ZyXEL Communications P-2602H-D1A Instruction Manual

ZyXEL Confidential
340adq4c0 1/36
ZyXEL
Firmware Release Note
P-2602H/HL/HW/HWL-D1A
Standard version
Release 3.40(ADQ.4)C0
Date: March 16 2007
Author: Chun Hsing Chien

ZyXEL Confidential
340adq4c0 2/36
ZyXEL P-2602H/HL/HW/HWL-D1A Standard
Version
Release 3.40(ADQ.4)C0
Release Note
Date: March 16, 2007
Supported Platforms:
ZyXEL P-2602H/HL/HW/HWL-D1A
Versions:
ZyNOS Version: V3.40(ADQ.4) | 03/16/2007
Bootbase Version: V1.13 | 02/16/2006 14:05:00
Notes:
The P-2602HWL-D1A, is 4th generation of ZyXEL ADSL product family. It is a high
performance ADSL/ADSL2 router for small/medium office to have Internet access and
LAN-to-LAN application over the existing copper line. P-2602HWL-D1A takes advantage
of much higher data rate than ADSL, speed up to 12Mbps (ADSL2), faster start-up,
advanced diagnostics and better power management. This high performance ADSL router
is a high integrated 4 port 10/100M auto MDI/MDIX switch, advanced secure
VPN/Firewall, Bandwidth Management, IEEE 802.11g wireless access, and Voice over IP
communication capability for small/medium business or small remote office.
P2602HWL-D1A provides an embedded mini-PCI module for 802.11g Wireless LAN
connectivity, four single auto-sensing, auto-detection 10/100BASE-T Ethernet ports for
connection to the user’s local network, and a single RJ-11/RJ-45 port for connection to
ADSL/ADSL2 line.
The version of modem code is TI AR7 06.00.04.00.
The version of Wireless APDK code is 6.3.1.26

ZyXEL Confidential
340adq4c0 3/36
Features:
Modifications in V 3.40(ADQ.4) | 03/16/2007
1. Change to FCS version.
Modifications in V 3.40(ADQ.4)b3 | 03/07/2007
2. [BUG FIX][SPR: 070129541]
When DTMF Mode field was set to RFC2833 and call from SIP endpoint to DUT's
PSTN network (SIP to FXO), DUT will send SIP INFO DTMF packets to PSTN
switch.
3. [BUG FIX][SPR: 070130629]
When DTMF Mode field was set to RFC2833(or PCM) and VoIP trunking is disabled,
DUT will send RFC2833(or PCM) and SIP INFO at the same time.
4. [BUG FIX][SPR: 070213108]
Callee side Enable Trunking, Caller one Call use PSTN Call to Callee and another
Call use VoIP Call (Codec=G.729) to Callee, Callee will occur exception.
5. [BUG FIX]
System got crash when configuring WPA setting in SMT menu 23.4.
Modifications in V 3.40(ADQ.4)b2 | 02/08/2007
[BUG FIX][SPR: 070130630]
When setting "Voice Compression Type" to "G_726-16" or "G_726-24", caller can not
make the VoIP call with callee.
Modifications in V 3.40(ADQ.4)b1 | 01/17/2007
[ENHANCEMENT]
Support VoIP Romfile convert to make it backward compatiable with ADQ/AJK.2 and
ADQ/AJK.3
Converted settings included: SIP, PhoneBook and PhoneConfig feature keys.
Support "ip ippolicy" cli command.
Support WLAN NVS file format check after NVS file is downloaded. (TE requirement)
Support “ip teifconf” cli command for TE test program. (TE requirement)
Support “DRAM Post test” on HTP test. (TE requirement)
[BUG FIX]
Change FXO DTMF type from SIP_INFO to PCM type to fix sometimes unexpected
digits be detected from fxo port.
Modifications in V 3.40(ADQ.3)C0 | 12/13/2006
Change to FCS version.
Modifications in V 3.40(ADQ.3)b5 | 12/05/2006
[ENHANCEMENT]
TR-069 enhancement:

