Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
documentation:config-parameters [2016/10/17 11:33] fachet |
documentation:config-parameters [2023/01/31 11:57] schmitt |
||
|---|---|---|---|
| Line 13: | Line 13: | ||
| </code> | </code> | ||
| + | Use cli get/set to read and write paramters. | ||
| + | Example as user admin (password of web gui): | ||
| + | <code> | ||
| + | NB1600 Command Line Interface (version 1.1) | ||
| + | > get network.lan.1.address | ||
| + | network.lan.1.address=192.168.2.2 | ||
| + | > set network.lan.1.address=192.168.2.1 | ||
| + | > get network.lan.1.address | ||
| + | network.lan.1.address=192.168.2.1 | ||
| + | </code> | ||
| + | Example as user root (password of web gui): | ||
| + | <code> | ||
| + | $ cli get network.lan.1.address | ||
| + | network.lan.1.address=192.168.2.1 | ||
| + | $ cli set network.lan.1.address=192.168.2.2 | ||
| + | $ cli get network.lan.1.address | ||
| + | network.lan.1.address=192.168.2.2 | ||
| + | </code> | ||
| + | /* | ||
| <php> | <php> | ||
| echo "<html>"; | echo "<html>"; | ||
| Line 39: | Line 58: | ||
| echo "</table>"; | echo "</table>"; | ||
| echo "</html>"; | echo "</html>"; | ||
| - | </php> | + | </php> |
| + | */ | ||
| + | <code c config-desc.txt> | ||
| + | # | ||
| + | # Config Descriptions | ||
| + | # =================== | ||
| + | # | ||
| + | # This file provides a list of all possible configuration parameters for software release 4.1.0. | ||
| + | # An entity index is denoted as 'x', a subindex as 'y'. | ||
| + | # | ||
| + | # (C) 2017 NetModule AG, Switzerland | ||
| + | # | ||
| + | |||
| + | # config parameter type notation/unit/values comment | ||
| + | |||
| + | #Version/Product Info | ||
| + | config.version string <major>.<minor> set by configd, used for config conversion | ||
| + | config.product string NB<product> set by configd, specifies product | ||
| + | config.info string config description, used to identify config | ||
| + | |||
| + | #System | ||
| + | system.time date-time <YYYY>-<mm>-<dd> <HH:MM:SS> volatile parameter to set system time | ||
| + | system.login_show_msgs_infos integer 0 = disabled, 1 = enabled shows error massages on the login screen | ||
| + | system.prompt | ||
| + | |||
| + | # networking | ||
| + | network.hostname hostname hostname of the system | ||
| + | network.timezone string timezone (e.g. UTC+1 or GMT+1, see /usr/share/zoneinfo/) | ||
| + | network.tcp.timestamps integer 0 = disabled, 1 = enabled enable/disable TCP timestamps | ||
| + | network.icmp.forward integer 0 = disable, 1 = enable | ||
| + | network.mss.status integer 0 = disabled, 1 = enabled enable/disable MSS adjustment | ||
| + | network.mss.adjustment integer 100..1500 bytes maximum segment size | ||
| + | |||
| + | # certificates | ||
| + | cert.deployment string default : local default deployment type | ||
| + | cert.settings.organization string a-z,A-Z,0-9,-,_,. certificate organization (0) | ||
| + | cert.settings.department string a-z,A-Z,0-9,-,_,. certificate department (OU) | ||
| + | cert.settings.location string a-z,A-Z,0-9,-,_,. certificate location (L) | ||
| + | cert.settings.state string certificate state (ST) | ||
| + | cert.settings.country string a-z,A-Z,0-9,-,_,. certificate country (C) | ||
| + | cert.settings.common string checkPasswd certificate common name (CN) | ||
| + | cert.settings.email email checkEmail certificate e-mail | ||
| + | cert.settings.expiry integer 30..10950 days certificate expiry period | ||
| + | cert.settings.phrase password passwd certificate passphrase | ||
| + | cert.settings.keysize integer bit certificate key size | ||
| + | cert.settings.dhsize integer bit certificate DH primes | ||
| + | cert.settings.sigalg enum md5,sha1,sha256,sha512 certificate signature algorithm | ||
| + | cert.settings.cipher enum aes256,aes192,aes128,des,des3,seed certificate cipher algorithm | ||
| + | cert.scep.status integer 0 = disabled, 1 = enabled enables/disables SCEP | ||
| + | cert.scep.url url http://<host>/<path> SCEP CA URL | ||
| + | cert.scep.fingerprint string SCEP CA fingerprint | ||
| + | cert.scep.fpalg enum md5,sha1,sha256 SCEP fingerprint algorithm | ||
| + | cert.scep.caident string SCEP CA identifier | ||
| + | cert.scep.timeout integer 30..3600 seconds SCEP request timeout | ||
| + | cert.scep.interval integer 10..120 seconds SCEP poll interval | ||
| + | cert.scep.idtype enum IP,DNS,EMAIL SCEP identifier type | ||
| + | cert.scep.phrase password SCEP password | ||
| + | cert.ignore integer 0 = disabled, 1 = enabled | ||
| + | |||
| + | #ACME | ||
| + | acme.0.status integer 0 = disable, 1 = enable | ||
| + | acme.0.domain | ||
| + | acme.0.testmode integer 0 = disabled, 1 = enabled | ||
| + | |||
| + | # modems | ||
| + | modem.x.status integer 0 = disabled, 1 = enabled modem administrative status | ||
| + | modem.x.trace.status integer 0 = disabled, 1 = enabled | ||
| + | modem.x.trace.adress address | ||
| + | modem.x.trace.targed address | ||
| + | modem.x.trace.netmask netmask | ||
| + | modem.x.trace.filesize | ||
| + | modem.x.trace.nr_files | ||
| + | modem.x.config.antennas | ||
| + | modem.x.config.idle_lte_attach integer | ||
| + | modem.x.config.silent_reset integer | ||
| + | modem.x.trace.urc.status integer | ||
| + | modem.x.query_interval.signal | ||
| + | modem.x.query_interval.operator | ||
| + | modem.x.config.silent_reset integer 0 = disabled, 1 = enabled send AT+CFUN=15 or not. (CME ERROR) | ||
| + | |||
| + | # SIM cards | ||
| + | sim.x.pincode integer 1..16 digits SIM PIN code | ||
| + | sim.x.pukcode integer 1..32 digits SIM PUK code | ||
| + | sim.x.lai integer 5..7 digits SIM LAI to specify carrier | ||
| + | sim.x.bands string comma-separated list of bands SIM bands to specify bands (e.g. gsm-b8, lte-b1) | ||
| + | sim.x.card integer x SIM default modem index | ||
| + | sim.x.pref enum automatic,2G-only,2G-first,2G3G-only, SIM preferred service | ||
| + | 3G-only,3G-first,4G-only,4G-first, | ||
| + | 3G/4G(UMTS/LTE) only | ||
| + | |||
| + | sim.x.regmode integer 0 = circuit-switched, SIM registration mode | ||
| + | 1 = packet-switched, | ||
| + | 2 = all networks | ||
| + | |||
| + | # Soft SIMs | ||
| + | ssim.x.id numeric string 15 digits Soft-SIM identifier | ||
| + | ssim.x.key hex regex A-F,a-f,0-9 Soft-SIM key | ||
| + | ssim.x.op hex regex A-F,a-f,0-9 Soft-SIM op | ||
| + | |||
| + | # WWAN Interfaces | ||
| + | wwan.x.status integer 0 = disabled, 1 = enabled WWAN interface administrative status | ||
| + | wwan.x.card integer WWAN interface modem index | ||
| + | wwan.x.sim integer WWAN interface SIM index | ||
| + | wwan.x.pdp integer 0 < pdp < maxpdp WWAN interface PDP index (maxpdp -> /tmp/status/wwanmd/cardx) | ||
| + | wwan.x.pref enum automatic, WWAN interface preferred service | ||
| + | 2G-only, | ||
| + | 2G-first, | ||
| + | 2G3G-only, | ||
| + | 3G-only, | ||
| + | 3G-first, | ||
| + | 4G-only, | ||
| + | 4G-first | ||
| + | |||
| + | wwan.x.autoconn integer (0 = disabled, 1 = enabled) | ||
| + | wwan.x.number phone-number allowed : 0-9,+,#,* WWAN interface phone number (e.g. *99***1#) | ||
| + | wwan.x.username string ApnUsername WWAN interface apnusername | ||
| + | wwan.x.password password ApnPassword WWAN interface apnpassword | ||
| + | wwan.x.apn string allowed a-z,A-Z,0-9,-,_ WWAN interface APN | ||
| + | |||
| + | wwan.x.auth integer 0 = none, 1 = PAP, WWAN interface authentication | ||
| + | 2 = CHAP, 3 = PAP+CHAP | ||
| + | wwan.x.hdrcomp integer 0 = disabled, 1 = enabled WWAN interface header compression | ||
| + | wwan.x.softcomp integer 0 = disabled, 1 = enabled WWAN interface data compression | ||
| + | wwan.x.address address standard Ip WWAN interface client address | ||
| + | wwan.x.isdn integer 0 = disabled, 1 = enabled WWAN interface ISDN call | ||
| + | wwan.x.negdns integer 0 = disabled, 1 = enabled WWAN interface negotiate DNS | ||
| + | wwan.x.minrssi integer -120..-50 dBm WWAN interface min. required RSSI value | ||
| + | wwan.x.minqual integer 0..100 percent WWAN interface min. required quality level | ||
| + | wwan.x.maxfail integer WWAN interface max. PPP connection attempts | ||
| + | wwan.x.homeonly integer 0 = roaming, 1 = home network only WWAN interface roaming | ||
| + | wwan.x.maxattempts | ||
| + | wwan.x.mtu integer WWAN interface max. transmission unit | ||
| + | wwan.x.protocoll_mode adresstype ipv4,ipv6,dual | ||
| + | |||
| + | # USB | ||
| + | usb.status integer 0 = disabled, 1 = enabled USB administrative status | ||
| + | usb.hotplug integer 0 = disabled, 1 = enabled USB hotplug administrative status | ||
| + | usb.x.enabled integer 0 = disabled, 1 = enabled USB port administrative status | ||
| + | autorun.status integer 0 = disabled, 1 = enabled USB Autorun administrative status | ||
| + | autorun.authdev integer 0 = disabled, 1 = enabled USB Autorun allow only enabled devices | ||
| + | autorun.password password | ||
| + | |||
| + | usb.devices.x.dev string <VID>:<PID> USB device identification | ||
| + | usb.devices.x.module enum usb-storage,pl2303,ch341,ftdi, USB device driver module | ||
| + | pegasus,asix,rndis,ax88179_178a,r8152 | ||
| + | usb.devices.x.busid string USB bus identifier (e.g. 1-1.2) | ||
| + | |||
| + | |||
| + | # Bridges | ||
| + | network.br.x.mode integer 0 = disabled, 1 = enabled, Bridge administrative status | ||
| + | |||
| + | 2 = enabled with local Interface | ||
| + | network.br.x.mtu integer Bridge max. transmission unit | ||
| + | network.br.x.address address Bridge network address | ||
| + | network.br.x.netmask address Bridge network netmask | ||
| + | network.br.x.gateway address Bridge network gateway | ||
| + | network.br.x.proxyarp integer 0 = disabled, 1 = enabled Bridge Proxy-ARP status | ||
| + | network.br.x.mac | ||
| + | network.br.x.stp | ||
