ZyXEL Communications P-660HWP-D1 Instruction Manual

ZyXEL Confidential
340APD2C0.docdoc
ZyXEL
Firmware Release Note
P-660HWP-D1
standard version
Release 3.40(APD.2)C0
Date: Nov 28, 2007
Author: David Liu

ZyXEL Confidential
340APD2C0.docdoc
ZyXEL P-660HWP-D1 Standard Version
Release 3.40(APD.2)C0
Release Note
Date: Nov 28, 2007
Supported Platforms:
ZyXEL P-660HWP-D1
Versions:
ZyNOS Version : V3.40(APD.2) | 11/28/2007 13:12:02
Bootbase Version : V1.06 | 1/20/2006 9:44:11
Notes:
The P-660HWP-D1, is 4th generation of ZyXEL ADSL product family. It is a high
performance ADSL/ADSL2/ADSL2+ router for small/medium office to have Internet
access and LAN-to-LAN application over the existing copper line. P-660HWP-D1 takes
advantage of much higher data rate than ADSL, speed up to 12Mbps (ADSL2) or 26Mbps
(ADSL2+), greater reach, faster start-up, advanced diagnostics and better power
management. This high performance ADSL router is a high integrated advanced Firewall,
Bandwidth Management and IEEE 802.11g wireless features to meet the demand of
high-end market.
P-660HWP-D1 provides an embedded mini-PCI module for 802.11g Wireless LAN
connectivity, four single auto-sensing, auto-detection 10/100BASE-T Ethernet ports for
connection to the user’s local network, and a single RJ-11/RJ-45 port for connection to
ADSL/ADSL2/ADSL2+ line.
Support Multiboot V2.3
ADSL data pump version: TI AR7 07.00.04.00
HomePlug F/W version: INT6000-MAC-3-0-3052-1120-20070816-FINAL-B
Features:
Modifications in V3.40(APD.2)C0 | 11/28/2007
1. Change to FCS.
Modifications in V3.40(APD.2)b4 | 11/21/2007
1. [Bugfix]: SPRID:N/A
Symptom: Fix the issue setting above 2 routing PVCs pc in lan can’t access internet when
enable triple play.
Modifications in V3.40(APD.2)b3 | 11/19/2007
1. [Bugfix]: SPRID:071112785
Symptom: Triple-Play has a problem. Set 2 PVCs, one is Router mode, and the other is
Bridge mode. Enable Triple-Play, bind two LAN port to the 2 PVCs respectively. But the
other LAN ports which bind to bridge PVC can still ping the router gateway successfully

ZyXEL Confidential
340APD2C0.docdoc
( the PC using static IP 192.168.1.34 ).
Modifications in V3.40(APD.2)b2 | 11/05/2007
1. [Enhancement]: Change “Network Password” to “Network Name” in web GUI and CI
command.
2. [Enhancement]: Auto detect Intellon F/W version in our RAS code, and auto update
Intellon F/W if current version is older than the one in RAS code.
3. [Bugfix]: SPRID:071021056
Symptom: use CI Command “sys atwz” to modify MAC address then use CI Command
“powerline display” can not get the powerline information
4. [Bugfix]: SPRID :071022064
Symptom: set nmk in GUI have problem.
Condition:
(1) GUI-＞Network-＞Powerline , Enter a new nmk and apply it, GUI show “INTERNAL
ERROR”.
(2) SMT show “set nmk successful!”
(3) Enter GUI again ,nmk show empty.
5. [Bugfix]: SPRID: 071021055
Symptom: enable triple play and use bridge mode, bound powerline to a single PVC , pc
linked to PLA400 can get dynamic ip from dhcp server behind the bridge PVC.
6. [Bugfix]: SPRID: 071021058
Symptom: Use CI Command “powerline setnmk” to set the NMK, then use CI Command
“powerline display” to show the nmk and the result is “unknown.”.
7. [Bugfix]: SPRID: 071021059
Symptom: Use CI Command “powerline config nmk” to set the nmk, “powerline display”
show the nmk has been changed. Change PLA 400’s nmk to be same with the new nmk,
device can not connect to PLA 400.
8. [Bugfix]: SPRID: 071021057
Symptom: In default configuration default “LAN multicast” is None, but on LAN side can
receive IGMP packets.
9. [Bugfix]: SPRID: 071021061
Symptom: Help page show wrong information. The content in help page is not accordant
to the content in working page
10. [Bugfix]: SPRID: 071021060
Symptom: Default firewall-＞Bypass triangle route is disabled, so traffic redirect can not
open website
11. [Bugfix]: SPRID: 071102101
Symptom: use “sys atwz” to modify mac, but can’t modify the powerline module’s mac at
the same time.
12. [Bugfix]: SPRID: N/A
Symptom: Static route remote node mode doesn’t work.
Modifications in V3.40(APD.2)b1 | 10/10/2007
1. [Feature Enhance]: Merge Intellon F/W 3.0.5
2. [Feature Enhance]: Have Static routing configuration in WEB GUI, and can select
gateway IP address mode or gateway remote node mode.
3. [Feature Enhance]: Public/Private IP (allow to have private IP going through NAT while
global – without NAT. This is to be used with FF NAT).
4. [Feature Enhance]: Make PAT in NAT port forwarding, add “TCP/UDP” selection there
too.
5. [Feature Enhance]: Add a possibility to add connections without default gateway (except
1-st connection)

