CS-SEIL-510/C コマンドリファレンス

Transcription

1 FutureNet CS-SEIL-510/C 1.75

2 1 CS-SEIL-510/C TELNET IPv IP IP unnumbered TCP MSS LAN MDI/MDI-X LAN MTU WAN IPsec VLAN PPPoE L2TPv PPP PPP PPP PPP / IP IPv VMAN TPID

3 5 MAC MAC MAC MAC ARP ARP ARP ARP NAT Proxy ARP / MultiPath RIP / RIP / RIP RIPv2 / RIP / RIP RIP OSPF / OSPF ID distance OSPF IPv4 (PIM-SM) / IPv4 (PIM-SM) IPv4 (PIM-SM) IPv4 (PIM-SM) IPv

4 7.31 IPv IPv IPv6 MultiPath RIPng / RIPng RIPng / RIPng RIPng RIPng IPv6 (PIM-SM) / IPv6 (PIM-SM) IPv6 (PIM-SM) IPv6 (PIM-SM) / IPv IPv IPv IPv6 / IPv NAT NAT NAT NAT IP () NAT IP () NAT IP () NAT IP () NAT NAPT IP () NAPT IP NAPT IP () NAPT IP NAPT NAPT

5 9.14 NAPT NAPT / SIP SIP NAT NAT NAT NAT Reflection NAT Reflection NAT UPnP / UPnP IPsec IKE IKE / IKE IKE IKE IKE Peer IKE Peer IKE Peer IKE IKE IKE IKE IKE IKE L2TPv3 96 4

6 11.1 L2TPv3 hostname L2TPv3 Router-ID L2TPv L2TPv L2TPv / CBQ CBQ CBQ CBQ CBQ CBQ CBQ CBQ / CBQ SNMP SNMP / SNMP community SNMP sysname SNMP location SNMP contact SNMP SNMP trap / SNMP trap SNMP trap SNMP trap / / / /

7 15 VRRP VRRP VRRP VRID VRID DHCP DHCP / DHCP DHCP / DHCP IP DHCP IP DHCP DNS DHCP DNS DHCP DHCP DHCP NTP DHCP NTP DHCP WINS DHCP WINS DHCP WINS DHCP DHCP DHCP DHCP DHCPv DHCPv DHCPv Rapid Commit Reconfigure Accept Prefix Delegation SLA ID DNS DNS / DNS DNS IPv4-IPv /

8 MTU ICMP IPv ICMP IPv6 ICMP LinkDown IPv4 connected route LinkDown IPv6 connected route urpf IPv6 urpf NTP / NTP NTP peer

9 DNS / DNS DNS Web / TELNET / Secure Shell / Secure Shell hostkey Secure Shell Secure Shell IPL PPPoE ARP NDP NAT IPv IKE IPsec IPsec L2TP L2TP

10 IPv TELNET factory config 165 A 173 9

11 1 CS-SEIL-510/C 1.1 CS-SEIL-510/C TELNET SecureShell 1.2 // CS-SEIL-510/C CS-SEIL-510/C // 1: PPP ARP MAC ARP NAT IPsec CS-SEIL-510/C IP WAN PPP LAN LAN ARP Ethernet MAC LAN ARP NAT/NAPT VPN IPsec/IKE 10

12 L2TPv3 / SNMP VRRP DHCP DHCPv6 DNS L2TPv3 CBQ CS-SEIL-510/C DHCP DHCPv6 Prefix Delegation DNS IPv6 IPv6 IPv4 CS-SEIL-510/C CS-SEIL-510/C CS-SEIL-510/C CS-SEIL-510/C 11

13 1.3 / 2: / 3: keyword text <parameter> [text] [] [A B] A B {A B} A B... {}, [] 12

14 4: ) <filter name> (1-16, [a-za-z0-9 ]) 1 16 ( ) 0 () [ ] - ( - - ) [ ] abc..f 0x

15 1.4 5: interface IPaddress/prefixlen, IPaddress CS-SEIL-510/C Ether lan tunnel VLAN vlan PPPoE pppoe IP 10 /prefixlen /32 interface IP [/8 /16 /24] 6 IP IP - IPv6 IPv6 RFC2373 /64 ID ID % / fec0::8001:2e0:4fff:fe20:829f fe80::2e0:4fff:fe20:829f%lan0 14

16 hostname, URL protocol port top, bottom, above, below URL URL FTP HTTP TCP ICMP tcp icmp TCP UDP , 80, top bottom above below 15

17 6: prefixlen netmask / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /

18 1.5 TELNET CS-SEIL-510/C LAN TELNET CS-SEIL- 510/C TELNET login: user admin user admin user / administrator admin Password: Login incorrect admin # user > TELNET exit tcsh bash UNIX / 7 CS-SEIL-510/C TELNET Secure Shell Secure Shell / Secure Shell CS-SEIL-510/C 17

19 7: Space BackSpace 1 Ctrl-H, Del BackSpace Ctrl-D? Tab? Enter Ctrl-M, Ctrl-J Enter Ctrl-C Ctrl-F 1 Ctrl-B 1 Ctrl-A Ctrl-E Ctrl-T 1 1 Ctrl-P Ctrl-N Ctrl-Space Ctrl-W Ctrl-K Ctrl-Y Ctrl-U Ctrl-V? () Ctrl-L ( 1 ) ( () ) Y= ( ) () 18

