ZyXEL Communications NBG318S Series Instruction Manual

ZyXEL Confidential
ZyXEL
Firmware Release Note
NBG318S
Release 3.60(AMR.2)C0
Date: 11/08/2007
Author: Jones Xu
360AMR2C0(RELEASE).doc 1/23

ZyXEL Confidential
ZyXEL NBG318S Standard Version
release 3.60(AMR.2)C0
Release Note
Date: 11/08/2007
Supported Platforms:
ZyXEL NBG318S
Versions:
ZyNOS Version: V3.60(AMR.2) | 11/08/2007
Bootbase Version: V1.01 | 05/08/2007 12:40:00
Notes:
1. MSN Video ALG only support with MSN 7.0 above and the default port (1863)
should not be changed.
2. Bit Torrent ALG support following tools: BitComet 0.58, BitSpirit v3.1.0, BitLord
1.1, G3 Torrent v0.9999, Aeureus 2.3.0.4, BitTornado T-0.3.12
3. To conform to the local policy, some countries are not allowed to use 802.11g Turbo
mode. These countries are: Argentina, Brazil, Ecuador, Japan, South Korea, and
Malaysia. The function will be disabled automatically despite the device settings.
4. We support up to 27 concurrent WLAN STAs at the same time if WPA-PSK was
used.
5. Homeplug device can not be used as a hub to many Ethernet clients (such as PC or
Laptops) when you are setting up QoS scenario. You should connect one client to
one Homeplug device in this case.
Known Issues:
1. NetBIOS traffic between WAN & LAN would be blocked if firewall was enabled.
2. Delete the trigger port rule won’t take effect immediately, they work until aged out.
3. VoIP(SIP) can not work if you turns on the Bandwidth Management feature.
4. Your device will encounter errors if you upload the game list file with wrong
formats. For example, too long text in a single line of the game list file.
5. You may need to restart your device to let Bandwidth Management traffic control on
the direction “To WAN” take effect.
6. You may get a lower performance if you have turned on the Bandwidth
Management feature with any active rules.
360AMR2C0(RELEASE).doc 2/23

ZyXEL Confidential
7. HomePlug LED lights up even if it’s not within any management network.
8. The Homeplug Rx statistics may not be updated at the first moment when you just
power it on.
9. The priority mapping can’t be disabled even you set “None” to Homeplug QoS
Priority Mapping.
Features:
Modification in 3.60(AMR.2) | 11/08/2007
1. Change 3.60(AMR.2)b5 to 3.60(AMR.2) FCS version.
Modification in 3.60(AMR.2)b5 | 10/31/2007
1. [BUG FIXED]
SPR: 071029620
Symptom: DUT exception when unplug ethernet cable.
Condition:
Step1. Set PPPoE encapsulation mode with nailed-up connection
Step2. Do ping out to check PPPoE work
Step3. Unplug ethernet cable, DUT exception
2. [BUG FIXED]
SPR: 071029589
Symptom: When WPS function disable, the wireless beacon still has the WPS info.
Condition: When WPS function disable, the wireless beacon still has the WPS info,
please remove it!
3. [BUG FIXED]
SPR: 071029618
Symptom: If user enable wireless Super mode, GUI doesn’t block the RTS/CTS
/Fragmentation threshold items.
Condition: If user enable wireless Super mode, GUI doesn’t block the RTS/CTS
/Fragmentation threshold items.
4. [BUG FIXED]
SPR: 071030689
Symptom: From the Web , when we disable the Wireless Lan, function can't work.
Condition:
1. load default setting
2. open the WEB, /Network/Wireless Lan ,disable the Wireless Lan,
3. it still broadcast the beacon
5. [BUG FIXED]
SPR: 071030707
Symptom: All priority are changed to "Highest" while user select HomePlug QoS
"None".
Condition:
1. Select HomePlug QoS "None", and save it.
2. All Priority are changed to "Highest".
360AMR2C0(RELEASE).doc 3/23

