ZyXEL Communications PLA450 Series Instruction Manual

ZyXEL Confidential
ZyXEL
Firmware Release Note
PLA-450
Release 3.60(AAJ.2)C0
Date: 11/13/2007
Author: Edward Yang
360AAJ2C0(Release).doc 1/18

ZyXEL Confidential
ZyXEL PLA-450 Standard Version
release 3.60(AAJ.2)C0
Release Note
Date: 11/13/2007
Supported Platforms:
ZyXEL PLA-450
Versions:
ZyNOS Version: V3.60(AAJ.2) | 11/13/2007
Bootbase Version: V1.01 | 05/08/2007 12:40:00
Notes:
1. To conform to the local policy, some countries are not allowed to use 802.11g Turbo
mode. These countries are: Argentina, Brazil, Ecuador, Japan, South Korea, and
Malaysia. The function will be disabled automatically despite the device settings.
2. We support up to 27 concurrent WLAN STAs at the same time if WPA-PSK was
used.
3. The firmware 1-4-5 of HomePlug can not communication with 3-x-xxxx.
4. The firmware of HomePlug is automatically upgraded to 3-0-3052, and support
Encrypt button.
5. In HomePlug network, two stations A and B form a network. If A left the network by
Encrypt button, B is still in the network after using Encrypt button to leave network.
So B can not join another network before leaving.
6. In WPS function, PLA-450 supports WPA-PSK+TKIP and WAP2-PSK+AES, not
support WPA-PSK+AES and WPA2-PSK+TKIP.
Known Issues:
1. HomePlug LED lights up even if it’s not within any management network.
2. The priority mapping can’t be disabled even you set “None” to Homeplug QoS
Priority Mapping.
3. The Homeplug Rx statistics may not be updated at the first moment when you just
power it on.
4. When WPS disabled. The WPS LED still light with green.
360AAJ2C0(Release).doc 2/18

ZyXEL Confidential
Features:
Modification in V3.60(AAJ.2) | 11/13/2007
Change 3.60(AAJ.2)b3 to 3.60(AAJ.2) FCS version.
Modification in V3.60(AAJ.2)b3 | 11/08/2007
1. [BUG FIXED]
SPR: 071030688
Symptom: Disable the wireless function. DUT wireless LED still light and STA still could
connect to DUT
Condition: Disable the wireless function. DUT wireless LED still light and STA still could
connect to DUT
2. [BUG FIXED]
SPR: 071031851
Symptom: In HomePlug Qos page. The number 8 priority only showed Highest
Condition:
1. In HomePlug Qos page. Full keyin the port or MAC address in MAC address or IP Port
number Priority page.
2. The number 8 priority was High, Mid or Low and apply
3. The number 8 priority still showed Highest
3. [BUG FIXED]
SPR: 071107456
Symptom: WPS LED light while WPS "Push Button" process finish
Condition:
1. Load to default setting
2. Press WPS "Push Button" to go WPS process
3. No Wireless STA to associate DUT via WPS
4. WPS LED is still light after WPS process finish(DUT WPS status= Unconfigur)
Modification in V3.60(AAJ.2)b2 | 10/25/2007
1. [BUG FIXED]
SPR: 071002054
Symptom: HomePlug QoS tab should be removed from "Basic" mode
Condition:
1. HomePlug QoS tab should be removed from "Basic" mode
.
2. [BUG FIXED]
SPR: 071002059
Symptom: HomePlug's "QoS" tab is gone in other language
Condition:
1. HomePlug's "QoS" tab is gone in other language
360AAJ2C0(Release).doc 3/18

