FireBrick FB2500 User Manual
   Next

FireBrick FB2500 User Manual

This User Manual documents Software version V1.46.000

Copyright © 2012-2017 FireBrick Ltd.

Table of Contents

Preface
1. Introduction
1.1. The FB2500
1.1.1. Where do I start?
1.1.2. What can it do?
1.1.3. Ethernet port capabilities
1.1.4. Differences between the devices in the FB2x00 series
1.1.5. Software features
1.1.6. Migration from previous FireBrick models
1.2. About this Manual
1.2.1. Version
1.2.2. Intended audience
1.2.3. Technical details
1.2.4. Document style
1.2.5. Document conventions
1.2.6. Comments and feedback
1.3. Additional Resources
1.3.1. Technical Support
1.3.2. IRC Channel
1.3.3. Application Notes
1.3.4. White Papers
1.3.5. Training Courses
2. Getting Started
2.1. IP addressing
2.2. Accessing the web-based user interface
2.2.1. Add a new user
3. Configuration
3.1. The Object Hierarchy
3.2. The Object Model
3.2.1. Formal definition of the object model
3.2.2. Common attributes
3.3. Configuration Methods
3.4. Web User Interface Overview
3.4.1. User Interface layout
3.4.1.1. Customising the layout
3.4.2. Config pages and the object hierarchy
3.4.2.1. Configuration categories
3.4.2.2. Object settings
3.4.3. Navigating around the User Interface
3.4.4. Backing up / restoring the configuration
3.5. Configuration using XML
3.5.1. Introduction to XML
3.5.2. The root element - <config>
3.5.3. Viewing or editing XML
3.5.4. Example XML configuration
3.6. Downloading/Uploading the configuration
3.6.1. Download
3.6.2. Upload
4. System Administration
4.1. User Management
4.1.1. Login level
4.1.2. Configuration access level
4.1.3. Login idle timeout
4.1.4. Restricting user logins
4.1.4.1. Restrict by IP address
4.1.4.2. Logged in IP address
4.1.4.3. Restrict by profile
4.1.5. Password change
4.1.6. One Time Password (OTP)
4.2. General System settings
4.2.1. System name (hostname)
4.2.2. Administrative details
4.2.3. System-level event logging control
4.2.4. Home page web links
4.3. Software Upgrades
4.3.1. Software release types
4.3.1.1. Breakpoint releases
4.3.2. Identifying current software version
4.3.3. Internet-based upgrade process
4.3.3.1. Manually initiating upgrades
4.3.3.2. Controlling automatic software updates
4.3.4. Manual upgrade
4.4. Boot Process
4.4.1. LED indications
4.4.1.1. Power LED status indications
4.4.1.2. Port LEDs
5. Event Logging
5.1. Overview
5.1.1. Log targets
5.1.1.1. Logging to Flash memory
5.1.1.2. Logging to the Console
5.2. Enabling logging
5.3. Logging to external destinations
5.3.1. Syslog
5.3.2. Email
5.3.2.1. E-mail process logging
5.4. Factory reset configuration log targets
5.5. Performance
5.6. Viewing logs
5.6.1. Viewing logs in the User Interface
5.6.2. Viewing logs in the CLI environment
5.7. System-event logging
5.8. Using Profiles
6. Interfaces and Subnets
6.1. Relationship between Interfaces and Physical Ports
6.1.1. Port groups
6.1.2. Interfaces
6.2. Defining port groups
6.3. Defining an interface
6.3.1. Defining subnets
6.3.1.1. Source filtering
6.3.1.2. Using DHCP to configure a subnet
6.3.2. Setting up DHCP server parameters
6.3.2.1. Fixed/Static DHCP allocations
