Biz Box ルータ 「N1200」 コマンドリファレンス

Transcription

1 1

2 2

3 3

4 4

5 5

6 6

7 7

8 8

9 9

10 10

11 11

12 12

13 13

14 14

15 15

16 16 A account threshold account threshold pp administrator , 232 administrator password administrator password encrypted alarm entire alarm http revision-up alarm http upload alarm sd alarm startup alarm usbhost auth user auth user attribute auth user group auth user group attribute B bgp aggregate bgp aggregate filter bgp autonomous-system bgp configure refresh bgp export bgp export aspath bgp export filter bgp import bgp import filter bgp log bgp neighbor bgp preference bgp router id bgp use C clear account clear account pp clear arp clear diagnosis config port clear dns cache clear inarp clear ip dynamic routing clear ipv6 dynamic routing clear ipv6 neighbor cache clear log clear nat descriptor dynamic clear nat descriptor interface dynamic clear nat descriptor interface dynamic pp clear nat descriptor interface dynamic tunnel clear switching-hub macaddress clear url filter clear url filter pp clear url filter tunnel cold start connect console character , 43 console columns console info console lines console prompt cooperation , 185 cooperation bandwidth-measuring remote cooperation load-watch control cooperation load-watch remote cooperation load-watch trigger cooperation port copy config copy exec D date delete config delete exec description dhcp client client-identifier dhcp client client-identifier pool dhcp client client-identifier pp dhcp client hostname dhcp client hostname pool dhcp client hostname pp dhcp client option dhcp client option pool dhcp client option pp dhcp convert lease to bind dhcp duplicate check dhcp manual lease dhcp manual release dhcp relay select dhcp relay server dhcp relay threshold dhcp scope dhcp scope bind dhcp scope lease type dhcp scope option dhcp server rfc2131 compliant dhcp service diagnose config port access diagnose config port map diagnosis config port history-num diagnosis config port max-detect disconnect , 238 disconnect ip connection disconnect ipv6 connection disconnect user dns cache max entry dns cache use dns domain dns host dns notice order dns private address spoof dns server dns server dhcp dns server pp dns server select dns service dns srcport dns static dns syslog resolv E ethernet filter ethernet interface filter execute batch exit external-memory auto-search time

17 17 external-memory batch filename external-memory boot permit external-memory config filename external-memory config filename off external-memory exec filename external-memory exec filename off external-memory statistics filename prefix external-memory syslog filename F fr cir fr compression use fr congestion control fr de fr dlci fr inarp fr lmi fr pp dequeue type H heartbeat pre-shared-key heartbeat receive heartbeat send help http revision-down permit http revision-up go http revision-up permit http revision-up proxy http revision-up timeout http revision-up url http upload http upload go http upload permit http upload proxy http upload retry interval http upload timeout http upload url httpd host httpd listen httpd service httpd timeout I interface reset interface reset pp ip arp timer ip filter ip filter directed-broadcast ip filter dynamic ip filter dynamic timer ip filter set ip filter source-route ip flow timer ip forward filter ip fragment remove df-bit filter ip host ip icmp echo-reply send ip icmp echo-reply send-only-linkup ip icmp error-decrypted-ipsec send ip icmp log ip icmp mask-reply send ip icmp parameter-problem send ip icmp redirect receive ip icmp redirect send ip icmp time-exceeded send ip icmp timestamp-reply send ip icmp unreachable send ip implicit-route preference ip interface address ip interface arp queue length ip interface arp static ip interface dhcp lease time ip interface dhcp retry ip interface forward filter ip interface intrusion detection ip interface intrusion detection notice-interval...78 ip interface intrusion detection repeat-control ip interface intrusion detection report ip interface intrusion detection threshold ip interface mtu ip interface nat descriptor ip interface ospf area ip interface ospf neighbor ip interface proxyarp ip interface proxyarp vrrp ip interface rip auth key ip interface rip auth key text ip interface rip auth type ip interface rip filter ip interface rip force-to-advertise ip interface rip hop ip interface rip receive ip interface rip send ip interface rip trust gateway ip interface secondary address ip interface secure filter ip interface secure filter name ip interface tcp mss limit ip interface vrrp ip interface vrrp shutdown trigger ip interface wol relay ip keepalive ip local forward filter ip pp address ip pp forward filter ip pp intrusion detection ip pp intrusion detection notice-interval ip pp intrusion detection repeat-control ip pp intrusion detection report ip pp intrusion detection threshold ip pp mtu ip pp nat descriptor ip pp ospf area ip pp ospf neighbor ip pp remote address ip pp remote address pool ip pp rip auth key ip pp rip auth key text ip pp rip auth type ip pp rip backup interface ip pp rip connect interval ip pp rip connect send ip pp rip disconnect interval ip pp rip disconnect send ip pp rip filter ip pp rip force-to-advertise ip pp rip hold routing ip pp rip hop ip pp rip receive

18 18 ip pp rip send ip pp rip trust gateway ip pp secure filter ip pp secure filter name ip pp tcp mss limit ip route ip route change log ip routing ip routing process ip simple-service ip stealth ip tos supersede ip tunnel address ip tunnel forward filter ip tunnel intrusion detection ip tunnel intrusion detection notice-interval ip tunnel intrusion detection repeat-control ip tunnel intrusion detection report ip tunnel intrusion detection threshold ip tunnel mtu ip tunnel nat descriptor ip tunnel ospf area ip tunnel ospf neighbor ip tunnel remote address ip tunnel rip auth key ip tunnel rip auth key text ip tunnel rip auth type ip tunnel rip filter ip tunnel rip force-to-advertise ip tunnel rip hop ip tunnel rip receive ip tunnel rip send ip tunnel rip trust gateway ip tunnel secure filter ip tunnel secure filter name ip tunnel tcp mss limit ipsec auto refresh ipsec ike always-on ipsec ike duration ipsec ike encryption ipsec ike esp-encapsulation ipsec ike group ipsec ike hash ipsec ike keepalive log ipsec ike keepalive use ipsec ike local address ipsec ike local id ipsec ike local name ipsec ike log ipsec ike mode-cfg address ipsec ike mode-cfg address pool ipsec ike nat-traversal ipsec ike negotiate-strictly ipsec ike payload type ipsec ike pfs ipsec ike pre-shared-key ipsec ike queue length ipsec ike remote address ipsec ike remote id ipsec ike remote name ipsec ike restrict-dangling-sa ipsec ike retry ipsec ike send info ipsec ike xauth myname ipsec ike xauth request ipsec ipcomp type ipsec log illegal-spi ipsec refresh sa ipsec sa delete ipsec sa policy ipsec transport ipsec tunnel ipsec tunnel outer df-bit ipsec use ipv6 filter ipv6 filter dynamic ipv6 icmp echo-reply send ipv6 icmp echo-reply send-only-linkup ipv6 icmp error-decrypted-ipsec send ipv6 icmp log ipv6 icmp packet-too-big send ipv6 icmp parameter-problem send ipv6 icmp redirect receive ipv6 icmp redirect send ipv6 icmp time-exceeded send ipv6 icmp unreachable send ipv6 interface address ipv6 interface dad retry count ipv6 interface mld ipv6 interface mld static ipv6 interface mtu ipv6 interface prefix ipv6 interface rip filter ipv6 interface rip hop ipv6 interface rip receive ipv6 interface rip send ipv6 interface rip trust gateway ipv6 interface rtadv send ipv6 interface secure filter ipv6 interface tcp mss limit ipv6 max auto address ipv6 nd ns-trigger-dad ipv6 pp address ipv6 pp dad retry count ipv6 pp mld ipv6 pp mld static ipv6 pp mtu ipv6 pp prefix ipv6 pp rip connect interval ipv6 pp rip connect send ipv6 pp rip disconnect interval ipv6 pp rip disconnect send ipv6 pp rip filter ipv6 pp rip hold routing ipv6 pp rip hop ipv6 pp rip receive ipv6 pp rip send ipv6 pp rip trust gateway ipv6 pp rtadv send ipv6 pp secure filter ipv6 pp tcp mss limit ipv6 prefix ipv6 rh0 discard ipv6 rip use ipv6 route ipv6 routing ipv6 routing process ipv6 source address selection rule ipv6 stealth ipv6 tunnel address

19 19 ipv6 tunnel mld ipv6 tunnel mld static ipv6 tunnel prefix ipv6 tunnel rip filter ipv6 tunnel rip receive ipv6 tunnel rip send ipv6 tunnel secure filter ipv6 tunnel tcp mss limit isdn arrive permit isdn auto connect isdn call block time isdn call permit isdn call prohibit time isdn callback mscbcp user-specify isdn callback permit isdn callback permit type isdn callback request isdn callback request type isdn callback response time isdn callback wait time isdn disconnect input time isdn disconnect interval time isdn disconnect output time isdn disconnect policy isdn disconnect time isdn fast disconnect time isdn forced disconnect time isdn local address isdn piafs arrive isdn piafs call isdn piafs control isdn remote address isdn remote call order isdn terminator L lan backup lan backup recovery time lan keepalive interval lan keepalive log lan keepalive use lan port-mirroring lan shutdown lan type leased keepalive down less config less config list less config pp less config tunnel less exec list less file list less log line type , 58 login password login password encrypted login timer , 49 login user M mail notify mail notify status exec mail server name mail server pop mail server smtp mail server timeout mail template N nat descriptor address inner nat descriptor address outer nat descriptor ftp port nat descriptor log nat descriptor masquerade incoming nat descriptor masquerade port range nat descriptor masquerade remove df-bit nat descriptor masquerade rlogin nat descriptor masquerade session limit nat descriptor masquerade static nat descriptor masquerade unconvertible port..168 nat descriptor sip nat descriptor static nat descriptor timer nat descriptor type nslookup ntpdate O operation button function download operation execute batch permit operation external-memory download permit operation http revision-up permit ospf area ospf area network ospf area stubhost ospf configure refresh ospf export filter ospf export from ospf ospf import filter ospf import from ospf log ospf merge equal cost stub ospf preference ospf router id ospf use ospf virtual-link P ping ping pp always-on pp auth accept , 155 pp auth multi connect prohibit pp auth myname pp auth request , 155 pp auth username pp backup pp backup pp pp backup recovery time pp backup tunnel pp bind , 154 pp disable , 237 pp enable , 237 pp encapsulation pp keepalive interval pp keepalive log pp keepalive use pp name pp select

20 20 ppp bacp maxconfigure ppp bacp maxfailure ppp bacp maxterminate ppp bacp restart ppp bap maxretry ppp bap restart ppp ccp maxconfigure ppp ccp maxfailure ppp ccp maxterminate ppp ccp no-encryption ppp ccp restart ppp ccp type , 154 ppp chap maxchallenge ppp chap restart ppp ipcp ipaddress ppp ipcp maxconfigure ppp ipcp maxfailure ppp ipcp maxterminate ppp ipcp msext ppp ipcp remote address check ppp ipcp restart ppp ipcp vjc ppp ipv6cp use ppp lcp acfc ppp lcp magicnumber ppp lcp maxconfigure ppp lcp maxfailure ppp lcp maxterminate ppp lcp mru ppp lcp pfc ppp lcp restart ppp lcp silent ppp mp control ppp mp divide ppp mp interleave ppp mp load threshold ppp mp maxlink ppp mp minlink ppp mp timer ppp mp use ppp mscbcp maxretry ppp mscbcp restart ppp pap maxauthreq ppp pap restart pppoe access concentrator pppoe auto connect pppoe auto disconnect pppoe disconnect time pppoe invalid-session forced close pppoe padi maxretry pppoe padi restart pppoe padr maxretry pppoe padr restart pppoe service-name pppoe tcp mss limit pppoe use pptp hostname pptp keepalive interval pptp keepalive log pptp keepalive use pptp service pptp service type pptp syslog pptp tunnel disconnect time pptp window size Q queue class filter queue interface class control queue interface class filter list queue interface class property queue interface default class queue interface length queue interface type queue pp class filter list queue pp class property queue pp default class queue pp length queue pp type queue tunnel class filter list quit R radius account radius account port radius account server radius auth radius auth port radius auth server radius retry radius secret radius server rdate remote setup remote setup accept restart , 237 rip filter rule rip preference rip timer rip use S save , 233 schedule at sd use security class set-default-config set-default-exec show , 35, 36 show account show account pp show arp show command show config show config list show config pp show config tunnel show diagnosis config port access show diagnosis config port map show dlci show environment show exec list show file list show ip connection show ip connection pp show ip connection tunnel show ip intrusion detection show ip intrusion detection pp show ip intrusion detection tunnel show ip rip table

21 21 show ip route show ip secure filter show ip secure filter pp show ip secure filter tunnel show ipsec sa show ipsec sa gateway show ipv6 address show ipv6 address pp show ipv6 address tunnel show ipv6 connection show ipv6 connection pp show ipv6 connection tunnel show ipv6 neighbor cache show ipv6 rip table show ipv6 route show log show nat descriptor address show nat descriptor interface address show nat descriptor interface address pp show nat descriptor interface address tunnel show nat descriptor interface bind show nat descriptor interface bind pp show nat descriptor interface bind tunnel show nat descriptor masquerade port summary.248 show sshd public key show status show status backup show status bgp neighbor show status cooperation show status dhcp show status dhcpc show status external-memory show status heartbeat show status ip keepalive show status ipv6 mld show status mail service show status ospf show status packet-buffer show status pp show status pptp show status qos show status remote setup show status sd show status switching-hub macaddress show status tunnel show status upnp show status usbhost show status user show status vlan show status vrrp show techinfo show url filter show url filter pp show url filter tunnel snmp community read-only snmp community read-write snmp display ipcp force snmp host snmp local address snmp syscontact snmp syslocation snmp sysname snmp trap community snmp trap enable snmp snmp trap host snmp trap link-updown separate-l2switch-port..162 snmp trap send linkdown snmp trap send linkdown pp snmp trap send linkdown tunnel snmp yrifppdisplayatmib snmp yriftunneldisplayatmib sntpd host sntpd service speed speed pp sshd client alive sshd host sshd host key generate sshd listen sshd service sshd session statistics syslog debug syslog execute command syslog facility syslog host syslog info syslog local address syslog notice syslog srcport system led brightness system packet-buffer system temperature threshold T tcp log telnet telnetd host telnetd listen telnetd service telnetd session tftp host , 49 time timezone traceroute traceroute tunnel backup tunnel backup pp tunnel backup tunnel tunnel disable tunnel enable tunnel encapsulation , 154 tunnel endpoint address , 154 tunnel endpoint name tunnel name tunnel select tunnel template U upnp external address refer upnp external address refer pp upnp port mapping timer upnp port mapping timer type upnp syslog upnp use url filter url filter log url filter port url filter reject

