SpeedTouch620
Page
 SpeedTouch 620
 Document Information
Copyright
Trademarks
 Contents
 SpeedTouch Software Modules
 Integrated SpeedTouch Isdn Modem
 How to Restrict Snmp Access 157
How to Add an Snmp User 152
How to Configure the Traps 158
10.1.1 Basic Concepts 135 10.1.2 MIBs Explained 136
 SLA Monitoring
 Contents
 About this Operator’s Guide
 About this Operator’s Guide
 Introduction
Introduction
 Chapter
 CLI web page access requirements
SpeedTouch Command Line Interface About the CLI Interface
CLI Telnet access requirements
CLI serial access requirements
 Access via a Telnet session or serial console
CLI Access via Telnet or Serial Console
 =help
Command group navigation
Basic Navigation
 =help firewall list
Going to the beginning
Or end of a line
 Chapter
 Firewall list
Command Line Interface Commands
Executing Commands from the Top Level
 Executing Commands From the Command Group
 Chapter
 Menu-driven CLI Navigation
 Chapter
 SpeedTouch System Software
SpeedTouch System Software About the System Software
 Topic See
System Software Management via FTP
 Ftpcd dl
Backup System Software via FTP
Step Action
 Get the system software file
Software version command
Subdirectory’s contents
 Upgrade/Restore procedure
Upgrade or Restore System Software via FTP
 Transfer system software to the SpeedTouch
Use the quote site software version command to check
Software deletepassive command to delete it
 Ftp put ZZUIAA5.411
 Mark system software file as Passive Software Version
Activate the upgrade/ restored system software
 System software
Manual System Software Management via BOOTP/TFTP server
Management
Important note
 =software upgrade
 SpeedTouch Configuration Management
SpeedTouch Configuration Management
 Configurations via Basic Web Interface Step Action
Configuration Management via the SpeedTouch Web Interface
Go to Home SpeedTouch Configuration
Click Save or Restore Configuration
 Local disk, you want to restore on your SpeedTouch
Restoring configurations via the basic Web Interface
SpeedTouch Configuration Management Proceed as follows
 Click Save All to save the current configuration
Go to expert mode
Open the Update page via Home SpeedTouch System Update
Click Backup
 Intend to restore. Select the file and click OK
Restoring a configuration via the expert pages
Open the Upgrade page via Home SpeedTouch System Update
 FTP access SpeedTouch configuration files
Configuration Management via Telnet
 Config save
Config CLI Command Group
Config backup filename = user configuration filename
Config dump
 Loadip = noyes
Defaults = noyes
Flush = yesno
Echo = noyes
 SpeedTouch Multi Level Access Policy Configuration Guide
Back up Configurations via FTP
Site saveall command
Get the latest configuration file from
 Ftp get user.ini
Configuration you saved in is stored in the user.ini file
Other configuration files stored via
 Introduction Restore/change procedure
Store Configurations via FTP
 Software cleanup CLI command
Transfer the configuration file to the SpeedTouch
Quote site saveall command
 Matches total
Ftp put config.ini
 Ftp quote site config load
 Connection for /bin/ls Jun 1971 Start.cmd Rwxrwxrwx
 Template files on the SpeedTouch file system
SpeedTouch Service Templates
Template Description
 SpeedTouch System Languages Management
Open the Upload File page via Home SpeedTouch System Update
 Switch between system languages
 Open the language page via Home SpeedTouch System Update
Go to the Expert Mode
Language Step Action
Click on the Language Packs tab
 Chapter
 Software Modules ST620 ST608WL ST605
SpeedTouch Software Modules
SpeedTouch Software Modules
Software key
 Table Item Description
Software Activation Key Management
 =software addon list
 How to Install a Software Key
 Service See
SpeedTouch System Services
SpeedTouch System Services
Overview This chapter covers the following services
 SpeedTouch Dynamic DNS
 Dyndns service
SpeedTouch CLI dyndns commands
Dyndns host
=dyndns help
 Adding a dynamic DNS host name Adding a dynamic DNS client
Example dynamic DNS subscription
=dyndns host add group=MyDynDNSHost name=johndoe.dyndns.org
=dyndns add name=MyDynDNS
 Group = MyDynDNSHost
Modifying the dynamic DNS client
=dyndns modify Name = MyDynDNS
 Service list
Refining the dynamic DNS service settings
 Use multiple hosts configure an additional host
DNS Service
=dyndns modify name=MyDynDNS status=enabled
Checking dynamic DNS client Resolving