ZyXEL Confidential
3. Select HomePlug QoS "VLAN" (or TOS), and save it.
4. All Priority still are "Highest".
Modification in 3.60(AMR.2)b4 | 10/22/2007
n/a.
Modification in 3.60(AMR.2)b3 | 10/22/2007
1. [BUG FIXED]
SPR: 071023145
Symptom: Fimeware can't be uploaded via console port
Condition:
1. Fimeware can't be uploaded via console port
Modification in 3.60(AMR.2)b2 | 10/19/2007
6. [BUG FIXED]
SPR: 071001034
Symptom: WLAN default should be enabled.
Condition:
1. upload ras & rom-0
2. check WLAN default setting
3. WLAN should be enabled by default
7. [BUG FIXED]
SPR: 071002054
Symptom: HomePlug QoS tab should be removed from "Basic" mode
Condition:
1. HomePlug QoS tab should be removed from "Basic" mode
8. [BUG FIXED]
SPR: 071002058
Symptom: Change "TX" to "Tx" in HomePlug link info page
Condition:
1. In HomePlug link info page, please change "TX" to "Tx"
9. [BUG FIXED]
SPR: 071002059
Symptom: HomePlug's "QoS" tab is gone in other language
Condition:
1. HomePlug's "QoS" tab is gone in other language
10. [BUG FIXED]
SPR: 071005368
Symptom: LAN DNS default server type shoule be First DNS Relay, Second None,
Third None.
Condition:
1. Firmware version 3.60(AMR.1)b1, [FEATURE CHANGED] The default settings
in GUI DHCP Server/Advanced/DNS settings is "DNS Relay"
2. But 3.60(AMR.2)b1, DHCP Server/Advanced/DNS settings is "From ISP"
11. [BUG FIXED]
360AMR2C0(RELEASE).doc 4/23

ZyXEL Confidential
SPR: 071005374
Symptom: DUT can't save IP port number =10000 in the HomePlug QoS page
Condition:
1. In HomePlug QoS page, DUT can't save the range(10000<= IP port number <=
65535)
12. [BUG FIXED]
SPR: 071008438
Symptom: DUT disconnect from FTP Server when run FTP stress test with PPTP
encapsulation
Condition:
1. Setup PPTP configuration with dynamic IP address.
2. Run FTP data transfer over night.
3. DUT disconnect with FTP Server
13. [BUG FIXED]
SPR: 071008470
Symptom: Wireless Super G throughput is under Criterion
Condition:
1. In wireless Super G throughput, Rx(Client to AP) throughput is under
criterion(<20 Mbps)
2. Please reference the PQA test report
Modification in 3.60(AMR.2)b1 | 09/21/2007
14. [FEATURE ENHANCED]
Support WPS.
15. [FEATURE ENHANCED]
Support Homeplug QoS.
16. [BUG FIXED]
SPR: 070330946
Symptom: IGMP + wireless do not work well
Condition:
1. In Ethernet WAN mode, Enable IGMP in WAN/LAN
2. Confiog Wreless security= No security
3. IGMP server in WAN side
4. One wireless client associate to DUT and subscribe IGMP(Cisco IPTV)
program(this program is about 1.8M bps)
5. The wireless client just get the sound, not video
Modification in 3.60(AMR.1) | 09/06/2007
Change 3.60(AMR.1)b4 to 3.60(AMR.1) FCS version.
Modification in 3.60(AMR.1)b4 | 08/21/2007
360AMR2C0(RELEASE).doc 5/23

ZyXEL Confidential
1. [BUG FIXED]
SPR: 070711538
Symptom: Send a "query" packet to WAN port, no "report" packet from WAN port
Condition:
1. Send a "query" packet to WAN port
2. Not get "report" packet from WAN port.
2. [BUG FIXED]
SPR: 070810860
Symptom: DUT crash continually when doing syslog with enable logs og Firewall LAN to
WAN.
Condition:
1. enable Logs of Firewall LAN to WAN
2. seutp Log, enable all "Log categories" & "Syslog Logging"> Server IP address
192.168.1.33, and then Apply
3. DUT crash continually
3. [BUG FIXED]
SPR: 070814121
Symptom: Exception happen while change WAN mode from HomePlug WAN mode to
Router mode(Always reproducible)
Condition:
1. Load to default setting
2. Enable MBM function
3. Enable the syslog function, and fill the syslog IP address
4. Change the WAN mode from Router mode to HomePlug WAN mode
5. Change the HomePlug WAN mode to Router mode
6. Exception happen
4. [BUG FIXED]
SPR: 070809663
Symptom: Via Auto-Bridge function, DUT fail to change mode from AP mode to HomePlug
WAN.
Condition:
1. Load to default setting.
2. Change to HomePlug WAN mode
3. Change mode from HomePlug WAN to AP mode via Auto-Bridge function
4. User want to change back to HomePlug WAN mode from AP mode via Auto-Bridge
function, but it fail(DUT will change back to Router mode)
5. [BUG FIXED]
SPR: 070808573
Symptom: DUT DHCP server can not work well after DUT change mode from AP mode to
Router via "Auto-Bridge" function.
Condition:
1. Load to default setting
2. Change LAN IP= 192.168.100.1, DHCP server= 192.168.100.33 and pool=32
3. Change to AP mode from Router mode via Auto-Bridge function.
4. Change back to Router mode via Auto-Bridge function again.
5. Wired LAN host renew IP address from DHCP server
6. But the host get 192.168.1.33/gateway=192.168.1.1(Check the DUT
MAC=00:00:00:00:00:00)
7. Check DUT's IP address via CLI command "ip if", DUT's IP address=192.168.100.1
6. [BUG FIXED]
360AMR2C0(RELEASE).doc 6/23

