Nvram Parameter Configuration Instructions

Nvram parameter configuration instructions
Page 1 of 75
Xiamen Four-Faith Communication Technology Co.,Ltd.
Add J1-J3,3rdFloor,No.44,GuanRiRoad,SoftWare Park,XiaMen .361008.China
httpen.four-faith.com Tel +86 13178273589 E-mail:coco@four-faith.com
NVRAM
parameter
configuration
instruction
Document No. Product version Security
classification
A
Product name:nvram parameter configuration
instruction
A total of 72
NVRAM PARAMETER
CONFIGURATION INTRODUCTION
This manual applies to the following models
model Product category
F3x34 Single card five port WIFI
ROUTER
F5934 High-performance broadband
ROUTER
F3x24 Single card single port WIFI
ROUTER
F3B3x Dual card five port WIFI
ROUTER
F7x34 Single card five port+GPS
WIFI ROUTER
F7x24 Single card single port+GPS
WIFI ROUTER
F7B3x Dual card five port+GPS WIFI
ROUTER
Page 2 of 75
Document
revision
history
version explanation author
2012-10-31 V1.00 The initial version PF,XCY
2013-3-26 V1.10 Increase the number of
common items hidden
parameters
PF
Copyright Notice
All contents in the files are protected by copyright law, and all copyrights are reserved by Xiamen
Four-Faith Communication Technology Co., Ltd. Without written permission, all commercial use of the
files from Four-Faith are forbidden, such as copy, distribute, reproduce the files, etc., but
non-commercial purpose, downloaded or printed by individual (all files shall be not revised, and the
copyright and other proprietorship notice shall be reserved) are welcome.
Trademark notice
Four-Faith were all registered trademarks of xiamen four-faith
communication technology Co.,Ltdwithout prior written permissionno person shall in any way use the
four-faith name and four-faith trademarks and logos.
Page 3 of 75
Catalogue
Nvram parameters instructions...............................................................................................................................4
1.setup........................................................................................................................................................................ 6
1.1 Basic setup.................................................................................................................................................. 6
1.2 Dynamic DNSDDNS........................................................................................................................ 17
1.3 MAC address cloning.............................................................................................................................. 20
1.4 Advaced routing........................................................................................................................................ 21
2. wireless.................................................................................................................................................................22
2.1 basic setup................................................................................................................................................ 22
2.2 wireless security....................................................................................................................................... 23
3 .service.................................................................................................................................................................. 25
3.1 service........................................................................................................................................................ 25
3.2 PPPoE server........................................................................................................................................... 27
4 . VPN......................................................................................................................................................................29
4.1 PPTP.......................................................................................................................................................... 29
4.2 L2TP........................................................................................................................................................... 30
4.3 IPSEC...................................................................................................................................................... 32
4.3 GRE............................................................................................................................................................ 41
5 . security................................................................................................................................................................ 45
5.1 firewall........................................................................................................................................................ 45
5.2 VPN pass-through.................................................................................................................................... 46
6 . access limit......................................................................................................................................................... 47
6.1 WAN access.............................................................................................................................................. 47
6.2 data-flow filtration..................................................................................................................................... 54
7 . NAT configuration.............................................................................................................................................. 56
8 . QoS option.......................................................................................................................................................... 58
8.1 basic........................................................................................................................................................... 58
8.2 classification.............................................................................................................................................. 62
8.3 Load balance.............................................................................................................................................63
9 . application...........................................................................................................................................................64
9.1 Serial port application.............................................................................................................................. 64
9.2 GPS options.............................................................................................................................................. 65
10 . management.................................................................................................................................................... 67
10.1 management........................................................................................................................................... 67
Page 4 of 75
10.2 Remain active......................................................................................................................................... 68
11 .Other important parameters nvram............................................................................................................... 70
Nvram parameters instructions
The file is mainly about the nvram parameters used in the new type of router. The
parameters are classified in web menu because of the large amount. Some parameters
are omitted since they are not frequently used. It mainly includes VLAN and Network in
Setup,MAC filter,Advance settings and WDS in Wireless settings,and OPENVPN in VPN.
There are five commands in common use as follows.
nvram show
To make a list of all the commands in NVRAM. grep command can be also used to extract
part of the information. For example,
nvram show | grep lan_
This command can be used to list all parameters starting with lan_ are listed with and the
result is as follows
lan_gateway=192.168.1.254
dr_lan_rx=0
lan_netmask=255.255.255.0
lan_lease=86400
lan_stp=1
lan_hwaddr=00:12:17:E1:56:F5
lan_dns=211.152.179.7 202.96.128.86
lan_ifnames=vlan0 eth1
size: 12567 bytes (20201 left)
lan_ipaddr=192.168.1.1
lan_proto=static
lan_ifname=br0
lan_wins=
lan_hwnames=
nvram set parameter="value"
To add or modify some parameters. For example, excute the following command to change
LAN ip from 192.168.1.1 to 192.168.1.2.
nvram set lan_ipaddr=192.168.1.2
Page 5 of 75
nvram commit
reboot
Line 1 for ip address modification, line 2 for save, and line 3 for reboot. Because the ip
address modification works after rebooting.
nvram get parameters
Used to obtain some of the parametersfor example,i want to get the LAN IP address
executable
nvram get lan_ipaddr
192.168.1.1
So 192.168.1.1 is the ip address of LAN port
nvram unset parameter
Used to remove some of the parametershowever,this feature is rarely usedbecause 64k
capacity of nvram enough to save a large number of parametersmost people rely to
delete
For example,i want to remove dr_lan_rx=0 parameterrequests the executive
nvram unset dr_lan_rx
nvram commit
When you do a lot of modifications to nvramyou need to save these changeswhen your
router resetthese modifications will be disappearsame as aboveyou should perform
nvram commit
Page 6 of 75
1.setup
1.1 Basic setup
WAN port setting
NO. Parameter
item
parameter The value and description example
1 Connection
type
wan_proto disabled disable nvram set wan_proto=dhcp