ZyXEL Confidential
340APD2C0.docdoc
6. [Feature Enhance]: Every PVC’s MTU size can be changed separately ( in CLI “wan node
mtu” and GUI ).
7. [Feature Enhance]: Show all connections status in Web GUI
8. [Feature Enhance]: Modify CI command to map Powerline into Triple Play Group by “ sys
tripleplay portbase groupset [groupid] [LAN |PVC] [index] [WLAN] [PWR] “.
9. [Feature Enhance]: Hardware version (in bootbase) has been changed from “00” to
“01”, and HW version range (in mmct) has been changed from “2 0 0” to “2 0 1”. So
old board (use old bootbase) can use new RAS code, but new board (use new bootbase)
can’t load old RAS code.
10. [Bug Fix]: Simultaneous upload/download bug. It reduces Download speed from 20Mbps
to 3-4 Mbps when you start simultaneous upload and download.
11. [Bug Fix]: DNS servers have to be taken from 1-st PVC.
12. [Bug Fix]: Can’t access internet by wireless when using Triple Play for IPTV.
13. [Bug Fix]: IGMP snooping is not saved in rom-file and disappears upon device reboot
14. [Bug Fix]: If a DHCP OFFER packet doesn’t assign default gateway, device will refuse to
work with it until it was fixed.
15. [Bug Fix]: Static route configuration: don’t check for gateway availability when configuring
a route since it makes impossible to pre-configure the device. Also, all routes must work
upon device reboot.
16. [Bug Fix]: Show last CLI command by “Up arrow” key instead of moving cursor up when
connecting by telnet
17. [Bug Fix]: DNS issue: when accessing http://zyxel.* leads to web GUI.
18. [Bug Fix]: Enable Triple Play: LAN PC can't send any file to WLAN PC
19. [Bug Fix]: Fix triple-play throughput issue. the throughput is low when tripleplay enable
and only one route mode pvc exist.
20. [Bug Fix]: Fix AnyIP issue: it should work only on those Eth ports that are mapped to
routing PVC.
21. [Bug Fix]: Fix PADI issue. when PPPoE session is initializing, device should not send
PADI packets to lan ports.
22. [Bug Fix]: Let wireless security to be configured by “wlan ieee8021x…” commands to
have the unified commands in all devices.
23. [Bug Fix]: Exception issue: when device work in full load (DSL, Homeplug, Ethernet
and wireless all enabled), device may go crash and reboot.
24. [Bug Fix]: DSL LED Blinking issue: when baud rate set as 115200, DSL LED will
blink even the phone cable is unplugged
Modifications in V3.40(APD.1)C0 | 7/30/2007
1. Change to FCS.
Modifications in V3.40(APD.1)b1 | 7/13/2007
1. [FEATURE ENHANCE]
Enhance the behavior of CI command “ sys atwz <MAC> <COUNTRYCODE>” to
support write homeplug module MAC address and power table automatically. Home Plug
MAC is router’s MAC plus 1, and according to the country code value, corresponding
power table will be uploaded to homePlug module.
Modifications in V 3.40(APD.0)C0 | 5/11/2007

ZyXEL Confidential
340APD2C0.docdoc
2. Change to FCS.
Modifications in V 3.40(APD.0)b3 | 4/24/2007
1. [BUG FIX] SPRID: 070403123
powerline items doesn't have help page
2. [BUG FIX] SPRID :070409360
Triple play does not work.
[Symptom]when Triple play enabled, LAN PC can not get IP from device and then
can not access Internet.
Modifications in V 3.40(APD.0)b2 | 3/27/2007
1. First release for QA test.
Modifications in V 3.40(APD.0)b2 | 3/27/2007
1. First release for QA test.
Modifications in V 3.40(APD.0)b1 | 1/29/2007
1 Create this project for P-660HWP-D1 standard version
Annex A CI Command List
Command Class List Table
System Related Command Exit Command Ethernet Related Command
WAN Related Command WLAN_Related_Command IP Related Command
PPP Related Command Bridge Related Command Radius Related Command
8021x Related Command Firewall Related Command Configuration Related Command
SMT Related Command
SystemRelatedCommand Home
Command Description
sys
adjtime retrive date and time from Internet
cbuf
display [a|f|u] display cbuf a: all f: free u: used
cnt cbuf static
display display cbuf static
clear clear cbuf static
baud <1..5> change console speed
callhist
display display call history
remove <index> remove entry from call history
clear clear the counters in GUI status menu
countrycode [countrycode] set country code
date [year month date] set/display date
domainname display domain name
edit <filename> edit a text file
enhanced return OK if commands are supported for PWC