ZyXEL Confidential
340adq4c0 4/36
Change the HTTP session maintaintance to "Keep Alive" for each TR-069
session.
Enlarge the SOAP message body container size from 4096 to 8192.
Modifications in V 3.40(ADQ.3)b4 | 11/16/2006
[ENHANCEMENT]
Support firewall rule page control.on Web GUI “Security > Firewall > Rules”.
The number of page control is 10.
Update following Web help contents
Security > Certificates > My Certificates
Advanced > Bandwidth MGMT > General
VoIP > Phone > Common
VoIP > Phone > Analog Phone > Advanced
VoIP > Phone Book > Distinctive Ring
Modifications in V 3.40(ADQ.3)b3 | 10/24/2006
[ENHANCEMENT]
Support Full G.726 Codec for GUI & CLI command.
Support G.723 Codec for CLI command only.
Support Call Fallback GUI.
Support Auto Dail(HotLine) GUI.
Enhanced Distinctive Ring GUI and rename Group Ring to Distinctive Ring.
Modifications in V 3.40(ADQ.3)b2 | 09/27/2006
[ENHANCEMENT]
Support Auto MBM
Synchronize the reset button behavior
1 sec: enable/disable WLAN function
3 sec: enable OTIST
10 sec: reset to factory default
Support Certificates
Support VPN with Certificate security.
Enhance Phone Configuration
Do not disturb (*95# , #95#)
Call Forward to configure call fotable. (*21#, #21#, *22*, *23*, *24*)
Remove STUN support
Remove Web GUI HTTPS configuration in Remote Management.
Modifications in V 3.40(ADQ.3)b1 | 08/11/2006
[ENHANCEMENT]
Call Features:
Support Call Park / Call Pickup
Support Call return
Support Call Waiting Active/Inactive
Support Caller ID enable/disable

ZyXEL Confidential
340adq4c0 5/36
Support Phase 2 Country code
Support Distinctive Ringing(Group Ring)
Support Do not disturb
Support Early Media
Support Hot line
Support Music on Hold
Support MWI
Support Phone configuration
Call through cross PSTN network(TRUNKING)
Provisioing& Management
Support TR104 provisioning
NAT traversal
Support STUN
MISC
Support TR-069/TR-104
Support CONE NAT on-line change type
Support VOICE_PACKET_ROUTE
WLAN
Upgrade TI APDK 6.3.0.126
Support WiFi new spec requires 64 char shared key with Radius server
Modifications in V 3.40(ADQ.2)C0 | 07/24/2006
Change to FCS version.
[KNOWN ISSUE]
When Country Code=UK, the Caller ID can’t display.
Modifications in V 3.40(ADQ.2)b2 | 07/21/2006
[BUGFIX]
Analog Phone 1 & Phone 2 can't display CLID.
Modifications in V 3.40(ADQ.2)b1 | 07/18/2006
[ENHANCEMENT]
Country Code support for different ring and tone for USA, AUSTRIA, BELGIUM,
DENMARK, FINLAND, NETHERLAND, NORWAY, SPAIN, SWEDEN,
SWITZERLAND, UK GERMANY, Australia, Ireland, CZECH and ITALY, total 16
countries.
1. Support Ring for Frequency, Amplitude(Vrms)-No load, Amplitude(Vrms)-5
REN, and Cadence.
2. Support Tone for Dial Tone, Busy Tone, Congestion Tone, Ringback Tone,
Call Wait Tone, and Re-order Tone.
3. Codec DAA is not supported yet.
4. Caller ID (CID) is not supported yet.
Modifications in V 3.40(ADQ.3)b1 | 06/19/2006

ZyXEL Confidential
340adq4c0 6/36
1. [ENHANCEMENT]
Support HTTPS
Support TR-069 /TR-104 with HTTPS
Support CONE NAT on-line change type
Support up to 13 WLAN channels and high power by country code
Support VOICE_PACKET_ROUTE (decide which PVC for voice packet)
Modifications in V 3.40(ADQ.1)C0 | 06/19/2006
Change to FCS version.
[KNOWN ISSUE]
IOP issue with Centrino2200BG, low WLAN throughput within 50cm distance
Modifications in V 3.40(ADQ.1)b1 | 06/13/2006
[ENHANCEMENT]
Support WLAN module detection automatically from now on.
Modifications in V 3.40(ADQ.0)C0 | 05/12/2006
Change to FCS version.
Modifications in V 3.40(ADQ.0)b11 | 05/10/2006
None.
Modifications in V 3.40(ADQ.0)b10 | 05/08/2006
[ENHANCEMENT]
Enlarge the FTP_BUFFER_SIZE from 0x320000 to 0x3D0000.
Modifications in V 3.40(ADQ.0)b9 | 04/26/2006
[ENHANCEMENT]
Support WLAN LED on/off check mechanism on HTP test.
Support WLAN power switch when power cycle fail.
Support Outbound Proxy in Web GUI.
Modifications in V 3.40(ADQ.0)b8 | 04/24/2006
[ENHANCEMENT]
Support ADM6996I AD version.
Support full infomations in “sys atsh” CLI commands
Support embedded Web GUI Help
Modifications in V 3.40(ADQ.0)b7 | 04/03/2006
[ENHANCEMENT]
Support modem code TI AR7 06.00.04.00.
Modifications in V 3.40(ADQ.0)b5 | 03/24/2006