dhcp Dhcp mode
static Static IP mode
pppoe Pppoe dial mode
pptp Pptp mode
l2tp l2tp mode
3g 3g link-1 mode
3glink 3g link-2 mode
3glink
NO. Parameter
item
parameter The value and parameter example
1 username ppp_username 63 bytes of longest
character
nvram set
ppp_username=card
2 password ppp_passwd 63 bytes of longest
character
nvram set ppp_passwd=card
3 Call center
number
wan_dial 0 *99***1# nvram set wan_dial=1
1 *99#
2 #99***1#
3 #777
4 *98*1#
4 APN wan_apn 63 bytes of longest
character
nvram set wan_apn=3gnet
5 PIN wan_pin Must be 4-byte number nvram set wan_pin=1234
6 Network type wan_conmode 0 auto nvram set wan_conmode=0
Page 7 of 75
selection 1 Enforce 3g
2 Enforce 2g
3 3g first
4 2gfirst
5 2g/3g Allow only
6 Enforce 4g
7 2g/3g/4g Allow
only
7 Keep online
mode
KpOnlineMode 1 None nvram set KpOnlineMode=1
2 Ping mode
5 Route mode
6 PPP mode
8 Keep online
detection
interval
KpOnlineInterval
Range 0-9999in sec.
nvram set
KpOnlineInterval=60
9 keep online
to detection
the main
server ip
KpOnlineIcmpD
est
Currently only support ip
form,does not support
domain form
nvram set KpOnlineIcmpDest
=8.8.8.8
10 Keep online
to detection
the second
server ip
KpOnlineIcmpSe
cDest
domain form
nvram set
KpOnlineIcmpSecDest
=166.111.8.238
11 Enable
dial-up failed
to restart
mechanism
ppp_restartppp 0 disable nvram set ppp_restartppp=1
1 enable
12 Forced to
reconnect
reconnect_enabl
e
0 disable nvram set
reconnect_enable=1 1 enable
13 time reconnect_hours Number of 0-24 range nvram set reconnect_hours=0
reconnect_minut
es
Number of 0-59 range nvram set
reconnect_minutes=0
14 STP lan_stp 0 disable nvram set lan_stp=1
1 enable
Static IP
NO. Parameter
item
1 WAN IP wan_ipaddr IP address form nvram set wan_ipaddr
Page 8 of 75
address =192.168.8.22
2 Subnet mask wan_netmask netmask nvram set wan_netmask
=255.255.255.0
3 gateway wan_gateway netmask nvram set wan_netmask
=192.168.8.1
4 Static DNS1
Static DNS2
Static DNS3
wan_dns First DNS
Second DNS
Third DNS
nvram set wan_dns=8.8.8.8
218.85.157.99 218.85.152.99
3 DNS directly separated by
spaces,should user quotation
marks separated by a space
framed
5 Keep online
mode
2 Ping mode
5 Route mode
6 Keep online
detection
interval
KpOnlineInterval
Range 0-9999in sec.
nvram set
KpOnlineInterval=60
7 Keep online
to detect
main server
ip
KpOnlineIcmpD
est
domain form
=8.8.8.8
8 Keep online
to detect
second
server ip
KpOnlineIcmpSe
cDest
domain form
nvram set
KpOnlineIcmpSecDest
=166.111.8.238
notenumber 5-8 only used in the version of the dual-card
DHCP mode
NO. Parameter
item
1 Keep online KpOnlineMode 1 None nvram set KpOnlineMode=1
2 Ping mode
5 Route mode
2 Keep online
detection
interval
KpOnlineInterval
Range 0-9999in sec.
nvram set
KpOnlineInterval=60
3 Keep online
to detect
main server
KpOnlineIcmpD
est
domain form
=8.8.8.8
Page 9 of 75
ip
4 Keep online
to detect
second
server ip
KpOnlineIcmpSe
cDest
domain form
nvram set
KpOnlineIcmpSecDest
=166.111.8.238
notenumber 1-4 only used in version of the dual-card
PPPoE
NO. Parameter
item
parameter The value and description Example
1 User ppp_username 63 bytes of longest
character
nvram set
ppp_username=card
2 password ppp_passwd 63 bytes of longest
character
nvram set ppp_passwd=card
3 Server name ppp_service
PPPoE server address63
character at the longest
nvram set ppp_service
=172.16.1.1
4 PPP
compress
ppp_compressio
n
0 disable nvram set
ppp_compression=0 1 enable
5 Compatible
VDSL front
demodulator
wan_vdsl 0 disable nvram set wan_vdsl=0
1 enable
6 VLAN 8
support
dtag_vlan8 0 disable nvram set dtag_vlan8=0
1 enable
7 MPPE
encrypt
ppp_mppe 63 character at the longest nvram set ppp_mppe="mppe
required"
8 Single-link
multi-connec
ted
ppp_mlppp 0 disable nvram set ppp_mlppp=1
1 enable
9 Keep online
mode
2 Ping mode
5 Route mode
10 Keep Online
detection
interval
KpOnlineInterval
Range 0-9999in sec.
nvram set
KpOnlineInterval=60
11 Online to
keep the
detection of
the main
KpOnlineIcmpD
est
domain form
=8.8.8.8
Page 10 of 75
server ip
12 Online to
keep the
detection of
the second
server ip
KpOnlineIcmpSe
cDest
domain form
nvram set
KpOnlineIcmpSecDest
=166.111.8.238
PPTP
No. Parameter
item
1 User name ppp_username 63 bytes at the longest nvram set
ppp_username=card
2 password ppp_passwd 63 bytes at the longest nvram set ppp_passwd=card
3 Connect
policy
ppp_demand 0 Remain
active
nvram set ppp_demand=0
1 Connect on
demand
4 Remain
active time
period
ppp_redialperiod Decimal numbers of 20-180
rangein sec.
nvram set
ppp_redialperiod=30
5 Connect on
demand
ppp_idletime
Digital of range 1-9999 in
minutes
nvram set ppp_idletime=5
6 PPTP
encrypt
pptp_encrypt 0 disable nvram set pptp_encrypt=0
1 enable
7 Disable the
packet
rearrange
pptp_reorder 0 disable nvram set pptp_reorder=1
1 enable
8 Additional
pptp options
pptp_extraoption
s
Pptp configuration options
format
nvram set
pptp_extraoptions=XX
9 Use DHCP pptp_use_dhcp 0 disable nvram set pptp_use_dhcp=0
1 enable
10 WAN IP
address
wan_ipaddr IP address format nvram set wan_ipaddr
=192.168.8.22
11 Subnet mask wan_netmask netmask nvram set wan_netmask
=255.255.255.0
12 gateway wan_gateway netmask nvram set wan_netmask
=192.168.8.1
13 gateway pptp_server_na
me
Ip or domain name 63
nvram set
pptp_server_name=XX
Page 11 of 75
PPTP
server
characters at the longest
LTTP
No. Parameter
item
1 username ppp_username 63 bytes at the longest nvram set
ppp_username=card
2 Password ppp_passwd 63 bytes at the longest nvram set ppp_passwd=card
3 Connection
strategy
ppp_demand 0 Remain
active
nvram set ppp_demand=0
1 Connect on
demand
4 Remain
active tiem
period
ppp_redialperiod Decimal numbers of range
20-180in sec.
nvram set
ppp_redialperiod=30
5 Connect on
demand
ppp_idletime
Numbers of range 1-9999in
minute
nvram set ppp_idletime=5
6 L2TP server l2tp_server_nam
e
Ip or domain name 63
characters at the longest
nvram set
l2tp_server_name=XX
7 Allow chap
authenticatio
n protocol
l2tp_req_chap 0 disable nvram set l2tp_req_chap =1
1 enable
8 Refuse pap
authenticatio
n protocol
l2tp_ref_pap 0 disable nvram set l2tp_ref_pap =1
1 enable
9 Allow
authenticatio
n protocol
l2tp_req_auth 0 disable nvram set l2tp_req_auth =1
1 enable
backup wan port settings
NO. Parameter parameter The value and description example
Page 12 of 75
item
1
Enable
dual-link
backup
feature
dualfailover
0 disable
nvram set dualfailover=0
1 enable
2
Dual-link
online at the
same time
bothonline
0 disable
nvram set bothonline=0
1 enable
3
Connection
type
bkup_wan_proto
disabled disable
nvram set bkup_wan_proto
=dhcp
dhcp Dhcp mode
static Static IP mode
pppoe Pppoe dial mode
3g 3g link-1 way
3glink 3g link-2 way
Backup WAN port3g/3glink
No. Parameter
item
Parameter The value and description Example
1 Username bkup_ppp_usern
ame
63 bytes at the longest nvram set
bkup_ppp_username =card
2 Password bkup_ppp_pass
wd
63 bytes at the longest nvram set bkup_ppp_passwd
=card
3 Call center
number
bkup_wan_dial 0 *99***1# nvram set bkup_wan_dial=1
1 *99#
2 #99***1#
3 #777
4 *98*1#
4 APN bkup_wan_apn 63 bytes at the longest nvram set
bkup_wan_apn=3gnet
5 PIN bkup_wan_pin Must be 4 byte number nvram set
bkup_wan_pin=1234
6 Network type
selection
bkup_wan_con
mode
0 auto nvram set
bkup_wan_conmode =0 1 Enforce 3g
2 Enforce 2g
3 3g first
4 2g first
5 Only allow 2g/3g
6 Enforce 4g
7 Only allow
2g/3g/4g
Page 13 of 75
7 keep online
mode
bkup_KpOnline
Mode
1 None nvram set bkup_KpOnlineMod
e=1 2 Ping mode
5 Route mode
6 PPP mode
8 Online
maintain
detection
interval
bkup_KpOnlineI
nterval
Range 0-9999in sec.
nvram set
bkup_KpOnlineInterva l=60
9 Online to
keep the
detection of
the main
server ip
bkup_KpOnlineI
cmpDest
domain name form
nvram set
bkup_KpOnlineIcmpDest
=8.8.8.8
10 Online to
keep the
detection of
the second
server ip
bkup_KpOnlineI
cmpSecDest
domain name form
nvram set
bkup_KpOnlineIcmpSecDest
=166.111.8.238
11 Enable
dial-up failed
to restart
mechanism
bkup_ppp_restar
tppp
0 disable nvram set
bkup_ppp_restartppp =1
1 enable
12 forced to
reconnect
bkup_reconnect
_enable
0 disable nvram set
bkup_reconnect_enable=1 1 enable
13 time bkup_reconnect
_hours
The digital of range 0-24 nvram set
bkup_reconnect_hours=0
bkup_reconnect
_minutes
The digital of range 0-59 nvram set
bkup_reconnect_minutes=0
14 STP bkup_lan_stp 0 disable nvram set bkup_lan_stp=1
1 enable
Backup WAN portstatic IP
No. Parameter
item
Parameter The value and description example
1 WAN IP
address
Bkup_wan_ipad
dr
Ip address form nvram set bkup_wan_ipaddr
=192.168.8.22
2 Subnet mask bkup_wan_netm
ask
Subnet mask nvram set bkup_wan_netmask
=255.255.255.0
3 Gateway bkup_wan_gate
way
Gateway address nvram set bkup_wan_netmask
=192.168.8.1
Page 14 of 75
4 Static DNS1
Static DNS2
Static DNS3
bkup_wan_dns First DNS
Second DNS
Third DNS
nvram set bkup_wan_dns
=8.8.8.8 218.85.157.99
218.85.152.99
3 DNS directly separated by
spaces,encountered use
quotation marks separated by
a space framed
5 Keep online
mode
bkup_KpOnline
Mode
1 None nvram set
bkup_KpOnlineMode =1 2 Ping mode
5 Route mode
6 Keep Online
detection
interval
bkup_KpOnlineI
nterval
Range 0-9999in sec.
nvram set
bkup_KpOnlineInterval=60
7 Online to
keep the
detection of
the main
server ip
bkup_KpOnlineI
cmpDest
domain name form
nvram set
=8.8.8.8
8 Online to
keep the
detection of
the second
server ip
bkup_KpOnlineI
cmpSecDest
domain name form
nvram set
=166.111.8.238
Backup WAN portDHCP mode
No. Parameter
item
1 Keep online
mode
bkup_KpOnline
Mode
1 None nvram set
5 Route mode
2 Keep Online
detection
interval
bkup_KpOnlineI
nterval
Range 0-9999in sec.
nvram set
3 Online to
keep the
detection of
the main
server ip
bkup_KpOnlineI
cmpDest
domain name form
nvram set
=8.8.8.8
4 Online to
keep the
bkup_KpOnlineI
cmpSecDest
nvram set
Page 15 of 75
