Ssh | Technicolor - Thomson SpeedTouchTM620 specs

Chapter 8

SpeedTouch™ Remote Access

Default SSH Use the following CLI command to see the default SSH service configuration. service configuration

=>:service system list name=SSH expand=enabled
Idx Name	Protocol	SrcPort DstPort Group
----------------------------------------------------------------------
1 SSH	tcp	22
Description		SSH server
Properties		server
Attributes		state port aclip aclif aclifgroup map log
User Managed Attributes....		state aclip aclif aclifgroup map log
Attribute Values :
State		enabled
Port		22
Ip Access List		any
Interface Access List		any
Interface Group Access List lan
Map List		22
Logging		disabled

E-DOC-CTC-20051017-0155 v1.0	93

Image 103

Technicolor - Thomson SpeedTouchTM620 manual =service system list name=SSH expand=enabled, Ssh

Contents

SpeedTouch620 Page SpeedTouch 620 Trademarks CopyrightDocument Information Contents SpeedTouch Software Modules Integrated SpeedTouch Isdn Modem 10.1.1 Basic Concepts 135 10.1.2 MIBs Explained 136 How to Add an Snmp User 152How to Restrict Snmp Access 157 How to Configure the Traps 158 SLA Monitoring Contents About this Operator’s Guide About this Operator’s Guide Introduction Introduction Chapter CLI serial access requirements SpeedTouch Command Line Interface About the CLI InterfaceCLI web page access requirements CLI Telnet access requirements Access via a Telnet session or serial console CLI Access via Telnet or Serial Console Basic Navigation Command group navigation=help Or end of a line Going to the beginning=help firewall list Chapter Executing Commands from the Top Level Command Line Interface CommandsFirewall list Executing Commands From the Command Group Chapter Menu-driven CLI Navigation Chapter SpeedTouch System Software SpeedTouch System Software About the System Software Topic See System Software Management via FTP Step Action Backup System Software via FTPFtpcd dl Subdirectory’s contents Software version commandGet the system software file Upgrade/Restore procedure Upgrade or Restore System Software via FTP Software deletepassive command to delete it Use the quote site software version command to checkTransfer system software to the SpeedTouch Ftp put ZZUIAA5.411 Mark system software file as Passive Software Version Activate the upgrade/ restored system software Important note Manual System Software Management via BOOTP/TFTP serverSystem software Management =software upgrade SpeedTouch Configuration Management SpeedTouch Configuration Management Click Save or Restore Configuration Configuration Management via the SpeedTouch Web InterfaceConfigurations via Basic Web Interface Step Action Go to Home SpeedTouch Configuration SpeedTouch Configuration Management Proceed as follows Restoring configurations via the basic Web InterfaceLocal disk, you want to restore on your SpeedTouch Click Backup Go to expert modeClick Save All to save the current configuration Open the Update page via Home SpeedTouch System Update Open the Upgrade page via Home SpeedTouch System Update Restoring a configuration via the expert pagesIntend to restore. Select the file and click OK FTP access SpeedTouch configuration files Configuration Management via Telnet Config dump Config CLI Command GroupConfig save Config backup filename = user configuration filename Echo = noyes Defaults = noyesLoadip = noyes Flush = yesno Get the latest configuration file from Back up Configurations via FTPSpeedTouch Multi Level Access Policy Configuration Guide Site saveall command Other configuration files stored via Configuration you saved in is stored in the user.ini fileFtp get user.ini Introduction Restore/change procedure Store Configurations via FTP Quote site saveall command Transfer the configuration file to the SpeedTouchSoftware cleanup CLI command Matches total Ftp put config.ini Ftp quote site config load Connection for /bin/ls Jun 1971 Start.cmd Rwxrwxrwx Template Description SpeedTouch Service TemplatesTemplate files on the SpeedTouch file system SpeedTouch System Languages Management Open the Upload File page via Home SpeedTouch System Update Switch between system languages Click on the Language Packs tab Go to the Expert ModeOpen the language page via Home SpeedTouch System Update Language Step Action Chapter Software key SpeedTouch Software ModulesSoftware Modules ST620 ST608WL ST605 SpeedTouch Software Modules Table Item Description Software Activation Key Management =software addon list How to Install a Software Key Overview This chapter covers the following services SpeedTouch System ServicesService See SpeedTouch