20 1.6 IPv6 CS-SEIL-510/C IPv6 IPv6 RFC CS-SEIL-510/C 8: IPv4 IPv6 IPv4 IPv6 interface interface ppp ppp bridge bridge arp - ipsec ipsec ike ike cbq cbq syslog syslog load-from load-from ntp ntp save-to save-to update update resolver resolver dns dns translator translator route route6 filter filter6 ping ping6 traceroute traceroute6 snmp - nat - vrrp - dhcp - - dhcp6 - rtadvd 19

21 2 2.1 IP interface { <lan> <vlan> } { address add } <local IPaddress/prefixlen> interface lan1 { address add } dhcp interface { <pppoe> <tunnel> <ipsec> } { address add } <local IPaddress/prefixlen> remote <remote IPaddress> [ ] <lan> LAN <pppoe> PPPoE pppoe0, pppoe1,... <tunnel> Tunnel tunnel0, tunnel1,... <vlan> VLAN vlan0, vlan1... <ipsec> IPsec (ipsec0, ipsec1,...) <local IPaddress/prefixlen> IP <remote IPaddress> Point to Point IP dhcp DHCP IP CS-SEIL-510/C IP IPv4 IPv6 address IP add IPv4 4 IPv6 8 prefixlen IPv4 IPv6 /64 dhcp lan1 IPsec VLAN PPPoE IPsec 2.12 VLAN 2.13 PPPoE lan / IP interface <interface> delete { all <IPaddress> } [ ] <interface> <IPaddress> IP all IP CS-SEIL-510/C IP 20

22 IPv6 IPv4 IPv6 2.3 unnumbered interface <interface> unnumbered [ ] <interface> unnumbered unnumbered IPv4 unnumbered lan0 IPv4 PPPoE unnumbered PPP IPCP address option OFF PPP 3.1 PPP LAN VLAN 2.4 interface <interface> description <description> [ ] <interface> <description> (0-64 ) ( 7) 2.5 TCP MSS interface <interface> tcp-mss { <mss> auto off } [ ] <interface> <mss> TCP MSS auto TCP MSS 21

23 off TCP MSS TCP MSS PPPoE 3.1 PPP IPsec auto LAN interface { lan0 lan1 } media <media> [ ] <media> 10baseT 10Mbps 10baseT-FDX 10Mbps 100baseTX 100Mbps 100baseTX-FDX 100Mbps auto CS-SEIL-510/C LAN LAN 10baseT,10baseT-FDX 100baseTX,100baseTX-FDX interface IPv4 IPv6 auto 2.7 MDI/MDI-X interface { lan0 lan1 } mdi { auto normal } [ ] mdi auto normal MDI CS-SEIL-510/C LAN LAN 22

24 interface IPv4 IPv6 auto 2.8 LAN MTU interface { lan0 lan1 } mtu { system-default <mtu size> } [ ] <mtu size> LAN MTU system-default CS-SEIL-510/C CS-SEIL-510/C LAN MTU mtu WAN interface lan1 queue { normal cbq } [ ] normal cbq CBQ Class-Based Queueing WAN CBQ 12 interface IPv4 IPv6 normal 2.10 interface <interface> tunnel <start IPaddress> <end IPaddress> interface <interface> tunnel none interface <interface> mtu <mtu size> [ ] <interface> (tunnel0, tunnel1,...) <start IPaddress> IP <end IPaddress> IP none <mtu size> MTU system-default CS-SEIL-510/C 23

25 mtu IPv4, IPv6 none IP 2.11 IPsec interface <interface> tunnel <start IPaddress> <end IPaddress> interface <interface> tunnel none interface <interface> mtu <mtu size> [ ] <interface> IPsec (ipsec0, ipsec1,...) <start IPaddress> IPsec IP <end IPaddress> IPsec IP none IPsec <mtu size> IPsec MTU system-default CS-SEIL-510/C mtu IPsec IPv4, IPv6 none IP IPsec / 2.12 VLAN 24

26 interface <interface> tag <tag> [over <lan interface>] interface <interface> tag none interface <interface> mtu <mtu size> [ ] <interface> VLAN <tag> VLAN none VLAN bridge group none <lan interface> VLAN LAN <mtu size> vlan MTU system-default CS-SEIL-510/C mtu 1500 VLAN lan0,lan1( L2TP I/F) lan1( L2TP I/F) VLAN lan0 VLAN over lan1 over lan0 lan0 over lan0 VLAN lan0 CS-SEIL-510/C VLAN interface IPv4 IPv PPPoE interface <interface> ppp-configuration <ppp name> interface <interface> ppp-configuration none interface <interface> over <lan interface> interface <interface> over none interface <interface> mtu <mtu size> [ ] <interface> pppoe0 pppoe3 PPPoE <ppp name> PPP <lan interface> lan0, lan1 PPPoE LAN none PPPoE <mtu size> PPPoE MTU system-default CS-SEIL-510/C PPPoE PPP 25

27 MTU ppp-configuration lan0,lan1 lan1 PPPoE lan1 lan1 PPPoE over lan1 lan0, L2TP I/F L2TP I/F PPPoE interface IPv4 IPv6 over lan1 mtu system-default 2.14 L2TPv3 interface <interface> tunnel <start IPaddress> <end IPaddress> interface <interface> tunnel none interface <interface> l2tp manual local-id <local id> remote-id <remote id> [local-cookie <local cookie> remote-cookie <remote cookie>] interface <interface> l2tp <l2tp name> remote-end-id <remote end id> [ ] <interface> L2TPv3 (l2tp0, l2tp1,...) <start IPaddress> L2TPv3 IP <end IPaddress> L2TPv3 IP none L2TPv3 <local id> L2TPv3 Local Session ID <remote id> L2TPv3 Remote Session ID <local cookie> L2TPv3 Local Cookie <remote cookie> L2TPv3 Remote Cookie <l2tp name> L2TPv3 L2TPv3 <remote end id> L2TPv3 Remote End ID(1-16, [?Y=] ) 2 L2TPv3 IPv4 none bridge group none L2TPv3 local-id remote-id 26