22 22 url filter use url interface filter url pp filter url tunnel filter usbhost use user attribute V vlan interface 802.1q vlan port mapping W wins server wol send

23 Bold face Italic face 1.2 lan1, lan2, lan3 lan1/1, lan1/2,..., lan1/32 vlan1, vlan2,..., vlan8 bri1 loopback1, loopback2,... loopback9 null 1.3 no no show config no show config no no

24 cold start ip lan1 address /24 dhcp service server dhcp server rfc2131 compliant except remain-silent dhcp scope /24

25

26 console character administrator pp disable disconnect pp enable save login timer save cold start

27

28 28 help show command administrator

29 29 save quit quit 2.1.3

30 30 help show command administrator save quit quit remote setup

31 login user sshd host key generate sshd service 2.3 line type restart

32 tftp host 2.3.2

33 console lines console lines infinity SPACE ENTER RETURN q Ctrl-C show config show config list show config pp show file list show log less config less config list less config pp less file list less log

34 34 {n} f {n} Ctrl-F {n} SPACE {n} b {n} Ctrl-B {n} j {n} Ctrl-J {n} Ctrl-E {n} Ctrl-M {n} ENTER {n} RETURN {n} k {n} Ctrl-K {n} y {n} Ctrl-Y {n} Ctrl-P {n} d {n} Ctrl-D {n} u {n} Ctrl-U {n} g {n} G r Ctrl-R Ctrl-L q Ctrl-C show [...] grep [-i] [-v] [-w] pattern...pattern...pattern...pattern pattern

35 35 show pattern pattern pattern pattern pattern pattern pattern. a.b aab, axb, a-b? b?c ac, abc * ab*c ac, abc, abbc, abbbbbbbbc + ab+c abc, abbc, abbbbbbbbc ab cd abd, acd [ ] a[bc]d abd, acd [^ ] a[^bc]d aad, axd ^ ^abc abc $ abc$ abc ( ) (ab cd) ab, cd a.c a.c less pattern show config grep ip grep lan show config grep ip less show [...] less show q b j, ENTER k g G /? n N

36 show [...] > name name filename filename filename filename show '>' ' ' ' ' # show log > usb1:log.txt > usb2:log.txt # show log >> usb1:log.txt # ip filter 1 pass * * > usb1:filter.txt # less log > usb1:log.txt # show log > usb1:log.txt # show config > usb1:config.txt # show status pp 1 > sd1:status_pp1.txt # show techinfo > sd1:techinfo.txt

37 help 3.2 show command

38 login password 4.2 login password encrypted login password 4.3 administrator password 4.4 administrator password encrypted administrator password

39 login user user [password] login user user encrypted password no login user user [password] user password password syslog execute command syslog execute command clear log 4.6 user attribute [user] attribute=value [attribute=value...] no user attribute [user...] user attribute=value attribute value administrator on administrator administrator off connection off all serial telnet ssh remote http host any multi-session on off login-timer , clear

40 40 user user off exit off all off off login timer administrator = on connection = serial,telnet,remote,ssh,http host = any multi-session = on login-timer = 300

41 disconnect user user [/connection [no]] disconnect user [user] /connection [no] user connection telnet, serial, remote, ssh, http no show status user user # disconnect user test # disconnect user /telnet 4.8 security class level forget [telnet] no security class [level forget telnet] level forget on off telnet on telnet off telnet remote setup accept remote setup level = 1 forget = on telnet = off 4.9 timezone timezone no timezone [timezone] timezone jst utc jst

42 date date date...yyyy-mm-dd yyyy/mm/dd 4.11 time time time...hh:mm:ss 4.12 rdate host [syslog] host xxx.xxx.xxx.xxx xxx syslog 4.13 ntpdate ntp_server [syslog] ntp_server xxx.xxx.xxx.xxx xxx syslog rdate syslog 4.14 console prompt prompt no console prompt [prompt] prompt

43 console character code no console character [code] code ascii sjis euc sjis 4.16 console columns col no console columns [col] col console lines lines no console lines [lines] lines infinity console info info no console info [info] info on off off 4.19 syslog host host no syslog host [host] host syslog debug on

44 syslog facility facility no syslog facility [facility] facility user...1 local0..local user 4.21 syslog notice notice no syslog notice [notice] notice on off off 4.22 syslog info info no syslog info [info] info on off on 4.23 syslog debug debug no syslog debug [debug] debug on off debug on syslog host off off 4.24 syslog local address address no syslog local addrress [address] address

45 syslog srcport port no syslog srcport [port] port syslog execute command switch no syslog execute command [switch] switch off 4.27 telnetd service service no telnetd service service on off on 4.28 telnetd listen port no telnetd listen port

46 telnetd host ip_range [ip_range...] no telnetd host ip_range any none any 4.30 telnetd session num no telnetd session num system temperature threshold t1 t2 no system temperature threshold t1 t2 t1 t2 t1 t2 t1 = 75, t2 = ip routing process process no ip routing process process fast normal fast 4.33 lan shutdown interface [port...] interface port

47 lan port-mirroring interface mirror direction port... [direction port...] no lan port-mirroring interface interface mirror direction in out port # lan port-mirroring lan1 4 in 1 # lan port-mirroring lan1 4 in 1 out lan type interface_with_swhub speed [port] [speed [port]...] [option=value...] lan type interface_with_swhub option=value lan type interface_without_swhub speed [option=value...] lan type interface_without_swhub option=value no lan type interface [...] interface_with_swhub interface_without_swhub interface speed auto 1000-fdx 100-fdx 100-hdx 10-fdx 10-hdx auto port option=value mtu auto-crossover on off macaddress-aging on off divide-network split-into-split_pattern off speed-downshift on off

48 48 mtu mtu ip mtu ipv6 mtu mtu mtu ip mtu ipv6 mtu mtu ip mtu ipv6 mtu mtu mtu clear switching-hub macaddress vlan port mapping split_pattern

49 49 speed = auto mtu = 1500 auto-crossover = on macaddress-aging = on port-based-option = off speed-downshift=on # lan type lan1 100-fdx 1 2 # lan type lan1 port-based-option=split-into-123:456:78 # lan type lan1 port-based-option=split-into-123: login timer time no login timer [time] time clear clear tftp host host no tftp host [host] host any none none none

50 ip interface wol relay relay no ip interface wol relay interface relay broadcast unicast off broadcast unicast broadcast unicast off ip filter directed-broadcast off 4.39 description id description no description id [description] description interface description no description interface [description] id interface description interface show config show status show config console character

51 tcp log switch [src_addr[/mask] [dst_addr[/mask]] [tcpflag[src_port_list [dst_port_list]]]] no tcp log [...] switch src_addr dst_addr src_addr mask src_addr dst_addr tcpflag tcp 6 tcpsyn - tcpfin - tcprst - established - src_port_list ftp 20,21 ftpdata 20 telnet 23 smtp 25 domain 53 gopher 70 finger 73 www 80 pop3 110 sunrpc 111 ident 113 ntp 123 nntp 119 snmp 161 syslog 514 printer 515 talk 517 route 520 uucp 540

52 52 dst_port_list src_port_list off 4.41 http revision-up permit permit no http revision-up permit [permit] permit on 4.42 http revision-up url url no http revision-up url [url] url 4.43 http revision-up proxy proxy_server [port] no http revision-up proxy [proxy_server [port]] proxy_server port 4.44 http revision-up timeout time no http revision-up timeout [time] time 30

53 http revision-down permit permit no http revision-down permit [permit] permit off 4.46 operation http revision-up permit permit no operation http revision-up permit [permit] permit off 4.47 sshd service service no sshd service [service] service on off off 4.48 sshd listen port no sshd listen [port] port listen listen 22

54 sshd host ip_range [ip_range...] no sshd host [ip_range...] ip_range any none any 4.50 sshd session num no sshd session [num] num sshd host key generate [seed] no sshd host key generate [seed] seed seed seed seed seed sshd host key generate seed seed

55 sshd client alive switch [interval [count]] no sshd client alive [switch...] switch on off interval count interval count switch... off interval count system packet-buffer group parameter=value [parameter=value...] no system packet-buffer group [parameter=value...] group small, middle, large, huge parameter max-buffer max-free min-free buffer-in-chunk init-chunk value max-buffer max-free max-free min-free max_free buffer-in-chunk max_free buffer-in-chunk init-chunk max-free min-free init-chunk max-buffer buffer-in-chunk max-free min-free init-chunk max-free min-free init-chunk max-buffer max-free min-free buffer-in-chunk init-chunk # system packet-buffer small max-buffer=1000 max-free=500 # system packet-buffer large min-free=100

56 alarm entire switch no alarm entire switch on off on 4.55 alarm usbhost switch no alarm usbhost switch on off on 4.56 alarm sd switch no alarm sd [switch] switch on off on 4.57 alarm startup switch [pattern] no alarm startup [switch] switch on off pattern off 4.58 alarm http revision-up switch no alarm http revision-up [switch] switch on off on

57 system led brightness mode no system led brightness [mode] mode 0 1 0

58 line type interface line [channels] no line type interface line [channels] interface line isdn, isdn-ntt l64 l128 channels...line isdn isdn-ntt 1b 2b interface reset channels 1b line = isdn channels = 2b isdn local address interface isdn_num[/sub_address] isdn local address interface /sub_address no isdn local address interface interface isdn_num sub_address isdn terminator interface terminator no isdn terminator interface [terminator] interface terminator on off ON OFF on off on pp bind interface [interface] no pp bind [interface] interface

59 account threshold [interface] yen account threshold pp yen no account threshold interface yen no account threshold [yen] no account threshold pp [yen] interface yen off show account account threshold interface account threshold pp isdn forced disconnect time clear account schedule at clear account off isdn piafs arrive arrive no isdn piafs arrive [arrive] arrive on off on isdn piafs control switch no isdn piafs control switch call both arrive switch call both arrive call # pp select 2 # isdn piafs control call # pp enable 2

60 isdn piafs call speed [64kmode] no isdn piafs call [speed [64kmode]] speed off 32k 64k 64kmode guarantee best-effort speed off 32k 64k speed 64k 64kmode 64kmode guarantee 64kmode best-effort off pp always-on switch time no pp always-on switch on off time time switch on time time time off isdn remote address call_arrive isdn_num [/sub_address] [isdn_num_list] isdn remote address call_arrive isdn_num [isdn_num_list] no isdn remote address call_arrive [isdn_num [/sub_address] [isdn_num_list]] call_arrive call arrive isdn_num sub_address isdn_num_list isdn remote call order

61 isdn auto connect auto no isdn auto connect [auto] auto on off on isdn remote call order order no isdn remote call order [order] order round serial isdn remote address call round isdn remote address call serial round serial round serial isdn arrive permit arrive [vrrp interface vrid[slave]] no isdn arrive permit [arrive] arrive on off interface vrid on slave slave isdn arrive permit isdn call permit off on

62 isdn call permit permit no isdn call permit [permit] permit on off isdn arrive permit isdn call permit off on isdn call block time time no isdn call block time [time] time isdn call prohibit time isdn forced disconnect time isdn call prohibit time time no isdn call prohibit time [time] time isdn call block time isdn callback request callback_request no isdn callback request [callback_request] callback_request on off off isdn callback permit callback_permit no isdn callback permit [callback_permit] callback_permit on off off

63 isdn callback request type type no isdn callback request type [type] type yamaha mscbcp yamaha isdn callback permit type type1 [type2] no isdn callback permit type [type1 [type2]] type1, type2 yamaha mscbcp type1 = yamaha type2 = mscbcp isdn callback mscbcp user-specify specify no isdn callback mscbcp user-specify [specify] specify on off off off isdn callback response time type time type 1b time time = isdn callback wait time time no isdn callback wait time [time] time

64 isdn disconnect policy type no isdn disconnect policy [type] type 1 2 isdn disconnect time isdn disconnect input time isdn disconnect output time isdn disconnect interval time 1 # isdn disconnect policy 2 # isdn disconnect interval time isdn disconnect time time no isdn disconnect time [time] time off X isdn disconnect input time IN isdn disconnect output time OUT X>IN X>OUT isdn fast disconnect time time no isdn fast disconnect time [time] time off isdn auto connect off 20

65 isdn forced disconnect time time no isdn forced disconnect time [time] time off isdn call block time off isdn disconnect input time time no isdn disconnect input time [time] time off isdn disconnect output time time no isdn disconnect output time [time] time off 120

66 isdn disconnect interval time unit watch spare no isdn disconnect interval time [unit watch spare] unit off watch off spare off unit unit unit watch spare watch spare watch spare unit = 180 watch = 6 spare = 2 watch spare unit # isdn disconnect policy 2 # isdn disconnect interval time

67 67 6. pp encapsulation fr dlci fr lmi show dlci fr inarp ip pp address fr compression use pp encapsulation fr fr lmi fr inarp fr congestion control fr pp dequeue type fr dlci fr dlci fr dlci auto fr dlci auto fr dlci auto 6.1 pp encapsulation type no pp encapsulation [type] type ppp fr ppp

68 fr dlci dlci_num no fr dlci [dlci_num] dlci_num auto auto fr lmi off auto # fr dlci fr cir dlci=dlci_num cir [slowstart-idle=idle] [bc=bc_size] [be=be_size] [s=step_count] no fr cir dlci=dlci_num dlci_num cir idle bc_size be_size step_count idle = 20 bc=be = 7000 s=cir/bc_size/be_size 6.4 fr lmi lmi no fr lmi [lmi] lmi q933 ansi off fr lmi off q933

69 fr inarp inarp no fr inarp [inarp] inarp on off on ip pp address on 6.6 fr compression use dlci=dlci_num type no fr compression use dlci=dlci_num [type] dlci_num type stac cstac none dlci_num type = none 6.7 fr congestion control control no fr congestion control [control] control on off off 6.8 fr pp dequeue type type no fr pp dequeue type [type] type serial round-robin serial round-robin round-robin

70 fr de protocol filter dlci=dlci_num filter_num_list no fr de protocol filter dlci=dlci_num [filter_num_list] protocol ip filter dlci_num filter_num_list filter_num_list pass pass-log pass-nolog restrict restrict-log restrict-nolog reject reject-log reject-nolog

