Page 1 N300 Smart Wi-Fi Router with Power Amplifiers, Managed Switch, and Mode Selector Command Reference Guide Model Keenetic Lite (KN-1310) OS Version 2.10 Edition 1.17 18.01.2018 help.keenetic.net © Keenetic Limited, 2018...
Page 3: Preface
1 Readership This guide is for the networking or computer technician responsible for configuring and maintaining the Keenetic Lite on-site. It is also intended for the operator who manages the Keenetic Lite. This manual cover high-level technical support procedures available to Root administrators and Keenetic Lite technical support personnel.
Page 4 Means "reader take note". Notes contain helpful suggestions or references to materials not contained in this manual. Warning: Means "reader be careful". You are capable of doing something that might result in equipment damage or loss of data. Command Reference Guide — Keenetic Lite (KN-1310)
Page 5 Product Overview .......................... 19 Introduction to the CLI ........................21 Command Reference ........................27 Glossary ............................291 Interface Hierarchy ........................299 HTTP API ............................301 SNMP MIB ........................... 309 IPsec Encryption Levels ........................ 315 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 6 Contents Overview Command Reference Guide — Keenetic Lite (KN-1310)
Page 7: Table Of Contents
3.4 cloud control client name .................... 36 3.5 cloud control client session timeout ................37 3.6 components ........................37 3.6.1 components commit ..................38 3.6.2 components install .................... 38 3.6.3 components list ....................39 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 8: Table Of Contents
3.13.5 crypto map match-address ................64 3.13.6 crypto map nail-up ................... 64 3.13.7 crypto map set-peer ..................65 3.13.8 crypto map set-peer-fallback ................66 3.13.9 crypto map set-profile ..................66 3.13.10 crypto map set-tcpmss .................. 67 Command Reference Guide — Keenetic Lite (KN-1310)
Page 9 3.16.18 interface country-code .................. 89 3.16.19 interface debug ....................90 3.16.20 interface description ..................90 3.16.21 interface down ....................91 3.16.22 interface duplex ..................... 91 3.16.23 interface dyndns profile ................92 3.16.24 interface dyndns update ................92 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 10 3.16.62 interface ipcp vj ................... 116 3.16.63 interface ipsec encryption-level ..............117 3.16.64 interface ipsec ignore .................. 118 3.16.65 interface ipsec ikev2 ..................118 3.16.66 interface ipsec preshared-key ..............119 3.16.67 interface ipv6 address ................. 119 Command Reference Guide — Keenetic Lite (KN-1310)
Page 11 3.16.105 interface wmm ................... 146 3.16.106 interface wps ....................146 3.16.107 interface wps auto-self-pin ................ 147 3.16.108 interface wps button ................. 147 3.16.109 interface wps peer ..................148 3.16.110 interface wps self-pin ................148 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 12 3.30 ip http ssl enable ...................... 173 3.31 ip name-server ......................174 3.32 ip nat ......................... 175 3.33 ip nat vpn ........................176 3.34 ip route ........................176 3.35 ip search-domain ...................... 178 Command Reference Guide — Keenetic Lite (KN-1310)
Page 13 3.56.3 ping-check profile min-success ..............205 3.56.4 ping-check profile mode ................206 3.56.5 ping-check profile port .................. 206 3.56.6 ping-check profile power-cycle ..............207 3.56.7 ping-check profile restart-interface ............. 207 3.56.8 ping-check profile timeout ................208 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 14 3.74.17 show ip arp ....................235 3.74.18 show ip dhcp bindings ................. 236 3.74.19 show ip dhcp pool ..................236 3.74.20 show ip hotspot .................... 237 3.74.21 show ip name-server ..................239 3.74.22 show ip nat ....................239 Command Reference Guide — Keenetic Lite (KN-1310)
Page 15 3.78.13 system log suppress ..................265 3.78.14 system mode ....................266 3.78.15 system reboot ....................266 3.78.16 system set ....................267 3.79 tools ........................... 268 3.79.1 tools arping ....................268 3.79.2 tools ping ......................269 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 16 B.1 REST Core Interface ....................... 301 B.1.1 Resource Location ....................301 B.1.2 Methods ......................301 B.1.3 Data Format ......................302 B.2 XML Core Interface ......................305 B.2.1 Command Request ....................306 B.2.2 Configuration Request ..................307 Command Reference Guide — Keenetic Lite (KN-1310)
Page 17 IPsec Encryption Levels ....................315 D.1 weak ..........................315 D.2 normal ........................... 316 D.3 normal-3des ........................316 D.4 strong ..........................317 D.5 weak-pfs ........................317 D.6 normal-pfs ........................319 D.7 normal-3des-pfs ......................319 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 18 Table of Contents Command Reference Guide — Keenetic Lite (KN-1310)
Page 19: Chapter 1 Product Overview
Winbond W25Q128JVFQ 16Mb SPI Ethernet Ports Chipset Notes Integrated Label Speed Notes 100 Mbps WAN port 100 Mbps 100 Mbps 100 Mbps 100 Mbps Wi-Fi Band Chipset Notes 2.4 GHz MediaTek MT7603 802.11bgn 2x2 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 20 Chapter 1 Product Overview Command Reference Guide — Keenetic Lite (KN-1310)
Page 21: Introduction To The Cli
This chapter describes how to use the Keenetic Lite Command-Line Interface (CLI), its hierarchical structure, authorization levels and its help features. The primary tool for managing the Keenetic Lite router is the command line interface (CLI). System settings can be defined as a sequence of commands, which can be executed to bring the device to the specified condition.
Page 22: Entering A Group
FastEthernet0/Vlan2 (config)> interface FastEthernet0[Tab] Usage template: interface {name} Variants: FastEthernet0/Vlan1 FastEthernet0/Vlan2 (config)> interface FastEthernet0[Enter] (config-if)> ip[Tab] address - set interface IP address alias - add interface IP alias dhcp - enable dhcp client Command Reference Guide — Keenetic Lite (KN-1310)
Page 23: Prefix No
— the final command. Prefix no can be placed either at the beginning, or in the middle. The action is the same in both cases: stopping of the service. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 24: Multiple Input
Current and startup settings are stored in the files running-config and startup-config, respectively. To save the current settings in the non-volatile memory, copy them as shown below: (config)> copy running-config startup-config Copied: running-config -> startup-config Command Reference Guide — Keenetic Lite (KN-1310)
Page 25: Delayed Restart
Chapter 2 Introduction to the CLI 2.6 Delayed restart If Keenetic Lite device is located away from the operator and is managed remotely, there is a risk to lose control over it because of a misoperation. In this case it will be difficult to reboot and return to the saved settings.
Page 26 Chapter 2 Introduction to the CLI Command Reference Guide — Keenetic Lite (KN-1310)
Page 27: Chapter 3 Command Reference
File names in this example are aliases. Full names of the configuration files , respectively. system:running-config flash:startup-config History Version Description 2.00 The copy command has been introduced. 3.1.2 erase Description Delete a file from the Keenetic Lite device. Prefix no Change settings Keenetic Lite (KN-1310) — Command Reference Guide...
Page 28: Exit
(config-dyndns)> exit (config)> History Version Description 2.00 The exit command has been introduced. 3.1.4 ls Description Display list of files from the specified directory. Prefix no Change settings Multiple input Synopsis (config)> directory Command Reference Guide — Keenetic Lite (KN-1310)
Page 29: More
= D: name: run History Version Description 2.00 The ls command has been introduced. 3.1.5 more Description Display the contents of a text file line by line. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 30: Access-List
Filtering rules list name (Access Control List, name String ACL). History Version Description 2.00 The access-list command has been introduced. 3.2.1 access-list deny Description Add a packet filtering deny rule into a specified ACL. Command Reference Guide — Keenetic Lite (KN-1310)
Page 31 IP-packet before comparison with source There are two ways to enter the mask: the canonical form (for example, ) and the 255.255.255.0 form of prefix bit length (for example, Keenetic Lite (KN-1310) — Command Reference Guide...
Page 32 Operator “greater” to compare the port with the specified destination-port Example (config-acl)> deny icmp 192.168.0.0 255.255.255.0 192.168.1.1 255.255.255.0 ACL rule added. History Version Description 2.00 The access-list deny command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 33: Access-List Permit
› destination destination-mask Arguments Argument Value Description protocol. Keyword protocol. Keyword ICMP protocol. icmp Keyword protocol. Keyword protocol. Keyword IP in IP protocol. ipip Keyword protocol (include TCP, UDP, ICMP Keyword and other). Keenetic Lite (KN-1310) — Command Reference Guide...
Page 34 Integer header. The end of the destination range destination-end-port Integer of ports. Operator “less” to compare the dst-port-operator port with the specified destination-port Operator “equal” to compare the port with the specified destination-port Command Reference Guide — Keenetic Lite (KN-1310)
Page 35: Cloud Control Client Connect
Its size should be in the range [1024, 1536] bit. If not specified, the encryption will not be performed. The component of the open RSA-key of exponent Integer client. If not specified, the encryption will not be performed. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 36: Cloud Control Client Name
String exceed 64 UTF-8 character. Example (config)> cloud control client a78d...30ab name "New Client" CloudControl::Agent: A client name changed. History Version Description 2.05 The cloud control client name command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 37: Cloud Control Client Session Timeout
The cloud control client session timeout command has been introduced. 3.6 components Description Access to a group of commands to manage firmware components. Prefix no Change settings Multiple input Group entry (config-comp) Synopsis (config)> components Keenetic Lite (KN-1310) — Command Reference Guide...
Page 38: Components Commit
String components for installation can be displayed with the components list command. Example (config-comp)> install ntfs Component is queued for installation: ntfs History Version Description 2.00 The components install command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 39: Components List
History Version Description 2.00 The components list command has been introduced. 2.06.A.6 parameter has been introduced. The sandbox command components list should be used in favour of components sync. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 40: Components Preset
The components preset command has been introduced. 3.6.5 components preview Description Show size of firmware as current set of components selected with components install command. Prefix no Change settings Multiple input Synopsis (config-comp)> preview Example (config-comp)> preview Command Reference Guide — Keenetic Lite (KN-1310)
Page 41: Components Remove
Command with no prefix resets period to default. By default, value 1800 is used. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 42: Crypto Ike Key
ID type is full domain name. fqdn ID type is domain name. ID type is e-mail address. email Value of the remote side ID. String Allow the key usage for any remote side. Keyword Command Reference Guide — Keenetic Lite (KN-1310)
Page 43: Crypto Ike Nat-Keepalive
Command with no prefix removes policy. At the same time references to this policy are automatically deleted from all IPsec profiles. Prefix no Change settings Keenetic Lite (KN-1310) — Command Reference Guide...
Page 44: Crypto Ike Policy Lifetime
Can take values from 60 to 2147483647. Example (config-ike-policy)> lifetime 3600 IpSec::Manager: Crypto ike policy "test" lifetime set to 3600 s. History Version Description 2.06 The crypto ike policy lifetime command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 45: Crypto Ike Policy Mode
Command with no prefix resets setting to default. Prefix no Change settings Multiple input Synopsis (config-ike-policy)> ‹ › negotiation-mode negotiation-mode (config-ike-policy)> no negotiation-mode Arguments Argument Value Description Main mode, protects the identity of the negotiation-mode main peers. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 46: Crypto Ike Policy Proposal
Example (config-ike-policy)> proposal test IpSec::Manager: Crypto ike policy "test" proposal "test" ► successfully added. History Version Description 2.06 The crypto ike policy proposal command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 47: Crypto Ike Proposal
Command with no prefix removes the selected group. Prefix no Change settings Multiple input Synopsis (config-ike-proposal)> ‹ › dh-group dh-group (config-ike-proposal)> ‹ › no dh-group dh-group Keenetic Lite (KN-1310) — Command Reference Guide...
Page 48: Crypto Ike Proposal Encryption
Command with no prefix removes the selected type of encryption. Prefix no Change settings Multiple input Synopsis (config-ike-proposal)> ‹ › encryption encryption (config-ike-proposal)> ‹ › no encryption encryption Arguments Argument Value Description Type of encryption. encryption 3des aes-128-cbc aes-192-cbc aes-256-cbc Command Reference Guide — Keenetic Lite (KN-1310)
Page 49: Crypto Ike Proposal Integrity