 SpeedTouch Sntp Client
 Manual tab Select Manual to
 Step Action
 Sntp add and sntp delete
Sntp config
Sntp list
 Method Description
Website Filtering
 Section See
 Website Filtering Configuration Pages
 How to Verify the Filtering Configuration
 Web Section Description
Content level becomes available. Refer to 6.3.3 How to
Filtering license is available
Information
 How to Activate a Web Filtering License
 Filter Priority Actions for Uncategorised Sites
Configuring the Actions for Uncategorised Sites
 How to Create a New Proceed as follows Entry Step Action
How to Create an Address Based Filter
Go to the first bullet in the list Address Based Filtering
Want to create an entry in the filter
 Select the content level of your choice
How to Create a Content Based Filter
Level
All Legal Teenagers Children BlockAll
 View Step Action
How to Create a Content Level
Level Step Action
Go to the Web site filtering Overview
 Pick a Task... list, select Create a new content level
Content Level Step Action
 Toolbox section, click Intrusion Detection
Intrusion Detection and Protection
Task Description
 Remote Assistance
About Remote Assistance How to Set Up Remote Assistance
How to Log On To The SpeedTouch Remotely
 Chapter
 Chapter
 To the SpeedTouch
SpeedTouch File System
Opening an FTP session
 Preparing for FTP file transfers
Access rights to the file system
 Ftpcd
Files stored on the file system
 Chapter
 Access method System service name
SpeedTouch Remote Access
SpeedTouch access methods
 Chapter
 Configuration via CLI commands
Remote Web Interface Access
=service system list name=HTTP expand=enabled
=service system ifadd name=HTTP group=wan =
 =service system ipadd name=HTTP ip=192.6.11.5 =
Refinement Service
=service system ipadd name=HTTP ip=192.6.11.0/24 =
=service system ipadd name=HTTP ip=192.6.2-55.2-55 =
 =service system modify name=HTTP state=enabled port=82 =
NAT configuration menu, but always in System Services
 =service system list name=HTTPs expand=enabled
Secure Remote Web Interface Access
HTTPs service Introduction
 =service system ifadd name=HTTPs group=wan =
 =service system ipadd name=HTTPs ip=192.6.2-55.2-55 =
=service system ipadd name=HTTPs ip=192.6.11.5 =
=service system ipadd name=HTTPs ip=192.6.11.0/24 =
 448
=service system modify name=HTTPs state=enabled port=448 =
 =service system list name=TELNET expand=enabled
Remote Telnet Access
=service system ifadd name=TELNET group=wan =
 =service system ipadd name=TELNET ip=192.6.11.5 =
Refinement of the Service
=service system ipadd name=TELNET ip=192.6.11.0/24 =
=service system ipadd name=TELNET ip=192.6.2-55.2-55 =
 =service system modify name=TELNET state=enabled port=50 =
 SSH service Introduction SSH authentication
Remote SSH Access
=ssh config auth=password
=ssh config shell=enabled
 =ssh publickey list
 SSH
=service system list name=SSH expand=enabled
 =service system ifadd name=SSH group=wan
 =service system ipadd name=SSH ip=192.6.2-55.2-55
=service system ipadd name=SSH ip=192.6.11.5
=service system ipadd name=SSH ip=192.6.11.0/24
 =service system modify name=SSH state=enabled port=35
 =service system ifadd name=FTP group=wan
Remote FTP Access
=service system list name=FTP expand=enabled
 =service system ipadd name=FTP ip=192.6.2-55.2-55
=service system ipadd name=FTP ip=192.6.11.5
=service system ipadd name=FTP ip=192.6.11.0/24
 =service system modify name=FTP state=enabled port=26
 =ssh config sftp=enabled
Remote Sftp Access
 101
 102
 103
 104
 105
 Configuration Options How to Configure LAC Syntax
LAN Based Auto-Configuration LAC Support TR-064
 Parameter Descripion Value Description
Enabled or
Disabled
 CPE WAN Management Protocol Cwmp Support TR-069
 How to Configure Cwmp Syntax
 Parameter Value Description
How to Configure
Parameter Descripion
 Cwmp Server Parameter Description Value
How to Configure the Cwmp Server Syntax
 112
 Overview This chapter covers the following topics
Integrated SpeedTouch Isdn Modem
Integrated SpeedTouch Isdn Modem
 About the Isdn Modem
 115
 How to Configure the Isdn Modem
 Action See
Isdn Backup
 Isdn backup
How to Configure the Isdn Dial-In Connection
Click Connections
Click Routed PPoI
 119
 Enabled or disabled
 How to Configure the PPP Connection
 Cidr , dotted or none
Pap , chap or auto
 Will engage the Isdn backup if
Enable or disable dial-on-demand
Demanddial
DOD. This means that the system
 Isdn Callback
 125
 126
 Support callback