71 ip routing routing no ip routing [routing] routing on off off on ip interface address ip_address/mask [broadcast broadcast_ip] ip interface address dhcp ip pp address ip_address/mask [broadcast broadcast_ip] ip loopback address ip_address/mask no ip interface address [ip_address/mask [broadcast broadcast_ip]] no ip pp address [ip_address/mask [broadcast broadcast_ip]] no ip loopback address [ip_address/mask] interface loopback ip_addres xxx.xxx.xxx.xxx xxx dhcp mask xxx xxx xxx xxx xxx broadcast_ip broadcast broadcast_ip dhcp dhcp no ip interface address show status dhcpc

72 ip interface secondary address ip_address[/mask] ip interface secondary address dhcp no ip interface secondary address [ip_address/mask] interface ip_address xxx.xxx.xxx.xxx xxx dhcp mask xxx xxx xxx xxx xxx dhcp ip interface mtu mtu0 ip pp mtu mtu1 ip tunnel mtu mtu2 no ip interface mtu [mtu0] no ip pp mtu [mtu1] no ip tunnel mtu [mtu2] interface mtu0, mtu1, mtu mtu0=1500 mtu1=1500 mtu2= ip simple-service service no ip simple-service service service on off off

73 ip route network gateway gateway1 [parameter] [gateway gateway2 [parameter]...] no ip route network [gateway...] network default 32 gateway1, gateway2... xxx xxx xxx xxx xxx pp peer_num dlci=dlci dlci=dlci peer_num anonymous pp anonymous name name name dhcp interface interface tunnel tunnel_num parameter filter number number number metric metric metric hide weight weight weight keepalive... gateway1 gateway filter weight weight hide weight

74 74 # ip route default gateway # ip route /24 gateway pp 1 # ip route default gateway pp 1 weight 2 hide gateway pp 2 weight 1 hide # ip route /24 gateway pp 1 hide gateway pp 2 weight ip filter filter_num pass_reject src_addr[/mask] [dest_addr[/mask] [protocol [src_port_list [dest_port_list]]]] no ip filter filter_num [pass_reject] filter_num pass_reject pass-log pass-nolog reject-log reject-nolog restrict-log restrict-nolog src_addr xxx xxx xxx xxx xxx xxx dest_addr src_addr mask (src_addr dest_addr xxx xxx xxx xxx xxx 0x 0xffffffff protocol icmp 1 tcp 6 udp 17 ipv6 41 esp 50 ah 51 icmp6 58 icmp-error icmp-info tcpfin tcprst established tcpflag=value/mask tcpflag!=value/mask *

75 75 src_port_list ftp 20,21 ident 113 ftpdata 20 ntp 123 telnet 23 nntp 119 smtp 25 snmp 161 domain 53 syslog 514 gopher 70 printer 515 finger 79 talk 517 www 80 route 520 pop3 110 uucp 540 sunrpc 111 dest_port_list ip interface secure filter ip filter set ip filter dynamic ip interface rip filter # ip filter 1 pass-nolog * /18 tcp ftp # ip lan1 secure filter in # ip lan1 secure filter out # ip filter 1 pass-log * * icmp 8 # ip filter 2 pass-log * * icmp 0 # ip filter 100 pass * * # ip lan2 secure filter out # ip filter 1 reject * * icmp 5 1 # ip filter 100 pass * * ip filter set name direction filter_list [filter_list...] no ip filter set name [direction...] name direction in out filter_list ip interface secure filter

76 ip filter source-route filter_out no ip filter source-route [filter_out] filter_out on off on ip filter directed-broadcast filter_out ip filter directed-broadcast filter filter_num [filter_num...] no ip filter directed-broadcast filter_out on off filter_num on off filter ip filter wol relay wol relay on on ip filter dynamic dyn_filter_num srcaddr dstaddr protocol [option...] ip filter dynamic dyn_filter_num srcaddr dstaddr filter filter_list [in filter_list] [out filter_list] [option...] no ip filter dynamic dyn_filter_num [dyn_filter_num...] dyn_filter_num srcaddr dstaddr protocol tcp udp ftp tftp domain www smtp pop3 telnet netmeeting filter_list ip filter option syslog=switch on off timeout=time time

77 77 filter in out ip filter filter in out in out ip filter pass/reject tcp udp syslog=on # ip filter 10 pass * * udp * snmp # ip filter dynamic 1 * * filter ip filter dynamic timer [option=timeout [option...]] no ip filter dynamic timer option tcp-syn-timeout tcp-fin-timeout tcp-idle-time udp-idle-time dns-timeout timeout tcp-syn-timeout=30 tcp-fin-timeout=5 tcp-idle-time=3600 udp-idle-time=30 dns-timeout=5

78 ip interface intrusion detection direction [type] switch [option] ip pp intrusion detection direction [type] switch [option] ip tunnel intrusion detection direction [type] switch [option] no ip interface intrusion detection direction [type] switch [option] no ip pp intrusion detection direction [type] switch [option] no ip tunnel intrusion detection direction [type] switch [option] interface direction in out type ip ip-option fragment icmp udp tcp ftp winny share default switch on off option reject=on reject=off type switch... off... on reject...off ip interface intrusion detection notice-interval frequency ip pp intrusion detection notice-interval frequency ip tunnel intrusion detection notice-interval frequency no ip interface intrusion detection notice-interval no ip pp intrusion detection notice-interval no ip tunnel intrusion detection notice-interval interface frequency

79 ip interface intrusion detection repeat-control time ip pp intrusion detection repeat-control time ip tunnel intrusion detection repeat-control time no ip interface intrusion detection repeat-control no ip pp intrusion detection repeat-control no ip tunnel intrusion detection repeat-control interface time time ip interface intrusion detection report num ip pp intrusion detection report num ip tunnel intrusion detection report num no ip interface intrusion detection report no ip pp intrusion detection report no ip tunnel intrusion detection report interface num show ip intrusion detection ip interface intrusion detection threshold type count ip pp intrusion detection threshold type count ip tunnel intrusion detection threshold type count no ip interface intrusion detection threshold type no ip pp intrusion detection threshold type no ip tunnel intrusion detection threshold type interface type... port-scan syn-flood count type port-scan syn-flood count count count port-scan = 64 syn-flood = 100

80 ip interface tcp mss limit mss ip pp tcp mss limit mss ip tunnel tcp mss limit mss no ip interface tcp mss limit [mss] no ip pp tcp mss limit [mss] no ip tunnel tcp mss limit [mss] interface mss auto off auto pppoe tcp mss limit pppoe tcp mss limit off ip route change log log log on off off

81 ip interface secure filter direction [filter_list...] [dynamic filter_list...] ip pp secure filter direction [filter_list...] [dynamic filter_list...] ip tunnel secure filter direction [filter_list...] [dynamic filter_list...] ip interface secure filter name set_name ip pp secure filter name set_name ip tunnel secure filter name set_name no ip interface secure filter direction [filter_list] no ip pp secure filter direction [filter_list] no ip tunnel secure filter direction [filter_list] no ip interface secure filter name [set_name] no ip pp secure filter name [set_name] no ip tunnel secure filter name [set_name] interface direction in out filter_list set_name dynamic ip filter # ip filter 1 pass /24 * # ip filter 2 reject # ip lan1 secure filter in 1 2 ip pp secure filter ip pp secure filter direction ip fragment remove df-bit filter filter_num... no ip fragment remove df-bit filter [filter_num...] filter_num ip filter

82 ip tos supersede id tos [precedence=precedence] filter_num [filter_num_list] no ip tos supersede id [tos] id tos normal 0 min-monetary-cost 1 max-reliability 2 max-throughput 4 min-delay 8 precedence precedence 0..7 precedence filter_num filter_num_list filter_num pass pass-log pass-nolog restrict restrict-log restrict-nolog reject reject-log reject-nolog ip interface proxyarp proxyarp ip interface proxyarp vrrp vrid no ip interface proxyarp [proxyarp] interface proxyarp on off vrid on off ip arp timer timer no ip arp timer [timer] timer

83 ip interface arp static ip_address mac_address no ip interface arp static ip_address [...] interface ip_address mac_address show arp clear arp ip interface arp queue length len no ip interface arp queue length [len] interface len ip pp remote address ip_address ip pp remote address dhcpc [interface] no ip pp remote address [ip_address] ip_address... xxx.xxx.xxx.xxx xxx dhcp dhcpc interface dhcpc interface no ip pp remote address " ppp ipcp ipaddress on" "ip pp remote address yyy.yyy.yyy.yyy "yyy.yyy.yyy.yyy"

84 ip pp remote address pool ip_address [ip_address...] ip pp remote address pool ip_address-ip_address ip pp remote address pool dhcp ip pp remote address pool dhcpc [interface] no ip pp remote address pool ip_address ip_address-ip_address dhcp dhcpc... interface dhcpc interface pp keepalive interval interval [retry-interval=retry-interval] [count=count] [time=time] no pp keepalive interval [interval [count]] interval retry-interval interval count time count interval retry-interval count time time show config interval = 30 retry-interval = 1 count = 6

85 pp keepalive use lcp-echo pp keepalive use icmp-echo dest_ip [option=value...] [dest_ip [option=value...]...] pp keepalive use lcp-echo icmp-echo dest_ip [option=value...] [dest_ip [option=value...]...] pp keepalive use off no pp keepalive use lcp-echo icmp-echo dest_ip option = value option value upwait disconnect length lcp-echo icmp-echo icmp-echo pp always-on icmp-echo downwait pp keepalive interval pp keepalive interval downwait upwait disconnect disconnect pp always-on disconnect length pp keepalive log log no pp keepalive log [log] log on off off

86 leased keepalive down action no leased keepalive down [action] action silent reset silent rip use use no rip use [use] use on off off ip interface rip trust gateway [except] gateway_list ip pp rip trust gateway [except] gateway_list ip tunnel rip trust gateway [except] gateway_list no ip interface rip trust gateway [[except] gateway_list] no ip pp rip trust gateway [[except] gateway_list] no ip tunnel rip trust gateway [[except] gateway_list] interface gateway_list except except rip preference preference no rip preference [preference] preference 1000

87 ip interface rip send send [version version [broadcast]] ip pp rip send send [version version [broadcast]] ip tunnel rip send send [version version [broadcast]] no ip interface rip send [send...] no ip pp rip send [send...] no ip tunnel rip send [send...] interface send on off version 1,2 broadcast ip interface address version version off ( ) on version 1 ( ) ip interface rip receive receive [version version [version]] ip pp rip receive receive [version version [version]] ip tunnel rip receive receive [version version [version]] no ip interface rip receive [receive...] no ip pp rip receive [receive...] no ip tunnel rip receive [receive...] interface receive on off version 1,2 version version off on version ip interface rip filter direction filter_list ip pp rip filter direction filter_list ip tunnel rip filter direction filter_list no ip interface rip filter direction [filter_list] no ip pp rip filter direction filter_list no ip tunnel rip filter direction filter_list interface direction in out filter_list ip filter pass reject

88 ip interface rip hop direction hop ip pp rip hop direction hop ip tunnel rip hop direction hop no ip interface rip hop direction hop no ip pp rip hop direction hop no ip tunnel rip hop direction hop interface direction in out hop ip interface rip auth type type ip pp rip auth type type ip tunnel rip auth type type no ip interface rip auth type [type] no ip pp rip auth type [type] no ip tunnel rip auth type [type] interface type text text ip interface rip auth key hex_key ip pp rip auth key hex_key ip tunnel rip auth key hex_key ip interface rip auth key text text_key ip pp rip auth key text text_key ip tunnel rip auth key text text_key no ip interface rip auth key no ip pp rip auth key no ip tunnel rip auth key no ip interface rip auth key text no ip pp rip auth key text no ip tunnel rip auth key text interface hex_key text_key # ip lan1 rip auth key text testing123 # ip pp rip auth key text "hello world" # ip lan2 rip auth key ff 35 8e 49 a8 3a 5e 9d

89 ip pp rip hold routing rip_hold no ip pp rip hold routing [rip_hold] rip_hold on off off ip pp rip connect send rip_action no ip pp rip connect send [rip_action] rip_action interval ip pp rip connect interval update none update # ip pp rip connect interval 60 # ip pp rip connect send interval ip pp rip connect interval time no ip pp rip connect interval [time] time ip pp rip send ip pp rip receive on ip pp rip connect send interval 30 # ip pp rip connect interval 60 # ip pp rip connect send interval ip pp rip disconnect send rip_action no ip pp rip disconnect send [rip_action] rip_action none interval ip pp rip disconnect interval update none # ip pp rip disconnect interval 1800 # ip pp rip disconnect send interval

90 ip pp rip disconnect interval time no ip pp rip disconnect interval [time] time ip pp rip send ip pp rip receive on ip pp rip disconnect send interval 3600 # ip pp rip disconnect interval 1800 # ip pp rip disconnect send interval ip pp rip backup interface switch no ip pp rip backup interface switch on off off on off on off

91 ip interface rip force-to-advertise ip-address/netmask [metric metric] ip pp rip force-to-advertise ip-address/netmask [metric metric] ip tunnel rip force-to-advertise ip-address/netmask [metric metric] no ip interface rip force-to-advertise ip-address/netmask [metric metric] no ip pp rip force-to-advertise ip-address/netmask [metric metric] no ip tunnel rip force-to-advertise ip-address/netmask [metric metric] interface ip-address/netmask metric metric: 1 ip lan1 address /24 ip lan2 address /24 rip use on rip filter rule with-netmask ip lan1 rip send on version 2 ip lan1 rip receive on version 2 ip filter 1 reject /24 ip filter 100 pass * ip lan1 rip filter out ip lan1 rip force-to-advertise /30 ip lan1 rip force-to-advertise /32 ip lan1 rip force-to-advertise / rip filter rule rule no rip filter rule [rule] rule address-only with-netmask RIP1 RIP1 address-only rip timer update [invalid [holddown]] no rip timer [update] update invalid holddown update invalid holddown

92 92 update invalid update update holddown update ip pp rip connect/disconnect interval ip pp rip connect/disconnect interval update invalid holddown ip pp rip connect/disconnect interval update invalid holddown...rip timer rip timer update invalid update holddown update ip interface vrrp vrid ip_address [priority=priority] [preempt=preempt] [auth=auth] [advertise-interval=time1] [down-interval=time2] no ip interface vrrp vrid [vrid...] interface vrid ip_address priority preempt on off auth time1 time2 auth time1 time2 priority preempt 255 priority=100 preempt=on auth= time1=1 time2= ip interface vrrp shutdown trigger vrid interface ip interface vrrp shutdown trigger vrid pp peer_num [dlci=dlci] ip interface vrrp shutdown trigger vrid route network [nexthop] no ip interface vrrp shutdown trigger vrid interface no ip interface vrrp shutdown trigger vrid pp peer_num [...] no ip interface vrrp shutdown trigger vrid route network interface vrid peer_num