ZyXEL Confidential
340adq4c0 7/36
[ENHANCEMENT]
Support LIFELINE_AUTODETECT.
Support TI 1350 and APDK 6.3.0.23
Modifications in V 3.40(ADQ.0)b4 | 02/24/2006
[ENHANCEMENT]
Support TI 1350 and APDK 6.3.0.18
Support modem code TI AR7 06.00.02.00
Suuport MultiBoot Client version 2.3
Modifications in V 3.40(ADQ.0)b3 | 01/25/2006
2. [ENHANCEMENT]
Support CONE NAT
Support TI 1350 and APDK 6.2.0.25
Support Web NewGUI.
Enhance "Triple Play" feature
1. Support Multi ports to Multi PVCs mapping
2. Support WLAN port mapping
3. Support IGMP Snooping
Integrated DNS
Support Time Zone by City
Support throughput enhancement
Support OTIST(press 1s on reset button to turn on or turn off the WLAN; 5s for OTIST;
10s to reset back to factory default)
Support VoIP Phase 2 call feautre.
Modifications in V 3.40(ADQ.0)b2 | 12/19/2005
none
Modifications in V 3.40(ADQ.0)b1 | 12/16/2005
1. Create this project for OBM version.

ZyXEL Confidential
340adq4c0 8/36
Annex A CI Command List
Command Class List Table
System Related Command Exit Command Ethernet Related Command
WAN Related Command WLAN_Related_Command IP Related Command
IPSec Related Command PPP Related Command Bridge Related Command
Radius Related Command 8021x Related Command Firewall Related Command
Configuration Related Command SMT Related Command Voice Related Command
SystemRelatedCommand Home
Command Description
sys
adjtime retrive date and time from Internet
cbuf
display [a|f|u] display cbuf a: all f: free u: used
cnt cbuf static
display display cbuf static
clear clear cbuf static
baud <1..5> change console speed
callhist
display display call history
remove <index> remove entry from call history
clear clear the counters in GUI status menu
countrycode [countrycode] set country code
date [year month date] set/display date
domainname display domain name
edit <filename> edit a text file
enhanced return OK if commands are supported for PWC
purposes
errctl [level] set the error control level
0:crash no save,not in debug mode (default)
1:crash no save,in debug mode
2:crash save,not in debug mode
3:crash save,in debug mode
event
display display tag flags information
trace display system event information
display display trace event
clear <num> clear trace event
extraphnum maintain extra phone numbers for outcalls
add <set 1-3> <1st phone num> [2nd phone
num] add extra phone numbers
display display extra phone numbers
node <num> set all extend phone number to remote node
<num>
remove <set 1-3> remove extra phone numbers
reset reset flag and mask
feature display feature bit
fid
display display function id list
firmware display ISDN firmware type
hostname [hostname] display system hostname
iface

ZyXEL Confidential
340adq4c0 9/36
disp [#] display iface list
isr [all|used|free] display interrupt service routine
interrupt display interrupt status
log
category
access [0:none/1:log] record the access control logs
attack [0:none/1:log/2:alert/3:both] record and alert the firewall attack logs
display display the category setting
error [0:none/1:log/2:alert/3:both] record and alert the system error logs
ipsec [0:none/1:log] record the access control logs
mten [0:none/1:log] record the system maintenance logs
upnp [0:none/1:log] record upnp logs
urlblocked [0:none/1:log/2:alert/3:both] record and alert the web blocked logs
urlforward [0:none/1:log] record web forward logs
clear clear log
display display all logs
errlog
clear display log error
disp clear log error
online turn on/off error log online display
load load the log setting buffer
mail
alertAddr [mail address] send alerts to this mail address
display display mail setting
logAddr [mail address] send logs to this mail address
schedule display display mail schedule
schedule hour [0-23] hour time to send the logs
schedule minute [0-59] minute time to send the logs
schedule policy
[0:full/1:hourly/2:daily/3:weekly/4:non
e]
mail schedule policy
schedule week
[0:sun/1:mon/2:tue/3:wed/4:thu/5:fri/6:
sat]
weekly time to send the logs
server [domainName/IP] mail server to send the logs
subject [mail subject] mail subject
save save the log setting buffer
syslog
active [0:no/1:yes] active to enable unix syslog
display display syslog setting
facility [Local ID(1-7)] log the messages to different files
server [domainName/IP] syslog server to send the logs
mbuf
cnt
disp display system mbuf count
clear clear system mbuf count
link link list system mbuf link
pool <id> [type] list system mbuf pool
status display system mbuf status
disp <address> display mbuf status
debug [on|off]
memory <address> <length> display memory content

