IP ICMP Redirec

Size: px

Start display at page:

Download "IP ICMP Redirec"

たけなりおおはし
5 years ago
Views:

1 Z D06-08 RGW Ver1.

2 IP ICMP Redirect WEP WEP WEP SSID MAC MAC RIP RIP RIP RIP NAT NAT map NAT bimap...22

3 NAT map-block NAT rdr NAT DHCP DHCP IP DHCP IP DHCP DNS DHCP DNS DHCP DHCP DHCP SNMP SNMP SNMP location SNMP contact SNMP SNMP TRAP syslog syslog syslog syslog SSH SSH SSH SSH telnet http monitor SSH ARP tftp

4 ARP IP DHCP ARP AP SNMP SSH ping DHCP Web IP MAC RIP ARP ICMP Redirect...48

5 SNMP DHCP NAT syslog WEP IP NAT...75

6 LAN telnet SSH bps 8 1 RGW2400/OD RGW2400/OD SSH telnet SSH SSH

7 OS OS OS 1.3. $ > 1.4. telnet login login: admin login: admin<cr> password: xxxxxxxx<cr> (: ) > >administrator<cr> password: xxxxxxxx<cr> (: ) $ SSH SSH

8 TAB ) $ ip? * ip address * ip route add * ip route delete ip $ ip address? usage: ip address Interface Ipaddress Netmask e.g. : $ ip address ep ip address BackSpace 1 Ctrl-A Ctrl-E Ctrl-D Ctrl-U Ctrl-F Ctrl-B Ctrl-K Ctrl-P Ctrl-N

9 passwd hostname ip address ip route add ip route delete ip icmp redirect wireless channel wireless txrate wireless wep encryption wireless wep key use wireless wep key value wireless port wireless network wireless station wireless BSS AP mode wireless ssid wireless macfilter add wireless macfilter delete arp add arp delete rip rip static-supply rip action rip version filter filter add filter delete nat nat add map nat add bimap nat add map-block nat add rdr nat delete dhcp dhcp pool dhcp expire dhcp dns add dhcp dns delete dhcp domain dhcp defaultroute dhcp relay snmp

10 10 snmp community snmp location snmp contact snmp access snmp trap syslog syslog host syslog add syslog delete ssh keygen ssh authentication ssh keyget access telnet access http access monitor access ssh save load load tftp cold start update date show version clear arp

11 11 exit

12 passwd user user user administrator Ctlr-D Web (cold start) hostname hostname hostname $ hostname mypc.mydomain.co.jp IP ip address Interface IPaddress Netmask Interface :ne0 :wi0 IPaddress IP Netmask IP $ ip address wi

13 ip route add Destination Netmask Gateway Destination IP Netmask Gateway IP Netmask $ ip route add $ ip route add default $ ip route add ip route delete Destination Netmask Gateway Destination IP Netmask Gateway IP $ ip route delete $ ip route delete default $ ip route delete ICMP Redirect ip icmp redirect flags flags enable disable ICMP Redirect $ ip icmp redirect enable

14 wireless channel Channel Channel 1-14 (MHz) (MHz) $ wireless channel 3

15 wireless txrate Rate Rate Mbps 9 111Mbps 2 2Mbps Mbps 3 21Mbps Mbps 4 5.5Mbps Mbps Mbps Mbps Mbps Mbps Mbps Mbps 8 11Mbps $ wireless txrate WEP wireless wep encryption flag flag enable disable WEP $ wireless wep encryption enable 5.5M11Mbps WEP WEP wireless wep key use flag flag WEP $ wireless wep key use 1

16 WEP wireless wep key value flag value flag 14 value ASCII(5char) Hex(0x ) WEP Value $ wireless wep key value MyKey wireless port value value 1:IBSS 3:Ad-hoc wireless BSS AP mode AP $ wireless port wireless network value value IBBS 30char. IBBS wireless port 1 IBBS SSID SSID wireless ssid $ wireless network NetBSD_IBSS