93 93 dlci network default nexthop lan keepalive pp dlci=dlci pp keepalive use route nexthop nexthop pp backup none pp backup pp peer_num [ipsec-fast-recovery=action] pp backup interface ip_address pp backup tunnel tunnel_num no pp backup none peer_num action on off interface ip_address tunnel_num pp always-on pp always-on pp keepalive uselcp-echo none ipsec-fast-recovery=off

94 pp backup recovery time time no pp backup recovery time [time] time off off lan backup interface none lan backup interface pp peer_num lan backup interface backup_interface ip_address lan backup interface tunnel tunnel_num no lan backup interface none interface peer_num backup_interface ip_address tunnel_num lan keepalive use none lan backup recovery time interface time no lan backup recovery time interface [time] interface time off off

95 lan keepalive use interface icmp-echo dest_ip [option=value...] [dest_ip [option=value...]...] lan keepalive use interface arp dest_ip [dest_ip...] lan keepalive use interface icmp-echo dest_ip [option=value...] [dest_ip [option=value...]...] arp dest_ip [dest_ip...] lan keepalive use interface off no lan keepalive use interface [...] interface dest_ip option = value option value upwait length icmp-echo arp downwait lan keepalive interval lan keepalive interval downwait upwait length lan keepalive interval interface interval [count] no lan keepalive interval interface interface interval count count interval = 30 count = lan keepalive log interface log no lan keepalive log interface interface log on off off

96 ip keepalive num kind interval count gateway [gateway...] [option=value...] no ip keepalive num num kind icmp-echo interval count gateway interface interface option = value option value log on off upwait downwait length ( ) ipsec-refresh ipsec-refreshup ipsec-refreshdown gatewayselection-rule log = off upwait = 5 downwait = 5 length = 64 ipsec-refresh ipsec-refresh-up ipsec-refresh-down gateway-selection-rule = head # ip route /24 gateway pp 10 keepalive 1 gateway pp 11 weight 0 # ip keepalive 1 icmp-echo ipsec-refresh-up=3 # ip route /24 gateway null keepalive 1 gateway weight 0 # ip route /24 gateway keepalive 2 # ip keepalive 1 icmp-echo # ip keepalive 2 icmp-echo gateway-selection-rule=normal

97 ip implicit-route preference preference no ip implicit-route preference [preference] preference ( ) ip route ip implicit-route preference ip flow timer protocol time no ip flow timer protocol [time] protocol tcp udp icmp slow time ( ) slow tcp = 900 udp = 30 icmp = 30 slow = 30

98 ip forward filter id order gateway gateway filter filter_id... [ keepalive keepalive_id ] no ip forward filter id order [ gateway gateway [ filter filter_id... ] [ keepalive keepalive_id ] ] id order gateway IP pp tunnel filter_id keepalive_id id order filter_id ip filter ip filter ip filter ip filter gateway keepalive_id ip keepalive ip filter ip interface forward filter ip interface forward filter id ip pp forward filter id ip tunnel forward filter id ip local forward filter id no ip interface forward filter [id] no ip pp forward filter [id] no ip tunnel forward filter [id] no ip local forward filter [id] interface id ip forward filter ip local forward filter

99 ethernet filter num kind src_mac [dst_mac [offset byte_list]] ethernet filter num kind type [scope] [offset byte_list] no ethernet filter num [kind src_mac [dst_mac [offset byte_list]]] no ethernet filter num [kind dhcp-bind [ offset byte_list]] num kind pass-log pass-nolog reject-log reject-nolog src_mac dst_mac src_mac type dhcp-bind dhcp-not-bind scope offset byte_list ethernet lan filter scope

100 100 scope scope ethernet lan filter 8.2 ethernet interface filter dir list no ethernet interface filter dir [list] interface dir in out list ethernat filter

101 url filter Id kind keyword [src_addr[/mask]] no url filter id id kind pass, pass-nolog pass-log reject, reject-log reject-nolog keyword src_addr mask src_addr url interface filter 9.2 url interface filter dir list url pp filter dir list url tunnel filter dir list no url interface filter no url pp filter no url tunnel filter interface dir in out list url filter 9.3 url filter port list no url filter port list 80

102 url filter use switch no url filter use switch on off on 9.5 url filter reject redirect url filter reject redirect url url filter reject off no url filter reject [action] redirect off url action redirect 9.6 url filter log switch no url filter log switch on off on url filter kind pass p pass-nolog reject-nolog on

103 pp auth username username password [myname myname mypass] [isdn1] [clid [isdn2]] [mscbcp] [ip_address] [ip6_prefix] no pp auth username username [password...] username password myname myname mypass isdn1 clid isdn2 mscbcp ip_address ip6_prefix pp auth myname isdn1 isdn1 clid isdn2 isdn2 isdn2 isdn1 mscbcp isdn callback permit on 10.2 pp auth accept accept accept no pp auth accept [accept] accept pap chap mschap mschap-v2 pp auth myname

104 pp auth request auth [arrive-only] no pp auth request [auth [arrive-only]] auth pap chap mschap mschap-v2 chap-pap chap-pap arrive-only 10.4 pp auth myname myname password no pp auth myname [myname password] myname password 10.5 pp auth multi connect prohibit prohibit no pp auth multi connect prohibit [prohibit] prohibit on off pp auth username username off

105 ppp lcp acfc acfc no ppp lcp acfc [acfc] acfc on off on off ppp lcp magicnumber magicnumber no ppp lcp magicnumber [magicnumber] magicnumber on off on on ppp lcp mru mru [length] no ppp lcp mru [mru [length]] mru on off length on on off length 1792 mru = on length = ppp lcp pfc pfc no ppp lcp pfc [pfc] pfc on off on off

106 ppp lcp restart time no ppp lcp restart [time] time ppp lcp maxterminate count no ppp lcp maxterminate [count] count ppp lcp maxconfigure count no ppp lcp maxconfigure [count] count ppp lcp maxfailure count no ppp lcp maxfailure [count] count ppp lcp silent switch no ppp lcp silent [switch] switch on off off

107 ppp pap restart time no ppp pap restart [time] time ppp pap maxauthreq count no ppp pap maxauthreq [count] count ppp chap restart time no ppp chap restart [time] time ppp chap maxchallenge count no ppp chap maxchallenge [count] count ppp ipcp vjc compression no ppp ipcp vjc [compression] compression on off on off

108 ppp ipcp ipaddress negotiation no ppp ipcp ipaddress [negotiation] negotiation on off off ppp ipcp restart time no ppp ipcp restart [time] time ppp ipcp maxterminate count no ppp ipcp maxterminate [count] count ppp ipcp maxconfigure count no ppp ipcp maxconfigure [count] count ppp ipcp maxfailure count no ppp ipcp maxfailure [count] count wins server server1 [server2] no wins server [server1 [server2]] server1, server2 xxx.xxx.xxx.xxx xxx

109 ppp ipcp msext msext no ppp ipcp msext [msext] msext on off dns server wins server off off ppp ipcp remote address check sw no ppp ipcp remote address check [sw] sw on off on ppp mscbcp restart time no ppp mscbcp restart [time] time ppp mscbcp maxretry count no ppp mscbcp maxretry [count] count

110 ppp ccp type type no ppp ccp type [type] type stac0 stac cstac mppe-40 mppe-128 mppe-any none type stac stac0 stac0 stac0 stac cstac mppe-40 mppe-128 mppe-any ppp ccp restart time no ppp ccp restart [time] time ppp ccp maxterminate count no ppp ccp maxterminate [count] count ppp ccp maxconfigure count no ppp ccp maxconfigure [count] count

111 ppp ccp maxfailure count no ppp ccp maxfailure [count] count ppp ipv6cp use use no ppp ipv6cp use [use] use on off on ppp mp use use no ppp mp use [use] use on off on off ppp mp control type no ppp mp control [type] type arrive both call call

112 ppp mp load threshold call_load call_count disc_load disc_count no ppp mp load threshold [call_load call_count disc_load disc_count] call_load call_count disc_load disc_count call_load call_count disc_load disc_count call_load = 70 call_count = 1 disc_load = 30 disc_count = ppp mp maxlink number no ppp mp maxlink [number] number ppp mp minlink number no ppp mp minlink [number] number ppp mp timer time no ppp mp timer [time] time

113 ppp mp divide divide no ppp mp divide [divide] divide on off off on ppp bacp restart time no ppp bacp restart [time] time ppp bacp maxterminate count no ppp bacp maxterminate [count] count ppp bacp maxconfigure count no ppp bacp maxconfigure [count] count ppp bacp maxfailure count no ppp bacp maxfailure [count] count

114 ppp bap restart time no ppp bap restart [time] time ppp bap maxretry count no ppp bap maxretry [count] count pppoe use interface no pppoe use interface pppoe access concentrator name no pppoe access concentrator name pppoe auto connect switch no pppoe auto connect switch on off on

115 pppoe auto disconnect switch no pppoe auto disconnect switch on off on pppoe padi maxretry times no pppoe padi maxretry times pppoe padi restart time no pppoe padi restart time pppoe padr maxretry times no pppoe padr maxretry times pppoe padr restart time no pppoe padr restart time

116 pppoe disconnect time time no pppoe disconnect time time off off pppoe service-name name no pppoe service-name name pppoe tcp mss limit length no pppoe tcp mss limit length auto off ip interface tcp mss limit auto pppoe invalid-session forced close sw no pppoe invalid-session forced close sw on off on

117 dhcp service show status dhcp dhcp scope dhcp scope dhcp scope bind no dhcp scope bind dhcp scope expire maxexpire show status dhcp dns server dhcp relay server dhcp relay select ip interface address ip interface secondary address ip pp remote address ip pp remote address pool show status dhcpc dhcp service type no dhcp service [type] type server relay cold start

118 dhcp server rfc2131 compliant comp dhcp server rfc2131 compliant [except] function [function..] no dhcp server rfc2131 compliant comp on off except function broadcast-nak none-domain-null remain-silent reply-ack use-clientid on off except broadcast-nak none-domain-null remain-silent reply-ack use-clientid cold start on dhcp duplicate check check1 check2 no dhcp duplicate check check off check off check1 = 100 check2 = 500

119 dhcp scope scope_num ip_address-ip_address/netmask [except ex_ip...] [gateway gw_ip] [expire time] [maxexpire time] no dhcp scope scope_num [ip_address-ip_address/netmask [except ex_ip...] [gateway gw_ip] [expire time] [maxexpire time]] scope_num ip_address-ip_address netmask xxx xxx xxx xxx xxx ex_ip gw_ip time infinity gateway cold start expire time = 72:00 maxexpire time = 72: dhcp scope bind scope_num ip_address [type] id dhcp scope bind scope_num ip_address mac_address dhcp scope bind scope_num ip_address ipcp no dhcp scope bind scope_num ip_address scope_num ip_address xxx type text... 0x00 ethernet... 0x01 id type ethernet type text type mac_address... xx:xx:xx:xx:xx:xx xx ipcp

120 120 scope_num dhcp scope dhcp delete scope ipcp dhcp server rfc2131 compliant on dhcp server rfc2131 compliant off type type type type dhcp server rfc2131 compliant off dhcp server rfc2131 compliant on A. # dhcp scope bind scope_num ip_address ethernet 00:a0:de:01:23:45 B. # dhcp scope bind scope_num ip_address text client01 C. # dhcp scope bind scope_num ip_address a0 de D. # dhcp scope bind scope_num ip_address 00:a0:de:01:23:45 dhcp server rfc2131 compliant on dhcp scope bind A B C D 1 dhcp server rfc2131 compliant on chaddr show status dhcp dhcp server rfc2131 compliant off dhcp scope bind D dhcp server rfc2131 compliant on dhcp server rfc2131 compliant off dhcp server rfc2131 compliant on

121 dhcp scope lease type scope_num type [fallback=fallback_scope_num] no dhcp scope lease type scope [type...] scope_num, fallback_scope_num ) type bind-priority bind-only scope_num type bind-priority dhcp scope bind type bind-priority type bind-only dhcp scope bind type bind-only dhcp scope lease type dhcp scope lease type bind-priority dhcp scope lease type bind-only bind-priority

122 dhcp convert lease to bind scope_n [except] [idx [...]] scope_n idx... show status dhcp summary all all except show status dhcp 00:a0:de:01:02:03 ethernet 00:a0:de:01:02: :a0:de:01:02: a0 de ethernet 00:a0:de:01:02: a0 de a0 de

123 dhcp scope option scope_num option=value no dhcp scope option scope_num [option=value] scope_num option router 3 dns 6 hostname 12 domain 15 wins_server 44 value on off 1 0 dns server wins server no dhcp scope dhcp manual lease ip_address [type] id dhcp manual lease ip_address mac_address dhcp manual lease ip_address ipcp ip_address type... Client-Identifier type text... 0x00 ethernet... 0x01 id type text type ethernet type type mac_address ipcp dhcp manual release ip_address ip_address

124 dhcp relay server host1 [host2 [host3 [host4]]] no dhcp relay server host1..host4 dhcp relay select dhcp relay select type no dhcp relay select [type] type hash all dhcp relay server all hash dhcp relay threshold time no dhcp relay threshold [time] time dhcp client hostname interface primary host dhcp client hostname interface secondary host dhcp client hostname pp peer_num host dhcp client hostname pool pool_num host no dhcp client hostname interface primary host no dhcp client hostname interface secondary host no dhcp client hostname pp peer_num host no dhcp client hostname pool pool_num host interface peer_num anonymous pool_num ip pp remote address pool dhcpc ip pp remote address pool dhcpc ip pp remote address pool dhcpc host

125 dns server dhcp interface no dns server dhcp interface dns server dns server select dns server pp ip interface dhcp lease time time no ip interface dhcp lease time time interface time ip interface dhcp retry retry interval no ip interface dhcp retry retry interval interface retry infinity interval retry infinity interval