ZyXEL Confidential
3. [BUG FIXED]
SPR: 071008470
Symptom: Wireless Super G throughput is under Criterion
Condition:
1. In wireless Super G throughput, Rx(Client to AP) throughput is under criterion(<20 Mbps)
2. Please reference the PQA test report
Modification in V3.60(AAJ.2)b1 | 10/03/2007
1. [FEATURE ENHANCED]
Support WPS.
2. [FEATURE ENHANCED]
Support Homeplug QoS.
3. [BUG FIXED]
SPR: 070914885
Symptom: In WPS function, DUT can accept security = WPA2-PSK + TKIP
Condition:
1. Use Vista as wired external registrar, and Ralink as the enrollee
2. Use Vista to config DUT with WPA2-PSK(TKIP) via WPS, DUT can accept
3. Use Vista to config Ralink via WPS(PIN method)
4. After WPS process(step3) finish, Ralink can't associate to DUT.(Ralink utility show DUT
profile that security= WPA2-PSK with TKIP )
4. [BUG FIXED]
SPR: 070914884
Symptom: Use PIN method via wired external registrar, WPS security = "No security" was
failed
Condition:
Use PIN method via wired external registrar, WPS security = "No security" was failed
5. [BUG FIXED]
SPR: 070914879
Symptom: Only enable or disable the Intra-BSS function and apply. The Message was
showed "Nothing changed; no need to perform save"
Condition:
Only enable or disable the Intra-BSS function and apply. The Message was showed
"Nothing changed; no need to perform save"
Modification in V3.60(AAJ.1) | 09/20/2007
Change 3.60(AAJ.1)b2 to 3.60(AAJ.1) FCS version.
Modification in V3.60(AAJ.1)b2 | 09/19/2007
1. [BUGFIX]
SPRID: 070914888
Symptom: In WPS function, DUT can hyperlink the Upnp and HTTP function
360AAJ2C0(Release).doc 4/18

ZyXEL Confidential
Condition:
1. In WPS function, DUT can hyperlink the Upnp and HTTP function.
2. But, DUT couldn't find Upnp and HTTP function in eWC
3. Upnp function should find and setting in Maintence
4. Hpyerlink HTTP should be removed
Modification in V3.60(AAJ.1)b1 | 09/07/2007
1. [FEATURE ENHANCED]
Support WCN (Windows Connect Now)
2. [FEATURE ENHANCED]
Improvements on GUI multilingual selection.
3. [FEATURE ENHANCED]
HomePlug support for Intellon v3.0 functionality
1. FW/BIP upgrade (Led blink when fw upgrade during initial time)
2. Push-button security and sync issue
Modification in V3.60(AAJ.0) | 05/31/2007
Change V3.60(AAJ.0)b5 to V3.60(AAJ.0) FCS version.
Modification in V3.60(AAJ.0)b5 | 05/28/2007
2. [BUGFIX]
SPRID: 070525345
Symptom: Accounting server function couldn't work
Condition: In GUI, users set the RADIUS accounting port as 1813 and save it, go to status
page and back, the RADIUS accounting port as "0". And couldn't accounting athentication
successful on accounting server
Modification in V3.60(AAJ.0)b4 | 05/21/2007
1. [BUGFIX]
SPRID: 070518945
Symptom: DUT couldn't add member from My HomePlug Network.
Condition:
1. Add no member DUT from My HomePlug Network list
2. Keyin the Nickname and DAK Password, click the apply
3. DUT showed ret_code=5 error message and couldn't add the not member DUT
Modification in V3.60(AAJ.0)b3 | 05/15/2007
360AAJ2C0(Release).doc 5/18

ZyXEL Confidential
1. [BUGFIX]
SPRID: 070425160
Symptom: Edit the MAC Address in Out of network DUT or Active DUT. DUT add new MAC
Address in My HomePlug Network list. It should only change the MAC Address
2. [BUGFIX]
SPRID: 070426291
Symptom: Please change the "Copyright 2006 by ZyXEL Communications Corp. " to
"Copyright 2007 by ZyXEL Communications Corp. " in about page.
3. [BUGFIX]
SPRID: 070411490
Symptom: When some functions were empty. DUT showed wrong message
Condition:
1. Authentication Sever or Accounting Sever--> Port Number
2. When port number was empty and apply
3. DUT's status showed "An error was detected on this page…."
4. Roaming port, RTS/CTS, Fragmentation, Manual New Time, Manual New Date had the
same issue
4. [BUGFIX]
SPRID: 070502035
Symptom: In Chinese language, please help to change "移至基本設定" to "進入基本設定"
while user login the system.
Condition:
1. While user login system, system ask user to select one hyper-link to enter system.
2. In Chinese language, please change "移至基本設定" to "進入基本設定"
5. [BUGFIX]
SPRID: 070502037
Symptom: In Chinese language, it show "HomePlug AV (影音)" in the interface status of the
status page
Condition:
Please change the "HomePlug AV (影音)" to "HomePlug AV"
6. [BUGFIX]
SPRID: 070502036
Symptom: In Chinese language, it show "成員行動"(Member Action) in the HomePlug table.
Condition:
1. In Chinese language, it show "成員行動"(Member Action) in the HomePlug table.
2. It is very strange, please help to modify it.(Maybe "編輯成員" or else)
7. [GUI CHANGE]
To refine the GUI Homeplug strings.
Modification in 3.60(AAJ.0)b2 | 4/16/2007
1. [BUGFIX]
SPRID: 070410417
Symptom: GUI--> LAN--> Get form DHCP Server. Changed "form" to "from"
360AAJ2C0(Release).doc 6/18