6.3.2.2. Restricted allocations
6.3.2.3. Special DHCP options
6.3.3. DHCP Relay Agent
6.4. Physical port settings
6.4.1. Disabling auto-negotiation
6.4.2. Setting port speed
6.4.3. Setting duplex mode
6.4.4. Defining port LED functions
7. Session Handling
7.1. Routing vs. Firewalling
7.2. Session Tracking
7.2.1. Session termination
7.3. Session Rules
7.3.1. Overview
7.3.2. Processing flow
7.3.3. Defining Rule-Sets and Rules
7.3.3.1. Recommended method of implementing firewalling
7.3.3.2. Changes to session traffic
7.3.3.3. Graphing and traffic shaping
7.3.3.4. Configuring session time-outs
7.3.3.5. Load balancing
7.3.3.6. NAT-PMP / PCP (Port Control Protocol)
7.4. Network Address Translation
7.4.1. When to use NAT
7.4.2. NAT ALGs
7.4.3. Setting NAT in rules
7.4.4. What NAT does
7.4.5. NAT with PPPoE
7.4.6. NAT with other types of external routing
7.4.7. Mixing NAT and non NAT
7.4.8. Carrier grade NAT
7.4.9. Using NAT setting on subnets
8. Routing
8.1. Routing logic
8.2. Routing targets
8.2.1. Subnet routes
8.2.2. Routing to an IP address (gateway route)
8.2.3. Special targets
8.3. Dynamic route creation / deletion
8.4. Routing tables
8.5. Bonding
8.6. Route overrides
9. Profiles
9.1. Overview
9.2. Creating/editing profiles
9.2.1. Timing control
9.2.2. Tests
9.2.2.1. General tests
9.2.2.2. Time/date tests
9.2.2.3. Ping tests
9.2.3. Inverting overall test result
9.2.4. Manual override
10. Traffic Shaping
10.1. Graphs and Shapers
10.1.1. Graphs
10.1.2. Shapers
10.1.3. Ad hoc shapers
10.1.4. Long term shapers
10.2. Multiple shapers
10.3. Basic principles
11. PPPoE
11.1. Types of DSL line and router in the United Kingdom
11.2. Definining PPPoE links
11.2.1. IPv6
11.2.2. Additional options
11.2.2.1. MTU and TCP fix
11.2.2.2. Service and ac-name
11.2.2.3. Logging
11.2.2.4. Speed and graphs
12. Tunnels
12.1. IPsec (IP Security)
12.1.1. Introduction
12.1.1.1. Integrity checking
12.1.1.2. Encryption
12.1.1.3. Authentication
12.1.1.4. IKE
12.1.1.5. Manual Keying
12.1.1.6. Identities and the Authentication Mechanism
12.1.2. Setting up IPsec connections
12.1.2.1. Global IPsec parameters
12.1.2.2. IKE proposals
12.1.2.3. IKE roaming IP pools
12.1.2.4. IKE connections
12.1.2.4.1. IKE connection mode and type
12.1.2.4.2. IKE and IPsec proposal lists
12.1.2.4.3. Authentication and IKE identities
12.1.2.4.4. IP addresses
12.1.2.4.5. Road Warrior connections
12.1.2.4.6. Routing
12.1.2.4.7. Other parameters
12.1.2.5. Setting up Manual Keying
12.1.2.5.1. IP endpoints
12.1.2.5.2. Algorithms and keys
12.1.2.5.3. Routing
12.1.2.5.4. Mode
12.1.2.5.5. Other parameters
12.1.3. Using EAP with IPsec/IKE
12.1.4. Using certificates with IPsec/IKE
12.1.4.1. Creating certificates
12.1.5. Choice of algorithms
12.1.6. NAT Traversal
12.1.7. Configuring a Road Warrior server
12.1.8. Connecting to non-FireBrick devices
12.1.8.1. Using StrongSwan on Linux
12.1.8.2. Setting up a Road Warrior VPN on an Android client
12.1.8.3. Setting up a Road Warrior VPN on an iOS (iPhone/iPad) client
12.1.8.4. Manual keying using Linux ipsec-tools
12.2. FB105 tunnels
12.2.1. Tunnel wrapper packets