ZyXEL Confidential
340adq4c0 10/36
memwrite <address> <len> [data list ...] write some data to memory at <address>
memwl <address> write long word to memory at <address>
memrl <address> read long word at <address>
memutil
usage display memory allocate and heap status
mqueue <address> <len> display memory queues
mcell mid [f|u] display memory cells by given ID
msecs [a|f|u] display memory sections
mtstart <n-mcell> start memory test
mtstop stop memory test
mtalloc <size> [n-mcell] allocate memory for testing
mtfree <start-idx> [end-idx] free the test memory
model display server model name
proc
display display all process information
stack [tag] display process's stack by a give TAG
pstatus display process's status by a give TAG
queue
display [a|f|u] [start#] [end#] display queue by given status and range numbers
ndisp [qid] display a queue by a given number
quit quit CI command mode
reboot [code] reboot system
code = 0 cold boot,
= 1 immediately boot
= 2 bootModule debug mode
reslog
disp display resources trace
clear clear resources trace
stdio [second] change terminal timeout value
time [hour [min [sec]]] display/set system time
timer
disp display timer cell
trace [on|off] set/display timer information online
start [tmValue] start a timer
stop <ID> stop a timer
trcdisp monitor packets
trclog
switch [on|off] set system trace log
online [on|off] set on/off trace log online
level [level] set trace level of trace log #:1-10
type <bitmap> set trace type of trace log
disp display trace log
clear clear trace
call display call event
encapmask [mask] set/display tracelog encapsulation mask
trcpacket
create <entry> <size> create packet trace buffer
destroy packet trace related commands
channel <name>
[none|incoming|outgoing|bothway] <channel name>=enet0,sdsl00, fr0 set packet trace direction for a given channel
string enable smt trace log
switch [on|off] turn on/off the packet trace
disp display packet trace

ZyXEL Confidential
340adq4c0 11/36
udp send packet trace to other system
switch [on|off] set tracepacket upd switch
addr <addr> send trace packet to remote udp address
port <port> set tracepacket udp port
parse [[start_idx], end_idx] parse packet content
brief display packet content briefly
version display RAS code and driver version
view <filename> view a text file
wdog
switch [on|off] set on/off wdog
cnt [value] display watchdog counts value: 0-34463
romreset restore default romfile
server
access <telnet|ftp|web|icmp|snmp|dns>
<value> set server access type
load load server information
disp display server information
port <telnet|ftp|web|snmp> <port> set server port
save save server information
secureip <telnet|ftp|web|icmp|snmp|dns> <ip> set server secure ip addr
spt
dump dump spt raw data
root dump spt root data
rn dump spt remote node data
user dump spt user data
slot dump spt slot data
save save spt data
size display spt record size
clear clear spt data
cmgr
trace
disp <ch-name> show the connection trace of this channel
clear <ch-name> clear the connection trace of this channel
cnt <ch-name> show channel connection related counter
socket display system socket information
filter
clear clear filter statistic counter
disp display filter statistic counters
sw [on|off] set filter status switch
set <set> display filter rule
netbios
disp display netbios filter status
config <0:LAN to WAN, 1:WAN to
LAN, 2:LAN to DMZ, 3:IPSec
passthrough, 4:Trigger Dial> <on|off>
config netbios filter
ddns
debug <level> enable/disable ddns service
display <iface name> display ddns information
restart <iface name> restart ddns
logout <iface name> logout ddns
cpu
display display CPU utilization