ZyXEL Confidential
Condition:GUI--> LAN--> Get form DHCP Server. Changed "form" to "from"
2. [BUGFIX]
SPRID: 070410424
Symptom: Only changed the Gateway IP address and apply. DUT showed wrong message
Condition:
1. GUI--> LAN--> User Defined LAN IP
2. Only changed the Gateway IP address and apply
3. DUT showed "Nothing changed; no need to perform save" message
Modification in 3.60(AAJ.0)b1 | 4/9/2007
First firmware release.
CI Command List:
Appendix A CI Command List
Last Updated: 2007/4/3 Command Class List Table
System Related Command Exit Command Device Related Command
Ethernet Related Command POE Related Command PPTP Related Command
Configuration Related Command IP Related Command Modem Dialup Command
Firewall Related Command Wireless LAN Related Command Bridge Related Command
Radius Related Command 802.1x Related Command HomePlug Related
Command
SystemRelatedCommand Home
Command Description
sys
atsh Display system MRD and checksum
callhist
add phone dir rate uptime Add a entry in call history
display display call history
remove <index> remove entry from call history
countrycode [countrycode] set country code
datetime
date Display system date year/month/day
time Display system time hour/minute/second
period The period to synchronize with time server
sync sync with time server
domainname display domain name
edit <filename> edit a text file
feature display feature bit
hostname [hostname] display system hostname
360AAJ2C0(Release).doc 7/18

ZyXEL Confidential
logs
category
8021x [0:none/1:log] [0:don't show
debug type/1:show debug type] record the 8021x logs
access [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type]
record and alert the access control logs
attack [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type]
record and alert the firewall attack logs
display display the category setting
error [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type
record and alert the system error logs
icmp [0:none/1:log] record the icmp logs
javablocked [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type]
Record and alert the java etc. blocked logs
mten [0:none/1:log] [0:don't show debug
type/1:show debug type] record the system maintenance logs
packetfilter [0:none/1:log] [0:don't show
debug type/1:show debug type] record packet filter logs
ppp [0:none/1:log] [0:don't show debug
type/1:show debug type] record PPP logs
cdr [0:none/1:log] [0:don't show debug
type/1:show debug type] record CDR logs
remote [0:none/1:log] [0:don't show
debug type/1:show debug type] record Remote Management logs
tcpreset [0:none/1:log] [0:don't show
debug type/1:show debug type] record tcp reset logs
traffic [0:none/1:log] [0:don't show
debug type/1:show debug type] record traffic logs
upnp [0:none/1:log] [0:don't show debug
type/1:show debug type] record upnp logs
urlblocked [0:none/1:log/2:alert/3:both] record and alert the web blocked logs
urlforward [0:none/1:log] record web forward logs
wireless [0:none/1:log] [0:don't show
debug type/1:show debug type] record wireless logs
anyip [0:none/1:log] record anyip logs
clear clear log
display [access|attack|error|ipsec|ike|javablocked|
mten|urlblocked|urlfor
ward]
display all logs or specify category logs
errlog
clear display log error
disp clear log error
Online on/off turn on/off error log online display
load load the log setting buffer
mail
alertAddr [mail address] send alerts to this mail address
display display mail setting
logAddr [mail address] send logs to this mail address
schedule display display mail schedule
schedule hour [0-23] hour time to send the logs
360AAJ2C0(Release).doc 8/18