| + | network.br.x.rstp | ||
| + | # Ethernet | ||
| + | network.link.x.mode integer 0 = auto-negotiated, Ethernet link mode | ||
| + | 1 = 10baseT/Half, | ||
| + | 2 = 10baseT/Full, | ||
| + | 3 = 100baseT/Half, | ||
| + | 4 = 100baseT/Full, | ||
| + | 5 = 1000baseT/Half, | ||
| + | 6 = 1000baseT/Full | ||
| + | |||
| + | # Ethernet Switch Ports | ||
| + | switch.port.x.status integer 0 = disabled, 1 = enabled Ethernet switch port administrative status | ||
| + | switch.port.x.interface integer Ethernet switch port LAN interface index | ||
| + | |||
| + | # Ethernet Ports | ||
| + | ethernet.port.x.status integer 0 = disabled, 1 = enabled Ethernet port administrative status | ||
| + | ethernet.port.x.interface integer Ethernet port LAN interface index | ||
| + | |||
| + | # Ethernet Briding | ||
| + | ethernet.bridge.firewall integer 0 = disabled, 1 = enabled Ethernet bridge firewall administrative status | ||
| + | ethernet.bridge.stp integer 0 = disabled, 1 = enabled Ethernet bridge STP | ||
| + | ethernet.bridge.rstp integer 0 = disabled, 1 = enabled Ethernet bride RSTP administrative status | ||
| + | |||
| + | #Serdes Configuration | ||
| + | ethernet.serdes integer | ||
| + | |||
| + | # WLAN | ||
| + | wlan.x.status integer 0 = disabled, 1 = enabled WLAN administrative status | ||
| + | wlan.x.mode enum client,access-point,dualmode,managed WLAN operational mode | ||
| + | wlan.x.diversity integer 0 = disabled, 1 = enabled WLAN antenna diversity | ||
| + | wlan.x.regdom string WLAN regulatory domain (e.g. DE, see /etc/tld) | ||
| + | wlan.x.antgain integer 0..10 dB WLAN antenna gain | ||
| + | wlan.x.txpower integer 20 dBm (max. EIRP) WLAN EIRP | ||
| + | wlan.x.settings.hwmode enum a,b,g,n,c WLAN operation type | ||
| + | wlan.x.settings.band enum 2.4,5 WLAN band | ||
| + | wlan.x.settings.channel integer WLAN channel (0 = auto) | ||
| + | wlan.x.settings.scanchannels | ||
| + | wlan.x.settings.bandwidth enum 20,40,80 WLAN bandwidth | ||
| + | wlan.x.settings.sgi | ||
| + | wlan.x.settings.outdoor | ||
| + | wlan.x.settings.sticky | ||
| + | wlan.x.settings.newbssidcalc | ||
| + | wlan.x.settings.tracking.status | ||
| + | wlan.x.settings.tracking.count | ||
| + | wlan.x.ac.0.host host WLAN primary access controller | ||
| + | wlan.x.ac.1.host host WLAN secondary access controller | ||
| + | wlan.o.swencrypt integer | ||
| + | |||
| + | # WLAN Clients | ||
| + | wlan.x.client.y.ssid string WLAN client SSID | ||
| + | wlan.x.client.y.secmode enum off,none,wep,wpa-psk, WLAN client security wpa-radius,wpa-eap-tls mode | ||
| + | wpa-radius,wpa-eap-tls | ||
| + | |||
| + | wlan.x.client.y.secproto enum wpa1,wpa2,wpa(1and2),wpa3,wpa(2and3) WLAN client WPA/WPA2 mixed mode/WPA3/WPA3 mixed mode | ||
| + | |||
| + | |||
| + | wlan.x.client.y.cipher enum tkip,ccmp,all WLAN client WPA cipher | ||
| + | wlan.x.client.y.sslciphers | ||
| + | wlan.x.client.y.psk password WLAN client passphrase | ||
| + | wlan.x.client.y.minrssi integer -100..-10 dBm WLAN client min. required RSSI value | ||
| + | wlan.x.client.y.minqual integer 0..100 percent WLAN client min. required quality level | ||
| + | wlan.x.client.y.id string WLAN client identity for EAP | ||
| + | wlan.x.client.y.prio integer 0..10 WLAN client priority | ||
| + | wlan.x.client.y.pmf integer 0 = disabled, 1 = enabled WLAN client PMF administrative status | ||
| + | wlan.x.client.y.tlsv | ||
| + | wlan.x.client.y.ft | ||
| + | wlan.x.client.y.scan.bg.threshold | ||
| + | wlan.x.client.y.scan.bg.longinterval | ||
| + | wlan.x.client.y.scan.bg.shortinterval | ||
| + | |||
| + | # WLAN Access Points | ||
| + | wlan.x.vss.y.status integer 0 = disabled, 1 = enabled WLAN VSS administrative status | ||
| + | wlan.x.vss.y.ssid string WLAN VSS SSID | ||
| + | wlan.x.vss.y.hidden integer 0 = disabled, 1 = enabled WLAN VSS hide SSID | ||
| + | wlan.x.vss.y.isolate integer 0 = disabled, 1 = enabled WLAN VSS isolate clients | ||
| + | wlan.x.vss.y.advertise integer 0 = disabled, 1 = enabled WLAN VSS advertise country code 802.1d | ||
| + | wlan.x.vss.y.inactivity integer 0..600 WLAN VSS max. station inactivity | ||
| + | wlan.x.vss.y.secmode enum off,none,wpa-psk,wpa-radius WLAN VSS security mode | ||
| + | wlan.x.vss.y.secproto enum wpa1,wpa2,wpa1andwpa2 WLAN VSS WPA/WPA2 mixed mode | ||
| + | wlan.x.vss.y.cipher enum tkip,ccmp,both WLAN VSS WPA cipher | ||
| + | wlan.x.vss.y.psk password WLAN VSS passphrase | ||
| + | wlan.x.vss.y.acct integer 0 = none, 1 = default, 2 = cisco WLAN VSS accounting | ||
| + | wlan.x.vss.y.pmf integer 0 = disabled, 1 = enabled WLAN VSS PMF administrative status | ||
| + | wlan.x.vss.y.addr4 integer 0 = disabled, 1 = enabled WLAN VSS 4addr frame administrative status | ||
| + | wlan.x.vss.y.iapp | ||
| + | wlan.x.vss.y.preauth | ||
| + | wlan.x.vss.y.fast.status | ||
| + | wlan.x.vss.y.fast.mobility | ||
| + | wlan.x.vss.y.fast.only | ||
| + | wlan.x.vss.y.fast.key | ||
| + | wlan.x.vss.y.bandsteering | ||
| + | wlan.x.vss.y.owe.transition | ||
| + | |||
| + | |||
| + | #Mesh | ||
| + | wlan.x.mesh.y.status integer | ||
| + | wlan.x.mesh.y.meshid | ||
| + | wlan.x.mesh.y.secmode | ||
| + | wlan.x.mesh.y.psk | ||
| + | wlan.x.mesh.y.pmf integer | ||
| + | wlan.x.mesh.y.gate integer | ||
| + | |||
| + | # Bluetooth | ||
| + | bluez.x.status integer 0 = disabled, 1 = enabled Bluetooth device administrative status | ||
| + | |||
| + | # CAN | ||
| + | can.x.status integer 0 = disabled, 1 = enabled CAN device administrative status | ||
| + | can.x.bitrate integer 10000..1000000 CAN device bitrate | ||
| + | can.x.termination integer | ||
| + | |||
| + | #CLI-PHP | ||
| + | cliphp.status integer | ||
| + | |||
| + | # VLAN | ||
| + | network.vlan.x.interface interface VLAN network interface (e.g. lan0) | ||
| + | network.vlan.x.mode enum routed,bridged VLAN network mode | ||
| + | network.vlan.x.index integer VLAN interface index | ||
| + | network.vlan.x.id integer 0..4094 VLAN ID | ||
| + | network.vlan.x.prio integer -1 = default, VLAN QoS priority | ||
| + | 0 = background, | ||
| + | 1 = best-effort, | ||
| + | 2 = excellent-effort, | ||
| + | 3 = critical-applications, | ||
| + | 4 = video, | ||
| + | 5 = voice, | ||
| + | 6 = internetwork-control, | ||
| + | 7 = network-control | ||
| + | network.vlan.x.brdev interface VLAN bridge interface (e.g. lan1) | ||
| + | |||
| + | # LAN Interfaces (IP) | ||
| + | network.lan.x.mode enum lan,wan LAN interface operational mode | ||
| + | network.lan.x.address address LAN interface address | ||
| + | network.lan.x.netmask address LAN interface netmask | ||
| + | network.lan.x.mtu integer LAN interface max. transmission unit | ||
| + | network.lan.x.alias.y.address address LAN interface alias address | ||
| + | network.lan.x.alias.y.netmask address LAN interface alias netmask | ||
| + | network.lan.x.proxyarp integer 0 = disabled, 1 = enabled LAN interface Proxy-ARP status | ||
| + | network.lan.mac | ||
| + | network.lan.stp | ||
| + | |||
| + | # WLAN Interfaces (IP) | ||
| + | network.wlan.x.mode enum routed,bridged WLAN interface network mode | ||
| + | network.wlan.x.mtu integer WLAN interface max. transmission unit | ||
| + | network.wlan.x.address address WLAN interface address | ||
| + | network.wlan.x.netmask address WLAN interface netmask | ||
| + | network.wlan.x.gateway address WLAN interface gateway | ||
| + | network.wlan.x.brdev interface WLAN interface bridge interface | ||
| + | network.wlan.x.proxyarp integer 0 = disabled, 1 = enabled WLAN interface Proxy-ARP status | ||
| + | |||
| + | # WAN Interfaces (IP) | ||
| + | network.wan.x.interface interface WAN interface | ||
| + | network.wan.x.mode enum dhcp,static,pppoe WAN interface operational mode | ||
| + | network.wan.x.address address WAN interface address (static) | ||
| + | network.wan.x.netmask address WAN interface netmask (static) | ||
| + | network.wan.x.gateway address WAN interface gateway (static) | ||
| + | network.wan.x.dns0 address WAN interface primary DNS server (static) | ||
| + | network.wan.x.dns1 address WAN interface secondary DNS server (static) | ||
| + | network.wan.x.mac adress | ||
| + | network.wan.x.username string WAN interface username (pppoe) | ||
| + | network.wan.x.password password WAN interface passworrd (pppoe) | ||
| + | network.wan.x.service string WAN interface service name (pppoe) | ||
| + | network.wan.x.ac string WAN interface access concentrator name (pppoe) | ||
| + | network.wan.x.ipv6.mode | ||
| + | network.wan.x.ipv6.adress | ||
| + | network.wan.x.ipv6.prefix_length | ||
| + | network.wan.x.mtu integer WAN interface max. transmission unit | ||
| + | |||
| + | # DNS | ||
| + | network.dns.status integer 0 = disabled, 1 = enabled DNS administrative status | ||
| + | network.dns.domain hostname DNS domain name | ||
| + | network.dns.server0 address DNS primary name server | ||
| + | network.dns.server1 address DNS secondary name server | ||
| + | |||
| + | # DNS Static Hosts | ||
| + | network.dns.hosts.0.name hostname DNS static host hostname | ||
| + | network.dns.hosts.0.address address DNS static host address | ||
| + | |||
| + | # DHCP | ||
| + | network.dhcp.x.mode integer 0 = disabled, 1 = server, 2 = relay DHCP operational mode | ||
| + | network.dhcp.x.start address DHCP first lease address | ||
| + | network.dhcp.x.end address DHCP last lease address | ||
| + | network.dhcp.x.ttl integer DHCP lease duration | ||
| + | network.dhcp.x.relay address DHCP primary relay address (relay) | ||
| + | network.dhcp.x.relay2 address DHCP secondary relay address (relay) | ||
| + | network.dhcp.x.perst integer 0 = disabled, 1 = enabled DHCP persistent leases | ||
| + | network.dhcp.x.ignore integer 0 = disabled, 1 = enabled DHCP only allow static hosts | ||
