Page 711 / 794
Scroll up to view Page 706 - 710
Vigor2860 Series User’s Guide
697
Syntax Description
Parameter
Description
-h
It means to display usage of this command.
-l
It means to display all the user defined DHCP options.
-d[idx]
It means to delete the option number by specifying its index
number.
-e [1 or 0]
It means to enable/disable custom option feature.
1:enable
0:disable
-c
It means to set option number. Available number ranges from 0
to 255.
-v
It means to set option number by typing string.
-a
It means to set the option value by specifying the IP address.
-x
It means to set option number with the format of Hexadecimal
characters.
-u
It means to update the option value of the sepecified index.
idx number
It means the index number of the option value.
Example
> srv dhcp option -e 1 -c 18 -v /path
> srv dhcp option -l
% state
idx interface
opt type
data
% enable
1
ALL LAN
18
ASCII
/path
Page 712 / 794
Vigor2860 Series User’s Guide
698
Telnet Command: srv nat dmz
This command allows users to set DMZ host. Before using this command, please set WAN IP
Alias first.
Srv nat dmz n m
[-<command> <parameter> | … ]
Syntax Description
Parameter
Description
n
It means to map selected WAN IP to certain host.
1: wan1
2: wan2
m
It means the index number of the DMZ host.
Default setting is “1” (WAN 1). It is only available for
Static IP mode. If you use other mode, you can set 1 ~ 8
in this field. If WAN IP alias has been configured, then
the number of DMZ host can be added more.
[<command>
<parameter>|…]
The available commands with parameters are listed
below.
[…]
means that you can type in several commands in
one line.
-e
It means to enable/disable such feature.
1:enable
0:disable
-i
It means to specify the private IP address of the DMZ
host.
-r
It means to remove DMZ host setting.
-v
It means to display current status.
Example
> srv nat dmz 1 1 -i 192.168.1.96
> srv nat dmz -v
%
WAN1 DMZ mapping status:
Index
Status
WAN1 aux IP
Private IP
----------------------------------------------------
1
Disable 0.0.0.0 192.168.1.96
Page 713 / 794
Vigor2860 Series User’s Guide
699
Telnet Command: srv nat ipsecpass
This command allows users to enable or disable IPSec ESP tunnel passthrough and IKE
source port (500) preservation.
Srv nat ipsecpass
[options]
Syntax Description
Parameter
Description
[options]
The available commands with parameters are listed
below.
on
It means to enable IPSec ESP tunnel passthrough and
IKE source port (500) preservation.
off
It means to disable IPSec ESP tunnel passthrough and
IKE source port (500) preservation.
status
It means to display current status for checking.
Example
>
srv nat ipsecpass status
%% Status: IPsec ESP pass-thru and IKE src_port:500 preservation is
OFF.
Telnet Command: srv nat openport
This command allows users to set open port settings for NAT server.
srv nat openport n m
[-<command> <parameter> | … ]
Syntax Description
Parameter
Description
n
It means the index number for the profiles. The range is
from 1 to 20.
m
It means to specify the sub-item number for this profile.
The range is from 1 to 10.
[<command>
<parameter>|…]
The available commands with parameters are listed
below.
[…]
means that you can type in several commands in
one line.
-a <enable>
It means to enable or disable the open port rule profile.
Page 714 / 794
Vigor2860 Series User’s Guide
700
0: disable
1:enable
-c <comment>
It means to type the description (less than 23
characters) for the defined network service.
-i <local ip>
It means to set the IP address for local computer.
Local ip: Type an IP address in this field.
-w <idx>
It means to specify the public IP.
1: WAN1 Default,
2: WAN1 Alias 1,
…and so on.
-p <protocol>
Specify the transport layer protocol.
Available values are TCP, UDP and ALL.
-s<start port>
It means to specify the starting port number of the
service offered by the local host. The range is from 0 to
65535.
-e<end port>
It means to specify the ending port number of the
service offered by the local host.
The range is from 0 to 65535.
-v
It means to display current settings.
-r <remove>
It means to delete the specified open port setting.
remove: Type the index number of the profile.
-f <flush>
It means to return to factory settings for all the open
ports profiles.
Example
> srv nat openport 1 1 -a 1 -c games -i
192.168.1.100 -w 1 -p TCP -s
23 -e 83
> srv nat openport -v
%% Status: Enable
%% Comment: games
Index
Protocal
Start Port
End Port
*****************************************************************
Page 715 / 794
Vigor2860 Series User’s Guide
701
1.
TCP
23
83
%% Status: Disable
%% Comment:
%% Private IP address: 0.0.0.0
Index
Protocal
Start Port
End Port
*****************************************************************
%% Status: Disable
%% Comment:
%% Private IP address: 0.0.0.0
Index
Protocal
Start Port
End Port
*****************************************************************
>
Telnet Command: srv nat portmap
This command allows users to set port redirection table for NAT server.
srv nat portmap
add [idx][serv name][proto][pub port][pri ip][pri port][wan1/wan2]
srv nat portmap
del [idx]
srv nat portmap
disable [idx]
srv nat portmap
enable [idx] [proto]
srv nat portmap
flush
srv nat portmap
table
Syntax Description
Parameter
Description
Add[idx]
It means to add a new port redirection table with an
index number. Available index number is from 1 to 10.
serv name
It means to type one name as service name.
proto
It means to specify TCP or UDP as the protocol.
pub port
It means to specify which port can be redirected to the
specified Private IP and Port of the internal host.
pri ip
It means to specify the private IP address of the internal
host providing the service.
pri port
It means to specify the private port number of the
service offered by the internal host.