126 dhcp client client-identifier interface primary type type id dhcp client client-identifier interface secondary type type id dhcp client client-identifier pp peer_num type type id dhcp client client-identifier pool pool_num type type id no dhcp client client-identifier interface primary no dhcp client client-identifier interface secondary no dhcp client client-identifier pp peer_num no dhcp client client-identifier pool pool_num interface type type id peer_num anonymous pool_num ip pp remote address pool dhcpc ip pp remote address pool dhcpc ip pp remote address pool dhcpc type dhcp client option interface primary option=value dhcp client option interface secondary option=value dhcp client option pp peer_num option=value dhcp client option pool pool_num option=value no dhcp client option interface primary [option=value] no dhcp client option interface secondary [option=value] no dhcp client option pp peer_num [option=value] no dhcp client option pool pool_num [option=value] interface option value peer_num anonymous pool_num... ip pp remote address pool dhcpc ip pp remote address pool dhcpc ip pp remote address pool dhcpc # dhcp client option lan2 primary 50=c0,a8,00,80 # ip lan2 address dhcp

127 ip icmp echo-reply send send no ip icmp echo-reply send [send] send on off on ip icmp echo-reply send-only-linkup send no ip icmp echo-reply send-only-linkup [send] send on off off ip icmp mask-reply send send no ip icmp mask-reply send [send] send on off on ip icmp parameter-problem send send no ip icmp parameter-problem send [send] send on off off

128 ip icmp redirect send send no ip icmp redirect send [send] send on off on ip icmp redirect receive action no ip icmp redirect receive [action] action on off off ip icmp time-exceeded send send no ip icmp time-exceeded send [send] send on off on ip icmp timestamp-reply send send no ip icmp timestamp-reply send [send] send on off on ip icmp unreachable send send no ip icmp unreachable send [send] send on off on

129 ip icmp error-decrypted-ipsec send switch no ip icmp error-decrypted-ipsec send [switch] switch on off on ip icmp log log no ip icmp log [log] log on off off ip stealth all ip stealth interface interface no ip stealth all interface ip icmp *

130 ipv6 icmp echo-reply send send no ipv6 icmp echo-reply send send send on off on ipv6 icmp echo-reply send-only-linkup send no ipv6 icmp echo-reply send-only-linkup send send on off off ipv6 icmp parameter-problem send send no ipv6 icmp parameter-problem send send send on off off ipv6 icmp redirect send send no ipv6 icmp redirect send send send on off on ipv6 icmp redirect receive action no ipv6 icmp redirect receive action action on off off

131 ipv6 icmp time-exceeded send send no ipv6 icmp time-exceeded send send send on off on ipv6 icmp unreachable send send no ipv6 icmp unreachable send send send on off on ipv6 icmp log log no ipv6 icmp log log log on off off ipv6 icmp packet-too-big send send no ipv6 icmp packet-too-big send send send on off on ipv6 icmp error-decrypted-ipsec send switch no ipv6 icmp error-decrypted-ipsec send [switch] switch on off on

132 ipv6 stealth all ipv6 stealth interface interface no ipv6 stealth all interface ipv6 icmp *

133 tunnel enable tunnel_num no tunnel enable tunnel_num all 13.2 tunnel disable tunnel_num tunnel_num all 13.3 tunnel encapsulation type no tunnel encapsulation type ipsec ipip pptp tunnel endpoint address ipsec 13.4 ip tunnel address ip_address [/mask] no ip tunnel address [ip_address[/mask]] ip_address mask 13.5 ip tunnel remote address ip_address no ip tunnel remote address [ip_address] ip_address

134 tunnel endpoint address local remote no tunnel endpoint address local remote local remote local tunnel encapsulation pptp ipip ipsec ike local address ipsec ike remote address

135 ipsec ike pre-shared-key ipsec ike remote address show ipsec sa ipsec sa policy ipsec ike duration ipsec-sa ipsec ike duration isakmp-sa ipsec sa delete ipsec refresh sa ipsec auto refresh tunnel select tunnel enable tunnel disable pp enable tunnel enable pp disable tunnel disable pp select tunnel select ipsec transport no ipsec transport ipsec ike remote address ipsec ike remote name ipsec ike remote address any ipsec ike local name ipsec ike remote address ipsec ike local name ipsec ike remote name ipsec ike local name ipsec ike remote name

136 ipsec use use no ipsec use [use] use on off on 14.2 ipsec ike pre-shared-key gateway_id key ipsec ike pre-shared-key gateway_id text text no ipsec ike pre-shared-key gateway_id [...] gateway_id key text ipsec ike pre-shared-key 1 text himitsu ipsec ike pre-shared-key 8 0xCDEEEDC0CDEDCD 14.3 ipsec auto refresh [gateway_id] switch no ipsec auto refresh [gateway_id] gateway_id switch on off gateway_id gateway_id gateway_id ipsec auto refresh off ipsec auto refresh gateway_id on

137 ipsec ike negotiate-strictly gateway_id switch no ipsec ike negotiate-strictly gateway_id gateway_id switch on off off on ipsec ike encryption ipsec ike group ipsec ike hash ipsec ike pfs ipsec ike local name off 14.5 ipsec ike always-on gateway_id switch no ipsec ike always-on gateway_id switch on off off 14.6 ipsec ike retry count interval [max_session] no ipsec ike retry [count interval [max_session]] count interval max_session 1..5 count = 10 interval = 5 max_session = 3

138 ipsec ike remote name gateway name no ipsec ike remote name gateway [name] gateway name 14.8 ipsec ike remote address gateway_id ip_address no ipsec ike remote address gateway_id [ip_address] gateway_id ip_address any dns server any any 14.9 ipsec ike remote id gateway_id ip_address[/mask] no ipsec ike remote id gateway_id [ip_address[/mask]] gateway_id ip_address mask mask mask ipsec ike local name gateway_id name [type] no ipsec ike local name gateway_id [name] gateway_id name type...id fqdn use-fqdn key-id

139 ipsec ike local address gateway_id ip_address ipsec ike local address gateway_id vrrp interface vrid ipsec ike local address gateway_id ipv6 prefix prefix on interface ipsec ike local address gateway_id ipcp pp pp_num no ipsec ike local address gateway_id [ip_address] gateway_id ip_address interface vrid pp_num vrrp ipv ipsec ike local id gateway_id ip_address[/mask] no ipsec ike local id gateway_id [ip_address[/mask]] gateway_id ip_address mask mask mask

140 ipsec ike keepalive use gateway_id switch ipsec ike keepalive use gateway_id switch heartbeat [interval count [upwait]] ipsec ike keepalive use gateway_id switch icmp-echo ip_address [length=length] [interval count [upwait]] ipsec ike keepalive use gateway_id switch dpd [interval count [upwait]] no ipsec ike keepalive use gateway_id [switch... ] gateway_id switch on off auto ip_address length interval count upwait switch auto auto auto length switch = auto length = 64 interval = 10 count = 6 upwait = ipsec ike keepalive log gateway_id log no ipsec ike keepalive log gateway_id [log] gateway_id log on off on

141 ipsec ike encryption gateway_id algorithm no ipsec ike encryption gateway_id [algorithm] gateway_id algorithm 3des-cbc des-cbc aes-cbc 3des-cbc # ipsec ike encryption 1 aes-cbc ipsec ike queue length length no ipsec ike queue length [length] length ) ipsec ike group gateway_id group [group] no ipsec ike group gateway_id [group [group]] gateway_id group modp768 modp1024 modp1536 modp2048 modp1024

142 ipsec ike hash gateway_id algorithm no ipsec ike hash gateway_id [algorithm] gateway_id algorithm md5 sha sha ipsec log illegal-spi switch no ipsec log illegal-spi switch on off off ipsec ike payload type gateway_id type no ipsec ike payload type gateway_id [type] gateway_id type ipsec ike send info gateway_id info no ipsec ike send info gateway_id [info] gateway_id info on off on on

143 ipsec ike pfs gateway_id pfs no ipsec ike pfs gateway_id [pfs] gateway_id pfs on off off ipsec ike xauth myname gateway_id name password no ipsec ike xauth myname gateway_id gateway_id name password auth user userid username password no auth user userid [username...] userid username password auth user attribute userid attribute=value [attribute=value...] no auth user attribute userid [attribute=value...] userid attribute value attribute value xauth on off xauth-address xauth-dns xauth-wins xauth-filter

144 144 # auth user group attribute xauth xauth-address xauth-dns xauth-wins xauth-filter auth user group groupid userid [userid...] no auth user group groupid groupid userid # auth user group # auth user group # auth user group auth user group attribute groupid attribute=value [attribute=value...] no auth user group attribute groupid [attribute=value...] groupid attribute value attribute value xauth xauth-addresspool xauth-dns xauth-wins xauth-filter on off xauth xauth-address-pool xauth-dns xauth-wins xauth-filter

145 ipsec ike xauth request gateway_id auth [group_id] no ipsec ike xauth request gateway_id [auth...] gateway_id group_id auth on off group_id group_id off ipsec ike mode-cfg address pool pool_id ip_address[/mask] ipsec ike mode-cfg address pool pool_id ip_address-ip_address[/mask] no ipsec ike mode-cfg address pool pool_id [ip_address...] pool_id ip_address ip_address-ip_address mask # ipsec ike mode-cfg address gateway_id ipsec ike mode-cfg address gateway_id pool_id no ipsec ike mode-cfg address gateway_id [pool_id] gateway_id pool_id # auth user attribute userid xauth-address=address[/mask] # auth user group attribute groupid xauth-address-pool=address-address[/mask]

146 ipsec ike log gateway_id type [type] no ipsec ike log gateway_id [type] gateway_id type message-info payload-info key-info type ipsec ike esp-encapsulation gateway_id encap no ipsec ike esp-encapsulation gateway_id gateway_id encap on off off 14.33

147 ipsec ike duration sa gateway_id second [kbytes] [rekey rekey] no ipsec ike duration sa gateway_id [second [kbytes] [rekey rekey]] sa ipsec-sa isakmp-sa gateway_id second kbytes rekey 70% - 90% sa isakmp-sa kbytes second kbytes sa ipsec-sa rekey second rekey rekey second kbytes sa isakmp-sa rekey off ipsec ike restrict-dangling-sa off second : rekey : 75%

148 ipsec sa policy policy_id gateway_id ah ah_algorithm [local-id=local-id] [remote-id=remote-id] [anti-replay-check=check] ipsec sa policy policy_id gateway_id esp esp_algorithm [ah_algorithm] [anti-replay-check=check] no ipsec sa policy policy_id [gateway_id] policy_id gateway_id ah esp ah_algorithm md5-hmac sha-hmac esp_algorithm 3des-cbc des-cbc aes-cbc local-id remote-id check on off check on off local-id remote-id anti-replay-check = on # ipsec sa policy esp aes-cbc sha-hmac ipsec refresh sa ipsec sa delete all

149 ipsec ike restrict-dangling-sa gateway_id action no ipsec ike restrict-dangling-sa gateway_id [action] gateway_id action auto off auto off auto ipsec ike nat-traversal gateway switch [ keepalive=interval ] no ipsec ike nat-traversal gateway [ switch [ keepalive=interval ] ] gateway switch on off interval off ipsec ike esp-encapsulation switch = off interval = 300

150 ipsec sa delete id id all show ipsec sa ipsec tunnel outer df-bit mode no ipsec tunnel outer df-bit [mode] mode copy set clear copy set clear copy ipsec tunnel policy_id no ipsec tunnel [policy_id] policy_id ipsec ipcomp type type no ipsec ipcomp type [type] type deflate none none

151 tunnel backup none tunnel backup interface ip_address tunnel backup pp peer_num [switch-router=switch1] tunnel backup tunnel tunnel_num [switch-interface=switch2] no tunnel backup interface ip_address peer_num tunnel_num switch1 on off switch2 on off none switch1 = off switch2 = on

152 tunnel template tunnel_num [tunnel_num...] no tunnel template tunnel_num ipsec sa policy ipsec ipsec ike remote name ipsec ike ipsec auto refresh ipsec tunnel ipsec sa policy tunnel enable # show config tunnel tunnel_num expand ipsec sa policy tunnel select 1 ipsec ike ipsec ike remote name

153 ipsec transport id policy_id [proto [src_port_list [dst_port_list]]] no ipsec transport id [policy_id [proto [src_port_list [dst_port_list]]]] id policy_id proto src_port_list dst_port_list proto src_port_list dst_port_list # ipsec sa policy esp des-cbc sha-hmac # ipsec transport tcp * telnet

154 tunnel encapsulation tunnel endpoint address ppp ccp type pptp service service no pptp service [service] service on off off pptp service on off pp bind tunnel_num pp bind tunnel_num-tunnel_num no pp bind tunnel_num tunnel_num tunnel1.. tunnel20 tunnel encapsulation pptp pptp service type type no pptp service type type type server client server

155 pptp hostname name no pptp hostname name name show status pp N pptp window size size no pptp window size size size pp auth request auth arrive-only no pp auth request auth auth pap chap mschap mschap-v2 chap-pap pp auth accept auth auth no pp auth accept auth auth auth pap chap mschap mschap-v2 mschap-v2

156 pptp syslog syslog no pptp syslog syslog syslog on off off pptp tunnel disconnect time time no pptp tunnel disconnect time time time off tunnel endpoint name local_name remote_name no tunnel endpoint name local_name remote_name local_name remote_name tunnel endpoint address pptp keepalive use use no pptp keepalive use use use on off pptp keepalive interval on

157 pptp keepalive log log no pptp keepalive log log log on off off pptp keepalive interval interval count no pptp keepalive interval interval count interval count interval = 30 count = ppp ccp no-encryption mode no ppp ccp no-encryption mode mode reject accept accept

158 snmp trap enable snmp snmp trap host public public snmp host none snmp trap host clear 16.1 snmp host host [ro_community [rw_community]] no snmp host [host] host any none ro_community rw_community any Read-Write Read-Write Read-Only snmp community none 16.2 snmp local address ip_address no snmp local address ip_address ip_address 16.3 snmp community read-only name no snmp community read-only [name] name public

159 snmp community read-write name no snmp community read-write [name] name 16.5 snmp syscontact name no snmp syscontact [name] name 16.6 snmp syslocation name no snmp syslocation [name] name 16.7 snmp sysname name no snmp sysname [name] name # snmp sysname Biz Box N1200

160 snmp trap enable snmp trap [trap...] snmp trap enable snmp all no snmp trap enable snmp trap coldstart... warmstart... linkup... linkdown... authenticationfailure all all snmp trap send linkdown snmp trap send linkdown all 16.9 snmp trap send linkdown interface switch snmp trap send linkdown pp peer_num switch snmp trap send linkdown tunnel tunnel_num switch no snmp trap send linkdown interface no snmp trap send linkdown pp peer_num [switch] no snmp trap send linkdown tunnel tunnel_num [switch] interface peer_num tunnel_num switch on off on snmp trap community name no snmp trap community [name] name public

