Allied Telesis AT-RG600 series User manual

AT-RG600 Residential Gateway
Software reference manual – release 2-0-2

AT-RG 600 Residential Gateway – Software Reference Manual i
AT-RG600 series Residential Gateway – Software reference manual
STRE_SRM_AT-RG6xx_2-0-2_A1
Copyright © 2004 Allied Telesis KK
All rights reserved. No part of this publication may be reproduced without prior
written permission from Allied Telesis.
Allied Telesis reserves the right to make changes in specifications and other
information contained in this document without prior written notice. The
information provided herein is subject to change without notice. In no event shall
Allied Telesis be liable for any incidental, special, indirect, or consequential
damages whatsoever, including but not limited to lost profits, arising out of or
related to this manual or the information contained herein, even if Allied Telesis has
been advised of, known, or should have known, the possibility of such damages.
All trademarks are the property of their respective owners.

Contents
Preface.....................................................................................................................xvi
Purpose of this Manual .....................................................................................................xvi
Intended Audience...........................................................................................................xvii
Standards and Protocols..................................................................................................... 1
Background Reading .......................................................................................................... 2
Publicly Accessible Documents .......................................................................................... 2
Conventions used in command definitions ......................................................................... 3
CHAPTER 1 System Management.................................................................................. 4
Logging into the CLI............................................................................................................4
Serial Connection................................................................................................................ 4
TCP/IP connection.............................................................................................................. 4
Command Line Interface and Console ............................................................................... 5
Webserver........................................................................................................................... 5
File System ......................................................................................................................... 6
Boot code............................................................................................................................ 6
System configuration information........................................................................................ 6
Run-time images.................................................................................................................6
Access permissions to the CLI............................................................................................ 7
System Configuration Management.................................................................................... 7
System Command Reference............................................................................................. 9
System CLI commands....................................................................................................... 9
system add user................................................................................................................ 10
system add login............................................................................................................... 11
system config CREATE .................................................................................................... 11
system config DELETE..................................................................................................... 12
system config GET............................................................................................................ 12
system config LIST ........................................................................................................... 13
system config restore FACTORY...................................................................................... 13
system config SET............................................................................................................ 14
system config SHOW........................................................................................................ 15
system delete login ........................................................................................................... 15
system delete user............................................................................................................ 16
system info........................................................................................................................ 16
system list errors............................................................................................................... 16
system list openfiles.......................................................................................................... 17
system list users ...............................................................................................................17
system list logins............................................................................................................... 18
system log......................................................................................................................... 19
system log enable|disable................................................................................................. 19
system log list ................................................................................................................... 20
system name.....................................................................................................................21
system restart ................................................................................................................... 21
system set login access.................................................................................................... 22
system set login mayconfigure.......................................................................................... 22
system set login maydialin................................................................................................ 23
system set user access..................................................................................................... 23
system set user mayconfigure .......................................................................................... 23
system set user maydialin................................................................................................. 24
User Command Reference ............................................................................................... 25
User CLI commands ......................................................................................................... 25
user logout ........................................................................................................................ 25
user password...................................................................................................................25
user change ...................................................................................................................... 25
Web Server Command Reference.................................................................................... 27
Web Server CLI commands.............................................................................................. 27
webserver clear stats........................................................................................................ 27
ii

