KB 176

Efficient Router cheat-sheet

Article:176
Created:2002-08-13 13:32:10
Categories:
  DSL

Question or Symptom

Common commands used on the efficient router

Resolution

 Efficient Router Cheat Sheet
 
   * List the contents of the packet filter:
 
      rem ipfilter list wan
      
 
   * Set up port forwarding:
     To simply forward port 80 to an internal machine with IP address 192.168.1.2, use this:
 
      rem addserver 192.168.1.2 tcp 80 wan
      
 

If you want to forward port A on the router to port B on the internal machine. you have to specify a range of ports on the router and a starting port on the internal machine. If you just want one port, then the range will have the same starting and ending port number. For example, to forward port 9000 to the telnet port of an internal machine (so you don't kill telnet access to the router), use this:

      rem addserver 192.168.1.2 tcp 9000 9000 23 wan
      
 
   * Change the telnet password:
 
      system admin <new password>
      
 
   * Recover lost telnet password:
 
      Connect to the router on the console port.
      
      There is a small hole in the back of the router which is the reset
      button.  Use a paperclip to hold down that reset button for about 3-5
      seconds.  The status lights will change and the console will print
      a message (don't remember what it says, but it has to do with being in
      password bypass mode).  At this point you can log in using the router's
      serial number as a password  (found on a sticker on the underside of
      the router).
 
      After logging in you can change the password with:
 
        system admin <new password>
        save all
        reboot
      
      NOTE: Pressing the reset button on the newer firmware will erase the 
            entire config and you will have to restore it.
 
   * View system log while connected with telnet instead of serial console:
 
      sys log start
      
 
   * Set up DHCP:
 
      dhcp add 192.168.1.0 255.255.255.0
      dhcp set valueoption domainname swcp.com
      dhcp set valueoption domainnameserver 198.59.115.2
      dhcp set valueoption domainnameserver 129.121.254.2
      dhcp set lease 192.168.1.0 48
      dhcp set addresses 192.168.1.100 192.168.1.199
      dhcp enable all
      
 
   * How to set up PPTP pass-through on an Efficient router with NAT
 
      system addserver <PPTP server IP address> tcp 1723
      system addserver <PPTP server IP address> 47 0
      
 
   * How to turn off RIP
 
      # Do not send/receive RIP, and even if we do, don't include default route
      eth ip options rxrip off
      eth ip options rxdef off
      eth ip options txrip off
      eth ip options avdfr off
      save all
      reboot
      
 
   * How to turn off NAT:
 
      rem setIPTranslate off wan
      save all
      reboot
      
 
   * Change the ethernet IP address:
 
      eth ip addr <IP-ADDRESS> <SUBNET-MASK>
      Example: eth ip addr 192.168.10.4 255.255.255.0
      
 
   * How to convert from "static" to PPP-over-ATM (PPPoA):
 
      remote setprotocol pppllc wan
      remote setpppoptions ipslavemode on wan
      remote setauthen pap wan
      remote disauthen wan
      remote setsrcipaddr 0.0.0.0 0.0.0.0 wan
      remote setrmtipaddr 0.0.0.0 0.0.0.0 wan
      remote addiproute 0.0.0.0 255.255.255.255 1 wan
      remote blocknetbios on wan
      remote setoursysname <USERNAME@swcp.com> wan
      remote setourpasswd <PASSWORD> wan
      
 
   * Do I have a router or a bridge?
     There's no way to tell by inspecting the box. But if you run the "version" command you
     can tell whether the box is configured for routing or not:
 
# version
SpeedStream 5851 SDSL [ATM] Router (120-5851-012)
Efficient-5000 BOOT/POST V6.0.0 (18-Aug-00 16:15)
Software version v4.0.5.1 built Tue Sep 19 12:04:16 PDT 2000
Maximum users: unlimited
Options: SDSL, RFC1483, IP ROUTING, IP FILTERING, WEB, ~IPSEC, ~3DES,
         ~L2TP, ~ENCRYPT, BRIDGE, IPX
      
 

A tilde indicates that the option is not available in this router. So the above router has IP ROUTING but not IPSEC. The bridging-only devices will have a tilde on the IP ROUTING feature.

   * General Notes:
         o Changing the ethernet IP does require a reboot.
         o Adding port forwarding does not require a reboot.
         o Turning off RIP net IP does require a reboot.
   o The "save all" command commits your changes but does not save them. You must issue the 
     "sync" command to get them saved. "reboot" automatically does a sync.