FireBrick FB6402 User Manual
   Next

FireBrick FB6402 User Manual

This User Manual documents Software version V2.02.012

Copyright © 2012-2025 FireBrick Ltd.

The FireBrick config editor uses the OCR-B font designed by Matthew Anderson, which is licensed under a Creative Commons 4.0 Attribution License

Table of Contents

Preface
1. Introduction
1.1. The FB6000
1.1.1. Where do I start?
1.1.2. What can it do?
1.1.2.1. FB6402 Gigabit stateful firewall
1.1.3. Ethernet port capabilities
1.1.4. Product variants in the FB6000 series
1.2. About this Manual
1.2.1. Version
1.2.2. Intended audience
1.2.3. Technical details
1.2.4. Document style
1.2.5. Document conventions
1.2.6. Comments and feedback
1.3. Additional Resources
1.3.1. Technical Support
1.3.2. IRC Channel
1.3.3. Application Notes
1.3.4. Training Courses
2. Getting Started
2.1. IP addressing
2.2. Accessing the web-based user interface
2.2.1. Initial configuration
3. Configuration
3.1. The Object Hierarchy
3.2. The Object Model
3.2.1. Formal definition of the object model
3.2.2. Common attributes
3.3. Configuration Methods
3.4. Configuration upgrades and versioning
3.5. Data types
3.5.1. Sending and receiving values
3.5.2. Lists of values
3.5.3. Set of possible values
3.5.4. Dates, times, and durations
3.5.5. Colours
3.5.6. Passwords and secrets
3.5.7. IP addresses
3.5.7.1. Simple IP addresses
3.5.7.2. Subnets and prefixes
3.5.7.3. Ranges
3.5.7.4. Prefix filters
3.6. Default values
3.7. Web User Interface Overview
3.7.1. User Interface layout
3.7.2. Config pages and the object hierarchy
3.7.2.1. Configuration categories
3.7.2.2. Object settings
3.7.3. Navigating around the User Interface
3.7.4. Backing up / restoring the configuration
3.7.5. Customising the layout
3.8. Configuration using XML
3.8.1. Introduction to XML
3.8.2. The root element - <config>
3.8.3. Viewing or editing XML
3.8.4. Example XML configuration
3.9. Downloading/Uploading the configuration
3.9.1. Download
3.9.2. Upload
4. System Administration
4.1. User Management
4.1.1. Login level
4.1.2. Configuration access level
4.1.3. Login idle timeout
4.1.4. Restricting user logins
4.1.4.1. Restrict by IP address
4.1.4.2. Logged in IP address
4.1.4.3. Restrict by profile
4.1.5. Password change
4.1.6. One Time Password (OTP)
4.2. General System settings
4.2.1. System name (hostname)
4.2.2. Administrative details
4.2.3. System-level event logging control
4.2.4. Home page web links
4.3. Software Upgrades
4.3.1. Software release types
4.3.1.1. Breakpoint releases
4.3.2. Identifying current software version
4.3.3. Internet-based upgrade process
4.3.3.1. Manually initiating upgrades
4.3.3.2. Controlling automatic software updates
4.3.4. Manual upgrade
4.4. Boot Process
4.4.1. LED indications
4.4.1.1. Port LEDs
5. Event Logging
5.1. Overview
5.1.1. Log targets
5.1.1.1. Logging to Flash memory
5.1.1.2. Logging to the Console
5.2. Enabling logging