28 local-cookie remote-cookie cookie L2TPv3 l2tp L2TPv3 11 L2TPv3 remote-end-id Remote End ID 16 27

29 3 PPP 3.1 PPP ppp add <ppp name> [ipcp { enable disable }] [ipv6cp { enable disable }] [keepalive { <time> none }] [ipcp-address { on off }] [ipcp-dns { on off }] [acname <ac name>] [servicename <service name>] [authentication-method { auto pap chap none }] [identifier <userid>] [passphrase <pass phrase>] [tcp-mss { auto <mss> none }] [auto-connect { vrrp always }] [ ] <ppp name> PPP (1-16, ) ipcp enable IPCP disable IPCP ipv6cp enable IPV6CP disable IPV6CP keepalive none ipcp-address on IPCP address option off IPCP address option ipcp-dns on DNS extension off DNS extension <ac name> PPPoE Access Concentrator (0-16 ) <service name> PPPoE (0-16 ) authentication-method auto pap PAP chap CHAP none <userid> ID(0-36 ) <pass phrase> (0-36 ) tcp-mss auto TCP MSS TCP MSS none TCP MSS auto-connect vrrp VRRP ( ) PPPoE VRRP PPPoE 28

30 always VRRP PP- PoE PPP ppp IPv4 IPv6 PPP 8 PPPoE Unnumbered ipcp-address off Unnumbered Unnumbered 2.3 unnumbered PPPoE VRRP VRRP 15.1 VRRP PPP none keepalive LCP echo 3 echo reply ipcp enable ipv6cp enable keepalive none ipcp-address off ipcp-dns off authentication-method auto tcp-mss auto auto-connect always 3.2 PPP ppp modify <ppp name> [ipcp { enable disable }][ipv6cp { enable disable }] [keepalive { <time> none }] [ipcp-address { on off }] [ipcp-dns { on off }] [acname <ac name>] [servicename <service name>] [authentication-method { auto pap chap none }] [identifier <userid>] [passphrase <pass phrase>] [tcp-mss { auto <mss> none }] [auto-connect { vrrp always }] [ ] PPP ppp IPv4 IPv6 29

31 3.3 PPP ppp delete <ppp name> ppp delete all [ ] <ppp name> PPP all PPP PPP ppp IPv4 IPv6 30

32 4 4.1 / bridge { enable disable } [ ] enable disable / RIP RIPng OSPF bridge IPv4 IPv6 disable 4.2 IP bridge ip-bridging { on off } [ ] on IP off IP IP / enable IP off IP ARP CS-SEIL-510/C IP IP ARP on WAN IPv4 gateway WAN disable ip-bridging bridge IPv4 IPv6 on 4.3 IPv6 bridge ipv6-bridging { on off } 31

33 [ ] on IPv6 off IPv6 IPv6 / enable IPv6 off CS-SEIL-510/C IPv6 disable ipv6-bridging on 4.4 VMAN TPID bridge vman-tpid { none <vman tpid> } [ ] <vman tpid> 0x0001 0xffff none VMAN TPID Ethernet VMAN (Virtual Metropolitan Area Network) TPID (Tag Protocol Identifier) VMAN TPID Ethertype VLAN tag VLAN ID VLAN Priority / none VMAN TPID none 4.5 bridge group add <group name> [stp { on off }] [priority <num>] [max-age <num>] [hello-time <num>] [forward-delay <num>] [aging-time <num>] [ ] <group name> (1-16, [a-za-z0-9 ]) stp on STP stp off STP priority system-default max-age ( ) 32

34 system-default hello-time 1 10 ( ) system-default forward-delay ( ) system-default aging-time MAC ( ) 0 system-default (bridge { enable disable ip-bridging ipv6-bridging }) lan0 lan1 8 none all stp on IEEE 802.1D Spanning-Tree-Protocol BPDU stp on STP stp off priority hello-time 2 max-age 20 forward-delay 15 aging-time [ ] bridge group modify <group name> [stp { on off }] [priority <num>] [max-age <num>] [hello-time <num>] [forward-delay <num>] [aging-time <num>] 33

35 4.7 bridge group delete <group name>... bridge group delete all [ ] <group name> all 4.8 bridge interface <ifname> group <group name> [stp { on off }] [priority <num>] [path-cost <num>] [port-fast { on off }] bridge interface <ifname> [stp { on off }] [priority <num>] [path-cost <num>] [port-fast { on off }] bridge interface <ifname> group none [ ] <ifname> (lan0, vlan0 vlan7, l2tp0 l2tp63) <group name> none stp on STP ( STP ) stp off STP priority system-default path-cost system-default port-fast on Forwarding port-fast off Blocking lan0 vlan0 vlan7 l2tp0 l2tp63 34

36 none vlan0 vlan7 l2tp0 l2tp63 interface bridge VLAN lan0 LAN LAN VLAN VLAN VLAN VLAN VLAN LAN L2TP VLAN VLAN LAN VLAN L2TP L2TP path-cost system-default LAN VLAN 100 (10Mbps), 19 (100Mbps) L2TP 55 stp off priority 32 path-cost ( ) port-fast off 35