ZyXEL Confidential
SPR: 070810775
Symptom: PPTP default PPTP Configuration = "Use Fixed IP Address".
Condition:
1. Load to default setting
2. Change WAN setting from "Ethernet" to "PPTP"
3. Check the default PPTP configuration = "Use Fixed IP Address".
4. Please change the default PPTP configuration = "Get automatically from ISP".
Modification in 3.60(AMR.1)b3 | 08/02/2007
1. [BUG FIXED]
HomePlug WAN support auto-bridge.
2. [BUG FIXED]
In HomePlug WAN mode, local PC sometimes gets WAN domain ip during initial time.
Modification in 3.60(AMR.1)b2 | 08/01/2007
1. [BUG FIXED]
Support AP mode for auto-bridge.
2. [BUG FIXED]
SPR: 070711538
Symptom: Send a "query" packet to WAN port, no "report" packet from WAN port
Condition:
1. Send a "query" packet to WAN port
2. Not get "report" packet from WAN port.
3. [BUG FIXED]
SPR: 070712653
Symptom: Use Buffalo as the enrollee to run WPS, DUT exception
Condition:
1. Use Vista as external registrar (Wired LAN)
2. Use Buffalo as the enrollee to join this network
3. In WPS process, DUT exception
2. If the user uses Atheros (use jumpstart) as external registrar (WLAN), then the result is
the same
4. [BUG FIXED]
SPR: 070709362
Symptom: Please modify the wording "UPNP" to "UPnP" in the WPS page
Condition:
1. In WPS page, the String "Note: If you enable WPS, the UPNP service will be turned on
automatically."
2. Please modify the wording "UPNP" to "UPnP"
5. [BUG FIXED]
360AMR2C0(RELEASE).doc 7/23

ZyXEL Confidential
SPR: 070709366
Symptom: The re-authentication timer is changed to "1800" after user run WPS process
Condition:
1. The re-authentication timer default value is "0"
2. Vista writes the wireless security via WPS
3. The re-authentication timer is changed to "1800"
6. [BUG FIXED]
SPR: 070711539
Symptom: If the IGMP group entry is over 29 group, IGMP packet will be flooding in the
other port
Condition:
1. Make 30 streams from IGMP server to DUT WAN port
2. Make 30 groups join packet from DUT's LAN port 1
3. The other LAN ports will receive the IGMP blooding packet(These blooding packet will be
dropped)
7. [BUG FIXED]
Symptom: If Daylight saving is already enable, time server doesn’t work.
Condition:
1. Manually set time, and enable daylight saving. Apply setting.
2. check time server, apply setting. Time server doesn’t work.
8. [BUG FIXED]
Symptom: AP mode change router mode by auto-bridge cause exception
Condition:
1. WAN get auto-bridge ip in Router mode, and change mode to AP mode.
2. reset device, and pull out WAN cable
3. Change WAN to non auto-bridge domain. After WAN get ip and change AP mode to
router mode, device exception.
Modification in 3.60(AMR.1)b1 | 07/23/2007
1. [FEATURE ENHANCED]
Support Windows Vista.
2. [FEATURE ENHANCED]
Support EMule in Bandwidth Management.
3. [FEATURE ENHANCED]
Support WCN (Windows Connect Now)
4. [FEATURE ENHANCED]
Support multiple Firewall rules. Each rule has its own schedule and can apply to specific
IP addresses.
5. [FEATURE CHANGED]
The default settings in GUI DHCP Server/Advanced/DNS settings is “DNS Relay”
6. [FEATURE ENHANCED]
360AMR2C0(RELEASE).doc 8/23