5.3. Logging to external destinations
5.3.1. Syslog
5.3.2. Email
5.3.2.1. E-mail process logging
5.4. Factory reset configuration log targets
5.5. Performance
5.6. Viewing logs
5.6.1. Viewing logs in the User Interface
5.6.2. Viewing logs in the CLI environment
5.7. System-event logging
5.8. Using Profiles
6. Automated Certificate Management Environment (ACME)
6.1. Overview
6.1.1. LetsEncrypt
6.1.2. Troubleshooting
6.1.3. More advanced usage
6.1.3.1. Using your own keys
6.1.3.2. Alternative ACME providers
6.1.3.3. Using an existing account
6.1.4. Further information about the renewal process
7. Interfaces and Subnets
7.1. Relationship between Interfaces and Physical Ports
7.1.1. Port groups
7.1.2. Interfaces
7.2. Defining an interface
7.2.1. Defining subnets
7.2.1.1. Source filtering
7.2.1.2. Using DHCP to configure a subnet
7.2.1.3. Using SLAAC (IPv6 router announcements) to configure a subnet
7.2.1.4. Providing IPv6 addresses to devices on a network (IPv6 router announcements)
7.2.2. Setting up DHCP server parameters
7.2.2.1. Fixed/Static DHCP allocations
7.2.2.2. Restricted allocations
7.2.2.3. Special DHCP options
7.2.2.4. Logging
7.2.3. DHCP Relay Agent
7.3. Physical port settings
7.3.1. Setting duplex mode
7.3.2. Defining port LED functions
8. Session Handling
8.1. Routing vs. Firewalling
8.2. Session Tracking
8.2.1. Session termination
8.3. Session Rules
8.3.1. Overview
8.3.2. Processing flow
8.3.3. Defining Rule-Sets and Rules
8.3.3.1. Recommended method of implementing firewalling
8.3.3.2. Changes to session traffic
8.3.3.3. Obfuscation
8.3.3.4. Graphing and traffic shaping
8.3.3.5. Configuring session time-outs
8.3.3.6. Load balancing
8.3.3.7. Clashes
8.3.3.8. NAT-PMP / PCP (Port Control Protocol)
8.4. Network Address Translation
8.4.1. When to use NAT
8.4.2. NAT ALGs
8.4.3. Setting NAT in rules
8.4.4. What NAT does
8.4.5. NAT with PPPoE
8.4.6. NAT with other types of external routing
8.4.7. Mixing NAT and non NAT
8.4.8. Carrier grade NAT
8.4.9. Using NAT setting on subnets
9. Routing
9.1. Routing logic
9.2. Routing targets
9.2.1. Subnet routes
9.2.2. Routing to an IP address (gateway route)
9.2.3. Special targets
9.3. Dynamic route creation / deletion
9.4. Routing tables
9.5. Bonding
9.6. Route overrides
10. Profiles
10.1. Overview
10.2. Creating/editing profiles
10.2.1. Timing control
10.2.2. Tests
10.2.2.1. General tests
10.2.2.2. Time/date tests
10.2.2.3. Ping tests
10.2.3. Inverting overall test result
10.2.4. Manual override
10.2.4.1. Control Switches
10.2.5. Scripting
11. Traffic Shaping
11.1. Graphs and Shapers
11.1.1. Graphs
11.1.2. Shapers
11.1.3. Ad hoc shapers
11.1.4. Long term shapers
11.1.5. Shared shapers
11.2. Multiple shapers
11.3. Basic principles
12. Tunnels
12.1. IPsec (IP Security)
12.1.1. Introduction
12.1.1.1. Integrity checking
12.1.1.2. Encryption
12.1.1.3. Authentication
12.1.1.4. IKE
12.1.1.5. Manual Keying
