 771: Service Commands

    service Commands service Commands service host add Add a service. see page 772 service host assign Assign a service to a host. see page 773 service host category add Create/define service category. see page 774 service host category delete Delete a service category. see page 775 service host category list List the available service categories.
  • Page 772: Service Host Add

    service Commands service host add Add a service. SYNTAX: service host add name = <quoted string> [mode = <{server|client|custom}>] [category = <>] where: name The name of the service. REQUIRED mode server, client or custom service ? OPTIONAL category The category to which the service belongs. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 773: Service Host Assign

    service Commands service host assign Assign a service to a host. SYNTAX: service host assign name = <{AIM Talk|BearShare|BitTorrent| Checkpoint FW1 VPN|Counter Strike|Server (World Wide Web)|HTTPS Server|iMesh|KaZaA|Mail Server (SMTP)|Microsoft Remote Desktop|MSN Game Zone|MSN Game Zone (DX)|NNTPServer|PPTP Server|Secure Shell Server (SSH)|Steam Games| TelnetServer|VNC|Xbox Live}>...
  • Page 774: Service Host Category Add

    service Commands service host category add Create/define service category. SYNTAX: service host category add name = <string> where: name The name of the category. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 775: Service Host Category Delete

    service Commands service host category delete Delete a service category. SYNTAX: service host category delete name = <> where: name The name of the category. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 776: Service Host Category List

    service Commands service host category list List the available service categories. E-DOC-CTC-20080409-0002 v2.0...
  • Page 777: Service Host Category Rename

    service Commands service host category rename Rename a service category. SYNTAX: service host category rename name = <> new_name = <string> where: name The name of the existing category. REQUIRED new_name The new name of the category. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 778: Service Host Delete

    service Commands service host delete Delete a service. SYNTAX: service host delete name = <{AIM Talk|BearShare|BitTorrent| Checkpoint FW1 VPN|Counter Strike|Server (World Wide Web)|HTTPS Server|iMesh|KaZaA|Mail Server (SMTP)|Microsoft Remote Desktop|MSN Game Zone|MSN Game Zone (DX)|NNTPServer|PPTP Server|Secure Shell Server (SSH)|Steam Games| TelnetServer|VNC|Xbox Live}> where: name The name of the service.
  • Page 779: Service Host Disable

    service Commands service host disable Disable a service. SYNTAX: service host disable [name = <{AIM Talk|BearShare|BitTorrent| Checkpoint FW1 VPN|Counter Strike|Server (World Wide Web)|HTTPS Server|iMesh|KaZaA|Mail Server (SMTP)|Microsoft Remote Desktop|MSN Game Zone|MSN Game Zone (DX)|NNTPServer|PPTP Server|Secure Shell Server (SSH)|Steam Games| TelnetServer|VNC|Xbox Live}>] where: name The name of the service.
  • Page 780: Service Host Flush

    service Commands service host flush Flush all services. E-DOC-CTC-20080409-0002 v2.0...
  • Page 781: Service Host List

    service Commands service host list Display list of services. SYNTAX: service host list [name = <{AIM Talk|BearShare|BitTorrent| Checkpoint FW1 VPN|Counter Strike|Server (World Wide Web)|HTTPS Server|iMesh|KaZaA|Mail Server (SMTP)|Microsoft Remote Desktop|MSN Game Zone|MSN Game Zone (DX)|NNTPServer|PPTP Server|Secure Shell Server (SSH)|Steam Games| TelnetServer|VNC|Xbox Live}>] [string = <string>] [beginstring = <string>] where:...
  • Page 782: Service Host Rule Add

    service Commands service host rule add Create/define service portmap. SYNTAX: service host rule add name = <{AIM Talk|BearShare|BitTorrent| Checkpoint FW1 VPN|Counter Strike|Server (World Wide Web)|HTTPS Server|iMesh|KaZaA|Mail Server (SMTP)|Microsoft Remote Desktop|MSN Game Zone|MSN Game Zone (DX)|NNTPServer|PPTP Server|Secure Shell Server (SSH)|Steam Games| TelnetServer|VNC|Xbox Live}>...
  • Page 783: Service Host Rule Delete

    service Commands service host rule delete Delete a service portmap. SYNTAX: service host rule delete name = <{AIM Talk|BearShare|BitTorrent| Checkpoint FW1 VPN|Counter Strike|Server (World Wide Web)|HTTPS Server|iMesh|KaZaA|Mail Server (SMTP)|Microsoft Remote Desktop|MSN Game Zone|MSN Game Zone (DX)|NNTPServer|PPTP Server|Secure Shell Server (SSH)|Steam Games| TelnetServer|VNC|Xbox Live}>...
  • Page 784: Service Host Stats

    service Commands service host stats Service statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 785: Service Host Triggerlist

    service Commands service host triggerlist List all triggers. E-DOC-CTC-20080409-0002 v2.0...
  • Page 786: Service System Ifadd

    service Commands service system ifadd Add an interface to the access list. SYNTAX: service system ifadd name = <{PPTP|HTTP|HTTPs|FTP|SSH|TELNET|RIP- Query|DNS-S|SNMP_AGENT|SSDP|MDAP|GRE|IPIP|IKE| IKE-NAT-T|ESP|PING_RESPONDER}> group = <{wan|local|lan|tunnel|dmz|guest} or number> where: name The name of the service for this access list. REQUIRED group The interface group for this access list. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 787: Service System Ifdelete

    service Commands service system ifdelete Delete an interface from the access list. SYNTAX: service system ifdelete name = <{PPTP|HTTP|HTTPs|FTP|SSH|TELNET|RIP- Query|DNS-S|SNMP_AGENT|SSDP|MDAP|GRE|IPIP|IKE| IKE-NAT-T|ESP|PING_RESPONDER}> group = <{wan|local|lan|tunnel|dmz|guest} or number> where: name The name of the service for this access list. REQUIRED group The interface group for this access list. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 788: Service System Ipadd

    service Commands service system ipadd Add an ip address (range) to the access list. SYNTAX: service system ipadd name = <{PPTP|HTTP|HTTPs|FTP|SSH|TELNET|RIP- Query|DNS-S|SNMP_AGENT|SSDP|MDAP|GRE|IPIP|IKE| IKE-NAT-T|ESP|PING_RESPONDER}> ip = <ip-range> where: name The name of the service for this access list. REQUIRED The ip address (range) for this access list. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 789: Service System Ipdelete

    service Commands service system ipdelete Delete an ip address (range) from the access list. SYNTAX: service system ipdelete name = <{PPTP|HTTP|HTTPs|FTP|SSH|TELNET|RIP- Query|DNS-S|SNMP_AGENT|SSDP|MDAP|GRE|IPIP|IKE| IKE-NAT-T|ESP|PING_RESPONDER}> ip = <ip-range> where: name The name of the service for this access list. REQUIRED The ip address (range) for this access list. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 790: Service System List

    service Commands service system list Display services. SYNTAX: service system list [name = <{PPTP|PPTPD|PPTPGRE|SNTP|SYSLOG|HTTP| HTTPs|HTTPI|TFTP-C|FTP|SSH|statdns|custom|No- IP|DtDNS|gnudip|DHCP-S|DHCP-R|SNMP_AGENT|SSDP| MDAP|CWMP-C|CWMP-S|GRE|IPIP|IKE|IKE-NAT-T|ESP| REM_UPD|RAS|SRAS|IP_COMMANDS|ICMP_PING|SENDTO| PING_RESPONDER|ICMP_TRACEROUTE|UDP_TRACEROUTE| HTTPPROBE}>] [expand = <{disabled|enabled}>] [dynamics = <{disabled|enabled}>] [members = <{disabled|enabled}>] [string = <string>] [beginstring = <string>] where: name The name of the service. OPTIONAL expand Expanded listing.
  • Page 791: Service System Mapadd