| + | network.dhcp.x.gateway address DHCP option gateway | ||
| + | network.dhcp.x.agent string DHCP option agent identifier | ||
| + | network.dhcp.x.dns0 address DHCP option primary DNS | ||
| + | network.dhcp.x.dns1 address DHCP option secondary DNS | ||
| + | network.dhcp.x.wins0 address DHCP option primary WINS | ||
| + | network.dhcp.x.wins1 address DHCP option secondary WINS | ||
| + | |||
| + | # DHCP Static Hosts | ||
| + | network.dhcp.hosts.x.interface interface DHCP static host interface (e.g. lan0) | ||
| + | network.dhcp.hosts.x.address address DHCP static host address | ||
| + | network.dhcp.hosts.x.mac mac DHCP static host MAC address | ||
| + | network.dhcp.hosts.x.port integer DHCP static host Ethernet port | ||
| + | network.dhcp.hosts.x.name hostname DHCP static host name | ||
| + | network.dhcp.x.options.y.key | ||
| + | network.dhcp.x.options.y.value | ||
| + | |||
| + | # NTP | ||
| + | network.ntp.status integer 0 = disabled, 1 = enabled NTP administrative status | ||
| + | network.ntp.server0 hostname NTP primary server | ||
| + | network.ntp.server1 hostname NTP secondary server | ||
| + | network.ntp.preferred integer | ||
| + | network.ntp.ping integer 0 = disabled, 1 = enabled NTP ping check | ||
| + | network.ntp.interval integer 64..4096 seconds NTP poll interval | ||
| + | network.ntp.gpstime integer 0 = disabled, 1 = enabled NTP GNSS time sync | ||
| + | network.ntp.stratum integer | ||
| + | network.ntp.maxdistance | ||
| + | network.ntp.access.x.address address NTP allowed hosts network | ||
| + | network.ntp.access.x.netmask address NTP allowed hosts netmask | ||
| + | |||
| + | # WAN links | ||
| + | wanlink.0.mode integer 0 = disabled, 1 = permanent, WAN link operational mode | ||
| + | 2 = on switchover, 3 = distributed | ||
| + | wanlink.0.multipath integer 0 = disabled, 1 = enabled, 2 = backup WAN link Multipath-TCP mode | ||
| + | wanlink.0.name string WAN link interface name | ||
| + | wanlink.0.prio integer WAN link priority | ||
| + | wanlink.0.weight integer 1..10 WAN link weight (distributed mode) | ||
| + | wanlink.0.switchback integer 60..3600 seconds WAN link switchback interval (on switchover mode) | ||
| + | wanlink.0.suspend integer 10..60 seconds WAN link suspend threshold | ||
| + | wanlink.0.options enum random-address WAN link use random MAC for DHCP request | ||
| + | wanlink.0.brdev interface WAN link bridge interface (e.g. lan0) | ||
| + | wanlink.x.threshold.dial | ||
| + | wanlink.0.passthru.interface interface WAN link IP-passthrough interface | ||
| + | wanlink.0.passthru.network address WAN link IP-passthrough network | ||
| + | wanlink.0.passthru.netmask address WAN link IP-passthrough netmask | ||
| + | |||
| + | # QoS | ||
| + | qos.status integer 0 = disabled, 1 = enabled QoS administrative status | ||
| + | |||
| + | qos.interface.x.name string lan(a),wwan(b) QoS interface name | ||
| + | qos.interface.x.cong enum fixed,auto QoS interface bandwith congestion mode | ||
| + | qos.interface.x.type integer 0 = WAN, 1 = LAN QoS interface type | ||
| + | qos.interface.x.uprate double 0 < upload < ... QoS interface upstream bandwidth | ||
| + | qos.interface.x.downrate double 0 < downrate < ... QoS interface downstream bandwidth | ||
| + | qos.interface.x.pingip.primary address standardIPv4 QoS interface primary ping address | ||
| + | qos.interface.x.pingip.secondary address standardIPv4 QoS interface secondary ping address | ||
| + | |||
| + | qos.queue.0.desc string default,high,low, nicht 0, QoS queue description | ||
| + | regex: 0-9,A-Z,a-z,_,-,+,whitespace | ||
| + | qos.queue.0.direction enum inbound,outbound QoS queue direction | ||
| + | qos.queue.0.limit double at least 1/40 of BW in Mbit/s QoS queue bandwidth limit | ||
| + | qos.queue.0.interface integer QoS queue interface index | ||
| + | qos.queue.0.prio integer 1..10 QoS queue priority | ||
| + | qos.queue.0.tos integer -1 = don not set, QoS queue TOS value | ||
| + | 0 = normal-service, | ||
| + | 2 = minimize-cost, | ||
| + | 4 = maximize-reliability, | ||
| + | 8 = maximize-throughput, | ||
| + | 16 = minimize-delay | ||
| + | |||
| + | qos.service.0.queue integer QoS service queue index | ||
| + | qos.service.0.saddress address QoS service source address | ||
| + | qos.service.0.snetmask address QoS service source netmask | ||
| + | qos.service.0.sport port QoS service source port | ||
| + | qos.service.0.daddress address QoS service destination address | ||
| + | qos.service.0.dnetmask address QoS service destination netmask | ||
| + | qos.service.0.dport port QoS service destination port | ||
| + | qos.service.0.proto enum ANY,UDP,TCP QoS service protocol | ||
| + | qos.service.0.tos integer -1 = unspecified, QoS service type of service | ||
| + | 0 = normal-service, | ||
| + | 2 = minimize-cost | ||
| + | 4 = maximize-reliability, | ||
| + | 8 = maximize-throughput, | ||
| + | 16 = minimize-delay | ||
| + | |||
| + | # Mobile IP | ||
| + | mobileip.x.status integer 0 = disabled, 1 = enabled MIP administrative status | ||
| + | mobileip.x.mode integer 0 = disabled, MIP operational mode | ||
| + | 1 = mobile-node, | ||
| + | 2 = home-agent | ||
| + | # Mobile IP (mobile-node) | ||
| + | mobileip.x.homeAgentAddress0 address MIP primary home agent address | ||
| + | mobileip.x.homeAgentAddress1 address MIP secondary home agent network | ||
| + | mobileip.x.homeAddress address MIP home address | ||
| + | mobileip.x.spi string 8-digit hex string MIP SPI | ||
| + | mobileip.x.sharedSecret password hex or ascii string MIP shared secret | ||
| + | mobileip.x.sharedSecretEncoding enum hex,ascii MIP shared secret encoding | ||
| + | mobileip.x.authenticationType enum prefix-suffix-md5,hmac-md5 MIP authentication type | ||
| + | mobileip.x.lifeTime integer 30..6535 seconds MIP life time | ||
| + | mobileip.x.mtu integer MIP interface max. transmission unit | ||
| + | mobileip.x.udpEncapsulation integer 0 = disabled, 1 = enabled MIP UDP encapsulation | ||
| + | mobileip.x.mobileNetworkAddress address MIP mobile network address | ||
| + | mobileip.x.mobileNetworkMask address MIP mobile network netmask | ||
| + | |||
| + | mobileip.registrationBaseTimeout integer MIP registration base timeout | ||
| + | mobileip.registrationRetriesPerHomeAgent integer MIP registration retries per agent | ||
| + | mobileip.connectivityLossRetryTimeout integer MIP connectivity loss retry timeout | ||
| + | mobileip.maxTimestampDelta integer MIP max. timestamp delta | ||
| + | mobileip.maxConsecutiveKeepaliveFailures integer MIP max. keepalive failures | ||
| + | mobileip.minimalisticKeepalive integer MIP minimalistic keepalive | ||
| + | |||
| + | # Mobile IP (home-agent) | ||
| + | mobileip.x.homeNetworkAddress address MIP home network address | ||
| + | mobileip.x.homeNetworkMask address MIP home network mask | ||
| + | |||
| + | mobileip.x.node.y.spi integer 8-digit hex string MIP node SPI | ||
| + | mobileip.x.node.y.sharedSecret password hex or ascii string MIP node shared secret | ||
| + | mobileip.x.node.y.sharedSecretEncoding enum hex,ascii MIP node shared secret encoding | ||
| + | mobileip.x.node.y.authenticationType enum prefix-suffix-md5,hmac-md5 MIP node authentication type | ||
| + | |||
| + | |||
| + | # OpenVPN | ||
| + | openvpn.status integer 0 = disabled, 1 = enabled OpenVPN administrative status | ||
| + | openvpn.restartonlinkchange integer 0 = disabled, 1 = enabled OpenVPN restart on link change | ||
| + | openvpn.mptcp.status integer 0 = disabled, 1 = enabled OpenVPN Multipath-TCP support | ||
| + | |||
| + | openvpn.tunnel.x.mode integer 0 = disabled, OpenVPN tunnel operational mode | ||
| + | 1 = client (standard), | ||
| + | 2 = server (standard), | ||
| + | 3 = client (expert), | ||
| + | 4 = server (expert) | ||
| + | |||
| + | openvpn.tunnel.x.peermode enum single,failover,random OpenVPN tunnel peer selection mode | ||
| + | openvpn.tunnel.x.server host OpenVPN tunnel primary server | ||
| + | openvpn.tunnel.x.port port OpenVPN tunnel primary server port | ||
| + | openvpn.tunnel.x.server2 host OpenVPN tunnel secondary server | ||
| + | openvpn.tunnel.x.port2 port OpenVPN tunnel secondary server port | ||
| + | openvpn.tunnel.x.auth integer 0 = certificate-based, OpenVPN tunnel authentication | ||
| + | 1 = credential-based, | ||
| + | 2 = none, | ||
| + | 3 = both | ||
| + | openvpn.tunnel.x.type enum tun,tap OpenVPN tunnel interface type | ||
| + | openvpn.tunnel.x.proto enum udp,tcp OpenVPN tunnel protocol | ||
| + | openvpn.tunnel.x.comp integer 0 = disabled, 1 = enabled OpenVPN tunnel compression | ||
| + | openvpn.tunnel.x.username string OpenVPN tunnel username | ||
| + | openvpn.tunnel.x.password password OpenVPN tunnel password | ||
| + | openvpn.tunnel.x.brdev interface OpenVPN tunnel bridge interface (e.g. lan0) | ||
| + | openvpn.tunnel.x.cipher string <empty> = automatic, OpenVPN tunnel cipher algorithm | ||
| + | none = none, | ||
| + | AES-128-CBC, | ||
| + | AES-128-CFB, | ||
| + | AES-128-CFB1, | ||
| + | AES-128-CFB8, | ||
| + | AES-128-GCM, | ||
| + | AES-128-OFB, | ||
| + | AES-192-CBC, | ||
| + | AES-192-CFB, | ||
| + | AES-192-CFB1, | ||
| + | AES-192-CFB8, | ||
| + | AES-192-GCM, | ||
| + | AES-192-OFB, | ||
| + | AES-256-CBC, | ||
| + | AES-256-CFB, | ||
| + | AES-256-CFB1, | ||
| + | AES-256-CFB8, | ||
| + | AES-256-GCM, | ||
| + | AES-256-OFB, | ||
| + | ARIA-128-CBC, | ||
| + | ARIA-128-CFB, | ||
| + | ARIA-128-CFB1, | ||
| + | ARIA-128-CFB8, | ||
| + | ARIA-128-GCM, | ||
| + | ARIA-128-OFB, | ||
| + | ARIA-192-CBC, | ||
| + | ARIA-192-CFB, | ||
| + | ARIA-192-CFB1, | ||
| + | ARIA-192-CFB8, | ||
| + | ARIA-192-GCM, | ||
| + | ARIA-192-OFB, | ||
| + | ARIA-256-CBC, | ||
| + | ARIA-256-CFB, | ||
| + | ARIA-256-CFB1, | ||
| + | ARIA-256-CFB8, | ||
| + | ARIA-256-GCM, | ||
