SMC Networks 7901BRA2 - annexe 2 User manual

1
TELNET Command Line Interface
Quick Reference Syntax 1.0.10

2
Command syntax Short Description
SYSTEM part level II
information <CR> Show system hardware information
op_mode <Router|Bridging|Host> Kernel operation mode
hostname [name] Config local hostname
domain_name [domain] Config local domain name
group_name <name> Config group name for NetBIOS resource share
time_zone <0~62> Time zone ID
use_time_server <Disable|Enable> [time] Using time server or base time
update_interval <1~72> Update interval (hours)
daylight_save <Disable|Enable> Automatic daylight saving
time_server <ip> [ip] [ip] Time servers
adsl_mode <Auto|T1.413Full|T1.413Lite|G.DMT|G.Lite|ADSL2|ADSL2PLUS> ADSL modem operation mode
clone_mac <Default|PC's|mac> Clone WAN port MAC address
system
response_mode <Normal|Brief> Config response mode in CLI
INTERFACE part level II address <ip> <netmask> Interface IP address & netmask
link_type <Disable|Ethernet> Config interface link type
nat_type <Public|Private> NAT network type
bridge <Disable|Enable> Config interface bridging function state
access-list <0~4> <0~4> Binding interface access-list
device-filter <0~4> <0~4> Binding interface device-filter rules
access_ctrl <Disable|Enable> Enable or disable access control
inspect-rule <0~4> <0~4> Binding interface inspection rule
network_secure <Untrust|Trust> Config interface security type
lan <1~4>
vlan <0~4> Config VLAN profile index
address <ip> <netmask> Interface IP address & netmask
link_type <Disable|Ethernet> Config interface link type
nat_type <Public|Private> NAT network type
bridge <Disable|Enable> Config interface bridging function state
access-list <0~4> <0~4> Binding interface access-list
device-filter <0~4> <0~4> Binding interface device-filter rules
access_ctrl <Disable|Enable> Enable or disable access control
inspect-rule <0~4> <0~4> Binding interface inspection rule
network_secure <Untrust|Trust> Config interface security type
wireless <1~1>
vlan <0~4> Config VLAN profile index
interface
atm <1~8> address <ip> <netmask> Interface IP address & netmask

3
link_type <Disable|Ethernet|PPP|IPoA> Config interface link type
nat_type <Public|Private> NAT network type
bridge <Disable|Enable> Config interface bridging function state
dial <1~20> <0~32767> <-1~30> Config dial profile index and attributes
vc <1~8> Specify VC profile index
access-list <0~4> <0~4> Binding interface access-list
device-filter <0~4> <0~4> Binding interface device-filter rules
access_ctrl <Disable|Enable> Enable or disable access control
inspect-rule <0~4> <0~4> Binding interface inspection rule
network_secure <Untrust|Trust> Config interface security type
remote_route <ip> [Disable|Enable] Remote IP address and add route
dns <ip> [ip] ISP provides DNS IP addresses
ip_assign <Dynamic|Fixed> Dynamic get IP address or use fixed IP
vlan <0~4> Config VLAN profile index
dhcp_clt <Disable|Enable> Enable or disable DHCP client
address <ip> <netmask> Interface IP address & netmask
link_type <Disable|PPPoE> Config interface link type
ether_interface <interface> Config PPP over ehternet interface number
dial <1~20> <0~32767> <-1~30> Config dial profile index and attributes
access-list <0~4> <0~4> Binding interface access-list
device-filter <0~4> <0~4> Binding interface device-filter rules
access_ctrl <Disable|Enable> Enable or disable access control
inspect-rule <0~4> <0~4> Binding interface inspection rule
network_secure <Untrust|Trust> Config interface security type
ip_assign <Dynamic|Fixed> Dynamic get IP address or use fixed IP
pppoe <1~8>
vlan <0~4> Config VLAN profile index
lan_sec <1~1> address <ip> <netmask> Interface IP address & netmask
ps. The command `lan_sec` is for telefonica vendor.
VLAN part level II
name <string> VLAN profile description
ipnet <ip> <netmask> VLAN subnet value
igmp-snooping <Disable|Enable> Config IGMP-Snooping function
igmp-querier <Disable|Enable> Config IGMP-Querier function
vlan <1~4>
func <Disable|Enable> Enable or disable this VLAN port
WLAN part level II
wlan country <1~76> Country selection