    service Commands service system mapadd Add a port map for a service. SYNTAX: service system mapadd name = <{PPTP|HTTP|HTTPs|HTTPI|FTP|SSH|TELNET| DNS-S|SNMP_AGENT|SSDP|MDAP}> intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> port = <{at-echo|at-nbp|at-rtmp|at-zis|auth| bgp|biff|bootpc|bootps|chargen|data|gopher| h323|httpproxy|ike|ils|imap2|imap3|ingres- net|ipcserver|ipx|irc-o|irc-u|kerberos|ldap| login|netbios-dgm|netbios-ns|netbios-ssn| netwall|netware-ip|new-rwho|nfds|nicname|nntp| ntalk|ntp|pcmail-srv|pop2|pop3|printer|qotd| realaudio|rip|rtelnet|rtsp|sip|smtp|snmp| snmptrap|snpp|sntp|sql*net|sql-net|sqlserv| sunrpc|syslog|systat|talk|telnet|...} or number> where: name The name of the service for this map. REQUIRED intf The interface for this map.
  • Page 792: Service System Mapdelete

    service Commands service system mapdelete Delete a port map for a service. SYNTAX: service system mapdelete name = <{PPTP|HTTP|HTTPs|HTTPI|FTP|SSH|TELNET| DNS-S|SNMP_AGENT|SSDP|MDAP}> intf = <{loop|ipsec0|lan1|wan1|dmz1|guest1}> port = <{at-echo|at-nbp|at-rtmp|at-zis|auth| bgp|biff|bootpc|bootps|chargen|data|gopher| h323|httpproxy|ike|ils|imap2|imap3|ingres- net|ipcserver|ipx|irc-o|irc-u|kerberos|ldap| login|netbios-dgm|netbios-ns|netbios-ssn| netwall|netware-ip|new-rwho|nfds|nicname|nntp| ntalk|ntp|pcmail-srv|pop2|pop3|printer|qotd| realaudio|rip|rtelnet|rtsp|sip|smtp|snmp| snmptrap|snpp|sntp|sql*net|sql-net|sqlserv| sunrpc|syslog|systat|talk|telnet|...} or number> where: name The name of the service for this map. REQUIRED intf The interface for this map.
  • Page 793: Service System Modify

    service Commands service system modify Modify a service. SYNTAX: service system modify name = <{PPTP|PPTPD|PPTPGRE|SNTP|SYSLOG|HTTP| HTTPs|HTTPI|TFTP-C|FTP|SSH|SSDP|MDAP|CWMP-C| CWMP-S|GRE|IPIP|IKE|IKE-NAT-T|ESP|RAS|SRAS| IP_COMMANDS|PING_RESPONDER}> [state = <{disabled|enabled}>] [port = <{at-echo|at-nbp|at-rtmp|at-zis|auth| bgp|biff|bootpc|bootps|chargen|data|gopher| h323|httpproxy|ike|ils|imap2|imap3|ingres- net|ipcserver|ipx|irc-o|irc-u|kerberos|ldap| login|netbios-dgm|netbios-ns|netbios-ssn| netwall|netware-ip|new-rwho|nfds|nicname|nntp| ntalk|ntp|pcmail-srv|pop2|pop3|printer|qotd| realaudio|rip|rtelnet|rtsp|sip|smtp|snmp| snmptrap|snpp|sntp|sql*net|sql-net|sqlserv| sunrpc|syslog|systat|talk|telnet|...} or number>] [qoslabel = <{None|DSCP|Interactive| Management|Video|VoIP-RTP|VoIP-Signal| default}>] [routelabel = <{None|DSCP|Interactive| Management|Video|VoIP-RTP|VoIP-Signal| default}>]...
  • Page 794: Snmp Commands

    snmp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 795: Snmp Commands

    snmp Commands snmp Commands snmp community add Config an SNMP community string to see page 796 allow snmp access over IP. snmp community delete Delete an SNMP community string to see page 797 prevent snmp access over IP. snmp community list List all SNMP community strings in see page 798 use for snmp access over IP.
  • Page 796: Snmp Community Add

    snmp Commands snmp community add Config an SNMP community string to allow snmp access over IP. SYNTAX: snmp community add securityname = <{RWCommunity|ROCommunity}> communityname = <password> where: securityname Configure access rights/restrictions control for REQUIRED the community name. communityname Configure SNMP community name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 797: Snmp Community Delete

    snmp Commands snmp community delete Delete an SNMP community string to prevent snmp access over IP. SYNTAX: snmp community delete securityname = <{RWCommunity|ROCommunity}> where: securityname Access rights/restrictions control of the REQUIRED community name to be deleted. E-DOC-CTC-20080409-0002 v2.0...
  • Page 798: Snmp Community List

    snmp Commands snmp community list List all SNMP community strings in use for snmp access over IP. E-DOC-CTC-20080409-0002 v2.0...
  • Page 799: Snmp Community Modify

    snmp Commands snmp community modify Modify an SNMP community string to allow snmp access over IP. SYNTAX: snmp community modify securityname = <{RWCommunity|ROCommunity}> communityname = <password> where: securityname Configure access rights/restrictions control for REQUIRED the community name. communityname Configure SNMP community name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 800: Snmp Config

    snmp Commands snmp config Configure global SNMP parameters. SYNTAX: snmp config [sysContact = <quoted string>] [sysName = <quoted string>] [sysLocation = <quoted string>] where: sysContact SNMP System Contact OPTIONAL sysName SNMP System Name OPTIONAL sysLocation SNMP System Location OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 801: Snmp Get

    snmp Commands snmp get Get from supplied object identity. e.g. get objectid=.1.3.6.1.2.1.1.1.0 SYNTAX: snmp get [objectid = <string>] where: objectid Object identity to get from ... must include OPTIONAL the instance which is 0 for scalar objects e.g. .1.3.6.1.2.1.1.1.0 sysDescription E-DOC-CTC-20080409-0002 v2.0...
  • Page 802: Snmp Getnext

    snmp Commands snmp getnext Get next from supplied object identity. e.g. getnext objectid= SYNTAX: snmp getnext [objectid = <string>] where: objectid Object identity to getNext from e.g. .1.3.6.1.2.1.1 OPTIONAL system returns sysDescription E-DOC-CTC-20080409-0002 v2.0...
  • Page 803: Snmp Ifadd

    snmp Commands snmp ifadd Create a new SNMP interface. SYNTAX: snmp ifadd intf = <string> dest = <{loop|ethif1|ethif2|ethif3|ethif4| ceoc|bridge|OBC|ethport1|RELAY|Internet_0_35| eth-br-dsl|eth_wan1|eth_dmz1|eth_guest1|lan1| wan1|dmz1|guest1}> where: intf The name for the new SNMP interface. REQUIRED dest The destination interface for this SNMP REQUIRED interface. E-DOC-CTC-20080409-0002 v2.0...
  • Page 804: Snmp Ifattach

    snmp Commands snmp ifattach Attach an SNMP interface. SYNTAX: snmp ifattach intf = <{loop|ethif1|ethif2|ethif3|ethif4| ceoc|bridge|OBC|ethport1|RELAY|Internet_0_35| eth-br-dsl|eth_wan1|eth_dmz1|eth_guest1|lan1| wan1|dmz1|guest1}> where: intf The name of the SNMP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 805: Snmp Ifconfig