detection of
the second
server ip
domain name form =166.111.8.238
Backup WAN portPPPoE
No. Parameter
item
1 Username bkup_ppp_usern
ame
Longest character for 63
bytes
nvram set
bkup_ppp_username =card
2 password bkup_ppp_pass
wd
Longest character for 63
bytes
nvram set bkup_ppp_passwd
=card
3 Server name bkup_ppp_servi
ce
PPPoE server address
support ip addresses and
domain name up to 63
characters
nvram set bkup_ppp_service
=172.16.1.1
4 PPP
compress
bkup_ppp_comp
ression
0 disable nvram set
bkup_ppp_compression=0 1 enable
5 Compatible
vdsl front
demodulator
bkup_wan_vdsl 0 disable nvram set bkup_wan_vdsl=0
1 enable
6 VLAN 8
support
bkup_dtag_vlan
8
0 disable nvram set bkup_dtag_vlan8=0
1 enable
7 MPPE
encrypt
bkup_ppp_mppe 63 characters At the longest nvram set bkup_ppp_mppe
="mppe required"
8 Single-link
multi-connec
ted
bkup_ppp_mlpp
p
0 disable nvram set bkup_ppp_mlppp=1
1 enable
9 Keep online
mode
bkup_KpOnline
Mode
1 None nvram set
5 Route mode
10 Keep Online
detection
interval
bkup_KpOnlineI
nterval
Range 0-9999in sec.
nvram set
11 Online to
keep the
detection of
the main
server ip
bkup_KpOnlineI
cmpDest
domain name form
nvram set
=8.8.8.8
12 Online to bkup_KpOnlineI Currently only support ip nvram set
Page 16 of 75
keep the
detection of
the second
server ip
cmpSecDest form,does not support
domain name form
=166.111.8.238
optional settings
No. Parameter
item
1 Router name router_name 39 characters at the longest nvram set
router_name=ROUTER
2 Host name wan_hostname 39 characters at the longest nvram set
wan_hostname=XXX
3 Domain
name
wan_domain 79 characters at the longest nvram set wan_domain =XXX
4 MTU mtu_enable 0 Auto mode nvram set mtu_enable=1
1 Manual
mode
wan_mtu Digital of 0-9999 range nvram set wan_mtu=1500
Local setting
No. Parameter
item
1 Local ip
address
lan_ipaddr Ip address form nvram set
2 Subnet mask lan_netmask LAN port subnet mask nvram set
3 Gateway lan_gateway LAN port gateway nvram set lan_gateway
=0.0.0.0
4 Local DNS sv_localdns local DNS of lan port nvram set sv_localdns=0.0.0.0
Network address server setting (DHCP)
No. Parameter
item
1 DHCP type dhcpfwd_enable 0 DHCP
server
nvram set
1 DHCP
repeater
2 DHCP lan_proto dhcp Enable nvram set
Page 17 of 75
server lan_netmask=255.255.255.0 static disable
3 Start ip
address
dhcp_start Digital of range 1-254 nvram set lan_gateway
=0.0.0.0
4 The
maximum
number of
dhcp users
dhcp_num Digital form,with a starting ip
address,and should not be
greater than 254
nvram set sv_localdns=0.0.0.0
5 Client lease
time
dhcp_lease
Digital of range 0-99999in
minute
nvram set dhcp_lease =1440
6 Static DNS1
Static DNS2
Static DNS3
wan_dns First DNS
Second DNS
Third DNS
nvram set wan_dns=8.8.8.8
218.85.157.99 218.85.152.99
3 DNSdirectly separated by
spaces,encountered use
quotation marks separated by
a space framed
7 WINS wan_wins WIN server address nvram set wan_wins=0.0.0.0
8 To use
DNSmasq
for dhcp
dhcp_dnsmasq 0 disable nvram set dhcp_dnsmasq =1
1 enable
9 To use
DNSmasq
for dhcp
dns_dnsmasq 0 disable nvram set dns_dnsmasq =1
1 enable
10 in dhcp
standard
auth_dnsmasq 0 disable nvram set auth_dnsmasq =1
1 enable
11 DHCP
forwarding
server
dhcpfwd_ip IP address form nvram set dhcpfwd_ip=0.0.0.0
NTP
No. Parameter
item
1 NTP client ntp_enable support nvram set
2 Time zone time_zone LAN port subnet mask nvram set
3 Summer
time (DST)
daylight_time Set summer time of local nvram set lan_gateway
=0.0.0.0
4 Server
IP/host
ntp_server 32 characters at the nvram set sv_localdns=0.0.0.0
Page 18 of 75
name
longest Currently only
support ip form,does not
support domain name form
Time setting
Setting of System time is specialcan not user nvram settingrtc_tm formatted as follows:
rtc_tm ss year month date hour minute secondsseparated by spaces as follows:
inportrtc_tm ss 2012 10 31 15 10 55
exportWed Oct 31 15:10:55 UTC 2012
Indicates that the time is set to 2012 10 31 15:10:55
1.2 Dynamic DNSDDNS
No. Parameter
item
1 DDNS
service
ddns_enable 0 disable nvram set ddns_enable =1
1 DynDNS.org
2 freedns.afraid.org
3 ZoneEdit.com
4 No-IP.com
5 custom
6 3322.org
7 easyDNS.com
8 TZO.com
9 DynSIP.org
2 type ddns_dyndnstyp
e
1 dynamic nvram set ddns_dyndnstype
=1 2 static
3 custom
3 wildcard ddns_wildcard 1 enable nvram set ddns_wildcard =1
other disable
4 Do not use ddns_wan_ip 0 disable nvram set ddns_wan_ip=1
Page 19 of 75
external ip
detection
1 enable
5 Mandatory
update
interval
ddns_force
Digital of range 1-60 in
daysthe default is 10 days
nvram set ddns_force =10
DynDNS
No. Parameter
item
1 Username ddns_username 64 character at the longest nvram set ddns_username
=XXX
2 Password ddns_passwd 3 character at the longest nvram set ddns_passwd
=XXX
3 Host name ddns_hostname Ddns host name of server nvram set ddns_hostname
=XXX
freedns
No. Parameter
item
1 Username ddns_username
_2
64 character at the longest nvram set
ddns_username_2=XX
2 Password ddns_passwd_2 3 character at the longest nvram set
ddns_passwd_2=XXX
3 Host name ddns_hostname
_2
Ddns host name of server nvram set
ddns_hostname_2=XX
ZoneEdit
No. Parameter
item
_3
ddns_username_3=XX
ddns_passwd_3=XXX
_3
ddns_hostname_3=XX
No-IP
No. Parameter
item
1 Username ddns_username 64 character at the longest nvram set
Page 20 of 75
_4 ddns_username_4=XX
ddns_passwd_4=XXX
_4
ddns_hostname_4=XX
custom
No. Parameter
item
1 User name ddns_username
_5
ddns_username_5=XX
ddns_passwd_5=XXX
_5
ddns_hostname_5=XX
4 DYNDNS
server
ddns_custom_5
DYNDNS server can
generally be got in the
registered server
nvram set
ddns_custom_5=XX
5 URL ddns_url The form of character nvram set ddns_url=XX
6 DDNS
additional
options
ddns_conf DDNS additional options nvram set ddns_conf=XX
3322
No. Parameter
item
_6
ddns_username_6=XX
ddns_passwd_6=XXX
_6
ddns_hostname_6=XX
4 Type ddns_dyndnstyp
e_6
The default is dynamic,can
not configuration
easyDNS
No. Parameter
item
1 username ddns_username
_7
ddns_username_7=XX
Page 21 of 75
ddns_passwd_7=XXX
_7
ddns_hostname_7=XX
4 Wildcard ddns_wildcard_7 1 enable nvram set ddns_wildcard_7=1
other disable
TZO
NO. Parameter
item
_8
ddns_username_8=XX
ddns_passwd_8=XXX
_8
ddns_hostname_8=XX
DynSIP
No. Parameter
item
_9
ddns_username_9=XX
ddns_passwd_9=XXX
_9
ddns_hostname_9=XX
1.3 MAC address cloning
No. Parameter
item
1 MAC cloning mac_clone_ena
ble
0 Disable nvram set
mac_clone_enable=1 1 enable
2 Cloning LAN
port VLAN
MAC
def_lhwaddr
MAC address format can
not be a multicast second
character of mac address
must be an even
nvram set def_lhwaddr
=00:0C:43:30:52:77
Page 22 of 75
3 Cloning
WAN port
MAC
def_hwaddr
must be an even
nvram set def_hwaddr
=00:0C:43:30:52:78
4 Cloning
wireless
MAC of LAN
port
def_whwaddr
must be an even and the
last character must be: [0, 1,
4, 5, 8, 9, C, D]
nvram set def_whwaddr
=00:0C:43:30:52:79
1.4 Advaced routing
No. Parameter
item
1 Work mode wk_mode gateway Gateway
mode
nvram set wk_mode= gateway
static Route mode
2 interface dr_setting 0 disable nvram set dr_setting =0
1 WAN
2 LAN &
WLAN
3 both
3 Route name static_route_na
me
Each name can be 25
character at the longest
format is $NAME:XXX$$
if more than one name is
separated by a space in the
middle
nvram set static_route_name
= $NAME:rrr$$
$NAME:ddd$$
4 Static route static_route metric Range 0-9999 nvram set static_route =
192.168.8.0:255.255.255.0:19
2.168.1.1:0:br0
LAN IP of
Destinatio
IP segment in
the form
Page 23 of 75
192.168.10.0:255.255.255.0:1
92.168.1.1:0:br0
n
Subnet
mask
Subnet mask
form
Gateway Corresponding
gateway
interf
ace
Corresponding to
Port of router
example: LAN port is
br0
Format isLAN IP of
destination:subnet
mask:gateway:metric:interfa
ceif multiple static routes is
separated by a space in the
middle
2. wireless
2.1 basic setup
NO. Parameter
item
1 Wireless
network
mode
wl0_net_mode disabled Disable nvram set wl0_net_mode=
mixed mixed 801.11b/n/g
bg-mixed
801.11b/g
b-only
801.11n
g-only
801.11g
ng-only
801.11g/n
n-only
801.11n
2 Wireless
mode
wl0_mode ap AP mode nvram set wl0_mode=ap
sta Client mode
Page 24 of 75
infra Adhoc mode
apsta Relay mode
apstawet Repeater
bridge
3 Wireless
network
name
SSID
wl0_ssid 32 character at the longest nvram set
wl0_ssid=four-faith
4 Wireless
channel
wl0_channel 0 auto nvram set wl0_channel=6
1 2.412 GHz
2 2.417 GHz
3 2.422 GHz
4 2.427 GHz
5 2.432 GHz
6 2.437 GHz
7 2.442 GHz
8 2.447 GHz
9 2.452 GHz
10 2.457 GHz
11 2.462 GHz
12 2.467 GHz
13 2.472 GHz
5 Channel size wl0_nbw 20 20MHz nvram set wl0_nbw=20
40 40MHz
6 Wireless
ssid
broadcast
wl0_closed 0 Enable nvram set wl0_closed =0
1 Disable
7 broadband wl0_nctrlsb upper upper nvram set wl0_ nctrlsb=upper
lower lower
2.2 wireless security
No. Parameter
item
1 Safe mode wl0_security_mo
de
disabled Disable nvram set wl0_security_mode=
psk psk WPA Personal
wpa WPA Enterprise
Page 25 of 75
psk2 WPA2 Personal
wpa2 WPA2
Enterprise
psk psk2 WPA2 Personal
Mixed
wpa
wpa2
WPA2
Enterprise Mixed
wep WEP
2 WPA
algorithm
wl0_crypto tkip TKIP nvram set wl0_crypto=TKIP
aes AES
tkip+aes TKIP+AES
3 WPA shared
key
wl0_wpa_psk Must be 8 63 ACSII
character or 64 hexadecimal
digits
nvram set wl0_wpa_psk
=123456789
4 Key update
interval
sec.
wl0_wpa_gtk_re
key
default: 3600, range: 1 -
99999
nvram set wl0_wpa_gtk_rekey
=3600
5 Radius
authenticatio
n server
address
wl0_radius_ipad
dr
IP address format nvram set wl0_radius_ipaddr
=0.0.0.0
6 Radius
authenticatio
n server port
wl0_radius_port
Digital of range 1-65535
default port is 1812
nvram set
wl0_radius_port=1812
7 Radius
authenticatio
n shared key
wl0_radius_key 79 characters at the longest nvram set wl0_radius_key=XXX
8 Authenticatio
n type
wl0_authmode open Open nvram set wl0_authmode=open
shared Shared key
9 Default
transmit key
wl0_key 1 1 nvram set wl0_key=1
2 2
3 3
4 4
10
wl0_wep_bit 64 64 bits 10 hex