4
SSID <string> SSID
hide_ssid <Disable|Enable> Hide SSID
channel <0~13> Current operating frequency channel
tx_rate <Auto|54|48|36|24|18|12|11|9|6|5.5|2|1> Transmission rate (Mbit)
mode <mixed|long_range|g_only|b_only> Wireless mode
stationName <string> Station name
rtsThreshold <0~3000> RTS threshold
fragThreshold <256^2346> Fragmentation threshold (even numbers only)
func <Disable|Enable> Enable MAC filter
access_rule <Deny|Allow> Access rule for registered MAC address
add <mac> Add MAC address
delete <1~32> Delete MAC address
mac_filter
modify <1~32> <mac> Modify MAC address
mode <Disable|Enable> [64|128] WEP mode
dyna_key_prov <Disable|Enable> Key provisioning, static or dynamic
defaultKeyId <1~4> WEP default key ID
defaultKeys64 <1~4> <hex> 64 bits WEP key table (Hex)
defaultKeys128 <1~4> <hex> 128 bits WEP key table (Hex)
key64ascii <1~4> <string> 64 bits WEP key table (ASCII)
key128ascii <1~4> <string> 128 bits WEP key table (ASCII)
passphrase64 <string> Passphrase for 64 bits WEP key
wep
passphrase128 <string> Passphrase for 128 bits WEP key
mode <Disable|Enable> [802.1X|PSK] WPA mode
psk_type <Passphrase|Hex> Pre-shared key type
psk_hex <hex> 256 bits PSK
psk_passphrase <string> Passphrase for PSK
obscure_psk <Disable|Enable> Obscure PSK
rekey_period <Disable|Seconds|Packets> Rekey period
rekey_second <number> Rekey second
wpa
rekey_packet <number> Rekey packet
func <Disable|Enable> Enable/Disable 802.1X
session_timeout <number> Session idle timeout (milli seconds)
re_auth_period <number> Re-authentication period (milli seconds)
quiet_period <number> Quiet period (milli seconds)
server_ip <ip> Server IP
server_port <1~65534> Server port
secret_key <string> Secret key
802.1x
radius
nas_id <string> NAS-ID
func <Disable|Enable> WDS functionality
func <1~4> <Disable|Enable> MAC of LAN mode to be use
wds connect mac <1~4> <mac> MAC of LAN mode

5
func <Disable|Enable> Wireless disable or enable
security_mode <disable|wep|wpa2_only|wpa_wpa2> Config wireless security mode
BRIDGE part level II
generic <Disable|Enable> <ip> <netmask> Config bridging function, IP and subnet mask
mac_address <mac> Config mac address
LAN1_port <Filter|Forward|Dynamic> Config LAN1 bridging type
WLAN1_port <Filter|Forward|Dynamic> Config WLAN1 bridging type
ATM1_port <Filter|Forward|Dynamic> Config ATM1 bridging type
ATM2_port <Filter|Forward|Dynamic> Config ATM2 bridging type
ATM3_port <Filter|Forward|Dynamic> Config ATM3 bridging type
ATM4_port <Filter|Forward|Dynamic> Config ATM4 bridging type
ATM5_port <Filter|Forward|Dynamic> Config ATM5 bridging type
ATM6_port <Filter|Forward|Dynamic> Config ATM6 bridging type
ATM7_port <Filter|Forward|Dynamic> Config ATM7 bridging type
ATM8_port <Filter|Forward|Dynamic> Config ATM8 bridging type
LAN2_port <Filter|Forward|Dynamic> Config LAN2 bridging type
LAN3_port <Filter|Forward|Dynamic> Config LAN3 bridging type
LAN4_port <Filter|Forward|Dynamic> Config LAN4 bridging type
WDS1_port <Filter|Forward|Dynamic> Config WDS1 bridging type
WDS2_port <Filter|Forward|Dynamic> Config WDS2 bridging type
WDS3_port <Filter|Forward|Dynamic> Config WDS3 bridging type
add
WDS4_port <Filter|Forward|Dynamic> Config WDS4 bridging type
delete <1~20> Delete static MAC entry
mac_address <mac> Config mac address
LAN1_port <Filter|Forward|Dynamic> Config LAN1 bridging type
WLAN1_port <Filter|Forward|Dynamic> Config WLAN1 bridging type
ATM1_port <Filter|Forward|Dynamic> Config ATM1 bridging type
ATM2_port <Filter|Forward|Dynamic> Config ATM2 bridging type
ATM3_port <Filter|Forward|Dynamic> Config ATM3 bridging type
ATM4_port <Filter|Forward|Dynamic> Config ATM4 bridging type
ATM5_port <Filter|Forward|Dynamic> Config ATM5 bridging type
ATM6_port <Filter|Forward|Dynamic> Config ATM6 bridging type
ATM7_port <Filter|Forward|Dynamic> Config ATM7 bridging type
ATM8_port <Filter|Forward|Dynamic> Config ATM8 bridging type
LAN2_port <Filter|Forward|Dynamic> Config LAN2 bridging type
LAN3_port <Filter|Forward|Dynamic> Config LAN3 bridging type
LAN4_port <Filter|Forward|Dynamic> Config LAN4 bridging type
WDS1_port <Filter|Forward|Dynamic> Config WDS1 bridging type
WDS2_port <Filter|Forward|Dynamic> Config WDS2 bridging type
bridge static
modify <1~20>
WDS3_port <Filter|Forward|Dynamic> Config WDS3 bridging type