    snmp Commands snmp ifconfig Modify an SNMP interface. SYNTAX: snmp ifconfig intf = <{loop|ethif1|ethif2|ethif3|ethif4| ceoc|bridge|OBC|ethport1|RELAY|Internet_0_35| eth-br-dsl|eth_wan1|eth_dmz1|eth_guest1|lan1| wan1|dmz1|guest1}> [securityname = <{RWCommunity|ROCommunity}>] [communityname = <password>] where: intf The name of the SNMP interface to configure. REQUIRED securityname Configure access rights/restrictions control for OPTIONAL the community name.
  • Page 806: Snmp Ifdelete

    snmp Commands snmp ifdelete Delete an SNMP interface. SYNTAX: snmp ifdelete intf = <{loop|ethif1|ethif2|ethif3|ethif4| ceoc|bridge|OBC|ethport1|RELAY|Internet_0_35| eth-br-dsl|eth_wan1|eth_dmz1|eth_guest1|lan1| wan1|dmz1|guest1}> where: intf The name of the SNMP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 807: Snmp Ifdetach

    snmp Commands snmp ifdetach Detach an SNMP interface. SYNTAX: snmp ifdetach intf = <{loop|ethif1|ethif2|ethif3|ethif4| ceoc|bridge|OBC|ethport1|RELAY|Internet_0_35| eth-br-dsl|eth_wan1|eth_dmz1|eth_guest1|lan1| wan1|dmz1|guest1}> where: intf The name of the SNMP interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 808: Snmp Iflist

    snmp Commands snmp iflist Display the SNMP interfaces. SYNTAX: snmp iflist [intf = <{loop|ethif1|ethif2|ethif3|ethif4| ceoc|bridge|OBC|ethport1|RELAY|Internet_0_35| eth-br-dsl|eth_wan1|eth_dmz1|eth_guest1|lan1| wan1|dmz1|guest1}>] where: intf The name of an SNMP interface. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 809: Snmp Walk

    snmp Commands snmp walk Walk from supplied object identity. e.g. walk objectid=.1.3.6.1.2.1.1 SYNTAX: snmp walk [objectid = <string>] where: objectid Object identity to walk from e.g. .1.3.6.1.2.1.1 OPTIONAL system walks the system group E-DOC-CTC-20080409-0002 v2.0...
  • Page 810 sntp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 811: Sntp Commands

    sntp Commands sntp Commands sntp add Add NTP server see page 812 sntp config Modify/Display configuration see page 813 sntp debug traceconfig Modify SNTP client trace see page 814 configuration sntp delete Delete NTP server from list see page 815 sntp flush Flush NTP server list and SNTP client see page 816...
  • Page 812: Sntp Add

    sntp Commands sntp add Add NTP server SYNTAX: sntp add [addr = <ip-address>] [name = <string>] [version = <number{1-4}>] where: addr IP address of NTP server to be added to list OPTIONAL name DNS name of NTP server to be added to list. OPTIONAL If both the IP address and the DNS name are provided, the IP address is ignored.
  • Page 813: Sntp Config

    sntp Commands sntp config Modify/Display configuration SYNTAX: sntp config [state = <{enabled|disabled}>] [poll = <number{1-10080}>] [pollpresync = <number{1-60}>] where: state Enable/Disable SNTP client OPTIONAL poll polling interval (1 min, ... ,10080min(=7days)) OPTIONAL pollpresync polling interval before first sync (1 OPTIONAL min, ...
  • Page 814: Sntp Debug Traceconfig

    sntp Commands sntp debug traceconfig Modify SNTP client trace configuration SYNTAX: sntp debug traceconfig [state = <{disabled|enabled}>] where: state Enable/Disable tracing. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 815: Sntp Delete

    sntp Commands sntp delete Delete NTP server from list SYNTAX: sntp delete [addr = <ip-address>] [name = <string>] where: addr IP address of NTP server to be removed from list OPTIONAL name DNS name of NTP server to be removed from OPTIONAL list E-DOC-CTC-20080409-0002 v2.0...
  • Page 816: Sntp Flush

    sntp Commands sntp flush Flush NTP server list and SNTP client configuration E-DOC-CTC-20080409-0002 v2.0...
  • Page 817: Sntp List

    sntp Commands sntp list List the NTP servers E-DOC-CTC-20080409-0002 v2.0...
  • Page 818 software Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 819: Software Commands

    software Commands software Commands software addon list List available modules see page 820 software cleanup Checks whether a disk clean-up see page 821 is required. If necessary, garbage collection software deletepassive Deletes passive software. see page 822 software download Download parameters. see page 823 software duplicate Duplicates active software version as...
  • Page 820: Software Addon List

    software Commands software addon list List available modules E-DOC-CTC-20080409-0002 v2.0...
  • Page 821: Software Cleanup

    software Commands software cleanup Checks whether a disk clean-up is required. If necessary, garbage collection E-DOC-CTC-20080409-0002 v2.0...
  • Page 822: Software Deletepassive

    software Commands software deletepassive Deletes passive software. E-DOC-CTC-20080409-0002 v2.0...
  • Page 823: Software Download

    software Commands software download Download parameters. SYNTAX: software download filetype = <{firmware|configuration}> url = <string> [username = <string>] [password = <string>] filesize = <string> [targetfilename = <string>] where: filetype The type of the file to be downloaded. REQUIRED Set the HTTP URL where the file is to be found REQUIRED including remote filename.
  • Page 824: Software Duplicate

    software Commands software duplicate Duplicates active software version as passive software version E-DOC-CTC-20080409-0002 v2.0...
  • Page 825: Software Setpassive

    software Commands software setpassive Installs a file as passive software version. SYNTAX: software setpassive file = <string> where: file The filename (without directory path) of the REQUIRED software package. E-DOC-CTC-20080409-0002 v2.0...
  • Page 826: Software Switch

    software Commands software switch Switches active & passive software versions & reboots. E-DOC-CTC-20080409-0002 v2.0...
  • Page 827: Software Upgrade

    software Commands software upgrade Reboots the modem to initiate the SW upgrade. New software available on a E-DOC-CTC-20080409-0002 v2.0...
  • Page 828: Software Version

    software Commands software version Displays the software version. E-DOC-CTC-20080409-0002 v2.0...
  • Page 829: Ssh Commands

    ssh Commands ssh Commands ssh config Configure SSH see page 830 ssh publickey add Installs a public dsa key see page 831 ssh publickey delete Removes a public dsa key see page 832 ssh publickey list Displays list of installed dsa keys see page 833 ssh publickey show_own Displays the servers public dsa key...
  • Page 830: Ssh Config

    ssh Commands ssh config Configure SSH SYNTAX: ssh config [auth = <{password|public_key}>] [auth_timeout = <number{0-60}>] [auth_attempts = <number{1-50}>] [shell = <{disabled|enabled}>] [sftp = <{disabled|enabled}>] where: auth Authentication is based on... OPTIONAL auth_timeout Allowed time to type in username and password OPTIONAL auth_attempts Attempts untill SSH disconnects...
  • Page 831: Ssh Publickey Add

    ssh Commands ssh publickey add Installs a public dsa key SYNTAX: ssh publickey add name = <string> role = <{Administrator|LAN_Admin|PowerUser| User|WAN_Admin}> where: name Name of the key REQUIRED role Role assigned to the key REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 832: Ssh Publickey Delete

    ssh Commands ssh publickey delete Removes a public dsa key SYNTAX: ssh publickey delete name = <string> where: name Name of the key REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 833: Ssh Publickey List

    ssh Commands ssh publickey list Displays list of installed dsa keys E-DOC-CTC-20080409-0002 v2.0...
  • Page 834: Ssh Publickey Show_Own