digits/5 ASCII
nvram set wl0_wep_bit=64
128 128 bits 26 hex
digits/13 ASCII
11 ASCII/HEX wl0_wepmode 0 ASCII nvram set wl0_wepmode=1
1 HEX
Page 26 of 75
12 Key 1 wl0_key1 10 hexadecimal nvram set
wl0_key1=0000000000
13 key 2 wl0_key2 10 hexadecimal nvram set
wl0_key2=0000000000
14 key 3 wl0_key3 10 hexadecimal nvram set
wl0_key3=0000000000
15 Key 4 wl0_key4 10 hexadecimal nvram set
wl0_key4=0000000000
3 .service
3.1 service
No. Parameter
item
1 Set the
vendor class
dhcpc_vendorcl
ass
dhcpc_vendorclass=XXX
2 Request IP dhcpc_requestip 79 character at the longest nvram set
dhcpc_requestip=XXX
3 DHCPd
additional
options
dhcpd_options Symbol DHCPd additional
set format
nvram set dhcpd_options =XXX
4 MAC
address
binding with
LAN address
static_leases MAC
address
MAC address
format
nvram set static_leases
="00:11:22:33:44:55=66=192.16
8.66.5=1440
00:11:22:33:44:53=63=192.168.
66.3=1440"
Host
name
Host name of the
client
Ip
address
Ip address of
LAN port
Client
lease
time
Decimal
numbers of
range
1-999999999
Format isMAC address
host name IP address
Page 27 of 75
client lease timeif more than
one,separated by a space
and set the number of
static_leasenum in the same
time
5 MAC
address
binding with
number of
lan address
static_leasenum IMAC address binding with
number of lan address in
the same time need to
configure static_leases
nvram set static_leasenum =2
6 DNSMasq dnsmasq_enabl
e
0 disable nvram set dnsmasq_enable=1
1 enable
7 Local DNS local_dns 0 disable nvram set local_dns=0
1 enable
8 No DNS
Rebind
dnsmasq_no_dn
s_rebind
0 disable nvram set
dnsmasq_no_dns_rebind=1 1 enable
9 DNSMasq
additional
options
dnsmasq_option
s
Format of DNSMasq
additional setting
example :option 138 and so
on
nvram set dnsmasq_options =
dhcpd_options=138,192.168.9.1
10 SNMP snmpd_enable 0 disable nvram set snmpd_enable=0

