command line interface (cli): hilcosreferencemanual command line interface (cli) hilcosrel. 9.14...

1413
Reference Manual Command Line Interface (CLI) HiLCOS Rel. 9.14 RM CLI HiLCOS Release 9.14 01/17 Technical Support https://hirschmann-support.belden.eu.com

Upload: others

Post on 25-Apr-2020

92 views

Category:

Documents


2 download

TRANSCRIPT

  • Reference Manual

    Command Line Interface (CLI) HiLCOS Rel. 9.14

    RM CLI HiLCOSRelease 9.14 01/17

    Technical Supporthttps://hirschmann-support.belden.eu.com

    https://hirschmann-support.belden.eu.com

  • The naming of copyrighted trademarks in this manual, even when not specially indicated, shouldnot be taken to mean that these names may be considered as free in the sense of the trademarkand tradename protection law and hence that they may be freely used by anyone.

    © 2017 Hirschmann Automation and Control GmbH

    Manuals and software are protected by copyright. All rights reserved. The copying, reproduction, translation, conversion into any electronic medium or machine scannable form is not permitted, either in whole or in part. An exception is the preparation of a backup copy of the software for your own use.

    The performance features described here are binding only if they have been expressly agreedwhen the contract was made. This document was produced by Hirschmann Automation andControl GmbH according to the best of the company's knowledge. Hirschmann reserves the rightto change the contents of this document without prior notice. Hirschmann can give no guaranteein respect of the correctness or accuracy of the information in this document.

    Hirschmann can accept no responsibility for damages, resulting from the use of the networkcomponents or the associated operating software. In addition, we refer to the conditions of usespecified in the license contract.

    You can get the latest version of this manual on the Internet at the Hirschmann product site(www.hirschmann.com.)

    Hirschmann Automation and Control GmbH

    Stuttgarter Str. 45-51

    Germany

    72654 Neckartenzlingen

    Tel.: +49 1805 141538

    Rel. 9.14 - 01/17 – 05.01.2017

    http://www.hirschmann.com/

  • Contents

    1 Introduction.............................................................................................24

    1.2 Configuration with Telnet ......................................................................24

    Open Telnet session...........................................................................24

    Changing the console language.........................................................24

    Close the Telnet session....................................................................24

    Structure of the command-line interface............................................25

    1.3 Commands for the console....................................................................25

    Parameter overview for the ping command.......................................37

    Parameter overview for the trace command......................................39

    Overview of CAPWAP parameters with the show command.............41

    Overview of IPv6-specific show commands.......................................43

    Functions for editing commands........................................................47

    Function keys for the command line..................................................48

    1.4 Configuration with WEBconfig ..............................................................52

    2 Setup........................................................................................................54

    2.1 Name.....................................................................................................54

    2.2 WAN......................................................................................................54

    2.2.2 Dialup-Peers.............................................................................55

    2.2.3 RoundRobin..............................................................................59

    2.2.4 Layer.........................................................................................61

    2.2.5 PPP...........................................................................................65

    2.2.6 Incoming calling numbers.........................................................71

    2.2.8 Scripts.......................................................................................72

    RM CLI HiLCOSRelease 9.14 01/17

    3

    Contents

  • 2.2.9 Protect.......................................................................................74

    2.2.10 Callback attempts....................................................................74

    2.2.11 Router interface.......................................................................75

    2.2.13 Manual dialing.........................................................................78

    2.2.18 Backup-Delay-Seconds...........................................................79

    2.2.19 DSL-Broadband-Peers............................................................79

    2.2.20 IP-List......................................................................................84

    2.2.21 PPTP peers.............................................................................88

    2.2.22 RADIUS...................................................................................91

    2.2.23 Polling table...........................................................................102

    2.2.24 Backup peers........................................................................107

    2.2.25 Action table...........................................................................108

    2.2.26 MTU-List................................................................................115

    2.2.30 Additional PPTP gateways....................................................116

    2.2.31 PPTP source check...............................................................150

    2.2.35 L2TP endpoints.....................................................................150

    2.2.36 L2TP-Additional-Gateways...................................................155

    2.2.37 L2TP-Peers...........................................................................178

    2.2.38 L2TP source check...............................................................179

    2.2.40 DS-Lite-Tunnel......................................................................180

    2.2.50 EoGRE-Tunnel......................................................................182

    2.2.51 GRE-Tunnel..........................................................................186

    2.3 Charges...............................................................................................190

    2.3.2 Days-per-Period......................................................................190

    2.3.7 Time-Table...............................................................................191

    2.3.8 DSL-Broadband-Minutes-Budget............................................192

    2.3.9 Spare-DSL-Broadband-Minutes..............................................192

    RM CLI HiLCOSRelease 9.14 01/17

    4

    Contents

  • 2.3.10 Router-DSL-Broadband-Budget............................................193

    2.3.11 Reserve-DSL-Broadband-Budget.........................................193

    2.3.12 Activate-Additional-Budget....................................................193

    2.3.13 Dialup-Minutes-Budget..........................................................193

    2.3.14 Spare-Dialup-Minutes...........................................................194

    2.3.15 Dialup-Minutes-Active...........................................................194

    2.3.16 Reset-Budgets......................................................................194

    2.4 LAN......................................................................................................195

    2.4.2 MAC-Address..........................................................................195

    2.4.3 Heap-Reserve.........................................................................195

    2.4.8 Trace-MAC..............................................................................195

    2.4.9 Trace-Level.............................................................................196

    2.4.10 IEEE802.1x...........................................................................196

    2.4.11 Linkup-Report-Delay-ms.......................................................201

    2.4.13.11.1 Interface bundling..........................................................201

    2.7 TCP-IP.................................................................................................211

    2.7.1 Operating................................................................................211

    2.7.6 Access-List..............................................................................212

    2.7.7 DNS-Default............................................................................213

    2.7.8 DNS-Backup...........................................................................213

    2.7.9 NBNS-Default..........................................................................214

    2.7.10 NBNS-Backup.......................................................................214

    2.7.11 ARP-Aging-Minutes...............................................................214

    2.7.12 TCP-Aging-Minutes...............................................................215

    2.7.13 TCP-Max.-Conn....................................................................215

    2.7.16 ARP-Table.............................................................................216

    2.7.17 Loopback-List........................................................................217

    RM CLI HiLCOSRelease 9.14 01/17

    5

    Contents

  • 2.7.20 Non-Loc.-ARP-Replies..........................................................219

    2.7.21 Alive-Test...............................................................................219

    2.7.22 ICMP-on-ARP-Timeout.........................................................223

    2.7.30 Network list............................................................................223

    2.8 IP-Router.............................................................................................227

    2.8.1 Operating................................................................................227

    2.8.2 IP-Routing-Table.....................................................................228

    2.8.5 Proxy-ARP..............................................................................231

    2.8.6 Send-ICMP-Redirect...............................................................231

    2.8.7 Routing-Method.......................................................................232

    2.8.8 RIP..........................................................................................234

    2.8.9 1-N-NAT..................................................................................254

    2.8.10 Firewall..................................................................................264

    2.8.11 Start-WAN-Pool.....................................................................298

    2.8.12 End-WAN-Pool......................................................................298

    2.8.13 Default-Time-List...................................................................299

    2.8.14 Usage-Default-Timetable......................................................301

    2.8.19 N-N-NAT................................................................................301

    2.8.20 Load-Balancer.......................................................................303

    2.8.21 VRRP....................................................................................311

    2.8.22 WAN-Tag-Creation................................................................315

    2.8.23 Tag-Table...............................................................................316

    2.9 SNMP..................................................................................................319

    2.9.1 Send-Traps..............................................................................320

    2.9.2 IP-Traps...................................................................................320

    2.9.3 Administrator...........................................................................322

    2.9.4 Location...................................................................................322

    RM CLI HiLCOSRelease 9.14 01/17

    6

    Contents

  • 2.9.5 Register-Monitor......................................................................322