12.1.1.6. Identities and the Authentication Mechanism
12.1.2. Setting up IPsec connections
12.1.2.1. Global IPsec parameters
12.1.2.2. IKE proposals
12.1.2.3. IKE roaming IP pools
12.1.2.4. IKE connections
12.1.2.4.1. IKE connection mode and type
12.1.2.4.2. IKE and IPsec proposal lists
12.1.2.4.3. Authentication and IKE identities
12.1.2.4.4. IP addresses
12.1.2.4.5. Road Warrior connections
12.1.2.4.6. Routing
12.1.2.4.7. Other parameters
12.1.2.5. Setting up Manual Keying
12.1.2.5.1. IP endpoints
12.1.2.5.2. Algorithms and keys
12.1.2.5.3. Routing
12.1.2.5.4. Mode
12.1.2.5.5. Other parameters
12.1.3. Using EAP with IPsec/IKE
12.1.4. Using certificates with IPsec/IKE
12.1.5. Choice of algorithms
12.1.6. NAT Traversal
12.1.7. Configuring a Road Warrior server
12.1.8. Connecting to non-FireBrick devices
12.1.8.1. Using StrongSwan on Linux
12.1.8.2. Setting up a Road Warrior VPN on an Android client
12.1.8.3. Setting up a Road Warrior VPN on an iOS (iPhone/iPad) client
12.1.8.4. Manual keying using Linux ipsec-tools
12.2. FB105 tunnels
12.2.1. Tunnel wrapper packets
12.2.2. Setting up a tunnel
12.2.3. Viewing tunnel status
12.2.4. Dynamic routes
12.2.5. Tunnel bonding
12.2.6. Tunnels and NAT
12.2.6.1. FB6000 doing NAT
12.2.6.2. Another device doing NAT
12.3. Ether tunnelling
13. System Services
13.1. Protecting the FB6000
13.2. Common settings
13.3. HTTP Server configuration
13.3.1. Access control
13.3.1.1. Trusted addresses
13.3.2. HTTPS access
13.4. Telnet Server configuration
13.4.1. Access control
13.5. DNS configuration
13.5.1. Auto DHCP DNS
13.5.2. Local DNS responses
13.5.3. Blocking DNS names
13.6. NTP configuration
13.7. SNMP configuration
14. Network Diagnostic Tools
14.1. Firewalling check
14.2. Access check
14.3. Packet Dumping
14.3.1. Dump parameters
14.3.2. Security settings required
14.3.3. IP address matching
14.3.4. Packet types
14.3.5. Snaplen specification
14.3.6. Using the web interface
14.3.7. Using an HTTP client
14.3.7.1. Example using curl and tcpdump
15. VRRP
15.1. Virtual Routers
15.2. Configuring VRRP
15.2.1. Advertisement Interval
15.2.2. Priority
15.3. Using a virtual router
15.4. VRRP versions
15.4.1. VRRP version 2
15.4.2. VRRP version 3
15.5. Compatibility
16. BGP
16.1. What is BGP?
16.2. BGP Setup
16.2.1. Overview
16.2.2. Standards
16.2.3. Simple example setup
16.2.4. Peer type
16.2.5. Route filtering
16.2.5.1. Matching attributes
16.2.5.2. Action attributes
16.2.6. Well known community tags
16.2.7. Announcing black hole routes
16.2.8. Grey holes
16.2.9. Announcing dead end routes
16.2.10. Bad optional path attributes
16.2.11. <network> element
16.2.12. <route>, <subnet> and other elements
16.2.13. Route feasibility testing
16.2.14. Status
16.2.15. Diagnostics
16.2.16. Router startup and shutdown
16.2.17. TTL security
17. Command Line Interface
A. CIDR and CIDR Notation
B. MAC Addresses usage
B.1. Multiple MAC addresses?