12.2.2. Setting up a tunnel
12.2.3. Viewing tunnel status
12.2.4. Dynamic routes
12.2.5. Tunnel bonding
12.2.6. Tunnels and NAT
12.2.6.1. FB2500 doing NAT
12.2.6.2. Another device doing NAT
12.3. Ether tunnelling
13. System Services
13.1. Protecting the FB2500
13.2. Common settings
13.3. HTTP Server configuration
13.3.1. Access control
13.3.1.1. Trusted addresses
13.4. Telnet Server configuration
13.4.1. Access control
13.5. DNS configuration
13.5.1. Blocking DNS names
13.5.2. Local DNS responses
13.5.3. Auto DHCP DNS
13.6. NTP configuration
13.7. SNMP configuration
13.8. RADIUS configuration
13.8.1. RADIUS server (platform RADIUS)
13.8.2. RADIUS client
13.8.2.1. RADIUS client settings
13.8.2.2. Server blacklisting
14. Network Diagnostic Tools
14.1. Firewalling check
14.2. Access check
14.3. Packet Dumping
14.3.1. Dump parameters
14.3.2. Security settings required
14.3.3. IP address matching
14.3.4. Packet types
14.3.5. Snaplen specification
14.3.6. Using the web interface
14.3.7. Using an HTTP client
14.3.7.1. Example using curl and tcpdump
15. VRRP
15.1. Virtual Routers
15.2. Configuring VRRP
15.2.1. Advertisement Interval
15.2.2. Priority
15.3. Using a virtual router
15.4. VRRP versions
15.4.1. VRRP version 2
15.4.2. VRRP version 3
15.5. Compatibility
16. VoIP
16.1. What is VoIP?
16.2. Registration and Proxies
16.2.1. Registrar
16.2.2. Proxy
16.3. Home/office phone system
16.4. Network Address Translation
16.5. Number plan
16.6. Telephone handsets
16.7. VoIP call carriers
16.8. Hunt groups
16.8.1. Ring Type
16.8.2. Ring order
16.8.3. Overflow
16.8.4. Out of hours
16.9. Call pickup/steal
16.10. Busy lamp field
16.11. Using RADIUS
16.11.1. RADIUS accounting
16.11.2. RADIUS authentication
16.11.2.1. Call routing by RADIUS
16.12. Call recording
16.13. Voicemail and IVR services
16.14. Call Data Records
16.15. Technical details
16.16. Custom tones
17. BGP
17.1. What is BGP?
17.2. BGP Setup
17.2.1. Overview
17.2.2. Standards
17.2.3. Simple example setup
17.2.4. Peer type
17.2.5. Route filtering
17.2.5.1. Matching attributes
17.2.5.2. Action attributes
17.2.6. Well known community tags
17.2.7. Announcing black hole routes
17.2.8. Announcing dead end routes
17.2.9. Bad optional path attributes
17.2.10. <network> element
17.2.11. <route>, <subnet> and other elements
17.2.12. Route feasibility testing
17.2.13. Diagnostics
17.2.14. Router shutdown
17.2.15. TTL security
18. OSPF
18.1. What is OSPF?
18.2. OSPF Setup
18.2.1. Overview
18.2.2. Standards
18.2.3. Simple example setup
18.2.4. <ospf> configelement
19. Internet Service Providers
19.1. Background
19.1.1. How it all began
19.1.2. Point to Point Protocol
19.1.3. L2TP
19.1.4. Broadband
19.1.5. RADIUS
19.1.6. BGP
19.2. Incoming L2TP connections
19.3. The importance of CQM graphs
19.4. Authentication
19.5. Accounting
19.6. RADIUS Control messages
19.7. PPPoE
19.8. Typical configuration
19.8.1. Interlink subnet
19.8.2. BGP with carrier
19.8.3. RADIUS session steering
19.8.4. L2TP endpoints
19.8.5. ISP RADIUS
20. Command Line Interface
A. Factory Reset Procedure
B. CIDR and CIDR Notation
C. MAC Addresses usage
C.1. Multiple MAC addresses?