ZyXEL Confidential
schedule minute [0-59] minute time to send the logs
schedule policy
[0:full/1:hourly/2:daily/3:weekly/4:none] mail schedule policy
schedule week
[0:sun/1:mon/2:tue/3:wed/4:thu/5:fri/6:sa
t]
weekly time to send the logs
server [domainName/IP] mail server to send the logs
subject [mail subject] mail subject
auth 0/1 Enable/Disable SMTP authentication
user Set SMTP user name
passwd Set SMTP password
save save the log setting buffer
syslog
active [0:no/1:yes] active to enable unix syslog
display display syslog setting
facility [Local ID(1-7)] log the messages to different files
server [domainName/IP] syslog server to send the logs
rn
load <entry no.> load remote node information
disp <entry no.>(0:working buffer) display remote node information
nat <none|sua|full_feature> config remote node nat
nailup <no|yes> config remote node nailup
mtu <value> set remote node mtu
save [entry no.] save remote node information
stdio [minute] change terminal timeout value
trcdisp monitor packets
trclog
trcpacket
version display RAS code and driver version
view <filename> view a text file
wdog
switch [on|off] set on/off wdog
cnt [value] display watchdog counts value: 0-34463
romreset restore default romfile
pwderrtm [minute] Set or display the password error blocking
timeout value.
upnp
active [0:no/1:yes] Activate or deactivate the saved upnp settings
config [0:deny/1:permit] Allow users to make configuration changes.
through UPnP
display display upnp information
firewall [0:deny/1:pass] Allow UPnP to pass through Firewall.
load save upnp information
reserve [0:deny/1:permit] Reserve UPnP NAT rules in flash
save save upnp information
qe
active [0:no/1:yes] Active to enable quick engine
state
debug
acl
display
add
360AAJ2C0(Release).doc 9/18

ZyXEL Confidential
delete
reset
session
display
add
delete
reset
route
display
add
delete
reset
arp
display
add
delete
reset
bridge
display
search
add
delete
reset
bltlookup
config [0: off | flags],
socket display system socket information
filter
netbios
disp Display NetBIOS Filter Status
Config <0:Between LAN and WAN,
3:IPSec pass through, 4:Trigger Dial>
<on|off>
Set NetBIOS Filter Status
roadrunner
debug <level> enable/disable roadrunner service
0: diable <default>
1: enable
display <iface name> display roadrunner information
iface-name: enif0, wanif0
restart <iface name> restart roadrunner
ddns
debug <level> enable/disable ddns service
display <iface name> display ddns information
restart <iface name> restart ddns
logout <iface name> logout ddns
cpu
display display CPU utilization
ExitCommand Home
Command Description
exit exit smt menu
DeviceRelatedCommand Home
Command Description
dev
360AAJ2C0(Release).doc 10/18

ZyXEL Confidential
dial <node#> dial to remote node
Ethernet Related Command Home
Command Description
ether
config display LAN configuration information
driver
cnt
disp <name> display ether driver counters
ioctl <ch-name> <command> [arguments] Useless in this stage.
status <ch_name> see LAN status
version see ethernet device type
spoofmac
macdir <xx:xx:xx:xx:xx:xx> Assign MAC for system
macbylan ip<xxx.xxx.xxx.xxx> Assign LAN PC MAC for system
macdefault Use default MAC
display Display MAC spoof information
edit
load <ether no.> load ether data from spt
mtu <value> set ether data mtu
accessblock <auto|10/half|10/full|100/half|100/full> block internet access
save save ether data to spt
wan
POERelatedCommand Home
Command Description
poe
status see poe status
dial <node> dial a remote node
drop <chann> drop a pppoe call
ether [rfc|3com] set /display pppoe ether type
PPTPRelatedCommand Home
Command Description
pptp
dial <rn-name> dial a remote node
drop <rn-name> drop a remote node call
tunnel <tunnel id> display pptp tunnel information
enque Set/display PPTP max en-queue size
chapv1LM Set/display chap v1 LM
Configuration Related Command Home
Command Description
config The parameters of config are listed below.
edit firewall active
<yes|no> Activate or deactivate the saved firewall settings
retrieve firewall Retrieve current saved firewall settings
save firewall Save the current firewall settings
display firewall Displays all the firewall settings
set <set#> Display current entries of a set configuration;
including timeout values, name, default-permit,
and number of rules in the set.
set <set#> rule <rule#> Display current entries of a rule in a set.
360AAJ2C0(Release).doc 11/18