Example (config-ike-proposal)> integrity sha256 IpSec::Manager: Crypto ike proposal "test" integrity algorithm ► "sha256" successfully added. History Version Description 2.06 The crypto ike proposal integrity command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 50: Crypto Ipsec Transform-Set
The order of adding has a value for data exchange on the protocol. Command with no prefix removes the selected type of encryption. Prefix no Change settings Multiple input Synopsis (config-ipsec-transform)> ‹ › cypher cypher Command Reference Guide — Keenetic Lite (KN-1310)
Page 51: Crypto Ipsec Transform-Set Dh-Group
Command with no prefix removes the selected group. Prefix no Change settings Multiple input Synopsis (config-ipsec-transform)> ‹ › dh-group dh-group (config-ipsec-transform)> ‹ › no dh-group dh-group Arguments Argument Value Description group to work in the mode. dh-group Keenetic Lite (KN-1310) — Command Reference Guide...
Page 52: Crypto Ipsec Transform-Set Hmac
IPsec ESP hmac esp-md5-hmac transformation. esp-sha1-hmac esp-sha256-hmac Example (config-ipsec-transform)> hmac esp-sha1-hmac IpSec::Manager: Crypto ipsec transform-set "test" hmac ► "esp-sha1-hmac" successfully added. History Version Description 2.06 The crypto ipsec transform-set hmac command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 53: Crypto Ipsec Transform-Set Lifetime
Command with no prefix removes profile. At the same time references to this profile are automatically deleted from all IPsec crypto maps. Prefix no Change settings Multiple input Group entry (config-ipsec-profile) Synopsis (config)> ‹ › crypto ipsec profile name Keenetic Lite (KN-1310) — Command Reference Guide...
Page 54: Crypto Ipsec Profile Authentication-Local
"pre-share" is set. History Version Description 2.06 The crypto ipsec profile authentication-local command has been introduced. 3.12.2 crypto ipsec profile authentication-remote Description Set authentication type for remote host. By default, value is used. pre-share Command Reference Guide — Keenetic Lite (KN-1310)
Page 55: Crypto Ipsec Profile Dpd-Interval
Change settings Multiple input Synopsis (config-ipsec-profile)> ‹ › [ dpd-interval interval retry-count (config-ipsec-profile)> no dpd-interval Arguments Argument Value Description The interval of sending interval Integer packets in seconds. Can take values from 3600 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 56: Crypto Ipsec Profile Identity-Local
ID type is domain name. ID type is e-mail address. email Local ID value. String Example (config-ipsec-profile)> identity-local address 10.10.10.5 IpSec::Manager: Crypto ipsec profile "test" identity-local is ► set to "10.10.10.5" with type "address". Command Reference Guide — Keenetic Lite (KN-1310)
Page 57: Crypto Ipsec Profile Match-Identity-Remote
3.12.6 crypto ipsec profile mode Description Set the mode of operation IPsec. By default, value is set. tunnel Command with no prefix resets setting to default. Prefix no Change settings Keenetic Lite (KN-1310) — Command Reference Guide...
Page 58: Crypto Ipsec Profile Policy
Value Description policy name. You can see the policy String list of available policies with help of policy ? command. Example (config-ipsec-profile)> policy test IpSec::Manager: Crypto ipsec profile "test" policy set to "test". Command Reference Guide — Keenetic Lite (KN-1310)
Page 59: Crypto Ipsec Profile Preshared-Key
Enable additional authentication XAuth for IKEv1 mode. By default, function is disabled. Command with no prefix disables additional authentication. Prefix no Change settings Multiple input Synopsis (config-ipsec-profile)> ‹ › xauth type (config-ipsec-profile)> no xauth Keenetic Lite (KN-1310) — Command Reference Guide...
Page 60: Crypto Ipsec Profile Xauth-Identity
Description 2.06 The crypto ipsec profile xauth-identity command has been introduced. 3.12.11 crypto ipsec profile xauth-password Description Set password for additional authentication XAuth in client mode. Command with no prefix removes the password. Command Reference Guide — Keenetic Lite (KN-1310)
Page 61: Crypto Map
Arguments Argument Value Description IPsec crypto map name. Latin name String letters, numbers, dots, hyphens and underscores are acceptable. Example (config)> crypto map test IpSec::Manager: Crypto map "test" successfully created. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 62: Crypto Map Connect
By default, setting is enabled. Command with no prefix disables crypto map. Prefix no Change settings Multiple input Synopsis (config-crypto-map)> enable (config-crypto-map)> no enable Example (config-crypto-map)> enable IpSec::Manager: Crypto map "test" enabled. Command Reference Guide — Keenetic Lite (KN-1310)
Page 63: Crypto Map Fallback-Check-Interval
3.13.4 crypto map force-encaps Description Enforce the packet wrapping mode in to bypass the firewall and NAT. Command with no prefix disables the mode. Prefix no Change settings Multiple input Synopsis (config-crypto-map)> force-encaps (config-crypto-map)> no force-encaps Keenetic Lite (KN-1310) — Command Reference Guide...
Page 64: Crypto Map Match-Address
IpSec::Manager: Crypto map "test" match-address set to "acl1". History Version Description 2.06 The crypto map match-address command has been introduced. 3.13.6 crypto map nail-up Description Enable automatic renegotiation of IPsec ESP transformations at their obsolescence. By default, setting is disabled. Command Reference Guide — Keenetic Lite (KN-1310)
Page 65: Crypto Map Set-Peer
String Accept any incoming connections. Example (config-crypto-map)> set-peer ipsec.test.com IpSec::Manager: Crypto map "test" primary remote peer is set to ► "ipsec.test.com". History Version Description 2.06 The crypto map set-peer command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 66: Crypto Map Set-Peer-Fallback
Set the reference to existing IPsec profile (see crypto ipsec profile command). Command with no prefix removes the reference. Prefix no Change settings Multiple input Synopsis (config-crypto-map)> ‹ › set-profile profile (config-crypto-map)> no set-profile Command Reference Guide — Keenetic Lite (KN-1310)
Page 67: Crypto Map Set-Tcpmss
Integer 1500. Enable Path MTU Discovery mode. pmtu Example (config-crypto-map)> set-tcpmss 1280 IpSec::Manager: Crypto map "test" tcpmss set to 1280. History Version Description 2.06 The crypto map set-tcpmss command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 68: Crypto Map Set-Transform
Set DNS-server issued to clients in Virtual IP server mode. Command with no prefix deletes the address. Prefix no Change settings Multiple input Synopsis (config-crypto-map)> ‹ › virtual-ip dns-server address (config-crypto-map)> no virtual-ip dns-server Command Reference Guide — Keenetic Lite (KN-1310)
Page 69: Crypto Map Virtual-Ip Enable
2.08 The crypto map virtual-ip enable command has been introduced. 3.13.14 crypto map virtual-ip nat Description Enable translation for remote network of Virtual IP extension server. Command with no prefix removes the rule. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 70: Crypto Map Virtual-Ip Range
Example (config-crypto-map)> virtual-ip range 10.5.0.0 20 IpSec::Manager: Crypto map "test" Virtual IP pool range set from ► "10.5.0.0" to "10.5.0.20". (config-crypto-map)> no virtual-ip range IpSec::Manager: Crypto map "test" Virtual IP pool range deleted. Command Reference Guide — Keenetic Lite (KN-1310)
Page 71: Dns-Proxy
Arguments Argument Value Description The bantime value in milliseconds. bantime Integer Can take values from 1 to 30000. Example (config-dnspx)>bantime 25 Dns::Proxy: Dns-proxy set 25 msec. bantime. (config-dnspx)>no bantime Dns::Proxy: Dns-proxy bantime reset. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 72: Dns-Proxy Max-Ttl
Set interval between concurrent requests, which is sent by DNS proxy to multiple DNS servers. By default, value is used. Command with no prefix resets proceed to default. Prefix no Change settings Multiple input Synopsis (config-dnspx)> ‹ › proceed proceed Command Reference Guide — Keenetic Lite (KN-1310)
Page 73: Dns-Proxy Threshold
Integer Can take values from 1 to 10. Example (config-dnspx)>threshold 5 Dns::Proxy: Dns-proxy set 5 threshold. (config-dnspx)>no threshold Dns::Proxy: Dns-proxy threshold cleared. History Version Description 2.04 The dns-proxy threshold command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 74: Dyndns Profile
Prefix no Change settings Multiple input Synopsis (config-dyndns)> ‹ › domain name (config-dyndns)> no domain Arguments Argument Value Description The domain name. Maximum domain domain String name length is 254 characters. http:\\www.dyndns.com http:\\www.no-ip.com Command Reference Guide — Keenetic Lite (KN-1310)
Page 75: Dyndns Profile Password
The dyndns profile password command has been introduced. 3.15.3 dyndns profile send-address Description Enable the necessity of connection IP-address indication in DynDns request. Command with no prefix removes the setting. Prefix no Change settings Multiple input Synopsis (config-dyndns)> send-address Keenetic Lite (KN-1310) — Command Reference Guide...
Page 76: Dyndns Profile Type
(defined with dyndns profile url command). Example (config-dyndns)> type dyndns DynDns::Profile: "test": type saved. History Version Description 2.00 The dyndns profile type command has been introduced. http:\\www.dyndns.com http:\\www.no-ip.com http:\\www.dns-master.ru Command Reference Guide — Keenetic Lite (KN-1310)
Page 77: Dyndns Profile Update-Interval
3.15.6 dyndns profile url Description Set dynamic DNS service custom URL. Prefix no Change settings Multiple input Synopsis (config-dyndns)> ‹ › (config-dyndns)> no url Arguments Argument Value Description Custom URL of DNS service. String Keenetic Lite (KN-1310) — Command Reference Guide...
Page 78: Dyndns Profile Username
Appendix. The commands work in relation to classes. The corresponding interface class is specified in the command description. Command with no prefix deletes the interface. Prefix no Change settings Multiple input Command Reference Guide — Keenetic Lite (KN-1310)
Page 79: Interface Authentication Chap
(config-if)> authentication chap CHAP authentication enabled. History Version Description 2.00 The interface authentication chap command has been introduced. 3.16.2 interface authentication eap-md5 Description Enable EAP-MD5 authentication support. Command with no prefix disables EAP-MD5. Prefix no Keenetic Lite (KN-1310) — Command Reference Guide...
Page 80: Interface Authentication Eap-Ttls
3.16.4 interface authentication identity Description Specify user name for device authentication on the remote system. Equally often used on PPTP, PPPoE and L2TP connections. Command with no prefix deletes the previously specified user name. Command Reference Guide — Keenetic Lite (KN-1310)
Page 81: Interface Authentication Mschap
Change settings Multiple input Interface type Secure Synopsis (config-if)> authentication mschap (config-if)> no authentication mschap Example (config-if)> authentication mschap MSCHAP authentication enabled. History Version Description 2.00 The interface authentication mschap command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 82: Interface Authentication Mschap-V2
Change settings Multiple input Interface type Secure Synopsis (config-if)> authentication pap (config-if)> no authentication pap Example (config-if)> authentication pap PAP authentication enabled. History Version Description 2.00 The interface authentication pap command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 83: Interface Authentication Password
Command with no prefix turns authentication to open mode. Prefix no Change settings Multiple input Interface type WiFi Synopsis (config-if)> authentication shared (config-if)> no authentication shared Keenetic Lite (KN-1310) — Command Reference Guide...
Page 84: Interface Authentication Wpa-Psk
3.16.11 interface bandwidth-limit Description Set tariff speed of Internet connection for the interface. It is used to determine the bandwidth usage in the traffic analysis (see service ntce command). Command with no prefix removes setting. Command Reference Guide — Keenetic Lite (KN-1310)
Page 85: Interface Ccp
Command with no prefix disables CCP. Prefix no Change settings Multiple input Interface type Synopsis (config-if)> (config-if)> no ccp Example (config-if)> ccp CCP enabled. History Version Description 2.00 The interface ccp command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 86: Interface Channel
Set a schedule for radio channel automatic scanning. By default, the setting is disabled. Command with no prefix disables the setting. Prefix no Change settings Multiple input Interface type Radio Synopsis (config-if)> ‹ ›:‹ › ‹ › channel auto-rescan interval interval Command Reference Guide — Keenetic Lite (KN-1310)
Page 87: Interface Channel Width
Expand the bandwidth up to 40 MHz using 40-above next channel. Expand the bandwidth up to 40 MHz using 40-below previous channel. Example (config-if)> channel width 20 Network::Interface::Rtx::WifiMaster: a channel bandwidth setting ► applied. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 88: Interface Compatibility
The interface compatibility command has been introduced. 3.16.17 interface connect Description Start the process of connecting to a remote node. Command with no prefix terminates the connection. Prefix no Change settings Multiple input Command Reference Guide — Keenetic Lite (KN-1310)
Page 89: Interface Country-Code
Synopsis (config-if)> ‹ › country-code code Arguments Argument Value Description The country code. code String Example (config-if)> country-code RU Country code set. History Version Description 2.00 The interface country-code command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 90: Interface Debug
Prefix no Change settings Multiple input Synopsis (config-if)> ‹ › description description (config-if)> no description Arguments Argument Value Description Arbitrary description of the interface. description String Example (config-if)> description 111_2222_33333 Interface description saved. Command Reference Guide — Keenetic Lite (KN-1310)
Page 91: Interface Down
Command with no prefix resets setting to default. Prefix no Change settings Multiple input Interface type Ethernet Synopsis (config-if)> ‹ › duplex mode (config-if)> no duplex Arguments Argument Value Description Full duplex mode. mode full Keenetic Lite (KN-1310) — Command Reference Guide...
Page 92: Interface Dyndns Profile