AT-RG 600 Residential Gateway – Software Reference Manual iii
webserver enable|disable ................................................................................................. 27
webserver set interface..................................................................................................... 28
webserver set managementip........................................................................................... 28
webserver set port ............................................................................................................ 29
webserver set upnpport .................................................................................................... 29
webserver show info ......................................................................................................... 29
webserver show stats ....................................................................................................... 30
Console Access Command Reference ............................................................................. 31
Console access CLI commands ....................................................................................... 31
console enable..................................................................................................................31
console process................................................................................................................ 31
Console command - exit ................................................................................................... 32
CHAPTER 2 Switch.......................................................................................................... 33
Introduction ....................................................................................................................... 33
Switch Core Functional Overview..................................................................................... 33
Address Look-up............................................................................................................... 33
Learning............................................................................................................................ 34
Migration ........................................................................................................................... 34
Aging................................................................................................................................. 34
Forwarding........................................................................................................................ 34
Switching engine............................................................................................................... 35
Rate limiting support ......................................................................................................... 35
Ingress Filtering limiting support ...................................................................................... 35
Layer 3 routing rate limiting............................................................................................... 36
Class of Service and Differentiated Services.................................................................... 36
802.1p Traffic Priority........................................................................................................ 36
Differentiated Services Code Point (DSCP)...................................................................... 37
Switch Command Reference ............................................................................................ 39
switch CLI commands....................................................................................................... 39
switch disable ageingtimer................................................................................................ 39
switch disable learning...................................................................................................... 40
switch disable port ............................................................................................................ 40
switch enable ageingtimer ................................................................................................ 40
switch enable learning ...................................................................................................... 41
switch enable port............................................................................................................. 41
switch reset....................................................................................................................... 41
switch set ageingtimer ...................................................................................................... 42
switch set port................................................................................................................... 42
switch set priority .............................................................................................................. 45
switch set qos ................................................................................................................... 45
switch set routing-limit....................................................................................................... 46
switch show....................................................................................................................... 46
switch show fdb.................................................................................................................47
switch show port ............................................................................................................... 49
switch show qos................................................................................................................ 52
CHAPTER 3 VLAN .......................................................................................................... 53
INTRODUCTION.................................................................................................................... 53
VLAN TAGGING.................................................................................................................. 53
VLAN SUPPORT ON AT-RG600 RESIDENTIAL GATEWAY ....................................................... 56
VLAN definition and port tagging ...................................................................................... 56
VLAN versus IP Interface.................................................................................................. 57
VLAN Command Reference ............................................................................................. 60
vlan CLI commands .......................................................................................................... 60
vlan add port ..................................................................................................................... 60
vlan add vid....................................................................................................................... 61
vlan delete......................................................................................................................... 61
vlan show.......................................................................................................................... 62

CHAPTER 4 Emergency.................................................................................................. 64
INTRODUCTION.................................................................................................................... 64
Emergency configuration .................................................................................................. 64
Layer 2 vlan configuration................................................................................................. 64
Layer 3 IP configuration.................................................................................................... 65
Save and activate emergency configuration..................................................................... 65
Emergency command reference....................................................................................... 66
Emergency CLI commands............................................................................................... 66
EMERGENCY ADD .......................................................................................................... 67
EMERGENCY CREATE ................................................................................................... 67
EMERGENCY DELETE.................................................................................................... 68
EMERGENCY SET DHCP................................................................................................ 69
EMERGENCY SET IPINTERFACE GATEWAY............................................................... 69
EMERGENCY SET IPINTERFACE IPADDRESS ............................................................ 70
EMERGENCY SHOW....................................................................................................... 70
EMERGENCY UPDATE ................................................................................................... 71
CHAPTER 5 IP .................................................................................................................. 72
INTRODUCTION.................................................................................................................... 72
THE INTERNET .................................................................................................................... 72
ADDRESSING ...................................................................................................................... 74
Subnets............................................................................................................................. 76
IP SUPPORT ON AT-RG6XX RESIDENTIAL GATEWAY SERIES ................................................. 77
Adding and attaching IP interfaces ................................................................................... 77
IP stack and incoming packets ......................................................................................... 78
Locally received packets................................................................................................... 78
Forwarding packets........................................................................................................... 78
Unconfigured interfaces.................................................................................................... 78
Unnumbered interfaces..................................................................................................... 79
Unconfigured interfaces v unnumbered interfaces ........................................................... 79
Configuring unnumbered interfaces.................................................................................. 79
Creating a route ................................................................................................................80
Virtual Interfaces............................................................................................................... 80
Configuring virtual interfaces ............................................................................................ 80
Similarities between virtual interfaces and real interfaces ................................................ 81
Differences between virtual interfaces and real interfaces ............................................... 81
Secondary IP addresses................................................................................................... 82
Configuring secondary IP addresses................................................................................ 82
Functionality of secondary IP addresses .......................................................................... 83
IP Quality of Service ......................................................................................................... 83
Expedited class.................................................................................................................83
Example of use of Prioritization ........................................................................................ 83
Quality of Service support................................................................................................. 84
Packet Classification......................................................................................................... 84
Configuring Flow Qualifiers............................................................................................... 84
Link bandwidth prioritization.............................................................................................. 85
CPU prioritization..............................................................................................................85
TCP/IP Command Reference ........................................................................................... 87
IP Tracing commands....................................................................................................... 87
IP CLI commands ............................................................................................................. 87
ip add defaultroute gateway.............................................................................................. 89
ip add defaultroute interface ............................................................................................. 89
ip add interface ................................................................................................................. 90
ip add route....................................................................................................................... 91
ip attach ............................................................................................................................ 92
ip attachvirtual................................................................................................................... 93
ip clear arpentries .............................................................................................................94
ip clear interfaces.............................................................................................................. 94
ip clear riproutes ............................................................................................................... 94
iv