    2.9.6 Delete-Monitor.........................................................................323

    2.9.7 Monitor-Table..........................................................................323

    2.9.10 Password-Required-for-SNMP-Read-Access.......................326

    2.9.11 Comment-1............................................................................326

    2.9.12 Comment-2...........................................................................327

    2.9.13 Comment-3...........................................................................327

    2.9.14 Comment-4...........................................................................327

    2.9.15 Read-Only-Community..........................................................328

    2.9.16 Comment-5...........................................................................328

    2.9.17 Comment-6...........................................................................328

    2.9.17 Comment-7...........................................................................329

    2.9.17 Comment-8...........................................................................329

    2.9.20 Full host MIB.........................................................................329

    2.9.21 Port........................................................................................330

    2.9.22 Read-Only-Communities.......................................................330

    2.9.23 Public-Comment-1................................................................331

    2.9.24 Public-Comment-2................................................................331

    2.9.25 Public-Comment-3................................................................332

    2.9.26 Public-Comment-4................................................................332

    2.10 DHCP................................................................................................333

    2.10.6 Max.-Lease-Time-Minutes.....................................................333

    2.10.7 Default-Lease-Time-Minutes.................................................333

    2.10.8 DHCP-Table..........................................................................333

    2.10.9 Hosts.....................................................................................336

    2.10.10 Alias list...............................................................................338

    2.10.18 Ports....................................................................................339

    RM CLI HiLCOSRelease 9.14 01/17

    7

    Contents

  • 2.10.19 User-Class-Identifier...........................................................340

    2.10.20 Network list..........................................................................341

    2.10.21 Additional options................................................................350

    2.10.22 Vendor-Class-Identifier........................................................352

    2.11 Config.................................................................................................353

    2.11.3 Password-Required-for-SNMP-Read-Access.......................353

    2.11.4 Maximum connections...........................................................353

    2.11.5 Config-Aging-Minutes............................................................354

    2.11.6 Language...............................................................................354

    2.11.7 Login-Error.............................................................................354

    2.11.8 Lock-Minutes.........................................................................355

    2.11.10 Display-Contrast..................................................................355

    2.11.12 WLAN-Authentication-Pages-Only......................................356

    2.11.15 Access table........................................................................356

    2.11.16 Screen height......................................................................364

    2.11.17 Prompt.................................................................................365

    2.11.18 LED-Test..............................................................................365

    2.11.20 Cron-Table...........................................................................366

    2.11.21 Admins.................................................................................371

    2.11.23 Telnet-Port...........................................................................374

    2.11.25 SSH-Port.............................................................................375

    2.11.26 SSH-Authentication-Methods..............................................375

    2.11.27 Predef.-Admins....................................................................376

    2.11.28 SSH.....................................................................................377

    2.11.29 Telnet-SSL...........................................................................383

    2.11.32 Reset-button........................................................................387

    2.11.33 Outband-Aging-Minutes......................................................389

    RM CLI HiLCOSRelease 9.14 01/17

    8

    Contents

  • 2.11.35 Monitor trace........................................................................389

    2.11.39 License-Expiry-Email...........................................................390

    2.11.40 Crash-Message...................................................................390

    2.11.41 Admin-Gender.....................................................................390

    2.11.42 Assert-Action.......................................................................391

    2.11.43 Function keys......................................................................391

    2.11.45 Configuration date...............................................................393

    2.11.50 LL2M....................................................................................393

    2.11.51 Sync.....................................................................................394

    2.11.60 CPU-Load-Interval...............................................................405

    2.11.65 Error aging minutes.............................................................405

    2.11.73 Sort-menu............................................................................406

    2.11.80 Authentication......................................................................406

    2.11.81 Radius.................................................................................407

    2.11.90 LED mode............................................................................413

    2.11.91 LED off seconds..................................................................414

    2.12 WLAN................................................................................................414

    2.12.3 Heap-Reserve.......................................................................415

    2.12.8 Access mode.........................................................................415

    2.12.12 IAPP-Protocol......................................................................415

    2.12.13 IAPP-Announce-Interval......................................................416

    2.12.14 IAPP-Handover-Timeout.....................................................416

    2.12.26 Inter-SSID-Traffic................................................................416

    2.12.27 Supervise-Stations..............................................................417

    2.12.29 RADIUS-Access-Check......................................................417

    2.12.36 Country................................................................................425

    2.12.38 ARP-Handling.....................................................................425

    RM CLI HiLCOSRelease 9.14 01/17

    9

    Contents

  • 2.12.41 Mail-Address.......................................................................426

    2.12.44 Allow-Illegal-Association-Without-Authentication................426

    2.12.45 RADIUS-Accounting............................................................427

    2.12.46 Indoor-Only-Operation........................................................433

    2.12.47 Idle-Timeout........................................................................433

    2.12.50 Signal averaging.................................................................434

    2.12.51 Rate-Adaption.....................................................................435

    2.12.60 IAPP-IP-Network.................................................................437

    2.12.70 VLAN-Groupkey-Mapping...................................................437

    2.12.80 Dual-Roaming.....................................................................438

    2.12.85 PMK-Caching......................................................................439

    2.12.86 Paket-Capture.....................................................................440

    2.12.87 Client-Steering....................................................................442

    2.12.88 Error-Monitoring..................................................................444

    2.12.89 Access rules........................................................................447

    2.12.100 Card-Reinit-Cycle..............................................................453

    2.12.101 Noise-Calibration-Cycle....................................................453

    2.12.103 Trace-MAC........................................................................453

    2.12.105 Therm.-Recal.-Cycle.........................................................454

    2.12.109 Noise-Offsets.....................................................................454

    2.12.110 Trace-Level........................................................................456

    2.12.111 Noise-Immunity..................................................................456

    2.12.114 Aggregate retry limit..........................................................459

    2.12.115 Omit-Global-Crypto-Sequence-Check...............................460

    2.12.116 Trace-Packets...................................................................460

    2.12.117 WPA-Handshake-Delay-ms...............................................460

    2.12.118WPA-Handshake-Timeout-Override-ms.............................461

    RM CLI HiLCOSRelease 9.14 01/17

    10

    Contents

  • 2.12.120 Rx-Aggregate-Flush-Timeout-ms......................................461