1 enable
11 place snmpd_syslocati
on
100 character at the longest nvram set snmpd_syslocation =
Unknown
12 contact snmpd_sysconta
ct
100 character at the longest nvram set snmpd_syscontact
=root
13 name snmpd_sysnam
e
100 character at the longest nvram set snmpd_sysname
=four-faith
14 Read-only
community
string
snmpd_rocomm
unity
100 character at the longest nvram set snmpd_rocommunity
=public
15 Read-write
community
string
snmpd_rwcomm
unity
100 character at the longest nvram set snmpd_rwcommunity
=private
16 System log debuglog_enabl
e
0 disable nvram set debuglog_enable=1
1 enable
17 Output mode syslogd_enable 0 Serial output nvram set syslogd_enable=0
1 Network
output
18 SSHd sshd_enable 0 disable nvram set sshd_enable=0
Page 28 of 75
1 enable
19 SSH TCP
transmit
sshd_forwarding 0 disable nvram set sshd_forwarding=0
1 enable
20 Password
log in
sshd_passwd_a
uth
0 disable nvram set sshd_passwd_auth=1
1 enable
21 port sshd_port Digital of range 1-65535 nvram set sshd_port=22
22 Authorizatio
n key
sshd_authorized
_keys
Format required to meet the
standard of the certificate
nvram set
sshd_authorized_keys =XXX
23 Telnet telnetd_enable 0 disable nvram set telnetd_enable=1
1 enable
24 Ttraff finger
daemon
ttraff_enable 0 disable nvram set ttraff_enable=1
1 enable
3.2 PPPoE server
No. Parameter
item
1 RP-PPPoE
server
daemon
pppoeserver_en
abled
0 disable nvram set
pppoeserver_enabled=0
1 enable
2 Client IP pppoeserver_po
ol
19 character at the longest
format:
xxx.xxx.xxx.xxx-xxx
nvram set pppoeserver_pool
=192.168.1.10-100
3 Deflate
compress
pppoeserver_def
late
1 enable nvram set pppoeserver_deflate
=0 other disable
4 BSD
compress
pppoeserver_bs
dcomp
1 enable nvram set
pppoeserver_bsdcomp =0 other disable
5 LZS Stac
compress
pppoeserver_lzs 1 enable nvram set pppoeserver_lzs=0
other disable
6 MPPC
compress
pppoeserver_mp
pc
1 enable nvram set pppoeserver_mppc=0
other disable
7 MPPE
PPPoE
encrypt
pppoeserver_en
cryption
1 enable nvram set
pppoeserver_encryption =0 other disable
8 Each mac
address
restrictions
pppoe client
pppoeserver_se
ssionlimit
Decimal numbers of range
1-99999
nvram set
pppoeserver_sessionlimit =10
Page 29 of 75
number
9 LCP
response
interval
pppoeserver_lcp
echoint
1-99999
nvram set
pppoeserver_lcpechoint =5
10 LCP respond
to failure
pppoeserver_lcp
echofail
1-99999
nvram set
pppoeserver_lcpechofail =12
11 Free time pppoeserver_idl
e
1-99999
nvram set pppoeserver_idle =
10
12 authenticatio
n
pppoeradius_en
abled
0 Local user
management
nvram set
pppoeradius_enabled=0
1 Radius
13 Local user
managemen
t
pppoeserver_ch
aps
user 30 character at the
longest
nvram set pppoeserver_chaps
=
test1:123456:192.168.1.16:on
test2:123456:192.168.1.26:on
passw
ord
30 character at the
longest
IP
addres
s
IP address mode
enable off disable
on enable
Format isuser:password:IP
address:enableif there are
multiple sets separated by a
space At the same time
need to set the number of
local user management
pppoeserver_chapsnum
14 The number
of local user
managemen
t
pppoeserver_ch
apsnum
Decimal digital form nvram set
pppoeserver_chapsnum =2
15 Radius
server ip
pppoeserver_aut
hserverip
IP address form nvram set
pppoeserver_authserverip=192.
168.1.1
16 Radius
authenticatio
n port
pppoeserver_aut
hserverport
Decimal number of range
1-65535
nvram set
pppoeserver_authserverport=18
12
Page 30 of 75
17 Port of
Radius
account
pppoeserver_ac
ctserverport
Decimal number of range
1-65535
nvram set
pppoeserver_acctserverport
=1813
18 Radius
shared key
pppoeserver_sh
aredkey
63 characters at the
longest
nvram set
pppoeserver_sharedkey
=123456
4 . VPN
4.1 PPTP
NO. parameter
item
parameter the value and description example
1 PPTPserver pptpd_enable 0 disable nvram setpptpd_enable=0
1 enable
2 Support
broadcast
pptpd_bcrelay 0 disable nvram set pptpd_bcrelay =0
1 enable
3
force
MPPE
encryption
pptpd_forcemp
pe
0 disable nvram set pptpd_forcemppe =1
1 enable
4 DNS1 pptpd_dns1 IP address format nvram set pptpd_dns1 =0.0.0.0
5 DNS2 pptpd_dns2 IP address format nvram set pptpd_dns2 =0.0.0.0
6 WINS1 pptpd_wins1 IP address format nvram set pptpd_wins1=0.0.0.0
7 WINS2 pptpd_wins2 IP address format nvram set pptpd_wins2=0.0.0.0
8 IP of server pptpd_lip
IP address format dont
conflict with ip of lan port
nvram set pptpd_lip
=200.200.200.1
9 IP of client pptpd_rip Format:
XXX.XXX.XXX.XXX-XXX
example200.200.200.2-254
nvram set pptpd_rip
=200.200.200.2-254
10 Local user
manage(CHA
P Secrets)
pptpd_auth
format username *
password*
nvram set pptpd_auth= test *
test *
Page 31 of 75
exampletest * test *
7 PPTP client
options
pptpd_client_en
able
0 disable nvram set
pptpd_client_enable=0 1 enable
8 Servers IP or
DNS name
pptpd_client_sr
vip
Ip address or domain name nvram set pptpd_client_srvip
=120.42.46.98
9 Subnet of peer pptpd_client_sr
vsub
ip address of subnet must
be configure with mask
nvram set pptpd_client_srvsub
=192.168.8.0
10 Subnet mask
of peer
pptpd_client_sr
vsubmsk
Format of Subnet mask nvram set
pptpd_client_srvsubmsk
=255.255.255.0
11
MPPE encrypt
pptpd_client_sr
vsec
MPPE encrypt
valid character
examplemppe required
nvram set pppoeserver_idle =
mppe required
12 MTU pptpd_client_sr
vmtu
1-1500 range of decimal
numbers
nvram set pptpd_client_srvmtu
=1450
13 MRU pptpd_client_sr
vmru
numbers
nvram set pptpd_client_srvmru
=1450
14 NAT pptpd_client_na
t
0 disable nvram set pptpd_client_nat =1
1 enable
15
Enabled
manually set
the tunnel IP
pptpd_client_as
sign
0 disable nvram set
pptpd_client_assign=1 1 enable
16 IP address of
tunnel
pptpd_client_as
signip
IP address format nvram set pptpd_client_assignip
=200.200.200.5
17 Username pptpd_client_sr
vuser
Pptp username of client nvram set pptpd_client_srvuser
=XXX
18 password pptpd_client_sr
vpass
Pptp password of client nvram set pptpd_client_srvpass
=123456
Page 32 of 75
4.2 L2TP
NO. parameter
item
1 L2TP server
options
l2tp_server_ena
ble
0 disable nvram l2tp_server_enable=0
1 enable
2 Force MPPE
encrypt
l2tp_forcemppe 0 disable nvram set l2tp_forcemppe =1
1 enable
3 IP of server l2tp_lip
IP address format dont
conflict with ip of lan port
nvram set l2tp_lip
=200.200.200.1
4 IP of client l2tp_rip Format:
XXX.XXX.XXX.XXX-XXX.X
XX.XXX.XXX
example
200.200.200.2-200.200.200.
25
nvram set l2tp_rip
=200.200.200.2-200.200.200.25
5 Local user
manage(CH
AP Secrets)
l2tp_auth
format username *
password *
exampletest * test *
nvram set l2tp_auth= test * test
*
6 L2TP client
options
l2tp_client_enabl
e
0 disable nvram set l2tp_client_enable=0
1 enable
7 L2TP server l2tp_client_serve
rname
Ip address or domain name nvram set
l2tp_client_servername
=120.42.46.98
8 Subnet of
peer
l2tp_client_srvsu
b
ip address of subnet must
be configure with mask
nvram set l2tp_client_srvsub
=192.168.8.0
9 Subnet mask
of peer
l2tp_client_srvsu
bmsk
Subnet mask format nvram set
l2tp_client_srvsubmsk
=255.255.255.0
10 MPPE
encryption
l2tp_client_srvse
c
MPPE encrypt
valid character
examplemppe required
nvram set l2tp_client_srvsec =
mppe required
Page 33 of 75
11 MTU l2tp_client_srvmt
u
numbers
nvram set l2tp_client_srvmtu
=1450
12 MRU l2tp_client_srvm
ru
numbers
nvram set l2tp_client_srvmru
=1450
13 NAT l2tp_client_nat 0 Disable nvram set l2tp_client_nat =1
1 enable
14
Enabled
manually set
the tunnel IP
l2tp_client_assig
n
0 disable nvram set l2tp_client_assign=1
1 enable
15 Tunnel IP
address
l2tp_client_assig
nip
IP address format nvram set l2tp_client_assignip
=200.200.200.5
16 username l2tp_username 63 character at the longest nvram set l2tp_username =XXX
17 password l2tp_passwd 63 character at the longest nvram set l2tp_passwd =123456
18 Allow CHAP
authenticatio
n
l2tp_req_chap 0 Disable nvram set l2tp_req_chap =1
1 enable
19 Refuse PAP
authenticatio
n
l2tp_ref_pap 0 disable nvram set l2tp_ref_pap =1
1 enable
20 Allow
authenticatio
n protocol
l2tp_req_auth 0 disable nvram set l2tp_req_auth =1
1 enable
4.3 IPSEC
IPSEC config
NO. parameter
item
1 Ipsec tunnel
configure
Ipsec_con
ns
Tunnel type tunnel Tunnel
mode
nvram set ipsec_conns
=tunnel client Enabled yy
on WAN1 192.168.5.5/24
@ss 191.152.2.2
192.36.63.2/23 @yy on 60
60 restart 3des md5
modp8192 0 3des md5
modp4096 0 off off on off
psk 123546|tunnel client
transp
ort
Transport
mode
part client client
server server
Advaced
configuration
Enable
d
enable
Disabl disable
Page 34 of 75
Enabled GG on WAN1
192.168.78.8/24 @TT
12.42.46.98 8.6.6.3/24
@YY on 60 60 restart 3des
md5 modp8192 0 3des
md5 modp4096 0 off off on
off X509Cert
RIGHT+LEFT|
ed
Connection
name
15 character at the
longest
Effective
immediately
on
Effective
immediat
ely
off
Dont
Effective
immediat
ely
export WAN1
Local ip
address
A.B.C.D/M
Local
Identifiers
15 character at the
longest
Ip address of
peer
A.B.C.D
Subnet of
peer
A.B.C.D/M
Character of
peer
15 character at the
longest
dpd detect on enable
off disable
Dpd detect
space of
time
Natural number
Dpd detect
timeout
Natural number
Action of
Dpd detect
hold Hold the
local
session
restart re-establish
tunnel
clear Clear
session
Page 35 of 75
restart
_by_p
eer
Restart
when the
end of the
re-
establish
ment of
the tunnel
Ike
encryption
algorithm
when
enable
advanced
features
IKE integrity
algorithm
when
enable
advanced
features
IKE DH
groupwhen
enable
advanced
feature
IKE lifetime
when
enable
advanced
feature
ESP
encryption
Page 36 of 75
algorithm
when
enable
advanced
feature
ESP integrity
algorithm
when
enable
advanced
feature
ESP DH
groupwhen
enable
advanced
feature
ESP lifetime
when
enable
advanced
feature
Natural number
Using the
recommende
d
configuration
Default is off
Aggressive
modewhen
enable
advanced
feature
off disable
On enable
Using the
Off disable
Page 37 of 75
session
forward
encryption
when
enable
advanced
feature
On enable