Update IP-address for DynDns manually. By default command works in accordance with the policy of the DynDns service provider, that is not allows to update too often. Using the keyword allows you to update excluding force policy of the service provider. Command Reference Guide — Keenetic Lite (KN-1310)
Page 93: Interface Encryption Disable
2.00 The interface encryption disable command has been introduced. 3.16.26 interface encryption enable Description Enable encryption on the wireless interface. By default, encryption is used. Command with no prefix disables wireless interface encryption. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 94: Interface Encryption Key
The key number. Overall, up to 4 keys Integer could be specified. The key value as a hexadecimal number, value String consisting of 10 or 26 digits. Indicates that this key will be used by default Keyword default. Command Reference Guide — Keenetic Lite (KN-1310)
Page 95: Interface Encryption Mppe
WPA2, but supporting automatically disables when any of the is enabled. Command with no prefix disables support. Prefix no Change settings Multiple input Interface type WiFi Keenetic Lite (KN-1310) — Command Reference Guide...
Page 96: Interface Encryption Wpa2
The interface encryption wpa2 command has been introduced. 3.16.31 interface flowcontrol Description Configure Ethernet flow control Tx/Rx. By default, the feature is enabled. Command with no prefix disables the feature. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 97: Interface Hide-Ssid
The mode is disabled by default. Command with no prefix disables the mode. Prefix no Change settings Multiple input Interface type Access Point Synopsis (config-if)> hide-ssid (config-if)> no hide-ssid Example (config-if)> hide-ssid SSID broadcasting disabled. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 98: Interface Igmp Downstream
There can be only one interface. fork Command with no prefix disables the mode. Prefix no Change settings Multiple input Interface type Synopsis (config-if)> igmp fork (config-if)> no igmp fork Command Reference Guide — Keenetic Lite (KN-1310)
Page 99: Interface Igmp Upstream
Specify Ethernet-interface name which will be added to the software bridge as a port. Command with no prefix removes the interface from the bridge. Prefix no Change settings Multiple input Interface type Bridge Keenetic Lite (KN-1310) — Command Reference Guide...
Page 100: Interface Inherit
Bridge Synopsis (config-if)> ‹ › inherit interface (config-if)> ‹ › no inherit interface Arguments Argument Value Description Name or alias of the Ethernet-interface interface Interface that should be plugged into the bridge. name Command Reference Guide — Keenetic Lite (KN-1310)
Page 101: Interface Ip Access-Group
The interface ip access-group command has been introduced. 3.16.39 interface ip address Description Change the IP-address and the mask of the network interface. If the address automatic configuration service is running on the interface, for instance, Keenetic Lite (KN-1310) — Command Reference Guide...
Page 102 (config-if)> ip address 172.17.24.9/24 Network address saved. (config-if)> [Ctrl]+[D] (config)> show interface FastEthernet0/Vlan43 mac: 00:23:f8:5b:d3:f4 index: 43 type: Vlan description: state: up link: down address: 172.17.24.9 mask: 255.255.255.0 mtu: 1500 global: no (config)> Command Reference Guide — Keenetic Lite (KN-1310)
Page 103: Interface Ip Address Dhcp
The interface ip address dhcp command has been introduced. 3.16.41 interface ip adjust-ttl Description Modify the TTL of the first packet for all incoming interface connections. Command with no prefix cancels the setting. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 104: Interface Ip Adjust-Ttl Send
(config-if)> no ip adjust-ttl send Arguments Argument Value Description The value of TTL changing. Can take values send Integer from inclusively. Example (config-if)> ip adjust-ttl send 10 Network::Interface::IP: Outgoing TTL set to 10. Command Reference Guide — Keenetic Lite (KN-1310)
Page 105: Interface Ip Alias
The interface ip alias command has been introduced. 3.16.44 interface ip dhcp client class-id Description Specify the device vendor name where DHCP client is running (dhcp option 60). Command with no prefix removes the setting. Prefix no Keenetic Lite (KN-1310) — Command Reference Guide...
Page 106: Interface Ip Dhcp Client Debug
Value Description Vendor class name. class String Example (config-if)> ip dhcp client class-id "Keenetic Lite" Dhcp::Client: ISP DHCP client vendor class is set to "Keenetic ► Lite". History Version Description 2.02 The interface ip dhcp client class-id command has been introduced.
Page 107: Interface Ip Dhcp Client Displace
Enable automatic addition of host routes to the DNS-server received from the DHCP-server. Enabled by default. Command with no prefix disables the setting. Prefix no Change settings Multiple input Interface type Ethernet Synopsis (config-if)> ip dhcp client dns-routes Keenetic Lite (KN-1310) — Command Reference Guide...
Page 108: Interface Ip Dhcp Client Fallback
The interface ip dhcp client fallback command has been introduced. 3.16.49 interface ip dhcp client hostname Description Assign a host name which is sent in DHCP-request. Command with no prefix resets the host name to default. Prefix no Command Reference Guide — Keenetic Lite (KN-1310)
Page 109: Interface Ip Dhcp Client Name-Servers
(config-if)> no ip dhcp client name-servers Example (config-if)> ip dhcp client name-servers Dhcp::Client: Home DHCP name servers are enabled. History Version Description 2.00 The interface ip dhcp client name-servers command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 110: Interface Ip Dhcp Client Release
(config-if)> no ip dhcp client renew Example (config-if)> ip dhcp client renew Dhcp::Client: IP address renewed. History Version Description 2.03 The interface ip dhcp client renew command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 111: Interface Ip Dhcp Client Routes
“global”. By default, setting is disabled. Command with no prefix removes property. Prefix no Change settings Multiple input Interface type Synopsis (config-if)> ‹ › ip global priority (config-if)> no ip global Keenetic Lite (KN-1310) — Command Reference Guide...
Page 112: Interface Ip Mru
3.16.56 interface ip mtu Description Set the value on the network interface. When establishing a connection (IPCP), packets with defined size will be sent to the remote host, even if the host requested a lower value. Command Reference Guide — Keenetic Lite (KN-1310)
Page 113: Interface Ip Remote
Multiple input Interface type Synopsis (config-if)> ‹ › ip remote address (config-if)> no ip remote Arguments Argument Value Description A remote peer address. address IP-address Example (config-if)> ip remote 192.168.2.19 Remote address saved. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 114: Interface Ip Tcp Adjust-Mss
The interface ip tcp adjust-mss command has been introduced. 3.16.59 interface ipcp default-route Description Use the remote peer address as default gateway. By default, the setting is enabled. Command with no prefix denies default gateway changing. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 115: Interface Ipcp Dns-Routes
The interface ipcp dns-routes command has been introduced. 3.16.61 interface ipcp name-servers Description servers addresses which are received via IPCP. By default, the setting is enabled. Command with no prefix removes the setting. Prefix no Keenetic Lite (KN-1310) — Command Reference Guide...
Page 116: Interface Ipcp Vj
Argument Value Description Enable compression of Connection ID into Keyword headers. Example (config-if)> ipcp vj cid VJ compression enabled. Network::Interface::PPP: done. History Version Description 2.03 The interface ipcp vj command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 117: Interface Ipsec Encryption-Level
(config-if)> ipsec encryption-level weak Network::Interface::Secure: "Gre0": security level is set to ► "weak". (config-if)> no ipsec encryption-level Network::Interface::Secure: "Gre0": security level was reset. History Version Description 2.08 The interface ipsec encryption-level command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 118: Interface Ipsec Ignore
Change settings Multiple input Interface type Secure Synopsis (config-if)> ipsec ikev2 (config-if)> no ipsec ikev2 Example (config-if)> ipsec ikev2 Network::Interface::Secure: IKEv2 is enabled. (config-if)> no ipsec ikev2 Network::Interface::Secure: IKEv2 is disabled, enable IKEv1. Command Reference Guide — Keenetic Lite (KN-1310)
Page 119: Interface Ipsec Preshared-Key
Confgure an IPv6 address on the interface. If the argument is , address auto is autoconfigured. Passing a literal address as an argument will assign it statically. Command with no prefix removes the setting. Prefix no Change settings Keenetic Lite (KN-1310) — Command Reference Guide...
Page 120: Interface Ipv6 Force-Default
IPv6 gateway History Version Description 2.00 The interface ipv6 force-default command has been introduced. 3.16.69 interface ipv6 name-servers Description Configure retrieval of information. When is set, enables DHCPv6 auto name-server requests. Command Reference Guide — Keenetic Lite (KN-1310)
Page 121: Interface Ipv6 Prefix
[ ‹ › | no ipv6 prefix prefix auto Arguments Argument Value Description Enable prefix delegation. auto Keyword Manual input of prefix. prefix Prefix Example (config-if)> ipv6 prefix 2001:db8:43:ab12::/64 Static IPv6 prefix added. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 122: Interface Ipv6Cp
Command with no prefix disables this option and all the remote peer requests for the ACFC negotiation will be rejected. Prefix no Change settings Multiple input Interface type Synopsis (config-if)> lcp acfc (config-if)> no lcp acfc Command Reference Guide — Keenetic Lite (KN-1310)
Page 123: Interface Lcp Echo
If count of echo requests goes unanswered, the connection is terminated. Pppd will send LCP echo-request frames adaptive Keyword only if no traffic was received from the peer since the last echo-request was sent. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 124: Interface Lcp Pfc
Add a MAC-address to the permit/deny filtering list of the interface. Type of access list is set with interface mac access-list type command. Command with no prefix removes the specified MAC-address from the ACL. Prefix no Command Reference Guide — Keenetic Lite (KN-1310)
Page 125: Interface Mac Access-List Type
Type of filtering list is not defined. type none Only approved MAC-addresses will be permit added to the list. Only restricted MAC-addresses will be deny added to the list. Example (config-if)> mac access-list type permit set access-policy: permit Keenetic Lite (KN-1310) — Command Reference Guide...
Page 126: Interface Mac Address
MAC address saved. History Version Description 2.00 The interface mac address command has been introduced. 3.16.78 interface mac address factory Description Set the factory MAC-address to the interface. Prefix no Change settings Multiple input Command Reference Guide — Keenetic Lite (KN-1310)
Page 127: Interface Mac Clone
For example, for PPPoE the interface peer command specifies the name of access hub, and for PPTP — remote host name or IP-address. Command with no prefix cancels the setting. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 128: Interface Ping-Check Profile
Arguments Argument Value Description Profile name to assign. profile String Example (config-if)> ping-check profile TEST PingCheck::Client: added "ISP" to "TEST" profile. History Version Description 2.04 The interface ping-check profile command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 129: Interface Power
Prefix no Change settings Multiple input Interface type PPPoE Synopsis (config-if)> ‹ › pppoe service service (config-if)> no pppoe service Arguments Argument Value Description Name of PPPoE service. service String Keenetic Lite (KN-1310) — Command Reference Guide...
Page 130: Interface Preamble-Short
Set the period of time between automatic changes of the secret keys, which all devices on the network share. Command with no prefix disables keys changing. Prefix no Change settings Multiple input Interface type WiFi Synopsis (config-if)> ‹ › rekey-interval interval (config-if)> no rekey-interval Command Reference Guide — Keenetic Lite (KN-1310)
Page 131: Interface Rename
2.08 The interface rename command has been introduced. 3.16.87 interface rf e2p set Description Change the memory cell value of calibration data at for the offset value specified interface. Prefix no Change settings Keenetic Lite (KN-1310) — Command Reference Guide...
Page 132: Interface Security-Level
By default, to all newly created interfaces security public level assigned. Access lists access-list have higher priority than the security levels, so they can be used to set additional rules of packet filtering. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 133: Interface Speed
Configure the speed of the Ethernet interface. By default, value is set. auto Command with no prefix resets setting to default. Prefix no Change settings Multiple input Interface type Ethernet Synopsis (config-if)> ‹ › speed speed (config-if)> no speed Keenetic Lite (KN-1310) — Command Reference Guide...
Page 134: Interface Speed Nonegotiate
The interface speed nonegotiate command has been introduced. 3.16.91 interface ssid Description Specify the wireless network name (SSID) for interfaces “wireless station” and “access point”. Depending on the type of interface, SSID value is processed differently. Command Reference Guide — Keenetic Lite (KN-1310)
Page 135: Interface Switchport Access
Command with no prefix removes the setting. Prefix no Change settings Multiple input Interface type Port Synopsis (config-if)> ‹ › switchport access vlan (config-if)> no switchport access vlan Keenetic Lite (KN-1310) — Command Reference Guide...
Page 136: Interface Switchport Friend
ID. Can take values Integer from 1 to 4094 inclusively. Example (config-if)> switchport friend vlan 2 Network::Interface::Switch: "FastEthernet0/0": set friend VLAN ► ID: 2. History Version Description 2.06 The interface switchport friend command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 137: Interface Switchport Mode