17 wireless station value value IBBS 30char. IBBS wireless port 1 IBBS $ wireless station NetBSD_WaveLAN/IEEE_node wireless BBS AP mode flag flag enable: disable: save&restart SSID flag disable save&restart Ad-hoc $ wireless BBS AP mode enable SSID wireless ssid value value SSID( 30char.) SSID SSID BSS AP $ wireless ssid NetBSD_IBSS

18 MAC wireless macfilter add param Param MAC LAN MAC MAC MAC $ wireless macfilter add 11:22:33:44:55: MAC Wireless macfilter delete param param MAC LAN MAC MAC $ wireless macfilter delete 11:22:33:44:55: RIP rip flag flag enable disable RIP $ rip enable RIP rip static-supply flag Flag enable disable RIP $ rip static-supply enable

19 RIP rip action interface action interface action supply listen disable RIP $ rip action wi0 supply RIP rip version interface version interface version ripv2 RIPv2( ) ripv12 RIPv2( )RIPv1 ripv1 RIPv1 RIP $ rip version wi0 ripv filter flag flag enable disable IP $ filter enable

20 filter add number action inout [log level facility.level] [quick] [on interface] [proto proto] [ from [!] address [port] to [!] address [port] ][flags] [with] [keep] [group] Number action block pass inout in RGW out RGW log log syslog levellevel syslog facility level facility syslog faciliy(auth,user,daemon) level syslog level(info,notice,warning,err ) syslog host quick quick on interface on ne0 wi0 lo0 proto tcp/udp udp tcp icmp address any / mask port port{=!= < > <= >= eq ne lt gt le ge} flags TCP FSRPAU proto tcp F=FIN,S=SYN,R=RST,P=PUSH,A=ACK,U=URG with with ipopts IP with short with frag keep keep state keep state group head N N group N N IP $ filter add 100 block out proto tcp from /16 to any port = 80

21 filter delete number number IP $ filter delete NAT nat flag flag enable disable NAT enable Ethernet NAT Ethernet $ nat enable NAT map nat add map number interface address1 -> address2 [portmap proto ports proxy port portname tag/protocol] Number NAT nat add * interface address1 IP 1234/24 address2 IP 1234/24 proto tcp/udp udp tcp ports auto { }:{ } portname ftp tag protocol NAT map nat nat $ nat add map 10 ne /8 -> /32 portmap tcp/udp 1025:65000 $ nat add map 15 ne /8 -> 0/32 proxy port ftp ftp/tcp

22 NAT bimap nat add bimap number interface address1 -> address2 Number NAT nat add * interface address1 IP 1234/24 address2 IP 1234/24 NAT bimap nat nat $ nat add bimap 3 ne /32 -> / NAT map-block nat add map-block number interface address1 -> address2 [ports port] number NAT nat add * interface address1 IP 1234/24 address2 IP 1234/24 port auto NAT mapblock nat nat $ nat add map-block 2 ne /8 -> /24 ports auto

23 NAT rdr nat add rdr number interface address1 port port -> address2 port port number NAT nat add * interface address1 IP 1234/24 address2 IP port proto tcp/udp tcp udp ( tcp) NAT rdr nat nat $ nat add rdr 5 ne /32 port > port NAT nat delete number number NAT NAT $ nat delete 3

24 DHCP dhcp flag [interface] Flag enable disable interface DHCP ne0 disable DHCP IP 39 $ dhcp enable DHCP IP dhcp pool ipaddres1 ipaddress2 ipaddress1 IP ipaddress2 IP DHCP IP $ dhcp pool DHCP IP dhcp expire period Period IP DHCP IP $ dhcp expire DHCP DNS dhcp dns add ipaddress ipaddress DNS IP DHCP DNS 2 $ dhcp dns add DHCP DNS dhcp dns delete ipaddress ipaddress DNS IP DHCP DNS $ dhcp dns delete

25 DHCP dhcp domain domainname domainname DHCP domainname $ dhcp domain root-hq.com DHCP dhcp defaultroute [defaultroute] defaultroute IP DHCP defaultroute $ dhcp defaultroute DHCP dhcp relay flag flag IP DHCP IP disable DHCP $ dhcp relay SNMP snmp flag flag enable disable SNMP $ snmp enable SNMP snmp community name name SNMP 31 $ snmp community secret