| + | ARIA-256-OFB, | ||
| + | CAMELLIA-128-CBC, | ||
| + | CAMELLIA-128-CFB, | ||
| + | CAMELLIA-128-CFB1, | ||
| + | CAMELLIA-128-CFB8, | ||
| + | CAMELLIA-128-OFB, | ||
| + | CAMELLIA-192-CBC, | ||
| + | CAMELLIA-192-CFB, | ||
| + | CAMELLIA-192-CFB1, | ||
| + | CAMELLIA-192-CFB8, | ||
| + | CAMELLIA-192-OFB, | ||
| + | CAMELLIA-256-CBC, | ||
| + | CAMELLIA-256-CFB, | ||
| + | CAMELLIA-256-CFB1, | ||
| + | CAMELLIA-256-CFB8, | ||
| + | CAMELLIA-256-OFB, | ||
| + | SEED-CBC, | ||
| + | SEED-CFB, | ||
| + | SEED-OFB, | ||
| + | SM4-CBC, | ||
| + | SM4-CFB, | ||
| + | SM4-OFB, | ||
| + | BF-CBC, | ||
| + | BF-CFB, | ||
| + | BF-OFB, | ||
| + | CAST5-CBC, | ||
| + | CAST5-CFB, | ||
| + | CAST5-OFB, | ||
| + | DES-CBC, | ||
| + | DES-CFB, | ||
| + | DES-CFB1, | ||
| + | DES-CFB8, | ||
| + | DES-EDE-CBC, | ||
| + | DES-EDE-CFB, | ||
| + | DES-EDE-OFB, | ||
| + | DES-EDE3-CBC, | ||
| + | DES-EDE3-CFB, | ||
| + | DES-EDE3-CFB1, | ||
| + | DES-EDE3-CFB8, | ||
| + | DES-EDE3-OFB, | ||
| + | DES-OFB, | ||
| + | DESX-CBC, | ||
| + | IDEA-CBC, | ||
| + | IDEA-CFB, | ||
| + | IDEA-OFB, | ||
| + | RC2-40-CBC, | ||
| + | RC2-64-CBC, | ||
| + | RC2-CBC, | ||
| + | RC2-CFB, | ||
| + | RC2-OFB | ||
| + | |||
| + | openvpn.tunnel.x.digest string none, OpenVPN tunnel HMAC digest | ||
| + | MD5, | ||
| + | RSA-MD5, | ||
| + | SHA1, | ||
| + | RSA-SHA1, | ||
| + | MDC2, | ||
| + | RSA-MDC2, | ||
| + | MD5-Sha1, | ||
| + | RSA-SHA1-2, | ||
| + | RIPEMD160, | ||
| + | RSA-RIPEMD160, | ||
| + | MD4, | ||
| + | RSA-MD4, | ||
| + | ecdsa-with-SHA1, | ||
| + | RSA-SHA256, | ||
| + | RSA-SHA384, | ||
| + | RSA-SHA512, | ||
| + | RSA-SHA224, | ||
| + | SHA256, | ||
| + | SHA384, | ||
| + | SHA512, | ||
| + | SHA224, | ||
| + | whirlpool, | ||
| + | BLAKE2B512, | ||
| + | BLAKE2S256, | ||
| + | SHA512-224, | ||
| + | SHA512-256, | ||
| + | SHA3-224, | ||
| + | SHA3-256, | ||
| + | SHA3-384, | ||
| + | SHA3-512, | ||
| + | SHAKE128, | ||
| + | SHAKE256, | ||
| + | ID-RSASSA-PKCS1-V1_5-WITH-SHA3-244, | ||
| + | ID-RSASSA-PKCS1-V1_5-WITH-SHA3-256, | ||
| + | ID-RSASSA-PKCS1-V1_5-WITH-SHA3-384, | ||
| + | ID-RSASSA-PKCS1-V1_5-WITH-SHA3-512, | ||
| + | SM3, | ||
| + | RSA-SM3, | ||
| + | RSA-SHA512/224, | ||
| + | RSA-SHA512/256 | ||
| + | |||
| + | openvpn.tunnel.x.keepalive integer 0 = disabled, 1 = enabled OpenVPN tunnel keepalive status | ||
| + | openvpn.tunnel.x.redirgw integer 0 = disabled, 1 = enabled OpenVPN tunnel redirect gateway status | ||
| + | openvpn.tunnel.x.negdns integer 0 = disabled, 1 = enabled OpenVPN tunnel negotiate DNS status | ||
| + | openvpn.tunnel.x.usecrl integer 0 = disabled, 1 = enabled OpenVPN tunnel use CRL to verify certificates | ||
| + | openvpn.tunnel.x.fragment integer OpenVPN tunnel max. fragment size for UDP datagrams | ||
| + | openvpn.tunnel.x.mtu integer OpenVPN tunnel max. transmission unit | ||
| + | openvpn.tunnel.x.duplicates enum allow,disconnect OpenVPN tunnel duplicates handling | ||
| + | openvpn.tunnel.x.serverpushed integer | ||
| + | |||
| + | #OpenVPN routes | ||
| + | openvpn.server.network.address address OpenVPN server transport network | ||
| + | openvpn.server.network.netmask address OpenVPN server transport netmask | ||
| + | openvpn.server.route.allclients integer 0 = disabled, 1 = enabled OpenVPN server routing between clients | ||
| + | openvpn.server.route.x.network address OpenVPN server network address | ||
| + | openvpn.server.route.x.netmask address OpenVPN server network netmask | ||
| + | |||
| + | openvpn.server.client.x.status integer 0 = disabled, 1 = enabled OpenVPN client administrative status | ||
| + | openvpn.server.client.x.desc string OpenVPN client description | ||
| + | openvpn.server.client.x.address address OpenVPN client address | ||
| + | |||
| + | openvpn.server.client.network.x.client integer OpenVPN client network client index | ||
| + | openvpn.server.client.network.x.network address OpenVPN client network address | ||
| + | openvpn.server.client.network.x.netmask address OpenVPN client network netmask | ||
| + | |||
| + | # IPsec | ||
| + | ipsec.status integer 0 = disabled, 1 = enabled IPsec administrative status | ||
| + | ipsec.ike.nattraversal integer 0 = disabled, 1 = enabled IPsec propose NAT traversal | ||
| + | ipsec.makebeforebreak integer 0 = disable, 1 = enable IPsec Reauthentication method | ||
| + | ipsec.restartonlinkchange integer 0 = disabled, 1 = enabled IPsec restart on link change | ||
| + | |||
| + | ipsec.0.status integer 0 = disabled, 1 = enabled | ||
| + | ipsec.0.crlfetcher.enable integer 0 = disable, 1 = enable IPsec config mode | ||
| + | ipsec.0.local.ip address IPsec tunnel local | ||
| + | ipsec.x.remote.serverIp host IPsec tunnel remote peer address | ||
| + | ipsec.x.mode enum tunnel,transport IPsec tunnel encapsulation mode | ||
| + | ipsec.x.ike.auth enum psk = pre-shared key, IPsec tunnel authentication type | ||
| + | pki = public key infrastructure, | ||
| + | xauth = extended authentication | ||
| + | ipsec.x.ike.psk password IPsec tunnel pre-shared key | ||
| + | ipsec.x.ike.keyexchange enum ikev1,ikev2 IPsec tunnel key exchange | ||
| + | ipsec.x.ike.username string regex: a-z, A-Z, 0-9, -,_,+ IPsec tunnel user name | ||
| + | ipsec.x.ike.userpass password Passwd IPsec tunnel user password | ||
| + | ipsec.x.ike.groupname string regex: a-z, A-Z, 0-9, -,_,+ IPsec tunnel group name | ||
| + | ipsec.x.ike.grouppass password Passwd IPsec tunnel group password | ||
| + | ipsec.x.ike.mode enum aggressive,identity-protection IPsec tunnel IKE negotiation mode | ||
| + | ipsec.x.ike.encryption enum 3des, IPsec tunnel IKE encryption algorithm | ||
| + | aes128, | ||
| + | aes192, | ||
| + | selected>aes256, | ||
| + | blowfish128, | ||
| + | blowfish192, | ||
| + | blowfish256, | ||
| + | aescmac, | ||
| + | aes128ctr, | ||
| + | aes192ctr, | ||
| + | aes256ctr, | ||
| + | aes128gcm12, | ||
| + | aes192gcm12, | ||
| + | aes256gcm12, | ||
| + | aes128gcm16, | ||
| + | aes192gcm16, | ||
| + | aes256gcm16, | ||
| + | aes128gcm64, | ||
| + | aes192gcm64, | ||
| + | aes256gcm64, | ||
| + | aes128gcm96, | ||
| + | aes192gcm96, | ||
| + | aes256gcm96, | ||
| + | aes128gcm128, | ||
| + | aes192gcm128, | ||
| + | aes256gcm128, | ||
| + | |||
| + | ipsec.x.ike.hash enum md5,sha1,sha256,sha384,sha512,aesxcbc IPsec tunnel IKE authentication algorithm | ||
| + | ipsec.x.ike.dh enum modp1024, IPsec tunnel IKE Diffie-Hellman group | ||
| + | modp1536, | ||
| + | modp2048, | ||
| + | modp3072, | ||
| + | modp4096, | ||
| + | modp6144, | ||
| + | modp8192, | ||
| + | ecp256, | ||
| + | ecp384, | ||
| + | ecp521, | ||
| + | modp2048s256, | ||
| + | ecp256bp, | ||
| + | ecp384bp, | ||
| + | ecp512bp, | ||
| + | |||
| + | ipsec.x.ike.localId string localIPtype=IP: IP format IPsec tunnel IKE local ID type | ||
| + | localIPtype=USER_FQDN: user@fqdn format | ||
| + | localIPtype=else : passwd format | ||
| + | |||
| + | ipsec.x.ike.localIdType enum IP,FQDN,USER_FQDN IPsec tunnel IKE local ID | ||
| + | ipsec.x.ike.remoteId string remoteIPtype=IP: IP format IPsec tunnel IKE remote ID type | ||
| + | remoteIPtype=USER_FQDN: user@fqdn format | ||
| + | remoteIPtype=else : passwd format | ||
| + | ipsec.x.ike.remoteIdType enum IP,FQDN,USER_FQDN IPsec tunnel IKE remote ID | ||
| + | ipsec.x.ike.lifetime integer 60..172800 seconds IPsec tunnel IKE lifetime | ||
| + | ipsec.x.ike.prf enum md5,sha1,sha256,sha384,sha512, IPsec tunnel IKE pseudo-random function | ||
| + | aesxcbc,aescmac | ||
| + | ipsec.x.esp.encryption enum 3des, IPsec tunnel ESP encryption | ||
| + | aes128, | ||
| + | aes192, | ||
| + | aes256, | ||
| + | blowfish128, | ||
| + | blowfish192, | ||
| + | blowfish256, | ||
| + | aescmac, | ||
| + | aes128ctr, | ||
| + | aes192ctr, | ||
| + | aes256ctr, | ||
| + | aes128gcm12, | ||
| + | aes192gcm12, | ||
| + | aes256gcm12, | ||
| + | aes128gcm16, | ||
| + | aes192gcm16, | ||
| + | aes256gcm16, | ||
| + | aes128gcm64, | ||
| + | aes192gcm64, | ||
| + | aes256gcm64, | ||
| + | aes128gcm96, | ||
| + | aes192gcm96, | ||
| + | aes256gcm96, | ||
| + | aes128gcm128, | ||
| + | aes192gcm128, | ||
| + | aes256gcm128, | ||
| + | |||
| + | ipsec.x.esp.hash enum md5,sha1,sha256,sha384,sha512,aesxcbc IPsec tunnel ESP autentication algorithm | ||
| + | ipsec.x.esp.lifetime enum 60..57600 seconds IPsec tunnel ESP lifetime | ||
| + | ipsec.x.esp.pfs integer 0 = disabled, 1 = enabled IPsec tunnel PFS status | ||
| + | ipsec.x.esp.pfsgroup enum <empty> = use from phase1, IPsec tunnel PFS group | ||
| + | modp1024, | ||
| + | modp1536, | ||
| + | modp2048, | ||
| + | modp3072, | ||
| + | modp4096, | ||
| + | modp6144, | ||
| + | modp8192, | ||
| + | modp1024s160, | ||
| + | modp2048s224, | ||
| + | modp2048s256, | ||
| + | ecp192, | ||
| + | ecp224, | ||
| + | ecp256, | ||
| + | ecp384, | ||
| + | ecp521, | ||
| + | ecp224bp, | ||
| + | ecp256bp, | ||
| + | ecp384bp, | ||
| + | ecp512bp | ||
| + | ipsec.x.esp.forceencaps integer 0 = disabled, 1 = enabled IPsec tunnel force encapsulation | ||
| + | ipsec.x.dpd.status integer 0 = disabled, 1 = enabled IPsec tunnel DPD status | ||
| + | ipsec.x.dpd.cycle integer 1..60 seconds IPsec tunnel DPD detection cycle | ||
| + | ipsec.x.dpd.failure integer 1..20 times IPsec tunnel DPD failure threshold | ||
| + | ipsec.x.dpd.action enum hold,restart,clear IPsec tunnel DPD action | ||
| + | |||
| + | ipsec.x.local.y.lanAddress address IPsec tunnel network local address | ||
| + | ipsec.x.local.y.lanMask address IPsec tunnel network local netmask | ||
| + | ipsec.x.local.y.natAddress address IPsec tunnel network local NAT address | ||
| + | ipsec.x.remote.y.lanAddress address IPsec tunnel network remote address | ||
| + | ipsec.x.remote.y.lanMask address IPsec tunnel network remote netmask | ||
| + | |||