    2.12.121 HT-Fairness......................................................................462

    2.12.124 Trace-Mgmt-Packets.........................................................462

    2.12.125 Trace-Data-Packets..........................................................463

    2.12.130 DFS...................................................................................463

    2.12.248 Wireless-IDS.....................................................................471

    2.12.249 WLAN link status log.........................................................499

    2.12.250 Roaming-Statistics-Timeout..............................................505

    2.12.251 Prioritized-Channel-Scan..................................................505

    2.14 Time...................................................................................................507

    2.14.1 Fetch-Method........................................................................507

    2.14.2 Current-Time.........................................................................507

    2.14.7 UTC-in-Seconds....................................................................508

    2.14.10 Timezone.............................................................................508

    2.14.11 Daylight-saving-time............................................................509

    2.14.12 DST-clock-changes.............................................................509

    2.14.13 Get-Time.............................................................................511

    2.14.15 Holidays..............................................................................511

    2.14.16 Timeframe...........................................................................512

    2.15 LCR....................................................................................................514

    2.15.1 Router-Usage........................................................................514

    2.15.4 Time-List................................................................................514

    2.16 NetBIOS............................................................................................517

    2.16.1 Operating..............................................................................517

    2.16.2 Scope-ID...............................................................................518

    2.16.4 Peers.....................................................................................518

    2.16.5 Group list...............................................................................519

    RM CLI HiLCOSRelease 9.14 01/17

    11

    Contents

  • 2.16.6 Host List................................................................................521

    2.16.7 Server-List.............................................................................523

    2.16.8 Watchdogs............................................................................526

    2.16.9 Update...................................................................................526

    2.16.10 WAN-Update-Minutes.........................................................527

    2.16.11 Lease time...........................................................................527

    2.16.12 Networks.............................................................................527

    2.16.13 Browser-List........................................................................528

    2.16.14 Support-Browsing................................................................531

    2.17 DNS...................................................................................................531

    2.17.1 Operating..............................................................................531

    2.17.2 Domain..................................................................................532

    2.17.3 DHCP-Usage........................................................................532

    2.17.4 NetBIOS-Usage....................................................................532

    2.17.5 DNS-List................................................................................533

    2.17.6 Filter-List...............................................................................534

    2.17.7 Lease time.............................................................................537

    2.17.8 Dyn.-DNS-List.......................................................................537

    2.17.9 DNS-Destinations..................................................................538

    2.17.10 Service-Location-List...........................................................540

    2.17.11 Dynamic-SRV-List...............................................................541

    2.17.12 Resolve-Domain..................................................................542

    2.17.13 Sub-Domains......................................................................542

    2.17.14 Forwarder............................................................................543

    2.17.15 Tag-Configuration................................................................544

    2.18 Accounting.........................................................................................547

    2.18.1 Operating..............................................................................547

    RM CLI HiLCOSRelease 9.14 01/17

    12

    Contents

  • 2.18.2 Save-to-Flashrom..................................................................547

    2.18.3 Sort-by...................................................................................547

    2.18.4 Current user..........................................................................548

    2.18.5 Accounting-List......................................................................549

    2.18.6 Delete-Accounting-List..........................................................550

    2.18.8 Time-Snapshot......................................................................551

    2.18.9 Last snapshot........................................................................553

    2.18.10 Discriminator.......................................................................554

    2.19 VPN...................................................................................................555

    2.19.3 Isakmp...................................................................................555

    2.19.4 Proposals..............................................................................559

    2.19.5 Certificates-and-Keys............................................................570

    2.19.7 Layer.....................................................................................573

    2.19.8 Operating..............................................................................575

    2.19.9 VPN-Peers............................................................................576

    2.19.10 AggrMode-Proposal-List-Default.........................................582

    2.19.11 AggrMode-IKE-Group-Default.............................................583

    2.19.12 Additional-Gateways...........................................................583

    2.19.13 MainMode-Proposal-List-Default.........................................604

    2.19.14 MainMode-IKE-Group-Default.............................................604

    2.19.16 NAT-T-Operating.................................................................605

    2.19.17 Simple-Cert-RAS-Operating................................................606

    2.19.19 QuickMode-Proposal-List-Default.......................................606

    2.19.20 QuickMode-PFS-Group-Default..........................................606

    2.19.21 QuickMode-Shorthold-Time-Default....................................607

    2.19.22 Allow-Remote-Network-Selection.......................................607

    2.19.23 Establish-SAs-Collectively..................................................608

    RM CLI HiLCOSRelease 9.14 01/17

    13

    Contents

  • 2.19.24 Max-Concurrent-Connections.............................................609

    2.19.25 Flexibler-ID-Comparison.....................................................609

    2.19.26 NAT-T-Port-for-Rekeying....................................................610

    2.19.27 SSL encapsulation allowed.................................................610

    2.19.30 Anti-Replay-Window-Size...................................................610

    2.20 LAN-Bridge........................................................................................611

    2.20.1 Protocol-Version....................................................................611

    2.20.2 Bridge-Priority.......................................................................611

    2.20.4 Encapsulation-Table..............................................................612

    2.20.5 Max-Age................................................................................613

    2.20.6 Hello-Time.............................................................................613

    2.20.7 Forward-Delay.......................................................................614

    2.20.8 Isolierter-Mode......................................................................614

    2.20.10 Protocol-Table.....................................................................614

    2.20.11 Port-Data.............................................................................620

    2.20.12 Aging-Time..........................................................................623

    2.20.13 Priority-Mapping..................................................................624

    2.20.20 Spannning-Tree...................................................................625

    2.20.30 IGMP-Snooping...................................................................630

    2.20.40 DHCP-Snooping..................................................................639

    2.20.41 DHCPv6-Snooping..............................................................643

    2.20.42 RA-Snooping.......................................................................648

    2.20.43 PPPoE snooping.................................................................650

    2.20.248 L2-Firewall.........................................................................654

    2.21 HTTP.................................................................................................665

    2.21.1 Document root.......................................................................665

    2.21.2 Page headers........................................................................666

    RM CLI HiLCOSRelease 9.14 01/17

    14

    Contents

  • 2.21.3 Font-Family...........................................................................666