    ssh Commands ssh publickey show_own Displays the servers public dsa key E-DOC-CTC-20080409-0002 v2.0...
  • Page 835: Ssh Show

    ssh Commands ssh show Show the SSH keys summary E-DOC-CTC-20080409-0002 v2.0...
  • Page 836 statecheck Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 837: Statecheck Commands

    statecheck Commands statecheck Commands statecheck checkadd Add a check object. see page 838 statecheck checkdelete Delete a check object. see page 839 statecheck config Configure checkd parameters. see page 840 statecheck groupadd Add a group object. see page 841 statecheck groupdelete Delete a group object.
  • Page 838: Statecheck Checkadd

    statecheck Commands statecheck checkadd Add a check object. SYNTAX: statecheck checkadd group = <string> name = <string> object = <string> paramname = <string> paramtype = <{string|uint|bool}> matchtype = <{equal|differ|statdelta}> match = <string> where: group The name of the group. REQUIRED name The name of the check.
  • Page 839: Statecheck Checkdelete

    statecheck Commands statecheck checkdelete Delete a check object. SYNTAX: statecheck checkdelete group = <string> name = <string> where: group The name of the group. REQUIRED name The name of the check. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 840: Statecheck Config

    statecheck Commands statecheck config Configure checkd parameters. SYNTAX: statecheck config interval = <number> timeout = <number> [groupop = <{and|or}>] [dmtree = <{igd|atomic}>] where: interval The interval between checks. REQUIRED timeout Timeout after wich checking stops. REQUIRED groupop Group operator type. OPTIONAL dmtree Client type.
  • Page 841: Statecheck Groupadd

    statecheck Commands statecheck groupadd Add a group object. SYNTAX: statecheck groupadd name = <string> [checkop = <{and|or}>] where: name The name of the group. REQUIRED checkop Check operator type. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 842: Statecheck Groupdelete

    statecheck Commands statecheck groupdelete Delete a group object. SYNTAX: statecheck groupdelete name = <string> where: name The name of the group. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 843: Syslog Commands

    syslog Commands syslog Commands syslog config Set/Display configuration see page 844 syslog flush Flushes syslog rules. see page 845 syslog list List the current syslog configuration see page 846 syslog msgbuf flush Flush all messages in syslog message see page 847 buffer.
  • Page 844: Syslog Config

    syslog Commands syslog config Set/Display configuration SYNTAX: syslog config [activate = <{disabled|enabled}>] [timeout = <number{0-60}>] [format = <{standard|welf}>] where: activate Syslog send to collectors enabled. OPTIONAL timeout Syslog flooding timeout (in secs) to collectors. OPTIONAL format Syslog contents format OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 845: Syslog Flush

    syslog Commands syslog flush Flushes syslog rules. E-DOC-CTC-20080409-0002 v2.0...
  • Page 846: Syslog List

    syslog Commands syslog list List the current syslog configuration E-DOC-CTC-20080409-0002 v2.0...
  • Page 847: Syslog Msgbuf Flush

    syslog Commands syslog msgbuf flush Flush all messages in syslog message buffer. E-DOC-CTC-20080409-0002 v2.0...
  • Page 848: Syslog Msgbuf Send

    syslog Commands syslog msgbuf send Send messages to remote syslog server. SYNTAX: syslog msgbuf send [fac = <{kern|user|mail|daemon|auth|syslog| lpr|news|uucp|cron|security|ftp|local6| local7}>] [sev = <{emerg|alert|crit|err|warning|notice| info|debug}>] [hist = <{disabled|enabled}>] dest = <ip-address> where: Syslog facility level. OPTIONAL Syslog severity level. OPTIONAL hist Syslog display message history (over several OPTIONAL bootups)
  • Page 849: Syslog Msgbuf Show

    syslog Commands syslog msgbuf show Show messages in the syslog message buffer. SYNTAX: syslog msgbuf show [fac = <{kern|user|mail|daemon|auth|syslog| lpr|news|uucp|cron|security|ftp|local6| local7}>] [sev = <{emerg|alert|crit|err|warning|notice| info|debug}>] [hist = <{disabled|enabled}>] where: Syslog facility level. OPTIONAL Syslog severity level. OPTIONAL hist Syslog display message history (over several OPTIONAL bootups) E-DOC-CTC-20080409-0002 v2.0...
  • Page 850: Syslog Ruleadd

    syslog Commands syslog ruleadd Add a new rule to the syslog configuration. SYNTAX: syslog ruleadd fac = <{kern|user|mail|daemon|auth|syslog|lpr| news|uucp|cron|security|ftp|local6|local7|all or comma-seperated }> sev = <{emerg|alert|crit|err|warning|notice| info|debug}> dest = <ip-address> where: Syslog rule facility. REQUIRED Syslog rule severity. REQUIRED dest Syslog rule destination: an ip-address. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 851: Syslog Ruledelete

    syslog Commands syslog ruledelete Delete a rule in the syslog configuration SYNTAX: syslog ruledelete rule_index = <number{1-16}> where: rule_index Syslog rule index. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 852 system Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 853: System Commands

    system Commands system Commands system config Set or change system config see page 854 parameters. system debug autosave Autosave debugging commands see page 855 system debug stats Cpu and memory statistics see page 856 system dst Set daylight saving values see page 857 system flush Flush system configuration.
  • Page 854: System Config

    system Commands system config Set or change system config parameters. SYNTAX: system config [upnp = <{disabled|enabled}>] [tr64 = <{disabled|enabled}>] [mdap = <{disabled|enabled}>] [led = <{green|red|orange|flash|off}>] [resetbutton = <{disabled|enabled}>] [digestauth = <{disabled|enabled}>] [defaultconnection = <{loop|lan1|wan1|dmz1| guest1}>] [autosave = <{enabled|disabled}>] [autosavedelay = <number{0-600}>] where: upnp Enable/Disable upnp discovery...
  • Page 855: System Debug Autosave

    system Commands system debug autosave Autosave debugging commands SYNTAX: system debug autosave [trace = <{disabled|enabled}>] where: trace Enable/Disable autosave traces OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 856: System Debug Stats

    system Commands system debug stats Cpu and memory statistics SYNTAX: system debug stats [reset = <{disabled|enabled}>] where: reset Reset cpu statistics. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 857: System Dst

    system Commands system dst Set daylight saving values SYNTAX: system dst [status = <{Disable|Enable}>] [mode = <{Absolute|Relative}>] [startdate = <dd/mm/yyyy>] [starttime = <hh:mm:ss>] [enddate = <dd/mm/yyyy>] [endtime = <hh:mm:ss>] [startweekday = <{Sunday|Monday|Tuesday| Wednesday|Thursday|Friday|Saturday}>] [starthour = <number{0-23}>] [startweek = <number{1-5}>] [startmonth = <number{1-12}>] [endweekday = <{Sunday|Monday|Tuesday| Wednesday|Thursday|Friday|Saturday}>] [endhour = <number{0-23}>]...
  • Page 858 system Commands endweekday Set the end weekday of the daylight saving in OPTIONAL the relative mode endhour Set the end hour of the daylight saving in the OPTIONAL relative mode endweek Set the end week of the daylight saving in the OPTIONAL relative mode endmonth...
  • Page 859: System Flush

    system Commands system flush Flush system configuration. E-DOC-CTC-20080409-0002 v2.0...
  • Page 860: System Locale