| + | ipsec.server.client.x.status integer 0 = disabled, 1 = enabled IPsec server client administrative status | ||
| + | ipsec.server.client.x.desc string IPsec server client description | ||
| + | |||
| + | # GRE | ||
| + | gre.status integer 0 = disabled, 1 = enabled GRE administrative status | ||
| + | |||
| + | gre.tunnel.x.mode integer 0 = disabled, 1 = enabled GRE tunnel administrative status | ||
| + | gre.tunnel.x.type enum tun,tap GRE tunnel interface type | ||
| + | gre.tunnel.x.peer address GRE tunnel peer address | ||
| + | gre.tunnel.x.local.address address GRE tunnel local address | ||
| + | gre.tunnel.x.local.netmask address GRE tunnel local netmask | ||
| + | gre.tunnel.x.remote.network address GRE tunnel remote network address | ||
| + | gre.tunnel.x.remote.netmask address GRE tunnel remote network netmask | ||
| + | gre.tunnel.x.brdev interface GRE tunnel bridge interface (e.g. lan0) | ||
| + | gre.tunnel.x.key integer range 0...2147483647 GRE tunnel key | ||
| + | |||
| + | |||
| + | # PPTP | ||
| + | pptp.status integer 0 = disabled, 1 = enabled PPTP administrative status | ||
| + | |||
| + | pptp.server.listen address PTPP server listen address | ||
| + | pptp.server.address address PPTP server address | ||
| + | pptp.server.start address PPTP server first client address | ||
| + | pptp.server.end address PPTP server last client address | ||
| + | pptp.server.client.x.username string not allowed &,"",$,'' PPTP server client username | ||
| + | pptp.server.client.x.password password not allowed &,"",$,'' PPTP server client password | ||
| + | username and password must not contain apostrophes and double apostrophes (also not empty) | ||
| + | |||
| + | pptp.server.client.x.address address PPTP server client address | ||
| + | |||
| + | pptp.tunnel.x.mode integer 0 = disabled, 1 = client, 2 = server PPTP tunnel operational mode | ||
| + | pptp.tunnel.x.address address PPTP tunnel server address | ||
| + | pptp.tunnel.x.username string tunnel.x.mode=1: client username PPTP tunnel username | ||
| + | tunnel.x.mode=2: no username | ||
| + | pptp.tunnel.x.password password tunnel.x.mode=1: client password PPTP tunnel password | ||
| + | tunnel.x.mode=2: no password | ||
| + | #VLAN | ||
| + | vxlan.x.status | ||
| + | vxlan.x.id | ||
| + | vxlan.x.remote | ||
| + | vxlan.x.dport | ||
| + | vxlan.x.local | ||
| + | vxlan.x.brdev | ||
| + | |||
| + | #L2TP | ||
| + | l2tp.tunnel.x.status integer disabled = 0, enabled = 1 | ||
| + | l2tp.tunnel.x.encap protocol IP, UDP Transport Protocol | ||
| + | l2tp.tunnel.x.local.local.address address IP im Standardformat | ||
| + | l2tp.tunnel.x.local.local.tunid integer 0...4294967295 | ||
| + | l2tp.tunnel.x.local.local.sessionid integer 0...4294967295 | ||
| + | l2tp.tunnel.x.local.udp_port integer 1...65535 | ||
| + | l2tp.tunnel.x.local.cookie hex länge nicht 0,8,16 | ||
| + | l2tp.tunnel.x.remote.address address IP im Standardformat | ||
| + | l2tp.tunnel.x.remote.tunid integer 0...4294967295 | ||
| + | l2tp.tunnel.x.remote.sessionid integer 0...4294967295 | ||
| + | l2tp.tunnel.x.remote.udp_port integer 1...65535 | ||
| + | l2tp.tunnel.x.remote.cookie hex länge nicht 0,8,16 | ||
| + | l2tp.tunnel.x.brdev enum LANx,LANx-y | ||
| + | l2tp.tunnel.x.mtu integer 1...9000 | ||
| + | |||
| + | # Dial-In | ||
| + | dialin.status integer 0 = disabled, 1 = enabled Dial-In administrative status | ||
| + | dialin.device interface Dial-In modem (e.g. wwan0) | ||
| + | dialin.address.start address Dial-In address range start | ||
| + | dialin.address.size integer Dial-In address range size | ||
| + | |||
| + | # Firewall | ||
| + | firewall.status integer 0 = disabled, 1 = enabled Firewall administrative status | ||
| + | |||
| + | firewall.group.x.desc string Firewall group description | ||
| + | firewall.group.x.addr.y.address address Firewall group address | ||
| + | firewall.group.x.addr.y.netmask address Firewall group netmask | ||
| + | firewall.group.x.port.y.port port Firewall group port | ||
| + | |||
| + | firewall.rule.x.mode integer 0 = disabled, 1 = deny, 2 = allow Firewall rule mode | ||
| + | firewall.rule.x.log integer 0 = disabled, 1 = enabled Firewall rule logging | ||
| + | firewall.rule.x.desc string Firewall rule description | ||
| + | firewall.rule.x.interface interface Firewall rule incoming interface | ||
| + | firewall.rule.x.source address Firewall rule source address | ||
| + | firewall.rule.x.netmask address Firewall rule source netmask | ||
| + | firewall.rule.x.protocol integer 0 = ANY, 1 = UDP, 2 = TCP, 3 = ICMP, Firewall rule protocol | ||
| + | 4 = ESP, 5 = GRE, 6 = OSPF | ||
| + | firewall.rule.x.startPort port Firewall rule first port | ||
| + | firewall.rule.x.endPort port Firewall rule last port | ||
| + | firewall.rule.x.tinterface interface Firewall rule outgoing interface | ||
| + | firewall.rule.x.target address Firewall rule destination address | ||
| + | firewall.rule.x.tnetmask address Firewall rule destination netmask | ||
| + | firewall.rule.x.mac mac Firewall rule source MAC address | ||
| + | |||
| + | # NAPT | ||
| + | napt.x.interface interface NAPT masquerading interface | ||
| + | napt.x.intHost address NAPT masquerading source address | ||
| + | napt.x.intMask address NAPT masquerading source netmask | ||
| + | |||
| + | napt.conntrack.udp.timeout integer | ||
| + | napt.conntrack.udp.streamtimeout integer | ||
| + | |||
| + | # NAPT Inbound Rule | ||
| + | napt.rule.x.status integer 0 = disabled, 1 = enabled NAPT rule administrative status | ||
| + | napt.rule.x.desc string NAPT rule description | ||
| + | |||
| + | napt.rule.x.direction enum IN NAPT rule direction (inbound) | ||
| + | napt.rule.x.extHost address NAPT rule target address | ||
| + | napt.rule.x.extMask address NAPT rule target netmask | ||
| + | napt.rule.x.extInterface interface NAPT rule incoming interface | ||
| + | napt.rule.x.extPort.start port NAPT rule first port | ||
| + | napt.rule.x.extPort.end port NAPT rule last port | ||
| + | napt.rule.x.protocol integer 0 = ANY, 1 = UDP, 2 = TCP, NAPT rule protocol | ||
| + | x 3 = ESP, 4 = GRE | ||
| + | napt.rule.x.remNetwork address NAPT rule source address | ||
| + | napt.rule.x.remNetmask address NAPT rule source netmask | ||
| + | napt.rule.x.intHost address NAPT rule redirect address | ||
| + | napt.rule.x.intMask address NAPT rule redirect netmask | ||
| + | napt.rule.x.intPort port NAPT rule redirect port | ||
| + | napt.rule.x.srcPort.start | ||
| + | napt.rule.x.srcPort.end | ||
| + | napt.rule.x.dstPort.start | ||
| + | napt.rule.x.dstPort.end | ||
| + | |||
| + | # NAPT Outbound Rule | ||
| + | napt.rule.y.status integer 0 = disabled, 1 = enabled NAPT rule administrative status | ||
| + | napt.rule.y.desc string NAPT rule description | ||
| + | |||
| + | napt.rule.y.direction enum OUT NAPT rule direction (outbound) | ||
| + | napt.rule.y.extHost address NAPT rule source address | ||
| + | napt.rule.y.extMask address NAPT rule source netmask | ||
| + | napt.rule.y.extInterface interface NAPT rule outgoing interface | ||
| + | napt.rule.y.extPort.start port NAPT rule first port | ||
| + | napt.rule.y.extPort.end port NAPT rule last port | ||
| + | napt.rule.y.protocol integer 0 = ANY, 1 = UDP, 2 = TCP, NAPT rule protocol | ||
| + | 3 = ESP, 4 = GRE | ||
| + | napt.rule.y.remNetwork address NAPT rule target address | ||
| + | napt.rule.y.remNetmask address NAPT rule target netmask | ||
| + | napt.rule.y.intHost address NAPT rule rewrite address | ||
| + | napt.rule.y.intMask address NAPT rule rewrite netmask | ||
| + | napt.rule.y.intPort port NAPT rule rewrite port | ||
| + | |||
| + | # DynDNS | ||
| + | ddns.status integer 0 = disabled, 1 = enabled DynDNS administrative status | ||
| + | |||
| + | ddns.service.x.provider enum dyndns.org, DynDNS service provider | ||
| + | changeip.com, | ||
| + | duckdns.org, | ||
| + | no-ip.com, | ||
| + | zoneedit.com, | ||
| + | afraid.org, | ||
| + | selfhost.de, | ||
| + | easydns.com, | ||
| + | namecheap.com, | ||
| + | 3322.org, | ||
| + | ovh.com, | ||
| + | dnsexit.com, | ||
| + | dnsdynamic.org, | ||
| + | dnsomatic.com, | ||
| + | he.net, | ||
| + | dnsmax.com, | ||
| + | gnudip, | ||
| + | rfc2136, | ||
| + | router, | ||
| + | custom | ||
| + | ddns.service.x.source enum wan = derive from hotlink, DynDNS service dynamic address | ||
| + | ifc = use outgoing interface address, | ||
| + | auto = query CheckIP service | ||
| + | ddns.service.x.address address DynDNS service NM server address | ||
| + | ddns.service.x.port port DynDNS service NM server port | ||
| + | ddns.service.x.hostname hostname DynDNS service hostname | ||
| + | ddns.service.x.username string DynDNS service username | ||
| + | ddns.service.x.password password DynDNS service password | ||
| + | ddns.service.x.proto enum http,https DynDNS service protocol | ||
| + | ddns.service.x.url string DynDNS service custom URL | ||
| + | ddns.service.x.keyname string DynDNS service rfc2136 TSIG key name | ||
| + | ddns.service.x.key password DynDNS service rfc2135 TSIK key | ||
| + | |||
| + | ddns.server.status integer 0 = disabled, 1 = enabled DynDNS server administrative status | ||
| + | |||
| + | # WAN Supervision | ||
| + | surveyor.ping.status integer 0 = disabled, 1 = enabled Supervision administrative status | ||
| + | surveyor.ping.x.wanlink string Supervision WAN link name | ||
| + | surveyor.ping.x.mode integer 1 = also validate when link comes up, Supervision ping mode | ||
| + | 2 = only validate if link is up | ||
| + | surveyor.ping.x.primary address Supervision primary ping address | ||
| + | surveyor.ping.x.secondary address Supervision secondary ping address | ||
| + | surveyor.ping.x.interval integer 3..3600 seconds Supervision ping interval | ||