161 snmp trap host host [community] no snmp trap host host [community] host community snmp trap community snmp yrifppdisplayatmib2 switch no snmp yrifppdisplayatmib2 switch on off off snmp yriftunneldisplayatmib2 switch no snmp yriftunneldisplayatmib2 switch on off off

162 snmp display ipcp force switch no snmp display ipcp force switch on off ipcp on off snmp trap link-updown separate-l2switch-port interface switch no snmp trap link-updown separate-l2switch-port interface [switch] interface lan1 switch on off off

163 radius auth auth no radius auth [auth] auth on off pp auth username off 17.2 radius account account no radius account [account] account on off off 17.3 radius server ip1 [ip2] no radius server [ip1 [ip2]] ip1 ip2 radius auth server radius account server radius server 17.4 radius auth server ip1 [ip2] no radius auth server [ip1 [ip2]] ip1 ip2 radius server

164 radius account server ip1 [ip2] no radius account server [ip1 [ip2]] ip1 ip2 radius server 17.6 radius auth port port_num no radius auth port [port_num] port_num radius account port port_num no radius account port [port_num] port_num radius secret secret no radius secret [secret] secret 17.9 radius retry count time no radius retry [count time] count time count = 4 time = 3000

165 nat descriptor address inner nat descriptor address outer 18.1 ip interface nat descriptor nat_descriptor_list [reverse nat_descriptor_list] ip pp nat descriptor nat_descriptor_list [reverse nat_descriptor_list] ip tunnel nat descriptor nat_descriptor_list [reverse nat_descriptor_list] no ip interface nat descriptor [nat_descriptor_list [reverse nat_descriptor_list]] no ip pp nat descriptor [nat_descriptor_list [reverse nat_descriptor_list]] no ip tunnel nat descriptor [nat_descriptor_list [reverse nat_descriptor_list]] interface nat_descriptor_list reverse 18.2 nat descriptor type nat_descriptor type no nat descriptor type nat_descriptor [type] nat_descriptor type none nat masquerade nat-masquerade nat-masquerade none

166 nat descriptor address outer nat_descriptor outer_ipaddress_list no nat descriptor address outer nat_descriptor [outer_ipaddress_list] nat_descriptor outer_ipaddress_list ipcp primary ip interface address secondary ip interface secondary address ipcp primary secondary ipcp 18.4 nat descriptor address inner nat_descriptor inner_ipaddress_list no nat descriptor address inner nat_descriptor [inner_ipaddress_list] nat_descriptor inner_ipaddress_list auto auto 18.5 nat descriptor static nat_descriptor id outer_ip=inner_ip [count] no nat descriptor static nat_descriptor id [outer_ip=inner_ip [count]] nat_descriptor id outer_ip inner_ip count nat descriptor address outer nat descriptor address inner ipcp auto

167 nat descriptor masquerade rlogin nat_descriptor use no nat descriptor masquerade rlogin nat_descriptor [use] nat_descriptor use on off on on off 18.7 nat descriptor masquerade static nat_descriptor id inner_ip protocol [outer_port=]inner_port no nat descriptor masquerade static nat_descriptor id [inner_ip protocol [outer_port=]inner_port] nat_descriptor id inner_ip protocol esp tcp udp icmp outer_port inner_port outer_port inner_port outer_port inner_port inner_port outer_port outer_port inner_port 18.8 nat descriptor timer nat_descriptor time nat descriptor timer nat_descriptor protocol=protocol [port=port_range] time nat descriptor timer nat_desciptor tcpfin time2 no nat descriptor timer nat_descriptor [time] no nat descriptor timer nat_descriptor protocol=protocol [port=port_range] [time] no nat descriptor timer nat_desciptor tcpfin [time2] nat_descriptor time time protocol port_range TIME TIME

168 nat descriptor masquerade incoming nat_descriptor action [ip_address] no nat descriptor masquerade incoming nat_descriptor nat_descriptor action through reject discard forward ip_address action forward ip_address reject nat descriptor masquerade port range nat_descriptor port_range1 [port_range2 [port_range3]] no nat descriptor masquerade port range nat_descriptor [port_range1 [port_range2 [port_range3]]] nat_descriptor port_range1, port_range2, port_range3 port_range1 port_range1 port_range2 port_range1 port_range2 port_range3 port_range1= port_range2= port_range3= nat descriptor ftp port nat_descriptor port [port ] no nat descriptor ftp port nat_descriptor [port ] nat_descriptor port nat descriptor masquerade unconvertible port nat_descriptor if-possible nat descriptor masquerade unconvertible port nat_descriptor protocol port no nat descriptor masquerade unconvertible port nat_descriptor protocol [port] nat_descriptor protocol tcp...tcp udp...udp port if-possible

169 nat descriptor log switch no nat descriptor log switch on off off nat descriptor sip nat_descriptor sip no nat descriptor sip nat_descriptor nat_descriptor sip on off on nat descriptor masquerade remove df-bit remove no nat descriptor masquerade remove df-bit [remove] remove on off ping on nat descriptor masquerade session limit nat_descriptor id limit no nat descriptor masquerade session limit nat_descriptor id nat_descriptor id 1 limit limit 20000

170 ping traceroute rdate ntpdate telnet dns server dns server 19.1 dns service service no dns service service service recursive off off recursive 19.2 dns server ip_address [ip_address...] no dns server [ip_address...] ip_address dns server dhcp 19.3 dns domain domain_name no dns domain [domain_name] domain_name dns domain.

171 dns server pp peer_num no dns server pp [peer_num] peer_num dns server dns server dns server pp ppp ipcp msext on dns server dhcp # pp select 2 pp2# ppp ipcp msext on pp2# dns server pp dns notice order protocol server [server] no dns notice order protocol [server [server]] protocol dhcp msext server none me server dns server none me server dns server me server dhcp me server msext me server 19.6 dns private address spoof spoof no dns private address spoof [spoof] spoof on off on off

172 dns syslog resolv resolv no dns syslog resolv [resolv] resolv on off off 19.8 dns server select id server [server2] [type] query [original-sender] [restrict pp connection-pp] dns server select id pp peer_num [default-server] [type] query [original-sender] [restrict pp connection-pp] dns server select id dhcp interface [default-server] [type] query [original-sender] [restrict pp connection-pp] dns server select id reject [type] query [original-sender] no dns server select id id server server2 type a ptr mx ns cname any a query type a mx ns cname query example.jp type ptr..query ip_address[/masklen] masklen masklen reject query example example.jp example.com *example.jp original-sender connection-pp peer_num interface default-server...peer_num query dns server reject query restrict pp connection-pp

173 ip host fqdn value [ttl=ttl] dns static type name value [ttl=ttl] no ip host fqdn [value] no dns static type name [value] type a aaaa ptr mx ns cname name, value... type type name value a aaaa ptr mx ns cname fqdn ttl ip host dns static a ptr ttl ttl # ip host pc1.example.jp # dns static ptr pc2.example.jp # dns static cname mail.example.jp mail2.example.jp dns srcport port[-port] no dns srcport [port-[port]] port # dns srcport

174 dns host host [host [...]] no dns host host any lan lann none any dns cache use switch no dns cache uset [sw] switch on off switch dns cache max entry switch on dns cache max entry num no dns cache max entry [num] num dns cache max entry 16

175 queue class filter queue interface type 20.1 speed interface speed speed pp speed no speed interface [speed] no speed pp [speed] interface speed speed 'k' ' M' 0

176 queue class filter num class1 [cos=cos] ip src_addr [dest_addr [protocol [src_port [dest_port]]]] no queue class filter num [class1...] num class precedence cos precedence src_addr xxx.xxx.xxx.xxx xxx dest_addr protocol icmp 1 tcp 6 udp 17 established src_port ftp 20,21 ident 113 ftpdata 20 ntp 123 telnet 23 nntp 119 smtp 25 snmp 161 domain 53 syslog 514 gopher 70 printer 515 finger 79 talk 517 www 80 route 520 pop3 110 uucp 540 sunrpc 111 dest_port class1 cos cos queue interface class filter list # queue class filter 1 4 ip * * udp * # queue class filter 2 precedence ip /24 * tcp * *

177 queue interface type type queue pp type type no queue interface type [type] no queue pp type [type] interface type fifo priority cbq wfq shaping fifo fifo fifo queue interface length wfq wfq fifo wfq priority queue class filter queue interface class filter list cbq queue interface class property queue class filter queue interface class filter list shaping fifo 20.4 ppp mp interleave [delay] switch no ppp mp interleave [[delay] switch] delay switch on off delay delay delay ppp ccp type none delay = 30 switch = off # queue class filter 1 4 ip VOIP-GATEWAY * * * * # queue class filter 2 3 ip * * icmp * * # queue class filter 3 1 ip * * * * * # pp select 1

178 178 pp1# pp bind bri2.1 pp1# queue pp type priority pp1# queue class filter list pp1# isdn remote address call pp1# ppp mp use on pp1# ppp mp interleave on pp1# ppp mp maxlink 1 pp1# ppp ccp type none pp1# pp enable queue interface class filter list filter_list queue pp class filter list filter_list queue tunnel class filter list filter_list no queue interface class filter list [filter_list] no queue pp class filter list [filter_list] no queue tunnel class filter list [filter_list] interface filter_list queue class filter queue interface default class 20.6 queue interface length len1 [len2...lenn] queue pp length len1 [len2...len16] no queue interface length [len1...] no queue pp length [len1...] interface len1..lenn len1..len queue interface default class class queue pp default class class no queue interface default class class no queue pp default class [class] interface class

179 queue interface class property class bandwidth=bandwidth queue pp class property class bandwidth=bandwidth [parent=parent] [borrow=borrow] [maxburst=maxburst] [minburst=minburst] [packetsize=packetsize] no queue interface class property class [bandwidth=bandwidth...] no queue pp class property class [bandwidth=bandwidth...] interface class bandwidth k M parent borrow on off maxburst minburst packetsize bandwidth speed queue interface type bandwidth parent/borrow/maxburst/minburst/packetsize queue pp type cbq cbq bandwidth bandwidth parent = 0 borrow = on maxburst = 20 minburst = maxburst / 10 packetsize = 512

180 queue interface class control class [except ip_address...] [option=value...] no queue interface class control class [except ip_address...] interface class ip_address option = value option value forwarding reject, watch source destination threshold time infinity, mode forced adaptive winny trigger share masqueradesession notice on off queue interface class property forwarding forwarding forwarding show status qos time mode threshold time threshold time show status qos trigger notice 80 watch = source threshold = 70%,30 time = 600 mode = forced notice = on

181 cooperation type role sw no cooperation type role [sw] type bandwidth-measuring load-watch role sw server client on off off 21.2 cooperation port port no cooperation port [port] port cooperation bandwidth-measuring remote id role address [option=value] no cooperation bandwidth-measuring remote id [role address [option=value]] id role server client address option apply 'on' or 'off' port initial-speed ( )[bit/s] interval ( )[sec] or 'off' retry-interval ( )[sec] sensitivity 'high', 'middle' or 'low' syslog 'on' or 'off' interface class limit-rate ( )[%] number (5..100) local-address

182 182 role client port syslog server any role client apply on speed lan class queue lan class property bandwidth initial-speed interval 'off' retry-interval number sensitivity interface speed lan class queue lan class property bandwidth limit-rate limit-rate apply = on port = initial-speed = interval = 3600 retry-interval=3600 sensitivity = high syslog = off interface class limit-rate number=30 local-address

183 cooperation load-watch remote id role address [option=value] no cooperation load-watch remote id [role address [option=value]] id role server client address option trigger control port syslog 'on' or 'off' apply 'on' or 'off' register 'on' or 'off' register-interval ( )[sec] register-time ( )[sec] name local-address trigger role client control role server any register=on name local-address port=59410 syslog=off apply=on register=off register-interval=1200 register-time=3600 local-address

184 cooperation load-watch trigger id point high=high [, count] low=low [, count] [option=vallue] no cooperation load-watch trigger id [point high=high [, count] low=low [, count] [option=vallue]] id point cpu load interface receive interface interface overflow interface interface [class] transmit interface class high low count option interval sec sec syslog on off off high count count low count show environment show status lan syslog # cooperation load-watch trigger 1 cpu load high=80 low=30 # cooperation load-watch trigger 2 lan2 receive high=80m,5 low=50m,1 # cooperation load-watch trigger 3 lan2 overflow high=2,1 low=0,5

185 cooperation load-watch control id high=high [raise=raise] low=low [lower=lower] [interval=interval] no cooperation load-watch control id [high=high [raise=raise] low=low [lower=lower] [interval=interval]] id high raise low lower interval sec 10 sec high low lower high raise high 21.7 cooperation type go id [packet_type] type bandwidth-measuring load-watch id packet_type load-watch packet_type

186 ospf configure refresh 22.2 ospf use use no ospf use [use] use on off off 22.3 ospf preference preference no ospf preference [preference] preference ospf router id router-id no ospf router id [router-id] router_id

187 ospf export from ospf filter filter_num... no ospf export from ospf [filter filter_num...] filter_num ospf export filter 22.6 ospf import from protocol [filter filter_num...] no ospf import from [protocol [filter filter_num...]] protocol static rip bgp filter_num filter_num ospf import filter filter ospf import filter filter metric = 1 type = 2 tag = 1

188 ospf export filter filter_num [nr] kind ip_address/mask... no ospf export filter filter_num [...] filter_num nr not reject kind include refines equal ip_address/mask ospf export from ip_address/mask nr not reject kind include refines equal not ospf export from not ospf export from ospf filter 1 2 ospf export filter 1 not equal /24 ospf export filter 2 not equal /24 ospf export from ospf filter 1 ospf export filter 1 not equal / /24 ospf export from ospf filter ospf export filter 1 reject equal /24 ospf export filter 2 reject equal /24 ospf export filter 3 include /0

189 ospf import filter filter_num [nr] kind ip_address/mask...[parameter...] no ospf import filter filter_num [[not] kind ip_address/mask...[parameter...]] filter_num nr not reject kind include refines equal ip_address/mask parameter metric type 1..2 tag ospf import from filter ip_address mask nr not reject kind include refines equal kind not not equal parameter metric type tag metric = 1 type = 2 tag = 1 not ospf import from not ospf import from static filter 1 2 ospf import filter 1 not equal /24 ospf import filter 2 not equal /24 ospf import from static filter 1 ospf import filter 1 not equal / /24