ZyXEL Confidential
340adq4c0 12/36
ExitCommand Home
Command Description
exit exit smt menu
Ethernet Related Command Home
Command Description
ether
config display LAN configuration information
driver
cnt
disp <name> display ether driver counters
clear <name> clear ether driver counters
iface <ch_name> <num> send driver iface
ioctl <ch_name> Useless in this stage.
mac <ch_name> <mac_addr> Set LAN Mac address
reg <ch_name> display LAN hardware related registers
rxmod <ch_name> <mode> set LAN receive mode.
mode: 1: turn off receiving
2: receive only packets of this interface
3: mode 2+ broadcast
5: mode 2 + multicast
6: all packets
status <ch_name> see LAN status
init <ch_name> initialize LAN
version see ethernet device type
pkttest
disp
packet <level> set ether test packet display level
event <ch> [on|off] turn on/off ether test event display
sap [ch_name] send sap packet
arp <ch_name> <ip-addr> send arp packet to ip-addr
mem <addr> <data> [type] write memory data in address
test <ch_id> <test_id> [arg3] [arg4] do LAN test
pncconfig <ch_name> do pnc config
mac <src_ch> <dest_ch> <ipaddr> fake mac address
WANRelatedCommand Home
Command Description
wan adsl bert ADSL ber
chandata ADSL channel data, line rate
close Close ADSL line
coding ADSL standard current
ctrleint ADSL CTRLE response command
defbitmap ADSL defect bitmap status
dyinggasp Send ADSL dyinggasp
fwav Test the ADSL F/W available ping
fwdl Download modem code, but must reset first
linedata
near Show ADSL near end noise margin
far Show ADSL far end noise margin

ZyXEL Confidential
340adq4c0 13/36
open Open ADSL line
opencmd Open ADSL line with specific standard
opmode Show the operational mode
perfdata Show performance information,CRC,FEC, error
seconds..
rdata [start] [length] Read DSP CTRLE registers 512 bytes
reset Reset ADSL modem, and mustreload the modem
code again
selftest
long ADSL long loop test
short ADSL short loop test
status ADSL status (ex: up, down or wait for init)
version ADSL version information
vendorid ADSL vendor information
utopia Show ADSL utopia information
cellcnt Show ADSL cell counter
display
shutdown Show the counter of rate adaptive mechanism
happening
rateup Show real status that rate adaptive mechanism
happened
rateadap [on|off] Turn on/off rate adaptive mechanism
dumpcondition [on|off] Turn on/off online debug information of rate
adaptive mechanism
sampletime [mins] Tune the sample time of rate adaptive mechanism
noisegt [dB] if noise margin is 3db greater than before, and
rate is worse than before, then system will do “L1
shutdown RA3”, default is 3db
noisemargin [dB] if noise margin is greater than this value, and rate
is worse than before, then system will do “L1
shutdown RA3”, default is 8db
persisttime [time] when the adaptive condition is matched system
will continue to monitor the time period
“persisttime” before doing “L1 shutdown RA3”,
default is 30 seconds
timeinterval [mins] when “L1 shutdown RA3” is done twice, and still
can’t reach the max rate which system recorded,
it will delay a time period that the period base
time is”timeinterval” before starting again. The
time-based default is 2 hrs
defectcheck [on|off] Turn on/off detect table checking, default is on
txgain [value] Set the CTRLE register (0xc3), the value is from
0xfa to 0x06
targetnoise [value] Set the CTRLE register (0xc4), the value is from
0xfa to 0x06
maxtonelimit [value] Set the CTRLE register (0xc5), the value is from
0xfa to 0x06
rxgain [value] Set the CTRLE register (0xc6), the value is from
0xfa to 0x06
txoutputpwr [value] Set the CTRLE register (0xc7), the value is from
0xfa to 0x06
rxoutputpwr [value] Set the CTRLE register (0xc8), the value is from
0xfa to 0x06
maxoutputpwr [value] Set the CTRLE register (0xc9), the value is from

ZyXEL Confidential
340adq4c0 14/36
0xfa to 0x06
errorsecond
sendes Send current error second information
immediately
dygasprecover
dygasprecover level [value] By default is 100, after receiving 100 dying gasp
system will reboot
dygasprecover active [on|off| Turn on/off this mechanism
rsploss [1|0] Turn on means to response signal loss of CTRLE
immediately, default is off
atm test [fix|rand|period|oam|loopback] Generate ATM traffic
hwsar disp Display hwsar packets incoming/outgoing
information
clear Clear hwsar packets information
WLANRelatedCommand Home
Command Description
Wlan
active [on|off] [0|1] Turn on/off wireless lan
association Show association list
load Load WLAN configuration into buffer.
Display Display WLAN configuration data.
chid Configure channel ID
essid Configure ESSID
hiddenssid [on/off] Enable/Disable hidden SSID
threshold
rts <RTS threshold value> Set threshold rts value
Fragment <Fragment threshold value> Set threshold fragmentation value
wep
type <none|64|128|256> Set WEP key to 64, 128 or 256 bits.
Key Set <set> <value> Set WEP key value per set
Key Default <set> Set WEP default key set
macfilter
Enable Enable macfilter
Disable Disable macfilter
Action <allow|deny> When action match, allow or deny this mac
Set <Set#> <MAC Address> Set mac address by set
Clear Clear all WLAN configuration data.
Save Save WLAN configuration working buffer to
Rom file.
filter
[incoming |
outgoing] <generic>[set#1][set#2][set#3][set#4] To set generic filter for wireless channel
IPRelatedCommand Home
Command Description
ip
address [addr] display host ip address
loopbackaddr <IP1> [IP2] Set loopback address.
alias <iface> alias iface
aliasdis <0|1> disable alias
arp