ZyXEL Confidential
340APD2C0.docdoc
purposes
errctl [level] set the error control level
0:crash no save,not in debug mode (default)
1:crash no save,in debug mode
2:crash save,not in debug mode
3:crash save,in debug mode
event
display display tag flags information
trace display system event information
display display trace event
clear <num> clear trace event
extraphnum maintain extra phone numbers for outcalls
add <set 1-3> <1st phone num> [2nd phone
num] add extra phone numbers
display display extra phone numbers
node <num> set all extend phone number to remote node
<num>
remove <set 1-3> remove extra phone numbers
reset reset flag and mask
feature display feature bit
fid
display display function id list
firmware display ISDN firmware type
hostname [hostname] display system hostname
iface
disp [#] display iface list
isr [all|used|free] display interrupt service routine
interrupt display interrupt status
logs
category
access [0:none/1:log] record the access control logs
attack [0:none/1:log/2:alert/3:both] record and alert the firewall attack logs
display display the category setting
error [0:none/1:log/2:alert/3:both] record and alert the system error logs
ipsec [0:none/1:log] record the access control logs
mten [0:none/1:log] record the system maintenance logs
upnp [0:none/1:log] record upnp logs
urlblocked [0:none/1:log/2:alert/3:both] record and alert the web blocked logs
urlforward [0:none/1:log] record web forward logs
clear clear log
display display all logs
errlog
clear display log error
disp clear log error
online turn on/off error log online display
load load the log setting buffer
mail
alertAddr [mail address] send alerts to this mail address
display display mail setting
logAddr [mail address] send logs to this mail address
schedule display display mail schedule
schedule hour [0-23] hour time to send the logs
schedule minute [0-59] minute time to send the logs

ZyXEL Confidential
340APD2C0.docdoc
schedule policy
[0:full/1:hourly/2:daily/3:weekly/4:non
e]
mail schedule policy
schedule week
[0:sun/1:mon/2:tue/3:wed/4:thu/5:fri/6:
sat]
weekly time to send the logs
server [domainName/IP] mail server to send the logs
subject [mail subject] mail subject
save save the log setting buffer
syslog
active [0:no/1:yes] active to enable unix syslog
display display syslog setting
facility [Local ID(1-7)] log the messages to different files
server [domainName/IP] syslog server to send the logs
mbuf
cnt
disp display system mbuf count
clear clear system mbuf count
link link list system mbuf link
pool <id> [type] list system mbuf pool
status display system mbuf status
disp <address> display mbuf status
debug [on|off]
memory <address> <length> display memory content
memwrite <address> <len> [data list ...] write some data to memory at <address>
memwl <address> write long word to memory at <address>
memrl <address> read long word at <address>
memutil
usage display memory allocate and heap status
mqueue <address> <len> display memory queues
mcell mid [f|u] display memory cells by given ID
msecs [a|f|u] display memory sections
mtstart <n-mcell> start memory test
mtstop stop memory test
mtalloc <size> [n-mcell] allocate memory for testing
mtfree <start-idx> [end-idx] free the test memory
model display server model name
proc
display display all process information
stack [tag] display process's stack by a give TAG
pstatus display process's status by a give TAG
queue
display [a|f|u] [start#] [end#] display queue by given status and range numbers
ndisp [qid] display a queue by a given number
quit quit CI command mode
reboot [code] reboot system
code = 0 cold boot,
= 1 immediately boot
= 2 bootModule debug mode
reslog
disp display resources trace
clear clear resources trace
stdio [second] change terminal timeout value

ZyXEL Confidential
340APD2C0.docdoc
time [hour [min [sec]]] display/set system time
timer
disp display timer cell
trace [on|off] set/display timer information online
start [tmValue] start a timer
stop <ID> stop a timer
trcdisp monitor packets
trclog
switch [on|off] set system trace log
online [on|off] set on/off trace log online
level [level] set trace level of trace log #:1-10
type <bitmap> set trace type of trace log
disp display trace log
clear clear trace
call display call event
encapmask [mask] set/display tracelog encapsulation mask
trcpacket
create <entry> <size> create packet trace buffer
destroy packet trace related commands
channel <name>
[none|incoming|outgoing|bothway] <channel name>=enet0,sdsl00, fr0 set packet trace direction for a given channel
string enable smt trace log
switch [on|off] turn on/off the packet trace
disp display packet trace
udp send packet trace to other system
switch [on|off] set tracepacket upd switch
addr <addr> send trace packet to remote udp address
port <port> set tracepacket udp port
parse [[start_idx], end_idx] parse packet content
brief display packet content briefly
version display RAS code and driver version
view <filename> view a text file
wdog
switch [on|off] set on/off wdog
cnt [value] display watchdog counts value: 0-34463
romreset restore default romfile
server
access <telnet|ftp|web|icmp|snmp|dns>
<value> set server access type
load load server information
disp display server information
port <telnet|ftp|web|snmp> <port> set server port
save save server information
secureip <telnet|ftp|web|icmp|snmp|dns> <ip> set server secure ip addr
spt
dump dump spt raw data
root dump spt root data
rn dump spt remote node data
user dump spt user data
slot dump spt slot data
save save spt data
size display spt record size
clear clear spt data
cmgr