System Services SpeedTouch Dynamic DNS =dyndns help SpeedTouch CLI dyndns commandsDyndns service Dyndns host =dyndns add name=MyDynDNS Example dynamic DNS subscriptionAdding a dynamic DNS host name Adding a dynamic DNS client =dyndns host add group=MyDynDNSHost name=johndoe.dyndns.org =dyndns modify Name = MyDynDNS Modifying the dynamic DNS clientGroup = MyDynDNSHost Service list Refining the dynamic DNS service settings Checking dynamic DNS client Resolving DNS ServiceUse multiple hosts configure an additional host =dyndns modify name=MyDynDNS status=enabled SpeedTouch Sntp Client Manual tab Select Manual to Step Action Sntp list Sntp configSntp add and sntp delete Method Description Website Filtering Section See Website Filtering Configuration Pages How to Verify the Filtering Configuration Information Content level becomes available. Refer to 6.3.3 How toWeb Section Description Filtering license is available How to Activate a Web Filtering License Filter Priority Actions for Uncategorised Sites Configuring the Actions for Uncategorised Sites Want to create an entry in the filter How to Create an Address Based FilterHow to Create a New Proceed as follows Entry Step Action Go to the first bullet in the list Address Based Filtering All Legal Teenagers Children BlockAll How to Create a Content Based FilterSelect the content level of your choice Level Go to the Web site filtering Overview How to Create a Content LevelView Step Action Level Step Action Pick a Task... list, select Create a new content level Content Level Step Action Task Description Intrusion Detection and ProtectionToolbox section, click Intrusion Detection How to Log On To The SpeedTouch Remotely About Remote Assistance How to Set Up Remote AssistanceRemote Assistance Chapter Chapter Opening an FTP session SpeedTouch File SystemTo the SpeedTouch Preparing for FTP file transfers Access rights to the file system Ftpcd Files stored on the file system Chapter SpeedTouch access methods SpeedTouch Remote AccessAccess method System service name Chapter =service system ifadd name=HTTP group=wan = Remote Web Interface AccessConfiguration via CLI commands =service system list name=HTTP expand=enabled =service system ipadd name=HTTP ip=192.6.2-55.2-55 = Refinement Service=service system ipadd name=HTTP ip=192.6.11.5 = =service system ipadd name=HTTP ip=192.6.11.0/24 = =service system modify name=HTTP state=enabled port=82 = NAT configuration menu, but always in System Services HTTPs service Introduction Secure Remote Web Interface Access=service system list name=HTTPs expand=enabled =service system ifadd name=HTTPs group=wan = =service system ipadd name=HTTPs ip=192.6.11.0/24 = =service system ipadd name=HTTPs ip=192.6.11.5 ==service system ipadd name=HTTPs ip=192.6.2-55.2-55 = 448 =service system modify name=HTTPs state=enabled port=448 = =service system ifadd name=TELNET group=wan = Remote Telnet Access=service system list name=TELNET expand=enabled =service system ipadd name=TELNET ip=192.6.2-55.2-55 = Refinement of the Service=service system ipadd name=TELNET ip=192.6.11.5 = =service system ipadd name=TELNET ip=192.6.11.0/24 = =service system modify name=TELNET state=enabled port=50 = =ssh config shell=enabled Remote SSH AccessSSH service Introduction SSH authentication =ssh config auth=password =ssh publickey list SSH =service system list name=SSH expand=enabled =service system ifadd name=SSH group=wan =service system ipadd name=SSH ip=192.6.11.0/24 =service system ipadd name=SSH ip=192.6.11.5=service system ipadd name=SSH ip=192.6.2-55.2-55 =service system modify name=SSH state=enabled port=35 =service system list name=FTP expand=enabled Remote FTP Access=service system ifadd name=FTP group=wan =service system ipadd name=FTP ip=192.6.11.0/24 =service system ipadd name=FTP ip=192.6.11.5=service system ipadd name=FTP ip=192.6.2-55.2-55 =service system modify name=FTP state=enabled port=26 =ssh config sftp=enabled Remote Sftp Access 101 102 103 104 105 Configuration Options How to Configure LAC Syntax LAN Based Auto-Configuration LAC Support TR-064 Disabled Enabled orParameter Descripion Value Description CPE WAN Management Protocol Cwmp Support TR-069 How to Configure Cwmp Syntax Parameter Descripion How to ConfigureParameter Value Description Cwmp Server Parameter Description Value How to Configure the Cwmp Server Syntax 112 Integrated SpeedTouch Isdn Modem Integrated SpeedTouch Isdn ModemOverview This chapter covers the following topics About the Isdn Modem 115 How to Configure the Isdn Modem Action See Isdn Backup Click Routed PPoI How to Configure the Isdn Dial-In