    2.21.5 Page headers........................................................................667

    2.21.6 Error-Page-Style...................................................................667

    2.21.7 Port........................................................................................667

    2.21.9 Max-Tunnel-Connections......................................................668

    2.21.10 Tunnel-Idle-Timeout............................................................668

    2.21.11 Session-Timeout..................................................................668

    2.21.13 Standard-Design.................................................................668

    2.21.14 Show-device-information.....................................................669

    2.21.15 HTTP-Compression............................................................670

    2.21.16 Keep-Server-Ports-Open....................................................670

    2.21.20 Rollout-Wizard.....................................................................672

    2.21.21 Max-HTTP-Job-Count.........................................................678

    2.21.30 File-Server...........................................................................678

    2.21.40 SSL......................................................................................679

    2.22 SYSLOG............................................................................................684

    2.22.1 Operating..............................................................................684

    2.22.2 SYSLOG table.......................................................................684

    2.22.3 Facility-Mapper......................................................................687

    2.22.4 Port........................................................................................688

    2.22.5 Messages-Table-Order..........................................................688

    2.22.8 Log-CLI-Changes..................................................................689

    2.22.9 Max-Message-Age................................................................689

    2.22.10 Remove-Old-Messages......................................................690

    2.22.11 Max-Age-Unit.......................................................................690

    2.22.12 Critical prio..........................................................................690

    2.23 Interfaces...........................................................................................691

    RM CLI HiLCOSRelease 9.14 01/17

    15

    Contents

  • 2.23.4 DSL.......................................................................................691

    2.23.7 Modem mobile.......................................................................693

    2.23.20 WLAN..................................................................................695

    2.23.21 LAN-interfaces....................................................................793

    2.23.30 Ethernet-Ports.....................................................................794

    2.23.40 Modem................................................................................798

    2.23.41 Mobile..................................................................................802

    2.24 Public-Spot-Module...........................................................................811

    2.24.1 Authentication-Mode.............................................................811

    2.24.2 User-Table.............................................................................812

    2.24.3 Provider-Table.......................................................................814

    2.24.5 Traffic-Limit-Bytes.................................................................820

    2.24.6 Server-Subdir........................................................................820

    2.24.7 Accounting cycle...................................................................821

    2.24.8 Page table.............................................................................821

    2.24.9 Roaming-Secret....................................................................823

    2.24.12 Communication port............................................................823

    2.24.14 Idle-Timeout........................................................................824

    2.24.15 Port table.............................................................................824

    2.24.16 Auto-Cleanup-User-Table....................................................825

    2.24.17 Provide-Server-Database....................................................825

    2.24.18 Disallow-Multiple-Login.......................................................825

    2.24.19 Add-User-Wizard.................................................................826

    2.24.20 VLAN-Table.........................................................................837

    2.24.21 Login-Page-Type.................................................................838

    2.24.22 Device-Hostname................................................................838

    2.24.23 MAC-Address-Table............................................................839

    RM CLI HiLCOSRelease 9.14 01/17

    16

    Contents

  • 2.24.24 MAC-Address-Check-Provider............................................840

    2.24.25 MAC-Address-Check-Cache-Time......................................840

    2.24.26 Station-Table-Limit..............................................................841

    2.24.30 Free-Server.........................................................................841

    2.24.31 Free networks.....................................................................841

    2.24.32 Free-Hosts-Minimum-TTL...................................................843

    2.24.33 Login-Text............................................................................844

    2.24.34 WAN-Connection.................................................................844

    2.24.35 Print-Logo-And-Headerboard..............................................845

    2.24.36User-Must-Accept-GTC........................................................845

    2.24.37 Print-Logout-Link.................................................................846

    2.24.40 XML-Interface......................................................................846

    2.24.41 Authentication-Modules.......................................................848

    2.24.42 WISPr..................................................................................873

    2.24.43 Advertisement.....................................................................876

    2.24.44 Manage user wizard............................................................881

    2.24.47 Check origin VLAN..............................................................883

    2.24.48 Circuit-IDs...........................................................................884

    2.24.50 Auto-Re-Login.....................................................................885

    2.24.60 Login-Text............................................................................887

    2.25 RADIUS.............................................................................................888

    2.25.4 Auth.-Timeout........................................................................888

    2.25.5 Auth.-Retry............................................................................889

    2.25.9 Backup-Query-Strategy.........................................................889

    2.25.10 Server..................................................................................889

    2.25.20 RADSEC.............................................................................931

    2.26 NTP....................................................................................................935

    RM CLI HiLCOSRelease 9.14 01/17

    17

    Contents

  • 2.26.2 Server-Operating...................................................................935

    2.26.3 BC-Mode...............................................................................936

    2.26.4 BC-Interval............................................................................936

    2.26.7 RQ-Interval............................................................................937

    2.26.11 RQ-Address.........................................................................937

    2.26.12 RQ-Tries..............................................................................939

    2.27 Mail....................................................................................................939

    2.27.1 SMTP-Server........................................................................939

    2.27.2 Serverport.............................................................................940

    2.27.3 POP3-Server.........................................................................940

    2.27.4 POP3-Port.............................................................................940

    2.27.5 User name.............................................................................941

    2.27.6 Password..............................................................................941

    2.27.7 E-Mail-Sender.......................................................................941

    2.27.8 Send again (min)...................................................................942

    2.27.9 Hold time (hrs).......................................................................942

    2.27.10 Buffers.................................................................................942

    2.27.11 Loopback-Addr....................................................................943

    2.27.12 SMTP-use-TLS...................................................................943

    2.27.13 SMTP-Authentication..........................................................944

    2.30 IEEE802.1x........................................................................................945

    2.30.3 Radius-Server.......................................................................945

    2.30.4 Ports......................................................................................949

    2.31 PPPoE-Server...................................................................................953

    2.31.1 Operating..............................................................................954

    2.31.2 Name list...............................................................................954

    2.31.3 Service..................................................................................955

    RM CLI HiLCOSRelease 9.14 01/17

    18

    Contents

  • 2.31.4 Session-Limit.........................................................................955

    2.31.5 Ports......................................................................................956

    2.31.6 AC-Name..............................................................................957

    2.32 VLAN.................................................................................................957

    2.32.1 Networks...............................................................................957

    2.32.2 Port-Table..............................................................................959

    2.32.4 Operating..............................................................................962

    2.32.5 Tag-Value..............................................................................962

    2.34 Printer................................................................................................962

    2.34.1 Printer....................................................................................963

    2.34.2 Access-List............................................................................965

    2.35 ECHO-Server....................................................................................966

    2.35.1 Operating..............................................................................966

    2.35.2 Access table..........................................................................967

    2.35.3 TCP-Timeout.........................................................................968

    2.36 Performance-Monitoring....................................................................969

    2.36.2 RttMonAdmin........................................................................969

    2.36.3 RttMonEchoAdmin................................................................970

    2.36.4 RttMonStatistics....................................................................972

    2.37 WLAN-Management..........................................................................978

    2.37.1 AP-Configuration...................................................................978

    2.37.5 CAPWAP-Port.....................................................................1142

    2.37.6 Autoaccept-AP....................................................................1143

    2.37.7 Accept-AP...........................................................................1144

    2.37.8 Provide-default-configuration..............................................1145

    2.37.9 Disconnect-AP....................................................................1146

    2.37.10 Notification........................................................................1146

    RM CLI HiLCOSRelease 9.14 01/17

    19

    Contents

  • 2.37.19 Start-automatic-radio-field-optimization............................1149

    2.37.21 Access rules......................................................................1150

    2.37.27 Central-Firmware-Management........................................1155

    2.37.29 Allow WAN connections....................................................1161

    2.37.30 Sync-WTP-Password........................................................1162

    2.37.31 Interval-for-status-table-cleanup.......................................1162

    2.37.32 License count....................................................................1162

    2.37.33 License limit......................................................................1163

    2.37.34 WLC cluster.......................................................................1163

    2.37.35 RADIUS-Server-Profiles....................................................1169

    2.37.36 CAPWAP-Operating..........................................................1174

    2.37.37 Preference.........................................................................1175

    2.37.40 Client Steering...................................................................1175

    2.38 LLDP................................................................................................1181

    2.38.1 Message-TX-Interval...........................................................1182

    2.38.2 Message-Tx-Hold-Multiplier................................................1182

    2.38.3 Reinit-Delay.........................................................................1183

    2.38.4 Tx-Delay..............................................................................1183

    2.38.5 Notification-Interval.............................................................1184

    2.38.6 Ports....................................................................................1184

    2.38.7 Management-Addresses.....................................................1188

    2.38.8 Protocol...............................................................................1189

    2.38.9 Immediate-Delete................................................................1190

    2.38.10 Operating..........................................................................1190

    2.39 Certificates.......................................................................................1191

    2.39.1 SCEP-Client........................................................................1191

    2.39.2 SCEP-CA............................................................................1205

    RM CLI HiLCOSRelease 9.14 01/17

    20

    Contents

  • 2.39.3 CRLs...................................................................................1246