ZyXEL Confidential
340adq4c0 15/36
status <iface> display ip arp status
add <hostid> ether <ether addr> add arp information
resolve <hostid> resolve ip-addr
drop <hostid> [hardware] drop arp
flush flush arp table
publish add proxy arp
dhcp <iface>
client
release release DHCP client IP
renew renew DHCP client IP
mode <server|relay|none|client> set dhcp mode
relay server <serverIP> set dicp relay server ip-addr
reset reset dhcp table
server
probecount <num> set dhcp probe count
dnsserver <IP1> [IP2] [IP3] set dns server ip-addr
winsserver <winsIP1> [<winsIP2>] set wins server ip-addr
gateway <gatewayIP> set gateway
hostname <hostname> set hostname
initialize fills in DHCP parameters and initializes (for
PWC purposes)
leasetime <period> set dhcp leasetime
netmask <netmask> set dhcp netmask
pool <startIP> <numIP> set dhcp ip pool
renewaltime <period> set dhcp renew time
rebindtime <period> set dhcp rebind time
reset reset dhcp table
server <serverIP> set dhcp server ip for relay
dnsorder [router|isp] set dhcp dns order
status [option] show dhcp status
static
delete <num>|all delete static dhcp mac table
display display static dhcp mac table
update <num> <mac> <ip> update static dhcp mac table
dns
query
address <ipaddr> [timeout] resolve ip-addr to name
debug <num> enable dns debug value
name <hostname> [timeout] resolve name to ip-addr
status display dns query status
table display dns query table
server <primary> [secondary] [third] set dns server
stats
clear clear dns statistics
disp display dns statistics
table display dns table
httpd
debug [on|off] set http debug flag
icmp
echo [on|off] set icmp echo response flag
data <option> select general data type
status display icmp statistic counter
trace [on|off] turn on/off trace for debugging

ZyXEL Confidential
340adq4c0 16/36
discovery <iface> [on|off] set icmp router discovery flag
ifconfig [iface] [ipaddr] [broadcast <addr>
|mtu <value>|dynamic] configure network interface
ifdrop <iface> chaek if iface is available.
ping <hostid> ping remote host
pong <hostid> [<size> <time-interval>] pong remote host
route
status [if] display routing table
add <dest_addr|default>[/<bits>]
<gateway> [<metric>] add route
addiface <dest_addr|default>[/<bits>]
<gateway> [<metric>] add an entry to the routing table to iface
addprivate <dest_addr|default>[/<bits>]
<gateway> [<metric>] add private route
drop <host addr> [/<bits>] drop a route
flush flush route table
lookup <addr> find a route to the destination
errcnt
disp display routing statistic counters
clear clear routing statistic counters
status display ip statistic counters
adjTcp <iface> [<mss>] adjust the TCP mss of iface
udp
status display udp status
rip
accept <gateway> drop an entry from the RIP refuse list
activate enable rip
merge [on|off] set RIP merge flag
refuse <gateway> add an entry to the rip refuse list
request <addr> [port] send rip request to some address and port
reverse [on|off] RIP Poisoned Reverse
status display rip statistic counters
trace enable debug rip trace
mode
<iface> in [mode] set rip in mode
<iface> out [mode] set rip out mode
dialin_user [show|in|out|both|none] show dialin user rip direction
tcp
ceiling [value] TCP maximum round trip time
floor [value] TCP minimum rtt
irtt [value] TCP default init rtt
kick <tcb> kick tcb
limit [value] set tcp output window limit
max-incomplete [number] Set the maximum number of TCP incomplete
connection.
mss [value] TCP input MSS
reset <tcb> reset tcb
rtt <tcb> <value> set round trip time for tcb
status [tcb] [<interval>] display TCP statistic counters
syndata [on|off] TCP syndata piggyback
trace [on|off] turn on/off trace for debugging
window [tcb] TCP input window size
samenet <iface1> [<iface2>] display the ifaces that in the same net
uninet <iface> set the iface to uninet