Consultation
compression
load
proportion
when
enable
advanced
feature
Default is off
authenticatio
n
psk Pre-share
d key
X509C
ert
certificate
authentic
ation
Pre-shared
key
character
x509
certificate
authenticatio
n
format local x509
certificate+remote
x509 certificate
Enable
advanced
feature
Tunnel type;part;
enable advanced
feature;connection
name;Effective
immediately;export;
local subnet;local
identity;remote ip
address;remote
Page 38 of 75
subnet;remote local
identity;enable dpd
detect;Dpd
detection interval;
Dpd detection
timeout;actions of
dpd detection; Ike
Encryption
algorithm;IKE
integrity algorithm;
IKE-DH group;IKE
lifetime; ESP
Encryption
algorithm; ESP
ESP-DH group;
ESP lifetime; Using
the recommended
configuration;
aggressive
mode;using the
session forward
encryption;consulta
tion compression
load proportion;
authentication
method; key or
certificate;| next
tunnel
configuration| |
Disable
advanced
feature
Tunnel type;part;
enable advanced
feature;connection
name;Effective
immediately;export;
local subnet;local
identity;remote ip
address;remote
subnet;remote local
identity;enable dpd
detect;Dpd
Page 39 of 75
detection interval;
Dpd detection
timeout;actions of
dpd detection; Ike
Encryption
algorithm;IKE
IKE-DH group;IKE
lifetime; ESP
Encryption
algorithm; ESP
ESP-DH group;
ESP lifetime; Using
the recommended
configuration;
aggressive
mode;using the
session forward
encryption;consulta
tion compression
load proportion;
authentication
method; key or
certificate;| next
tunnel
configuration| |
2 NAT
translation
ipsecNatTr
av
on enable nvram set ipsecNatTrav=on
Off disable
3 Log level ipsecDebu
gLevel
none Close log of ipsec nvram set ipsecDebugLevel
=basic
basic Open log of ipsec
X509 certificate manage configuration
NO. parameter
item
1 X509
certificate
ipsec_certs System containing the name
of x509 certificate
nvram set ipsec_certs
=LEFT_CERT|RIGHT_CER
Page 40 of 75
T
formatcertificate1 |
certificate2 | certificate3
2 Public key of
certificate
Certificate
name_cert
The value contains the public
key of x509 certificate
nvram set LEFT_cert=
-----BEGIN
CERTIFICATE-----
MIIDBzCCAnCgAwIBAgIJA
Pqd2AdwVCi8MA0GCSqGS
Ib3DQEBBQUAMGExCzAJ
BgNV
BAYTAlVTMQswCQYDVQQ
IEwJVUzELMAkGA1UEBxM
CVVMxCzAJBgNVBAoTAlV
TMQsw
CQYDVQQLEwJVUzELMAk
GA1UEAxMCVVMxETAPBg
kqhkiG9w0BCQEWAlVTMB
4XDTEy
MTAzMDExMTgwMVoXDTE
zMDYyMTExMTgwMVowYT
ELMAkGA1UEBhMCVVMx
CzAJBgNV
BAgTAlVTMQswCQYDVQQ
HEwJVUzELMAkGA1UECh
MCVVMxCzAJBgNVBAsTAl
VTMQsw
CQYDVQQDEwJVUzERMA
8GCSqGSIb3DQEJARYCV
VMwgZ8wDQYJKoZIhvcNA
QEBBQAD
gY0AMIGJAoGBAKocH1jW
eZ7yVcSVqTj01zuzgWtTBQ
VMvgYwVZeTqjoNudihKmq
m
Q0FQ5dZjVLcRBj8MnnmK
HRYpYRwQDZPHEEqATgF
/GoWERwCoFXq/Li5NnqT0
2RA4
1hMeIgERUiw0+9cuRptanP
ZXmtMce6XeTO+CTxwDOr
5GOT4IpLLGPgu9AgMBAA
Page 41 of 75
Gj
gcYwgcMwHQYDVR0OBBY
EFCR6H5XFuXl1EhKoG3q
UBfZsDHS8MIGTBgNVHS
MEgYsw
gYiAFCR6H5XFuXl1EhKoG
3qUBfZsDHS8oWWkYzBh
MQswCQYDVQQGEwJVUz
ELMAkG
A1UECBMCVVMxCzAJBgN
VBAcTAlVTMQswCQYDVQ
QKEwJVUzELMAkGA1UEC
xMCVVMx
CzAJBgNVBAMTAlVTMRE
wDwYJKoZIhvcNAQkBFgJV
U4IJAPqd2AdwVCi8MAwG
A1Ud
EwQFMAMBAf8wDQYJKoZ
IhvcNAQEFBQADgYEAYF
MClk2qBi0mWFqSKrkTSuM
2fwUx
3AqWy6a47KFjiazZnpih+zB
CNESlvELOjns3xRsWQmfP
qQqEW6zU2CHnLLTYo7iH
erFpadNf4w2rB0GgcxzeSN
M02+FtBLEpFeDh82AEVH
9u0V062pcwRJS2O4oeNg0
O
M+DhGkrB26EX3m8=
-----END CERTIFICATE-----
4 Private key of
certificate
Certificate
name_key
the value contain the private
key of certificate
nvram set LEFT_key=
-----BEGIN RSA PRIVATE
KEY-----
MIICXAIBAAKBgQCqHB9Y
1nme8lXElak49Nc7s4FrUw
UFTL4GMFWXk6o6DbnYo
Spq
pkNBUOXWY1S3EQY/DJ5
5ih0WKWEcEA2TxxBKgE4
BfxqFhEcAqBV6vy4uTZ6k9
Page 42 of 75
NkQ
ONYTHiIBEVIsNPvXLkabW
pz2V5rTHHul3kzvgk8cAzq+
Rjk+CKSyxj4LvQIDAQAB
AoGAMzo01nQAPDWOTp0
jUNuq1XfBSai+olHyB7sWi4
cUhFcN2IbwVx2qs0jBbkaL
hHXEA8ixELje+YWMkP7kl9
Qiu08PAqeteWVHGISl5Btn
ZO0w0I7NRsa2O5nhBDlz
pQdWZ2EGpG+I8pdu1wyq
4AvdA7mBCUlI19e7eyuYm
8Cy56ECQQDZE/5AGuDw
C94o
dkpbk2iTiXenodknN1ktlxC1
hfojcv+MmV3ZLtnGy2Ygq4
HeA+UJiYxvbZZisYJL
BmlG+hEDAkEAyJxCqpsuC
cu28coJQEcGoJWsUh724y
uDC0FkB6ReIcgolFDrCELP
3/fP1Kq47VVlFPy67EoUefQ
IBgAmgn/0PwJAMQWi1Tc8t
Pj5IooUILoZU7gnnWOf
dou5R+Jlk5i99GNz8nxwBS
vfYlVsqtQQb+LRRmYZoNB
OtdsAYZEBFVZDoQJAKmU
r
iZaF4jgVD4Ac+GKKOgGniy
tUDaoyZXyKQTsxUX5VZRK
8uOA1wiVC3LS/pBh55jeK
4Ui+jw9Nasc5XDbiTQJBAI/
VZRyVbi3TFjlUk8Nz3+wx9
Vnffg2Sm4FQYwu/pxEf
SIzPO4gYCam+rrN15P++A
vBmwqUWfHH8D/zCXPxP5
5I=
-----END RSA PRIVATE
KEY-----
5 Certificate
count
Certificate
name_certCou
nt
Natural number nvram set
LEFT_certCount=3
Page 43 of 75
4.3 GRE
NO. parameters Value of parameters The value and
description
example
1 GRE tunnel gre_enable 0 disable nvram gre_enable=0
1 enable
2 status tunnel1 gre_en1 0 disable nvram set gre_en1=1
tunnel2 gre_en2
tunnel3 gre_en3
tunnel4 gre_en4
tunnel5 gre_en5
tunnel6 gre_en6
tunnel7 gre_en7 1 enable
tunnel8 gre_en8
tunnel9 gre_en9
tunnel10 gre_en10
tunnel11 gre_en11
tunnel12 gre_en12
3 Name
of
tunnel
tunnel1 gre_name1 30 character at
the longest
nvram set gre_name1=gre_test
tunnel2 gre_name2
tunnel3 gre_name3
tunnel4 gre_name4
tunnel5 gre_name5
tunnel6 gre_name6
tunnel7 gre_name7
tunnel8 gre_name8
tunnel9 gre_name9
tunnel10 gre_name10
tunnel11 gre_name11
tunnel12 gre_name12
4 pass tunnel1 gre_through1 0 PPP nvram set gre_through1 =0
tunnel2 gre_through2
tunnel5 gre_through5 1
LAN
tunnel9 gre_through9 2 WAN(
Static tunnel10 gre_through10
Page 44 of 75
IP)
5 WAN
IP of
peer
tunnel1 gre_peer_ipaddr1 IP address
format
nvram set gre_peer_ipaddr1
=120.42.46.98 tunnel2 gre_peer_ipaddr2
tunnel3 gre_peer_ipaddr3
6 Subn
et of
peer
tunnel1 gre_peer_net1 Subnet and
subnet mask
format
Example:192.16
8.8.0/24
meaning ip
address is
192.168.8.0 and
mask is
255.255.255.0
nvram set gre_peer_net1
=192.168.8.0/24 tunnel2 gre_peer_net2
tunnel3 gre_peer_net3
7 tunnel
IP of
peer
tunnel1 gre_peer_tun_ip1 IP address
format
nvram set gre_peer_tun_ip1
=200.200.200.1 tunnel2 gre_peer_tun_ip2
tunnel3 gre_peer_tun_ip3
8 Tunne
l IP of
tunnel1 gre_local_tun_ip1 IP address
format
nvram set gre_local_tun_ip1
=200.200.200.2 tunnel2 gre_local_tun_ip2
Page 45 of 75
local tunnel3 gre_local_tun_ip3
tunnel4 gre_local_tun_ip4
9 Local
subne
t
mask
tunnel1 gre_local_tun_mask1 Subnet mask
format
nvram set gre_local_tun_mask1
=255.255.255.0 tunnel2 gre_local_tun_mask2
tunnel3 gre_local_tun_mask3
10 keepa
live
tunnel1 gre_keepalive_enable1 0 disable nvram set
gre_keepalive_enable1 =0 tunnel2 gre_keepalive_enable2
tunnel3 gre_keepalive_enable3
tunnel7 gre_keepalive_enable7 1 enable
0
1
2
11 Re-di
al
times
tunnel1 gre_keepalive_tries1 1-99999 range
of decimal
figures
nvram set gre_keepalive_tries1
=15 tunnel2 gre_keepalive_tries2
tunnel3 gre_keepalive_tries3
Page 46 of 75
12 re-dial
interv
al
tunnel1 gre_keepalive_interval
1
1-99999 range
of decimal
figures
nvram set
gre_keepalive_interval1 =60
2
3
4
5
6
7
8
9
10
11
12
13 Policy
failure
tunnel1 gre_keepalive_failactio
n1
0 hold nvram set
gre_keepalive_failaction1=0
n2
n3
n4
Page 47 of 75
n5
n6
n7
1 restart
n8
n9
n10
n11
n12
5 . security
5.1 firewall
Security
NO. parameters The name of
parameters
The value and description example
1 Enable SPI
firewall
filter on enable nvram set filter=on
off disable
2 Filter httpd
proxy
block_proxy 1 filter nvram set block_proxy =1
0
unfiltered
3 Filter cookies block_cookie 1 filter nvram set block_cookie =1
0 unfiltered
4 Filter java
application
program
block_java 1 filter nvram set block_java =1
0 unfiltered
Page 48 of 75
5 Filter activex block_activex 1 filter nvram set block_activex =1
0 unfiltered
6 Filter data of
ping from
WAN
block_wan 1 filter nvram set block_wan=1
0 unfiltered
7 Filter data of
port 113
block_ident 1 filter nvram set block_ident=1
0 unfiltered
8 Filter data of
snmp protocol
block_snmp 1 filter nvram set block_snmp=1
0 unfiltered
9 Limit times of
ssh connection
limit_ssh 1 limited nvram set limit_ssh=1
0 unlimited
10 Limit times of
telnet
connection
limit_telnet 1 limited nvram set limit_telnet=1
0 unlimited
11 Limit times of
pptp
connection
limit_pptp 1 limited nvram set limit_pptp=1
0 unlimited
12 Limit times of
l2tp
connection
limit_l2tp 1 limited nvram set limit_l2tp=1
0 unlimited
Log manage
NO. parameters Value of
parameters
The values and description example
1 Enable log
manage
log_enable 1 enable nvram set log_enable=1
0 disable
2 Logging
registration
log_level 0 low nvram set log_level=1
1 middle
2 high
3 Log dropped
packets
log_dropped 1 log nvram set log_dropped =1
0 Dont log
4 Log received
packets
log_accepted 1 Log nvram set log_accepted =1
0 Dont log
5 Log rejected
packets
log_rejected 1 Log nvram set log_rejected =1
0 Dont log
Page 49 of 75
5.2 VPN pass-through
NO. parameters The value of
parameter
The value and description example
1 IPSec
pass-through
ipsec_pass 1 enable nvram set ipsec_pass=1
0 disable
2 PPTP
pass-through
pptp_pass 1 Enable nvram set pptp_pass=1
0 disable
3 L2TP
pass-through
l2tp_pass 1 enable nvram set l2tp_pass=1
0 disable
6 . access limit
6.1 WAN access
Client list
NO. Parameter
item
1 MAC address
of application
client in policy
1
filter_mac_grp
1
Mac address
formatAA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH(8
addresses at the longest)
nvram set filter_mac_grp1
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
2 MAC address
of application
client in policy
2
filter_mac_grp
2
Mac address
CC:DD:EE:FF:GG:HH(8
nvram set
filter_mac_grp2=AA:BB:CC
:DD:EE:FF
CC:DD:EE:FF:GG:HH
3 MAC address
of application
client in policy
3
filter_mac_grp
3
Mac address
CC:DD:EE:FF:GG:HH(8
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
Page 50 of 75
4 MAC address
of application
client in policy
4
filter_mac_grp
4
Mac address
CC:DD:EE:FF:GG:HH(8
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
5 MAC address
of application
client in policy
5
filter_mac_grp
5
Mac address
CC:DD:EE:FF:GG:HH(8