B.2. How the FireBrick allocates MAC addresses
B.2.1. Interface
B.2.2. Subnet
B.2.3. PPPoE
B.2.4. Running out of MACs
B.3. Forcing particular MAC addresses
B.4. MAC address on label
B.5. Using with a DHCP server
C. Scripted access
C.1. Tools
C.2. Access control
C.2.1. Username and password
C.2.2. OTP
C.2.3. Allow list
C.2.4. Allowed access
C.3. XML data for common functions
C.4. XML data from diagnostics and tests
C.4.1. Cross site scripting security
C.4.2. Arguments to scripts
C.5. Special URLs
C.6. Web sockets
D. VLANs : A primer
E. FireBrick specific SNMP objects
E.1. Conventions
E.1.1. IP addresses as indices
E.2. Firebrick-specific structures for BGP
E.2.1. Structure definitions
E.2.1.1. The list of BGP peers for this Firebrick
E.2.2. Enum Definitions
E.3. Firebrick-specific structures for IPSec
E.3.1. Structure definitions
E.3.1.1. fbIPsecGeneral
E.3.1.2. The list of IPsec connections for this Firebrick
E.3.2. Enum Definitions
E.4. Firebrick CPU usage
E.4.1. Structure definitions
E.4.1.1. CPU usage for this Firebrick
E.5. Firebrick system stats
E.5.1. Structure definitions
E.5.1.1. The table of runtime stats for this Firebrick
E.6. Monitoring for general system features
E.6.1. Structure definitions
E.6.1.1. The list of readings for this Firebrick
E.7. System wide status
E.7.1. Structure definitions
E.7.1.1. fbGlobalMemory
E.7.1.2. fbGlobalBuffers
E.8. Firebrick profiles
E.8.1. Structure definitions
E.8.1.1. Profiles status
E.9. Monitoring information (deprecated)
F. Command line reference
F.1. General commands
F.1.1. Trace off
F.1.2. Trace on
F.1.3. Uptime
F.1.4. General status
F.1.5. Memory usage
F.1.6. Process/task usage
F.1.7. Login
F.1.8. Logout
F.1.9. See XML configuration
F.1.10. Load XML configuration
F.1.11. Show profile status
F.1.12. Enable profile control switch
F.1.13. Disable profile control switch
F.1.14. Show RADIUS servers
F.1.15. Show DNS resolvers
F.2. Networking commands
F.2.1. Subnets
F.2.2. Renegotiate DHCP for a subnet
F.2.3. Ping and trace
F.2.4. Show a route from the routing table
F.2.5. List routes
F.2.6. List routing next hops
F.2.7. See DHCP allocations
F.2.8. Clear DHCP allocations
F.2.9. Lock DHCP allocations
F.2.10. Unlock DHCP allocations
F.2.11. Name DHCP allocations
F.2.12. Show ARP/ND status
F.2.13. Show VRRP status
F.2.14. Send Wake-on-LAN packet
F.3. Firewalling commands
F.3.1. Check access to services
F.3.2. Check firewall logic
F.4. Logging commands
F.4.1. Show Log
F.5. BGP commands
F.5.1. Show BGP
F.5.2. Show BGP Peer
F.5.3. Show BGP Summary
F.5.4. Show BGP Routes
F.5.5. Compare BGP
F.5.6. Clear BGP
F.5.7. Refresh BGP
F.5.8. Refresh BGP
F.6. Advanced commands
F.6.1. Panic
F.6.2. Reboot
F.6.3. Screen width
F.6.4. Make outbound command session
F.6.5. Show command sessions
F.6.6. Kill command session
F.6.7. Flash memory list
F.6.8. Delete block from flash
F.6.9. Boot log
F.6.10. Flash log
G. Constant Quality Monitoring - technical details
G.1. Tx/Rx direction
G.2. Access to graphs and csvs
G.2.1. Trusted access
G.2.2. Dated information
G.2.3. Authenticated access
G.3. Graph display options
G.3.1. Scaleable Vector Graphics
G.3.2. Data points
G.3.3. Additional text
G.3.4. Other colours and spacing
G.4. Overnight archiving
G.4.1. Full URL format
G.4.2. load handling
G.5. Graph scores
G.6. Creating graphs, and graph names
H. Hashed passwords
H.1. Password hashing
H.1.1. Salt
H.2. One Time Password seed hashing
I. Configuration Objects
I.1. Top level
I.1.1. config: Top level config
I.2. Objects