6
WDS4_port <Filter|Forward|Dynamic> Config WDS4 bridging type
VC part level II
vpi_vci <0~255> <0~65535> Config VPI/VCI value
encapsulate <VC-Mux|LLC> Config encapsulation type
state <Disable|Enable> Config ATM virtual circuit state
qos <CBR|VBR|UBR> QoS class
pcr <0~9999> Peak cell rate
scr <0~9999> Sustain cell rate
vc <1~8>
mbs <0~9999> Maximum brust size
PPP part level II modify <1~25> profile <name> <pass_set0> User account and password
users_edit delete <1~25> Delete user profile
address_pool ip_pool <ip> <1~127> Edit IP pool. Based IP address & range number
authenticate <User_Pool|RADIUS> <User_Pool|RADIUS> User authentication policy
assign_address <Address_Pool|RADIUS> <Address_Pool|RADIUS> Peer address assignment policy
ppp
wan_pppoe <Disable|PPPoE> WAN port PPPoE function
DIAL part level II
isp_profile <string> [string] Config dial-out ISP name and destination string
account_profile <account> <pass_set1> Config access account and password
on_demand <Disable|Enable> Continuous or dial on demand
auto_reconnect <Disable|Enable> Automatic reconnect
startup <Disconnected|Connected|Last> Connection state while system startup
dial <1~20>
mtu <512~1500> Config MTU
IP_SHARE part level II interface <interface> Activate interface
func <Disable|Enable> Enable or disable this entry
virtual_ip <ip> <1~254> Local address pool
add
global_ip <ip> Global address
ip_share address_mapping
delete <1~20> Delete address mapping

7
interface <interface> Activate interface
func <Disable|Enable> Enable or disable this entry
virtual_ip <ip> <1~254> Local address pool
modify <1~20>
global_ip <ip> Global address
name <name> Service name
interface <interface> Activate interface
server <ip> LAN Host IP address
port_map <wan_ports> <lan_ports> public to private protocol/ports mapping
add
func <Disable|Enable> Enable or disable this virtual server
delete <1~20> Delete virtual server mapping
name <name> Service name
interface <interface> Activate interface
server <ip> LAN Host IP address
port_map <wan_ports> <lan_ports> public to private protocol/ports mapping
virtual_server
modify <1~20>
func <Disable|Enable> Enable or disable this virtual server
incoming <port_range> <TCP|UDP> Incoming protocol & ports number
func <Disable|Enable> Enable or disable this application
add trigger <1~65534> <TCP|UDP> Trigger port and protocol
delete <1~10> Delete special application mapping
incoming <port_range> <TCP|UDP> Incoming protocol & ports number
func <Disable|Enable> Enable or disable this application
special_ap
modify <1~10> trigger <1~65534> <TCP|UDP> Trigger port and protocol
range <1~5> <ip> <1~253> Edit address range
local delete <1~5> Delete address range
range <1~5> <ip> <1~253> Edit address range
interface <1~5> <interface> Bind address range to specific interface
nat global delete <1~5> Delete address range
FIREWALL-FUNC part level II
all <Disable|Enable> Enable or disable overall firewall function
DMZ <Disable|Enable> Enable or disable DMZ function
schedule_rule <Disable|Enable> Enable or disable schedule rule function
inspect <Disable|Enable> Enable or disable inspection module
DoS <Disable|Enable> Enable or disable DoS pattern detect
WAN_ping <Disable|Enable> Deny ping request from WAN
rip_defect <Disable|Enable> Deny RIP from WAN
modify <1~20> <ip> <ip|WAN_IP> Modify DMZ address mapping
interface <1~20> <interface> Bind address pair to specific interface
virtual_DMZ delete <1~20> Delete DMZ address mapping
firewall-func
maillog <DoS|Ping|RIP> <Disable|Enable> Mail log functionality