Enable double tagging. q-in-q Keyword Example (config-if)> switchport mode access Network::Interface::Switch: "FastEthernet0/1": access mode ► enabled. History Version Description 2.06 The interface switchport mode command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 138: Interface Switchport Trunk
Set the limit of data rate on a specified interface in both directions. By default speed is not limited. Command with no prefix removes the setting. Prefix no Change settings Multiple input Synopsis (config-if)> ‹ › traffic-shape rate rate (config-if)> no traffic-shape Command Reference Guide — Keenetic Lite (KN-1310)
Page 139: Interface Tsp
The interface tsp command has been introduced. 3.16.97.1 interface tsp password Description Configure password to connect via TSP. Command with no prefix clears password. Prefix no Change settings Multiple input Interface type TunnelSixInFour Keenetic Lite (KN-1310) — Command Reference Guide...
Page 140 The interface tsp prefix-length command has been introduced. 3.16.97.3 interface tsp server Description Server IPv4 address which is received from tunnel broker. Command with no prefix removes server's IP. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 141: Interface Tunnel Destination
Set the remote end of tunnel. If it is used in conjunction with an automatic IPSec connection associated with the tunnel, remote host becomes the initiator of an IPSec connection. Command with no prefix resets the setting. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 142: Interface Tunnel Eoip Id
Command with no prefix resets the setting. Prefix no Change settings Multiple input Interface type Eoip Synopsis (config-if)> ‹ › tunnel eoip id (config-if)> no tunnel eoip id Arguments Argument Value Description Tunnel ID. Integer Command Reference Guide — Keenetic Lite (KN-1310)
Page 143: Interface Tunnel Source
Network::Interface::Tunnel: "Gre0": source interface set to auto. (config-if)> no tunnel source Network::Interface::Tunnel: "Gre0": source was reset. History Version Description 2.08 The interface tunnel source command has been introduced. 2.09 The auto argument has been added. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 144: Interface Tx-Burst
Multiple input Synopsis (config-if)> ‹ › tx-queue length (config-if)> no tx-queue Arguments Argument Value Description Queue length can take values from 0 to length Integer 65536. Example (config-if)> tx-queue 255 Tx queue length saved. Command Reference Guide — Keenetic Lite (KN-1310)
Page 145: Interface Up
Interface type Synopsis (config-if)> ‹ › usb power-cycle pause Arguments Argument Value Description Period of time in which usb-modem will be pause Integer disabled, in milliseconds. Example (config-if)> usb power-cycle 3000 Core::Configurator: done. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 146: Interface Wmm
Enable functionality. Prefix no Change settings Multiple input Interface type WiFi Synopsis (config-if)> (config-if)> no wps Example (config-if)> wps WPS functionality enabled. History Version Description 2.00 The interface wps command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 147: Interface Wps Auto-Self-Pin
› wps button direction Arguments Argument Value Description Send WiFi configuration. direction send Receive WiFi configuration from Keenetic receive Lite. Example (config-if)> wps button send Sending WiFi configuration process started (software button mode). Keenetic Lite (KN-1310) — Command Reference Guide...
Page 148: Interface Wps Peer
Description Start WPS process using self PIN. Process takes 2 minutes or until the first connection occur. Prefix no Change settings Multiple input Interface type WiFi Synopsis (config-if)> ‹ › wps self-pin direction Command Reference Guide — Keenetic Lite (KN-1310)
Page 149: Ip Arp
MAC-address as six groups of two MAC-address hexadecimal digits separated by colons. Example (config)> ip arp 192.168.93.52 00:A0:CC:23:AF:4A Network::ArpTable: Static ARP entry saved. History Version Description 2.00 The ip arp command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 150: Ip Dhcp Class
Change settings Multiple input Synopsis (config-dhcp-class)> ‹ › ‹ › option number data (config-dhcp-class)> ‹ › no option number Arguments Argument Value Description Option number. Now the only value is number Integer used. Command Reference Guide — Keenetic Lite (KN-1310)
Page 151: Ip Dhcp Host
IP-address of the host. If not specified, the IP-address value is taken from the previous configuration. Example (config)> ip dhcp host HOST 192.168.1.44 new host "HOST" has been created. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 152: Ip Dhcp Pool
Arguments Argument Value Description DHCP pool name. name String Example (config)> ip dhcp pool test_pool pool "test_pool" has been created. History Version Description 2.00 The ip dhcp pool command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 153: Ip Dhcp Pool Bind
To work correctly class name should be the same as for ip dhcp class command. Command with no prefix removes selected class. Prefix no Change settings Multiple input Group entry (config-dhcp-pool-class) Synopsis (config-dhcp-pool)> ‹ › class class (config-dhcp-pool)> ‹ › no class class Keenetic Lite (KN-1310) — Command Reference Guide...
Page 154 Value of an option. data String Example (config-dhcp-pool-class)> option 6 ip 192.168.1.1 Dhcp::Server: Option 6 is set to 192.168.1.1. History Version Description 2.00 The ip dhcp pool class option command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 155: Ip Dhcp Pool Debug
Arguments Argument Value Description Default gateway address. address IP-address Example (config-dhcp-pool)> default-router 192.168.1.88 pool "test_pool" router address has been saved. History Version Description 2.00 The ip dhcp pool default-router command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 156: Ip Dhcp Pool Dns-Server
Specify the domain name that client should use when resolving hostnames via DNS (option 15). Command with no prefix cancels the setting. Prefix no Change settings Multiple input Synopsis (config-dhcp-pool)> ‹ › domain domain (config-dhcp-pool)> no domain Command Reference Guide — Keenetic Lite (KN-1310)
Page 157: Ip Dhcp Pool Enable
Configure the lease time of DHCP pool IP-address. Command with no prefix sets the default value, equal to seconds. 86400 Prefix no Change settings Multiple input Synopsis (config-dhcp-pool)> ‹ › lease lease (config-dhcp-pool)> no lease Keenetic Lite (KN-1310) — Command Reference Guide...
Page 158: Ip Dhcp Pool Range
IP-address Pool's end address. IP-address Pool size. size Integer Example (config-dhcp-pool)> range 192.168.15.43 3 pool "_WEBADMIN" range has been saved. History Version Description 2.00 The ip dhcp pool range command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 159: Ip Dhcp Pool Update-Dns
Prefix no Change settings Multiple input Synopsis (config-dhcp-pool)> ‹ › wpad wpad (config-dhcp-pool)> no wpad Arguments Argument Value Description URL of proxy. wpad String Example (config-dhcp-pool)> wpad http://wpad/wpad.dat Dhcp::Pool: WPAD option has been saved. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 160: Ip Dhcp Relay Lan
3.22 ip dhcp relay server Description Specify the IP-address of the DHCP-server, to which the relay will forward client requests from the LAN. Command with no prefix removes the setting. Prefix no Change settings Multiple input Command Reference Guide — Keenetic Lite (KN-1310)
Page 161: Ip Dhcp Relay Wan
DHCP-clients name will be sent. Example (config)> ip dhcp relay wan FastEthernet0/Vlan2 using WAN interface FastEthernet0/Vlan2. History Version Description 2.00 The ip dhcp relay wan command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 162: Ip Host
3.25 ip hotspot Description Enter the Hotspot configuration command group. Prefix no Change settings Multiple input Group entry (config-hotspot) Synopsis (config)> ip hotspot History Version Description 2.06 The ip hotspot command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 163: Ip Hotspot Auto-Scan Interface
Set interval for probes of online hosts. Command with no prefix resets setting to default. Prefix no Change settings Multiple input Interface type Synopsis (config-hotspot)> ‹ › auto-scan interval interval (config-hotspot)> no auto-scan interval Keenetic Lite (KN-1310) — Command Reference Guide...
Page 164: Ip Hotspot Auto-Scan Passive
(config-hotspot)> auto-scan passive 5 hps Hotspot::Discovery::Manager: Auto-scan rate is set to 5 hps. (config-hotspot)> auto-scan no passive Hotspot::Discovery::Manager: Auto-scan rate reset to default. History Version Description 2.08 The ip hotspot auto-scan passive command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 165: Ip Hotspot Auto-Scan Timeout
Define the Hotspot policy for all interfaces. Policy applies to all interfaces that have no explicitly configured access rule, Section 3.25.7 on page 167. Default policy: permit Command with no prefix resets policy to default. Prefix no Change settings Multiple input Interface type Keenetic Lite (KN-1310) — Command Reference Guide...
Page 166: Ip Hotspot Host
Arguments Argument Value Description Host MAC address. Host must be MAC address registered via known host advance. Permit access to the internet. access permit Deny access to the internet. deny Command Reference Guide — Keenetic Lite (KN-1310)
Page 167: Ip Hotspot Policy
Multiple input Interface type Synopsis (config-hotspot)> ‹ › ‹ › policy interface access (config-hotspot)> ‹ › no policy interface Arguments Argument Value Description Ethernet interface full name or an interface Interface name alias. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 168: Ip Hotspot Wake
Host MAC address. MAC address History Version Description 2.08 The ip hotspot wake command has been introduced. 3.26 ip http lockout-policy Description Set HTTP bruteforce detection parameters for public interfaces. By default, feature is enabled. Command Reference Guide — Keenetic Lite (KN-1310)
Page 169: Ip Http Port
2.08 The ip http lockout-policy command has been introduced. 3.27 ip http port Description Assign HTTP port for Web interface of Keenetic Lite. By default, value is used. Command with no prefix resets HTTP port to default. Prefix no Change settings...
Page 170: Ip Http Proxy
The ip http proxy command has been introduced. 3.28.1 ip http proxy allow Description Set HTTP proxy access. By default, access to the HTTP proxy is denied. Command with no prefix denies access to the proxy. Command Reference Guide — Keenetic Lite (KN-1310)
Page 171: Ip Http Proxy Domain
Argument Value Description A domain name. domain String Example (config-http-proxy)> domain static example.net Http::Manager: Configured base domain for proxy: TEST. History Version Description 2.08 The ip http proxy domain command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 172: Ip Http Proxy Domain Ndns
›] upstream http address-type port (config-http-proxy)> no upstream Arguments Argument Value Description HTTP-server address is MAC-address. address-type HTTP-server address is IP-address. HTTP-server address is full domain name. fqdn The port number. port Integer Command Reference Guide — Keenetic Lite (KN-1310)
Page 173: Ip Http Security-Level
The ip http security-level command has been introduced. 3.30 ip http ssl enable Description Enable HTTP SSL server. By default, the server is disabled. Command with no prefix disables SSL server. Prefix no Keenetic Lite (KN-1310) — Command Reference Guide...
Page 174: Ip Name-Server
› [ ‹ › [ ‹ › ] ] ip name-server address domain interface (config)> [ ‹ › ] [ ‹ › [ ‹ › ] ] no ip name-server address domain interface Command Reference Guide — Keenetic Lite (KN-1310)
Page 175: Ip Nat
IP-addresses to be translated. Mask of a translation range. There are two mask IP-mask ways to enter the mask: the canonical form (for example, ) and the 255.255.255.0 form of prefix bit length (for example, Keenetic Lite (KN-1310) — Command Reference Guide...
Page 176: Ip Nat Vpn
As the destination network, one can specify keyword. In this case, default a default route will be created. Command with no prefix removes the route with the specified parameters. Prefix no Change settings Multiple input Interface type Command Reference Guide — Keenetic Lite (KN-1310)
Page 177 Route metrics. Ignored in the current metric Integer implementation. Example (config)> ip route default Home static route added. History Version Description 2.00 The ip route command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 178: Ip Search-Domain
›) ) ( ( ip static interface address mask ‹ › ‹ › ‹ ›) | ( ‹ › ‹ › [‹ ›]) port through end-port to-address port to-address to-port | ‹ › ) to-address Command Reference Guide — Keenetic Lite (KN-1310)
Page 179 The sequence of commands to implement the required schema might look like this: interface Home ip address 172.16.1.1/24 interface Internet ip address 10.0.0.1/16 ip global 1 ip nat Home ip static tcp Internet 80 172.16.1.33 80 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 180: Ip Telnet
Description The number of failed attempts to threshold Integer log in. By default, value is used. An authorization ban duration for duration Integer the specified IP in minutes. By default, value is used. Command Reference Guide — Keenetic Lite (KN-1310)
Page 181: Ip Telnet Port
Description 2.08 The ip telnet port command has been introduced. 3.37.3 ip telnet security-level Description Set Telnet security level. By default, value is set. private Prefix no Change settings Multiple input Interface type Keenetic Lite (KN-1310) — Command Reference Guide...
Page 182: Ip Telnet Session Max-Count
Arguments Argument Value Description The maximal number of simultaneous count Integer sessions. Can take values from 1 to 4 inclusively. Example (config-telnet)> session max-count 2 Telnet::Server: the maximum session count set to 2. Command Reference Guide — Keenetic Lite (KN-1310)
Page 183: Ip Telnet Session Timeout
Command with no prefix removes the setting for specified host. If you use no arguments, the entire list of rate limits for all hosts will be removed. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 184: Ipv6 Firewall
Description 2.06 The ipv6 firewall command has been introduced. 3.40 ipv6 local-prefix Description Configure a local (ULA) prefix. Argument can be a literal prefix or default which generates a persistent unique prefix automatically. Command Reference Guide — Keenetic Lite (KN-1310)