ZyXEL Confidential
340adq4c0 17/36
tftp
support support
stats stats
xparent
join <iface1> [<iface2>] join iface2 to iface1 group
break <iface> break iface to leave ipxparent group
antiprobe <0|1> 1:yes 0:no set ip anti-probe flag
igmp
debug [level] set igmp debug level
forwardall [on|off] turn on/off igmp forward to all interfaces flag
querier [on|off] turn on/off igmp stop query flag
iface
<iface> grouptm <timeout> set igmp group timeout
<iface> interval <interval> set igmp query interval
<iface> join <group> join a group on iface
<iface> leave <group> leave a group on iface
<iface> query send query on iface
<iface> rsptime [time] set igmp response time
<iface> start turn on of igmp on iface
<iface> stop turn off of igmp on iface
<iface> ttl <threshold> set ttl threshold
<iface> v1compat [on|off] turn on/off v1compat on iface
robustness <num> set igmp robustness variable
status dump igmp status
pr
clear clear ip pr table counter information
disp dump ip pr table counter information
switch turn on/off ip pr table counter flag
nat
timeout
gre [timeout] set nat gre timeout value
iamt [timeout] set nat iamt timeout value
generic [timeout] set nat generic timeout value
reset [timeout] set nat reset timeout value
tcp [timeout] set nat tcp timeout value
tcpother [timeout] set nat tcp other timeout value
update create nat system information from spSysParam
iamt display nat iamt information
iface <iface> show nat status of an interface
lookup <rule set> display nat lookup rule
new-lookup <rule set> display new nat lookup rule
loopback [on|off] turn on/off nat loopback flag
reset <iface> reset nat table of an iface
server
disp display nat server table
load <set id> load nat server information from ROM
save save nat server information to ROM
clear <set id> clear nat server information
edit active <yes|no> set nat server edit active flag
edit svrport <start port> [end port] set nat server server port
edit intport <start port> [end port] set nat server forward port
edit remotehost <start ip> [end ip] set nat server remote host ip
edit leasetime [time] set nat server lease time
edit rulename [name] set nat server rule name

ZyXEL Confidential
340adq4c0 18/36
edit forwardip [ip] set nat server server ip
edit protocol [protocol id] set nat server protocol
service
irc [on|off] turn on/off irc flag
resetport reset all nat server table entries
incikeport [on|off] turn on/off increase ike port flag
IPSecRelatedCommand Home
Command Description
ipsec
debug <1|0> turn on|off trace for IPsec debug information
route lan <on|off> After a packet is IPSec processed and will be sent
to LAN side, this switch is to control if this
packet can be applied IPSec again.
Remark: Command available since 3.50(WA.3)
wan <on|off> After a packet is IPSec processed and will be sent
to WAN side, this switch is to control if this
packet can be applied IPSec again.
Remark: Command available since 3.50(WA.3)
show_runtime sa display runtime phase 1 and phase 2 SA
information
spd When a dynamic rule accepts a request and a
tunnel is established, a runtime SPD is created
according to peer local IP address. This
command is to show these runtime SPD.
switch <on|off> As long as there exists one active IPSec rule, all
packets will run into IPSec process to check SPD.
This switch is to control if a packet should do
this. If it is turned on, even there exists active
IPSec rules, packets will not run IPSec process.
timer chk_my_ip <1~3600> - Adjust timer to check if WAN IP in menu is
changed
- Interval is in seconds
- Default is 10 seconds
- 0 is not a valid value
chk_conn. <0~255> - Adjust auto-timer to check if any IPsec
connection has no traffic for certain period. If
yes, system will disconnect it.
- Interval is in minutes
- Default is 2 minuets
- 0 means never timeout
update_peer <0~255> - Adjust auto-timer to update IPSec rules which
use domain name as the secure gateway IP.
- Interval is in minutes
- Default is 30 minutes
- 0 means never update
Remark: Command available since 3.50(WA.3)
updatePeerIp Force system to update IPSec rules which use
domain name as the secure gateway IP right
away.
Remark: Command available since 3.50(WA.3)
dial <rule #> Initiate IPSec rule <#> from ZyWALL box
Remark: Command available since 3.50(WA.3)

