User manual ALCATEL-LUCENT SPEEDTOUCH 570 1

[. . . ] SPEED TOUCH 570 CLI Reference Guide Wireless ADSL Router 3EC 16982 ADAA TCZZA Ed. 01 Status Change Note Released BD F aa 39813 Short Title CD-RG AST570 CLI All rights reserved. Passing on and copying of this document, use and communication of its contents not permitted without written authorization from Alcatel. 2 / 268 3EC 16982 ADAA TCZZA Ed. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 ADSL Commands . [. . . ] In combination with TCP ACK this allows selection of incoming versus outgoing TCP connections. Expect TCP URG flag set (yes) or not (no). Expect TCP ACK flag set (yes) or not (no). OPTIONAL OPTIONAL [prot] OPTIONAL [syn] OPTIONAL [urg] [ack] OPTIONAL OPTIONAL 3EC 16982 ADAA TCZZA Ed. 01 133 / 268 7 Firewall Commands [srcport] The TCP/UDP port (or beginning of range) the packet should [or should NOT] be from. Choose between: G ftp G ftp-data G telnet G mail G smtp G dns G domain G tftp Or specify the port number in accordance to the latest version of RFC1700: Assigned numbers. The source TCP/UDP port range end (inclusive). (Only applicable for ranges) The TCP/UDP port (or beginning of range) the packet should [or should NOT] be going to. Choose between: G ftp G ftp-data G telnet G mail G smtp G dns G domain G tftp Or specify the port number in accordance to the latest version of RFC1700: Assigned numbers. The destination TCP/UDP port range end (inclusive). (Only applicable for ranges) The expected [or NOT expected] ICMP type (name or number) of the packet. Choose between: G echo-reply G destination-unreachable G source-quench G redirect G echo-request G router-advertisement G router-solicitation G time-exceeded G parameter-problems G timestamp-request G timestamp-reply G information-request G information-reply G address-mask-request G address-mask-reply Or specify the ICMP type number in accordance to the latest version of RFC1700: Assigned numbers. OPTIONAL [srcportend] [dstport] OPTIONAL OPTIONAL [dstportend] [icmptype] OPTIONAL OPTIONAL 134 / 268 3EC 16982 ADAA TCZZA Ed. 01 7 Firewall Commands [icmpcode] A number between 0 and 15. Represents the expected [or NOT expected] ICMP code (or beginning of range) of the packet as specified in the latest version of RFC1700: Assigned number. The name of the chain to be parsed when this rule applies. Action to be taken when this rule applies. Choose between: G accept : the packet may pass. G deny : ICMP error destination unreachable. An error message is sent back to the sender. It is silently dropped, that is, without sending an error message to the sender. Has no influence on the packet. OPTIONAL [icmpcodeend] OPTIONAL [clink] action OPTIONAL REQUIRED EXAMPLE: =>firewall rule list chain=Telnet =>firewall rule create chain=telnet src=10. 0. 0. 0/8 dst=200. 200. 200. 1 srcintfgrp=lan prot=tcp srcport=1024 srcportend=65535dstport=23 action=accept =>firewall rule create chain=telnet src=200. 200. 200. 1 dst=10. 0. 0. 0/8 srcintfgrp=wan prot=tcp srcport=23 dstport=1024 dstportend=65535 action=accept =>firewall rule create chain=telnet action=drop =>firewall rule list chain=Telnet :firewall rule create chain=Telnet index=0 srcintfgrp=lan src=10. 0. 0. 0/8 dst=200. 200. 200. 1/32 prot=tcp srcport=1024 srcportend=65535dstport=telnet action=accept :firewall rule create chain=Telnet index=1 srcintfgrp=wan src=200. 200. 200. 1/32 dst=10. 0. 0. 0/8 prot=tcp srcport=telnet dstport=1024 dstportend=65535 action=accept :firewall rule create chain=Telnet index=2 action=drop => RELATED COMMANDS: firewall rule clear firewall rule delete firewall rule flush firewall rule list firewall rule stats Clear statistics of a given rule. Show a list of all (or a specified) chains' rules. [. . . ] Set the short retry limit. 3EC 16982 ADAA TCZZA Ed. 01 257 / 268 17 Wireless Commands wireless ssid Set SpeedToucht570 WLAN Service Set Identifier. SYNTAX: wireless ssid ssid ssid = <string> A string between 1 and 32 characters. REQUIRED EXAMPLE: =>wireless status Wireless SSID :WLAN_Alcatel Wireless channel :6 Regulation domain :ETSI WEP encryption :Off Association Control :Off =>wireless ssid=WLAN_Sascha =>wireless status Wireless SSID :WLAN_Sascha Wireless channel :6 Regulation domain :ETSI WEP encryption :Off Association Control :Off => RELATED COMMANDS: wireless status Show SpeedToucht570 WLAN configuration. 258 / 268 3EC 16982 ADAA TCZZA Ed. [. . . ]