ZyXEL Confidential
340APD2C0.docdoc
trace
disp <ch-name> show the connection trace of this channel
clear <ch-name> clear the connection trace of this channel
cnt <ch-name> show channel connection related counter
socket display system socket information
filter
clear clear filter statistic counter
disp display filter statistic counters
sw [on|off] set filter status switch
set <set> display filter rule
netbios
disp display netbios filter status
config <0:LAN to WAN, 1:WAN to
LAN, 2:LAN to DMZ, 3:IPSec
passthrough, 4:Trigger Dial> <on|off>
config netbios filter
ddns
debug <level> enable/disable ddns service
display <iface name> display ddns information
restart <iface name> restart ddns
logout <iface name> logout ddns
cpu
display display CPU utilization
ExitCommand Home
Command Description
exit exit smt menu
Ethernet Related Command Home
Command Description
ether
config display LAN configuration information
driver
cnt
disp <name> display ether driver counters
clear <name> clear ether driver counters
iface <ch_name> <num> send driver iface
ioctl <ch_name> Useless in this stage.
mac <ch_name> <mac_addr> Set LAN Mac address
reg <ch_name> display LAN hardware related registers
rxmod <ch_name> <mode> set LAN receive mode.
mode: 1: turn off receiving
2: receive only packets of this interface
3: mode 2+ broadcast
5: mode 2 + multicast
6: all packets
status <ch_name> see LAN status
init <ch_name> initialize LAN
version see ethernet device type
pkttest
disp

ZyXEL Confidential
340APD2C0.docdoc
packet <level> set ether test packet display level
event <ch> [on|off] turn on/off ether test event display
sap [ch_name] send sap packet
arp <ch_name> <ip-addr> send arp packet to ip-addr
mem <addr> <data> [type] write memory data in address
test <ch_id> <test_id> [arg3] [arg4] do LAN test
pncconfig <ch_name> do pnc config
mac <src_ch> <dest_ch> <ipaddr> fake mac address
WANRelatedCommand Home
Command Description
wan adsl bert ADSL ber
chandata ADSL channel data, line rate
close Close ADSL line
coding ADSL standard current
ctrleint ADSL CTRLE response command
defbitmap ADSL defect bitmap status
dyinggasp Send ADSL dyinggasp
fwav Test the ADSL F/W available ping
fwdl Download modem code, but must reset first
linedata
near Show ADSL near end noise margin
far Show ADSL far end noise margin
open Open ADSL line
opencmd Open ADSL line with specific standard
opmode Show the operational mode
perfdata Show performance information,CRC,FEC, error
seconds..
rdata [start] [length] Read DSP CTRLE registers 512 bytes
reset Reset ADSL modem, and must reload the modem
code again
selftest
long ADSL long loop test
short ADSL short loop test
status ADSL status (ex: up, down or wait for init)
version ADSL version information
vendorid ADSL vendor information
utopia Show ADSL utopia information
cellcnt Show ADSL cell counter
display
shutdown Show the counter of rate adaptive mechanism
happening
rateup Show real status that rate adaptive mechanism
happened
rateadap [on|off] Turn on/off rate adaptive mechanism
dumpcondition [on|off] Turn on/off online debug information of rate
adaptive mechanism
sampletime [mins] Tune the sample time of rate adaptive mechanism
noisegt [dB] if noise margin is 3db greater than before, and
rate is worse than before, then system will do “L1
shutdown RA3”, default is 3db
noisemargin [dB] if noise margin is greater than this value, and rate
is worse than before, then system will do “L1

ZyXEL Confidential
340APD2C0.docdoc
shutdown RA3”, default is 8db
persisttime [time] when the adaptive condition is matched system
will continue to monitor the time period
“persisttime” before doing “L1 shutdown RA3”,
default is 30 seconds
timeinterval [mins] when “L1 shutdown RA3” is done twice, and still
can’t reach the max rate which system recorded,
it will delay a time period that the period base
time is”timeinterval” before starting again. The
time-based default is 2 hrs
defectcheck [on|off] Turn on/off detect table checking, default is on
txgain [value] Set the CTRLE register (0xc3), the value is from
0xfa to 0x06
targetnoise [value] Set the CTRLE register (0xc4), the value is from
0xfa to 0x06
maxtonelimit [value] Set the CTRLE register (0xc5), the value is from
0xfa to 0x06
rxgain [value] Set the CTRLE register (0xc6), the value is from
0xfa to 0x06
txoutputpwr [value] Set the CTRLE register (0xc7), the value is from
0xfa to 0x06
rxoutputpwr [value] Set the CTRLE register (0xc8), the value is from
0xfa to 0x06
maxoutputpwr [value] Set the CTRLE register (0xc9), the value is from
0xfa to 0x06
errorsecond
sendes Send current error second information
immediately
dygasprecover
dygasprecover level [value] By default is 100, after receiving 100 dying gasp
system will reboot
dygasprecover active [on|off| Turn on/off this mechanism
rsploss [1|0] Turn on means to response signal loss of CTRLE
immediately, default is off
atm test [fix|rand|period|oam|loopback] Generate ATM traffic
hwsar disp Display hwsar packets incoming/outgoing
information
clear Clear hwsar packets information
WLANRelatedCommand Home
Command Description
Wlan
active [on|off] [0|1] Turn on/off wireless lan
association Show association list
load Load WLAN configuration into buffer.
Display Display WLAN configuration data.
chid Configure channel ID
essid Configure ESSID
hiddenssid [on/off] Enable/Disable hidden SSID
threshold
rts <RTS threshold value> Set threshold rts value
Fragment <Fragment threshold value> Set threshold fragmentation value
wep