AT-RG 600 Residential Gateway – Software Reference Manual v
ip clear routes ................................................................................................................... 94
ip delete interface.............................................................................................................. 95
ip delete route ................................................................................................................... 95
ip detach interface.............................................................................................................96
ip interface add fq codepoint............................................................................................. 96
ip interface add fq protocol................................................................................................ 97
ip interface add fq srcaddr codepoint................................................................................ 98
ip interface add fq srcaddr protocol................................................................................... 99
ip interface add proxyarpentry ........................................................................................ 100
ip interface add proxyarpexclusion ................................................................................. 101
ip interface add secondaryipaddress .............................................................................. 102
ip interface clear fqs........................................................................................................ 103
ip interface clear proxyarpentries.................................................................................... 104
ip interface clear secondaryipaddresses......................................................................... 104
ip interface delete fq........................................................................................................ 105
ip interface delete proxyarpentries.................................................................................. 106
ip interface delete proxyarpexclusion.............................................................................. 106
ip interface delete secondaryipaddress .......................................................................... 107
ip interface list fqs ........................................................................................................... 108
ip interface list proxyarpentries ....................................................................................... 108
ip interface list secondaryipaddresses............................................................................ 109
ip list arpentries............................................................................................................... 110
ip list connections............................................................................................................ 110
ip list interfaces ............................................................................................................... 111
ip list riproutes................................................................................................................. 111
ip list routes..................................................................................................................... 112
ip ping ............................................................................................................................. 112
ip set interface dhcp........................................................................................................ 113
ip set interface ipaddress................................................................................................ 113
ip set interface mtu.......................................................................................................... 114
ip set interface netmask.................................................................................................. 115
ip set interface rip accept................................................................................................ 116
ip set interface rip multicast ............................................................................................ 117
ip set interface rip send................................................................................................... 117
ip set interface tcpmssclamp........................................................................................... 118
ip set rip advertisedefault................................................................................................ 119
ip set rip authentication................................................................................................... 120
ip set rip defaultroutecost................................................................................................ 120
ip set rip hostroutes......................................................................................................... 121
ip set rip password.......................................................................................................... 121
ip set rip poison............................................................................................................... 122
ip set route cost............................................................................................................... 122
ip set route destination.................................................................................................... 123
ip set route gateway........................................................................................................ 124
ip set route interface ....................................................................................................... 125
ip show............................................................................................................................ 125
ip show interface............................................................................................................. 126
ip show route................................................................................................................... 127
CHAPTER 6 Transports ................................................................................................ 128
Transports CLI commands.............................................................................................. 129
transports clear ............................................................................................................... 129
transports delete ............................................................................................................. 129
transports list................................................................................................................... 130
transports show............................................................................................................... 130
CHAPTER 7 Ethernet..................................................................................................... 132
Ethernet CLI commands ................................................................................................. 132
ethernet add transport..................................................................................................... 132
ethernet clear transports................................................................................................. 133