    2.40 GPS.................................................................................................1249

    2.40.1 Operating............................................................................1249

    2.51 HiDiscovery.....................................................................................1250

    2.51.1 Server-Operating.................................................................1250

    2.52 COM-Ports.......................................................................................1250

    2.52.1 Devices...............................................................................1251

    2.52.2 COM-Port-Server................................................................1251

    2.52.3 WAN....................................................................................1263

    2.52.4 Serial configuration.............................................................1264

    2.53 Temperature-Monitor.......................................................................1265

    2.53.1 Upper-Limit-Degrees...........................................................1265

    2.53.2 Lower-Limit-Degrees...........................................................1266

    2.54 TACACS..........................................................................................1266

    2.54.2 Authorization.......................................................................1266

    2.54.3 Accounting..........................................................................1267

    2.54.6 Shared-Secret.....................................................................1267

    2.54.7 Encryption...........................................................................1267

    2.54.9 Server..................................................................................1268

    2.54.10 Fallback to local users.......................................................1269

    2.54.11 SNMP-GET-Requests-Authorisation.................................1270

    2.54.11 SNMP-GET-Requests-Accounting....................................1270

    2.54.13 Bypass-Tacacs-for-CRON/scripts/action-table.................1271

    2.54.14 Include-value-into-authorisation-request...........................1272

    2.59 WLAN-Management........................................................................1272

    2.59.1 Static-WLC-Configuration...................................................1272

    2.59.3 CAPWAP-Tuning.................................................................1274

    RM CLI HiLCOSRelease 9.14 01/17

    21

    Contents

  • 2.59.4 AutoWDS............................................................................1277

    2.59.5 CAPWAP-Port.....................................................................1281

    2.59.120 Log-Entries......................................................................1281

    2.60 Autoload..........................................................................................1282

    2.60.1 Network...............................................................................1282

    2.60.56 USB...................................................................................1287

    2.63 Packet-Capture................................................................................1289

    2.63.1 LCOSCap-Operating...........................................................1289

    2.63.2 LCOSCap-Port....................................................................1289

    2.63.11 RPCap-Operating..............................................................1290

    2.63.12 RPCap-Port.......................................................................1290

    2.70 IPv6.................................................................................................1291

    2.70.1 Tunnel.................................................................................1291

    2.70.2 Router-Advertisement.........................................................1304

    2.70.3 DHCPv6..............................................................................1323

    2.70.4 Network...............................................................................1347

    2.70.5 Firewall................................................................................1353

    2.70.6 LAN-Interfaces....................................................................1384

    2.70.7 WAN-Interfaces...................................................................1390

    2.70.10 Operating..........................................................................1396

    2.70.11 Forwarding.........................................................................1396

    2.70.12 Router...............................................................................1397

    2.70.13 ICMPv6.............................................................................1399

    2.70.14 RAS interface....................................................................1401

    2.80 Relays..............................................................................................1405

    2.80.1 Relay1.................................................................................1405

    2.80.2 Relay2.................................................................................1405

    RM CLI HiLCOSRelease 9.14 01/17

    22

    Contents

  • 3 Firmware..............................................................................................1407

    3.1 Version table......................................................................................1407

    3.1.1 Ifc...........................................................................................1407

    3.1.2 Module..................................................................................1407

    3.1.3 Version..................................................................................1407

    3.1.4 Serial number........................................................................1407

    3.2 Table Firmsafe...................................................................................1408

    3.2.1 Position.................................................................................1408

    3.2.2 Status....................................................................................1408

    3.2.3 Version..................................................................................1408

    3.2.4 Date.......................................................................................1408

    3.2.5 Size.......................................................................................1409

    3.2.6 Index......................................................................................1409

    3.3 Firmsafe mode...................................................................................1409

    3.4 Timeout-Firmsafe...............................................................................1410

    3.7 Feature-Word.....................................................................................1411

    4 Other....................................................................................................1412

    4.1 Manual dialing...................................................................................1412

    4.1.1 Connect.................................................................................1412

    4.1.2 Disconnect............................................................................1412

    4.2 System-Boot......................................................................................1412

    4.5 Cold boot...........................................................................................1413

    4.7 Flash restore......................................................................................1413

    RM CLI HiLCOSRelease 9.14 01/17

    23

    Contents

  • 1 Introduction

    1.2 Configuration with Telnet

    Open Telnet sessionTo commence the configuration, start Telnet from the Windows command linewith command:

    D C:\>telnet 10.0.0.1

    Telnet establishes a connection to the device with the IP address entered.

    After entering the password (assuming one has been set to protect the config-uration) all of the configuration commands are available to you.

    Note: Linux and Unix additionally support Telnet sessions via SSL-encryptedconnections. Depending on the distribution it may be necessary to replacethe standard Telnet application with an SSL-capable version. Start theencrypted Telnet connection with the following command:

    D C:\>telnet -z ssl 10.0.0.1 telnets

    Changing the console languageTerminal mode is available in English or German. The devices are set withEnglish as the standard console language. . If necessary, change the consolelanguage with the following commands:

    WEBconfig: /Setup/Config-Module/Language

    Close the Telnet sessionTo close the Telnet session, enter the command exit at the command prompt:

    RM CLI HiLCOSRelease 9.14 01/17

    24

    1.2 Configuration with Telnet 1 Introduction

  • D C:\>exit

    Structure of the command-line interfaceThe command-line interface is always structured as follows:

    D Status

    Contains the status and statistics of all internal modules in the device

    D Setup

    Contains all adjustable parameters of all internal modules in the device

    D Firmware

    Contains the firmware management

    D Other

    Contains actions for establishing and terminating connections, reset, rebootand upload.

    1.3 Commands for the console

    The HiLCOS command-line interface is operated with the following DOS- orUNIX-style commands. Some of the available menu commands can be dis-played using the HELP command.

    RM CLI HiLCOSRelease 9.14 01/17

    25

    1 Introduction 1.3 Commands for the console

  • Note: Which commands are available depends upon the equipment of thedevice.

    Important: Some commands require special privileges in order to run, andthese are listed along with the respective command. Commands that do notspecify any rights have no restrictions.

    DescriptionCommand

    For use in script files: For the command that follows, this sets theorder of the columns for the arguments in the case that the columnsin the table differ from the default (e.g. a column was added).

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    tab

    Display of the SNMP Management Information Base. Availableonly on devices without a unified MIB.

    Access rights: Supervisor-Read,Local-Admin-Read

    readmib

    Outputs the status of all SNMP IDs for the device.readstatus

    Load a new firmware file (only via TFTP).

    Access rights: Supervisor-Write

    writeflash

    Uploads a certificate file to the device. Possible arguments are:loadfile [-a ] [-s] [-n]

    D -a: Specifies the source address of the file:[-f ] [-o

    – a.b.c.d: Source IP address] [-c] [-p – INT: Use the address of the first intranet interface as the

    source address] [-d] [-C n|d] [-m – DMZ: Use the address of the first DMZ interface as the

    source address] [-u] [-x] [-i]

    – LBx: Use the loopback address x (0..f) as the sourceaddress

    – : Use the address of the LAN interface as the source address

    D -s: Address of the TFTP serverD -n: Ignore server name on SSL/TLS connectionsD -f: of the configuration file on the TFTP serverD -o: Destination file for file downloadD -c: File with the root certificate for HTTPSD -p: File with unencrypted PKCS#12 container for

    HTTPS CA certificates and/or client-side authenticationD -d: to decrypt downloaded encrypted PKCS#12

    containers

    RM CLI HiLCOSRelease 9.14 01/17

    26

    1.3 Commands for the console 1 Introduction

  • DescriptionCommand

    D -C: Checks whether firmware is newer than (n) or differentfrom (d) the current firmware

    D -m: Set a minimum of the firmwareD -u: Download firmware file unconditionally; skip the version

    check.D -x: File with additional CA certificates for HTTPS

    checks; the value ' none' prevents the default certificates frombeing downloaded

    D -i: Send Sysinfo as a POST request (for HTTP(S) only)

    Note: The options [-f] and [-s] and the URL cannot be used sim-ultaneously. For HTTP(S) downloads, you must specify the sourceby means of a URL. The maximum length of the URL is 252characters.

