User manual ALCATEL-LUCENT SPEEDTOUCH 500 1

[. . . ] SpeedTouchTM 500Series Multi-User ADSL Gateways CLI Reference Guide Release R4. 2 500 SERIES SpeedTouchTM 500Series CLI Reference Guide Release R4. 2 Status Change Note Short Title Copyright Released PeckelbeenS CLI ST500Series R4. 2 © 2003 THOMSON. Passing on, and copying of this document, use and communication of its contents is not permitted without written authorization from THOMSON. The content of this document is furnished for informational use only, may be subject to change without notice, and should not be construed as a commitment by THOMSON. THOMSON assumes no responsibility or liability for any errors or inaccuracies that may appear in this document. Content About this Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Note Use :firewall rule list first to determine the index number of the applicable rule. REQUIRED REQUIRED chain index EXAMPLE: =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10. 0. 0. 0/8 dst=200. 200. 200. 1/32 prot=tcp srcport=1024 srcportend=65535 dstport=telnet action=accept :firewall rule create chain=Telnet index=1 srcintfgrp=wan src=200. 200. 200. 1/32 dst=10. 0. 0. 0/8 prot=tcp srcport=telnet dstport=1024 dstportend=65535 action=accept :firewall rule create chain=Telnet index=2 action=drop =>firewall rule delete chain=Telnet index=1 =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10. 0. 0. 0/8 dst=200. 200. 200. 1/32 prot=tcp srcport=1024 srcportend=65535 dstport=telnet action=accept :firewall rule create chain=Telnet index=1 action=drop => RELATED COMMANDS: firewall rule clear firewall rule create firewall rule flush firewall rule list firewall rule stats Clear statistics for a given rule. Show statistics for all (or a specified) chains' rules. 190 Firewall Commands firewall rule flush Flush all rules created for a chain(s). Note SYNTAX: firewall rule flush chain [chain = <string>] The name of the chain to empty. Note If this parameter is not specified, all rules for all chains are deleted. OPTIONAL The flush command does not impact previously saved configurations. EXAMPLE: =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10. 0. 0. 0/8 | dst=200. 200. 200. 1/32 prot=tcp srcport=1024 srcportend=65535 dstport=telnet | action=accept :firewall rule create chain=Telnet index=1 srcintfgrp=wan | src=200. 200. 200. 1/32 dst=10. 0. 0. 0/8 prot=tcp srcport=telnet dstport=1024 | dstportend=65535 action=accept :firewall rule create chain=Telnet index=2 action=drop =>firewall rule flush chain=Telnet =>firewall rule list chain=Telnet => RELATED COMMANDS: firewall rule clear firewall rule create firewall rule delete firewall rule list firewall rule stats Clear statistics for a given rule. Show statistics for all (or a specified) chains' rules. 191 Firewall Commands firewall rule list Show a list of rules. SYNTAX: firewall rule list chain [chain = <string>] The name of the chain to list the rules of. Note If this parameter is not specified, all rules for all chains are shown. OPTIONAL EXAMPLE: =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10. 0. 0. 0/8 | dst=200. 200. 200. 1/32 prot=tcp srcport=1024 srcportend=65535 dstport=telnet | action=accept :firewall rule create chain=Telnet index=1 srcintfgrp=wan | src=200. 200. 200. 1/32 dst=10. 0. 0. 0/8 prot=tcp srcport=telnet dstport=1024 | dstportend=65535 action=accept :firewall rule create chain=Telnet index=2 action=drop =>firewall rule list :firewall rule create chain=source index=0 dstintfgrp=!wan action=accept :firewall rule create chain=source index=1 prot=udp dstport=dns | action=accept :firewall rule create chain=source index=2 prot=udp dstport=67 action=accept :firewall rule create chain=source index=3 action=drop :firewall rule create chain=forward index=0 srcintfgrp=wan dstintfgrp=wan | action=drop :firewall rule create chain=sink index=0 srcintf=eth0 srcbridgeport=1 | action=accept :firewall rule create chain=sink index=1 srcintfgrp=!wan action=accept :firewall rule create chain=sink index=2 prot=udp dstport=dns action=accept :firewall rule create chain=sink index=3 prot=udp dstport=68 action=accept :firewall rule create chain=sink index=4 action=drop :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10. 0. 0. 0/8 | dst=200. 200. 200. 1/32 prot=tcp srcport=1024 srcportend=65535 dstport=telnet | action=accept :firewall rule create chain=Telnet index=1 srcintfgrp=wan | src=200. 200. 200. 1/32 dst=10. 0. 0. 0/8 prot=tcp srcport=telnet dstport=1024 | dstportend=65535 action=accept :firewall rule create chain=Telnet index=2 action=drop => RELATED COMMANDS: firewall rule clear firewall rule create firewall rule delete firewall rule flush firewall rule stats Clear statistics for a given rule. Show statistics for all (or a specified) chains' rules. 