    system Commands system locale Set/Get regional settings. SYNTAX: system locale [dec_symbol = <{,|.}>] [group_symbol = <{.|,}>] [date_separator = <{/|-|.}>] [date_format = <{iso|ddmmyyyy|ddmmyy|mmddyyyy| mmddyy}>] [time_format = <{iso|hmmss}>] [datetime_format = <{iso|date+time|time +date}>] [duration_format = <{dhmmss|hmmss}>] where: dec_symbol Set decimal symbol OPTIONAL group_symbol Set digit grouping symbol OPTIONAL date_separator...
  • Page 861: System Ra Config

    system Commands system ra config Configure Remote assistance params. SYNTAX: system ra config [secure = <{disabled|enabled}>] [port = <number>] [timeout = <number>] where: secure Enable/Disable https. OPTIONAL port Set destination port. OPTIONAL timeout Set connection timeout in minutes. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 862: System Reboot

    system Commands system reboot Reboot the modem. E-DOC-CTC-20080409-0002 v2.0...
  • Page 863: System Reset

    system Commands system reset Reset to (factory or ISP) defaults: user specific settings will be cleared ! SYNTAX: system reset factory = <{yes|no}> proceed = <{no|yes}> where: factory Option to reset to factory REQUIRED proceed Confirmation for resetting the modem. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 864: System Settime

    system Commands system settime Set/Get date, time, timezone, daylight savings time, uptime. SYNTAX: system settime [date = <dd/mm/yyyy>] [time = <hh:mm:ss>] [timezone = <(+ or -)hh:mm>] [daylightsaving = <{disabled|enabled}>] [geotimezonename = <quoted string>] [rtc = <{disabled|enabled}>] where: date Set the system date OPTIONAL time Set the system time...
  • Page 865: System Timedreboot

    system Commands system timedreboot Set or change editing mode timed reboot SYNTAX: system timedreboot [state = <{disabled|enabled}>] [time = <number{0-983040}>] [date = <string>] where: state Enable/Disable timed reboot OPTIONAL time Change default countdown time (Min). OPTIONAL date Set date/time to reboot (DD/MM/YYYY/HH:MM). OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 866 telnet Command E-DOC-CTC-20080409-0002 v2.0...
  • Page 867: Telnet Command

    telnet Command telnet Command Open a telnet connection to a server. SYNTAX: telnet addr = <ip-address> port = <{at-echo|at-nbp|at-rtmp|at-zis|auth| bgp|biff|bootpc|bootps|chargen|data|gopher| h323|httpproxy|ike|ils|imap2|imap3|ingres- net|ipcserver|ipx|irc-o|irc-u|kerberos|ldap| login|netbios-dgm|netbios-ns|netbios-ssn| netwall|netware-ip|new-rwho|nfds|nicname|nntp| ntalk|ntp|pcmail-srv|pop2|pop3|printer|qotd| realaudio|rip|rtelnet|rtsp|sip|smtp|snmp| snmptrap|snpp|sntp|sql*net|sql-net|sqlserv| sunrpc|syslog|systat|talk|telnet|...} or number> where: addr The IP address of the server. REQUIRED port The port to connect to.
  • Page 868 tftp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 869: Tftp Commands

    tftp Commands tftp Commands tftp cleanup FLASH Garbage Collect. see page 870 tftp fs cd Change Directory. see page 871 tftp fs cleanup FLASH Garbage Collect. see page 872 tftp fs df Show available free space. see page 873 tftp fs dir Show directory contents.
  • Page 870: Tftp Cleanup

    tftp Commands tftp cleanup FLASH Garbage Collect. E-DOC-CTC-20080409-0002 v2.0...
  • Page 871: Tftp Fs Cd

    tftp Commands tftp fs cd Change Directory. SYNTAX: tftp fs cd [dir = <string>] where: Directory name OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 872: Tftp Fs Cleanup

    tftp Commands tftp fs cleanup FLASH Garbage Collect. E-DOC-CTC-20080409-0002 v2.0...
  • Page 873: Tftp Fs Df

    tftp Commands tftp fs df Show available free space. E-DOC-CTC-20080409-0002 v2.0...
  • Page 874: Tftp Fs Dir

    tftp Commands tftp fs dir Show directory contents. SYNTAX: tftp fs dir [dir = <string>] where: Directory name OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 875: Tftp Fs Move

    tftp Commands tftp fs move Rename a file. SYNTAX: tftp fs move src = <string> dst = <string> where: Source file REQUIRED Destination file REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 876: Tftp Fs Pwd

    tftp Commands tftp fs pwd Show the current directory. E-DOC-CTC-20080409-0002 v2.0...
  • Page 877: Tftp Fs Remove

    tftp Commands tftp fs remove Delete a file. SYNTAX: tftp fs remove file = <string> where: file File to be removed REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 878: Tftp Read

    tftp Commands tftp read Fetches a file from a remote TFTP server ("TFTP get"). SYNTAX: tftp read src-file = <string> server = <string> [dst-file = <string>] where: src-file Source file in TFTP server REQUIRED server Server address REQUIRED dst-file Destination file in modem (path name relative OPTIONAL to /dl) E-DOC-CTC-20080409-0002 v2.0...
  • Page 879: Tftp Write

    tftp Commands tftp write Transfers a local file to a TFTP server ("TFTP put"). SYNTAX: tftp write src-file = <string> server = <string> [dst-file = <string>] where: src-file Source file in modem (absolute path name) REQUIRED server Server address REQUIRED dst-file Destination file in TFTP server OPTIONAL...
  • Page 880 tls Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 881: Tls Commands

    tls Commands tls Commands tls acs-client cert add Add a new certificate see page 882 tls acs-client cert delete Delete a certificate see page 883 tls acs-client cert list List certificates see page 884 tls acs-client config Display/modify tls settings see page 885 tls https-server cert add Add a new certificate...
  • Page 882: Tls Acs-Client Cert Add

    tls Commands tls acs-client cert add Add a new certificate SYNTAX: tls acs-client cert add filename = <string> where: filename name of the certificate file REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 883: Tls Acs-Client Cert Delete

    tls Commands tls acs-client cert delete Delete a certificate SYNTAX: tls acs-client cert delete index = <number> where: index Certificate index REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 884: Tls Acs-Client Cert List

    tls Commands tls acs-client cert list List certificates SYNTAX: tls acs-client cert list [index = <number>] [expand = <{disabled|enabled}>] where: index Certificate index OPTIONAL expand Display more information OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 885: Tls Acs-Client Config

    tls Commands tls acs-client config Display/modify tls settings SYNTAX: tls acs-client config [state = <{disabled|enabled}>] [auth-serv = <{disabled|enabled}>] [valid-date = <{disabled|enabled}>] [valid-domain = <{disabled|enabled}>] where: state SSL/TLS client for ACS state OPTIONAL auth-serv Request server authentication OPTIONAL valid-date Check certificate validity date OPTIONAL valid-domain Check certificate domain...
  • Page 886: Tls Https-Server Cert Add

    tls Commands tls https-server cert add Add a new certificate SYNTAX: tls https-server cert add filename = <string> where: filename name of the certificate file REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 887: Tls Https-Server Cert Delete

    tls Commands tls https-server cert delete Delete a certificate SYNTAX: tls https-server cert delete index = <number> where: index Certificate index REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 888: Tls Https-Server Cert List

    tls Commands tls https-server cert list List certificates SYNTAX: tls https-server cert list [index = <number>] [expand = <{disabled|enabled}>] where: index Certificate index OPTIONAL expand Display more information OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 889: Tls Https-Server Config

    tls Commands tls https-server config Display/modify tls settings SYNTAX: tls https-server config [state = <{disabled|enabled}>] [auth-client = <{disabled|enabled}>] [valid-date = <{disabled|enabled}>] where: state SSL/TLS server for HTTPS state OPTIONAL auth-client Request client authentication OPTIONAL valid-date Check certificate validity date OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 890: Tls Self Cert List