Page 185: Ipv6 Name-Server
Prefix no Change settings Multiple input Synopsis (config)> ‹ › ipv6 name-server address (config)> [ ‹ › ] no ipv6 name-server address Arguments Argument Value Description Name server address. address IPv6-address Keenetic Lite (KN-1310) — Command Reference Guide...
Page 186: Ipv6 Route
The ipv6 route command has been introduced. 3.43 ipv6 subnet Description Access to a group of commands to configure a LAN IPv6 segment. If the segment is not found, the command tries to create it. Prefix no Command Reference Guide — Keenetic Lite (KN-1310)
Page 187: Ipv6 Subnet Bind
Arguments Argument Value Description Full interface name or an alias. interface Interface name Example (config-subnet)> bind WifiMaster0/AccessPoint1 Interface bound. History Version Description 2.00 The ipv6 subnet bind command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 188: Ipv6 Subnet Mode
Assign the subnet ID, which will determine the advertised prefix for the segment. Must be unique across subnets. Prefix no Change settings Multiple input Synopsis (config-subnet)> ‹ › number Arguments Argument Value Description Unique subnet ID. Integer Example (config-subnet)> number 3 Number changed. Command Reference Guide — Keenetic Lite (KN-1310)
Page 189: Ipv6 Subnet Stateless-Dhcp
Command with no prefix cancels the command, allowing data transfer between interfaces. private Prefix no Change settings Multiple input Synopsis (config)> isolate-private (config)> no isolate-private Example (config)> isolate-private Applied. History Version Description 2.00 The isolate-private command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 190: Known Host
Access to a group of commands to manage KeenDNS service. Prefix no Change settings Multiple input Group entry (ndns) Synopsis (config)> ndns History Version Description 2.07 The ndns command has been introduced. 3.46.1 ndns book-name Description Reserve Public DNS device hostname allocation. Command Reference Guide — Keenetic Lite (KN-1310)
Page 191 Chapter 3 Command Reference For hostname transmission to another Keenetic device transfer-code parameter is used. To transfer hostname it is nessesary: 1. Execute command with on the transmitting side. transfer-code 2. Execute the same command with the same parameters on the receiving side.
Page 192 [MsgCack], t = 531: item, hl = false, o = commit-reply, d = ► Commit stage complete., t = 532: item, hl = false, o = complete, d = All ► done., t = 532: Command Reference Guide — Keenetic Lite (KN-1310)
Page 193: Ndns Check-Name
Keenetic Lite (KN-1310) — Command Reference Guide...
Page 194: Ndns Drop-Name
= false, o = lock-local, d = the ► name is locked (for current transaction), t = 1: item, hl = false, o = cluster, d = ► quorumRemaining: 2, quorumPossible: 4, quorumTotal: 4, t = 1: Command Reference Guide — Keenetic Lite (KN-1310)
Page 195: Ndns Get-Booked
= 3608: Ndns::Client: Dropped "testname.mykeenetic.net". History Version Description 2.07 The ndns drop-name command has been introduced. 3.46.4 ndns get-booked Description Get actual info from the server about current booked Public DNS hostname. Prefix no Keenetic Lite (KN-1310) — Command Reference Guide...
Page 196: Ndns Get-Update
2017-09-11T11:27:32.167Z access: direct transfer: false Ndns::Client: Get-booked completed. History Version Description 2.08 The ndns get-booked command has been introduced. 3.46.5 ndns get-update Description Update Public DNS device hostname allocation on the server. Command Reference Guide — Keenetic Lite (KN-1310)
Page 197 = transfer, title = Transfer: name: testname domain: mykeenetic.net address: 81.200.27.56 updated: 2016-09-22T12:07:32.744Z access: direct transfer: false Ndns::Client: Get-update completed. History Version Description 2.07 The ndns get-update command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 198: Ntce Shaping
Access to configure NTP-client. Command with no prefix resets NTP-client configuration to default. Prefix no Change settings Multiple input Synopsis (config)> (config)> no ntp History Version Description 2.00 The ntp command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 199: Ntp Server
Change settings Multiple input Synopsis (config)> ‹ › ntp sync-period time (config)> no ntp sync-period Arguments Argument Value Description Time sinchronization, in minutes. Can take time Integer values from 60 minutes to 1 month. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 200: Opkg Chroot
/opt/install *.ipk *.tgz are unpacked to before running . Archives are deleted after /opt initrc installation. Command with no prefix disables the opkg feature. Prefix no Command Reference Guide — Keenetic Lite (KN-1310)
Page 201: Opkg Dns-Override
(config)> no opkg dns-override Example (config)> opkg dns-override Opkg::Manager: DNS override enabled. (config)> no opkg dns-override Opkg::Manager: DNS override disabled. History Version Description 2.05.C.3 The opkg dns-override command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 202: Opkg Initrc
TZ can be either a POSIX timezone specification in the form , or the name of a stdoffset[dst[offset][,start[/time],end[/time]]] zoneinfo-binary-format timezone file (the form used by glibc and almost all GNU systems). Command with no prefix resets timezone to undefined. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 203: Ping-Check Profile
Command with no prefix removes Ping Check profile. Prefix no Change settings Multiple input Group entry (config-pchk) Synopsis (config)> ‹ › ping-check profile name (config)> ‹ › no ping-check profile name Keenetic Lite (KN-1310) — Command Reference Guide...
Page 204: Ping-Check Profile Host
Internet at the interface considered absent. By default, value 5 is used. Command with no prefix resets to default. Prefix no Change settings Multiple input Synopsis (config-pchk)> ‹ › max-fails count Command Reference Guide — Keenetic Lite (KN-1310)
Page 205: Ping-Check Profile Min-Success
1 to 10 inclusively. Example (config-pchk)> min-success 3 PingCheck::Profile: profile "123" uses 3 success count for ► enabling interface. History Version Description 2.04 The ping-check profile min-success command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 206: Ping-Check Profile Mode
Specify port for connection to the remote host. Setting has a meaning for mode of Ping Check (ping-check mode command). connect Prefix no Change settings Multiple input Synopsis (config-pchk)> ‹ › port number Arguments Argument Value Description Port number. number Integer Command Reference Guide — Keenetic Lite (KN-1310)
Page 207: Ping-Check Profile Power-Cycle
Enable restarting interface if internet is not available. Disabled by default. Command with no prefix disables the feature. Prefix no Change settings Multiple input Synopsis (config-pchk)> restart-interface (config-pchk)> no restart-interface Example (config-pchk)> restart-interface PingCheck::Profile: Profile "test" enabled restarting interface. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 208: Ping-Check Profile Timeout
The ping-check profile timeout command has been introduced. 3.56.9 ping-check profile update-interval Description Set periodicity of Ping Check performing in seconds. Prefix no Change settings Multiple input Synopsis (config-pchk)> ‹ › update-interval time Command Reference Guide — Keenetic Lite (KN-1310)
Page 209: Ppe
The ppe command has been introduced. 2.05 Argument was implemented. engine 3.58 pppoe pass Description Enable PPPoE Pass Through function. You can enter up to 10 network nodes. Command with no prefix disables the function. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 210: Schedule
Command with no prefix deletes the schedule. Prefix no Change settings Multiple input Group entry (config-sched) Synopsis (config)> ‹ › schedule name (config)> ‹ › no schedule name Arguments Argument Value Description A schedule name. name String Command Reference Guide — Keenetic Lite (KN-1310)
Page 211: Schedule Action
Version Description 2.06 The schedule action command has been introduced. 3.59.2 schedule description Description Set description for the selected schedule. Command with no prefix deletes the description. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 212: Service Cloud-Control
Enable DHCP-server. If there is not enough settings to start the service (see dhcp pool), the service will not respond to the network. As soon as there are enough settings, the service will be enabled automatically. Command with no prefix stops the service. Command Reference Guide — Keenetic Lite (KN-1310)
Page 213: Service Dhcp-Relay
Description 2.00 The service dhcp-relay command has been introduced. 3.63 service dns-proxy Description Enable DNS-proxy. To configure the parameters of the service, use Section 3.14 on page 71 group of commands. Prefix no Keenetic Lite (KN-1310) — Command Reference Guide...
Page 214: Service Http
As soon as there are enough settings, the service will start automatically. Command with no prefix stops the service. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 215: Service Ipsec
2.06 The service ipsec command has been introduced. 3.67 service ntce Description Enable NTCE service. By default it is disabled. Command with no prefix stops the service. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 216: Service Ntp-Client
The service ntp-client command has been introduced. 3.69 service snmp Description Enable SNMP service. By default, the service is disabled. Command with no prefix stops the service. Prefix no Change settings Multiple input Synopsis (config)> service snmp Command Reference Guide — Keenetic Lite (KN-1310)
Page 217: Service Telnet
Description 2.00 The service telnet command has been introduced. 3.71 service udpxy Description Enable udpxy service. Command with no prefix stops the service. Prefix no Change settings Multiple input Synopsis (config)> service udpxy Keenetic Lite (KN-1310) — Command Reference Guide...
Page 218: Service Upnp
3.73 service vpn-server Description Enable VPN-server. Command with no prefix stops the service. Prefix no Change settings Multiple input Synopsis (config)> service vpn-server (config)> no service vpn-server Example (config)> service vpn-server Core::Configurator: done. Command Reference Guide — Keenetic Lite (KN-1310)
Page 219: Show
Description An access point name. You can see the list name String of available access points with help of associations ? command. Example (show)> associations WifiMaster0/AccessPoint0 station: mac: ec:1f:72:d3:6d:3f ap: WifiMaster0/AccessPoint0 authenticated: 1 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 220: Show Clock Date
Show the current system date. Prefix no Change settings Multiple input Synopsis (show)> clock date Example (show)> clock date weekday: 4 day: 18 month: 1 year: 2018 hour: 8 min: 46 sec: 2 msec: 660 dst: inactive Command Reference Guide — Keenetic Lite (KN-1310)
Page 221: Show Clock Timezone-List
(show)> clock timezone-list timezones: locality: Adak stdoffset: -36000 dstoffset: -32400 locality: Aden stdoffset: 10800 dstoffset: -1 locality: Almaty stdoffset: 21600 dstoffset: -1 locality: Amsterdam stdoffset: 3600 dstoffset: 7200 locality: Anadyr stdoffset: 43200 dstoffset: -1 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 222: Show Crypto Ike Key
Show info about selected IPsec crypto map. If you use no argument, the entire list of IPsec crypto maps will be displayed. Prefix no Change settings Multiple input Synopsis (show)> crypto map map-name Command Reference Guide — Keenetic Lite (KN-1310)
Page 223 00a6ebfc9d90f1c2 remote_spi: 3cd201ef496df75c local_init: yes ike_cypher: aes-cbc-256 ike_hmac: sha1 ike_dh_group: 2 phase2_sa_list: phase2_sa, index = 0: unique_id: 304 request_id: 185 sa_state: INSTALLED mode: TUNNEL protocol: ESP encapsulation: yes local_spi: ca59bfcf remote_spi: cde23d83 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 224: Show Dot1X
An Ethernet interface name. You can see interface Interface the list of available Ethernet interfaces with name help of dot1x ? command. Example (config)> show dot1x ISP dot1x: id: FastEthernet0/Vlan2 state: CONNECTING Core::Configurator: done. Command Reference Guide — Keenetic Lite (KN-1310)
Page 225: Show Drivers
0 subs: - module: name: dwc_otg size: 68416 used: 0 subs: - module: name: lm size: 1344 used: 1 subs: dwc_otg,[permanent] History Version Description 2.00 The show drivers command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 226: Show Interface
100M duplex: full port, index = 2: link: down speed: duplex: port, index = 3: link: down speed: duplex: port, index = 4: link: down speed: duplex: port, index = 5: link: up Command Reference Guide — Keenetic Lite (KN-1310)
Page 227: Show Interface Bridge
Attribute of inheritance. inherited Example (show)> interface Bridge1 bridge members: interface, link = no, inherited = yes: WifiMaster0/AccessPoint2 interface, link = yes: UsbLte0 History Version Description 2.03 The show interface bridge command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 228: Show Interface Channels
= 1: number: 2 ext-40-above: yes ext-40-below: yes vht-80: yes channel, index = 2: number: 3 ext-40-above: yes ext-40-below: yes vht-80: yes channel, index = 3: Command Reference Guide — Keenetic Lite (KN-1310)
Page 229: Show Interface Country-Codes
3.74.11 show interface country-codes Description Show the list of available country codes on a radio interface. Prefix no Change settings Multiple input Interface type Radio Synopsis (show)> ‹ › interface name country-codes Keenetic Lite (KN-1310) — Command Reference Guide...
Page 230: Show Interface Mac
AU country: Australia History Version Description 2.03 The show interface country-codes command has been introduced. 3.74.12 show interface mac Description Show the table of MAC-addresses of the switch. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 231 40:4a:03:78:01:af 84:8e:0c:3f:79:05 ec:43:f6:73:0a:99 ec:43:f6:04:2b:05 b2:b2:dc:5f:09:b3 ec:43:f6:72:4e:51 00:30:48:93:91:a7 f0:c1:f1:95:c3:fb b8:ca:3a:8a:c7:43 ec:43:f6:da:78:79 10:7b:ef:59:7b:61 ec:43:f6:ff:f8:8b 58:8b:f3:65:8c:91 ec:43:f6:cf:0e:ef 00:ee:bd:a1:18:51 ec:43:f6:72:4e:69 90:e2:ba:07:9a:81 00:00:5e:00:01:01 00:08:9b:dc:8d:17 50:e5:49:58:2b:5a 90:e2:ba:07:99:55 ec:43:f6:04:36:8d ec:43:f6:05:44:49 de:06:21:02:b3:e2 40:4a:03:60:80:05 00:0c:29:d5:84:c0 00:08:9b:dc:92:55 00:08:9b:dc:92:56 00:1b:0c:7f:b6:41 10:2a:b3:a6:86:18 10:7b:ef:df:83:a7 01:00:5e:00:00:fb ......Keenetic Lite (KN-1310) — Command Reference Guide...