ZyXEL Confidential
340adq4c0 19/36
display <rule #> Display IPSec rule #
config netbios active <on|off> Set netbios active flag
group <group index1, group index2…> Set netbios group
name <string> Set rule name
active <Yes | No> Set active or not
keeyAlive <Yes| No> Set keep alive or not
lcIdType <0:IP | 1:DNS | 2:Email> Set local ID type
lcIdContent <string> Set local ID content
myIpAddr <IP address> Set my IP address
peerIdType <0:IP | 1:DNS | 2:Email> Set peer ID type
peerIdContent <string> Set peer ID content
secureGwAddr <IP address | Domain name> Set secure gateway address or domain name
protocol <1:ICMP | 6:TCP | 17:UDP> Set protocol
lcAddrType <0:single | 1:range | 2:subnet> Set local address type
lcAddrStart <IP> Set local start address
lcAddrEndMas
k <IP> Set local end address or mask
lcPortStart <port> Set local start port
lcPortEnd <port> Set local end port
rmAddrType <0:single | 1:range | 2:subnet> Set remote address type
rmAddrStart <IP> Set remote start address
rmAddrEndMa
sk <IP> Set remote end address or mask
rmPortStart <port> Set remote start port
rmPortEnd <port> Set remote end port
antiReplay <Yes | No> Set anitreplay or not
keyManage <0:IKE | 1:Manual> Set key manage
ike negotiationMode <0:Main |
1:Aggressive> Set negotiation mode in phase 1 in IKE
preShareKey <string> Set pre shared key in phase 1 in IKE
p1EncryAlgo <0:DES | 1:3DES> Set encryption algorithm in phase 1 in IKE
p1AuthAlgo <0:MD5 | 1:SHA1> Set authentication algorithm in phase 1 in IKE
p1SaLifeTime <seconds> Set sa life time in phase 1 in IKE
p1KeyGroup <0:DH1 | 1:DH2> Set key group in phase 1 in IKE
activeProtocol <0:AH | 1:ESP> Set active protocol in phase 2 in IKE
p2EncryAlgo <0:Null | 1:DES |
2:3DES> Set encryption algorithm in phase 2 in IKE
p2AuthAlgo <0:MD5 | 1:SHA1> Set authentication algorithm in phase 2 in IKE
p2SaLifeTime <seconds> Set sa life time in phase 2 in IKE
encap <0:Tunnel | 1:Transport> set encapsulation in phase 2 in IKE
pfs <0:None | 1:DH1 | 2:DH2> set pfs in phase 2 in IKE
manual activeProtocol <0:AH | 1:ESP> Set active protocol in manual
manual ah encap <0:Tunnel | 1:Transport> Set encapsulation in ah in manual
spi <decimal> Set spi in ah in manual
authAlgo <0:MD5 | 1:SHA1> Set authentication algorithm in ah in manual
authKey <string> Set authentication key in ah in manual
manual esp encap <0:Tunnel | 1:Transport> Set encapsulation in esp in manual
spi <decimal> Set spi in esp in manual
encryAlgo <0:Null | 1:DES | 2:3DES> Set encryption algorithm in esp in manual
encryKey <string> Set encryption key in esp in manual
authAlgo <0:MD5 | 1:SHA1> Set authentication algorithm in esp in manual
authKey < string> Set authentication key in esp in manual

ZyXEL Confidential
340adq4c0 20/36
PPP Related Command Home
Command Description
ppp
autotrigger
on <remoteNodeIndex> turn on packet trigger, default is enable
off <remoteNodeIndex> turn off packet trigger
status show autotrigger status
retry <interval> adjust PPP retrial interval
BridgeRelatedCommand Home
Command Description
bridge
mode <1/0> (enable/disable) turn on/off (1/0) LAN promiscious mode
blt related to bridge local table
disp <channel> display blt data
reset <channel> reset blt data
traffic display local LAN traffic table
monitor [on|off] turn on/off traffice monotor. Default is off.
time <sec> set blt re-init interval
brt related to bridge route table
disp [id] display brt data
reset [id] reset brt data
cnt related to bridge routing statistic table
disp display bridge route counter
clear clear bridge route counter
stat related to bridge packet statistic table
disp display bridge route packet counter
clear clear bridge route packet counter
disp display bridge source table
Radius Related Command Home
Command Description
radius
auth show current radius authentication server
configuration
acco show current radius accounting server
configuration
8021xRelatedCommand Home
Command Description
8021x
debug level [debug level] set ieee802.1x debug message level
trace show all supplications in the supplication table
user [username] show the specified user status in the supplicant
table
Configuration Related Command Home
Command Description
config The parameters of config are listed below.
edit firewall active Activate or deactivate the saved firewall settings