    tls Commands tls self cert list List certificates SYNTAX: tls self cert list [index = <number>] [expand = <{disabled|enabled}>] where: index Certificate index OPTIONAL expand Display more information OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 891: Tod Commands

    tod Commands tod Commands tod action add Add an action object. see page 892 tod action delete Delete an action object. see page 893 tod action list List actions. see page 894 tod action paramadd Add a setvalue parameter. see page 895 tod action paramdelete Delete a setvalue parameter.
  • Page 892: Tod Action Add

    tod Commands tod action add Add an action object. SYNTAX: tod action add [id = <number>] where: The id of the actiom. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 893: Tod Action Delete

    tod Commands tod action delete Delete an action object. SYNTAX: tod action delete actionid = <number> where: actionid The id of the action. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 894: Tod Action List

    tod Commands tod action list List actions. E-DOC-CTC-20080409-0002 v2.0...
  • Page 895: Tod Action Paramadd

    tod Commands tod action paramadd Add a setvalue parameter. SYNTAX: tod action paramadd actionid = <number> setvalueid = <number> [id = <number>] [object = <string>] [param = <string>] [value = <string>] where: actionid The id of the action. REQUIRED setvalueid The id of the setvalue action.
  • Page 896: Tod Action Paramdelete

    tod Commands tod action paramdelete Delete a setvalue parameter. SYNTAX: tod action paramdelete actionid = <number> setvalueid = <number> paramid = <number> where: actionid The id of the action. REQUIRED setvalueid The id of the setvalue action. REQUIRED paramid The id of the setvalue param. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 897: Tod Action Setvaladd

    tod Commands tod action setvaladd Add a setvalue object. SYNTAX: tod action setvaladd actionid = <number> [id = <number>] [on = <{active|inactive}>] where: actionid The id of the action. REQUIRED The id of the setvalue actiom. OPTIONAL Active/inactive. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 898: Tod Action Setvaldelete

    tod Commands tod action setvaldelete Delete a setvalue object. SYNTAX: tod action setvaldelete actionid = <number> setvalueid = <number> where: actionid The id of the action. REQUIRED setvalueid The id of the setvalue action. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 899: Tod Config

    tod Commands tod config Configure tod parameters. SYNTAX: tod config [acchain = <string>] [state = <{enabled|disabled}>] where: acchain firewall chain name OPTIONAL state enable/disable ToD OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 900: Tod List

    tod Commands tod list List config. E-DOC-CTC-20080409-0002 v2.0...
  • Page 901: Tod Schedule Add

    tod Commands tod schedule add Add a schedule object. SYNTAX: tod schedule add [id = <number>] type = <{none|accesscontrol|action}> where: The id of the schedule. OPTIONAL type The schedule type. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 902: Tod Schedule Dayadd

    tod Commands tod schedule dayadd Add a day object. SYNTAX: tod schedule dayadd scheduleid = <number> [id = <number>] weekday = <{mo|tu|we|th|fr|sa|su}> where: scheduleid The id of the schedule. REQUIRED The id of the day. OPTIONAL weekday The day of the week.. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 903: Tod Schedule Daydelete

    tod Commands tod schedule daydelete Delete a day object. SYNTAX: tod schedule daydelete scheduleid = <number> dayid = <number> where: scheduleid The id of the schedule. REQUIRED dayid The id of the day. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 904: Tod Schedule Delete

    tod Commands tod schedule delete Delete a schedule object. SYNTAX: tod schedule delete scheduleid = <number> where: scheduleid The id of the schedule. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 905: Tod Schedule List

    tod Commands tod schedule list List schedules. E-DOC-CTC-20080409-0002 v2.0...
  • Page 906: Tod Schedule Modify

    tod Commands tod schedule modify Modify schedule parameters. SYNTAX: tod schedule modify [expiretime = <string>] [nrofminutes = <number>] [count = <number>] scheduleid = <number> [mode = <{timerange|timeout}>] [reference = <string>] [name = <string>] [action = <string>] [state = <{enabled|disabled}>] where: expiretime The absolute expire time.
  • Page 907: Tod Schedule Timeadd

    tod Commands tod schedule timeadd Add a timerange object. SYNTAX: tod schedule timeadd scheduleid = <number> dayid = <number> [id = <number>] starthour = <number> startminute = <number> endhour = <number> endminute = <number> [action = <string>] where: scheduleid The id of the schedule. REQUIRED dayid The id of the day.
  • Page 908: Tod Schedule Timedelete

    tod Commands tod schedule timedelete Delete a timerange object. SYNTAX: tod schedule timedelete scheduleid = <number> dayid = <number> timeid = <number> where: scheduleid The id of the schedule. REQUIRED dayid The id of the day. REQUIRED timeid The id of the timerange. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 909: Traceroute Command

    traceroute Command traceroute Command Send ICMP/UDP packets to trace the ip path. SYNTAX: traceroute addr = <ip-address> [count = <number{1-10}>] [size = <number{1-20000}>] [interval = <number{1000-60000}>] [maxhops = <number{1-255}>] [dstport = <number{1-65535}>] [maxfail = <number{0-255}>] [type = <{icmp|udp}>] [utime = <{disabled|enabled}>] where: addr The destination IP address.
  • Page 910 tunnel Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 911: Tunnel Commands

    tunnel Commands tunnel Commands tunnel gre add add a gre tunnel see page 912 tunnel gre delete delete a gre tunnel see page 913 tunnel gre flush remove all gre tunnels see page 914 tunnel gre list list all gre tunnels see page 915 tunnel gre modify configure a gre tunnel...
  • Page 912: Tunnel Gre Add

    tunnel Commands tunnel gre add add a gre tunnel SYNTAX: tunnel gre add ifname = <quoted string> source = <ip-address> destination = <ip-address> [key = <string>] [checksum = <{disabled|enabled}>] where: ifname the name of this gre interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header...
  • Page 913: Tunnel Gre Delete

    tunnel Commands tunnel gre delete delete a gre tunnel SYNTAX: tunnel gre delete ifname = <{> where: ifname the name of this gre interface REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 914: Tunnel Gre Flush

    tunnel Commands tunnel gre flush remove all gre tunnels E-DOC-CTC-20080409-0002 v2.0...
  • Page 915: Tunnel Gre List

    tunnel Commands tunnel gre list list all gre tunnels E-DOC-CTC-20080409-0002 v2.0...
  • Page 916: Tunnel Gre Modify

    tunnel Commands tunnel gre modify configure a gre tunnel SYNTAX: tunnel gre modify ifname = <{> source = <ip-address> destination = <ip-address> [key = <string>] [checksum = <{disabled|enabled}>] where: ifname the name of the gre interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header...
  • Page 917: Tunnel Ipip Add

    tunnel Commands tunnel ipip add add an ipip tunnel SYNTAX: tunnel ipip add ifname = <quoted string> source = <ip-address> destination = <ip-address> where: ifname the name of this ipip interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header REQUIRED...
  • Page 918: Tunnel Ipip Delete

    tunnel Commands tunnel ipip delete delete an ipip tunnel SYNTAX: tunnel ipip delete ifname = <{> where: ifname the name of this ipip interface REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 919: Tunnel Ipip Flush

    tunnel Commands tunnel ipip flush remove all ipip tunnels E-DOC-CTC-20080409-0002 v2.0...
  • Page 920: Tunnel Ipip List

    tunnel Commands tunnel ipip list list all ipip tunnels E-DOC-CTC-20080409-0002 v2.0...
  • Page 921: Tunnel Ipip Modify