Page 232: Show Interface Rf E2P
[0x006A]:1413 [0x006C]:1414 [0x006E]:2264 [0x0070]:00F1 [0x0072]:1133 [0x0074]:0000 [0x0076]:FC62 [0x01E8]:FFFF [0x01EA]:FFFF [0x01EC]:FFFF [0x01EE]:FFFF [0x01F0]:FFFF [0x01F2]:FFFF [0x01F4]:FFFF [0x01F6]:FFFF [0x01F8]:FFFF [0x01FA]:FFFF [0x01FC]:FFFF [0x01FE]:FFFF ........History Version Description 2.04 The show interface rf e2p command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 233: Show Interface Stat
The show interface stat command has been introduced. 3.74.15 show interface wps pin Description Show the access point WPS PIN. Prefix no Change settings Multiple input Interface type WiFi Synopsis (show)> ‹ › interface name wps pin Keenetic Lite (KN-1310) — Command Reference Guide...
Page 234: Show Interface Wps Status
Full name or an alias of the interface. name Interface name Output Element Value Root node. WPS is configured for Access Point. configured Auto-self-pin mode state. auto-self-pin status disabled enabled active direction send Command Reference Guide — Keenetic Lite (KN-1310)
Page 235: Show Ip Arp
Example (show)> ip arp =================================================== Interface =================================================== 192.168.75.209 9c:b7:0d:91:e7:31 Home 82.135.72.150 00:0e:0c:09:db:60 192.168.75.106 88:53:2e:5e:07:1d Home 192.168.75.201 7c:61:93:eb:6c:77 Home 192.168.75.203 00:19:d2:48:d6:dc Home 10.10.30.34 a0:88:b4:40:9c:98 GuestWiFi 192.168.75.203 7c:61:93:ee:88:67 Home 192.168.75.211 00:26:c7:4a:e0:16 Home 82.138.72.163 34:51:c9:c6:53:cf Keenetic Lite (KN-1310) — Command Reference Guide...
Page 236: Show Ip Dhcp Bindings
The show ip dhcp bindings command has been introduced. 3.74.19 show ip dhcp pool Description Show information about specified pool. If you use no argument, the information about all system pools will be displayed. Command Reference Guide — Keenetic Lite (KN-1310)
Page 237: Show Ip Hotspot
3.74.20 show ip hotspot Description Show hotspot hosts. Prefix no Change settings Multiple input Synopsis (show)> ip hotspot Example (show)> ip hotspot host: mac: 24:92:0e:92:e5:44 via: 24:92:0e:92:e5:44 ip: 192.168.1.41 hostname: android-41d997d510af8ff9 name: interface: id: Bridge0 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 238 0 txbytes: 0 uptime: 884 link: up ssid: Bewilderbeast ap: WifiMaster0/AccessPoint0 authenticated: yes txrate: 130 ht: 20 mode: 11n gi: 800 rssi: -37 mcs: 15 Command Reference Guide — Keenetic Lite (KN-1310)
Page 239: Show Ip Name-Server
History Version Description 2.00 The show ip name-server command has been introduced. 3.74.22 show ip nat Description Show network address translation table. Prefix no Change settings Multiple input Synopsis (show)> ip nat Keenetic Lite (KN-1310) — Command Reference Guide...
Page 240: Show Ip Route
‹ › ‹ › ] ip route sort criteria direction Arguments Argument Value Description Routing table records are sorted in direction ascending ascending order. Routing table records are sorted in descending descending order. Command Reference Guide — Keenetic Lite (KN-1310)
Page 241: Show Ipsec
0/0/0/0, scheduled: 10 loaded plugins: charon aes des sha1 sha2 md5 random nonce ► openssl xcbc cmac hmac attr kernel-netlink socket-default stroke ► updown eap-mschapv2 eap-dynamic xauth-generic xauth-eap ► error-notify systime-fix Listening IP addresses: Keenetic Lite (KN-1310) — Command Reference Guide...
Page 242: Show Ipv6 Addresses
Show a list of current IPv6-addresses. Prefix no Change settings Multiple input Synopsis (show)> ipv6 addresses Example (show)> ipv6 addresses address: address: 2001:db8::1 interface: ISP valid-lifetime: infinite address: address: 2001:db8::ce5d:4eff:fe4f:aab2 interface: Home valid-lifetime: infinite address: Command Reference Guide — Keenetic Lite (KN-1310)
Page 243: Show Ipv6 Prefixes
ISP valid-lifetime: infinite preferred-lifetime: infinite prefix: prefix: fd3c:4268:1559::/48 interface: valid-lifetime: infinite preferred-lifetime: infinite prefix: prefix: fd01:db8:43::/48 interface: valid-lifetime: infinite preferred-lifetime: infinite History Version Description 2.00 The show ipv6 prefixes command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 244: Show Ipv6 Routes
Description Show when and who made the latest changes in the settings. Prefix no Change settings Multiple input Synopsis (show)> last-change Example (show)> last-change date: Thu, 12 Jul 2012 10:01:47 GMT agent: cli Command Reference Guide — Keenetic Lite (KN-1310)
Page 245: Show Log
I [Jul 12 12:08:44] wmond: WifiMaster0/AccessPoint0: ► STA(d8:b3:77:36:05:c1) pairwise key handshaking timeout. I [Jul 12 12:08:44] wmond: WifiMaster0/AccessPoint0: ► STA(d8:b3:77:36:05:c1) had deauthenticated. History Version Description 2.00 The show log command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 246: Show Ndns
Description Show information about the firewall working. Need to provide remote technical support. Prefix no Change settings Multiple input Synopsis (show)> netfilter History Version Description 2.00 The show netfilter command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 247: Show Ntce Hosts
The indicator of the initial synchronization. ❸ Time is taken from NDSS server. ❹ Time is set by the user manually. ❺ Prefix no Change settings Multiple input Synopsis (show)> ntp status Example (show)> ntp status Keenetic Lite (KN-1310) — Command Reference Guide...
Page 248: Show Ping-Check
Example (show)> ping-check pingcheck: profile: TEST host: 8.8.8.8 port: 80 max-fails: 7 timeout: 1 mode: connect interface: ISP fail count: 0 status: pass pingcheck: profile: TEST1 mode: icmp pingcheck: profile: TEST2 mode: icmp Command Reference Guide — Keenetic Lite (KN-1310)
Page 249: Show Running-Config
0.0.0.0 0.0.0.0 10.1.30.1 255.255.255.255 access-list _WEBADMIN_ISP permit tcp 0.0.0.0 0.0.0.0 192.168.15.200 255.255.255.255 ► port eq 3389 permit icmp 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 isolate-private dyndns profile _ABCD dyndns profile _WEBADMIN type dyndns Keenetic Lite (KN-1310) — Command Reference Guide...
Page 250 82.138.7.141 ISP auto ip route 82.138.7.132 ISP auto ip route 82.138.7.27 PPTP0 auto ip dhcp pool _WEBADMIN range 192.168.15.200 192.168.15.219 bind Home ip dhcp pool _WEBADMIN_GUEST_AP range 10.1.30.33 10.1.30.52 bind GuestWiFi Command Reference Guide — Keenetic Lite (KN-1310)
Page 251 9430B54530B52EDC 9430B54530B52EDC: automount permissive History Version Description 2.00 The show running-config command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 252: Show Self-Test
? command. Example (show)> site-survey WifiStation0 ====================================================================== ESSID Rate ====================================================================== Gena 00:23:f8:5b:d3:f5 300Mbit/s Keenetic-2034 00:23:f8:5b:d3:f4 300Mbit/s Sonar 40:4a:03:b4:5d:18 54Mbit/s History Version Description 2.00 The show site-survey command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 253: Show System
The show system command has been introduced. 3.74.39 show tags Description Show available authentication tags. Prefix no Change settings Multiple input Synopsis (show)> tags Example (show)> tags tag: cli tag: readonly tag: printers tag: cifs tag: http Keenetic Lite (KN-1310) — Command Reference Guide...
Page 254: Show Upnp Redirect
1 interface: ISP protocol: udp port: 11175 to-address: 192.168.15.206 to-port: 11175 description: Skype UDP at 192.168.12.286:11175 (2024) packets: 0 bytes: 0 History Version Description 2.00 The show upnp redirect command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 255: Show Version
► igmp,easyconfig,pingcheck,ppp,pptp,pppoe,ydns manufacturer: Keenetic Ltd. vendor: Keenetic series: KN model: Start (KN-1110) hw_version: 10118000 hw_id: KN-1110 device: Start class: Internet Center History Version Description 2.00 The show version command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 256: Show Vpn-Server
Set new name for SNMP community. By default, common name public used. Command with no prefix resets setting to default. Prefix no Change settings Multiple input Synopsis (config)> ‹ › snmp community community Command Reference Guide — Keenetic Lite (KN-1310)
Page 257: Snmp Contact
Snmp::Manager: SNMP community info reset. History Version Description 2.08 The snmp contact command has been introduced. 3.77 snmp location Description Assign the location of SNMP agent. By default, the location is not defined. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 258: System
2.00 The system command has been introduced. 3.78.1 system button Description Configure device buttons to handle specific actions. Available handlers depend on hardware configuration and installed modules. Command with no prefix remove setting. Command Reference Guide — Keenetic Lite (KN-1310)
Page 259: System Clock Date
(system)> button WLAN on double-click do WifiGuestApToggle Peripheral::Manager: "WLAN/double-click" handler set. History Version Description 2.03 The system button command has been introduced. 3.78.2 system clock date Description Adjust system date and time. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 260: System Clock Timezone
"Dublin". History Version Description 2.00 The system clock timezone command has been introduced. 3.78.4 system configuration factory-reset Description Reset configuration to the factory settings for all modes. Prefix no Command Reference Guide — Keenetic Lite (KN-1310)
Page 261: System Configuration Save
The system configuration save command has been introduced. 3.78.6 system debug Description Enable system debug. By default, setting is disabled. Command with no prefix disables the feature. Prefix no Change settings Multiple input Synopsis (system)> debug Keenetic Lite (KN-1310) — Command Reference Guide...
Page 262: System Domainname
Set the host name. Host name used to identify a node in the network. It is required to enable some of the built-in services, such as CIFS. Command with no prefix sets the default value, which depends on the model name. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 263: System Led Shutdown
Example (system)> led shutdown all Peripheral::Manager: LED shutdown mode set to "all". (system)> led no shutdown Peripheral::Manager: LED shutdown mode reset. History Version Description 2.08 The system led shutdown command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 264: System Log Clear
(system)> no log reduction Example (system)> log reduction Core::Configurator: done. History Version Description 2.04 The system log reduction command has been introduced. 3.78.12 system log server Description Add remote log server. Prefix no Command Reference Guide — Keenetic Lite (KN-1310)
Page 265: System Log Suppress
Argument Value Description Process ID which messages need ident String to suppress. Example (system)> log suppress kernel Syslog: added suppression "kernel". History Version Description 2.04 The system log suppress command has been introduced. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 266: System Mode
Chapter 3 Command Reference 3.78.14 system mode Description Select system operating mode for Keenetic Lite. Prefix no Change settings Multiple input Synopsis (system)> ‹ › mode mode Arguments Argument Value Description Main mode. mode router Network adapter mode to connect client Ethernet devices to Wi-Fi network.
Page 267: System Set
New value of the system parameter. value String Example (config)> system (system)> set net.ipv4.ip_forward 1 (system)> set net.ipv4.tcp_fin_timeout 30 (system)> set net.ipv4.tcp_keepalive_time 120 (system)> set ► net.ipv4.netfilter.ip_conntrack_tcp_timeout_established 1200 (system)> set net.ipv4.netfilter.ip_conntrack_udp_timeout 60 (system)> set net.ipv4.netfilter.ip_conntrack_max 4096 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 268: Tools
OSI model using the protocol. Prefix no Change settings Multiple input Synopsis (tools)> ‹ › ‹ › [ arping address source-interface source-interface count ‹ › ] [ ‹ › ] count wait-time wait-time Command Reference Guide — Keenetic Lite (KN-1310)
Page 269: Tools Ping
Change settings Multiple input Synopsis (tools)> ‹ › [ ‹ › ] [ ‹ › ] ping host count count size packetsize Arguments Argument Value Description Domain name or host IP-address. host String Keenetic Lite (KN-1310) — Command Reference Guide...
Page 270: Tools Ping6
Change settings Multiple input Synopsis (tools)> ‹ › [ ‹ › ] [ ‹ › ] ping6 host count count size packetsize Arguments Argument Value Description Domain name or host IPv6-address. host String Command Reference Guide — Keenetic Lite (KN-1310)
Page 271: Tools Pppoe-Discovery
3.79.4 tools pppoe-discovery Description Scan available PPPoE servers. Prefix no Change settings Multiple input Synopsis (tools)> ‹ › [ pppoe-discovery interface source-interface retry-count ‹ › ] [ ‹ › ] count wait-time seconds Keenetic Lite (KN-1310) — Command Reference Guide...
Page 272: Tools Traceroute
Time in seconds between sending interval Integer packets. Default value — 0. Value must be in the range [0;15]. Time to wait for a response to a wait-time Integer probe (in seconds). Default value Command Reference Guide — Keenetic Lite (KN-1310)
Page 273 4 178.108.133.57 (178.108.133.57) 4.325 ms 20.235 ms 10.831 ► 8.463 ms 7.232 ms iki-crs.comcor.ru (62.117.100.134) 5.153 ms 10.526 ms ► 5.738 ms 3.137 ms 13.886 ms 6 213.79.127.21 (213.79.127.21) 30.260 ms 2.883 ms * 27.922 ► 3.487 ms Keenetic Lite (KN-1310) — Command Reference Guide...
Page 274: Udpxy
Command with no prefix resets buffer size to default. Prefix no Change settings Multiple input Synopsis (udpxy)> ‹ › buffer-size size (udpxy)> no buffer-size Arguments Argument Value Description Buffer size in bytes. Can take values from size Integer 1 to 1048576. Command Reference Guide — Keenetic Lite (KN-1310)
Page 275: Udpxy Buffer-Timeout
The udpxy buffer-timeout command has been introduced. 3.80.3 udpxy interface Description Bind udpxy to the specified interface. By default, current default gateway is used. Command with no prefix resets setting to default. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 276: Udpxy Port
Description Port number. Can take values from 0 to port Integer 65535. Example (udpxy)> port 2323 Udpxy::Manager: a port set to 2323. History Version Description 2.03 The udpxy port command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 277: Udpxy Renew-Interval