190 190 ospf import from static filter ospf import filter 1 reject equal /24 ospf import filter 2 reject equal /24 ospf import filter 3 include / ospf area area [auth=auth] [stub [cost=cost]] no ospf area area [auth=auth] [stub [cost=cost]] area backbone auth text md5 cost stub cost cost cost cost ospf area network area network/mask [restrict] no ospf area network area network/mask [restrict] area backbone network mask restrict ospf area stubhost area host [cost cost] no ospf area stubhost area host area backbone host cost

191 ospf virtual-link router_id area [parameters...] no ospf virtual-link router_id [area [parameters...]] router_id area parameters = router_id area parameters = retransmit-interval transmit-delay hello-interval dead-interval authkey md5key md5-sequencemode second increment hello-interval/dead-interval hello-interval dead-interval router_id, area = retransmit-interval = 5 transmit-delay = 1 hello-interval = 10 dead-interval = 40 authkey = md5key = md5-sequence-mode = second

192 ip interface ospf area area [parameters...] ip pp ospf area area [parameters...] ip tunnel ospf area area [parameters...] no ip interface ospf area [area [parameters...]] no ip pp ospf area [area [parameters...]] no ip tunnel ospf area [area [parameters...]] interface area backbone parameters = type parameters = broadcast point-to-point type point-to-multipoint non-broadcast passive cost COST priority retransmit-interval transmit-delay hello-interval dead-interval poll-interval authkey md5key md5-sequencemode second increment type cost type loopback loopback-network

193 193 type type broadcast point-to-point point-to-multipoint non-broadcast non-broadcast non-broadcast ip pp ospf neighbor point-to-multipoint fr inarp ip pp address point-to-multipoint ip pp ospf neighbor point-to-multipoint non-broadcast non-broadcast broadcast point-to-multipoint point-to-point passive passive passive type broadcast ip interface ospf area passive ip interface ospf area ip interface ospf area ospf import hello-interval/dead-interval hello-interval/dead-interval area = type = broadcast = point-to-point = loopback passive = cost = 1 priority = 1 retransmit-interval = 5 transmit-delay = 1 hello-interval= 10 type broadcast = 10 point-to-point = 30 non-broadcast = 30 point-to-multipoint dead-interval = hello-interval poll-interval = 120 authkey = md5key = md5-sequence-mode = second

194 ip interface ospf neighbor ip_address [eligible] ip pp ospf neighbor ip_address [eligible] ip tunnel ospf neighbor ip_address [eligible] no ip interface ospf neighbor ip_address [eligible] no ip pp ospf neighbor ip_address [eligible] no ip tunnel ospf neighbor ip_address [eligible] interface ip_address eligible ospf merge equal cost stub merge no ospf merge equal cost stub merge on off on off on ospf log log [log...] no ospf log [log...] log interface neighbor packet

195 bgp use use no bgp use [use] use on off off 23.2 bgp aggregate ip_address/mask filter filter_num... no bgp aggregate ip_address/mask [filter filter_num... ] ip_address/mask all filter_num bgp aggregate filter 23.3 bgp aggregate filter filter_num protocol [reject] kind ip_address/mask... no bgp aggregate filter filter_num [protocol [reject] kind ip_address/mask... ] filter_num protocol static rip ospf bgp all kind include refines equal ip_address/mask bgp aggregate ip_address/mask kind reject 23.4 bgp autonomous-system as no bgp autonomous-system [as] as

196 bgp router id ip_address no bgp router id [ip_address] ip_address 23.6 bgp preference preference no bgp preference [preference] preference bgp export remote_as filter filter_num... bgp export aspath seq "aspath_regexp" filter filter_num... no bgp export remote_as [ filter filter_num... ] no bgp export aspath seq ["aspath_regexp" [ filter filter_num... ]] remote_as seq ( ) aspath_regexp filter_num remote_as bgp export filter aspath_regexp remote_as aspath_regexp grep aspath_regexp seq aspath_regexp remote_as # bgp export aspath 10 ".*" filter 1 # bgp export aspath 20 "^1[01]00.*" filter 1 # bgp export aspath 30 "2000" filter 1 # bgp export aspath 40 "^ $" filter 1 # bgp export aspath 50 "{.*}" filter 1

197 bgp export filter filter_num [reject] kind ip_address/mask... [parameter ] no bgp export filter filter_num [[reject] kind ip_address/mask... [parameter]] filter_num kind include refines equal ip_address/mask all parameter = preference bgp export ip_address/mask kind reject preference bgp preference preference 0 # bgp export filter 1 include / /16 # bgp export filter 2 reject equal / bgp import remote_as protocol [from_as] filter filter_num... no bgp import remote_as protocol [from_as] [filter filter_num... ] remote_as protocol static rip ospf bgp aggregate from_as protocol bgp filter_num bgp import filter bgp configure refresh

198 bgp import filter filter_num [reject] kind ip_address/mask [ parameter] no bgp import filter filter_num [[reject] kind ip_address/mask [parameter]] filter_num kind include refines equal ip_address/mask all parameter metric bgp import ip_address/mask kind reject metric 1 # bgp import filter 1 include / /16 # bgp import filter 2 reject equal / bgp neighbor neighbor_id remote_as remote_address [parameter... ] no bgp neighbor neighbor_id [remote_as... ] neighbor_id remote_as remote_address parameter hold-time off metric passive on off gateway local-address metric bgp import gateway hold-time 180 metric passive off gateway local-address

199 bgp log log [log] no bgp log [log...] log neighbor packet

200 ipv6 routing routing no ipv6 routing [routing] routing on off on off on ipv6 interface mtu mtu ipv6 pp mtu mtu no ipv6 interface mtu mtu no ipv6 pp mtu mtu interface mtu ipv6 interface tcp mss limit mss ipv6 pp tcp mss limit mss ipv6 tunnel tcp mss limit mss no ipv6 interface tcp mss limit mss no ipv6 pp tcp mss limit mss no ipv6 tunnel tcp mss limit mss interface mss auto off auto pppoe tcp mss limit pppoe tcp mss limit off

201 ipv6 rh0 discard switch no ipv6 rh0 discard switch on ipv6 routing process process no ipv6 routing process sprocess fast ipv6 interface address ipv6_address/prefix_len ipv6 interface address auto ipv6 pp address ipv6_address/prefix_len ipv6 pp address auto ipv6 tunnel address ipv6_address/prefix_len ipv6 tunnel address auto no ipv6 interface address ipv6_address/prefix_len no ipv6 interface address auto no ipv6 pp address ipv6_address/prefix_len no ipv6 pp address auto no ipv6 tunnel address ipv6_address/prefix_len no ipv6 tunnel address auto interface ipv6_address prefix_len auto show ipv6 address

202 ipv6 interface prefix ipv6_prefix/prefix_len ipv6 interface prefix auto ipv6 pp prefix ipv6_prefix/prefix_len ipv6 pp prefix auto ipv6 tunnel prefix ipv6_prefix/prefix_len ipv6 tunnel prefix auto no ipv6 interface prefix ipv6_prefix/prefix_len no ipv6 interface prefix auto no ipv6 pp prefix ipv6_prefix/prefix_len no ipv6 pp prefix auto no ipv6 tunnel prefix ipv6_prefix/prefix_len no ipv6 tunnel prefix auto interface ipv6_prefix prefix_len auto ipv6 interface address ipv6 prefix show ipv6 address ipv6 interface dad retry count count ipv6 pp dad retry count count no ipv6 interface dad retry count [count] no ipv6 pp dad retry count [count] interface count ipv6 max auto address max no ipv6 max auto address [max] max 16

203 ipv6 source address selection rule rule no ipv6 source address selection rule [rule] rule prefix ipv6 prefix prefix_id prefix/prefix_len [preferred_lifetime=time] [valid_lifetime=time] [l_flag=switch] [a_flag=switch] no ipv6 prefix prefix_id prefix_id prefix prefix_len valid_lifetime preferred_lifetime time yyyy-mm-dd[,hh:mm[:ss]] yyyy mm dd hh mm ss l_flag a_flag switch on off ipv6 interface rtadv send time time time on on valid_lifetime = preferred_lifetime = l_flag = on a_flag = on

204 ipv6 interface rtadv send prefix_id [prefix_id...] [option=value...] ipv6 pp rtadv send prefix_id [prefix_id...] [option=value...] no ipv6 interface rtadv send [...] no ipv6 pp rtadv send [...] interface prefix_id option=value m_flag on off o_flag on off max-rtr-adv-interval min-rtr-adv-interval adv-default-lifetime adv-reachable-time mtu ipv6 prefix m_flag o_flag m_flag = off o_flag = off max-rtr-adv-interval = 600 min-rtr-adv-interval = 200 adv-default-lifetime = 1800 adv-reachable-time = 0 mtu=auto ipv6 route network gateway gateway [parameter] [gateway gateway [parameter]] no ipv6 route network network default gateway % pp peer_num dlci=dlci dlci=dlci peer_num anonymous pp anonymous name name name tunnel tunnel_num parameter metric metric hide show ipv6 address

205 ipv6 rip use use no ipv6 rip use use on off off ipv6 interface rip send send ipv6 pp rip send send ipv6 tunnel rip send send no ipv6 interface rip send no ipv6 pp rip send no ipv6 tunnel rip send interface send on off on ipv6 interface rip receive receive ipv6 pp rip receive receive ipv6 tunnel rip receive receive no ipv6 interface rip receive no ipv6 pp rip receive no ipv6 tunnel rip receive interface receive on off on ipv6 interface rip hop direction hop ipv6 pp rip hop direction hop no ipv6 interface rip hop direction no ipv6 pp rip hop direction direction in out hop

206 ipv6 interface rip trust gateway [except] gateway [gateway... ] ipv6 pp rip trust gateway [except] gateway [gateway... ] no ipv6 interface rip trust gateway no ipv6 pp rip trust gateway interface gateway except except ipv6 interface rip filter direction filter_list [filter_list...] ipv6 pp rip filter direction filter_list [filter_list...] ipv6 tunnel rip filter direction filter_list [filter_list...] no ipv6 interface rip filter direction no ipv6 pp rip filter direction no ipv6 tunnel rip filter direction interface direction in out filter_list ipv6 pp rip connect send action no ipv6 pp rip connect send action none interval ipv6 pp rip connect interval update update # ipv6 pp rip connect interval 60 # ipv6 pp rip connect send interval ipv6 pp rip connect interval time no ipv6 pp rip connect interval time # ipv6 pp rip connect interval 60 # ipv6 pp rip connect send interval

207 ipv6 pp rip disconnect send action no ipv6 pp rip disconnect send action none interval ipv6 pp rip disconnect interval update none # ipv6 pp rip disconnect interval 1800 # ipv6 pp rip disconnect send interval ipv6 pp rip disconnect interval time no ipv6 pp rip disconnect interval time # ipv6 pp rip disconnect interval 1800 # ipv6 pp rip disconnect send interval ipv6 pp rip hold routing hold no ipv6 pp rip hold routing hold on off off

208 ipv6 filter filter_num pass_reject src_addr[/prefix_len] [dest_addr[/prefix_len] [protocol [src_port_list [dest_port_list]]]] no ipv6 filter filter_num [pass_reject] filter_num pass_reject ip filter src_addr prefix_len dst_addr src_addr protocol ip filter icmp-nd src_port_list ip filter dst_port_list # pp select 1 # ip pp secure filter in # ip pp secure filter out # ipv6 filter 1 pass-log * * icmp6 2 # ipv6 filter 100 pass * * ipv6 interface secure filter direction [filter_list...] [dynamic filter_list] ipv6 pp secure filter direction [filter_list...] [dynamic filter_list] ipv6 tunnel secure filter direction [filter_list...] [dynamic filter_list] no ipv6 interface secure filter direction no ipv6 pp secure filter direction no ipv6 tunnel secure filter direction interface direction in out filter_list dynamic direction in

209 ipv6 filter dynamic dyn_filter_num srcaddr dstaddr protocol [option...] ipv6 filter dynamic dyn_filter_num srcaddr dstaddr filter filter_list [in filter_list] [out filter_list] [option...] no ipv6 filter dynamic dyn_filter_num [srcaddr...] dyn_filter_num srcaddr dstaddr protocol tcp udp ftp tftp domain www smtp pop3 telnet filter_list ipv6 filter option syslog=switch on off timeout=time time filter in out ipv6 filter filter in out in out ipv6 filter pass/reject filter snmp tcp udp telnet tcp syslog = on timeout = 60

210 ipv6 interface mld type [option... ] ipv6 pp mld type [option... ] ipv6 tunnel mld type [option... ] no ipv6 interface mld [type [option... ]] no ipv6 pp mld [type [option... ]] no ipv6 tunnel mld [type [option... ]] interface type off router host option version version 1 2 1,2 syslog switch on off robust-variable type=off version 1,2 syslog off robust-variable 2

211 ipv6 interface mld static group [filter_mode [source...]] ipv6 pp mld static group [filter_mode [source...]] ipv6 tunnel mld static group [filter_mode [source...]] no ipv6 interface mld static group [filter_mode [source...]] no ipv6 pp mld static group [filter_mode [source...]] no ipv6 tunnel mld static group [filter_mode [source...]] interface group filter_mode include exclude source filter_mode source filter_mode include source filter_mode exclude source ipv6 interface mld host filter_mode source ipv6 nd ns-trigger-dad on [option=value] ipv6 nd ns-trigger-dad off no ipv6 nd ns-trigger-dad [...] on off option=value option value na-proxy all discard-one-time off na-proxy=all

212 mail notify mail template mail server smtp 25.1 mail server name id name no mail server name id [name] id name 25.2 mail server smtp id address [port = port] [smtp-auth username password [auth_protocol]] [pop-before-smtp] no mail server smtp id [...] id address port 25 username password auth_protocol cram-md5 digest-md5 plain pop-before-smtp smtp-auth smtp-auth pop-before-smtp mail server pop pop-before-smtp mail server pop 25.3 mail server pop id address [port = port] protocol username password no mail server pop id [...] id address port 110 Protocol pop3 apop username password

213 mail server timeout id timeout no mail server timeout id [timeout] id timeout mail template 25.5 mail template template_id mailserver_id From:from_address To:to_address [Subject:subject] [Date:date] [mime-version:mime_version] [Content-Type:content_type] [notify-log=switch] [notify-wait-time=sec] no mail template template_id [...] template_id mailserver_id From:from_address To:to_address Subject:subject Date:date MIME-Version:mime_version Content-Type:content_type switch on off from_address to_address subject subject date date content-type subject date mime-version content-type mail template 1 1 From:[email protected] To:[email protected],[email protected] "Subject:Test Mail" notify-log=on mail template 1 2 From:[email protected] To:[email protected] "Subject:N1200 test" "Date:Mon, 23 Feb :54: " MIME-Version:1.0 "Content-Type:text/plain; charset=iso-2022-jp"