37 5 MAC 5.1 MAC macfilter add <name> [action <action>] src { any <macaddr> <url> interval <time> } [logging <log mode>] [ ] <name> (1-16, [a-za-z0-9 ]) <action> block pass <macaddr> any MAC MAC 1 : 00:e0:4d:ff:00:01 <url> MAC URL <time> URL (XXhXXmXXs, 60s 24h) <log mode> on off Ethernet / MAC MAC lan0 32 MAC URL ftp,http,https URL MAC 1 1MAC URL MAC 512KB URL 20 URL src any pass/block 1 20 logging off action pass logging off 36

38 5.2 MAC [ ] macfilter modify <name> [action <action>] [src { any <macaddr> <url> interval <time> }] [logging <log mode>] MAC src any src action show status macfilter (blocked)/ (passed) URL interval URL 5.3 MAC macfilter delete { all <name> [<name>...] } [ ] <name> all MAC all MAC 37

39 6 ARP 6.1 ARP arp add <IPaddress> <MACaddress> [proxy { on off }] [ ] <IPaddress> IP <MACaddress> IP MAC proxy on ARP off ARP IP MAC ARP 16 IP proxy off 6.2 ARP arp modify <IPaddress> [<MACaddress>] [proxy { on off }] [ ] ARP 6.3 ARP arp delete <IPaddress> arp delete all [ ] <IPaddress> ARP IP all ARP ARP all ARP 6.4 NAT Proxy ARP / arp reply-nat { on off } [ ] on NAT Proxy ARP off NAT Proxy ARP 38

40 NAT IP IP ARP NAT Proxy ARP / NAT IP nat static add <private IPaddress> <global IPaddress> nat dynamic add global <global IPaddress> nat napt add global <global IPaddress> off 39

41 7 7.1 route add <dst address/prefixlen> { <gateway address> <interface> dhcp discard } [distance { <distance> system-default }] [metric { <metric> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] [down-count { <count> system-default }] route add default { <gateway address> <interface> dhcp discard } [distance { <distance> system-default }] [metric { <metric> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] [down-count { <count> system-default }] [ ] <dst address/prefixlen> IPv4 <gateway address> <interface> dhcp DHCP default route discard discard <distance> <metric> 1 15 RIP metric keepalive on static off static <target> <interval> ( ) <count> 1 10 system-default CS-SEIL-510/C metric RIP metric distance gateway dhcp dhcp default route 40

42 interface dhcp dhcp gateway discard MultiPath 512 keepalive Discard PPPoE Unnumbered keepalive 16 route IPv4 default pppoe0 metric 1 distance 1 keepalive off send-interval 30 down-count [ ] route modify <dst address/prefixlen> [<gateway address> <interface> dhcp discard] [distance { <distance> system-default }] [metric { <metric> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] [down-count { <count> system-default }] route modify default [<gateway address> <interface> dhcp discard] [distance { <distance> system-default }] [metric { <metric> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] [down-count { <count> system-default }] metric RIP metric 41

43 distance MultiPath distance metric route IPv4 7.3 route delete <dst address/prefixlen> route delete default route delete all [ ] <dst address/prefixlen> IPv4 default all MultiPath 7.4 MultiPath route IPv4 7.4 MultiPath route delete <dst address/prefixlen> { <gateway address> <interface> discard } route delete <dst address/prefixlen> all route delete default { <gateway address> <interface> discard } route delete default all [ ] <dst address/prefixlen> IPv4 default <gateway address> IPv4 <interface> discard discard all MultiPath route IPv4 42

44 7.5 route dynamic auth-key add <key-name> type plain-text password <password> route dynamic auth-key add <key-name> type md5 keyid <keyid> password <password> [ ] <key-name> (1-16, [!#] ) <password> (1-16, [!#] ) <keyid> MD5 ID 64 plain-text OSPF 8 route IPv4 7.6 route dynamic auth-key delete <key-name> route dynamic auth-key delete all route IPv4 7.7 route dynamic route-filter add <filter-name> [network <IPaddress>[/<prefixlen>] [prefix <prefixlen-prefixlen>] [exact-match]] [interface <ifname>] [metric <number>] { pass block } [set-metric <number>] [set-metric-type <number>] [ ] <filter-name> (1-16, [!#] ) network prefix prefixlen exact-match prefixlen interface 43

45 metric block pass set-metric set-metric-type metric metric metric-type metric OSPF set-metric-type RIP metric set-metric-type 512 route IPv4 IPv6 set-metric-type 2 (type 2) 7.8 route dynamic route-filter delete <filter-name> route dynamic route-filter delete all route IPv4 7.9 RIP / route dynamic rip { enable disable } [ ] enable RIP disable RIP RIP / bridge disable route IPv4 disable 44

46 7.10 RIP / route dynamic rip interface <interface> { enable disable supply-only listen-only } [ ] <interface> enable disable supply-only listen-only RIP / route IPv4 disable 7.11 RIP route dynamic rip interface <interface> version { ripv1 ripv2 ripv2-broadcast } [ ] ripv1 RIPv1 ripv2 RIPv2 ripv2-broadcast RIPv2 RIP route IPv4 ripv RIPv2 / route dynamic rip interface <interface> authentication { enable disable } route dynamic rip interface <interface> authentication auth-key { <key-name> none } [ ] enable disable <key-name> 45