ZyXEL Confidential
Improvements on GUI multilingual selection.
7. [FEATURE ENHANCED]
HomePlug support for Intellon v2.0 functionality
1. FW/BIP upgrade
2. Push-button security and sync issue
8. [BUG FIXED]
SPR: 070502082
Symptom: ALG_H.323 can’t work with NetMeeting.
Condition:
1. LAN host open NetMeeting to call WAN host NetMeeing
2. LAN host can’t hear the voice from WAN host.
9. [BUG FIXED]
SPR: 070326639
Symptom: DUT can’t get IP address after change ISP.
Condition:
1. DUT connect to ISP-1, and get IP address as 192.168.14.100
2. LAN host ping 168.95.1.1 –t
3. change DUT connection to ISP-2
4. DUT can’t get IP address from ISP-2
10. [BUG FIXED]
SPR: 070702047
Symptom: device can not drop connections then redial to PPTP server
Condition:
1. Step1. reset to factory default
2. Step2. set Encapsulation mode be ”PPPoE” , work for a while
3. Step3. set Encapsulation mode be ”PPTP” , device can not drop connections then redial
to PPTP server
Modification in 3.60(AMR.0) | 05/31/2007
Change 3.60(AMR.0)b6 to 3.60(AMR.0) FCS version.
Modification in 3.60(AMR.0)b6 | 05/28/2007
1. [BUGFIX]
SPRID: 070524314
Symptom: Symptom: In GUI, users set the RADIUS accounting port as 1813 and save it, go
to status page and back, the RADIUS accounting port as "0".
Modification in 3.60(AMR.0)b5 | 05/21/2007
1. [GUI CHANGE]
To refine the GUI Homeplug strings.
360AMR2C0(RELEASE).doc 9/23

ZyXEL Confidential
Modification in 3.60(AMR.0)b4 | 05/04/2007
2. [BUGFIX]
SPRID: 070426287
Symptom: Edit the MAC Address in Out of network DUT or Active DUT. DUT add new MAC
Address in My HomePlug Network list. It should only change the MAC Address.
3. [BUGFIX]
SPRID: 070426291
Symptom: Please change the "Copyright 2006 by ZyXEL Communications Corp. " to
"Copyright 2007 by ZyXEL Communications Corp. " in about page.
4. [BUGFIX]
SPRID: 070426293
Symptom: Please add a space in the Wizard finish page.
Condition:
1. In Wizard finish page, there is a description "Check our exciting range of ZyXEL products
atwww.zyxel.com "
2. Please add a space between "at" and "www.zyxel.com"
5. [BUGFIX]
SPRID: 070417744
Symptom: In Chinese language, please help to change "移至基本設定" to "進入基本設定"
while user login the system.
Condition:
1. While user login system, system ask user to select one hyper-link to enter system.
2. In Chinese language, please change "移至基本設定" to "進入基本設定"
6. [BUGFIX]
SPRID: 070417742
Symptom: In Chinese language, it show "HomePlug AV (影音)" in the interface status of the
status page
Condition:
Please change the "HomePlug AV (影音)" to "HomePlug AV"
7. [BUGFIX]
SPRID: 070417743
Symptom: In Chinese language, it show "成員行動"(Member Action) in the HomePlug table.
Condition:
1. In Chinese language, it show "成員行動"(Member Action) in the HomePlug table.
2. It is very strange, please help to modify it.(Maybe "編輯成員" or else)
Modification in 3.60(AMR.0)b3 | 4/16/2007
1. [BUGFIX]
SPRID: 070411506
Symptom: In the HomePlug WAN mode, the Interface Status display wrong information
360AMR2C0(RELEASE).doc 10/23