C.2. How the FireBrick allocates MAC addresses
C.2.1. Interface
C.2.2. Subnet
C.2.3. PPPoE
C.2.4. Base MAC
C.2.5. Running out of MACs
C.3. MAC address on label
C.4. Using with a DHCP server
D. VLANs : A primer
E. Supported L2TP Attribute/Value Pairs
E.1. Start-Control-Connection-Request
E.2. Start-Control-Connection-Reply
E.3. Start-Control-Connection-Connected
E.4. Stop-Control-Connection-Notification
E.5. Hello
E.6. Incoming-Call-Request
E.7. Incoming-Call-Reply
E.8. Incoming-Call-Connected
E.9. Outgoing-Call-Request
E.10. Outgoing-Call-Reply
E.11. Outgoing-Call-Connected
E.12. Call-Disconnect-Notify
E.13. WAN-Error-Notify
E.14. Set-Link-Info
E.15. Notes
E.15.1. BT specific notes
E.15.2. IP over LCP
F. Supported RADIUS Attribute/Value Pairs for L2TP operation
F.1. Authentication request
F.2. Authentication response
F.2.1. Accepted authentication
F.2.1.1. Prefix Delegation
F.2.2. Rejected authentication
F.3. Accounting Start
F.4. Accounting Interim
F.5. Accounting Stop
F.6. Disconnect
F.7. Change of Authorisation
F.8. Filter ID
F.9. Notes
F.9.1. L2TP relay
F.9.2. LCP echo and CQM graphs
F.9.3. IP over LCP
F.9.4. Closed User Group
F.9.5. Routing table
G. Supported RADIUS Attribute/Value Pairs for VoIP operation
G.1. Authentication request
G.2. Authentication response
G.2.1. Challenge authentication
G.2.2. Accepted authentication (registration)
G.2.3. Accepted authentication (invite)
G.2.4. Rejected authentication
G.3. Accounting Start
G.4. Accounting Interim
G.5. Accounting Stop
G.6. Disconnect
G.7. Change of Authorisation
H. FireBrick specific SNMP objects
H.1. BGP information
H.2. L2TP information
H.3. Monitoring information
I. Command line reference
I.1. General commands
I.1.1. Trace off
I.1.2. Trace on
I.1.3. Uptime
I.1.4. General status
I.1.5. Memory usage
I.1.6. Process/task usage
I.1.7. Login
I.1.8. Logout
I.1.9. See XML configuration
I.1.10. Load XML configuration
I.1.11. Show profile status
I.1.12. Enable profile control switch
I.1.13. Disable profile control switch
I.1.14. Show RADIUS servers
I.1.15. Show DNS resolvers
I.2. Networking commands
I.2.1. Subnets
I.2.2. Ping and trace
I.2.3. Show a route from the routing table
I.2.4. List routes
I.2.5. List routing next hops
I.2.6. See DHCP allocations
I.2.7. Clear DHCP allocations
I.2.8. Lock DHCP allocations
I.2.9. Unlock DHCP allocations
I.2.10. Name DHCP allocations
I.2.11. Show ARP/ND status
I.2.12. Show VRRP status
I.2.13. Send Wake-on-LAN packet
I.3. Firewalling commands
I.3.1. Check access to services
I.3.2. Check firewall logic
I.4. L2TP commands
I.5. BGP commands
I.6. OSPF commands
I.7. PPPoE commands
I.8. VoIP commands
I.9. Advanced commands
I.9.1. Panic
I.9.2. Reboot
I.9.3. Screen width
I.9.4. Make outbound command session
I.9.5. Show command sessions
I.9.6. Kill command session
I.9.7. Flash memory list
I.9.8. Delete block from flash
I.9.9. Boot log
I.9.10. Flash log
J. Constant Quality Monitoring - technical details
J.1. Broadband back-haul providers
J.2. Access to graphs and csvs
J.2.1. Trusted access
J.2.2. Dated information
J.2.3. Authenticated access
J.3. Graph display options
J.3.1. Data points
J.3.2. Additional text
J.3.3. Other colours and spacing
J.4. Overnight archiving
J.4.1. Full URL format
J.4.2. load handling
J.5. Graph scores