47 none RIPv2 route IPv4 disable 7.13 RIP / route dynamic rip interface <interface> route-filter { in out } <route-filter-name>[,<route-filter-name>...] route dynamic rip interface <interface> route-filter { in out } none [ ] in out <route-filter-name> none RIP route IPv4 network none 7.14 RIP route dynamic rip default-route-originate { enable disable } [ ] enable disable RIP route IPv4 disable 46

48 7.15 RIP route dynamic rip update-timer { <update-timer> system-default } route dynamic rip expire-timer { <expire-timer> system-default } route dynamic rip garbage-collection-timer { <garbage-collection-timer> system-default } [ ] <update-timer> <expire-timer> <garbage-collection-timer> garbage collection system-default CS-SEIL-510/C RIP route IPv4 update-timer 30 expire-timer 180 garbage-collection-timer OSPF / route dynamic ospf { disable enable } [ ] enable OSPF disable OSPF OSPF / bridge disable route IPv4 disable 7.17 OSPF ID route dynamic ospf router-id <my-router-id> [ ] <my-router-id> CS-SEIL-510/C ID 47

49 CS-SEIL-510/C ID route IPv route dynamic ospf area add <area-id> [range <IPaddress/prefixlen>] [stub { enable disable } [no-summary { on off }] [default-cost { <cost> system-default }]] [ ] <area-id> ID <IPaddress/prefixlen> stub no-summary default-cost <cost> system-default CS-SEIL-510/C range route IPv4 default-cost 1 stub disable no-summary off 7.19 route dynamic ospf area delete <area-id> route dynamic ospf area delete all [ ] <area-id> ID all ID route IPv4 48

50 7.20 route dynamic ospf link add { <peer-router-id> <interface> } area <area-id> [authentication auth-key { <key-name> none }] [cost { <cost> system-default }] [hello-interval { <hello-interval> system-default }] [dead-interval { <dead-interval> system-default }] [retransmit-interval { <retransmit-interval> system-default }] [transmit-delay { <transmit-delay> system-default }] [priority { <priority> system-default }] [passive-interface { on off }] [ ] <peer-router-id> Router-ID <interface> OSPF <area-id> <key-name> (1-16, [!#] ) none <cost> <hello-interval> Hello <dead-interval> <retransmit-interval> LSA <transmit-delay> LS <priority> DB/BDR system-default CS-SEIL-510/C <passive-interface> on passive-interface off passive-interface OSPF <area-id> route dynamic ospf area add ID cost priority DR BDR 0 DR BDR route IPv4 cost 1 49

51 hello-interval 10 dead-interval 40 retransmit-interval 5 transmit-delay 1 priority 1 passive-interface off 7.21 route dynamic ospf link modify { <peer-router-id> <interface> } [authentication auth-key { <key-name> none }] [cost { <cost> system-default }] [hello-interval { <hello-interval> system-default }] [dead-interval { <dead-interval> system-default }] [retransmit-interval { <retransmit-interval> system-default }] [transmit-delay { <transmit-delay> system-default }] [priority { <priority> system-default }] [passive-interface { on off }] [ ] <peer-router-id> Router-ID <interface> <key-name> (1-16, [!#] ) none <cost> <hello-interval> Hello <dead-interval> <retransmit-interval> LSA <transmit-delay> LS <priority> DB/BDR system-default CS-SEIL-510/C <passive-interface> on passive-interface off passive-interface OSPF cost priority DR BDR 0 DR BDR route IPv4 50

52 cost 1 hello-interval 10 dead-interval 40 retransmit-interval 5 transmit-delay 1 priority 1 passive-interface off 7.22 route dynamic ospf link delete { <interface> all } [ ] <interface> OSPF all OSPF route IPv distance route dynamic ospf administrative-distance { external inter-area intra-area } { <number> system-default } [ ] external distance inter-area distance intra-area distance <number> distance system-default CS-SEIL-510/C distance route IPv4 external 0 inter-area 0 intra-area OSPF 51

53 route dynamic ospf default-route-originate { enable disable } [metric <metric>] [metric-type { 1 2 }] [ ] enable disable <metric> metric <metric-type> 1 or 2 metric-type OSPF route IPv4 disable metric 10 metric-type route dynamic redistribute { static-to-rip ospf-to-rip } { enable disable } [metric <metric>] [route-filter <route-filter-name>[,<route-filter-name>...]] route dynamic redistribute connected-to-rip { enable disable } [metric <metric>] route dynamic redistribute { static-to-ospf rip-to-ospf } { enable disable } [metric <metric>] [metric-type <metric-type>] [route-filter <route-filter-name>[,<route-filter-name>...]] route dynamic redistribute connected-to-ospf { enable disable } [metric <metric>] [metric-type <metric-type>] [ ] enable disable <metric> RIP: 1 15 metric OSPF: metric <metric-type> 1 or 2 metric-type route-filter Connected RIP OSPF RIP OSPF route IPv4 52

54 static-to-rip disable connected-to-rip enable ospf-to-rip disable static-to-ospf disable connected-to-ospf enable rip-to-ospf disable metric 1 (RIP ) metric 20 (OSPF ) metric-type IPv4 (PIM-SM) / route dynamic pim-sparse { enable disable } [ ] enable IPv4 disable IPv4 IPv4 PIM-SM/ route IPv4 disable 7.27 IPv4 (PIM-SM) route dynamic pim-sparse interface <interface> { enable disable } [ ] <interface> enable IPv4 disable IPv4 IPv4 PIM-SM route IPv4 512 disable 7.28 IPv4 (PIM-SM) 53