ZyXEL Confidential
Modification in 3.60(AMR.0)b2 | 4/4/2007
1. [Bug Fixed]
SPRID: 070326640
Symptom: PPPoE function can not work on PQA environment/server
Condition:
Step1. PPPoE function can not work on PQA environment/server
2. [Bug Fixed]
SPRID: 070327702
Symptom: device exception
Condition:
Step1. set NAT max session = 2048
Step2. LAN pc ping 168.95.1.1 -t
Step3. execute ipscan utility to scan 192.168.10.1 ~ 192.168.20.254
Step4. to check "ip nat natTable enif1" under console , device will exception
3. [Bug Fixed]
SPRID: 070328768
Symptom: Bandwidth management in HomePlug WAN can not be enabled
Condition:
1. We config HomePlug WAN environment first
2. Enable bandwidth management function and press button "Apply"
3. User wait for 2 minutes, the save process still not finish
4. [Bug Fixed]
SPRID: 070322479
Symptom: HomPlug Host ping time-out while user reload HomePlug page(or click button
"Scan")
Condition:
1. In EtherNet WAN mode, config a environment
Host A-------(LAN)NBG-318S(Power)-------PLA400--------Host B
2. Establish a HomePlug connection, and Host B always ping Host A
3. While user reload HomePlug page(or click button "Scan"), then Host B's will have 4 ping
time-out
5. [Bug Fixed]
SPRID: 070323544
Symptom: GUI administrator Inactivity timer do not work if user stay at HomePlug page
Condition:
1. We change the administrator Inactivity timer= 1 minutes
2. User click the HomePlug page and stay at this page., then it doesn't logout after 1
minutes.
6. [Bug Fixed]
360AMR2C0(RELEASE).doc 11/23

ZyXEL Confidential
SPRID: 070328764
Symptom: Wireless client use IP alias IP address can not work well in HomePlug WAN
mode
Condition:
1. Config HomePlug WAN mode
2. Add one IP alias 192.168.2.1 in DUT
3. Config wireless security= No security
4. Config one wireless client(Fixed IP: 192.168.2.11/255.255.255.0/192.168.2.1) to
associate to DUT/AP
5. Config one wired LAN host (Fixed IP: 192.168.2.12/255.255.255.0/192.168.2.1)
6. Wired LAN host can ping DUT(192.168.2.1) and wireless host (192.168.2.11)
7. Wireless client can not ping DUT(192.168.2.1), but it can ping wired LAN host
(192.168.2.12)
Modification in 3.60(AMR.0)b1 | 3/19/2007
First firmware releases.
CI Command List:
Appendix A CI Command List
Last Updated: 2007/4/3 Command Class List Table
System Related Command Exit Command Device Related Command
Ethernet Related Command POE Related Command PPTP Related Command
Configuration Related Command IP Related Command Modem Dialup Command
Firewall Related Command Wireless LAN Related Command Bridge Related Command
Radius Related Command 802.1x Related Command HomePlug Related
Command
SystemRelatedCommand Home
Command Description
sys
atsh Display system MRD and checksum
callhist
add phone dir rate uptime Add a entry in call history
display display call history
remove <index> remove entry from call history
countrycode [countrycode] set country code
datetime
date Display system date year/month/day
time Display system time hour/minute/second
period The period to synchronize with time server
sync sync with time server
domainname display domain name
360AMR2C0(RELEASE).doc 12/23

ZyXEL Confidential
edit <filename> edit a text file
feature display feature bit
hostname [hostname] display system hostname
logs
category
8021x [0:none/1:log] [0:don't show
debug type/1:show debug type] record the 8021x logs
access [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type]
record and alert the access control logs
attack [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type]
record and alert the firewall attack logs
display display the category setting
error [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type
record and alert the system error logs
icmp [0:none/1:log] record the icmp logs
javablocked [0:none/1:log/2:alert/3:both]
[0:don't show debug type/1:show debug
type]
Record and alert the java etc. blocked logs
mten [0:none/1:log] [0:don't show debug
type/1:show debug type] record the system maintenance logs
packetfilter [0:none/1:log] [0:don't show
debug type/1:show debug type] record packet filter logs
ppp [0:none/1:log] [0:don't show debug
type/1:show debug type] record PPP logs
cdr [0:none/1:log] [0:don't show debug
type/1:show debug type] record CDR logs
remote [0:none/1:log] [0:don't show
debug type/1:show debug type] record Remote Management logs
tcpreset [0:none/1:log] [0:don't show
debug type/1:show debug type] record tcp reset logs
traffic [0:none/1:log] [0:don't show
debug type/1:show debug type] record traffic logs
upnp [0:none/1:log] [0:don't show debug
type/1:show debug type] record upnp logs
urlblocked [0:none/1:log/2:alert/3:both] record and alert the web blocked logs
urlforward [0:none/1:log] record web forward logs
wireless [0:none/1:log] [0:don't show
debug type/1:show debug type] record wireless logs
anyip [0:none/1:log] record anyip logs
clear clear log
display [access|attack|error|ipsec|ike|javablocked|
mten|urlblocked|urlfor
ward]
display all logs or specify category logs
errlog
clear display log error
disp clear log error
Online on/off turn on/off error log online display
load load the log setting buffer
mail
alertAddr [mail address] send alerts to this mail address
display display mail setting
360AMR2C0(RELEASE).doc 13/23