I.2.1. system: System settings
I.2.2. link: Web links
I.2.3. routing-table: Default source IP for services using a given table
I.2.4. user: Admin users
I.2.5. eap: User access controlled by EAP
I.2.6. log: Log target controls
I.2.7. log-syslog: Syslog logger settings
I.2.8. log-email: Email logger settings
I.2.9. services: System services
I.2.10. http-service: Web service settings
I.2.11. dns-service: DNS service settings
I.2.12. dns-host: Fixed local DNS host settings
I.2.13. dns-block: Fixed local DNS blocks
I.2.14. telnet-service: Telnet service settings
I.2.15. snmp-service: SNMP service settings
I.2.16. time-service: System time server settings
I.2.17. ethernet: Physical port controls
I.2.18. sampling: Packet sampling configuration
I.2.19. portdef: Port grouping and naming
I.2.20. interface: Port-group/VLAN interface settings
I.2.21. subnet: Subnet settings
I.2.22. subnet-template: Subnet option templates for RA
I.2.23. dhcp6-client: DHCPv6 Client
I.2.24. vrrp: VRRP settings
I.2.25. dhcps: DHCP server settings
I.2.26. dhcp-attr-hex: DHCP server attributes (hex)
I.2.27. dhcp-attr-string: DHCP server attributes (string)
I.2.28. dhcp-attr-number: DHCP server attributes (numeric)
I.2.29. dhcp-attr-ip: DHCP server attributes (IP)
I.2.30. route: Static routes
I.2.31. network: Locally originated networks
I.2.32. blackhole: Dead end networks
I.2.33. loopback: Locally originated networks
I.2.34. namedbgpmap: Mapping and filtering rules of BGP prefixes
I.2.35. bgprule: Individual mapping/filtering rule
I.2.36. bgp: Overall BGP settings
I.2.37. bgppeer: BGP peer definitions
I.2.38. bgpmap: Mapping and filtering rules of BGP prefixes
I.2.39. cqm: Constant Quality Monitoring settings
I.2.40. fb105: FB105 tunnel definition
I.2.41. fb105-route: FB105 routes
I.2.42. ipsec-ike: IPsec configuration (IKEv2)
I.2.43. ike-connection: connection configuration
I.2.44. ipsec-route: IPsec tunnel routes
I.2.45. ike-roaming: IKE roaming IP pools
I.2.46. ike-proposal: IKE security proposal
I.2.47. ipsec-proposal: IPsec AH/ESP proposal
I.2.48. ipsec-manual: peer configuration
I.2.49. profile: Control profile
I.2.50. profile-date: Test passes if within any of the time ranges specified
I.2.51. profile-time: Test passes if within any of the date/time ranges specified
I.2.52. profile-ping: Test passes if any addresses are pingable
I.2.53. shaper: Traffic shaper
I.2.54. shaper-override: Traffic shaper override based on profile
I.2.55. ip-group: IP Group
I.2.56. route-override: Routing override rules
I.2.57. session-route-rule: Routing override rule
I.2.58. session-route-share: Route override load sharing
I.2.59. rule-set: Firewall/mapping rule set
I.2.60. session-rule: Firewall rules
I.2.61. session-share: Firewall load sharing
I.2.62. etun: Ether tunnel
I.2.63. dhcp-relay: DHCP server settings for remote / relayed requests
I.3. Data types
I.3.1. user-level: User login level
I.3.2. ppp-dump: PPP dump format
I.3.3. autoloadtype: Type of s/w auto load
I.3.4. lacp-hot-standby: LACP hot standby mode
I.3.5. config-access: Type of access user has to config
I.3.6. eap-subsystem: Subsystem with EAP access control
I.3.7. eap-method: EAP access method
I.3.8. syslog-severity: Syslog severity
I.3.9. syslog-facility: Syslog facility
I.3.10. http-mode: HTTP/HTTPS security mode
I.3.11. month: Month name (3 letter)
I.3.12. day: Day name (3 letter)
I.3.13. port: Physical port
I.3.14. Crossover: Crossover configuration
I.3.15. LinkFlow: Physical port flow control setting