J.6. Creating graphs, and graph names
K. Hashed passwords
K.1. Password hashing
K.1.1. Salt
K.2. One Time Password seed hashing
L. Configuration Objects
L.1. Top level
L.1.1. config: Top level config
L.2. Objects
L.2.1. system: System settings
L.2.2. link: Web links
L.2.3. user: Admin users
L.2.4. eap: User access controlled by EAP
L.2.5. log: Log target controls
L.2.6. log-syslog: Syslog logger settings
L.2.7. log-email: Email logger settings
L.2.8. services: System services
L.2.9. snmp-service: SNMP service settings
L.2.10. ntp-service: NTP service settings
L.2.11. telnet-service: Telnet service settings
L.2.12. http-service: HTTP service settings
L.2.13. dns-service: DNS service settings
L.2.14. dns-host: Fixed local DNS host settings
L.2.15. dns-block: Fixed local DNS blocks
L.2.16. radius-service: RADIUS service definition
L.2.17. radius-service-match: Matching rules for RADIUS service
L.2.18. radius-server: RADIUS server settings
L.2.19. ethernet: Physical port controls
L.2.20. sampling: Packet sampling configuration
L.2.21. portdef: Port grouping and naming
L.2.22. interface: Port-group/VLAN interface settings
L.2.23. subnet: Subnet settings
L.2.24. vrrp: VRRP settings
L.2.25. dhcps: DHCP server settings
L.2.26. dhcp-attr-hex: DHCP server attributes (hex)
L.2.27. dhcp-attr-string: DHCP server attributes (string)
L.2.28. dhcp-attr-number: DHCP server attributes (numeric)
L.2.29. dhcp-attr-ip: DHCP server attributes (IP)
L.2.30. pppoe: PPPoE settings
L.2.31. ppp-route: PPP routes
L.2.32. route: Static routes
L.2.33. network: Locally originated networks
L.2.34. blackhole: Dead end networks
L.2.35. loopback: Locally originated networks
L.2.36. ospf: Overall OSPF settings
L.2.37. namedbgpmap: Mapping and filtering rules of BGP prefixes
L.2.38. bgprule: Individual mapping/filtering rule
L.2.39. bgp: Overall BGP settings
L.2.40. bgppeer: BGP peer definitions
L.2.41. bgpmap: Mapping and filtering rules of BGP prefixes
L.2.42. cqm: Constant Quality Monitoring settings
L.2.43. l2tp: L2TP settings
L.2.44. l2tp-outgoing: L2TP settings for outgoing L2TP connections
L.2.45. l2tp-incoming: L2TP settings for incoming L2TP connections
L.2.46. l2tp-relay: Relay and local authentication rules for L2TP
L.2.47. fb105: FB105 tunnel definition
L.2.48. fb105-route: FB105 routes
L.2.49. ipsec-ike: IPsec configuration (IKEv2)
L.2.50. ike-connection: connection configuration
L.2.51. ipsec-route: IPsec tunnel routes
L.2.52. ike-roaming: IKE roaming IP pools
L.2.53. ike-proposal: IKE security proposal
L.2.54. ipsec-proposal: IPsec AH/ESP proposal
L.2.55. ipsec-manual: peer configuration
L.2.56. ping: Ping/graph definition
L.2.57. profile: Control profile
L.2.58. profile-date: Test passes if within any of the time ranges specified
L.2.59. profile-time: Test passes if within any of the date/time ranges specified
L.2.60. profile-ping: Test passes if any addresses are pingable
L.2.61. shaper: Traffic shaper
L.2.62. shaper-override: Traffic shaper override based on profile
L.2.63. ip-group: IP Group
L.2.64. route-override: Routing override rules
L.2.65. session-route-rule: Routing override rule
L.2.66. session-route-share: Route override load sharing
L.2.67. rule-set: Firewall/mapping rule set
L.2.68. session-rule: Firewall rules