ZyXEL Confidential
attack Display all the attack alert settings in PNC
e-mail Display all the e-mail settings in PNC
? Display all the available sub commands
e-mail mail-server
<mail server IP> Edit the mail server IP to send the alert
return-addr
<e-mail address> Edit the mail address for returning an email alert
email-to <e-mail
address> Edit the mail address to send the alert
policy <full |
hourly |daily |
weekly>
Edit email schedule when log is full or per hour,
day, week.
day <sunday |
monday | tuesday
| wednesday |
thursday | friday |
saturday>
Edit the day to send the log when the email
policy is set to Weekly
hour <0~23> Edit the hour to send the log when the email
policy is set to daily or weekly
minute <0~59> Edit the minute to send to log when the email
policy is set to daily or weekly
Subject <mail
subject> Edit the email subject
attack send-alert
<yes|no> Activate or deactivate the firewall DoS attacks notification emails
block <yes|no> Yes: Block the traffic when exceeds the
tcp-max-incomplete threshold
No: Delete the oldest half-open session when
exceeds the tcp-max-incomplete threshold
block-minute
<0~255> Only valid when sets 'Block' to yes. The unit is minute
minute-high
<0~255> The threshold to start to delete the old half-opened sessions to minute-low
minute-low
<0~255> The threshold to stop deleting the old half-opened session
max-incomplete-
high <0~255> The threshold to start to delete the old half-opened sessions to max-incomplete-low
max-incomplete-
low <0~255> The threshold to stop deleting the half-opened session
tcp-max-incompl
ete <0~255> The threshold to start executing the block field
set <set#> name <desired
name> Edit the name for a set
default-permit
<forward|block> Edit whether a packet is dropped or allowed when it does not match the default set
icmp-timeout
<seconds> Edit the timeout for an idle ICMP session before it is terminated
udp-idle-timeout
<seconds> Edit the timeout for an idle UDP session before it is terminated
connection-timeo
ut <seconds> Edit the wait time for the SYN TCP sessions before it is terminated
fin-wait-timeout
<seconds> Edit the wait time for FIN in concluding a TCP session before it is terminated
tcp-idle-timeout
<seconds> Edit the timeout for an idle TCP session before it is terminated
360AAJ2C0(Release).doc 12/18

ZyXEL Confidential
pnc <yes|no> PNC is allowed when 'yes' is set even there is a
rule to block PNC
log <yes|no> Switch on/off sending the log for matching the
default permit
rule <rule#> permit <forward|block> Edit whether a packet is dropped or allowed
when it matches this rule
active <yes|no> Edit whether a rule is enabled or not
protocol <0~255> Edit the protocol number for a rule. 1=ICMP,
6=TCP, 17=UDP...
Log
<none|match|not-match|both
>
Sending a log for a rule when the packet
none|matches|not match|both the rule
alert <yes|no> Activate or deactivate the notification when a
DoS attack occurs or there is a violation of any
alert settings. In case of such instances, the
function will send an email to the SMTP
destination address and log an alert.
srcaddr-single <ip address> Select and edit a source address of a packet
which complies to this rule
srcaddr-subnet <ip address>
<subnet mask> Select and edit a source address and subnet mask if a packet which complies to this rule.
srcaddr-range <start ip
address> <end ip address> Select and edit a source address range of a packet which complies to this rule.
destaddr-single <ip address> Select and edit a destination address of a packet
which complies to this rule
destaddr-subnet <ip
address> <subnet mask> Select and edit a destination address and subnet mask if a packet which complies to this rule.
destaddr-range <start ip
address> <end ip address> Select and edit a destination address range of a packet which complies to this rule.
tcp destport-single <port#> Select and edit the destination port of a packet
which comply to this rule. For non-consecutive
port numbers, the user may repeat this command
line to enter the multiple port numbers.
tcp destport-range <start
port#> <end port#> Select and edit a destination port range of a packet which comply to this rule.
udp destport-single <port#> Select and edit the destination port of a packet
which comply to this rule. For non-consecutive
port numbers, users may repeat this command
line to enter the multiple port numbers.
udp destport-range <start
port#> <end port#> Select and edit a destination port range of a packet which comply to this rule.
desport-custom <desired
custom port name> Type in the desired custom port name
delete firewall e-mail Remove all email alert settings
attack Reset all alert settings to defaults
set <set#> Remove a specified set from the firewall
configuration
set <set#> rule <rule#> Remove a specified rule in a set from the
firewall configuration
insert firewall e-mail Insert email alert settings
attack Insert attack alert settings
set <set#> Insert a specified rule set to the firewall
configuration
set <set#> rule <rule#> Insert a specified rule in a set to the firewall
configuration
360AAJ2C0(Release).doc 13/18