8
ACCESS-LIST part level II add <Deny|Permit|Count> <ip/mask|Any> Add new access control rule
delete [1~1|All] Delete access control rule
modify <1~1> <Deny|Permit|Count> <ip/mask|Any> Modify access control rule properties
reset_counter [1~1] Reset access control rule counter
default_action <Deny|Permit> Access-list default action
standard <1~4>
policy <1~1> <1~65535> Assign policy number to access control rule
add <1~65534>
<Deny|Permit|
Count>
<TCP|UDP>
from
<ip/mask|
Any>
<port_str
|Any>
to
<ip/mask|
Any>
<port_str
|Any>
<CR> Access control rule
<CR> Access control rule
add <1~65534>
<Deny|Permit|
Count>
<ICMP>
from
<ip/mask|
Any>
to
<ip/mask|
Any> type_code
<0~18|Don'tCare>
<0~15|Don'tCare> ICMP type, code
add <1~65534>
<Deny|Permit|
Count>
<IP>
from
<ip/mask|
Any>
to
<ip/mask|
Any> <CR> Access control rule
delete [1~250|All] Delete access control rule
modify <1~250>
<Deny|Permit|
Count>
<TCP|UDP>
from
<ip/mask|
Any>
<port_str
|Any>
to
<ip/mask|
Any>
<port_str
|Any>
<CR> Modify access control rule
<CR> Modify access control rule
modify <1~250>
<Deny|Permit|
Count>
<ICMP>
from
<ip/mask|
Any>
to
<ip/mask|
Any> type_code
<0~18|Don'tCare>
<0~15|Don'tCare> ICMP type, code
modify <1~250>
<Deny|Permit|
Count>
<IP>
from
<ip/mask|
Any>
to
<ip/mask|
Any> <CR> Modify access control rule
reset_counter [1~250] Reset access control rule counter
default_action <Deny|Permit> Access-list default action
extended <1~4>
policy <1~250> <1~65535> Assign policy number to access control rule
add <Deny|Permit> <hex> Add new device-filter rule
delete [1~32|All] Delete device-filter rule
modify <1~32> <Deny|Permit> <hex> Modify device-filter rule properties
access-list
device-filter
<1~4>
default_action <Deny|Permit> Device-filter default action

9
policy <1~32> <1~65535> Assign policy number to access control rule
add <keyword> Add new blocking site or keyword
delete <1~30> Delete blocking site or keyword
URL_list modify <1~30> <keyword> Modify blocking site or keyword
everyday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
everyday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
sunday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
sunday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
monday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
monday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
tuesday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
tuesday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
wednesday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
wednesday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
thursday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
thursday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
friday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
friday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
saturday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
saturday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
func <Disable|Enable> Enable this schedule rule
add
name <name> [string] Schedule name and comment
delete <1~10> Delete schedule rule
everyday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
everyday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
sunday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
sunday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
monday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
monday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
tuesday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
tuesday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
wednesday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
wednesday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
thursday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
thursday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
friday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
friday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
saturday_start <0~23|Don'tCare> <0~59|Don'tCare> Config schedule start time
saturday_end <0~23|Don'tCare> <0~59|Don'tCare> Config schedule end time
func <Disable|Enable> Enable this schedule rule
schedule
modify
<1~10>
name <name> [string] Schedule name and comment

10
INSPECT part level II <CR> Modify inspection rule
name <rule-name> <Frag|TCP|UDP|FTP|H323|TFTP|L2TP|SIP> disable <CR> Disable specific protocol inspection function
name_delete <1~4> Delete inspection rule
synwait-time <1~120> TCP session to be established waiting time
finwait-time <1~60> TCP session to be closed waiting time
tcp idle-time <1800~7200> TCP session idle timeout
udp idle-time <1~120> UDP session idle timeout
high <1~300> Maximum existing half-open sessions
max-incomplete low <1~250> Minimum existing half-open sessions
high <1~250> Maximum rate of new half-open session
one-minute low <1~200> Minimum rate of new half-open session
port_scan_defect <50~5000> <1~150> 'Port Scan/Flooding' defect sensitive criteria
fragment <10~60000> <1~150> <1~120> Fragmention half-open entry threshold
block-time <0~30000> Flood hacker blocking time
inspect
h323-timeout <0~3600> H.323 data channel idle timeout
ROUTE part level II add <network_ip> <netmask> <gateway_ip> Add static route entry
static delete <1~20> Delete static route entry
generic <Disable|Enable> <Disable|Enable> Config operation and auto summary mode
version <None|RIP1|RIP2> Config RIP protocol version
attrib <Disable|Enable|Silent>
<None|PASSWORD|MD5> <Disable|Enable> Config operation, authentication and Poison
reverse mode
lan <1~4>
authenticate <string> Config authentication code
version <None|RIP1|RIP2> Config RIP protocol version
attrib <Disable|Enable|Silent>
<None|PASSWORD|MD5> <Disable|Enable> Config operation, authentication and Poison
reverse mode
wlan <1~1>
authenticate <string> Config authentication code
version <None|RIP1|RIP2> Config RIP protocol version
attrib <Disable|Enable|Silent>
<None|PASSWORD|MD5> <Disable|Enable> Config operation, authentication and Poison
reverse mode
route rip
atm <1~8>
authenticate <string> Config authentication code
DHCP part level II interface <interface> DHCP server activate interface
dhcp server_generic gateway <ip> Default gateway for DHCP client