| + | surveyor.ping.x.retry integer 3..3600 seconds Supervision retry ping interval (if failed) | ||
| + | surveyor.ping.x.timeout integer 500.30000 seconds Supervision ping timeout | ||
| + | surveyor.ping.x.maxfailures integer 3..20 times Supervision max. number of failures | ||
| + | surveyor.ping.x.maxdowntime integer 3..60 minutes Supervision max. downtime | ||
| + | surveyor.ping.x.action enum restart,reboot Supervision action | ||
| + | |||
| + | # GNSS Supervision | ||
| + | surveyor.gnss.status integer 0 = disabled, 1 = enabled Supervision administrative status | ||
| + | surveyor.gnss.mode integer 0 = disabled, Supervision operational mode | ||
| + | 1 = validate NMEA stream, | ||
| + | 2 = validate GPS fix | ||
| + | surveyor.gnss.maxdowntime integer 3..3600 seconds Supervision max. downtime | ||
| + | surveyor.gnss.action enum restart,reset Supervision action | ||
| + | surveyor.gnss.maxflaps integer 1..100 times Supervision max. number of flaps per 5min | ||
| + | |||
| + | # Ignition supervision | ||
| + | surveyor.ignition.status integer 0 = disabled, 1 = enabled Supervision administrative status | ||
| + | surveyor.ignition.hold integer 0..3600 seconds Supervision ignition hold time | ||
| + | surveyor.ignition.shutdown integer | ||
| + | |||
| + | # Voice | ||
| + | voice.status integer 0 = disabled, 1 = enabled Voice administrative status | ||
| + | voice.routing enum generic,sdk Voice call routing mechanism | ||
| + | |||
| + | voice.sip.status integer 0 = disabled, 1 = enabled Voice SIP adminstrative status | ||
| + | voice.sip.interface interface Voice SIP interface | ||
| + | voice.sip.port port Voice SIP port | ||
| + | voice.sip.expires integer 60..3600 seconds Voice SIP registration expiry time | ||
| + | voice.fxs.status integer | ||
| + | voice.fxs.pass | ||
| + | |||
| + | voice.endpoint.x.type enum vom = Voice-over-Mobile, Voice endpoint type | ||
| + | sip = SIP (registrar), | ||
| + | directsip = SIP (direct), | ||
| + | useragentsip = SIP (user-agent), | ||
| + | aud = Audio, | ||
| + | nil = Nil-Device | ||
| + | voice.endpoint.x.desc string Voice endpoint description | ||
| + | voice.endpoint.x.device interface Voice endpoint modem (e.g. wwan0) | ||
| + | voice.endpoint.x.profile enum handset,headset,speakerphone, Voice endpoint audio profile | ||
| + | x bluetooth,carkit | ||
| + | voice.endpoint.x.volume integer 0..9 Voice endpoint volume level | ||
| + | voice.endpoint.x.host address Voice endpoint SIP host | ||
| + | voice.endpoint.x.port port Voice endpoint SIP port | ||
| + | voice.endpoint.x.domain string Voice endpoint SIP domain | ||
| + | voice.endpoint.x.subscriber string Voice endpoint SIP subscriber | ||
| + | voice.endpoint.x.username string Voice endpoint SIP username | ||
| + | voice.endpoint.x.password password Voice endpoint SIP password | ||
| + | voice.endpoint.x.options enum auto-accept Voice endpoint options | ||
| + | |||
| + | voice.endpoint.x.register.enabled integer 0 = disabled, 1 = enabled Voice endpoint SIP registration enabled | ||
| + | voice.endpoint.x.register.subscriber string Voice endpoint SIP registration subscriber | ||
| + | voice.endpoint.x.register.expires integer 60..3600 seconds Voice endpoint SIP registration expiry time | ||
| + | |||
| + | voice.route.x.mode integer 0 = DROP, 1 = ROUTE Voice route operational mode | ||
| + | voice.route.x.source phone-number Voice route calling number | ||
| + | voice.route.x.dest phone-number Voice route called number | ||
| + | |||
| + | # SNMP | ||
| + | snmp.status integer 0 = disabled, 1 = enabled SNMP administrative status | ||
| + | snmp.mode integer 0 = all, 1 = v3-only SNMP operational mode | ||
| + | snmp.engine.id hex 12 < id(Zeichen) < 64 SNMP engineID | ||
| + | snmp.port port between 1 and 65535 SNMP listening port | ||
| + | snmp.community string SNMP v1/v2c read community | ||
| + | snmp.contact string SNMP contact info | ||
| + | snmp.location string SNMP location info | ||
| + | snmp.auth enum MD5,SHA SNMP v3 authentication | ||
| + | snmp.enc enum DES,AES SNMP v3 encryption | ||
| + | snmp.admin.community string SNMP v1/v2c admin community | ||
| + | snmp.admin.host address SNMP v1/v2c admin allowed host | ||
| + | |||
| + | # LwM2M | ||
| + | lwm2m.status integer 0 = disabled, 1 = enabled LwM2M administrative status | ||
| + | lwm2m.agent.x.server address LwM2M agent server address | ||
| + | lwm2m.agent.x.bootstrap integer 0 = disabled, 1 = enabled LwM2M agent bootstrap status | ||
| + | lwm2m.agent.x.security enum none,psk,cert LwM2M agent security | ||
| + | lwm2m.agent.x.id string LwM2M agent identification | ||
| + | lwm2m.agent.x.key password LwM2M agent passphrase | ||
| + | lwm2m.endpoint | ||
| + | lwm2m.agent.x.lifetime integer | ||
| + | |||
| + | #ITxPT | ||
| + | itxpt.status | ||
| + | itxpt.network.interface | ||
| + | itxpt.fmstoip.enabled | ||
| + | itxpt.fmstoip.period | ||
| + | itxpt.fmstoip.can.interface | ||
| + | itxpt.fmstoip.can.db.extensions | ||
| + | itxpt.fmstoip.can.db.dl.path | ||
| + | itxpt.fmstoip.can.db.dl.selection | ||
| + | itxpt.fmstoip.can.db.manufacturer.file | ||
| + | itxpt.fmstoip.can.db.manufacturer.selected | ||
| + | itxpt.gnss.enabled | ||
| + | itxpt.vtoip.enabled | ||
| + | itxpt.time.enabled | ||
| + | itxpt.mqtt.enabled | ||
| + | |||
| + | # GNSS | ||
| + | gpsd.x.status integer 0 = disabled, 1 = enabled GNSS administrative status | ||
| + | gpsd.x.mode enum standalone,ms-based,ms-assisted GNSS operational mode | ||
| + | gpsd.x.atype enum active,passive GNSS antenna type | ||
| + | gpsd.x.interval integer 1..60 seconds GNSS fix frame interval | ||
| + | gpsd.x.accuracy integer 5..1000 meter GNSS accuracy | ||
| + | gpsd.x.supl string <host>:<port> GNSS SUPL server | ||
| + | gpsd.x.apn string GNSS SUPL APN | ||
| + | gpsd.x.port port GNSS server port | ||
| + | gpsd.x.cmode integer 0 = on request, GNSS server client start mode | ||
| + | 1 = raw, | ||
| + | 2 = super-raw, | ||
| + | 3 = json | ||
| + | gpsd.x.allowed string <address>/<netmask> GNSS server allowed client hosts | ||
| + | gpsd.x.maxdist integer 0 = off, GNSS max. linear distance between fixes | ||
| + | 1..10000 meter | ||
| + | gpsd.x.ftimeout integer 0 = off, GNSS max. frame timeout | ||
| + | 1..300 seconds | ||
| + | |||
| + | |||
| + | gpsd.x.modifynmea integer | ||
| + | gpsd.x.dr.eabled integer | ||
| + | gpsd.x.cfg.yaw | ||
| + | gpsd.x.cfg.pitch | ||
| + | gpsd.x.cfg.roll | ||
| + | gspd.x.cfg.vrp2antenna.a | ||
| + | gspd.x.cfg.vrp2antenna.b | ||
| + | gspd.x.cfg.vrp2antenna.c | ||
| + | gpsd.x.cfg.vrp2imu.a | ||
| + | gpsd.x.cfg.vrp2imu.b | ||
| + | gpsd.x.cfg.vrp2imu.c | ||
| + | gpsd.x.assisturl0 | ||
| + | gpsd.x.assisturl1 | ||
| + | gpsd.x.dr.ignition integer | ||
| + | |||
| + | # DIO | ||
| + | dio.out1 enum on,off DIO OUT1 default state | ||
| + | dio.out2 enum on,off DIO OUT2 default state | ||
| + | |||
| + | # Administration | ||
| + | admin.password password Administrator password | ||
| + | admin.store_pw integer | ||
| + | admin.hash | ||
| + | admin.bootpass password Bootloader password | ||
| + | admin.shell enum cli,sh Administrator shell | ||
| + | admincliphp integer | ||
| + | admin.access integer 0 = ignore, Authentication method | ||
| + | 1 = authentication required, | ||
| + | 2 = secure authentication required, | ||
| + | 3 = secure authentication preferred | ||
| + | |||
| + | admin.debug integer 0 = disabled, 1 = enabled Enabled GUI debugging | ||
| + | admin.area enum stationary,mobe Application area | ||
| + | |||
| + | # Logging | ||
| + | syslog.storage enum root,flash,extended Syslog storage | ||
| + | syslog.redirect address Syslog redirect address | ||
| + | syslog.filesize integer 1024..<max> kB Syslog max. file size | ||
| + | |||
| + | # LEDs | ||
| + | led.mode integer 0 = right/top, LED banks to be displayed | ||
| + | 1 = left/bottom, | ||
| + | 2 = both (toggle mode) | ||
| + | |||
| + | |||
| + | led.x.left | ||
| + | led.x.right | ||
| + | |||
| + | # reboot | ||
| + | reboot.delay integer 3..300 seconds Reboot delay | ||
| + | |||
| + | # Users | ||
| + | user.x.name string User name | ||
| + | user.x.role enum user,admin User role | ||
| + | user.x.password password User password | ||
| + | user.x.store_pw integer | ||
| + | user.x.hash | ||
| + | user.x.desc string User description | ||
| + | user.x.shell enum cli,sh User shell | ||
| + | user.x.cliphap integer | ||
| + | |||
| + | |||
| + | # Remote Authentication | ||
| + | radius.status integer 0 = disabled, 1 = enabled RADIUS administrative status | ||
| + | radius.mode integer 0 = do not use for login, RADIUS operational mode | ||
| + | 1 = use for login | ||
| + | radius.server address RADIUS server address | ||
| + | radius.server2 | ||
| + | radius.secret password RADIUS server secret | ||
| + | radius.secret2 | ||
| + | radius.authport port RADIUS server authentication port | ||
| + | radius.authport2 | ||
| + | radius.acctport port RADIUS server accounting port | ||
| + | radius.acctport2 | ||
| + | |||
| + | |||
| + | # SMS daemon | ||
| + | smsd.status integer 0 = disabled, 1 = enabled SMSD adminstrative status | ||
| + | smsd.report integer 0 = disabled, 1 = enabled SMSD request delivery report | ||
| + | smsd.x.burst | ||
| + | smsd.x.device interface SMSD SIM device (e.g. sim0) | ||
| + | smsd.x.gateway string <empty> = use from SIM SMSD gateway | ||
| + | |||
| + | smsd.rule.outgoing.x.number phone-number SMS route phone number | ||
| + | smsd.rule.outgoing.x.mode integer 0 = DROP, 1 = FORWARD SMS route mode | ||
| + | smsd.rule.outgoing.x.device interface SMS route destination device (e.g. sim0) | ||
| + | |||
| + | smsd.rule.incoming.x.number phone-number SMS filter phone number | ||
| + | smsd.rule.incoming.x.mode integer 0 = DROP, 1 = ALLOW SMS filter mode | ||