ZyXEL Confidential
cli Display the choices of command list.
debug <1|0> Turn on|off trace for firewall debug information.
Wireless LAN Related Command Home
Command Description
wlan
active [on|off] set on/off wlan
association display association list
Chid [channel id] set channel
essid [ess id] set ESSID
fraThreshold
led
opmode
outputpower <0: 17 dBm, 1: 14 dBm, 2: 11 dBm> Set wlan output power
radio
rtsThreshold
removeSTA <MAC ADDRESS> Remove wireless Client
reset Reset wireless
scan Auto channel select
superset
ssidprofil
version display WLAN version information
BridgeRelatedCommand Home
Command Description
Bridge
cnt related to bridge routing statistic table
Disp display bridge route counter
Clear clear bridge route counter
stat related to bridge packet statistic table
Disp display bridge route packet counter
Clear clear bridge route packet counter
Radius Related Command Home
Command Description
Radius
auth
show show current radius authentication server
configuration
addAuthServer index active[1/0] ip port key Add authentication server
delAuthServer index Delete authentication server
acct
show show current radius accounting server
configuration
addAcctServer index active[1/0] ip port key
delAcctServer index
showRunInfo Show current radius authentication and
accounting server information
setTryNums [nums: 1~9] Set try number
checkRadID Display radius ID pool
debug [0:off 1:on] turn on/off debug
360AAJ2C0(Release).doc 14/18

ZyXEL Confidential
802.1x Related Command Home
Command Description
8021x
debug Level [debug level] set ieee802.1x debug message level
Trace show all supplications in the supplication table
User [username] show the specified user status in the supplicant
table
pmkcache
show [ChanID] Show pmkcache
flush [ChanID] Flush pmkcache
set
mode <WPA_PSK/OTHERS> 8021x set mode
key <key> 8021x set key
save 8021x save
show
showkey 8021x showkey
IPRelatedCommand Home
Command Description
ip
address [addr] display host ip address
alias <iface> alias iface
aliasdis <0|1> disable alias
arp
status <iface> display ip arp status
attpret <on:off> protect from IP spoofing ARP attack
force <on|off> force update wan arp switch
dhcp <iface>
client
Release release DHCP client IP
Renew renew DHCP client IP
status show dhcp status
dns
query
address
name
stats
Clear clear dns statistics
Disp display dns statistics
proxy table display DNS Proxy Request Table
system
display Display system dns configuration
edit <0: first|1: second|2: third>
<0:from ISP|1:usr-def|2:none> [IP
addr ess if choosing 1]
modify system dns configuration
lan
edit <0:first|1:second|2:third>
<0:from ISP|1:user defined|2:DNS
relay|3:none> [IP address if choosing
1|]
modify lan dns configuration
display Display lan dns configuration
httpd debug [on|off] Turn on/off httpd debug
icmp
status display icmp statistic counter
360AAJ2C0(Release).doc 15/18