ZyXEL Confidential
340APD2C0.docdoc
type <none|64|128|256> Set WEP key to 64, 128 or 256 bits.
Key Set <set> <value> Set WEP key value per set
Key Default <set> Set WEP default key set
macfilter
Enable Enable macfilter
Disable Disable macfilter
Action <allow|deny> When action match, allow or deny this mac
Set <Set#> <MAC Address> Set mac address by set
Clear Clear all WLAN configuration data.
Save Save WLAN configuration working buffer to
Rom file.
Power [1:19dbm, 2:18dbm, 3:16dbm,
4:15dbm, 5:14dbm] Change TX power level.
reset Reset WLAN
filter
[incoming |
outgoing] <generic>[set#1][set#2][set#3][set#4] To set generic filter for wireless channel
fildisp Display wireless filter setting
1130cmd Internal usage.
restart_stat Show WLAN restart statistics
chg_dot11mod
e Set WLAN state to mix mode, B only or G only
show_rxDesc Show number of Rx host descriptors
acxstat Show acx run time statistics
IPRelatedCommand Home
Command Description
ip
address [addr] display host ip address
loopbackaddr <IP1> [IP2] Set loopback address.
alias <iface> alias iface
aliasdis <0|1> disable alias
arp
status <iface> display ip arp status
add <hostid> ether <ether addr> add arp information
resolve <hostid> resolve ip-addr
drop <hostid> [hardware] drop arp
flush flush arp table
publish add proxy arp
dhcp <iface>
client
release release DHCP client IP
renew renew DHCP client IP
mode <server|relay|none|client> set dhcp mode
relay server <serverIP> set dicp relay server ip-addr
reset reset dhcp table
server
probecount <num> set dhcp probe count
dnsserver <IP1> [IP2] [IP3] set dns server ip-addr
winsserver <winsIP1> [<winsIP2>] set wins server ip-addr
gateway <gatewayIP> set gateway
hostname <hostname> set hostname
initialize fills in DHCP parameters and initializes (for

ZyXEL Confidential
340APD2C0.docdoc
PWC purposes)
leasetime <period> set dhcp leasetime
netmask <netmask> set dhcp netmask
pool <startIP> <numIP> set dhcp ip pool
renewaltime <period> set dhcp renew time
rebindtime <period> set dhcp rebind time
reset reset dhcp table
server <serverIP> set dhcp server ip for relay
dnsorder [router|isp] set dhcp dns order
status [option] show dhcp status
static
delete <num>|all delete static dhcp mac table
display display static dhcp mac table
update <num> <mac> <ip> update static dhcp mac table
dns
query
address <ipaddr> [timeout] resolve ip-addr to name
debug <num> enable dns debug value
name <hostname> [timeout] resolve name to ip-addr
status display dns query status
table display dns query table
server <primary> [secondary] [third] set dns server
stats
clear clear dns statistics
disp display dns statistics
table display dns table
httpd
debug [on|off] set http debug flag
icmp
echo [on|off] set icmp echo response flag
data <option> select general data type
status display icmp statistic counter
trace [on|off] turn on/off trace for debugging
discovery <iface> [on|off] set icmp router discovery flag
ifconfig [iface] [ipaddr] [broadcast <addr>
|mtu <value>|dynamic] configure network interface
ifdrop <iface> chaek if iface is available.
ping <hostid> ping remote host
pong <hostid> [<size> <time-interval>] pong remote host
extping <target address>
[-t] Continue to send ECHO_REQ until Ctrl-C input
[-c] Validate the reply data
[-d] [Data] Data pattern. The maximum length of data is 255
characters.
[-f] Set DF flag.
[-l] [Data size] Datagram size in bytes (with 28 bytes Header).
[-v] [TOS value] Specify the value of TOS flag.
[-n] [Repeat value] The number of times to send ECHO_REQ
packet.
[-w] [Timeout value] Specify the value of Timeout in seconds.
[-o] [IP address/IFace] To specify one IP address or interface to be the
Source IP address.
[-p] [Min MTU] [Max MTU]
[Interval size] Sweep range of sizes.