214 mail notify id template_id trigger backup if_b [[range_b] if_b...] mail notify id template_id trigger route route [route...] mail notify id template_id trigger filter ethernet if_f dir_f [if_f dir_f [...]] mail notify id template_id trigger status type [type [...]] mail notify id template_id trigger intrusion if_i [range_i] dir_i [if_i [range_i] dir_i [...]] no mail notify id [...] id template_id if_b pp lann tunnel range_b route if_f dir_f type all interface routing vpn nat firewall config-log if_i lann(n,m, N/M) range_i dir_i in out in/out mail notify status exec pp backup lan backup tunnel backup ip route mail notify status exec ip interface intrusion detection mail notify 1 1 trigger backup pp * lan2 lan3 tunnel 1-10,12 mail notify 2 1 trigger route / /16 mail notify 3 1 trigger filter ethernet lan1 in mail notify 4 1 trigger status all mail notify 5 1 trigger intrusion lan1 in/out pp * in tunnel 1-3,5 out

215 httpd service switch no httpd service switch on off on httpd host host no httpd host host any lan lan1 lan2 lan3 none ip_address-ip_address lan httpd timeout time no httpd timeout [time] time httpd listen port no httpd listen port

216 pp name name tunnel name name no pp name no tunnel name name

217 upnp use use no upnp use use on off off 27.2 upnp external address refer interface upnp external address refer pp peer_num upnp external address refer default no upnp external address refer [interface] no upnp external address refer pp [peer_num] interface default peer_num anonymous default 27.3 upnp port mapping timer type type no upnp port mapping timer type type normal arp arp normal upnp port mapping timer arp arp normal arp 27.4 upnp port mapping timer time no upnp port mapping timer time off upnp port mapping timer type off 3600

218 upnp syslog syslog no upnp syslog syslog on off off

219 usbhost use switch no usbhost use [switch] switch on off on

220 schedule at id [date] time * command... schedule at id [date] time pp peer_num command... schedule at id [date] time tunnel tunnel_num command... no scudule at id [[date]...] id date 1, , * -7 mon sat,sun mon-fri -fri * time startup usb-attached peer_num anonymous tunnel_num command time command pp select tunnel select schedule at id administrator administrator password cold start console info console prompt console date exit help http revision-up go interface reset less login password login timer ping ping6 pp select quit remote setup save schedule at show telnet time timezone traceroute traceroute6 tunnel select copy exec command schedule at date startup # schedule at 1 */mon-fri 8:00 pp 1 isdn auto connect on # schedule at 2 */mon-fri 17:00 pp 1 isdn auto connect off # schedule at 3 */mon-fri 17:05 * disconnect 1 # schedule at 1 *:00 pp 1 isdn auto connect on # schedule at 2 *:15 pp 1 isdn auto connect off # schedule at 3 *:15 * disconnect 1 # schedule at 1 1/1 0:0 * ip route NETWORK gateway pp 2

221 vlan interface/sub_interface 802.1q vid=vid name=name no vlan interface/sub_interface 802.1q interface sub_interface vid name lan type 30.2 vlan port mapping sw_port vlan_interface no vlan port mapping sw_port [vlan_interface...] sw_port vlan_interface lan type # vlan port mapping lan1.3 vlan7 # vlan port mapping lan1.4 vlan7

222 heartbeat pre-shared-key key no heartbeat pre-shared-key key 31.2 heartbeat receive switch [option=value...] no heartbeat receive [switch] switch on off option value option value log on off monitor ( ) off heartbeat pre-shared-key switch.. off log=off monitor=off 31.3 heartbeat send dest_addr [log=switch] dest_addr switch on off dest_addr heartbeat pre-shared-key log=off

223 ntpdate 32.1 sntpd service switch no sntpd service switch on off on 32.2 sntpd host host no sntpd host host any lan lan1 lan2 lan3 none IP_ADDRESS - IP_ADDRESS lan

224 execute batch 33.1 sd use switch no sd use [switch] switch on off on

225 external-memory statistics filename prefix prefix [term] [crypto password] no external-memory statistics filename prefix [prefix [term] [crypto password]] prefix usb1:filename sd1:filename term monthly daily crypto aes128 aes256 password crypto password prefix_type[_id]_yyyymm[dd].ext prefix type cpu memory flow route nat filter traffic qos id... id id yyyy mm dd dd ext csv rtfg term... monthly

226 external-memory syslog filename name [crypto password] no external-memory syslog filename [name] name usb1:filename filename sd1:filename filename crypto aes128 aes256 password filename filename filename crypto password 33.4 operation external-memory download permit switch no operation external-memory download permit [switch] switch on off on 33.5 external-memory boot permit switch no external-memory boot permit [switch] switch on off external-memory config filename external-memory exec filename on

227 external-memory exec filename from [to] external-memory exec filename off no external-memory exec filename [from] [to] no external-memory exec filename [off] from usb1:filename filename sd1:filename filename *:filename filename to num 0,1 0 filename external-memory auto-search time *:n1200.bin 0 # external-memory exec filename sd1:n1200.bin # external-memory exec filename sd1:/test/n1200.bin

228 external-memory config filename from[,from] [to] [password] external-memory config filename off no external-memory config filename [from] [to] [password] no external-memory config filename [off] from usb1:filename filename sd1:filename filename *:filename filename to num password ) filename external-memory auto-search time *:config.rtfg,*:config.txt 0 # external-memory config filename sd1:config.txt # external-memory config filename sd1:/test/config.txt 33.8 external-memory auto-search time time no external-memory auto-search time [time] time

229 execute batch external-memory batch filename external-memory batch filename batchfile [logfile] no external-memory batch filename [batchfile [logfile]] batchfile usb1:filename sd1:filename *:filename logfile filename filename filename logfile batchfile... *:command.txt logfile... command-log.txt # external-memory batch filename sd1:command_test.txt # external-memory batch filename sd1:/test/command_test.txt operation button function download function no operation button function download [function] function http revision-up execute batch http revision-up operation execute batch permit permit no operation execute batch permit [permit] permit on off off

230 show config show config N show log http upload 34.1 http upload type [config_no] [directory/] filename no http upload [..] type config_no directory filename 34.2 http upload url url no http upload url [url] url 34.3 http upload permit switch no http upload permit [switch] switch on off off

231 http upload timeout time no http upload timeout [time] time http upload retry interval interval count no http upload retry interval [..] interval count interval=30 count= http upload proxy proxy [port] no http upload proxy [..] proxy port http upload go http upload retry interval alarm http upload schedule at http upload retry interval 34.8 alarm http upload switch no alarm http upload [switch] switch on off on

232 pp select peer_num no pp select peer_num none anonymous console prompt none no pp select pp select none 35.2 tunnel select tunnel_num no tunnel select tunnel_num none no tunnel select tunnel select none administrator quit quit save exit exit save save

233 save [filename [comment]] filename usb1:filename filename sd1:filename filename comment copy config from to copy config from to crypto [password] copy config from to [password] from filename filename filename filename filename filename to 0..4 filename filename filename filename crypto aes128 aes256 password save filename filename filename external-memory auto-search time

234 copy exec from to from filename filename filename filename filename filename to filename filename external-memory auto-search time delete config filename filename delete exec filename filename set-default-config filename filename set-default-exec filename filename

235 cold start remote setup interface [number [/sub_address]] [type] remote setup interface dlci=dlci interface number sub_address dlci type number sub_address remote setup accept isdn_num[/sub_address] [isdn_num_list] remote setup accept any remote setup accept none no remote setup accept isdn_num sub_address isdn_num_list any none any clear account clear account interface clear account pp [peer_num] interface peer_num

236 clear arp clear ip dynamic routing clear log clear inarp on clear dns cache clear nat descriptor dynamic nat_descriptor nat_descriptor all clear nat descriptor interface dynamic interface clear nat descriptor interface dynamic pp [peer_num] clear nat descriptor interface dynamic tunnel [tunnel_num] interface peer_num anonymous tunnel_num

237 clear ipv6 dynamic routing clear ipv6 neighbor cache pp enable peer_num no pp enable peer_num peer_num anonymous all pp disable peer_num peer_num anonymous all restart restart binary restart binary config restart config_name binary config config_name

238 interface reset interface [interface...] interface line type interface reset pp line type pp bind interface reset pp [peer_num] peer_num anonymous connect peer_num peer_num disconnect peer_num peer_num all anonymous anonymous1..)

239 ping [-s datalen] [-c count] [-sa ip_address] [-w wait] host datalen count ip_address xxx.xxx.xxx.xxx xxx wait host xxx.xxx.xxx.xxx xxx count ping6 destination [count] ping6 destination%scope_id [count] ping6 destination interface [count] ping6 destination pp peer_num [count] ping6 destination tunnel tunnel_num [count] destination scope_id interface peer_num tunnel_num count show ipv6 address traceroute host [noresolv] host xxx.xxx.xxx.xxx xxx noresolv traceroute6 destination destination nslookup host host

240 disconnect ip connection session_id [channel_id] session_id channel_id telnet host [port [mode [negotiation [abort]]]] host port mode character line auto...port character/line auto negotiation on off auto...port on off auto abort 29(^]) port = 23 mode = auto negotiation = auto abort = disconnect ipv6 connection session_id [channel_id] session_id channel_id

241 clear switching-hub macaddress [interface] interface lan type macaddress-aging off macaddress-aging on wol send [-i interval] [-c count] interface mac_address [ip_address [udp port]] wol send [-i interval] [-c count] interface mac_address ethernet type interval count interface mac_address ip_address port type i c interval = 1 count = 4

242 http revision-up go [no-confirm [prompt]] no-confirm prompt "no-confirm" "prompt" http revision-up permit http revision-down permit clear url filter clear url filter [interface] clear url filter pp [perr_num] clear url filter tunnel [tunnel_num] interface peer_num tunnel_num mail notify status exec id id 1..10

243 show environment 36.2 show config show config filename less config less config filename filename show config pp [peer_num] less config pp [peer_num] peer_num anonymous show config less config 36.4 show config tunnel [tunnel_num] [expand] less config tunnel [tunnel_num] [expand] tunnel_num show config less config expand tunnel template 36.5 show config list less config list

244 show file list location less file list location location internal 36.7 show ipv6 address [interface] show ipv6 address pp [peer_num] show ipv6 address tunnel [tunnel_num] interface peer_num tunnel_num 36.8 show sshd public key 36.9 show ip secure filter interface [dir] show ip secure filter pp [peer_num] [dir] show ip secure filter tunnel [tunnel_num] [dir] interface dir show exec list less exec list

245 show arp [interface[/sub_interface]] interface sub_interface show status interface interface 37.3 show status pp [peer_num] peer_num 37.4 show dlci [peer_num] peer_num

246 show ip route [destination] show ip route detail show ip route summary destination detail summary detail summary 37.6 show ip rip table 37.7 show ipv6 route show ipv6 route detail show ipv6 route summary detail summary detail summary 37.8 show ipv6 rip table

247 show ipv6 neighbor cache show ipsec sa [id] show ipsec sa gateway [gateway_id] [detail] id gateway_id detail id show status vrrp [interface [vrid]] interface vrid show nat descriptor address [nat_descriptor] nat_descriptor all nat_descriptor show nat descriptor masquerade port summary show nat descriptor interface bind interface show nat descriptor interface bind pp show nat descriptor interface bind tunnel interface

248 show nat descriptor interface address interface show nat descriptor interface address pp peer_num show nat descriptor interface address tunnel tunnel_num interface peer_num tunnel_num show nat descriptor masquerade port summary show nat descriptor masquerade port [nat_descriptor] summary nat_descriptor nat_descriptor show status pptp show status ospf info info database neighbor interface virtual-link show status bgp neighbor [ip-address] show status bgp neighbor ip-address route-type ip-address route-type advertised-routes received-routes routes ip-address ip-address route-type advertisedroutes received-routes routes bgp export filter

249 show status dhcp [summary] [scope_n] summary scope_n show status dhcpc show status backup show ip connection show ip connection interface direction show ip connection pp peer_num direction show ip connection tunnel tunnel_num direction show ip connection summary interface peer_num tunnel_num direction in out summary

250 show ipv6 connection show ipv6 connection interface direction show ipv6 connection pp peer_num direction show ipv6 connection tunnel tunnel_num direction show ipv6 connection summary interface peer_num tunnel_num direction in out summary show status ip keepalive show ip intrusion detection show ip intrusion detection interface direction show ip intrusion detection pp peer_num direction show ip intrusion detection tunnel tunnel_num direction interface peer_num tunnel_num direction in out ip intrusion detection report show status switching-hub macaddress [interface [port]] interface port show status upnp

251 show status tunnel [tunnel_num] tunnel_num show status vlan [interface/sub_interface] interface sub_interface show status mail service [template_id] [debug] template_id debug show status ipv6 mld show status user

252 show status packet-buffer [group] group small, middle, large, huge # show status packet-buffer large large group: 2048 bytes length parameters: max-buffer=10000 max-free=2812 min-free=62 buffers-in-chunk=625 initial-chunk= buffers in free list 128 buffers are allocated, req/succ/fail/rel = 137/137/0/9 4 chunks are allocated, req/succ/fail/rel = 4/4/0/ show status qos info [interface [class]] info bandwidth length dcc all interface class 1..16

253 show status cooperation type [id] type bandwidth-measuring load-watch id show url filter show url filter [interface] show url filter pp [peer_num] show url filter tunnel [tunnel_num] interface peer_num tunnel_num url filter show status heartbeat

254 show status usbhost show status remote setup show techinfo show show techinfo console columns/lines console character less less less show techinfo less show techinfo show status sd show status external-memory

255 show log [reverse] less log [reverse] reverse syslog host 38.2 show account show account interface show account pp [peer_num] interface peer_num anonymous

256 diagnose config port map interface protocol [src_addr [src_port]] dst_addr interface protocol tcp udp icmp gre esp ah src_addr src_port dst_addr interface dst_addr dst_addr src_addr src_port dst_addr dst_addr 39.2 diagnose config port access interface [protocol] dst_addr dst_port interface protocol tcp udp dst_addr dst_port dst_addr/dst_port protocol dst_addr dst_addr

257 diagnosis config port max-detect num num diagnosis config port history-num num num show diagnosis config port map 39.6 show diagnosis config port access 39.7 clear diagnosis config port

258 statistics type sw no statistics type [sw] type cpu memory traffic flow nat route filter qos sw on off off

259

260 260