Appendix I. Configuration Objects

Table of Contents

I.1. Top level

I.1.1. config: Top level config

I.2. Objects

I.2.1. system: System settings
I.2.2. link: Web links
I.2.3. routing-table: Default source IP for services using a given table
I.2.4. user: Admin users
I.2.5. eap: User access controlled by EAP
I.2.6. log: Log target controls
I.2.7. log-syslog: Syslog logger settings
I.2.8. log-email: Email logger settings
I.2.9. services: System services
I.2.10. http-service: Web service settings
I.2.11. dns-service: DNS service settings
I.2.12. dns-host: Fixed local DNS host settings
I.2.13. dns-block: Fixed local DNS blocks
I.2.14. telnet-service: Telnet service settings
I.2.15. snmp-service: SNMP service settings
I.2.16. time-service: System time server settings
I.2.17. ethernet: Physical port controls
I.2.18. sampling: Packet sampling configuration
I.2.19. portdef: Port grouping and naming
I.2.20. interface: Port-group/VLAN interface settings
I.2.21. subnet: Subnet settings
I.2.22. subnet-template: Subnet option templates for RA
I.2.23. dhcp6-client: DHCPv6 Client
I.2.24. vrrp: VRRP settings
I.2.25. dhcps: DHCP server settings
I.2.26. dhcp-attr-hex: DHCP server attributes (hex)
I.2.27. dhcp-attr-string: DHCP server attributes (string)
I.2.28. dhcp-attr-number: DHCP server attributes (numeric)
I.2.29. dhcp-attr-ip: DHCP server attributes (IP)
I.2.30. route: Static routes
I.2.31. blackhole: Dead end networks
I.2.32. loopback: Locally originated networks
I.2.33. cqm: Constant Quality Monitoring settings
I.2.34. ping: Ping/graph definition
I.2.35. ip-group: IP Group
I.2.36. dhcp-relay: DHCP server settings for remote / relayed requests

I.3. Data types

I.3.1. user-level: User login level
I.3.2. ppp-dump: PPP dump format
I.3.3. autoloadtype: Type of s/w auto load
I.3.4. lacp-hot-standby: LACP hot standby mode
I.3.5. config-access: Type of access user has to config
I.3.6. eap-subsystem: Subsystem with EAP access control
I.3.7. eap-method: EAP access method
I.3.8. syslog-severity: Syslog severity
I.3.9. syslog-facility: Syslog facility
I.3.10. http-mode: HTTP/HTTPS security mode
I.3.11. month: Month name (3 letter)
I.3.12. day: Day name (3 letter)
I.3.13. port: Physical port
I.3.14. Crossover: Crossover configuration
I.3.15. LinkFlow: Physical port flow control setting
I.3.16. LinkClock: Physical port Gigabit clock master/slave setting
I.3.17. LinkLED-y: Yellow LED setting
I.3.18. LinkLED-g: Green LED setting
I.3.19. LinkPower: PHY power saving options
I.3.20. LinkFault: Link fault type to send
I.3.21. sampling-protocol: Sampling protocol
I.3.22. trunk-mode: Trunk port mode
I.3.23. ramode: IPv6 route announce level
I.3.24. sampling-mode: Sampling mode
I.3.25. sfoption: Source filter option

I.4. Basic types

I.1. Top level

I.1.1. config: Top level config

The top level config element contains all of the FireBrick configuration data.

Table I.1. config: Attributes

Attribute	Type	Default	Description
ip	IPAddr	-	Config store IP address
patch	integer	-	Internal use, for s/w updates that change config syntax
serial	string	-	Serial number
timestamp	dateTime	-	Config store time, set automatically when config is saved
version	string	-	Code version
who	string	-	Config store username

Table I.2. config: Elements

Element	Type	Instances	Description
blackhole	blackhole	Optional, unlimited	Black hole (dropped packets) networks
cqm	cqm	Optional	Constant Quality Monitoring config
dhcp-relay	dhcp-relay	Optional, unlimited	DHCP server settings for remote / relayed requests
eap	eap	Optional, unlimited	User access control via EAP
ethernet	ethernet	Optional, unlimited	Ethernet port settings
interface	interface	Optional, up to 8192	Ethernet interface (port-group/vlan) and subnets
ip-group	ip-group	Optional, unlimited	Named IP groups
log	log	Optional, up to 63	Log target controls
loopback	loopback	Optional, unlimited	Extra local addresses
nowhere	blackhole	Optional, unlimited	Dead end (icmp error) networks
ping	ping	Optional, up to 4000	Base ping graph settings
port	portdef	Optional, up to 2	Port grouping and naming
route	route	Optional, unlimited	Static routes
routing-tables	routing-table	Optional, unlimited	Routing table settings
sampling	sampling	Optional	Sampling parameters
services	services	Optional	General system services
system	system	Optional	System settings
user	user	Optional, unlimited	Admin users


H.2. One Time Password seed hashing		I.2. Objects