ZyXEL Confidential
340APD2C0.docdoc
route
status [if] display routing table
add <dest_addr|default>[/<bits>]
<gateway> [<metric>] add route
addiface <dest_addr|default>[/<bits>]
<gateway> [<metric>] add an entry to the routing table to iface
addprivate <dest_addr|default>[/<bits>]
<gateway> [<metric>] add private route
drop <host addr> [/<bits>] drop a route
flush flush route table
lookup <addr> find a route to the destination
errcnt
disp display routing statistic counters
clear clear routing statistic counters
status display ip statistic counters
adjTcp <iface> [<mss>] adjust the TCP mss of iface
udp
status display udp status
rip
accept <gateway> drop an entry from the RIP refuse list
activate enable rip
merge [on|off] set RIP merge flag
refuse <gateway> add an entry to the rip refuse list
request <addr> [port] send rip request to some address and port
reverse [on|off] RIP Poisoned Reverse
status display rip statistic counters
trace enable debug rip trace
mode
<iface> in [mode] set rip in mode
<iface> out [mode] set rip out mode
dialin_user [show|in|out|both|none] show dialin user rip direction
tcp
ceiling [value] TCP maximum round trip time
floor [value] TCP minimum rtt
irtt [value] TCP default init rtt
kick <tcb> kick tcb
limit [value] set tcp output window limit
max-incomplete [number] Set the maximum number of TCP incomplete
connection.
mss [value] TCP input MSS
reset <tcb> reset tcb
rtt <tcb> <value> set round trip time for tcb
status [tcb] [<interval>] display TCP statistic counters
syndata [on|off] TCP syndata piggyback
trace [on|off] turn on/off trace for debugging
window [tcb] TCP input window size
samenet <iface1> [<iface2>] display the ifaces that in the same net
uninet <iface> set the iface to uninet
tftp
support pritn if tfpt is support
stats display tftp status
xparent
join <iface1> [<iface2>] join iface2 to iface1 group
break <iface> break iface to leave ipxparent group

ZyXEL Confidential
340APD2C0.docdoc
antiprobe <0|1> 1:yes 0:no set ip anti-probe flag
anyip
status display that if any ip work now
enable [yes|no] enbale|disable anyop feature
display display all any ip entry
restrict [yes|no] restrict the connection between any ip client
flush delete all any ip entry
save Save any ip enable status to rom
igmp
debug [level] set igmp debug level
forwardall [on|off] turn on/off igmp forward to all interfaces flag
querier [on|off] turn on/off igmp stop query flag
iface
<iface> grouptm <timeout> set igmp group timeout
<iface> interval <interval> set igmp query interval
<iface> join <group> join a group on iface
<iface> leave <group> leave a group on iface
<iface> query send query on iface
<iface> rsptime [time] set igmp response time
<iface> start turn on of igmp on iface
<iface> stop turn off of igmp on iface
<iface> ttl <threshold> set ttl threshold
<iface> v1compat [on|off] turn on/off v1compat on iface
robustness <num> set igmp robustness variable
status dump igmp status
pr
clear clear ip pr table counter information
disp dump ip pr table counter information
switch turn on/off ip pr table counter flag
nat
timeout
gre [timeout] set nat gre timeout value
iamt [timeout] set nat iamt timeout value
generic [timeout] set nat generic timeout value
reset [timeout] set nat reset timeout value
tcp [timeout] set nat tcp timeout value
tcpother [timeout] set nat tcp other timeout value
update create nat system information from spSysParam
iamt display nat iamt information
iface <iface> show nat status of an interface
lookup <rule set> display nat lookup rule
new-lookup <rule set> display new nat lookup rule
loopback [on|off] turn on/off nat loopback flag
reset <iface> reset nat table of an iface
server
disp display nat server table
load <set id> load nat server information from ROM
save save nat server information to ROM
clear <set id> clear nat server information
edit active <yes|no> set nat server edit active flag
edit svrport <start port> [end port] set nat server server port
edit intport <start port> [end port] set nat server forward port
edit remotehost <start ip> [end ip] set nat server remote host ip
edit leasetime [time] set nat server lease time

ZyXEL Confidential
340APD2C0.docdoc
edit rulename [name] set nat server rule name
edit forwardip [ip] set nat server server ip
edit protocol [protocol id] set nat server protocol
service
irc [on|off] turn on/off irc flag
sip active <1/0> (enable/disable) Enable/disable SIP ALG
resetport reset all nat server table entries
incikeport [on|off] turn on/off increase ike port flag
PPP Related Command Home
Command Description
ppp
autotrigger
on <remoteNodeIndex> turn on packet trigger, default is enable
off <remoteNodeIndex> turn off packet trigger
status show autotrigger status
retry <interval> adjust PPP retrial interval
BridgeRelatedCommand Home
Command Description
bridge
mode <1/0> (enable/disable) turn on/off (1/0) LAN promiscious mode
blt related to bridge local table
disp <channel> display blt data
reset <channel> reset blt data
traffic display local LAN traffic table
monitor [on|off] turn on/off traffice monotor. Default is off.
time <sec> set blt re-init interval
brt related to bridge route table
disp [id] display brt data
reset [id] reset brt data
cnt related to bridge routing statistic table
disp display bridge route counter
clear clear bridge route counter
stat related to bridge packet statistic table
disp display bridge route packet counter
clear clear bridge route packet counter
disp display bridge source table
Radius Related Command Home
Command Description
radius
auth show current radius authentication server
configuration
acco show current radius accounting server
configuration
8021xRelatedCommand Home
Command Description
8021x
debug level [debug level] set ieee802.1x debug message level