ZyXEL Confidential
logAddr [mail address] send logs to this mail address
schedule display display mail schedule
schedule hour [0-23] hour time to send the logs
schedule minute [0-59] minute time to send the logs
schedule policy
[0:full/1:hourly/2:daily/3:weekly/4:none] mail schedule policy
schedule week
[0:sun/1:mon/2:tue/3:wed/4:thu/5:fri/6:sa
t]
weekly time to send the logs
server [domainName/IP] mail server to send the logs
subject [mail subject] mail subject
auth 0/1 Enable/Disable SMTP authentication
user Set SMTP user name
passwd Set SMTP password
save save the log setting buffer
syslog
active [0:no/1:yes] active to enable unix syslog
display display syslog setting
facility [Local ID(1-7)] log the messages to different files
server [domainName/IP] syslog server to send the logs
rn
load <entry no.> load remote node information
disp <entry no.>(0:working buffer) display remote node information
nat <none|sua|full_feature> config remote node nat
nailup <no|yes> config remote node nailup
mtu <value> set remote node mtu
save [entry no.] save remote node information
stdio [minute] change terminal timeout value
trcdisp monitor packets
trclog
trcpacket
version display RAS code and driver version
view <filename> view a text file
wdog
switch [on|off] set on/off wdog
cnt [value] display watchdog counts value: 0-34463
romreset restore default romfile
pwderrtm [minute] Set or display the password error blocking
timeout value.
upnp
active [0:no/1:yes] Activate or deactivate the saved upnp settings
config [0:deny/1:permit] Allow users to make configuration changes.
through UPnP
display display upnp information
firewall [0:deny/1:pass] Allow UPnP to pass through Firewall.
load save upnp information
reserve [0:deny/1:permit] Reserve UPnP NAT rules in flash
save save upnp information
qe
active [0:no/1:yes] Active to enable quick engine
state
debug
360AMR2C0(RELEASE).doc 14/23

ZyXEL Confidential
acl
display
add
delete
reset
session
display
add
delete
reset
route
display
add
delete
reset
arp
display
add
delete
reset
bridge
display
search
add
delete
reset
bltlookup
config [0: off | flags],
socket display system socket information
filter
netbios
disp Display NetBIOS Filter Status
Config <0:Between LAN and WAN,
3:IPSec pass through, 4:Trigger Dial>
<on|off>
Set NetBIOS Filter Status
roadrunner
debug <level> enable/disable roadrunner service
0: diable <default>
1: enable
display <iface name> display roadrunner information
iface-name: enif0, wanif0
restart <iface name> restart roadrunner
ddns
debug <level> enable/disable ddns service
display <iface name> display ddns information
restart <iface name> restart ddns
logout <iface name> logout ddns
cpu
display display CPU utilization
ExitCommand Home
Command Description
exit exit smt menu
360AMR2C0(RELEASE).doc 15/23