L.2.69. session-share: Firewall load sharing
L.2.70. voip: Voice over IP config
L.2.71. carrier: VoIP carrier details
L.2.72. telephone: VoIP telephone authentication user details
L.2.73. tone: Tone definitions
L.2.74. ringgroup: Ring groups
L.2.75. etun: Ether tunnel
L.2.76. dhcp-relay: DHCP server settings for remote / relayed requests
L.3. Data types
L.3.1. autoloadtype: Type of s/w auto load
L.3.2. config-access: Type of access user has to config
L.3.3. user-level: User login level
L.3.4. eap-subsystem: Subsystem with EAP access control
L.3.5. eap-method: EAP access method
L.3.6. syslog-severity: Syslog severity
L.3.7. syslog-facility: Syslog facility
L.3.8. month: Month name (3 letter)
L.3.9. day: Day name (3 letter)
L.3.10. radiuspriority: Options for controlling platform RADIUS response priority tagging
L.3.11. radiustype: Type of RADIUS server
L.3.12. port: Physical port
L.3.13. Crossover: Crossover configuration
L.3.14. LinkSpeed: Physical port speed
L.3.15. LinkDuplex: Physical port duplex setting
L.3.16. LinkFlow: Physical port flow control setting
L.3.17. LinkClock: Physical port Gigabit clock master/slave setting
L.3.18. LinkLED: LED settings
L.3.19. LinkPower: PHY power saving options
L.3.20. LinkFault: Link fault type to send
L.3.21. sampling-protocol: Sampling protocol
L.3.22. trunk-mode: Trunk port more
L.3.23. ramode: IPv6 route announce level
L.3.24. dhcpv6control: Control for RA and DHCPv6 bits
L.3.25. bgpmode: BGP announcement mode
L.3.26. sampling-mode: Sampling mode
L.3.27. sfoption: Source filter option
L.3.28. pppoe-mode: Type of PPPoE connection
L.3.29. ipsec-type: IPsec encapsulation type
L.3.30. ipsec-auth-algorithm: IPsec authentication algorithm
L.3.31. ipsec-crypt-algorithm: IPsec encryption algorithm
L.3.32. peertype: BGP peer type
L.3.33. radius-nas: NAS IP to report
L.3.34. ike-authmethod: authentication method
L.3.35. ike-mode: connection setup mode
L.3.36. ike-PRF: IKE Pseudo-Random Function
L.3.37. ike-DH: IKE Diffie-Hellman group
L.3.38. ike-ESN: IKE Sequence Number support
L.3.39. ipsec-encapsulation: Manually keyed IPsec encapsulation mode
L.3.40. switch: Profile manual setting
L.3.41. dynamic-graph: Type of dynamic graph
L.3.42. firewall-action: Firewall action
L.3.43. voip-format: Number presentation format
L.3.44. uknumberformat: Number formatting option
L.3.45. recordoption: Recording option
L.3.46. ring-group-order: Order of ring
L.3.47. ring-group-type: Type of ring when one call in queue
L.3.48. record-beep-option: Record beep option
L.4. Basic types
Index

List of Figures

2.1. Initial web page in factory reset state
2.2. Initial "Users" page
2.3. Setting up a new user
2.4. Configuration being stored
3.1. Main menu
3.2. Icons for layout controls
3.3. Icons for configuration categories
3.4. The "Setup" category
3.5. Editing an "Interface" object
3.6. Show hidden attributes
3.7. Attribute definitions
3.8. Navigation controls
4.1. Setting up a new user
4.2. Software upgrade available notification
4.3. Manual Software upload
7.1. Example sessions created by drop and reject actions
7.2. Processing flow chart for rule-sets and session-rules
C.1. Product label showing MAC address range

List of Tables

2.1. IP addresses for computer
2.2. IP addresses to access the FireBrick