ZyXEL Confidential
340APD2C0.docdoc
trace show all supplications in the supplication table
user [username] show the specified user status in the supplicant
table
Configuration Related Command Home
Command Description
config The parameters of config are listed below.
edit firewall active
<yes|no> Activate or deactivate the saved firewall settings
retrieve firewall Retrieve current saved firewall settings
save firewall Save the current firewall settings
display firewall Displays all the firewall settings
set <set#> Display current entries of a set configuration;
including timeout values, name, default-permit,
and number of rules in the set.
set <set#> rule <rule#> Display current entries of a rule in a set.
attack Display all the attack alert settings in PNC
e-mail Display all the e-mail settings in PNC
? Display all the available sub commands
e-mail mail-server
<mail server IP> Edit the mail server IP to send the alert
return-addr
<e-mail address> Edit the mail address for returning an email alert
e-mail-to <e-mail
address> Edit the mail address to send the alert
policy <full |
hourly |daily |
weekly>
Edit email schedule when log is full or per hour,
day, week.
day <sunday |
monday | tuesday
| wednesday |
thursday | friday |
saturday>
Edit the day to send the log when the email policy
is set to Weekly
hour <0~23> Edit the hour to send the log when the email
policy is set to daily or weekly
minute <0~59> Edit the minute to send to log when the email
policy is set to daily or weekly
Subject <mail
subject> Edit the email subject
attack send-alert
<yes|no> Activate or deactivate the firewall DoS attacks notification emails
block <yes|no> Yes: Block the traffic when exceeds the
tcp-max-incomplete threshold
No: Delete the oldest half-open session when
exceeds the tcp-max-incomplete threshold
block-minute
<0~255> Only valid when sets 'Block' to yes. The unit is minute
minute-high
<0~255> The threshold to start to delete the old half-opened sessions to minute-low
minute-low
<0~255> The threshold to stop deleting the old half-opened session
max-incomplete-
high <0~255> The threshold to start to delete the old half-opened sessions to max-incomplete-low

ZyXEL Confidential
340APD2C0.docdoc
max-incomplete-
low <0~255> The threshold to stop deleting the half-opened session
tcp-max-incompl
ete <0~255> The threshold to start executing the block field
set <set#> name <desired
name> Edit the name for a set
default-permit
<forward|block> Edit whether a packet is dropped or allowed when it does not match the default set
icmp-timeout
<seconds> Edit the timeout for an idle ICMP session before it is terminated
udp-idle-timeout
<seconds> Edit the timeout for an idle UDP session before it is terminated
connection-timeo
ut <seconds> Edit the wait time for the SYN TCP sessions before it is terminated
fin-wait-timeout
<seconds> Edit the wait time for FIN in concluding a TCP session before it is terminated
tcp-idle-timeout
<seconds> Edit the timeout for an idle TCP session before it is terminated
pnc <yes|no> PNC is allowed when 'yes' is set even there is a
rule to block PNC
log <yes|no> Switch on/off sending the log for matching the
default permit
rule <rule#> permit
<forward|block> Edit whether a packet is dropped or allowed when it matches this rule
active <yes|no> Edit whether a rule is enabled or not
protocol <0~255> Edit the protocol number for a rule. 1=ICMP,
6=TCP, 17=UDP...
log
<none|match|not-matc
h|both>
Sending a log for a rule when the packet
none|matches|not match|both the rule
alert <yes|no> Activate or deactivate the notification when a DoS
attack occurs or there is a violation of any alert
settings. In case of such instances, the function
will send an email to the SMTP destination
address and log an alert.
srcaddr-single <ip
address> Select and edit a source address of a packet which complies to this rule
srcaddr-subnet <ip
address> <subnet
mask>
Select and edit a source address and subnet mask
if a packet which complies to this rule.
srcaddr-range <start ip
address> <end ip
address>
Select and edit a source address range of a packet
which complies to this rule.
destaddr-single <ip
address> Select and edit a destination address of a packet which complies to this rule
destaddr-subnet <ip
address> <subnet
mask>
Select and edit a destination address and subnet
mask if a packet which complies to this rule.
destaddr-range <start
ip address> <end ip
address>
Select and edit a destination address range of a
packet which complies to this rule.
tcp destport-single
<port#> Select and edit the destination port of a packet which comply to this rule. For non-consecutive
port numbers, the user may repeat this command
line to enter the multiple port numbers.