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
6 MAC address
of application
client in policy
6
filter_mac_grp
6
Mac address
CC:DD:EE:FF:GG:HH(8
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
7 MAC address
of application
client in policy
7
filter_mac_grp
7
Mac address
CC:DD:EE:FF:GG:HH(8
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
8 MAC address
of application
client in policy
8
filter_mac_grp
8
Mac address
CC:DD:EE:FF:GG:HH(8
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
9 MAC address
of application
client in policy
9
filter_mac_grp
9
Mac address
CC:DD:EE:FF:GG:HH(8
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
10 MAC address
of application
client in policy
10
filter_mac_grp
10
Mac address
CC:DD:EE:FF:GG:HH(8
nvram set
filter_mac_grp10
=AA:BB:CC:DD:EE:FF
CC:DD:EE:FF:GG:HH
Page 51 of 75
11 IP address of
application
client in policy
1
filter_ip_grp1 format:Lan1 Lan2 Lan3 Lan4
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
nvram set filter_ip_grp1=10
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
Lan1-Lan6 Address of the
client in the
same network
segments of the
router range
0-255assuming
the router
address is
192.168.1.1/24
when Lan1 is
20indicates the
IP address
192.168.1.20;ind
icates the
address is not
used
A1.B1.C1.
D1-A2.B2.
C2.D2
Ip address range
A3.B3.C3.
D3-A4.B4.
C4.D4
Ip address range
12 IP address of
application
client in policy
2
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
13 IP address of
application
client in policy
3
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
14 IP address of
application
Lan5 Lan6
0 0 0 0 0
Page 52 of 75
client in policy
4
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
15 IP address of
application
client in policy
5
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
16 IP address of
application
client in policy
6
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
17 IP address of
application
client in policy
7
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
18 IP address of
application
client in policy
8
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
19 IP address of
application
client in policy
9
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
20 IP address of
application
client in policy
10
Lan5 Lan6
A1.B1.C1.D1-A2.B2.C2.D2
A3.B3.C3.D3-A4.B4.C4.D4
nvram set
filter_ip_grp10=10 0 0 0 0 0
192.168.2.1-192.168.9.244
192.167.10.1-192.168.1.1
Access policy
NO. Parameter
item
parameters The value and description example
1 Access policy
rules 1
filter_rule1 state 2 enable nvram set filter_rule1
=$STAT:2$NAME:FILTER2$
DENY:0$$
0 disable
policy 30 characters at
the longest
action 1 deny
0 filter
format$STAT:stat$NAME:name
of policy$DENY:action$$
Page 53 of 75
2 Access policy
rules 2
filter_rule2 idem nvram set filter_rule2
DENY:0$$
3 Access policy
rules 3
DENY:0$$
4 Access policy
rules 4
DENY:0$$
5 Access policy
rules 5
DENY:0$$
6 Access policy
rules 6
DENY:0$$
7 Access policy
rules 7
DENY:0$$
8 Access policy
rules 8
DENY:0$$
9 Access policy
rules 9
DENY:0$$
10 Access policy
rules 10
DENY:0$$
11 the time of the
policy rule 1:
filter_tod1 Start time hour
point
0-23 natural
number
nvram set filter_tod1=0:0
23:58 13,5-6
The number of
minutes of the
start time
0-59 natural
number
to terminate
time hours point
0-23 natural
number
Termination of
the time the
number of
minutes
0-59 natural
number
Effect time of
policy
If every day
effectiveset
Page 54 of 75
0-6 if
Tuesday
wednesday
and Friday
effective,set
2-3,5if only
effect on
monday set
1 other
similar record
formatstart time hour point:the
number of minutes of the start
time:to terminate time hours
point:termination of the time the
number of minutes: effect time
of policy
12 The time of the
policy rule 2
filter_tod2 idem nvram set filter_tod2=0:0
23:58 13,5-6
13 The time of the
policy rule 3
23:58 13,5-6
14 The time of the
policy rule 4
23:58 13,5-6
15 The time of the
policy rule 5
23:58 13,5-6
16 The time of the
policy rule 6
23:58 13,5-6
17 The time of the
policy rule 7
23:58 13,5-6
18 The time of the
policy rule 8
23:58 13,5-6
19 The time of the
policy rule 9
23:58 13,5-6
20 The time of the
policy rule 10
23:58 13,5-6
21 Blocked url filter_web_h Network Url address of the nvram set filter_web_host1
Page 55 of 75
address by
policy rule 1
ost1 address site =www.baidu.com< >
www.163.com<nbsp;>
format network
address< >url of
site< >
22 Blocked url
address by
policy rule 2
filter_web_h
ost2
idem nvram set filter_web_host2
=www.baidu.com< >
www.163.com<nbsp;>
23 Blocked url
address by
policy rule 3
filter_web_h
ost3
=www.baidu.com< >
www.163.com<nbsp;>
24 Blocked url
address by
policy rule 4
filter_web_h
ost4
=www.baidu.com< >
www.163.com<nbsp;>
25 Blocked url
address by
policy rule 5
filter_web_h
ost5
=www.baidu.com< >
www.163.com<nbsp;>
26 Blocked url
address by
policy rule 6
filter_web_h
ost6
=www.baidu.com< >
www.163.com<nbsp;>
27 Blocked url
address by
policy rule 7
filter_web_h
ost7
=www.baidu.com< >
www.163.com<nbsp;>
28 Blocked url
address by
policy rule 8
filter_web_h
ost8
=www.baidu.com< >
www.163.com<nbsp;>
29 Blocked url
address by
policy rule 9
filter_web_h
ost9
=www.baidu.com< >
www.163.com<nbsp;>
30 Blocked url
address by
policy rule 10
filter_web_h
ost10
=www.baidu.com< >
www.163.com<nbsp;>
31 the keyword in
web site be
blocked by
policy rule 1
filter_web_ur
l1
keyword Keywords in
url address
nvram set
filter_web_url1=www<&nbs
p;>;163< >
formatkeyword< >;keyw
ord < >
32 the keyword in
web site be
blocked by
policy rule 2
filter_web_ur
l2
idem nvram set
p;>;163< >
Page 56 of 75
33 the keyword in
web site be
blocked by
policy rule 3
filter_web_ur
l3
idem nvram set
p;>;163< >
34 the keyword in
web site be
blocked by
policy rule 4
filter_web_ur
l4
idem nvram set
p;>;163< >
35 the keyword in
web site be
blocked by
policy rule 5
filter_web_ur
l5
idem nvram set
p;>;163< >
36 the keyword in
web site be
blocked by
policy rule 6
filter_web_ur
l6
idem nvram set
p;>;163< >
37 the keyword in
web site be
blocked by
policy rule 7
filter_web_ur
l7
idem nvram set
p;>;163< >
38 the keyword in
web site be
blocked by
policy rule 8
filter_web_ur
l8
idem nvram set
p;>;163< >
39 the keyword in
web site be
blocked by
policy rule 9
filter_web_ur
l9
idem nvram set
p;>;163< >
40 the keyword in
web site be
blocked by
policy rule 10
filter_web_ur
l10
idem nvram set
filter_web_url10=www<&nb
sp;>;163< >
6.2 data-flow filtration
NO. Parameter
item
1 Enable Data
flow filtration
function
packetfilter_en
able
0 disable nvram set LoadShunt_rule
=0 1 enable
Page 57 of 75
2 Data-flow
filtration policy
packetfilter_po
licy
DROP Drop in line
with the rules
of data
nvram set
packetfilter_policy=DROP
ACCEPT Receiving
data in
compliance
with the
rules,does not
comply with
all the
discarded
3 Filtration policy packetfilter_ips Source
address
Source
address of
data,format:A
.B.C.D/M
nvram set packetfilter_ips
=0.0.0.0/0 1 65535
0.0.0.0/0 1 65535 both
output |
destination Destination
address of
data,format:A
.B.C.D/M
Starting port
number in the
source port
range
1-65535
The end of
the port
number in the
source port
range
1-65535
Starting port
number in the
destination
port range
1-65535
The end of
the port
number in the
destination
port range
1-65535
Protocol
tcp udp
icmpboth
Page 58 of 75
direction outpu
t
The
direct
ion of
lan to
wan
input The
direct
ion of
Wan
to lan
format source
address;destination address;
starting port number in source
port range;the end of the port
number in source port range;
Starting port number in the
destination port range; The
end of the port number in the
destination port range;
protocol;direction | next rule
| |
7 . NAT configuration
NO. Parameter
item
1 Port forward forward_spec Name of
application
Letters and
numbers 18
characters at
the longest
nvram set forward_spec
=xx:on:both:12>192.168.1.
1:11<192.168.2.1/24
yy:off:tcp:12>192.168.1.2:10
<192.168.3.1/24
protocol
tcpudpboth
Whether to
open
on:enable the
rule
off disable
the rule
Page 59 of 75
Source
address of
data
A.B.C.D/M
Source port of
data
1-65535
Destination
address of
forward
A.B.C.D
Destination
port of
forward
1-65535
format Name of
application:protocol:
destination port of
data>Destination address of
forward: Destination port of
forward<source address of
data next rule
2 Range of port
forward
forward_port Name of
application
Letters and
numbers 18
characters at
the longest
nvram set forward_port
=xx:on:udp:1:2>192.168.7.
2 yy:off:tcp:3:6>192.168.7.3
Whether to
open
onenable
offdisable
protocol
udptcpboth
Starting
destination
port of data
1-65535
The end of
destination
port of data
1-65535
Destination
port of
forward
A.B.C.D
format application:protocol:
Page 60 of 75
destination port of
data>Destination address of
forward: Destination port of
forward<source address of
data next rule
3 Port trigger port_trigger Name of
application
Letters and
numbers 18
characters at
the longest
nvram set port_trigger=
zzz:on:tcp:2-555>6-666
ttt:on:both:5-66>88-9099
yyy:on:udp:2-555>6-666
ttt:on:both:5-66>88-9099
Whether to
open
onenable
offdisable
protocol
tcpudpboth
Starting port
number of
destination
port range Of
Trigger rule
1-65535
The end of
port number
of destination
port range Of
Trigger rule
1-65535
Starting port
number of
port range Of
Trigger rule
1-65535
The end of
port number
of port
range Of
Trigger rule
1-65535
format Name of
application:protocol:Starting
port number of destination port
range Of Trigger rule: The end
of port number of destination
Page 61 of 75
port range Of Trigger
rule>Starting port number of
port range Of Trigger rule:The
end of port number of port
range Of Trigger rule;next rule
4 enable DMZ dmz_enable 0 Disable DMZ nvram set dmz_enbale=1