192 Firewall Commands firewall rule stats Show statistics, i. e. SYNTAX: firewall rule stats [chain = <string>] [index = <number>] The name of the chain of which the statistics must be listed. In case this parameter is not specified the statistics for the rules applicable to all chains are shown. The index number of the chain's rule of which the statistics must be listed. Execute firewall rule list first to determine the index number of the applicable rule. In case this parameter is not specified the statistics for all rules applicable to the specified chain are shown. OPTIONAL chain index OPTIONAL EXAMPLE: =>firewall rule list chain=Test :firewall rule create chain=Test index=0 srcintfgrp=lan src=200. 200. 0. 1/32 dst=200. 200. 0. 2/32 prot=udp srcport=0 srcportend=65535 dstport=telnet action=deny =>firewall rule clear =>firewall rule stats Chain sink, index 0, packets 43, bytes 1743 Chain sink, index 1, packets 0, bytes 0 Chain sink, index 2, packets 0, bytes 0 Chain sink, index 3, packets 0, bytes 0 Chain forward, index 0, packets 0, bytes 0 Chain source, index 0, packets 43, bytes 1977 Chain source, index 1, packets 0, bytes 0 Chain source, index 2, packets 0, bytes 0 Chain Test, index 0, packets 0, bytes 0 =>firewall rule stats Chain sink, index 0, packets 104, bytes 6143 Chain sink, index 1, packets 0, bytes 0 Chain sink, index 2, packets 0, bytes 0 Chain sink, index 3, packets 0, bytes 0 Chain forward, index 0, packets 0, bytes 0 Chain source, index 0, packets 43, bytes 1977 Chain source, index 1, packets 0, bytes 0 Chain source, index 2, packets 0, bytes 0 Chain Test, index 0, packets 44, bytes 21032 => DESCRIPTION: The statistics for the `Test` chain are the result of sending udp packets to the SpeedTouchTM. The chain `Test` is assigned to the hook `input` and prohibits the sending of udp packets from one host to another. 193 Firewall Commands EXAMPLE INPUT/OUTPUT IN A NETWORKED ENVIRONMENT: The SpeedTouchTM is configured as DHCP client on its Ethernet interface eth0. =>firewall rule list chain=Sending :firewall rule create chain=Sending index=0 srcintfgrp=lan src=10. 0. 0. 3/32 dst=10. 10. 1. 1/32 prot=icmp action=count :firewall rule create chain=Sending index=1 srcintfgrp=lan src=10. 10. 1. 1/32 dst=10. 0. 0. 3/32 prot=icmp action=count =>firewall rule stats Chain source, index 0, packets 0, bytes 0 Chain source, index 1, packets 0, bytes 0 Chain source, index 2, packets 0, bytes 0 Chain source, index 3, packets 0, bytes 0 Chain forward, index 0, packets 0, bytes 0 Chain sink, index 0, packets 0, bytes 0 Chain sink, index 1, packets 144, bytes 5844 Chain sink, index 2, packets 0, bytes 0 Chain sink, index 3, packets 0, bytes 0 Chain sink, index 4, packets 0, bytes 0 Chain sink, index 5, packets 0, bytes 0 Chain sending, index 0, packets 0, bytes 0 Chain sending, index 1, packets 0, bytes 0 =>firewall rule clear =>(Ping from server 10. 10. 1. 1 to client 10. 0. 0. 3) =>firewall rule stats Chain source, index 0, packets 0, bytes 0 Chain source, index 1, packets 0, bytes 0 Chain source, index 2, packets 0, bytes 0 Chain source, index 3, packets 0, bytes 0 Chain forward, index 0, packets 0, bytes 0 Chain sink, index 0, packets 0, bytes 0 Chain sink, index 1, packets 42, bytes 1782 Chain sink, index 2, packets 0, bytes 0 Chain sink, index 3, packets 0, bytes 0 Chain sink, index 4, packets 0, bytes 0 Chain sink, index 5, packets 0, bytes 0 Chain sending, index 0, packets 4, bytes 240 Chain sending, index 1, packets 4, bytes 240 => RELATED COMMANDS: firewall rule clear firewall rule create firewall rule delete firewall rule flush firewall rule list Clear statistics for a given rule. Show a list of all (or a specified) chains' rules. 194 IP Commands IP Commands Contents This chapter covers the following commands: Topic ip apadd ip apdelete ip aplist ip arpadd ip arpdelete ip arplist ip config ip flush ip ifconfig ip iflist ip ifwait ip ping ip rtadd ip rtdelete ip rtlist ip sendto ip traceroute ip auto flush ip auto ifadd ip auto ifattach ip auto ifconfig ip auto ifdelete ip auto ifdetach ip auto iflist Page 196 198 199 200 201 202 203 206 207 208 209 210 211 212 213 214 215 217 218 219 220 221 222 223 195 IP Commands ip apadd Assign an Internet Protocol (IP) address to an interface. SYNTAX: ip apadd addr = <ip-address> [netmask = <ip-mask (dotted or cidr)>] intf = <interface name> [pointopoint = <ip-address>] [addrtrans = <{none|pat}>] [addroute = <{no|yes}>] The new IP address to add. Indicates whether network address translation mode is allowed (pat) for this IP address or not (none). Add typical net/subnet routes automatically according to the default (or specified) subnet mask (yes) or not (no). [. . . ] Default is 2347. EXAMPLE: =>wireless ifconfig Wireless SSID : Schozach Accept any SSID : no Communication channel : 6 (auto) RTS Threshold : 2347 Short Retry Limit :4 Long Retry Limit :4 Beacon Period : 100 =>wireless ifconfig any=on channel=3 rts=1000 =>wireless ifconfig Wireless SSID : Schozach Accept any SSID : yes Communication channel : 3 (selected) RTS Threshold : 1000 Short Retry Limit :4 Long Retry Limit :4 Beacon Period : 100 => RELATED COMMANDS: wireless scan wireless status Scans for other APs in the area. Shows the status of the wireless interface. 396 E-SIT-CTC-20030410-0050 Ed. 03 Wireless Commands wireless scan Scans for other APs in the area. An overview of all the radio channels and their respective ratings is shown. [. . . ]