ZyXEL Confidential
DeviceRelatedCommand Home
Command Description
dev
dial <node#> dial to remote node
Ethernet Related Command Home
Command Description
ether
config display LAN configuration information
driver
cnt
disp <name> display ether driver counters
ioctl <ch-name> <command> [arguments] Useless in this stage.
status <ch_name> see LAN status
version see ethernet device type
spoofmac
macdir <xx:xx:xx:xx:xx:xx> Assign MAC for system
macbylan ip<xxx.xxx.xxx.xxx> Assign LAN PC MAC for system
macdefault Use default MAC
display Display MAC spoof information
edit
load <ether no.> load ether data from spt
mtu <value> set ether data mtu
accessblock <auto|10/half|10/full|100/half|100/full> block internet access
save save ether data to spt
wan
POERelatedCommand Home
Command Description
poe
status see poe status
dial <node> dial a remote node
drop <chann> drop a pppoe call
ether [rfc|3com] set /display pppoe ether type
PPTPRelatedCommand Home
Command Description
pptp
dial <rn-name> dial a remote node
drop <rn-name> drop a remote node call
tunnel <tunnel id> display pptp tunnel information
enque Set/display PPTP max en-queue size
chapv1LM Set/display chap v1 LM
Configuration Related Command Home
Command Description
config The parameters of config are listed below.
edit firewall active
<yes|no> Activate or deactivate the saved firewall settings
retrieve firewall Retrieve current saved firewall settings
save firewall Save the current firewall settings
display firewall Displays all the firewall settings
set <set#> Display current entries of a set configuration;
360AMR2C0(RELEASE).doc 16/23

ZyXEL Confidential
including timeout values, name, default-permit,
and number of rules in the set.
set <set#> rule <rule#> Display current entries of a rule in a set.
attack Display all the attack alert settings in PNC
e-mail Display all the e-mail settings in PNC
? Display all the available sub commands
e-mail mail-server
<mail server IP> Edit the mail server IP to send the alert
return-addr
<e-mail address> Edit the mail address for returning an email alert
email-to <e-mail
address> Edit the mail address to send the alert
policy <full |
hourly |daily |
weekly>
Edit email schedule when log is full or per hour,
day, week.
day <sunday |
monday | tuesday
| wednesday |
thursday | friday |
saturday>
Edit the day to send the log when the email
policy is set to Weekly
hour <0~23> Edit the hour to send the log when the email
policy is set to daily or weekly
minute <0~59> Edit the minute to send to log when the email
policy is set to daily or weekly
Subject <mail
subject> Edit the email subject
attack send-alert
<yes|no> Activate or deactivate the firewall DoS attacks notification emails
block <yes|no> Yes: Block the traffic when exceeds the
tcp-max-incomplete threshold
No: Delete the oldest half-open session when
exceeds the tcp-max-incomplete threshold
block-minute
<0~255> Only valid when sets 'Block' to yes. The unit is minute
minute-high
<0~255> The threshold to start to delete the old half-opened sessions to minute-low
minute-low
<0~255> The threshold to stop deleting the old half-opened session
max-incomplete-
high <0~255> The threshold to start to delete the old half-opened sessions to max-incomplete-low
max-incomplete-
low <0~255> The threshold to stop deleting the half-opened session
tcp-max-incompl
ete <0~255> The threshold to start executing the block field
set <set#> name <desired
name> Edit the name for a set
default-permit
<forward|block> Edit whether a packet is dropped or allowed when it does not match the default set
icmp-timeout
<seconds> Edit the timeout for an idle ICMP session before it is terminated
udp-idle-timeout
<seconds> Edit the timeout for an idle UDP session before it is terminated
connection-timeo
ut <seconds> Edit the wait time for the SYN TCP sessions before it is terminated
fin-wait-timeout Edit the wait time for FIN in concluding a TCP
360AMR2C0(RELEASE).doc 17/23