ZyXEL Confidential
340APD2C0.docdoc
tcp destport-range
<start port#> <end
port#>
Select and edit a destination port range of a packet
which comply to this rule.
udp destport-single
<port#> Select and edit the destination port of a packet which comply to this rule. For non-consecutive
port numbers, users may repeat this command line
to enter the multiple port numbers.
udp destport-range
<start port#> <end
port#>
Select and edit a destination port range of a packet
which comply to this rule.
desport-custom
<desired custom port
name>
Type in the desired custom port name
delete firewall e-mail Remove all email alert settings
attack Reset all alert settings to defaults
set <set#> Remove a specified set from the firewall
configuration
set <set#> rule <rule#> Remove a specified rule in a set from the firewall
configuration
insert firewall e-mail Insert email alert settings
attack Insert attack alert settings
set <set#> Insert a specified rule set to the firewall
configuration
set <set#> rule <rule#> Insert a specified rule in a set to the firewall
configuration
cli Display the choices of command list.
Firewall Related Command Home
Command Description
sys
firewall
acl
disp Display specific ACL set # rule #, or all ACLs.
active <yes|no> Active firewall or deactivate firewall
cnt
disp Display firewall log type and count.
clear Clear firewall log count.
pktdump Dump the 64 bytes of dropped packet by firewall
update Update firewall
dynamicrule
tcprst
rst Set TCP reset sending on/off.
rst113 Set TCP reset sending for port 113 on/off.
display Display TCP reset sending setting.
icmp
dos
smtp Set SMTP DoS defender on/off
display Display SMTP DoS defender setting.
ignore Set if firewall ignore DoS in lan/wan/dmz/wlan
ignore
triangle Set if firewall ignore triangle route in
lan/wan/dmz/wlan

ZyXEL Confidential
340APD2C0.docdoc
SMTRelatedcommand Home
No Command Description Comment
sys bridge [on|off] Set system bridge on/off Menu 1
sys routeip [on|off] Set system IP routing on/off Menu 1
sys hostname [hostname] Set system name Menu 1
sys display Display hostname, routing/bridge mode information in menu
1 Display Menu 1
sys default Load All Default Settings Except LAN and DHCP.
sys save
Save all the parameters which will include menu1, menu 3.2
LAN, menu 4 or menu 11 WAN, menu 12 static route, menu
15 NAT server set, menu 21 filter sets, menu 22 SNMP,
menu 24.11 remote management and 3.5 Wireless LAN
wan backup mechanism [dsl | icmp] Set wan backup mechanism to DSL link or ICMP Menu 2
wan backup addr [index] [IP addr] Set wan ip address <index> Menu 2
wan backup tolerance [number] Set keepalive fail tolerance Menu 2
wan backup recovery [interval(sec)] Set recovery interval Menu 2
wan backup timeout [number] Set ICMP timeout Menu 2
wan backup save Save wan backup related parameters Menu 2
wan backup display Display wan backup configurations Menu 2
wan tredir active [on|off] Set traffic redirect on/off Menu 2.1
wan tredir ip [IP addr] Set traffic redirect gateway IP address Menu 2.1
wan tredir metric [number] Set traffic redirect metric Menu 2.1
wan tredir save Save traffic redirect related parameters
** Have to apply “wan backup save” command thereafter Menu 2.1
wan tredir display Display traffic redirect configurations Menu 2.1
lan index [1|2|3]
1: Select main LAN Interface
2: Select IP Alias 1
3: Select IP Alias 2
Select a LAN interface to edit
Menu 3.2
lan active [on|off] Turn on or off on IP Alias Interface Menu 3.2.1
lan ipaddr [address] [subnet mask] Set LAN IP address and subnet mask
Example:
> lan ipaddr 192.168.1.1 255.255.255.0
Menu 3.2
lan rip [none|in|out|both] [rip1|rip2b|rip2m] Set LAN IP RIP mode and RIP version, if you choose none in
the first parameter, the second parameter is also necessary Menu 3.2
lan multicast [none|igmpv1|igmpv2] Set LAN IP multicast mode Menu 3.2
lan filter [incoming|outgoing] [tcpip|generic]
[set#1] [set#2] [set#3] [set#4]
Set LAN filter to be incoming/outgoing or protocol /device
and the filter set could be 1-12, 0 means empty
Example:
Lan filter incoming tcpip 1 0 0 0
Menu 3.1
lan dhcp mode [server|relay|none] Set DHCP mode to be”server”, “relay”, “none” Menu 3.2
lan dhcp server dnsserver [pri dns] [sec dns] Set primary and secondary LAN DNS server Menu 3.2
lan dhcp server pool [start-address] [num] Set DHCP start address and pool size Menu 3.2
lan dhcp server gateway [IP address] Set DHCP gateway Menu 3.2
lan dhcp server netmask [subnet mask] Set DHCP subnet mask Menu 3.2
lan dhcp server leasetime [second] Set DHCP lease time Menu 3.2
lan dhcp server renewaltime [second] Set DHCP renew time Menu 3.2
lan dhcp server rebindtime [second] Set DHCP rebind time Menu 3.2
lan dhcp relay server [IP address] Set IP address of DHCP relay server Menu 3.2
lan display Display LAN or IP alias parameters Display Menu 3