55 route dynamic pim-sparse static-rp add <group address/prefixlen> <RP address> [priority <priority>] [ ] <group address/prefixlen> multicast group <RP address> <priority> BSR route IPv4 8 priority IPv4 (PIM-SM) route dynamic pim-sparse static-rp delete { <group address/prefixlen> all } [ ] <group address/prefixlen> multicast group all multicast group route IPv IPv6 route6 add <dst IPaddress/prefixlen> { <gateway IPaddress> <interface> discard } [distance { <distance> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] [down-count { <count> system-default }]] route6 add default { <gateway IPaddress> <interface> discard } [distance { <distance> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] [down-count { <count> system-default }]] 54

56 [ ] <dst IPaddress/prefixlen> IPv6 default <gateway IPaddress> IPv6 <interface> discard discard <distance> keepalive on : static off : static <target> <interval> ( ) <count> 1 10 system-default CS-SEIL-510/C default distance 512 discard MultiPath keepalive PPPoE IPv6 keepalive 16 route6 IPv6 distance 1 keepalive off send-interval 30 down-count IPv6 route6 modify <dst IPaddress/prefixlen> [<gateway IPaddress> <interface> discard] [distance { <distance> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] 55

57 [down-count { <count> system-default }]] route6 modify default [<gateway IPaddress> <interface> discard] [distance { <distance> system-default }] [keepalive { on off }] [target { <target> none }] [send-interval { <interval> system-default }] [down-count { <count> system-default }]] [ ] distance MultiPath distance metric route6 IPv IPv6 route6 delete <dst IPaddress/prefixlen> route6 delete default route6 delete all [ ] <dst IPaddress/prefixlen> IPv6 default all IPv6 MultiPath route6 IPv IPv6 MultiPath route6 delete <dst IPaddress/prefixlen> { <gateway IPaddress> <interface> discard } route6 delete <dst IPaddress/prefixlen> all route6 delete default { <gateway IPaddress> <interface> discard } route6 delete default all [ ] <dst IPaddress/prefixlen> IPv6 56

58 default <gateway IPaddress> <interface> discard all IPv6 discard IPv6 MultiPath MultiPath route6 IPv route6 dynamic route-filter add <filter-name> [network <IPaddress>[/<prefixlen>] [prefix <prefixlen-prefixlen>] [exact-match]] [metric <number>] { pass block } [set-metric <number>] [ ] <filter-name> (1-16, [!#] ) network prefix prefixlen exact-match prefixlen interface metric metric block pass set-metric metric 512 route6 IPv6 IPv4 set-metric-type 2 (type 2) 7.35 route6 dynamic route-filter delete <filter-name> route6 dynamic route-filter delete all 57

59 route6 IPv RIPng / route6 dynamic ripng { enable disable } [ ] enable RIPng disable RIPng RIPng / bridge disable route6 IPv6 disable 7.37 RIPng route6 dynamic ripng interface <interface> { enable disable supply-only listen-only } [ ] <interface> enable disable supply-only listen-only RIPng route6 IPv6 disable 7.38 RIPng / route6 dynamic ripng interface <interface> route-filter { in out } <route-filter-name>[,<route-filter-name>...] route6 dynamic ripng interface <interface> route-filter { in out } none 58

60 [ ] in out <route-filter-name> none RIPng route6 IPv6 network none 7.39 RIPng route6 dynamic ripng default-route-originate { enable disable } [ ] enable disable RIPng route6 IPv6 disable 7.40 RIPng route6 dynamic ripng interface <interface> aggregate add <prefix/prefixlen> metric <metric> route6 dynamic ripng interface <interface> aggregate delete <prefix/prefixlen> [ ] <interface> <prefix/prefixlen> <metric> 1 15 metric route6 IPv6 59

61 metric RIPng route6 dynamic redistribute static-to-ripng { enable disable } [metric <metric>] route6 dynamic redistribute connected-to-ripng { enable disable } [metric <metric>] [ ] enable disable <metric> 1 15 metric Connected RIPng route6 IPv6 static-to-ripng disable connected-to-ripng enable metric IPv6 (PIM-SM) / route6 dynamic pim-sparse { enable disable } [ ] enable IPv6 disable IPv6 IPv6 PIM-SM/ route6 IPv6 disable 7.43 IPv6 (PIM-SM) route6 dynamic pim-sparse interface <interface> { enable disable } [ ] <interface> enable IPv6 disable IPv6 60

62 IPv6 PIM-SM route6 IPv6 512 disable 7.44 IPv6 (PIM-SM) route6 dynamic pim-sparse static-rp add <group address/prefixlen> <RP address> [priority <priority>] [ ] <group address/prefixlen> multicast group <RP address> <priority> BSR route6 IPv6 8 priority IPv6 (PIM-SM) route6 dynamic pim-sparse static-rp delete { <group address/prefixlen>/all } [ ] <group address/prefixlen> multicast group all multicast group route6 IPv6 61

63 8 8.1 filter add <filter name> action <action> interface <interface> direction <direct mode> [protocol <protocol>] [icmp-type <icmp type>] [application <protocol application>] [src <src IPaddress/prefixlen>] [srcport <src port range>] [dst <dst IPaddress/prefixlen>] [dstport <dst port range>] [state <state>] [state-ttl <ttl>] [logging <log mode>] [<priority>[<base name>]] [enable disable] [ ] <filter name> (1-16, [a-za-z0-9 ]) <action> block pass forward <address> address PolicyRouting <interface> <direct mode> in out in/out <protocol> ip IP tcp TCP tcp-synonly TCP tcp-established TCP udp UDP tcpudp TCP UDP icmp ICMP ipv6-icmp ICMPv6 igmp IGMP ah AH esp ESP <icmp type> ICMP 62