Called party must also be set to
 128
 129
 130
 Isdn Remote Capi
How to Install Remote Proceed as follows
\windows\system32\capi2032.dll
RemoteCAPI
 Select Remote Capi Daemon
 SpeedTouch Monitoring
SpeedTouch Monitoring
 Snmp in the SpeedTouch Overview
An Introduction to Snmp
 Basic Concepts
Management Information Base Basic Commands
 RFC1213 MIB-II
MIBs Explained
 RFC3417 Transport Mappings for Snmp MIB RFC3418 SNMPv2-MIB
Standard MIBs MIBs About Snmp
SpeedTouch Monitoring From previous
 138
 Task See
Snmp configuration
 How to Allow Access to the Snmp Agent
 About the Snmp Service
How to View the Snmp Configuration
You can the same command to view the SNMPV3 Traps
This returns the following output
 How to View the System Contact, Name and Location
 Configure the community to have these group rights
How to Configure SNMPv1
Allow external access to the Snmp agent
Create a new community
 Enable traps
Configure the target parameters
Create a new target
Create a notify filter
 Enable or disable
How to Configure the System contact, Name and Location
Parameters This command has the following parameters
Enable or disable the sending
 MTU
How to Force the Source IP Address
 Parameters The command has the following parameters
How to Configure the Snmp Target
 Destination
 To update the traffic load, use
How to Read Snmp Parameters via the CLI
With objectid the object identity to getNext from
To get the iP address table, use
 Administratorsnmp=walk ObjectId=1.3.6.1.2.1.1
 =service system ifadd name SNMPV3AGENT group wan
How to Allow Remote Snmp
 How to Add an Snmp User
 Group Description
 Notification access to that view
Use the following command to create a new view
Use the following command to create a new user
Use the following command to add the user to the group
 This results in the following output
 Communities
 SNMPV3AGENT
How to Restrict Snmp Access
 Use the snmp targetparams add command
How to Configure the Traps
Use the snmp notifyfilter add command
Use the snmp notifyprofile add command
 Use the following command sequence
Use the snmp target add command
 SpeedTouch Syslog
 SpeedTouch Syslog Daemon
What is Syslog
SpeedTouch
Syslog daemon
 Priority Notation Code
 163
 Syslog via the Web Interface
 165
 Syslog via the CLI
Syslog CLI command group
=syslog help
=syslog msgbuf help
 =syslog ruleadd fac=all sev=debug dest=192.168.1.10 =saveall
Remote Syslog Notification
 Syslog host on a remote network
=service system list name=SYSLOG expand=enabled
 Advantages SpeedTouch Identification
SpeedTouch Identification on AWS
 SpeedTouch Identification over AWS
 About the Advanced Diagnostics Overview
SpeedTouch Advanced Diagnostics
 Office Network Web
 173
 174
 Click... To
Diagnostic Web
Opening SpeedTouch Diagnostic Web Interface
 176
 177
 178
 Command Line Interface Diagnostics
 Accessing the CLI
About CLI Diagnostics
Diagnostical CLI
Commands
 Tmmb
Lower Layer Diagnostics
 Atm debug gstats
Atm debug aal5stats
Atm debug portstats
Atm oam cc send
 =autopvc list
ATM Auto-Configuration via TR-37/ Ilmi
=autopvc config mode=active =
 Dhcp client debug stats
Router Services Diagnostics
Dhcp server debug stats
Dhcp relay debug stats
 =dns server debug stats
Dns server debug stats
Displays statistics of SpeedTouch’s DNS server/forwarder
 =firewall rule debug stats
Routing Diagnostics
Firewall rule debug stats
 It uses the following parameters
Below is an example of a ping command and its reply
 Below is an example of a traceroute command and its reply
Command
 =eth switch mirror capture port=4 =
Ethernet Diagnostics
 190
 Displays SpeedTouch cpu and memory statistics
Management Diagnostics
System debug stats
 192
 =sla ping add test=internet addr=11.0.0.138
SLA Monitoring
 Parameter Description Values
 =sla ping list
=sla ping start test=internet =
 SLA Monitoring Following results will be displayed
Name Description
 =sla traceroute add test=route addr=11.0.0.138 =
SLA Traceroute configuration
 198
 =sla traceroute start test=route =
Starting the SLA Traceroute
=sla traceroute modify test = route Addr =
 Dffield = no Result Info Status
=sla traceroute list
 =sla traceroute hist test route owner modem
 202
 Resetting the SpeedTouch
Resetting the SpeedTouch
=system reboot
=system reset factory=yes proceed=yes
 Press and hold the reset button
Switch off the SpeedTouch
Switch on the SpeedTouch
Keep the reset button pushed in for ca seconds
Page
 Need more help?