    Access rights: Supervisor-Write

    Selects a language for the CLI display. The command language? lists the available languages.

    language

    Establishes an SSH connection to the . Possible argumentsare:

    ssh [-?|h] [-Loopback-Address] [-p Port][-C] [-j Keepalive-Interval]

    D -?|h: Outputs the help text.D -a|b: Allows a route or loopback address to be specified for

    the device to use if the destination can be reached via multipleroutes. The function of -a and -b is identical. -b is the usualoption used by anOpenSSH client on UNIX systems, whereassome other commands integrated into HiLCOS use -a tospecify a loopback address.

    D -p: Sets the of the hostD -C: Enforces compressed data transferD -j: Specifies how frequently the client sends a keepalive.

    Establishes a Telnet connection to the given .telnet

    Creates or deletes the SSH key in the device. Possible argumentsare:

    sshkeygen [-h] [-q] [-tdsa|rsa|ecdsa] [-b ][-f ] [-R]

    D -h: Displays a brief help text about the available parametersD -q: The device overrides existing keys without a prompt (quiet

    mode)D -t: This parameter specifies what type of key is generated.

    SSH supports the following types of keys:

    – RSA– DSA– ECDSA

    D -b: This parameter sets the length of the RSA key in bits. Ifyou do not specify a length, the command produces a key witha length of 1024 bits by default.

    RM CLI HiLCOSRelease 9.14 01/17

    27

    1 Introduction 1.3 Commands for the console

  • DescriptionCommand

    D -f: These parameters specify the mounting point of the gen-erated key file in the device file system. The choice of mountingpoint depends on the type key you are generating. The choicesavailable to you are:

    – ssh_rsakey for RSA keys– ssh_dsakey for DSA keys– ssh_ecdsakey for ECDSA keys

    To store your SSH public key using SSH

    Access rights: Supervisor-Write

    sshcopyid

    Extends the rights of authenticated TACACS+ users. Possibleparameters are:

    enable

    D 0: No rightsD 1: Read-onlyD 3: Read-writeD 5: Read-only-limited AdminD 7: Read-write-limited AdminD 9: Read-only AdminD 11: Read-write AdminD 15: Supervisor (root)

    Enables you to save and delete boot configurations. Options:bootconfig [-s (1|2|all)][-r (1|2|all)]

    D -s: Stores the current configuration of a device either as acustom default setting (1), rollout configuration (2), or both(all).

    D -r: Optionally deletes the current custom default setting (1),the rollout configuration (2), or both (all).

    Access rights: Supervisor-Write

    Output of information via PCI devices

    Access rights: Supervisor-Read

    lspci

    Resets the console session to script mode. In this state, commandsentered are not transferred directly to the device's configurationRAM but initially to its script memory. Possible arguments are:

    beginscript [-u] [-C d]

    D -u: Forces the unconditional execution of a script or a config-uration.

    D -C d: Skips the default "Check for difference. Also applieswhen the -u option is used.

    Access rights: Supervisor-Write

    Outputs the current volume table.unmount [-?][-f]

    D -f: Releases the specified volume. may be thevolume ID or any mount point.

    D -?: Outputs the help text.

    RM CLI HiLCOSRelease 9.14 01/17

    28

    1.3 Commands for the console 1 Introduction

  • DescriptionCommand

    Switch to the current directory. Various abbreviations can be used,such as replacing cd ../.. with cd ..., etc.

    cd

    Resets individual parameters, tables or entire menu trees back totheir default configuration. If indicates a branch of themenu tree, then the option -r (recursive) must be entered.

    Access rights: Supervisor-Write

    default [-r]

    Deletes the table row in the current table or the table refer-enced in the branch of the menu tree with . Enter the linenumber for the .

    del|delete|rm []|*

    The wildcard symbol * deletes a table, for example, delConfig/Cron-Table *.

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    Clears the contents of the persistent boot log memory.deletebootlog

    Displays the current directory content. Possible arguments are:dir|list|ls|llong|l [-a][-r] [-s] [][]

    D -a: In addition to the content of the query, this also lists theSNMP IDs. The output begins with the SNMP ID of the devicefollowed by the SNMP ID of the current menu. The SNMP IDsof the subordinate items can be read from the individual entries.

    D -r: Also lists all subdirectories as well as the tables they con-tain.

    D -s: Sorts the display of the current directory; grouped by subdirectories, tables, values, and actions; in ascending alphabet-ical order.

    Executes the action in the current or the referenced directory, forexample, do Other/Coldstart. If the action has additionalparameters, they can be added at the end.

    do []

    Displays the commands on the console.echo

    Ends the terminal session.exit|quit|x

    Activates the software option with the specified activation code.

    Access rights: Supervisor-Write

    feature

    Regulates the storing of configuration changes using the commandline. By default, changes to the configuration using commands in

    flash yes|no

    the command line are written directly to the boot-resistant Flashmemory of the devices (yes). If updating the configuration issuppressed in the Flash memory (no), changes are only stored inRAM (deleted on booting).

    Access rights: Supervisor-Write

    Lists the respective environmental variables (without line feed).Please also note the command "printenv".

    getenv

    RM CLI HiLCOSRelease 9.14 01/17

    29

    1 Introduction 1.3 Commands for the console

  • DescriptionCommand

    Displays a list of recently executed commands. Command !# canbe used to directly call the list commands using their number (#):For example, !3 executes the third command in the list.

    history

    Starts iPerf on the device in order to perform a bandwidthmeasurement with an iPerf2 remote station. Possible argumentsare:

    iperf [-s|-c ] [-u][-p ] [-B ][-c] [-b[/][kKmM]] [-l

    D Client/server] [-t ] [-d][-r] [-L ] [-h] – -u, --udp: Uses UDP instead of TCP.

    – -p, --port : Connects with or expects datapackets on this port (default: 5001).

    – -B, --bind : Permits the connectiononly via the specified interface (IP address or interfacename).

    D Server specific

    – -s, --server: Starts iPerf in server mode and waitsfor an iPerf client to contact it.

    D Client specific

    – -c, --client : Starts iPerf in client mode andconnects with the iPerf server (IP address or DNSname).

    – -b, --bandwidth [/]{kKmM}:Limit the [down]/up-stream bandwidth when analyzing aUDP connection. This Is specified as kilobytes (kK) ormegabytes (mM) per second (default: 1 Mbps).

    – -l, --len : Sets the length of the UDP datapackets.

    – -t, --time : Sets the duration of the connec-tion in seconds (default: 10 seconds).

    – -d, --dualtest: The test is bidirectional: the iPerfserver and client send and receive at the same time.