2.3. IP addresses to access the FireBrick
3.1. Special character sequences
4.1. User login levels
4.2. Configuration access levels
4.3. General administrative details attributes
4.4. Attributes controlling auto-upgrades
4.5. Power LED status indications
5.1. Logging attributes
5.2. System-Event Logging attributes
6.1. Port LED functions
6.2. Example modified Port LED functions
7.1. Action attribute values
8.1. Example route targets
12.1. IPsec algorithm key lengths
12.2. IKE / IPsec algorithm proposals
13.1. List of system services
13.2. List of system services
14.1. Packet dump parameters
14.2. Packet types that can be captured
16.1. Ring Type
16.2. Ring Order
16.3. Access-Accept
16.4. Default tones
17.1. Peer types
17.2. Communities
17.3. Network attributes
18.1. OSPF config attributes
C.1. DHCP client names used
E.1. SCCRQ
E.2. SCCRP
E.3. SCCCN
E.4. StopCCN
E.5. HELLO
E.6. ICRQ
E.7. ICRP
E.8. ICCN
E.9. OCRQ
E.10. OCRP
E.11. OCCN
E.12. CDN
E.13. WEN
E.14. SLI
F.1. Access-request
F.2. Access-Accept
F.3. Access-Reject
F.4. Accounting-Start
F.5. Accounting-Interim
F.6. Accounting-Stop
F.7. Disconnect
F.8. Change-of-Authorisation
F.9. Filter-ID
G.1. Access-request
G.2. Access-Challenge
G.3. Access-Accept
G.4. Access-Accept
G.5. Access-Reject
G.6. Accounting-Start
G.7. Accounting-Interim
G.8. Accounting-Stop
G.9. Disconnect
G.10. Change-of-Authorisation
H.1. iso.3.6.1.4.1.24693.179
H.2. iso.3.6.1.4.1.24693.1701
H.3. iso.3.6.1.4.1.24693.5060
J.1. File types
J.2. Colours
J.3. Text
J.4. Text
J.5. URL formats
L.1. config: Attributes
L.2. config: Elements
L.3. system: Attributes
L.4. system: Elements
L.5. link: Attributes
L.6. user: Attributes
L.7. eap: Attributes
L.8. log: Attributes
L.9. log: Elements
L.10. log-syslog: Attributes
L.11. log-email: Attributes
L.12. services: Elements
L.13. snmp-service: Attributes
L.14. ntp-service: Attributes
L.15. telnet-service: Attributes
L.16. http-service: Attributes
L.17. dns-service: Attributes
L.18. dns-service: Elements
L.19. dns-host: Attributes
L.20. dns-block: Attributes
L.21. radius-service: Attributes
L.22. radius-service: Elements
L.23. radius-service-match: Attributes
L.24. radius-server: Attributes
L.25. ethernet: Attributes
L.26. sampling: Attributes
L.27. portdef: Attributes
L.28. interface: Attributes
L.29. interface: Elements
L.30. subnet: Attributes
L.31. vrrp: Attributes
L.32. dhcps: Attributes
L.33. dhcps: Elements
L.34. dhcp-attr-hex: Attributes
L.35. dhcp-attr-string: Attributes
L.36. dhcp-attr-number: Attributes
L.37. dhcp-attr-ip: Attributes
L.38. pppoe: Attributes
L.39. pppoe: Elements
L.40. ppp-route: Attributes
L.41. route: Attributes
L.42. network: Attributes
L.43. blackhole: Attributes
L.44. loopback: Attributes
L.45. ospf: Attributes
L.46. namedbgpmap: Attributes
L.47. namedbgpmap: Elements
L.48. bgprule: Attributes
L.49. bgp: Attributes
L.50. bgp: Elements
L.51. bgppeer: Attributes
L.52. bgppeer: Elements
L.53. bgpmap: Attributes
L.54. bgpmap: Elements
L.55. cqm: Attributes
L.56. l2tp: Attributes
L.57. l2tp: Elements
L.58. l2tp-outgoing: Attributes
L.59. l2tp-outgoing: Elements
L.60. l2tp-incoming: Attributes
L.61. l2tp-incoming: Elements
L.62. l2tp-relay: Attributes
L.63. fb105: Attributes
L.64. fb105: Elements
L.65. fb105-route: Attributes
L.66. ipsec-ike: Attributes