| + | smsd.rule.incoming.x.device interface SMS filter incoming device (e.g. sim0) | ||
| + | |||
| + | |||
| + | email.sending.status integer 0 = disabled, 1 = enabled E-Mail administrative status | ||
| + | email.sending.smtp.host host E-Mail server address | ||
| + | email.sending.smtp.port port E-Mail server port | ||
| + | email.sending.smtp.from e-mail E-Mail from address | ||
| + | email.sending.smtp.authentication enum automatic,cram-md5,login,none E-Mail authentication | ||
| + | email.sending.smtp.username string E-Mail username | ||
| + | email.sending.smtp.password password E-Mail password | ||
| + | email.sending.smtp.encryption enum none,tls E-Mail encryption | ||
| + | |||
| + | # Events | ||
| + | event.recipient.x.status integer 0 = disabled, 1 = enabled Event recipient administrative state | ||
| + | event.recipient.x.desc string Event recipient description | ||
| + | event.recipient.x.mail e-mail Event recipient E-Mail | ||
| + | event.recipient.x.number phone-number Event recipient phone number | ||
| + | event.recipient.x.trap.host host Event recipient trap host | ||
| + | event.recipient.x.trap.port port Event recipient trap port | ||
| + | event.recipient.x.trap.username string Event recipient trap username | ||
| + | event.recipient.x.trap.password password Event recipient trap password | ||
| + | event.recipient.x.trap.auth enum MD5,SHA Event recipient trap authentication | ||
| + | event.recipient.x.trap.enc enum DES,AES Event recipient trap encryption | ||
| + | event.recipient.x.trap.engine string Event recipient trap engine ID | ||
| + | event.recipient.x.match string comma-separated list of Event recipient matching events | ||
| + | wan-up, | ||
| + | wan-down, | ||
| + | dio-in1-on, | ||
| + | dio-in2-on, | ||
| + | dio-in1-off, | ||
| + | dio-in2-off, | ||
| + | dio-out1-on, | ||
| + | dio-out2-on, | ||
| + | dio-out1-off, | ||
| + | dio-out2-off, | ||
| + | gps-up, | ||
| + | gps-down, | ||
| + | openvpn-up, | ||
| + | openvpn-down, | ||
| + | ipsec-up, | ||
| + | ipsec-down, | ||
| + | gre-up, | ||
| + | gre-down, | ||
| + | dialin-up, | ||
| + | dialin-down, | ||
| + | mobileip-up, | ||
| + | mobileip-down, | ||
| + | pptp-up, | ||
| + | pptp-down, | ||
| + | system-login-failed, | ||
| + | system-login-succeeded, | ||
| + | system-logout, | ||
| + | system-rebooting, | ||
| + | system-poweroff, | ||
| + | system-startup, | ||
| + | sdk-startup, | ||
| + | system-error, | ||
| + | system-no-error, | ||
| + | sms-sent, | ||
| + | sms-notsent, | ||
| + | sms-received, | ||
| + | sms-report-received, | ||
| + | call-incoming, | ||
| + | call-outgoing, | ||
| + | ddns-update-succeeded, | ||
| + | ddns-update-failed, | ||
| + | usb-storage-added, | ||
| + | usb-storage-removed, | ||
| + | usb-eth-added, | ||
| + | usb-eth-removed, | ||
| + | usb-serial-added, | ||
| + | usb-serial-removed, | ||
| + | system-time-updated, | ||
| + | redundancy-master, | ||
| + | redundancy-backup, | ||
| + | test | ||
| + | |||
| + | # Static Routes | ||
| + | route.0.interface interface Route interface | ||
| + | route.0.target address Route target address | ||
| + | route.0.netmask address Route target network | ||
| + | route.0.gateway address Route target gateway | ||
| + | route.0.metric integer Route metric | ||
| + | |||
| + | # OSPF | ||
| + | ospf.status integer 0 = disabled, 1 = enabled OSPF administrative status | ||
| + | ospf.redist.connected integer 0 = disabled, 1 = enabled OSPF redistribute connected routes | ||
| + | ospf.redist.kernel integer 0 = disabled, 1 = enabled OSPF redistribute local routes | ||
| + | ospf.redist.bgp integer 0 = disabled, 1 = enabled OSPF redistribute BGP routes | ||
| + | ospf.redist.default integer 0 = disabled, 1 = enabled OSPF redistribute default route | ||
| + | ospf.vrrpmasteronly integer 1 = disabled, 0 = enabled OSPF disable when redundancy backup | ||
| + | |||
| + | ospf.interface.x.name interface OSPF interface name | ||
| + | ospf.interface.x.auth integer 0 = none, 1 = password, 2 = hmac-md5 OSPF interface authentication | ||
| + | ospf.interface.x.keyid string OSPF interface key ID | ||
| + | ospf.interface.x.key password OSPF interface key | ||
| + | ospf.interface.x.cost integer OSPF interface cost | ||
| + | ospf.interface.x.passive integer 0 = not passive, 1 = passive OSPF interface passive | ||
| + | ospf.router.id | ||
| + | |||
| + | ospf.network.x.prefix address OSPF network prefix address | ||
| + | ospf.network.x.prefixlength integer OSPF network prefix length | ||
| + | ospf.network.x.area integer 0..65535 OSPF network area | ||
| + | |||
| + | # BGP | ||
| + | bgp.status integer 0 = disabled, 1 = enabled BGP administrative status | ||
| + | bgp.router.id | ||
| + | bgp.as interface BGP AS number | ||
| + | bgp.redist.connected integer 0 = disabled, 1 = enabled BGP redistribute connected routes | ||
| + | bgp.redist.kernel integer 0 = disabled, 1 = enabled BGP redistribute local routes | ||
| + | bgp.redist.ospf integer 0 = disabled, 1 = enabled BGP redistribute OSPF routes | ||
| + | bgp.vrrpmasteronly integer 1 = disabled, 0 = enabled BGP disable when redundancy backup | ||
| + | bgp.keepalive integer | ||
| + | bgp.holddown integer | ||
| + | |||
| + | bgp.neighbor.x.addr address BGP neighbor address | ||
| + | bgp.neighbor.x.as integer BGP neighbor AS number | ||
| + | bgp.neighbor.x.weight | ||
| + | bgp.neighbor.x.password password BGP neighbor password | ||
| + | bgp.neighbor.x.multihop integer 0 = disabled, 1 = enabled BGP neighbor multihop | ||
| + | bgp.neighbor.x.extended_nexthop | ||
| + | bgp.neighbor.x.address_family | ||
| + | |||
| + | bgp.network.0.prefix address BGP network prefix address | ||
| + | bgp.network.0.prefixlength integer BGP network prefix length | ||
| + | |||
| + | # Extended Routes | ||
| + | eroute.x.source address ExtRoute source address | ||
| + | eroute.x.snetmask address ExtRoute source netmask | ||
| + | eroute.x.target address ExtRoute destination address | ||
| + | eroute.x.tnetmask address ExtRoute destination netmask | ||
| + | eroute.x.proto integer 0 = ANY, 1 = UDP, 2 = TCP ExtRoute protocol | ||
| + | eroute.x.sport.start port ExtRoute first source port | ||
| + | eroute.x.sport.end port ExtRoute last source port | ||
| + | eroute.x.tport.start port ExtRoute first destination port | ||
| + | eroute.x.tport.end port ExtRoute last destination port | ||
| + | eroute.x.tos integer -1 = any, ExtRoute type of service | ||
| + | 0 = normal-service, | ||
| + | 2 = minimize-cost, | ||
| + | 4 = maximize-reliability, | ||
| + | 8 = maximize-throughput, | ||
| + | 16 = minimize-delay | ||
| + | |||
| + | eroute.x.iif interface ExtRoute incoming interface | ||
| + | eroute.x.gateway address ExtRoute target gateway | ||
| + | eroute.x.oif interface ExtRoute target interface | ||
| + | eroute.x.force integer 0 = disabled, 1 = enabled ExtRoute discard if down | ||
| + | |||
| + | # Multipath Routes | ||
| + | mroute.x.target address MultipathRoute target network | ||
| + | mroute.x.netmask address MultipathRoute target netmask | ||
| + | mroute.x.interface.y.name interface MultipathRoute interface name | ||
| + | mroute.x.interface.y.weight integer 0..10 MultipathRoute weight | ||
| + | mroute.x.interface.y.nexthop address MultipathRoute gateway | ||
| + | |||
| + | # SSH Server | ||
| + | ssh.status integer 0 = disabled, 1 = enabled SSH server administrative status | ||
| + | ssh.port port SSH server port | ||
| + | ssh.pwlogin integer 0 = disabled, 1 = enabled SSH password login | ||
| + | ssh.rootlogin integer 0 = disabled, 1 = enabled SSH root login | ||
| + | |||
| + | # Telnet Server | ||
| + | telnet.status integer 0 = disabled, 1 = enabled Telnet server administrative status | ||
| + | telnet.port port Telnet server port | ||
| + | |||
| + | # MQTT Broker | ||
| + | mqtt.status integer | ||
| + | mqtt.port integer | ||
| + | mqtt.tls integer | ||
| + | |||
| + | # Web Server | ||
| + | http.status integer 0 = disabled, 1 = enabled Web server administrative status | ||
| + | http.port port Web server port | ||
| + | https.status integer 0 = disabled, 1 = enabled Web server HTTPS administrative status | ||
| + | https.port port Web server HTTPS port | ||
| + | https.security integer 0 = none = Windows XP IE6, Java 6 Web server HTTPS security | ||
| + | 1 = old = Firefox 1, Chrome 1, | ||
| + | IE 7, ... | ||
| + | 2 = modern = Firefox 27, Chrome 30, | ||
| + | IE 11 on Windows 7, ... | ||
| + | |||
| + | cliphp.status integer 0 = disabled, 1 = enabled CLI-PHP administrative status | ||
| + | |||
| + | |||
| + | # Serial Server | ||
| + | serial.x.status integer 0 = disabled, 1 = enabled Serial port administrative state | ||
| + | |||
| + | serial.server.x.baudrate enum 300,1200,2400,4800,9600,19200, Serial server port baudrate | ||
| + | 38400,57600,115200 | ||
| + | serial.server.x.parity enum NONE,ODD,EVEN Serial server parity | ||
| + | serial.server.x.stopbits enum 1,2 Serial server stop bits | ||
| + | serial.server.x.databits enum 7,8 Serial server data bits | ||
| + | serial.server.x.xonxoff enum 0 = none, 1 = XON/XOFF Serial server software flow control | ||
| + | serial.server.x.rtscts enum 0 = none, 1 = RTS/CTS Serial server hardware flow control | ||
| + | serial.server.x.physproto enum RS232,RS485,IBIS Serial server physical protocol | ||
| + | |||
| + | serial.server.x.protocol enum raw,telnet Serial server protocol on IP port | ||
| + | serial.server.x.termination integer | ||
| + | serial.server.x.port port Serial server port | ||
| + | serial.server.x.timeout integer 0 = endless, Serial server timeout | ||
| + | 1..600 seconds | ||
| + | serial.server.x.remctl integer 0 = disabled, 1 = enabled Serial server RFC 2217 remote control | ||
| + | serial.server.x.allowed string <address>/<netmask> Serial server allowed hosts | ||