I.3.16. LinkClock: Physical port Gigabit clock master/slave setting
I.3.17. LinkLED-y: Yellow LED setting
I.3.18. LinkLED-g: Green LED setting
I.3.19. LinkPower: PHY power saving options
I.3.20. LinkFault: Link fault type to send
I.3.21. sampling-protocol: Sampling protocol
I.3.22. trunk-mode: Trunk port mode
I.3.23. ramode: IPv6 route announce level
I.3.24. bgpmode: BGP announcement mode
I.3.25. sampling-mode: Sampling mode
I.3.26. sfoption: Source filter option
I.3.27. peertype: BGP peer type
I.3.28. ipsec-type: IPsec encapsulation type
I.3.29. ike-authmethod: authentication method
I.3.30. ike-mode: connection setup mode
I.3.31. ipsec-auth-algorithm: IPsec authentication algorithm
I.3.32. ipsec-crypt-algorithm: IPsec encryption algorithm
I.3.33. ike-PRF: IKE Pseudo-Random Function
I.3.34. ike-DH: IKE Diffie-Hellman group
I.3.35. ike-ESN: IKE Sequence Number support
I.3.36. ipsec-encapsulation: Manually keyed IPsec encapsulation mode
I.3.37. switch: Profile manual setting
I.3.38. chksum-action: Handling of TCP/UDP packet checksum
I.3.39. dynamic-graph: Type of dynamic graph
I.3.40. firewall-action: Firewall action
I.4. Basic types
Index

List of Figures

3.1. Icons for configuration categories
3.2. The "Setup" category
3.3. Editing an "Interface" object
3.4. Show hidden attributes
3.5. Attribute definitions
3.6. Navigation controls
4.1. Setting up a new user
8.1. Example sessions created by drop and reject actions
8.2. Processing flow chart for rule-sets and session-rules
B.1. Product label showing MAC address range

List of Tables

2.1. IP addresses for computer
2.2. IP addresses to access the FireBrick
2.3. IP addresses to access the FireBrick
3.1. Special character sequences
4.1. User login levels
4.2. Configuration access levels
4.3. General administrative details attributes
4.4. Attributes controlling auto-upgrades
5.1. Logging attributes
5.2. System-Event Logging attributes
8.1. Default timeouts for session tracking
8.2. Action attribute values
8.3. obf-checksum values
9.1. Example route targets
12.1. IPsec algorithm key lengths
12.2. IKE / IPsec algorithm proposals
13.1. List of system services
13.2. List of system services
14.1. Packet dump parameters
14.2. Packet types that can be captured
16.1. Peer types
16.2. Communities
16.3. Network attributes
B.1. DHCP client names used
C.1. Special URLs
C.2. Upgrade type numbers enum
E.1. Indices
E.2. Fields
E.3. FbBgpPeerState - The state of a BGP peer
E.4. Fields
E.5. Indices
E.6. Fields
E.7. FbIPsecConState - The state of an IPsec connection
E.8. Indices
E.9. Fields
E.10. Indices
E.11. Fields
E.12. Indices
E.13. Fields
E.14. Fields
E.15. Fields
E.16. Indices
E.17. Fields
E.18. iso.3.6.1.4.1.24693.1.X.Y
G.1. File types
G.2. Colours
G.3. Text
G.4. Text
G.5. URL formats
I.1. config: Attributes
I.2. config: Elements
I.3. system: Attributes
I.4. system: Elements
I.5. link: Attributes
I.6. routing-table: Attributes
I.7. user: Attributes
I.8. eap: Attributes
I.9. log: Attributes
I.10. log: Elements
I.11. log-syslog: Attributes
I.12. log-email: Attributes
I.13. services: Elements
I.14. http-service: Attributes
I.15. dns-service: Attributes
I.16. dns-service: Elements
I.17. dns-host: Attributes
I.18. dns-block: Attributes
I.19. telnet-service: Attributes
I.20. snmp-service: Attributes
I.21. time-service: Attributes
I.22. ethernet: Attributes
I.23. sampling: Attributes
I.24. portdef: Attributes
I.25. interface: Attributes
I.26. interface: Elements
I.27. subnet: Attributes