ethernet delete transport................................................................................................. 133
ethernet list ports ............................................................................................................ 134
ethernet list transports .................................................................................................... 134
ethernet show transport .................................................................................................. 134
CHAPTER 8 Security & Firewall................................................................................. 136
Introduction ..................................................................................................................... 136
Application Gateway ....................................................................................................... 136
Stateful Inspection .......................................................................................................... 137
Security support on AT-RG6xx Residential Gateway series........................................... 137
Security Interfaces .......................................................................................................... 138
Dynamic Port Opening and Triggers............................................................................... 139
Non-Activity Timeout....................................................................................................... 140
Session Chaining............................................................................................................ 140
Firewall............................................................................................................................ 141
Policy .............................................................................................................................. 142
Portifilter.......................................................................................................................... 142
Validator.......................................................................................................................... 142
Intrusion Detection.......................................................................................................... 143
Security Command Reference........................................................................................ 145
Security CLI commands.................................................................................................. 145
security add interface...................................................................................................... 145
security add trigger tcp|udp............................................................................................. 146
security add trigger netmeeting....................................................................................... 147
security clear interfaces .................................................................................................. 148
security clear triggers...................................................................................................... 148
security delete interface.................................................................................................. 148
security delete trigger...................................................................................................... 148
security............................................................................................................................ 149
security list interfaces...................................................................................................... 150
security list triggers ......................................................................................................... 150
security set trigger UDPsessionchaining ........................................................................ 150
security set trigger addressreplacement......................................................................... 151
security set trigger binaryaddressreplacement ............................................................... 152
security set trigger endport ............................................................................................. 153
security set trigger maxactinterval .................................................................................. 153
security set trigger multihost ........................................................................................... 154
security set trigger sessionchaining................................................................................ 154
security set trigger startport ............................................................................................ 155
security show interface ................................................................................................... 155
security show trigger....................................................................................................... 155
security status................................................................................................................. 156
Firewall Command Reference ........................................................................................ 158
Firewall CLI commands .................................................................................................. 158
firewall add policy............................................................................................................ 159
firewall add portfilter........................................................................................................ 160
firewall add validator ....................................................................................................... 162
firewall clear policies....................................................................................................... 164
firewall clear portfilters .................................................................................................... 164
firewall delete policy........................................................................................................ 165
firewall delete portfilter.................................................................................................... 165
firewall delete validator ................................................................................................... 166
firewall enable|disable..................................................................................................... 166
firewall enable|disable IDS.............................................................................................. 167
firewall enable|disable blockinglog.................................................................................. 168
firewall enable|disable Intrusionlog ................................................................................. 168
firewall enable|disable sessionlog................................................................................... 168
firewall list policies .......................................................................................................... 169
firewall list portfilters........................................................................................................ 169
firewall list validators ....................................................................................................... 170
vi

AT-RG 600 Residential Gateway – Software Reference Manual vii
firewall set IDS DOSattackblock ..................................................................................... 171
firewall set IDS MaxICMP ............................................................................................... 171
firewall set IDS MaxPING ............................................................................................... 172
firewall set IDS MaxTCPopenhandshake ....................................................................... 172
firewall set IDS SCANattackblock................................................................................... 173
firewall set IDS blacklist .................................................................................................. 174
firewall set IDS victimprotection...................................................................................... 174
firewall set securitylevel .................................................................................................. 175
firewall show IDS ............................................................................................................ 177
firewall show policy ......................................................................................................... 177
Firewall show portfilter .................................................................................................... 178
firewall show validator..................................................................................................... 179
firewall status .................................................................................................................. 180
CHAPTER 9 Network Address Translation - NAT ................................................. 181
Network Address Translation.......................................................................................... 181
Address conservation ..................................................................................................... 181
Security........................................................................................................................... 182
How does NAT work? ..................................................................................................... 182
What about protocols other than UDP and TCP?........................................................... 184
How can you let sessions into servers on the private LAN?........................................... 184
NAT support on AT-RG6xx Residential Gateway series ................................................ 185
Global IP Address Pools................................................................................................. 185
Reserved Mappings........................................................................................................ 186
Application Level Gateways (ALGs) ............................................................................... 186
Interactions of NAT and other security features.............................................................. 186
Firewall filters and reserved mappings. .......................................................................... 186
NAT and Dynamic Port Opening..................................................................................... 187
NAT and secondary IP addresses .................................................................................. 187
NAT Command Reference.............................................................................................. 188
NAT CLI commands........................................................................................................ 188
nat add globalpool........................................................................................................... 188
nat add resvmap globalip................................................................................................ 190
nat add resvmap interface name .................................................................................... 192
nat clear globalpools....................................................................................................... 193
nat clear resvmaps.......................................................................................................... 194
nat delete globalpool....................................................................................................... 194
nat delete resvmap ......................................................................................................... 195
nat disable....................................................................................................................... 195
nat enable ....................................................................................................................... 196
nat iketranslation............................................................................................................. 197
nat list globalpools .......................................................................................................... 198
nat list resvmaps............................................................................................................. 199
nat show globalpool ........................................................................................................ 200
nat show resvmap........................................................................................................... 201
nat status ........................................................................................................................ 201
CHAPTER 10IGMP snooping and IGMP proxy ....................................................... 203
Multicasting Overview..................................................................................................... 203
Multicasting principles..................................................................................................... 203
Group addresses ............................................................................................................ 203
IGMP............................................................................................................................... 204
Multicast MAC addresses ............................................................................................... 205
IGMP snooping ............................................................................................................... 205
IGMP snooping on AT-VP6x3 product family ................................................................. 206
Multicast Router Port Discovery...................................................................................... 206
Multicast Hosts Port Discovery ....................................................................................... 206
Leaving a Group ............................................................................................................. 207
Timeout interval expiring................................................................................................. 208
IGMP proxy..................................................................................................................... 208