26 SNMP location snmp location str str SNMP location 255 $ snmp location Nishikata Bunkyo-ku Tokyo Japan SNMP contact snmp contact str str SNMP contact 255 $ snmp contact Tarou Yamada<taro@root-hq.com> SNMP snmp access [ipaddress network] ipaddress IP all network SNMP RGW IP $ snmp access SNMP TRAP snmp trap mode flag [community [port]] mode v1 v2 inform v1:snmp v1 v2:snmp v2 inform:notification flag IP trap IP disable community trap disable port 162 disable snmp trap trap $ snmp trap v root

27 syslog syslog flag flag enable disable syslog $ syslog enable syslog syslog host ipaddress ipaddress IP syslog IP syslog IP $ syslog host syslog syslog add facility level facility kern user auth authpriv syslog cron ftp uucp local0~7 daemon * level emerg alert crit err warning notice info debug none * syslog $ syslog add * info syslog syslog delete facility level facility kern user auth authpriv syslog cron ftp uucp local0~7 daemon * level emerg alert crit err warning notice info debug none * syslog $ syslog delete kern crit

28 SSH ssh keygen version [overwrite] version v1: SSHv1 v2: SSHv2 v12:sshv1sshv2 overwrite SSH v1 RGW v2v12 Ver $ ssh keygen v SSH ssh authentication way way passwd : key : both : SSH both $ ssh authentication key SSH ssh keyget version URL version v1: SSHv1 v2: SSHv2 URL URL RGW v2 Ver $ ssh keyget v1 ~rgw/identity.pub

29 SSH ssh version version version v1: SSHv1 v2: SSHv2 v12: RGW Ver $ ssh version v12

30 telnet access telnet [ipaddress network] ipaddress IP all network telnet RGW IP http access http [ipaddress network] ipaddress IP all network http RGW IP monitor access monitor [ipaddress network] ipaddress IP all network monitor RGW IP monitor RGW Windows HP

31 SSH access ssh [ipaddress network] ipaddress IP all network ssh RGW IP save static ARP arp add ipaddress macaddress ipaddress IP macaddress MAC static ARP $ arp add :22:33:44:55:66

32 ARP arp delete ipaddress ipaddress IP IP ARP $ arp delete tftp load tftp ipaddress file ipaddress IP disable file disable tftp save tftp tftp get default route cold start update url url URL

33 date yyyy/mm/dd HH:MM yyyy mm dd HH MM $ date 2000/12/24 12: restart reboot

34 ARP clear arp ARP show hostname IP show ip address IP IP show ip route DHCP show dhcp DHCP show filtering show setup ARP show arp ARP

35 show uptime show version OS show date show wireless signal strength show wireless status show setup AP show wireless AP AP AP SNMP show snmp SNMP

36 SSH show ssh SSH show setup

37 show config ping ping IPaddress IPaddress IP IP ICMP Echo quit exit administrator help command command history

38 38 telnet SSH WARNING:another administrator is still alive. ATTENTION:Two or more administrator are active now!!! restart Web

39 DHCP DHCP DHCP $ dhcp enable 1.8.2

40 40 2. Web 2.1 RGW2400 IP Web user administrator Web Internet Explorer3.0 Netscape Navigator4.0

41 IP IP IP IP

42 WEP x M11Mbps WEP

43 MAC MAC MAC MAC

45 IP

46 RIP RIP

47 ARP ARP ARP ARP IP MAC ARP IP ARP

48 ICMP Redirect ICMP Redirect ICMP

49 SNMP SNMP

50 DHCP A DHCP DHCP DHCP DHCP IP DNS DHCP DNSIP

51 51 B DHCP Relay DHCPRelay DHCPRelay DHCP IP

52 A NAT NAT

53 53 B Web

54 54 C

55 NAT A NAT

56 56 NAT NAT NAT BACK

57 57 B NAT NAT NAT NAT NAT # NAT

58 RGW2400

60 A PING PING IP PING

61 61 B TRACEROUTE TRACEROUTE IP 20 IP

62 syslog A syslog syslog syslog IP syslog BACK syslog

63 63 syslog syslog

64 telnetweb http monitor ssh snmp IP IP

65 A B RGW2400 C Web 2 D RGW2400 Web IP RGW2400 E RGW2400 F Web hostname rgw ip address ne ip address wi ip route delete default ip route add default wireless channel 3