ZyXEL Confidential
<seconds> session before it is terminated
tcp-idle-timeout
<seconds> Edit the timeout for an idle TCP session before it is terminated
pnc <yes|no> PNC is allowed when 'yes' is set even there is a
rule to block PNC
log <yes|no> Switch on/off sending the log for matching the
default permit
rule <rule#> permit <forward|block> Edit whether a packet is dropped or allowed
when it matches this rule
active <yes|no> Edit whether a rule is enabled or not
protocol <0~255> Edit the protocol number for a rule. 1=ICMP,
6=TCP, 17=UDP...
Log
<none|match|not-match|both
>
Sending a log for a rule when the packet
none|matches|not match|both the rule
alert <yes|no> Activate or deactivate the notification when a
DoS attack occurs or there is a violation of any
alert settings. In case of such instances, the
function will send an email to the SMTP
destination address and log an alert.
srcaddr-single <ip address> Select and edit a source address of a packet
which complies to this rule
srcaddr-subnet <ip address>
<subnet mask> Select and edit a source address and subnet mask if a packet which complies to this rule.
srcaddr-range <start ip
address> <end ip address> Select and edit a source address range of a packet which complies to this rule.
destaddr-single <ip address> Select and edit a destination address of a packet
which complies to this rule
destaddr-subnet <ip
address> <subnet mask> Select and edit a destination address and subnet mask if a packet which complies to this rule.
destaddr-range <start ip
address> <end ip address> Select and edit a destination address range of a packet which complies to this rule.
tcp destport-single <port#> Select and edit the destination port of a packet
which comply to this rule. For non-consecutive
port numbers, the user may repeat this command
line to enter the multiple port numbers.
tcp destport-range <start
port#> <end port#> Select and edit a destination port range of a packet which comply to this rule.
udp destport-single <port#> Select and edit the destination port of a packet
which comply to this rule. For non-consecutive
port numbers, users may repeat this command
line to enter the multiple port numbers.
udp destport-range <start
port#> <end port#> Select and edit a destination port range of a packet which comply to this rule.
desport-custom <desired
custom port name> Type in the desired custom port name
delete firewall e-mail Remove all email alert settings
attack Reset all alert settings to defaults
set <set#> Remove a specified set from the firewall
configuration
set <set#> rule <rule#> Remove a specified rule in a set from the
firewall configuration
insert firewall e-mail Insert email alert settings
attack Insert attack alert settings
set <set#> Insert a specified rule set to the firewall
360AMR2C0(RELEASE).doc 18/23

ZyXEL Confidential
configuration
set <set#> rule <rule#> Insert a specified rule in a set to the firewall
configuration
cli Display the choices of command list.
debug <1|0> Turn on|off trace for firewall debug information.
Wireless LAN Related Command Home
Command Description
wlan
active [on|off] set on/off wlan
association display association list
Chid [channel id] set channel
essid [ess id] set ESSID
fraThreshold
led
opmode
outputpower <0: 17 dBm, 1: 14 dBm, 2: 11 dBm> Set wlan output power
radio
rtsThreshold
removeSTA <MAC ADDRESS> Remove wireless Client
reset Reset wireless
scan Auto channel select
superset
ssidprofil
version display WLAN version information
BridgeRelatedCommand Home
Command Description
Bridge
cnt related to bridge routing statistic table
Disp display bridge route counter
Clear clear bridge route counter
stat related to bridge packet statistic table
Disp display bridge route packet counter
Clear clear bridge route packet counter
Radius Related Command Home
Command Description
Radius
auth
show show current radius authentication server
configuration
addAuthServer index active[1/0] ip port key Add authentication server
delAuthServer index Delete authentication server
acct
show show current radius accounting server
configuration
addAcctServer index active[1/0] ip port key
delAcctServer index
showRunInfo Show current radius authentication and
accounting server information
setTryNums [nums: 1~9] Set try number
checkRadID Display radius ID pool
360AMR2C0(RELEASE).doc 19/23

ZyXEL Confidential
debug [0:off 1:on] turn on/off debug
802.1x Related Command Home
Command Description
8021x
debug Level [debug level] set ieee802.1x debug message level
Trace show all supplications in the supplication table
User [username] show the specified user status in the supplicant
table
pmkcache
show [ChanID] Show pmkcache
flush [ChanID] Flush pmkcache
set
mode <WPA_PSK/OTHERS> 8021x set mode
key <key> 8021x set key
save 8021x save
show
showkey 8021x showkey
IPRelatedCommand Home
Command Description
ip
address [addr] display host ip address
alias <iface> alias iface
aliasdis <0|1> disable alias
arp
status <iface> display ip arp status
attpret <on:off> protect from IP spoofing ARP attack
force <on|off> force update wan arp switch
dhcp <iface>
client
Release release DHCP client IP
Renew renew DHCP client IP
status show dhcp status
dns
query
address
name
stats
Clear clear dns statistics
Disp display dns statistics
proxy table display DNS Proxy Request Table
system
display Display system dns configuration
edit <0: first|1: second|2: third>
<0:from ISP|1:usr-def|2:none> [IP
addr ess if choosing 1]
modify system dns configuration
lan
edit <0:first|1:second|2:third>
<0:from ISP|1:user defined|2:DNS
relay|3:none> [IP address if choosing
1|]
modify lan dns configuration
display Display lan dns configuration
httpd debug [on|off] Turn on/off httpd debug
360AMR2C0(RELEASE).doc 20/23