64 any <protocol application> winny Winny (v2) any <src IPaddress/prefixlen> IP <src port range> <dst IPaddress/prefixlen> IP <dst port range> <state> enable disable <ttl> normal <log mode> on off <priority> top bottom above below <base name> enable disable Policy Routing protocol tcp-synonly action block protocol tcp-established action pass 512 IP IP /0 state enable action pass direction out state-ttl normal TTL port filter IPv4 Policy Routing filter direction out Policy Routing interface application winny Policy Routing protocol icmp icmp-type ICMP 63

65 protocol any icmp-type any application any src /0 srcport dst /0 dstport state disable state-ttl normal logging on priority bottom enable 8.2 [ ] filter modify <filter name> [action <action>] [interface <interface>] [direction <direct mode>] [protocol <protocol>] [icmp-type <icmp type>] [application <protocol application>] [src <src IPaddress/prefixlen>] [srcport <src port range>] [dst <dst IPaddress/prefixlen>] [dstport <dst port range>] [state <state>] [state-ttl <ttl>] [logging <log mode>] [enable disable] filter move filter IPv4 8.3 filter delete <filter name>... filter delete all [ ] <filter name> all all 64

66 filter IPv4 8.4 / filter { enable disable } <filter name>... filter { enable disable } all [ ] <enable> <disable> <filter name> all all / filter IPv4 8.5 filter move <filter name> { top bottom } filter move <filter name> { above below } <base name> [ ] <filter name> <base name> top bottom above below filter IPv4 8.6 IPv6 filter6 add <filter name> action <action> interface <interface> direction <direct mode> [protocol <protocol>] [icmp-type <icmp type>] [src <src IPaddress/prefixlen>] [srcport <src port range>] [dst <dst IPaddress/prefixlen>] [dstport <dst port range>] 65

67 [state <state>] [state-ttl <ttl>] [logging <log mode>] [<priority>[<base name>]] [enable disable] [ ] <filter name> (1-16, [a-za-z0-9 ]) <action> block pass <interface> <direct mode> in out in/out <protocol> ip IP tcp TCP tcp-synonly TCP tcp-established TCP udp UDP tcpudp TCP UDP icmp ICMP ipv6-icmp ICMPv6 igmp IGMP ah AH esp ESP <icmp type> ICMP any <src IPaddress/prefixlen> IP <src port range> <dst IPaddress/prefixlen> IP <dst port range> <state> enable disable <ttl> normal <log mode> on off <priority> top 66

68 <base name> enable disable bottom above below / protocol tcp-synonly action block protocol tcp-established action pass 512 IP IP ::/0 state enable action pass direction out state-ttl normal TTL port protocol ipv6-icmp icmp-type ICMP filter6 IPv6 protocol any icmp-type any src ::/0 srcport dst ::/0 dstport state disable state-ttl normal logging on priority bottom enable 8.7 IPv6 filter6 modify <filter name> [action <action>] [interface <interface>] [direction <direct mode>] [protocol <protocol>] [icmp-type <icmp type>] [src <src IPaddress/prefixlen>] [srcport <src port range>] 67

69 [dst <dst IPaddress/prefixlen>] [dstport <dst port range>] [state <state>] [state-ttl <ttl>] [logging <log mode>] [enable disable] [ ] filter6 move filter6 IPv6 8.8 IPv6 filter6 delete <filter name>... filter6 delete all [ ] <filter name> all all filter6 IPv6 8.9 IPv6 / filter6 { enable disable } <filter name>... filter6 { enable disable } all [ ] enable disable <filter name> all all / filter6 IPv6 68

70 8.10 IPv6 filter6 move <filter name> { top bottom } filter6 move <filter name> { above below } <base name> [ ] <filter name> <base name> top bottom above below filter6 IPv6 69

71 9 NAT 9.1 NAT nat static add <private IPaddress> <global IPaddress> [interface <interface-name>] [ ] <private IPaddress> NAT IP () <global IPaddress> IP IP () <interface-name> NAT IP IP NAT 256 interface lan1 9.2 NAT nat static delete <private IPaddress> <global IPaddress> interface <interface-name> nat static delete all [ ] <private IPaddress> NAT IP <global IPaddress> IP IP <interface-name> NAT all NAT NAT all NAT 9.3 NAT IP () nat dynamic add private <private IPaddress> [interface <interface-name>] [ ] <private IPaddress> NAT IP ( ) <interface-name> NAT 70

72 NAT IP nat dynamic add global NAT 8 interface lan1 9.4 NAT IP () nat dynamic add global <global IPaddress> [interface <interface-name>] [ ] <global IPaddress> IP IP () <interface-name> NAT NAT IP IP NAT IP NAT 8 interface lan1 9.5 NAT IP () nat dynamic delete private <private IPaddress> interface <interface-name> [ ] <private IPaddress> NAT IP () <interface-name> NAT IP NAT 9.6 NAT IP () nat dynamic delete global <global IPaddress> interface <interface-name> [ ] <global IPaddress> IP IP () <interface-name> NAT IP NAT IP 71