66 66 wireless txrate 11 wireless wep encryption 1 wireless wep key use 1 wireless wep key value 1 0x rip disable snmp enable snmp community public snmp location Root Inc. 2F KS Bldg Nishikata Bunkyo-ku Tokyo Japan snmp contact Phone: support@root-hq.com dhcp disable filter disable nat disable G H TFTP TFTP TFTP IP RGW2400 RGW2400 IP RGW2400

67 67 3. admin (CLI) admin (CLI) (CLI) admin user WebIF (CLI) WebIF administrator WebIF (CLI) WebIF rgw IP / / RIP SNMP trap DHCP IP Filter MAC NAT SYSLOG LoadTftp SSH SSHv1 SSH SSH SSH Ad-Hoc

68 68 4. RGW RGW Ad-hoc Ad-hoc Ad-hoc RGW Ad-hoc wireless BSS AP mode enable save&reboot save RGW wireless BSS AP mode enable save ( ) reboot ( ) save ( ) ( save

69 69 ) wireless BSS AP mode disable Ah-hoc Ad-hoc wireless BSS AP mode disable save ( ) reboot ( ) save ( ) ( 4save ) Ah-hoc wireless port RGW MAC IP wireless txrate monitor Ad-hoc WEP RGW MPDU WEPWired Equivalent Privacy RGW WEP WEP

70 RGW Ad-hoc IP MAC IP ICMP redirect MAC IP MAC RGW Ethernet RGW RGW

71 IP IP filter add number action inout [log level facility.level] [quick] [on interface] [proto proto] [ from [!] address [port] to [!] address [port]][flags] [with] [keep] [group] RGW IP RGW IP ( ) RGW action pass block inout in out RGW RGW RGW 10 block pass 11 pass= quick quick quick RGW

72 72 block quick on interface wi0( ) ne0(ethernet ) lo0( ) RGW lo0 IP lo block RGW on interface /16 block (wi0) / /24 pass pass Ethernet block 23 Ethernet proto tcp/udp, tcp, udp icmp proto

73 73 Ethernet tcp udp pass Ethernet icmp block from to IP any port TCP/UDP port TCP UDP port TCP pass flags TCP F(FIN),S(SYN),R(RST),P(PUSH),A(ACK),U(URG) flags TCP with ipopts, short, frag IP IP short IP frag IP IP block keep state keep state TCP RGW

74 74 pass UDP keep state UDP IP IP UDP pass icmp keep state icmp reply pass 70 Ethernet udp pass udp pass 71 Ethernet S tcp pass pass 72 F(FIN),U(URG),P(PSH) Ethernet block head group head group head quick group head group

75 75 head group quick block pass (wi0) block head group head group NAT pivate global nat add map nnn wi /24 -> /32

76 76 IP /24 RGW global TCP/UDP portmap nat add map nnn wi /24 -> /32 portmap tcp/udp 20000:30000 TCP UDP IP portmap auto NAT RGW NAT ftp proxy passive mode NAT NAT /24 global IP NAT icmp IP global ping

77 77 NAT global NAT NAT bimap spoof rdr spoof NAT NAT rdr RGW NAT IP RGW IP NAT

SRT/RTX/RT設定例集

SRT/RTX/RT設定例集 Network Equipment Rev.6.03, Rev.7.00, Rev.7.01 Rev.8.01, Rev.8.02, Rev.8.03 Rev.9.00, Rev.10.00, Rev.10.01 2 3 4 5 6 1 2 3 1 2 3 7 RTX1000 RTX1000 8 help > help show command > show command console character