L.67. ipsec-ike: Elements
L.68. ike-connection: Attributes
L.69. ike-connection: Elements
L.70. ipsec-route: Attributes
L.71. ike-roaming: Attributes
L.72. ike-proposal: Attributes
L.73. ipsec-proposal: Attributes
L.74. ipsec-manual: Attributes
L.75. ipsec-manual: Elements
L.76. ping: Attributes
L.77. profile: Attributes
L.78. profile: Elements
L.79. profile-date: Attributes
L.80. profile-time: Attributes
L.81. profile-ping: Attributes
L.82. shaper: Attributes
L.83. shaper: Elements
L.84. shaper-override: Attributes
L.85. ip-group: Attributes
L.86. route-override: Attributes
L.87. route-override: Elements
L.88. session-route-rule: Attributes
L.89. session-route-rule: Elements
L.90. session-route-share: Attributes
L.91. rule-set: Attributes
L.92. rule-set: Elements
L.93. session-rule: Attributes
L.94. session-rule: Elements
L.95. session-share: Attributes
L.96. voip: Attributes
L.97. voip: Elements
L.98. carrier: Attributes
L.99. telephone: Attributes
L.100. tone: Attributes
L.101. ringgroup: Attributes
L.102. etun: Attributes
L.103. dhcp-relay: Attributes
L.104. dhcp-relay: Elements
L.105. autoloadtype: Type of s/w auto load
L.106. config-access: Type of access user has to config
L.107. user-level: User login level
L.108. eap-subsystem: Subsystem with EAP access control
L.109. eap-method: EAP access method
L.110. syslog-severity: Syslog severity
L.111. syslog-facility: Syslog facility
L.112. month: Month name (3 letter)
L.113. day: Day name (3 letter)
L.114. radiuspriority: Options for controlling platform RADIUS response priority tagging
L.115. radiustype: Type of RADIUS server
L.116. port: Physical port
L.117. Crossover: Crossover configuration
L.118. LinkSpeed: Physical port speed
L.119. LinkDuplex: Physical port duplex setting
L.120. LinkFlow: Physical port flow control setting
L.121. LinkClock: Physical port Gigabit clock master/slave setting
L.122. LinkLED: LED settings
L.123. LinkPower: PHY power saving options
L.124. LinkFault: Link fault type to send
L.125. sampling-protocol: Sampling protocol
L.126. trunk-mode: Trunk port more
L.127. ramode: IPv6 route announce level
L.128. dhcpv6control: Control for RA and DHCPv6 bits
L.129. bgpmode: BGP announcement mode
L.130. sampling-mode: Sampling mode
L.131. sfoption: Source filter option
L.132. pppoe-mode: Type of PPPoE connection
L.133. ipsec-type: IPsec encapsulation type
L.134. ipsec-auth-algorithm: IPsec authentication algorithm
L.135. ipsec-crypt-algorithm: IPsec encryption algorithm
L.136. peertype: BGP peer type
L.137. radius-nas: NAS IP to report
L.138. ike-authmethod: authentication method
L.139. ike-mode: connection setup mode
L.140. ike-PRF: IKE Pseudo-Random Function
L.141. ike-DH: IKE Diffie-Hellman group
L.142. ike-ESN: IKE Sequence Number support
L.143. ipsec-encapsulation: Manually keyed IPsec encapsulation mode
L.144. switch: Profile manual setting
L.145. dynamic-graph: Type of dynamic graph
L.146. firewall-action: Firewall action
L.147. voip-format: Number presentation format
L.148. uknumberformat: Number formatting option
L.149. recordoption: Recording option
L.150. ring-group-order: Order of ring
L.151. ring-group-type: Type of ring when one call in queue
L.152. record-beep-option: Record beep option
L.153. Basic data types
   Next
   Preface