    tunnel Commands tunnel ipip modify configure an ipip tunnel SYNTAX: tunnel ipip modify ifname = <{> source = <ip-address> destination = <ip-address> where: ifname the name of the ipip interface REQUIRED source source address of outer ip header REQUIRED destination destination address of outer ip header REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 922: Tunnel List

    tunnel Commands tunnel list Lists all tunnels. E-DOC-CTC-20080409-0002 v2.0...
  • Page 923: Upgrade Commands

    upgrade Commands upgrade Commands upgrade config Change the upgrade daemon see page 924 configuration upgrade debug sesslist Display the list of sessions see page 925 upgrade debug traceconfig Enable/disable upgrade daemon see page 926 tracing upgrade profile add Add a new file profile description see page 927 upgrade profile delete Delete a file profile description...
  • Page 924: Upgrade Config

    upgrade Commands upgrade config Change the upgrade daemon configuration SYNTAX: upgrade config [state = <{disabled|enabled}>] [protocol = <{tftp|ftp|http|https}>] where: state The upgrade daemon state OPTIONAL protocol The transfer protocol to be used for file OPTIONAL download E-DOC-CTC-20080409-0002 v2.0...
  • Page 925: Upgrade Debug Sesslist

    upgrade Commands upgrade debug sesslist Display the list of sessions E-DOC-CTC-20080409-0002 v2.0...
  • Page 926: Upgrade Debug Traceconfig

    upgrade Commands upgrade debug traceconfig Enable/disable upgrade daemon tracing SYNTAX: upgrade debug traceconfig state = <{disabled|enabled}> where: state The upgrade daemon trace state REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 927: Upgrade Profile Add

    upgrade Commands upgrade profile add Add a new file profile description SYNTAX: upgrade profile add extension = <{sts|ini|bin}> [maxsize(KBytes) = <number>] action = <{none|config_load|script_load| reboot|upgrade}> where: extension The extension of the new file profile REQUIRED maxsize(KBytes) The maximum filesize (in KBytes) allowed for OPTIONAL files with the extension of this profile action...
  • Page 928: Upgrade Profile Delete

    upgrade Commands upgrade profile delete Delete a file profile description SYNTAX: upgrade profile delete extension = <{sts|ini|bin}> where: extension The extension of the file profile to be deleted REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 929: Upgrade Profile List

    upgrade Commands upgrade profile list Display a list of the file profile descriptions E-DOC-CTC-20080409-0002 v2.0...
  • Page 930: Upgrade Profile Modify

    upgrade Commands upgrade profile modify Modify a file profile description SYNTAX: upgrade profile modify extension = <{sts|ini|bin}> [maxsize(KBytes) = <number>] action = <{none|config_load|script_load| reboot|upgrade}> where: extension The extension of the new file profile REQUIRED maxsize(KBytes) The maximum filesize (in KBytes) allowed for OPTIONAL files with the extension of this profile action...
  • Page 931: Upgrade Start

    upgrade Commands upgrade start Start a new upgrade SYNTAX: upgrade start protocol = <{tftp|ftp|http|https}> [server = <string>] [filename = <string>] where: protocol The protocol to be used for the download REQUIRED server The server name or IP address OPTIONAL filename The file to be downloaded OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 932 upnp Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 933: Upnp Commands

    upnp Commands upnp Commands upnp config Config upnp parameter(s) see page 934 upnp flush Flushes upnp config (i.e. to defaults) see page 935 upnp list List all registered devices see page 936 E-DOC-CTC-20080409-0002 v2.0...
  • Page 934: Upnp Config

    upnp Commands upnp config Config upnp parameter(s) SYNTAX: upnp config [maxage = <number{60-999999}>] [writemode = <{full|natonly|readonly}>] [safenat = <{disabled|enabled}>] [preferredaddresses = <string>] where: maxage ssdp advertisements MAX-AGE (default = 1800) OPTIONAL writemode Configuration access level for UPnP OPTIONAL safenat Enable / disable check on safe nat entries OPTIONAL (limited to own host) preferredaddresses...
  • Page 935: Upnp Flush

    upnp Commands upnp flush Flushes upnp config (i.e. to defaults) E-DOC-CTC-20080409-0002 v2.0...
  • Page 936: Upnp List

    upnp Commands upnp list List all registered devices SYNTAX: upnp list [verbose = <number{0-2}>] where: verbose Verbose level (default = 1) OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 937: User Commands

    user Commands user Commands user add Add a user. see page 938 user config Modify the user. see page 939 user delete Delete a user. see page 940 user flush Flush the users. see page 941 user list Display the users. see page 942 user rights Display session rights.
  • Page 938: User Add

    user Commands user add Add a user. SYNTAX: user add name = <string> password = <password> role = <> [hash2 = <string>] [descr = <quoted string>] [defuser = <{disabled|enabled}>] [defremadmin = <{disabled|enabled}>] [deflocadmin = <{disabled|enabled}>] where: name User name. REQUIRED password User password.
  • Page 939: User Config

    user Commands user config Modify the user. SYNTAX: user config name = <{Administrator|tech}> [password = <password>] [role = <>] [descr = <quoted string>] [defuser = <{disabled|enabled}>] [defremadmin = <{disabled|enabled}>] [deflocadmin = <{disabled|enabled}>] where: name User name. REQUIRED password User password. OPTIONAL role Role name.
  • Page 940: User Delete

    user Commands user delete Delete a user. SYNTAX: user delete name = <{Administrator|tech}> where: name User name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 941: User Flush

    user Commands user flush Flush the users. E-DOC-CTC-20080409-0002 v2.0...
  • Page 942: User List

    user Commands user list Display the users. SYNTAX: user list [name = <{Administrator|tech}>] [channel = <{ftp|telnet|http|mdap|serial}>] [origin = <{lan|wan|local}>] [secure = <{disabled|enabled}>] where: name User name. OPTIONAL channel The selected channel. OPTIONAL origin The selected origin. OPTIONAL secure The selected security level. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 943: User Rights

    user Commands user rights Display session rights. E-DOC-CTC-20080409-0002 v2.0...
  • Page 944: Xdsl Commands

    xdsl Commands E-DOC-CTC-20080409-0002 v2.0...
  • Page 945: Xdsl Commands

    xdsl Commands xdsl Commands xdsl add Add a wire-pair to a DSL-interface. see page 947 xdsl debug atmstats Display ATM statistics. see page 948 xdsl debug clear Clear statistics. see page 949 xdsl debug efmlinestats Display IEEE 802.3-Clause30 Statistics see page 950 (Line Side).
  • Page 946 xdsl Commands xdsl profile modify Modify a DSL-interface profile. see page 971 E-DOC-CTC-20080409-0002 v2.0...
  • Page 947: Xdsl Add

    xdsl Commands xdsl add Add a wire-pair to a DSL-interface. SYNTAX: xdsl add name = <DSL-interface> wirepair = <DSL-linkID> where: name The name of a DSL-interface. REQUIRED wirepair A DSL link identifier (e.g. link0). REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 948: Xdsl Debug Atmstats

    xdsl Commands xdsl debug atmstats Display ATM statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 949: Xdsl Debug Clear

    xdsl Commands xdsl debug clear Clear statistics. SYNTAX: xdsl debug clear [counter = <{atm|efm|pmd|paf| clause30SystemSide}>] where: counter Clear statistics. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 950: Xdsl Debug Efmlinestats

    xdsl Commands xdsl debug efmlinestats Display IEEE 802.3-Clause30 Statistics (Line Side). E-DOC-CTC-20080409-0002 v2.0...
  • Page 951: Xdsl Debug Efmsystemstats