Command with no prefix resets setting to default. Prefix no Change settings Multiple input Synopsis (udpxy)> ‹ › timeout timeout (udpxy)> no timeout Arguments Argument Value Description Timeout in seconds. Can take values from timeout Integer 5 to 60. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 278: Upnp Forward
Rule with specified number in the list will index Integer be removed. History Version Description 2.00 The upnp forward command has been introduced. 3.82 upnp lan Description Set LAN interface where the UPnP-service is running. Command Reference Guide — Keenetic Lite (KN-1310)
Page 279: Upnp Redirect
(config)> | [ ‹ › | ( ‹ › ‹ ›) no upnp redirect and forward index protocol port Arguments Argument Value Description Rule for protocol will be added/deleted. protocol Keenetic Lite (KN-1310) — Command Reference Guide...
Page 280: User
Command with no prefix removes user account. Prefix no Change settings Multiple input Group entry (config-user) Synopsis (config)> ‹ › user name (config)> ‹ › no user name Arguments Argument Value Description Tne user name. name String Command Reference Guide — Keenetic Lite (KN-1310)
Page 281: User Password
Assign a special tag to the user account, which presence is checked at the time of user authorization as well as performing any action in the system. Set of permitted tag values depends on the system functionality. The full list is shown in the table below. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 282: Vpn-Server
Core::Authenticator: User "test" tagged with "http". History Version Description 2.00 The user tag command has been introduced. 3.85 vpn-server Description Access to a group of commands to configure VPN-server parameters. Prefix no Change settings Multiple input Command Reference Guide — Keenetic Lite (KN-1310)
Page 283: Vpn-Server Interface
The vpn-server interface command has been introduced. 3.85.2 vpn-server lcp echo Description Specify the testing rules of the PPTP connections with echo tools. Command with no prefix disables echo. Prefix no Change settings Multiple input Keenetic Lite (KN-1310) — Command Reference Guide...
Page 284: Vpn-Server Mppe
Synopsis (vpn-server)> ‹ › mppe mode (vpn-server)> ‹ › no mppe mode Arguments Argument Value Description Length of the encryption key is 40 bits. mode Length of the encryption key is 128 bits. Command Reference Guide — Keenetic Lite (KN-1310)
Page 285: Vpn-Server Mppe-Optional
PPTP-server. By default, value is 1350 used. Command with no prefix resets value to default. Prefix no Change settings Multiple input Synopsis (vpn-server)> ‹ › value (vpn-server)> no mru Keenetic Lite (KN-1310) — Command Reference Guide...
Page 286: Vpn-Server Mtu
2.04 The vpn-server mtu command has been introduced. 3.85.7 vpn-server multi-login Description Allow connection to VPN-server for multiple users from one account. Command with no prefix disables this feature. Prefix no Change settings Command Reference Guide — Keenetic Lite (KN-1310)
Page 287: Vpn-Server Pool-Range
Core::Configurator: done. History Version Description 2.04 The vpn-server pool-range command has been introduced. 3.85.9 vpn-server static-ip Description Bind IP-address to the user. User account must have tag. Command with no prefix removes binding. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 288: Yandexdns
Assign types to the hosts. By default type is used for all hosts. safe default type can be assigned to a single host. Command with no prefix resets setting to default. Prefix no Command Reference Guide — Keenetic Lite (KN-1310)
Page 289: Yandexdns Check-Availability
Multiple input Synopsis (yandexdns)> check-availability Example (yandexdns)> check-availability available History Version Description 2.04 The yandexdns check-availability command has been introduced. 3.86.3 yandexdns enable Description Enable Yandex.DNS service. Command with no prefix disables the service. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 290 Chapter 3 Command Reference Prefix no Change settings Multiple input Synopsis (yandexdns)> enable (yandexdns)> no enable Example (yandexdns)> enable YandexDns::Client: Yandex DNS is enabled. History Version Description 2.01 The yandexdns enable command has been introduced. Command Reference Guide — Keenetic Lite (KN-1310)
Page 291: Glossary
(length of time the allocation is valid), and other IP configuration parameters, such as the subnet mask and the default gateway. Depending on implementation, the DHCP server may have three methods of allocating IP-addresses: Keenetic Lite (KN-1310) — Command Reference Guide...
Page 292 Internet Protocol network. Hash Message is a specific construction for calculating a message authentication code Authentication Code (MAC) involving a cryptographic hash function in combination with a Command Reference Guide — Keenetic Lite (KN-1310)
Page 293 (network-to-host). Internet Protocol security (IPsec) uses cryptographic security services to protect communications over Internet Protocol (IP) networks. IPsec supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 294 Internet. The Internet's Transmission Control Protocol (TCP) uses the MTU to determine the maximum size of each packet in any transmission. Most computer operating systems provide a default MTU Command Reference Guide — Keenetic Lite (KN-1310)
Page 295 Test results may be used to switch between primary and backup connections. Point-to-Point Protocol is a protocol used to establish a direct connection between two nodes. It can provide connection authentication, transmission encryption, and https://www.openwrt.org/ https://github.com/Entware-ng/Entware-ng Keenetic Lite (KN-1310) — Command Reference Guide...
Page 296 Management Protocol information about managed devices on IP networks and for modifying that information to change device behavior. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks and more. Command Reference Guide — Keenetic Lite (KN-1310)
Page 297 PDAs, to transmit data while in a low-power "dozing" status. The certification gives software developers and hardware manufacturers a way to fine-tune battery use in the ever-increasing number of small devices that have Wi-Fi capabilities. Keenetic Lite (KN-1310) — Command Reference Guide...
Page 298 Yandex company to protect home network. Provides three filtering modes: • no filtering: resources are not blocked • safe mode: stops malicious and phishing websites • family mode: stops malicious and phishing websites, as well as resources for adults Command Reference Guide — Keenetic Lite (KN-1310)
Page 299: Appendix A Interface Hierarchy
Interface Hierarchy Figure A.1. Core interfaces Figure A.2. Tunnel interfaces Keenetic Lite (KN-1310) — Command Reference Guide...
Page 300 Appendix A Interface Hierarchy Figure A.3. USB interfaces Figure A.4. Wi-Fi interfaces Command Reference Guide — Keenetic Lite (KN-1310)
Page 301: Http Api
HTTP API B.1 REST Core Interface Keenetic Lite HTTP API lets you develop a custom application, that will access Keenetic Lite settings using simple HTTP methods, such as GET and POST. The base URL for all operations is , that simply stands for REST Core Interface. It...
Page 302: Data Format
Example B.1. Set hotspot policy Set policy “permit” for the Home network. Refer to Section 3.25.7 on page 167 to see how “interface” and “access” parameters are mentioned in the Arguments table. In compliance with RFC 7159. Command Reference Guide — Keenetic Lite (KN-1310)
Page 303 Arrays can be used to operate on a specific resource multiple times. The important thing is that arrays preserve the order of their elements, in contrast to object members. " ": [ command {" ": parameter1 value1 {" ": parameter2 value2 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 304 "components": "base,cloudcontrol,..." "manufacturer": "Keenetic Ltd.", "vendor": "Keenetic", "series": "KN", "model": "4G (KN-1210)", "hw_version": "10128000", "hw_id": "KN-1210", "device": "4G", "class": "Internet Center" "interface": { "id": "Bridge0", "index": 0, "type": "Bridge", "description": "Home network", "interface-name": "Home", Command Reference Guide — Keenetic Lite (KN-1310)
Page 305: Xml Core Interface
Warning: XML Core Interface is deprecated and is maintained for backward compatibility. Keenetic Lite provides an HTTP XML API. The API is implemented as resource that accepts POST XML requests and returns XML after the user agent has been authenticated.
Page 306: Command Request
Chapter 3 on page 27 Configuration Request Get parameters that have been configured by a specific command. B.2.1 Command Request Command request can be used to execute a specific command on the device. Command Reference Guide — Keenetic Lite (KN-1310)
Page 307: Configuration Request
 </request> </packet> Response elements are returned as a packet. Response identifiers are used to bind response elements to requests. If there is no response, an empty element is returned. <response/> Keenetic Lite (KN-1310) — Command Reference Guide...
Page 308: Command Reference Guide — Keenetic Lite (Kn
Appendix B HTTP API Figure B.6. Response Packet <packet> <response id="1">  </response> <response id="2"/>  </packet> Command Reference Guide — Keenetic Lite (KN-1310)
Page 309: Snmpv2-Mib
• SNMPv2-MIB::sysServices C.2 IF-MIB OID: 1.3.6.1.2.1.2 and 1.3.6.1.2.1.31 The following data elements are supported: Basical OID: 1.3.6.1.2.1.2 • IF-MIB::ifNumber • IF-MIB::ifIndex • IF-MIB::ifDescr • IF-MIB::ifType • IF-MIB::ifMtu • IF-MIB::ifSpeed • IF-MIB::ifPhysAddress • IF-MIB::ifAdminStatus Keenetic Lite (KN-1310) — Command Reference Guide...
Page 310: Appendix Csnmp Mib
• IF-MIB::ifInMulticastPkts • IF-MIB::ifInBroadcastPkts • IF-MIB::ifOutMulticastPkts • IF-MIB::ifOutBroadcastPkts • IF-MIB::ifHCInOctets • IF-MIB::ifHCInUcastPkts • IF-MIB::ifHCInMulticastPkts • IF-MIB::ifHCInBroadcastPkts • IF-MIB::ifHCOutOctets • IF-MIB::ifHCOutUcastPkts • IF-MIB::ifHCOutMulticastPkts • IF-MIB::ifHCOutBroadcastPkts • IF-MIB::ifLinkUpDownTrapEnable • IF-MIB::ifHighSpeed • IF-MIB::ifPromiscuousMode • IF-MIB::ifConnectorPresent • IF-MIB::ifAlias Command Reference Guide — Keenetic Lite (KN-1310)
Page 311: Ip-Mib
Keenetic 4G III rev.B Keenetic Air Keenetic Extra II C.3 IP-MIB OID: 1.3.6.1.2.1.49 The following data elements are supported: • TCP-MIB::tcpRtoAlgorithm • TCP-MIB::tcpRtoMin • TCP-MIB::tcpRtoMax • TCP-MIB::tcpMaxConn • TCP-MIB::tcpActiveOpens • TCP-MIB::tcpPassiveOpens • TCP-MIB::tcpAttemptFails Keenetic Lite (KN-1310) — Command Reference Guide...
Page 312: Udp-Mib
• UDP-MIB::udpHCOutDatagrams C.5 HOST-RESOURCES-MIB OID: 1.3.6.1.2.1.25 The following data elements are supported: • HOST-RESOURCES-MIB::hrSystemUptime C.6 UCD-SNMP-MIB OID 1.3.6.1.4.1.2021 The following data elements are supported: RAM info • UCD-SNMP-MIB::memTotalReal • UCD-SNMP-MIB::memAvailReal • UCD-SNMP-MIB::memShared • UCD-SNMP-MIB::memBuffer Command Reference Guide — Keenetic Lite (KN-1310)
Page 313 • UCD-SNMP-MIB::dskAvail • UCD-SNMP-MIB::dskUsed • UCD-SNMP-MIB::dskPercent • UCD-SNMP-MIB::dskPercentNode System load info • UCD-SNMP-MIB::laIndex • UCD-SNMP-MIB::laNames • UCD-SNMP-MIB::laLoad • UCD-SNMP-MIB::laConfig • UCD-SNMP-MIB::laLoadInt • UCD-SNMP-MIB::ssCpuRawUser • UCD-SNMP-MIB::ssCpuRawNice • UCD-SNMP-MIB::ssCpuRawSystem • UCD-SNMP-MIB::ssCpuRawIdle • UCD-SNMP-MIB::ssRawInterrupts • UCD-SNMP-MIB::ssRawContexts Keenetic Lite (KN-1310) — Command Reference Guide...
Page 314 Appendix C SNMP MIB Command Reference Guide — Keenetic Lite (KN-1310)
Page 315: Ipsec Encryption Levels
• encryption with key length • hash function for HMAC forming • mode (NO if disabled) D.1 weak AES128-SHA1-MODP1024 AES128-SHA1-MODP768 AES128-MD5-MODP1024 AES128-MD5-MODP768 3DES-SHA1-MODP1024 3DES-SHA1-MODP768 3DES-MD5-MODP1024 3DES-MD5-MODP768 DES-SHA1-MODP1024 DES-SHA1-MODP768 DES-MD5-MODP1024 DES-MD5-MODP768 DES-MD5-NO IPsec SA AES128-SHA1-NO 3DES-SHA1-NO DES-SHA1-NO AES128-MD5-NO Keenetic Lite (KN-1310) — Command Reference Guide...
Page 316: Normal
1 D.2 normal AES256-SHA1-MODP1536 AES256-SHA1-MODP1024 AES128-SHA1-MODP1536 AES128-SHA1-MODP1024 3DES-SHA1-MODP1536 3DES-SHA1-MODP1024 AES128-SHA1-NO IPsec SA AES256-SHA1-NO 3DES-SHA1-NO encryption aes-cbc-256 Proposal encryption aes-cbc-128 encryption 3des integrity sha1 dh-group 5 dh-group 2 D.3 normal-3des AES256-SHA1-MODP1536 AES256-SHA1-MODP1024 AES128-SHA1-MODP1536 Command Reference Guide — Keenetic Lite (KN-1310)
Page 317: Strong
3des integrity sha1 dh-group 5 dh-group 2 D.4 strong AES256-SHA1-MODP2048 AES256-SHA1-MODP1536 AES128-SHA1-MODP2048 AES128-SHA1-MODP1536 AES256-SHA1-MODP1536 IPsec SA AES256-SHA1-MODP2048 AES256-SHA1-MODP2048 AES256-SHA1-MODP1536 encryption aes-cbc-256 Proposal integrity sha1 dh-group 14 dh-group 5 D.5 weak-pfs AES128-SHA1-MODP1024 AES128-SHA1-MODP768 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 318 3DES-SHA1-MODP768 3DES-MD5-MODP1024 3DES-MD5-MODP768 DES-SHA1-MODP1024 DES-SHA1-MODP768 DES-MD5-MODP1024 DES-MD5-MODP768 DES-MD5-MODP1024 IPsec SA AES128-SHA1-NO 3DES-SHA1-NO DES-SHA1-NO AES128-MD5-NO 3DES-MD5-NO AES128-SHA1-MODP1024 3DES-SHA1-MODP1024 DES-SHA1-MODP1024 AES128-SHA1-MODP768 3DES-SHA1-MODP768 DES-SHA1-MODP768 AES128-MD5-MODP1024 3DES-MD5-MODP1024 AES128-MD5-MODP768 3DES-MD5-MODP768 DES-MD5-MODP768 encryption aes-cbc-128 Proposal encryption 3des encryption des Command Reference Guide — Keenetic Lite (KN-1310)
Page 319: Normal-Pfs
AES256-SHA1-MODP1536 AES256-SHA1-MODP1024 AES128-SHA1-MODP1536 AES128-SHA1-MODP1024 3DES-SHA1-MODP1536 3DES-SHA1-MODP1024 AES128-SHA1-MODP1024 IPsec SA AES128-SHA1-NO AES256-SHA1-NO 3DES-SHA1-NO AES256-SHA1-MODP1536 AES128-SHA1-MODP1536 3DES-SHA1-MODP1536 AES256-SHA1-MODP1024 3DES-SHA1-MODP1024 encryption aes-cbc-256 Proposal encryption aes-cbc-128 encryption 3des integrity sha1 dh-group 5 dh-group 2 D.7 normal-3des-pfs AES256-SHA1-MODP1536 Keenetic Lite (KN-1310) — Command Reference Guide...
Page 320 Appendix D IPsec Encryption Levels AES256-SHA1-MODP1024 AES128-SHA1-MODP1536 AES128-SHA1-MODP1024 3DES-SHA1-MODP1536 3DES-SHA1-MODP1024 3DES-SHA1-MODP1024 IPsec SA 3DES-SHA1-NO AES256-SHA1-NO AES128-SHA1-NO AES256-SHA1-MODP1536 AES128-SHA1-MODP1536 3DES-SHA1-MODP1536 AES256-SHA1-MODP1024 3DES-SHA1-MODP1024 encryption aes-cbc-256 Proposal encryption aes-cbc-128 encryption 3des integrity sha1 dh-group 5 dh-group 2 Command Reference Guide — Keenetic Lite (KN-1310)