ZyXEL Confidential
discovery <iface> [on|off] set icmp router discovery flag
ifconfig [iface] [ipaddr] [broadcast <addr>
|mtu <value>|dynamic] configure network interface
ping <hostid> ping remote host
route
status [if] display routing table
add <dest_addr|default>[/<bits>]
<gateway> [<metric>] add route
addiface <dest_addr|default>[/<bits>]
<gateway> [<metric>] add an entry to the routing table to iface
addprivate <dest_addr|default>[/<bits>]
<gateway> [<metric>] add private route
drop <host addr> [/<bits>] drop a route
status display ip statistic counters
udp status Display udp status
tcp status Disp tcp status
telnet <host> telnet to <host>
traceroute <host> [ttl] [wait] [queries] send probes to trace route of a remote host
xparent
join <iface1> [<iface2>] join iface2 to iface1 group
break <iface> break iface to leave ipxparent group
urlfilter
enable [0:no/1:yes] Enable/disable url filter
exemptZone
Display display exemptzone information
actionFlags
[type(1-3)][enable/disable] set action flags
add [ip1] [ip2] add exempt range
delete [ip1] [ip2] delete exempt range
clearAll clear exemptzone information
customize
Display display customize action flags
actionFlags[filterList/disableAllExce
ptTrusted/unblockRWFToTrusted/k
eywordBlock/fullPath/caseInsensiti
ve/fileName][enable/disable]
set action flags
logFlags [type(1-3)][enable/disable] set log flags
add [string] [trust/untrust/keyword] add url string
delete [string] [trust/untrust/keyword] delete url string
reset reset the customize's setting
stroute
display [rule # | buf] display rule index or detail message in rule.
load <rule #> load static route rule in buffer
save save rule from buffer to spt.
config
name <site name> set name for static route.
destination <dest addr>[/<bits>]
<gateway> [<metric>] set static route destination address and gateway.
mask <IP subnet mask> set static route subnet mask.
gateway <IP address> set static route gateway address.
metric <metric #> set static route metric number.
private <yes|no> set private mode.
active <yes|no> set static route rule enable or disable.
ident <on/off> Reject IDENT packet switch on/off
360AAJ2C0(Release).doc 16/18

ZyXEL Confidential
dropIcmp <0/1> Device allows/drops ICMP fragment packets
lite [0:disable|1:enable lite
firewall|2:enable lite and quickpath] Lite firewall setting
igmp
debug [level] set igmp debug level
forwardall [on|off] turn on/off igmp forward to all interfaces flag
querier [on|off] turn on/off igmp stop query flag
iface
<iface> grouptm <timeout> set igmp group timeout
<iface> interval <interval> set igmp query interval
<iface> join <group> join a group on iface
<iface> leave <group> leave a group on iface
<iface> query send query on iface
<iface> rsptime [time] set igmp response time
<iface> start turn on of igmp on iface
<iface> stop turn off of igmp on iface
<iface> ttl <threshold> set ttl threshold
<iface> v1compat [on|off] turn on/off v1compat on iface
robustness <num> set igmp robustness variable
status dump igmp status
Firewall Related Command Home
Command Description
sys Firewall
acl
Disp Display specific ACL set # rule #, or all ACLs.
active <yes|no> Active firewall or deactivate firewall
msnblock <on|off>
cnt
Disp Display firewall log type and count.
Clear Clear firewall log count.
dynamicrule
tcprst
Rst Set TCP reset sending on/off.
rst113 Set TCP reset sending for port 113 on/off.
Display Display TCP reset sending setting.
dos
Smtp Set SMTP DoS defender on/off
Display Display SMTP DoS defender setting.
Ignore Set if firewall ignore DoS in lan/wan/dmz/wlan
ignore
Dos Set if firewall ignore DoS in lan/wan/dmz/wlan
Triangle Set if firewall ignore triangle route in lan/wan/dmz/wlan
schedule
load
display
save
week
timeOfDay
threshold Display firewall threshold
HomePlug Related Command Home
360AAJ2C0(Release).doc 17/18

ZyXEL Confidential
Command Description
homeplug
scan Scan devices on my HomePlug network.
fwver Query the HomePlug chip about his fw version.
setnpw Set the network password to myself only.
setnpws Set the network password to myself and all my
members.
statistics Show some statistics.
showmember Show my members.
showcfg Show configuration.
linkstat Get or clear link statistic
showipport Show homeplug QoS ip or port configuration.
ipportpriority Set homeplug QoS ip or port configuration.
delipport Delete homeplug QoS ip or port configuration.
prioritymap Set homeplug QoS map configuration.
defaultpriority Set homeplug QoS default priority
configuration.
360AAJ2C0(Release).doc 18/18