1 Enable DMZ
5 DMZ host ip
address
dmz_ipaddr 1-254 Nvram set dmz_ipaddr=23
8 . QoS option
8.1 basic
NO. Parameter
item
parameters The value and
description
example
1 Dual card
mode master
card flow
control
enabled switch
wshaper_enable_
Main
0 disable nvram set
wshaper_enable_Main =1 1 enable
2 backup card
flow control
in Dual card
mode
enabled switch
wshaper_enable_
Bk
0 disable nvram set
wshaper_enable_Bk =0
1 enable
3 Single card
flow control
enabled switch
wshaper_enable_ 0 disable nvram set
wshaper_enable_=1 1 enable
4 Dual card
mode master
card uploads
the total speed
wshaper_uplink_M
ain
Natural
numbe
r
The total
speed of
upload
nvram set
wshaper_uplink_Main =1000
5 dual card
mode main
card download
speed
wshaper_downlink
_Main
Natural
numbe
r
The total
speed of
download
nvram set
wshaper_downlink_Main
=1000
Page 62 of 75
6 Dual card
mode
prepared card
upload total
speed
wshaper_uplink_B
k
Natural
numbe
r
The total
speed of
upload
nvram set
wshaper_uplink_Bk=10
7 Dual card
mode
prepared
wshaper_downlink
_Bk
Natural
numbe
r
The total
speed of
download
nvram set
wshaper_downlink_Bk =100
8 Single card
mode uploads
total speed
wshaper_uplink_ Natural
numbe
r
The total
speed of
upload
nvram set wshaper_uplink_
=60
9 Single card
mode
download total
speed
wshaper_downlink
_
Natural
numbe
r
The total
speed of
download
nvram set wshaper_downlink_
=190
10 Upload of the
high-priority
bandwidth
occupied the
lowest
proportion
premium_rate_up 0-100 Occupying the
lowest
proportion
nvram set premium_rate_up
=10
11 Upload
occupying the
highest
proportion of
high-priority
bandwidth
premium_ceil_up 0-100 Occupy the
highest
proportion
nvram set premium_ceil_up
=11
12 Upload of the
high-priority
bandwidth
occupied the
lowest
proportion
express_rate_up 0-100 Occupying the
lowest
proportion
nvram set express_rate_up
=10
13 Upload
occupying the
highest
proportion of
high-priority
bandwidth
express_ceil_up 0-100 Occupy the
highest
proportion
nvram set express_ceil_up
=20
14 Upload of the
high-priority
stanadard_rate_up 0-100 Occupying the
lowest
nvram set stanadard_rate_up
=10
Page 63 of 75
bandwidth
occupied the
lowest
proportion
proportion
15 Upload
occupying the
highest
proportion of
high-priority
bandwidth
stanadard_ceil_up 0-100 Occupy the
highest
proportion
nvram set
stanadard_ceil_up=90
16 Upload of the
high-priority
bandwidth
occupied the
lowest
proportion
bulk_rate_up 0-100 Occupying the
lowest
proportion
nvram set bulk_rate_up=50
17 Upload
occupying the
highest
proportion of
high-priority
bandwidth
bulk_ceil_up 0-100 Occupy the
highest
proportion
18 Upload of the
high-priority
bandwidth
occupied the
lowest
proportion
bulk_rate_dn 0-100 Occupying the
lowest
proportion
nvram set
premium_rate_up=50
19 Upload
occupying the
highest
proportion of
high-priority
bandwidth
bulk_ceil_dn 0-100 Occupy the
highest
proportion
nvram set
premium_rate_up=70
20 Upload of the
high-priority
bandwidth
occupied the
lowest
proportion
lowest
proportion
nvram set
express_rate_up=50
21 Upload bulk_ceil_dn 0-100 Occupy the nvram set
Page 64 of 75
occupying the
highest
proportion of
high-priority
bandwidth
highest
proportion
express_rate_up=70
22 Upload of the
high-priority
bandwidth
occupied the
lowest
proportion
lowest
proportion
nvram set
standard_rate_up=50
23 Upload
occupying the
highest
proportion of
high-priority
bandwidth
highest
proportion
nvram set
standard_rate_up=70
24 Upload of the
high-priority
bandwidth
occupied the
lowest
proportion
lowest
proportion
25 Upload
occupying the
highest
proportion of
high-priority
bandwidth
highest
proportion
8.2 classification
NO. Parameter
item
1 Priority
classification
configuration
svqos_ips_htb queue htb nvram set svqos_ips_htb
=192.168.1.1/23 tcp 1 20 3
60 100 htb | 192.168.2.1/23
udp 1 20 3 60 30 htb |
Address range A.B.C.D/M
protocol
tcp udp
icmpboth
Page 65 of 75
Starting
source port
1-65535
The end of
source port
1-65535
Starting
destination
port
1-65535
The end of
destination
1-65535
priority
100 not
limited
10 high
priority
20priority
30standard
40 low
priority
format address
range;protocol;starting source
port;the end of source
port;starting destination
port;the end of destination
port;priority; queue | next
configure |
8.3 Load balance
NO. Parameter
item
1 Load shedding LoadShunt_rul
es
Source
address
range
A.B.C.D/M nvram set LoadShunt_rule
=192.168.1.1/24
192.168.2.2/24 1 6553 2
6555 MainWAN |
192.168.7.1/24
Destination
address
A.B.C.D/M
Page 66 of 75
192.168.9.1/24 5 66 7 777
BkupWAN |
range
protocol
tcp udp
both icmp
both meaning
tcp and udp
protocol
Source port
range starting
port number
1-65535
The end of
number of
source port
range
1-65535
Starting port
number of
destination
port range
1-65535
the end of
port number
of destination
port range
1-65535
Wan export Main
WAN
Using
Mast
er
card
Bkup
WAN
Using
back
up
card
format source address
range;destination address
range;protocol;starting port
number of source port
range;the end of port number
of source port range;source
port number of destination port
range;the end of port number
of destination port range;wan
Page 67 of 75
export; | next rule| |
2 Enable load
balancing
loadBalance_e
nbale
1 enable nvram set
loadBalance_enable =1
0 disable
3 Equilibrium
model
xcyload_mode 1 Absolute
mode
nvram set xcyload_mode=1
0 Relative
mode
4 The load factor
of the main
card
Main_wan_loa
d
Main_wan_load=3
5 The load factor
of the backup
card
Bkup_wan_loa
d
Bkup_wan_load=3
9 . application
9.1 Serial port application
NO. Parameter
item
1 Serial port
application
ser_app_en 0 disable nvram ser_app_en=0
1 enable
2 Baud rate ser_baudrate1 4 2400 nvram set ser_baudrate1 =10
5 4800
6 9600
7 19200
8 38400
9 57600
10 115200
3 Data-bits ser_databit1 1 8 digit nvram ser_databit1=1
2 7 digit
3 6 digit
4 Stop-bit ser_stopbit1 1 1 digit nvram set ser_stopbit1=1
2 2 digit
5 inspect ser_parity1 1 none nvram set ser_parity1=1
2 Odd parity
Page 68 of 75
3 Even parity
6 Fluid control ser_flowcontrol1 1 none nvram set ser_flowcontrol1=1
2 hardware
3 software
7 Protocol type ser_submodesw 1 UDP(DTU) nvram set ser_submodesw =1
2 Pure UDP
3 TCP(DTU)
4 Pure TCP
5 TCP server
6 TCST
8 Server
address
ser_remoteip a form of IP address or
domain name
nvram set ser_remoteip
=120.42.46.98
9 Server port ser_remoteport decimal figures of 1-65535
range
nvram set ser_remoteport
=5501
10 Equipment
number
ser_dtuid Digital format,13 byte at the
longest
nvram set ser_dtuid
=12345678910
11 Equipment
ID
ser_dtudeviceid
Digital format must be 8
digit,otherwise an error
nvram set ser_dtudeviceid
=12345678
12 Heartbeat
interval
ser_onlnrptintvl decimal figures of 1-99999
range
nvram set ser_onlnrptintvl =60
13 Listening
port
ser_tcpsvr_listen
_port
decimal figures of 1-65535
range
nvram set ser_tcpsvr_listen_port
=6666
14 Custom
heartbeat
packets
ser_tcp_custom
_hrt
A maximum of 50 bytes nvram set ser_tcp_custom_hr
t=XXX
15 Custom
registration
package
ser_tcp_custom
_reg
A maximum of 50 bytes nvram set ser_tcp_custom_reg
=XXX
9.2 GPS options
NO. Parameter
item
1 Enable
GPS
gps_app_en 0 disable nvram gps_app_en=0
1 enable
2 Baud rate gpsser_baudrate
1
4 2400 nvram set gpsser_baudrate1
=10 5 4800
Page 69 of 75
6 9600
7 19200
8 38400
9 57600
10 115200
3 Data-bit gpsser_databit1 1 8 digit nvram gpsser_databit1=1
2 7 digit
4 Stop-bit gpsser_stopbit1 1 1 digit nvram gpsset ser_stopbit1=1
2 2 digit
5 inspect gpsser_parity1 1 none nvram gpsset ser_parity1=1
2 Odd parity
3 Even parity
6 Fluid control gpsser_flowcont
rol1
1 none nvram set
gpsser_flowcontrol1=1 2 hardware
3 software
7 GPS
expo
rt
netw
ord
output_socket 1 enable nvram set output_socket=1
other disable
Seria
l port
output_console 1 enable nvram set output_console=1
other disable
8 GPS data
transmission
protocol
GpsNetProto 1 TCP nvram set GpsNetProto =1
2 UDP
9 GPS server
addres
GPSDSCAddr A form of IP address or
domain name
nvram set GPSDSCAddr
=120.42.46.98
10 GPS
listening port
GPSDSCPort decimal figures of 1-65535
range
nvram set GPSDSCPort =5501
11 Add devices
id in GPS
information
AppendId 1 enable nvram set AppendId=1
other disable
12 Equipment
ID
DTUId
Digital format must be 8
digitotherwise an error
nvram set DTUId =12345678
13 GPS
information
update
interval
GPSUpInterval decimal figures of 1-99999
range
nvram set GPSUpInterval=60
14 GPS
movement
speed
SpeedThreshHol
d
range
nvram set SpeedThreshHold =0
Page 70 of 75
threshold
15 GP
S
inf
or
ma
tio
n
typ
e
GPRM
C
gprmc_include 1 enable nvram set gprmc_include=1
GPGG
A
gpgga_include
GPVT
G
gpvtg_include
GPGS
A
gpgsa_include other disable
GPGS
V
gpgsv_include
GPGL
L
gpgll_include
10 . management
10.1 management
NO. Parameter
item
1 pro
toc
ol
HTTP http_enable 1 enable nvram set http_enable=1
other disable
HTTP
S
https_enable 1 enable nvram set https_enable=0
other disable
2 Auto refresh
sec.
refresh_time decimal figures of 1-99
range
nvram set refresh_time =3
3 Display
system
information
page before
landing
status_auth 1 enable nvram set status_auth =1
0 disable
4 Password
protection of
system
information
page
info_passwd 1 enable nvram set info_passwd =0
other disable
5 Web remote_manage 1 enable nvram set remote_management
Page 71 of 75
interface
managemen
t
ment =0 0 disable
6 Use HTTPS remote_mgt_htt
ps
1 enable nvram set remote_mgt_https=0
other disable
7 Web
interface port
http_wanport decimal figures of 1-65535
range
nvram set http_wanport =8088
8 SSH
managemen
t
remote_mgt_ssh 0 disable nvram set remote_mgt_ssh=1
1 enable
9 SSH remote
port
sshd_wanport decimal figures of 1-65535
range
nvram set sshd_wanport =22
10 Telnet
managemen
t
remote_mgt_teln
et
0 disable nvram set remote_mgt_telnet =0
1 Enable
11 language language chinese_simplifi
ed
chinese nvram set language=english
english english
10.2 Remain active
NO. Parameter
item
parameter The value and
description
example
1 Timer switch schedule_bs_enab
le
1 enable Nvram set
schedule_bs_enable=0 0 disable
2 matching schedule_mode 1 Day of
month
nvram set schedule_mode=1
2 Week of
month
3 period of
time a month
4 period of
time a week
3 Off
time
hour shutdown_hours decimal figures of 0-23
range
nvram set shutdown_hours=0
minu
te
shutdown_minutes decimal figures of 0-59
range
nvram set shutdown_minutes=0
4 S
h
Start day
of month
shutdown_day
0-31 range0 is everyday
nvram set shutdown_day=0
Page 72 of 75
u
t
d
o
w
n
d
a
t
e
End day
of month
shutdown_day_e decimal figures of 1-31
range
nvram set shutdown_day_e=1
Start day
of week
shutdown_week * Every day nvram set shutdown_week=0
0 sunday
1 monday
2 thesday
3 wednesday
4 thursday
5 friday
6 saturday
Weeks
after the
end of
days
shutdown_week _
e
range
nvram set shutdown_week_e=0
5 Boot
time
hour boot_hours decimal figures of 0-23
range
nvram set boot_hours=0
minu
te
boot_minutes decimal figures of 0-59
range
nvram set boot_minutes=0
6 B
o
o
t
d
a
t
e
Start day
of month
boot_day
0-31 range0 is everyday
nvram set boot_day=0
End day
of month
boot_day_e decimal figures of 1-31
range
nvram set boot_day_e=1
start day
of week
boot_week * Weekday nvram set boot_week=0
0 sunday
1 monday
2 tuesday
3 wednesday
4 thursday
5 friday
6 saturday
The end
of week
day
boot_week _e decimal figures of 0-6
range
nvram set boot_week_e=0
7 Scheduled
reboot
schedule_enable 1 enable nvram set schedule_enable =0
0 disable
8 Scheduled
reboot
options
schedule_hour_ti
me
1 Interval mode nvram set
schedule_hour_time=1 2 Set the time mode
9 interval
sec.
schedule_time decimal figures of
60-99999 range
nvram set schedule_time =3600
Page 73 of 75
10 At
the
set
time
hour schedule_hours decimal figures of 0-23
range
nvram set
schedule_weekdays=00
minu
te
schedule_minutes decimal figures of 0-59
range
week schedule_weekda
ys
* everyday
00 sunday
01 monday
02 tuesday
03 wednesday
04 thursday
05 friday
06 saturday
11 .Other i mportant parameters nvram
Here are some nvram argument is not a configuration parameter , but in the process often requires the use of
query
NO. Parameter
item
parameter The value and
description
example
1 Main 3g
signal
dbm 0~3199100~199 nvram get dbm
2 Backup 3g
signal
bkup_dbm 0~3199100~199 nvram get bkup_dbm
3 Main 3g
network type
network Only these modules have a 3G
network type
nvram get network
4 Backup
3gnetwork
type
bkup_network Only these modules have a 3G
network type
nvram get bkup_network
5 Main 3g
module type
3gmodule MODULE_UNKNOWN:0
MODULE_SIMCOM :1
MODULE_WAVECOM:2
MODULE_SIEMENS :3
MODULE_ANYDATA:4
MODULE_BELLWAVE:5
nvram get 3gmodule
Page 74 of 75
MODULE_FIDELIX:6
MODULE_ENFORA:7
MODULE_ZTE: 8
MODULE_HUAWEI : 11
MODULE_LONGSUNG:65292
MODULE_ZTE_MC8630:65293
MODULE_UC864G:65294
MODULE_DATANG_LC6311:65295
MODULE_HUAWEI_EM770:65296
MODULE_DATANG:65297
MODULE_ZTE_MU350:18
MODULE_ZTE_AC8710:19
MODULE_HUAWEI_E220:20
MODULE_HUAWEI_EC169:21
MODULE_YITONG_EU830:22
MODULE_HUAWEI_ET128:24
MODULE_VTION_E1916:25
MODULE_ZTE_MF637U:26
MODULE_SIM5220:27
MODULE_THINK_ME600:19
MODULE_NOKIA_CS15:28
MODULE_SPRINT_U301:29
MODULE_ZTE_MC8630C:65310
MODULE_QUECTEL_M10:31
MODULE_ZTE_AD3812:65312
MODULE_ZTE_MF210:65313
MODULE_LONGSUNG_U7300:65315
MODULE_VIATELECOM:36
MODULE_DATANG_LC6341:65317
MODULE_ZTE_M501:65318
MODULE_LONGSUNG_T5300:65320
MODULE_HUAWEI_MC323:41
MODULE_HUAWEI_EC1261:42
MODULE_ANYDATA_DTL818:65323E)
MODULE_SIERRA_MC7710:65324
MODULE_VIATELECOM_EP45:65325
MODULE_ZTE_MF290:65326
MODULE_ZTE_MF220 :65327
Page 75 of 75
MODULE_ZTE_MC8630L:65330
6 backup 3g
module type
bkup3gmodule As above nvram get bkup3gmodule
7 Main WAN
traff
traff-month-year
.Must be a two
-digit month
. As in March 2012
should get
parameters
traff-03-2013
traff-03-2013=0:0 0:0 0:0 0:0 0:0 0:0
0:0 0:0 0:0 0:0 0:0 0:0 0:0 0:0 0:0 0:0
0:0 0:0 0:0 0:0 0:0 0:1 0:0 0:0 6:0 0:0
0:0 0:0 0:0 0:0 0:0 [6:1]
Before the brackets denote the 1st to
the 31st of every day, before the
colon is downstream data , followed
by the uplink data , the unit is M, in
parentheses represent the entire
month of traffic statistics
nvram get traff-03-2013
8 Back WAN
traff
bkuptraff-month-ye
ar.Must be a two
-digit month
. As in March 2012
should get
parameters
bkuptraff-03-2013
As above nvram get
bkuptraff-03-2013
9 WAN NAT wan_nat 0 Refused WAN nat function nvram set wan_nat=0
To this entry versions
before they can use after
20130326
other Open wan nat function

Nvram Parameter Configuration Instructions

Diunggah oleh

Informasi Dokumen

Deskripsi Asli:

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

Nvram Parameter Configuration Instructions

Diunggah oleh

Hak Cipta:

Format Tersedia

Nvram parameter configuration instructions

wl0_wep_bit 64 64 bits 10 hex

10 SNMP snmpd_enable 0 disable nvram set snmpd_enable=0

4 enable DMZ dmz_enable 0 Disable DMZ nvram set dmz_enbale=1

Anda mungkin juga menyukai