ConnectionIsdn backup Click Connections 119 Enabled or disabled How to Configure the PPP Connection Cidr , dotted or none Pap , chap or auto DOD. This means that the system Enable or disable dial-on-demandWill engage the Isdn backup if Demanddial Isdn Callback 125 126 Support callback Called party must also be set to 128 129 130 RemoteCAPI How to Install Remote Proceed as followsIsdn Remote Capi \windows\system32\capi2032.dll Select Remote Capi Daemon SpeedTouch Monitoring SpeedTouch Monitoring Snmp in the SpeedTouch Overview An Introduction to Snmp Basic Concepts Management Information Base Basic Commands RFC1213 MIB-II MIBs Explained SpeedTouch Monitoring From previous Standard MIBs MIBs About SnmpRFC3417 Transport Mappings for Snmp MIB RFC3418 SNMPv2-MIB 138 Task See Snmp configuration How to Allow Access to the Snmp Agent This returns the following output How to View the Snmp ConfigurationAbout the Snmp Service You can the same command to view the SNMPV3 Traps How to View the System Contact, Name and Location Create a new community How to Configure SNMPv1Configure the community to have these group rights Allow external access to the Snmp agent Create a notify filter Configure the target parametersEnable traps Create a new target Enable or disable the sending How to Configure the System contact, Name and LocationEnable or disable Parameters This command has the following parameters MTU How to Force the Source IP Address Parameters The command has the following parameters How to Configure the Snmp Target Destination To get the iP address table, use How to Read Snmp Parameters via the CLITo update the traffic load, use With objectid the object identity to getNext from Administratorsnmp=walk ObjectId=1.3.6.1.2.1.1 =service system ifadd name SNMPV3AGENT group wan How to Allow Remote Snmp How to Add an Snmp User Group Description Use the following command to add the user to the group Use the following command to create a new viewNotification access to that view Use the following command to create a new user This results in the following output Communities SNMPV3AGENT How to Restrict Snmp Access Use the snmp notifyprofile add command How to Configure the TrapsUse the snmp targetparams add command Use the snmp notifyfilter add command Use the following command sequence Use the snmp target add command SpeedTouch Syslog Syslog daemon What is SyslogSpeedTouch Syslog Daemon SpeedTouch Priority Notation Code 163 Syslog via the Web Interface 165 =syslog msgbuf help Syslog CLI command groupSyslog via the CLI =syslog help =syslog ruleadd fac=all sev=debug dest=192.168.1.10 =saveall Remote Syslog Notification Syslog host on a remote network =service system list name=SYSLOG expand=enabled Advantages SpeedTouch Identification SpeedTouch Identification on AWS SpeedTouch Identification over AWS About the Advanced Diagnostics Overview SpeedTouch Advanced Diagnostics Office Network Web 173 174 Opening SpeedTouch Diagnostic Web Interface Diagnostic WebClick... To 176 177 178 Command Line Interface Diagnostics Commands About CLI DiagnosticsAccessing the CLI Diagnostical CLI Tmmb Lower Layer Diagnostics Atm oam cc send Atm debug aal5statsAtm debug gstats Atm debug portstats =autopvc config mode=active = ATM Auto-Configuration via TR-37/ Ilmi=autopvc list Dhcp relay debug stats Router Services DiagnosticsDhcp client debug stats Dhcp server debug stats Displays statistics of SpeedTouch’s DNS server/forwarder Dns server debug stats=dns server debug stats Firewall rule debug stats Routing Diagnostics=firewall rule debug stats It uses the following parameters Below is an example of a ping command and its reply Below is an example of a traceroute command and its reply Command =eth switch mirror capture port=4 = Ethernet Diagnostics 190 System debug stats Management DiagnosticsDisplays SpeedTouch cpu and memory statistics 192 =sla ping add test=internet addr=11.0.0.138 SLA Monitoring Parameter Description Values =sla ping list =sla ping start test=internet = SLA Monitoring Following results will be displayed Name Description =sla traceroute add test=route addr=11.0.0.138 = SLA Traceroute configuration 198 =sla traceroute modify test = route Addr = Starting the SLA Traceroute=sla traceroute start test=route = Dffield = no Result Info Status =sla traceroute list =sla traceroute hist test route owner modem 202 =system reset factory=yes proceed=yes Resetting the SpeedTouchResetting the SpeedTouch =system reboot Keep the reset button pushed in for ca seconds Switch off the SpeedTouchPress and hold the reset button Switch on the SpeedTouchPage Need more help?