IGMP Snooping Command Reference ........................................................................... 209
IGMP snooping CLI commands...................................................................................... 209
igmp snooping disable .................................................................................................... 209
igmp snooping enable..................................................................................................... 209
igmp snooping set leavetime .......................................................................................... 210
igmp snooping set queryinterval ..................................................................................... 210
igmp snooping set timeout.............................................................................................. 210
igmp snooping show ....................................................................................................... 211
IGMP Proxy Command Reference ................................................................................. 212
IGMP proxy CLI commands............................................................................................ 212
igmp proxy set upstreaminterface................................................................................... 212
igmp proxy show upstreaminterface ............................................................................... 212
igmp proxy show status .................................................................................................. 213
CHAPTER 11Dynamic Host Configuration Protocol - DHCP................................ 214
Introduction ..................................................................................................................... 214
DHCP support on AT-RG6xx Residential Gateway series ............................................. 215
DHCP server................................................................................................................... 215
Example:......................................................................................................................... 216
DHCP client .................................................................................................................... 218
Lease requirements and requests .................................................................................. 219
Support for AutoIP .......................................................................................................... 219
Additional DHCP client modes........................................................................................ 220
Propagating DNS server information .............................................................................. 220
Automatically setting up a DHCP server......................................................................... 220
Example.......................................................................................................................... 221
DHCP Relay.................................................................................................................... 222
DHCP Server Command Reference............................................................................... 223
DHCP server CLI commands.......................................................................................... 223
dhcpserver add fixedhost................................................................................................ 224
dhcpserver add subnet ................................................................................................... 225
dhcpserver clear fixedhost.............................................................................................. 225
dhcpserver clear subnets................................................................................................ 226
dhcpserver delete fixedhost............................................................................................ 226
dhcpserver delete subnet................................................................................................ 226
dhcpserver enable|disable .............................................................................................. 227
dhcpserver list fixedhost ................................................................................................. 227
dhcpserver list options .................................................................................................... 228
dhcpserver list subnets ................................................................................................... 229
dhcpserver set allowunknownclients............................................................................... 230
dhcpserver set bootp ...................................................................................................... 230
dhcpserver set defaultleasetime ..................................................................................... 230
dhcpserver set fixedhost ipaddress ................................................................................ 231
dhcpserver set fixedhost macaddress ............................................................................ 231
dhcpserver set fixedhost maxleasetime.......................................................................... 232
dhcpserver set maxleasetime ......................................................................................... 232
dhcpserver set subnet defaultleasetime ......................................................................... 233
dhcpserver set subnet hostisdefaultgateway.................................................................. 233
dhcpserver set subnet hostisdnsserver .......................................................................... 234
dhcpserver set subnet maxleasetime ............................................................................. 235
dhcpserver set subnet subnet......................................................................................... 235
dhcpserver show............................................................................................................. 236
dhcpserver show subnet................................................................................................. 236
dhcpserver subnet add iprange ...................................................................................... 237
dhcpserver subnet add option......................................................................................... 238
dhcpserver subnet clear ipranges................................................................................... 238
dhcpserver subnet clear options..................................................................................... 239
dhcpserver subnet delete iprange................................................................................... 239
dhcpserver subnet delete option..................................................................................... 240
dhcpserver subnet list ipranges ...................................................................................... 241
viii