| + | serial.server.x.banner integer 0 = disabled, 1 = enabled Serial serer show banner | ||
| + | |||
| + | serial.server.x.modem interface Serial modem bridge device (e.g. wwan0) | ||
| + | serial.server.x.phonebook.y.number | ||
| + | serial.server.x.phonebook.y.ip | ||
| + | serial.server.x.phonebook.y.port | ||
| + | |||
| + | # Audio | ||
| + | audio.x.volume integer 0..9 Audio default volume level | ||
| + | |||
| + | |||
| + | # Maintenance | ||
| + | manual.swupdate.url url Manual software update URL | ||
| + | |||
| + | auto.swupdate.status integer 0 = disabled, 1 = enabled Automatic software update administrative status | ||
| + | auto.swupdate.time string <HH>:<MM> Automatic software update time of day | ||
| + | auto.swupdate.url url Automatic software update URL | ||
| + | |||
| + | auto.cfupdate.status integer 0 = disabled, 1 = enabled Automatic config update administrative status | ||
| + | auto.cfupdate.time string <HH>:<MM> Automatic config update time of day | ||
| + | auto.cfupdate.url url Automatic config update URL | ||
| + | |||
| + | auto.reboot.status integer 0 = disabled, 1 = enabled Automatic reboot administrative status | ||
| + | auto.reboot.time string <HH>:<MM> Automatic reboot time of day | ||
| + | |||
| + | # VRRP | ||
| + | vrrpd.status integer 0 = disabled, 1 = enabled VRRP administrative status | ||
| + | vrrpd.id integer VRRP ID | ||
| + | vrrpd.prio enum 100 = master, 1 = backup VRRP role | ||
| + | vrrpd.interface interface VRRP interface (e.g. lan0) | ||
| + | vrrpd.address address VRRP virtual gateway address | ||
| + | |||
| + | # Discovery | ||
| + | lldpd.status integer 0 = disabled, 1 = enabled Discovery administrative status | ||
| + | lldpd.proto string comma-separated list of Discovery protocols | ||
| + | lldp, cdp, sonmp, edp, fdp, irdp | ||
| + | |||
| + | |||
| + | |||
| + | |||
| + | vrrpd.x.status | ||
| + | vrrpd.x.id | ||
| + | vrrpd.x.prio | ||
| + | vrrpd.x.interface | ||
| + | vrrpd.x.address | ||
| + | |||
| + | # IGMP Proxy | ||
| + | igmpproxy.status integer 0 = disabled, 1 = enabled IGMP proxy administrative status | ||
| + | igmpproxy.interface interface IGMP proxy incoming interface | ||
| + | igmpproxy.downstream string all = all LAN interfaces IGMP proxy downstream interfaces | ||
| + | or comma-separated list of interfaces | ||
| + | igmpproxy.sender.x.network address IGMP proxy sender address | ||
| + | igmpproxy.sender.x.netmask address IGMP proxy sender network | ||
| + | |||
| + | # Static Multicast Routing | ||
| + | smcroute.status integer 0 = disabled, 1 = enabled Static multicast administrative status | ||
| + | |||
| + | smcroute.x.group address Static multicast group address | ||
| + | smcroute.x.source address Static multicast source address | ||
| + | smcroute.x.from interface Static multicast incoming interface | ||
| + | smcroute.x.to interface Static multicast outgoing interface | ||
| + | |||
| + | # Softflow | ||
| + | softflow.x.status = | ||
| + | softflow.x.interface = | ||
| + | softflow.x.host | ||
| + | softflow.x.port | ||
| + | softflow.x.version | ||
| + | softflow.x.maxflow | ||
| + | softflow.x.tracklevel | ||
| + | softflow.x.samplerate | ||
| + | |||
| + | # ARP | ||
| + | arp.x.interface interface ARP interface | ||
| + | arp.x.host address ARP host address | ||
| + | arp.x.address mac ARP MAC address | ||
| + | |||
| + | # Arpwatch | ||
| + | arpwatch.status integer 0 = disabled, 1 = enabled Arpwatch administrative status | ||
| + | arpwatch.x.interface interface Arpwatch interface | ||
| + | |||
| + | # FTP Daemon | ||
| + | ftpd.status integer 0 = disabled, 1 = enabled FTP server administrative status | ||
| + | |||
| + | # TFTP Daemon | ||
| + | tftpd.status integer 0 = disabled, 1 = enabled TFTP server administrative status | ||
| + | tftpd.directory string TFTP server directory | ||
| + | |||
| + | # SDK | ||
| + | sdk.status integer 0 = disabled, 1 = enabled SDK administrative status | ||
| + | sdk.storage enum root,flash,extended,usb0 SDK storage | ||
| + | sdk.size integer 3..14 MB SDK max. size | ||
| + | sdk.sched enum low,normal,high SDK scheduling priority | ||
| + | sdk.watchdog integer 0 = disabled, 1 = enabled SDK watchdog script monitoring | ||
| + | sdk.maxvsz integer | ||
| + | |||
| + | sdk.trigger.x.name string a-z,A-Z,0-9,-,_,. erlaubt SDK trigger name | ||
| + | sdk.trigger.x.timecond enum hourly,daily,weekly,monthly,yearly, SDK trigger time condition | ||
| + | workdays,weekend,periodically | ||
| + | sdk.trigger.x.timespec string SDK trigger timespec | ||
| + | sdk.trigger.x.event enum wan-up, SDK trigger event | ||
| + | wan-down, | ||
| + | dio-in1-on, | ||
| + | dio-in2-on, | ||
| + | dio-in1-off, | ||
| + | dio-in2-off, | ||
| + | dio-out1-on, | ||
| + | dio-out2-on, | ||
| + | dio-out1-off, | ||
| + | dio-out2-off, | ||
| + | gps-up, | ||
| + | gps-down, | ||
| + | openvpn-up, | ||
| + | openvpn-down, | ||
| + | ipsec-up, | ||
| + | ipsec-down, | ||
| + | gre-up, | ||
| + | gre-down, | ||
| + | dialin-up, | ||
| + | dialin-down, | ||
| + | mobileip-up, | ||
| + | mobileip-down, | ||
| + | pptp-up, | ||
| + | pptp-down, | ||
| + | system-login-failed, | ||
| + | system-login-succeeded, | ||
| + | system-logout, | ||
| + | system-rebooting, | ||
| + | system-poweroff, | ||
| + | system-startup, | ||
| + | sdk-startup, | ||
| + | system-error, | ||
| + | system-no-error, | ||
| + | sms-sent, | ||
| + | sms-notsent, | ||
| + | sms-received, | ||
| + | sms-report-received, | ||
| + | call-incoming, | ||
| + | call-outgoing, | ||
| + | ddns-update-succeeded, | ||
| + | ddns-update-failed, | ||
| + | usb-storage-added, | ||
| + | usb-storage-removed, | ||
| + | usb-eth-added, | ||
| + | usb-eth-removed, | ||
| + | usb-serial-added, | ||
| + | usb-serial-removed, | ||
| + | system-time-updated, | ||
| + | redundancy-master, | ||
| + | redundancy-backup, | ||
| + | test | ||
| + | |||
| + | sdk.script.0.name string a-z,A-Z,0-9,-,_,. erlaubt SDK script name | ||
| + | sdk.script.0.desc string A-Z,a-z,0-9,-,_,+,whitespace SDK script description | ||
| + | sdk.script.0.args string colon-separated list of arguments SDK script arguments | ||
| + | |||
| + | sdk.job.0.name string a-z,A-Z,0-9,-,_,. erlaubt SDK job name | ||
| + | sdk.job.0.trigger integer nicht leer SDK job trigger index | ||
| + | sdk.job.0.script integer nicht leer SDK job script index | ||
| + | sdk.job.0.args string colon-separated list of arguments SDK job arguments | ||
| + | regex für args:a-z, A-Z, 0-9,whitespace,/,:,.,-,@,+,"",'',\ erlaubt | ||
| + | # Virtualization | ||
| + | virt.status integer 0 = disabled, 1 = enabled Virtualization administrative status | ||
| + | |||
| + | virt.guest.x.status integer 0 = disabled, 1 = enabled Virtual guest administrative status | ||
| + | virt.guest.x.desc string Virtual guest description | ||
| + | virt.guest.x.type enum lxc Virtual guest type | ||
| + | virt.guest.x.storage enum flash,extended,usb0 Virtual guest storage | ||
| + | virt.guest.x.limit.cpu double 0.5..1.0 Virtual guest CPU limit | ||
| + | virt.guest.x.limit.memory integer 32.768 Virtual guest memory limit | ||
| + | |||
| + | virt.guest.x.network.y.mode integer 0 = disabled, 1 = routed, 2 = bridged Virtual network mode | ||
| + | virt.guest.x.network.y.brdev interface Virtual network bridge interface | ||
| + | virt.guest.x.network.y.address address Virtual network address | ||
| + | virt.guest.x.network.y.netmask address Virtual network netmask | ||
| + | virt.guest.x.network.y.gateway address Virtual network gateway | ||
| + | |||
| + | virt.guest.x.device.y.name string Virtual device name | ||
| + | virt.guest.x.device.y.type enum can,bluetooth Virtual device type | ||
| + | |||
| + | virt.guest.x.install.url URL https://share.netmodule.com/router | ||
| + | /public/virt/ubuntu_bionic.tar.xz Ubuntu Bionic Beaver | ||
| + | virt.guest.x.install.trigger integer 0 = disabled, 1 = enabled Install on Apply | ||
| + | |||
| + | #storage | ||
| + | storage.flashroot.id | ||
| + | storage.flashroot.automount | ||
| + | storage.flashroot.mountpoint | ||
| + | |||
| + | storage.flashstorage.id | ||
| + | storage.flashstorage.automount | ||
| + | storage.flashstorage.mountpoint | ||
| + | |||
| + | storage.extended.id | ||
| + | storage.extended.automount | ||
| + | storage.extended.mountpoint | ||
| + | |||
| + | storage.usb0.id | ||
| + | storage.usb0.automount | ||
| + | storage.usb0.mountpoint | ||
| + | |||
| + | storage.sdcard0.id | ||
| + | storage.sdcard0.automount | ||
| + | storage.sdcard0.mountpoint | ||
| + | |||
| + | # custom | ||
| + | custom.status integer | ||
| + | custom.secret string | ||
| + | custom.var0 string | ||
| + | custom.var1 string | ||
| + | custom.var2 string | ||
| + | custom.var3 string | ||
| + | custom.var4 string | ||
| + | |||
| + | custom.table0.x.var0 string | ||
| + | custom.table0.x.var1 string | ||
| + | custom.table0.x.var2 string | ||
| + | custom.table0.x.var3 string | ||
| + | custom.table0.x.var4 string | ||
| + | |||
| + | custom.table1.x.var0 string | ||
| + | custom.table1.x.var1 string | ||
| + | custom.table1.x.var2 string | ||
| + | custom.table1.x.var3 string | ||
| + | custom.table1.x.var4 string | ||
| + | |||
| + | custom.table2.0.var0 string | ||
| + | custom.table2.0.var1 string | ||
| + | custom.table2.0.var2 string | ||
| + | custom.table2.0.var3 string | ||
| + | custom.table2.0.var4 string | ||
| + | |||
| + | |||
| + | checkEmail: format local@domain, user can contain a-z,A-Z,0-9,@,-,.,-,_, domain is 0-255 characters and contains a-z,A-Z,0-9,-,_. It is also possible that the email is an IP. | ||
| + | ApnUsername=ApnPassword: not allowed:"",'',whitespace(\r\n\t\f\v) | ||
| + | Passwd: not allowed &,|,",',`,\ | ||
| + | </code> | ||