KeeNetic Lite KN-1310 Command Reference Manual

Preface

Table of Contents

Chapter 1 Product Overview

Chapter 2 Introduction to the CLI

Chapter 3 Command Reference

Access-List

Cloud Control Client Connect

Cloud Control Client Name

Cloud Control Client Session Timeout

Components

Crypto Ike Key

Crypto Ike Nat-Keepalive

Crypto Ike Policy

Crypto Ike Proposal

Crypto Ipsec Transform-Set

Crypto Ipsec Profile

Crypto Map

Dns-Proxy

Dyndns Profile

Interface

Interface Encryption Disable

Interface Encryption Enable

Interface Encryption Key

Interface Encryption Mppe

Interface Encryption Wpa

Interface Encryption Wpa2

Interface Flowcontrol

Interface Hide-Ssid

Interface Igmp Downstream

Interface Igmp Fork

Interface Igmp Upstream

Interface Include

Interface Inherit

Interface Ip Access-Group

Interface Ip Address

Interface Ip Address Dhcp

Interface Ip Adjust-Ttl

Interface Ip Adjust-Ttl Send

Interface Ip Alias

Interface Ip Dhcp Client Class-ID

Interface Ip Dhcp Client Debug

Interface Ip Dhcp Client Displace

Interface Ip Dhcp Client Dns-Routes

Interface Ip Dhcp Client Fallback

Interface Ip Dhcp Client Hostname

Interface Ip Dhcp Client Name-Servers

Interface Ip Dhcp Client Release

Interface Ip Dhcp Client Renew

Interface Ip Dhcp Client Routes

Interface Ip Global

Interface Ip Mru

Interface Ip Mtu

Interface Ip Remote

Interface Ip Tcp Adjust-Mss

Interface Ipcp Default-Route

Interface Ipcp Dns-Routes

Interface Ipcp Name-Servers

Interface Ipcp Vj

Interface Ipsec Encryption-Level

Interface Ipsec Ignore

Interface Ipsec Ikev2

Interface Ipsec Preshared-Key

Interface Ipv6 Address

Interface Ipv6 Force-Default

Interface Ipv6 Name-Servers

Interface Ipv6 Prefix

Interface Ipv6Cp

Interface Lcp Acfc

Interface Lcp Echo

Interface Lcp Pfc

Interface Mac Access-List Address

Interface Mac Access-List Type

Interface Mac Address

Interface Mac Address Factory

Interface Mac Clone

Interface Peer

Interface Ping-Check Profile

Interface Power

Interface Pppoe Service