    xdsl Commands xdsl debug efmsystemstats Display IEEE 802.3-Clause30 Statistics (System Side). E-DOC-CTC-20080409-0002 v2.0...
  • Page 952: Xdsl Debug Info

    xdsl Commands xdsl debug info Display DSL line & device information. E-DOC-CTC-20080409-0002 v2.0...
  • Page 953: Xdsl Debug Lloopback

    xdsl Commands xdsl debug lloopback Configure Local Loopback (applies to CPE mode only). SYNTAX: xdsl debug lloopback enabled = <{no|yes}> [timeout = <number{0-1000}>] [type = <{digital|analog}>] where: enabled Enable / disable the Local Loopback. REQUIRED timeout Local Loopback timeout: 0..1000 (min). OPTIONAL type Local Loopback type.
  • Page 954: Xdsl Debug Pafstats

    xdsl Commands xdsl debug pafstats Display PAF statistics. E-DOC-CTC-20080409-0002 v2.0...
  • Page 955: Xdsl Debug Pmdlinestats

    xdsl Commands xdsl debug pmdlinestats Display PMD statistics (line side). E-DOC-CTC-20080409-0002 v2.0...
  • Page 956: Xdsl Debug Pmdsystemstats

    xdsl Commands xdsl debug pmdsystemstats Display PMD statistics (system side). E-DOC-CTC-20080409-0002 v2.0...
  • Page 957: Xdsl Debug Rloopback

    xdsl Commands xdsl debug rloopback Configure Remote Loopback (applies to CO mode only). SYNTAX: xdsl debug rloopback enabled = <{no|yes}> [timeout = <number{0-1000}>] [type = <{cpe|repeater}>] where: enabled Enable / disable the Remote Loopback. REQUIRED timeout Remote Loopback timeout: 0..1000 (min). OPTIONAL type Remote Loopback type.
  • Page 958: Xdsl Debug Showmdioreg

    xdsl Commands xdsl debug showmdioreg Show the value of a MDIO register by name. SYNTAX: xdsl debug showmdioreg [linkno = <{0|1|2|3}>] name = <{capability|pcs-control|pme-available| pme-aggregate|aggr-disc|aggr-size}> where: linkno link number OPTIONAL name name of MDIO registers REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 959: Xdsl Debug Traceconfig

    xdsl Commands xdsl debug traceconfig Set the trace level. SYNTAX: xdsl debug traceconfig [level = <{0|1|2|3|4}>] where: level level of trace OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 960: Xdsl Delete

    xdsl Commands xdsl delete Delete a wire-pair from a DSL-interface. SYNTAX: xdsl delete name = <DSL-interface> wirepair = <DSL-linkID> where: name The name of a DSL-interface. REQUIRED wirepair A DSL link identifier (e.g. link0). REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 961: Xdsl Ifadd

    xdsl Commands xdsl ifadd Create a DSL-interface. SYNTAX: xdsl ifadd name = <string> profile = <DSL-profile> where: name The name for a new DSL-interface. REQUIRED profile A co or cpe profile name. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 962: Xdsl Ifattach

    xdsl Commands xdsl ifattach Activate a DSL-interface. SYNTAX: xdsl ifattach name = <DSL-interface> where: name The name of a DSL-interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 963: Xdsl Ifconfig

    xdsl Commands xdsl ifconfig Configure a DSL-interface. SYNTAX: xdsl ifconfig name = <DSL-interface> [ul-mode = <{atm|efm|auto}>] [wire-mode = <{auto|1pair|2pair|3pair|4pair}>] [int-channel = <DSL-channel>] where: name The name of a DSL-interface. REQUIRED ul-mode The DSL upper layer protocol: Asynchronous OPTIONAL Transfer Mode (ATM) or Ethernet in the First Mile (EFM).
  • Page 964: Xdsl Ifdelete

    xdsl Commands xdsl ifdelete Delete a DSL-interface. SYNTAX: xdsl ifdelete name = <DSL-interface> where: name The name of a DSL-interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 965: Xdsl Ifdetach

    xdsl Commands xdsl ifdetach de-Activate a DSL-interface. SYNTAX: xdsl ifdetach name = <DSL-interface> where: name The name of a DSL-interface. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 966: Xdsl Iflist

    xdsl Commands xdsl iflist List all DSL-interfaces. SYNTAX: xdsl iflist [name = <DSL-interface>] where: name The name of a DSL-interface. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 967: Xdsl List

    xdsl Commands xdsl list List all wire-pairs and their assignment. E-DOC-CTC-20080409-0002 v2.0...
  • Page 968: Xdsl Profile Add

    xdsl Commands xdsl profile add Add a DSL-interface profile. SYNTAX: xdsl profile add name = <string> type = <{co|cpe}> where: name The name of a new DSL-interface profile. REQUIRED type The profile type. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 969: Xdsl Profile Delete

    xdsl Commands xdsl profile delete Delete a DSL-interface profile. SYNTAX: xdsl profile delete name = <DSL-profile> where: name The name of a DSL-interface profile. REQUIRED E-DOC-CTC-20080409-0002 v2.0...
  • Page 970: Xdsl Profile List

    xdsl Commands xdsl profile list Display a DSL-interface profile. SYNTAX: xdsl profile list [name = <DSL-profile>] where: name The name of a DSL-interface profile. OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 971: Xdsl Profile Modify

    xdsl Commands xdsl profile modify Modify a DSL-interface profile. SYNTAX: xdsl profile modify name = <DSL-profile> [paffragmentsize = <{64|68|72|76|80|84|88|92| 96|100|104|108|112|116|120|124|184|188|192| 196|200|204|208|212|216|220|224|228|232|236| 240|244|248|252|256|260|264|268|272|276|280| 284|288|292|296|300|304|308|312|316|320|324| 328|332|336|340|344|348|352|356|360|364|368| 372|376|380|384|388|392|396|400|404|408|412| 416|420|424|428|432|436|440|444|448|452|456| 460|464|468|472|476|480|484|488|492|496|500| 504|508|512}>] [annex = <{af|bg}>] [minbw = <{192|256|320|384|448|512|576|640| 704|768|832|896|960|1024|1088|1984|2048|2112| 2176|2240|2304|2312|2368|2432|2496|2560|2624| 2688|2752|2816|2880|2944|3008|3072|3136|3200| 3264|3328|3392|3456|3520|3584|3648|3712|3776| 3840|3904|3968|4032|4096|4160|4224|4288|4352| 4416|4480|4544|4608|4672|4736|4800|4864|4928| 4992|5056|5120|5184|5248|5312|5376|5440|5504| 5568|5632|5696}>] [maxbw = <{192|256|320|384|448|512|576|640|...
  • Page 972 xdsl Commands [simulate-lp = <{disable|enable}>] [vendor-specific = <string>] where: name The name of a DSL-interface profile. REQUIRED paffragmentsize The PME Aggregation Function (PAF) fragment OPTIONAL size: 64..512 octets and multiple of 4. annex ITU-T G.992.1 Annex A&F | ITU-T G.992.1 Annex OPTIONAL B&G.
  • Page 973 xdsl Commands lineprobing Enable or disable line probing. OPTIONAL simulate-lp Enable or disable line probing simulation. OPTIONAL vendor-specific The vendor specific octets to use (e.g. FF00). OPTIONAL E-DOC-CTC-20080409-0002 v2.0...
  • Page 974 THOMSON Telecom Belgium Prins Boudewijnlaan 47 www.thomson-broadband.com © 2008 Thomson. All rights reserved. E-DOC-CTC-20080409-0002 v2.0...

Table of Contents