    – -r, --tradeoff: The test is sequential: the iPerf serverand client send and receive one after the other.

    – -L, --listenport : Specifies the port wherethe device in bidirectional mode expects to receive datapackets from the remote iPerf server (default: 5001).

    D Miscellaneous

    – -h, --help: Outputs the help text.

    Deletes the remaining unprocessed content of a script sessionSelect the script session using its name.

    Access rights: Supervisor-Write

    killscript

    Only available on WLAN devices. It displays the results of theWLAN link test.

    Access rights: Supervisor-Write

    linktest

    RM CLI HiLCOSRelease 9.14 01/17

    30

    1.3 Commands for the console 1 Introduction

  • DescriptionCommandExecution right: WLAN link test

    Searches for devices via LL2M in the LAN.

    Access rights: Supervisor-Write

    ll2mdetect

    Sends one command per LL2M to a device in the LAN.

    Access rights: Supervisor-Write

    ll2mexec

    Uploads a configuration file to the device via TFTP. You canoptionally enter the server address and the file name, or the entireURL.

    Access rights: Supervisor-Write

    loadconfig (-s -f)|

    Uploads firmware to the device via TFTP. You can optionally enterthe server address and the file name, or the entire URL.

    Access rights: Supervisor-Write

    loadfirmware (-s -f)|

    Uploads a configuration script to the device via TFTP. You canoptionally enter the server address and the file name, or the entireURL.

    Access rights: Supervisor-Write

    loadscript (-s -f)|

    Changes the password of the current user account. In order tochange the password without having to change the subsequent

    setpass|passwd [-n ]

    input request, use the option switch -n with the new and oldpassword.

    Changes the password of the current user account.

    In order to change the password without a subsequent input prompt,use the option switch -n while entering the new and old password.

    setpass|passwd [-u][-n ]

    In order to change the password of the local user account whenauthentication by TACACS+ is enabled, use the option switch -uwith the name of the corresponding user. If the local user does notexist or the user name is missing, the command aborts. The usermust also have supervisor rights, or authorization by TACACSmustbe enabled.

    Sends an ICMP echo request to the IP address specified. For moreinformation about the command and the specifics of pinging IPv6

    ping

    ping -6 %

    addresses, see the section Parameter overview for the pingcommand on page 37.

    Shows an overview of all environmental variables and their values.printenv

    Shows the complete configuration in the format of the device syntax.

    Access rights: Supervisor-Read

    readconfig

    Shows the complete configuration in the format of the device syntax.readconfig [-h] [-s]

    D -h: Adds a checksum to the configuration file.D -s : Encrypts the configuration file with the use

    of the specified password.

    RM CLI HiLCOSRelease 9.14 01/17

    31

    1 Introduction 1.3 Commands for the console

  • DescriptionCommandAccess rights: Supervisor-Read

    The readscript command generates a text dump of all commandsand parameters required to configure the device in its current state.You can use the following option switches for this:

    readscript [-n] [-d] [-i][-c] [-m]

    D -n: The text output is only numerical without identifiers. Theoutput only contains the current status values of the configur-ation as well as the associated SNMP IDs.

    D -d: The default values are included in the text output.D -i: The table designations are included in the text output.D -c: Includes any comments contained in the script file.D -m: The text is output to the screen in a compact but difficult

    to read format (no indentations).

    Access rights: Supervisor-Read

    The readscript command generates a text dump of all commandsand parameters required to configure the device in its current state.You can use the following option switches for this:

    readscript [-n] [-d] [-i][-c] [-m] [-h] [-s]

    D -n: The text output is only numerical without identifiers. Theoutput only contains the current status values of the configur-ation as well as the associated SNMP IDs.

    D -d: The default values are included in the text output.D -i: The table designations are included in the text output.D -c: Includes any comments contained in the script file.D -m: The text is output to the screen in a compact but difficult

    to read format (no indentations).D -h: Adds a checksum to the script file.D -s : Encrypts the script file with the use of the

    specified password.

    Access rights: Supervisor-Read

    The DHCPv6 client returns its IPv6 address and/or its prefix to theDHCPv6 server. It then submits a new request for an address or

    release [-x]*|

    prefix to the DHCPv6 server. Depending on the provider, theserver assigns a new address to the client, or reassigns the previ-ous one. Whether the client receives a different address or prefixis determined solely by the server.

    The option switch -x suppresses the confirmation message.

    The * wildcard applies the command on all of the interfaces andprefix delegations. Alternatively, you can specify one or more spe-cific interfaces.

    Release IPv6 address: Repeats the specified command every seconds until the process is ended with new input.

    repeat

    Deletes the files of the user-specific rollout wizard from the filesystem of the device. Possible files are:

    rollout (-r|-remove)

    D wizard: Deletes the wizardD template: Deletes the template

    RM CLI HiLCOSRelease 9.14 01/17

    32

    1.3 Commands for the console 1 Introduction

  • DescriptionCommand

    D logo: Deletes the logoD all: Deletes the wizard, the template and the logo

    Access rights: Supervisor-Write

    Delays the processing of configuration commands by a particulartime or terminates them at a particular time.

    sleep [-u]

    Applicable values for are s, m and h for seconds,minutes and hours. If no suffix is defined, the command uses milli-seconds. With option switch -u, the sleep command acceptstimes in format MM/DD/YYYY hh:mm:ss (English) or in formatTT.MM.JJJJ hh:mm:ss (German). Times will only be acceptedif the system time has been set.

    Ends the PING commandstop

    Sets a configuration parameter to a particular value. If theconfiguration parameter is a table value, a value must be specified

    add|set []

    for each column. Entering the * character leaves any existing tableentry unchanged.

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    Lists all possible input values for a configuration parameter. If nospecific path is entered, the possible input values for allconfiguration parameters in the current directory are listed.

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    add|set [] ?

    Sets an environmental variable to the specified value.

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    setenv

    Displays selected internal data, such as the last boot processes(bootlog), firewall filter rules (filter), VPN rules (VPN) or

    show

    memory utilization (mem, heap). With additional filter argumentsyou can further limit the output.

    For an overview of all possible options, enter show ?. For inform-ation on displaying IPv6-specific data, read the section Overviewof IPv6-specific show commands on page 43.

    Access rights: Supervisor-Read,Local-Admin-Read

    Shows the system information (e.g., hardware release, softwareversion, MAC address, serial number, etc.).

    sysinfo

    Sends a test e-mail. A sender address and receiver address arenecessary; real name, subject line and message content areoptional.

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    testmail [ ]

    RM CLI HiLCOSRelease 9.14 01/17

    33

    1 Introduction 1.3 Commands for the console

  • DescriptionCommand

    Sets a time in format MM/DD/YYYY hh:mm:ss.

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    time

    Execution right: Time Wizard

    Starts a trace command for output of diagnosis data. With additionalfilter arguments you can further limit the output. For further

    trace

    information on this command refer to the section Parameteroverview for the trace command on page 39.

    Access rights: Supervisor-Read,Limited-Admin-Read,Limited-Admin-Write

    Deletes the specified environmental variable.

    Access rights: Supervisor-Write,Local-Admin-Write,Limited-Admin-Write

    unsetenv

    Lists active configuration sessions.who

    Writes a new configuration on the device in the syntax format forthe device. The system interprets all of the following lines as

    writeconfig [-u] [-C d]

    configuration values until two empty lines are read. Possiblearguments are:

    D -u: Forces the unconditional execution of a script or a config-uration.