73 IP 9.7 NAT nat dynamic delete all [ ] all NAT NAT 9.8 NAPT IP () nat napt add private <private IPaddress> [interface <interface-name>] [ ] <private IPaddress > NAPT IP () <interface-name> NAT NAPT IP 8 interface lan1 9.9 NAPT IP nat napt add global <global IPaddress> [interface <interface-name>] [ ] <global IPaddress> NAPT IP IP <interface-name> NAT NAPT IP interface lan NAPT IP () nat napt delete private <private IPaddress> interface <interface-name> nat napt delete private all 72

74 [ ] <private IPaddress> NAPT IP () <interface-name> NAT all NAPT IP IP NAPT IP 9.11 NAPT IP nat napt delete global <global IPaddress> interface <interface-name> nat napt delete global all [ ] <global IPaddress> NAPT IP IP <interface-name> NAT all NAPT IP IP IP NAPT IP IP 9.12 NAPT nat napt delete all [ ] all NAPT NAPT 9.13 NAPT nat snapt add protocol <protocol> listen <listen port> [interface <interface-name>] forward <forward IPaddress> <forward port> [enable disable] nat snapt add default <forward IPaddress> [interface <interface-name>] [ ] <protocol> tcp TCP udp UDP tcpudp TCP, UDP <listen port> IP IP 73

75 default NAPT <interface-name> NAT <forward IPaddress> IP <forward port> IP enable disable IP IP default IP 256 nat napt add global interface lan NAPT nat snapt delete protocol <protocol> listen <listen port> interface <interface-name> nat snapt delete all interface <interface-name> nat snapt delete default [ ] <protocol> tcp TCP udp UDP tcpudp TCP, UDP <listen port> IP IP default NAPT <interface-name> NAT all NAPT NAPT <protocol> <listen port> 74

76 9.15 NAPT / nat snapt { enable disable } protocol <protocol> listen <listen port> [ ] enable disable <protocol> tcp TCP udp UDP tcpudp TCP, UDP <listen port> IP NAPT / 9.16 SIP nat proxy sip add port <port> [protocol <protocol>] [ ] <port> SIP <protocol> tcp TCP udp UDP tcpudp TCP, UDP SIP SIP SIP NAT 4 port 5060 protocol tcpudp 9.17 SIP nat proxy sip delete port <port> [protocol <protocol>] nat proxy sip delete all [ ] <port> SIP <protocol> tcp TCP udp UDP tcpudp TCP, UDP 75

77 all SIP 9.18 NAT nat timeout <time> [ ] <time> ( ) IP IP IP () 900( ) 9.19 NAT nat timeout dynamic { <time> system-default } [ ] <time> ( ) system-default nat timeout <time> NAT IP IP () nat timeout <time> 9.20 NAT nat timeout protocol <protocol> { <time> system-default } [ ] <protocol> tcp-synonly TCP tcp-established TCP udp UDP icmp ICMP <time> ( ) system-default nat timeout <time> IP IP IP ( ) tcp-synonly: nat timeout <time> 76

78 tcp-established: nat timeout <time> udp: nat timeout <time> icmp: nat timeout <time> 9.21 NAT nat logging { on off } [ ] on NAT off NAT NAT off 9.22 Reflection NAT nat reflect add interface <interface-name> [ ] <interface-name> Reflection NAT NAT Reflection NAT Reflection NAT 8 NAT NAPT 9.23 Reflection NAT nat reflect delete interface <interface-name> nat reflect delete interface all [ ] <interface-name> Reflection NAT all Reflection NAT NAT, NAPT 9.24 UPnP / 77

79 nat upnp { on off } [ ] on UPnP off UPnP UPnP / UPnP NAPT Windows Messenger off 9.25 UPnP nat upnp interface <interface> [ ] <interface> LAN PPPoE UPnP NAPT 1 lan1 pppoe0 UPnP NAPT nat upnp interface pppoe0 78

80 10 IPsec 10.1 ipsec security-association proposal add <SAP name> authentication-algorithm <auth algo>,... encryption-algorithm <enc algo>,... [lifetime-of-time { <time> system-default }] [pfs-group { <pfs-group> none }] [ ] <SAP name> (1-16, [a-za-z0-9 ]) <auth algo> AH <enc algo> ESP <time> IKE IPsec <pfs-group> Diffie-Hellman system-default CS-SEIL-510/C lifetime-of-time pfs-group none IKE IPsec IKE 2 8 Diffie-Hellman modp768, modp1024, modp1536 AH hmac-md5, hmac-sha1 ESP 3des, des, blowfish, cast128, aes 32 ipsec IPv4 IPv6 lifetime-of-time d h m d h m 79

81 10.2 [ ] ipsec security-association proposal modify <SAP name> [authentication-algorithm <auth algo>[,<auth algo>...]] [encryption-algorithm <enc algo>[,<enc algo>...]] [lifetime-of-time { <time> system-default }] [pfs-group { <pfs-group> none }] ipsec IPv4 IPv6 IPsec/IKE IPsec/IKE 10.3 ipsec security-association proposal delete <SAP name>... ipsec security-association proposal delete all [ ] <SAP name> all ipsec IPv4 IPv6 IPsec/IKE IPsec/IKE 10.4 ipsec security-association add <SA name> { { tunnel transport } { <start IPaddress> <end IPaddress> <start Interface> <end IPaddress> dynamic auto } tunnel-interface <ipsec Interface> } [to-auth { none ah <spi> <ah auth algorithm> <auth keyphrase> }] [to-encap { esp <spi> <esp algorithm> <esp keyphrase> esp-auth <spi> <esp algorithm> <esp keyphrase> <auth algorithm> <auth keyphrase> }] 80