I.28. subnet-template: Attributes
I.29. dhcp6-client: Attributes
I.30. vrrp: Attributes
I.31. dhcps: Attributes
I.32. dhcps: Elements
I.33. dhcp-attr-hex: Attributes
I.34. dhcp-attr-string: Attributes
I.35. dhcp-attr-number: Attributes
I.36. dhcp-attr-ip: Attributes
I.37. route: Attributes
I.38. network: Attributes
I.39. blackhole: Attributes
I.40. loopback: Attributes
I.41. namedbgpmap: Attributes
I.42. namedbgpmap: Elements
I.43. bgprule: Attributes
I.44. bgp: Attributes
I.45. bgp: Elements
I.46. bgppeer: Attributes
I.47. bgppeer: Elements
I.48. bgpmap: Attributes
I.49. bgpmap: Elements
I.50. cqm: Attributes
I.51. fb105: Attributes
I.52. fb105: Elements
I.53. fb105-route: Attributes
I.54. ipsec-ike: Attributes
I.55. ipsec-ike: Elements
I.56. ike-connection: Attributes
I.57. ike-connection: Elements
I.58. ipsec-route: Attributes
I.59. ike-roaming: Attributes
I.60. ike-proposal: Attributes
I.61. ipsec-proposal: Attributes
I.62. ipsec-manual: Attributes
I.63. ipsec-manual: Elements
I.64. profile: Attributes
I.65. profile: Elements
I.66. profile-date: Attributes
I.67. profile-time: Attributes
I.68. profile-ping: Attributes
I.69. shaper: Attributes
I.70. shaper: Elements
I.71. shaper-override: Attributes
I.72. ip-group: Attributes
I.73. route-override: Attributes
I.74. route-override: Elements
I.75. session-route-rule: Attributes
I.76. session-route-rule: Elements
I.77. session-route-share: Attributes
I.78. rule-set: Attributes
I.79. rule-set: Elements
I.80. session-rule: Attributes
I.81. session-rule: Elements
I.82. session-share: Attributes
I.83. etun: Attributes
I.84. dhcp-relay: Attributes
I.85. dhcp-relay: Elements
I.86. user-level: User login level
I.87. ppp-dump: PPP dump format
I.88. autoloadtype: Type of s/w auto load
I.89. lacp-hot-standby: LACP hot standby mode
I.90. config-access: Type of access user has to config
I.91. eap-subsystem: Subsystem with EAP access control
I.92. eap-method: EAP access method
I.93. syslog-severity: Syslog severity
I.94. syslog-facility: Syslog facility
I.95. http-mode: HTTP/HTTPS security mode
I.96. month: Month name (3 letter)
I.97. day: Day name (3 letter)
I.98. port: Physical port
I.99. Crossover: Crossover configuration
I.100. LinkFlow: Physical port flow control setting
I.101. LinkClock: Physical port Gigabit clock master/slave setting
I.102. LinkLED-y: Yellow LED setting
I.103. LinkLED-g: Green LED setting
I.104. LinkPower: PHY power saving options
I.105. LinkFault: Link fault type to send
I.106. sampling-protocol: Sampling protocol
I.107. trunk-mode: Trunk port mode
I.108. ramode: IPv6 route announce level
I.109. bgpmode: BGP announcement mode
I.110. sampling-mode: Sampling mode
I.111. sfoption: Source filter option
I.112. peertype: BGP peer type
I.113. ipsec-type: IPsec encapsulation type
I.114. ike-authmethod: authentication method
I.115. ike-mode: connection setup mode
I.116. ipsec-auth-algorithm: IPsec authentication algorithm
I.117. ipsec-crypt-algorithm: IPsec encryption algorithm
I.118. ike-PRF: IKE Pseudo-Random Function
I.119. ike-DH: IKE Diffie-Hellman group
I.120. ike-ESN: IKE Sequence Number support
I.121. ipsec-encapsulation: Manually keyed IPsec encapsulation mode
I.122. switch: Profile manual setting
I.123. chksum-action: Handling of TCP/UDP packet checksum
I.124. dynamic-graph: Type of dynamic graph
I.125. firewall-action: Firewall action
I.126. Basic data types

List of Examples

E.1.
E.2.
/ ==========================================================================
   Next
   Preface