    D -C d: Skips the default "Check for difference. Also applieswhen the -u option is used.

    Access rights: Supervisor-Write

    Repeat last command!!

    Repeat command times!

    Repeat last command beginning with !

    Comment#

    Table 1: Overview of all commands available at the command line

    Legend

    D Characters and brackets:

    – Objects, in this case dynamic or situation-dependent, are in anglebrackets.

    – Round brackets group command components, for a better overview.– Vertical lines (pipes) separate alternative inputs.– Square brackets describe optional switches.

    RM CLI HiLCOSRelease 9.14 01/17

    34

    1.3 Commands for the console 1 Introduction

  • It follows that all command components that are not in square bracketsare necessary information.

    D :

    – Describes the path name for a menu or parameter, separated by "/" or"\".

    – .. means: one level higher– . means: the current level

    D :

    – Describes a possible input value.– "" is a blank input value

    D :

    – Describes a character sequence of [0…9] [A…Z] [a…z] [ _ ].– The first character cannot be a digit.– There is no difference between small letters and capital letters.

    D :

    – The output of some commands can be restricted by entering a filterexpression. Filtering does not occur line by line, but in blocks,depending on the command.

    – A filter expression starts with the "@" symbol by itself and ends eitherat the end of the line or at a ";" (semicolon) to end the current command.

    – A filter expression also consists of one or more search patterns, whichare separated by blank spaces and preceded either by no operator (ORpattern), a "+" operator (AND pattern) or a "-" operator (NOT pattern).

    – For the execution of the command, an information block is output exactlywhen at least one of the "OR" patterns, all "AND" patterns or none ofthe "NOT" patterns matches. Capitalization is ignored.

    – For a search pattern to contain characters for structuring in the filtersyntax (e.g., blank characters), then the entire search pattern can beenclosed in "". Alternatively, the symbol "\" can be placed before thespecial characters. If you want to search for a quotation mark (") or "\",another "\" symbol has to be placed in front of it.

    Note: Entering the start of the word, if it is unique, is sufficient.

    RM CLI HiLCOSRelease 9.14 01/17

    35

    1 Introduction 1.3 Commands for the console

  • Explanations for addressing, syntax and command input

    D All commands and directory/parameter names can be entered using theirshort-forms as long as they are unambiguous. For example, the commandsysinfo can be shortened to sys and cd Management to c ma. Theinput cd /s is not valid, however, since it corresponds to both cd /Setupand cd /Status.

    D Directories can be addressed with the corresponding SNMP ID. Forexample, the command cd /2/8/10/2 has the same effect as cd/Setup/IP-router/Firewall/Rules.

    D Multiple values in a table row can be changed with one command, forexample in the rules table of the IPv4 firewall:

    – set WINS UDP sets the protocol of the WINS rule to UDP– set WINS UDP ANYHOST sets the protocol of the WINS rule to UDP

    and the destination to ANY-HOST– set WINS * ANYHOST also sets the destination of the WINS rule to

    ANYHOST; the asterisk means that the protocol remains unchanged

    D The values in a table row can alternatively be addressed via the columnname or the position number in curly brackets. The command set ? inthe table shows the name, the possible input values and the positionnumber for each column. For example, in the rules table of the firewall,the destination has the number 4:

    – set WINS {4} ANYHOST sets the destination of the WINS rule toANYHOST

    – set WINS {destination} ANYHOST also sets the destination ofthe WINS rule to ANYHOST

    – set WINS {dest} ANYHOST sets the destination of the WINS ruleto ANYHOST, because specifying dest here is sufficient to uniquelyidentify the column name.

    D Names that contain spaces must be enclosed within quotation marks (““).

    Command-specific help

    D A command-specific help function is available for actions and commands(call the function with a question mark as the argument). For example,ping ? shows the options of the integrated ping command.

    RM CLI HiLCOSRelease 9.14 01/17

    36

    1.3 Commands for the console 1 Introduction

  • D Enter help or ? on the command line for a complete listing of the availableshell commands.

    Parameter overview for the ping commandThe ping command entered at the command prompt of a Telnet or terminalconnection sends an "ICMP echo-request" packet to the destination addressof the host to be checked. If the receiver supports the protocol and it is notfiltered out in the firewall, the destination host will respond with an "ICMP echoreply". If the target computer is not reachable, the last device before the hostresponds with a "network unreachable" or "host unreachable" message.

    The syntax of the ping command is as follows:

    ping [-fnqr] [-s n] [-i n] [-c n] [-a a.b.c.d] destination

    The meaning of the optional parameters is explained in the following table:

    MeaningParameter

    Sets the ping's sender address (default: IP address of the device.-a a.b.c.d

    Sets the intranet address of the device as the sender address-a INT

    Sets the DMZ address of the device as the sender address-a DMZ

    Sets one of the 16 loopback addresses in the device as the senderaddress. Valid values for x are the hexadecimal values 0 – f

    -a LBx

    Performs a ping command to the link-local address via the interfacespecified by .

    -6 %

    For IPv6, the scope of parameters is of central importance: IPv6requires a link-local address (fe80::/10) to be assigned to everynetwork interface (logical or physical) on which the IPv6 protocolis enabled, so you must specify the scope when pinging a link-local address. This is the only way that the ping command knowswhich interface it should send the packet to. A percent sign (%)separates the name of the interface from the IPv6 address.

    Examples:

    D ping -6 fe80::1%INTRANET

    Ping the link-local address "fe80::1", which is accessible viathe interface and/or the network "INTRANET".

    D ping -6 2001:db8::1

    Pings the global IPv6 address '2001:db8::1".

    Sets an IPv6 loopback interface as the sender address.-6

    RM CLI HiLCOSRelease 9.14 01/17

    37

    1 Introduction 1.3 Commands for the console

  • MeaningParameter

    flood ping: Sends a large number of pings in a short time. Can beused to test network bandwidth, for example. WARNING: floodping can easily be misinterpreted as a DoS attack.

    -f

    Returns the computer name of a specified IP address-n

    Immediately sends another request after a response-o

    Ping command returns no output to the console (quiet)-q

    Changes to traceroute mode: The route taken by the data packetsunderway to the target computer is shown with all of theintermediate stations

    -r

    Sets the packet size to n bytes (max. 65500)-s n

    Time between packets in seconds-i n

    Send n ping signals-c n

    Address or host name of the target computerDestination

    RM CLI HiLCOSRelease 9.14 01/17

    38

    1.3 Commands for the console 1 Introduction

  • MeaningParameter

    Entering "stop" or pressing the RETURN button terminates the pingcommand

    stop /

    Table 2: Overview of optional parameters for the ping command

    Parameter overview for the trace command

    Note: The traces available for a particular model can be displayed by enteringtrace without any arguments.

    ...causes the following message in the trace:This parameter ...

    Connection status messagesStatus

    Connection error messagesError

    PPP protocol negotiationPPP

    RM CLI HiLCOSRelease 9.14 01/17

    39

    1 Introduction 1.3 Commands for the console

  • ...causes the following message in the trace:This parameter ...

    Least cost routerLCR

    Script negotiationScript

    Displays firewall eventsFirewall

    IP routing information protocolRIP

    Address resolution protocolARP

    Internet control message protocolICMP

    Events in the masquerading moduleIP masquerading

    Dy