[INFO] Siemens (Efficient Networks) 5851: Referenzkonfiguration nach Kernelupdate v6

exe [email protected]:config

# === start dump for global eth ===
eth br options forward-stp off 0
eth br options stp off 0
eth br options pppoeonly on 0
eth ip options multicast off
eth ip enable
eth ip firewall on
eth ip directedBcast off
eth ip remSrcRouteOpt off
eth ipx disable
# === end dump for global eth ===

# === start dump for eth ===


eth ip addr 192.68.0.117 255.255.255.0 0:0
eth ip mgmt 0.0.0.0 0.0.0.0 0:0
eth ip options rxrip off 0:0
eth ip options rxrip1 off 0:0
eth ip options rxrip2 off 0:0
eth ip options txrip off 0:0
eth ip options txrip1 off 0:0
eth ip options txrip2 off 0:0
eth ip options rxdef off 0:0
eth ip options avdfr off 0:0
eth ip options dynamicdns off 0:0
eth ip options bootpdhcprelay off 0:0
eth ip translate off 0:0
eth ip aliasing off 0:0
eth ipx frame 802.2 0
eth mtu 1492 0:0
# === end dump for eth ===192.68.0.2

# === start dump for env ===
# === end dump for env ===

# === start dump for sysppp ===
system ppp opt  1   101
system ppp opt  2   101
system ppp opt  3 1 001
system ppp opt  3 2 001
system ppp opt  4   001
system ppp opt  5   001
system ppp opt  7   000
system ppp opt  8   000
system ppp opt 17   101
system ppp opt 18   001
system ppp opt 19   001
system ppp opt 27   001
system ppp mru 1548
system ppp mrru 1548
system ppp edclass 0
system ppp edaddr
system ppp mclass 4
system ppp fragdelay 10
system ppp udp_context_id 15
system ppp udp_period 50
system ppp udp_time 5
system ppp udp_ipcp_negotiate yes
# === end dump for sysppp ===

# === start dump for dod ===
remote add test1
remote enable test1
remote start test1
remote enaAuthen test1
remote setAuthen PAP test1
remote setInAuthen none test1
remote setprotocol RFC1483MER test1
remote setLoopback off test1
remote setOAMF5 ete off test1
remote setOAMF5 seg off test1
remote setOAMCC ete off test1
remote setOAMCC seg off test1
remote setATMTraffic 0 0 3 1 test1
remote setBwThresh 50 test1
remote setBod both test1
remote setMaxLine 1 test1
remote setMinLine 1 test1
remote setTimer 60 test1
remote setDialBack off test1
remote setIPTranslate off test1
remote setIPslavePPP no test1
remote setpppoptions ipslavemode off test1
remote setpppoptions lcpecho on test1
remote setpppoptions reacqipaddr on test1
remote setpppoptions ripsap on test1
remote setPPPRetryTimer 0 test1192.68.0.2
remote blockNetBIOS off test1
remote setPrefer hsd test1
remote setsrcipaddr 0.0.0.0 0.0.0.0 test1
remote setrmtipaddr 0.0.0.0 0.0.0.0 test1
remote setmgmtipaddr 0.0.0.0 0.0.0.0 test1
remote setipoptions rxrip off test1
remote setipoptions rxrip1 off test1
remote setipoptions rxrip2 off test1
remote setipoptions rxdef off test1
remote setipoptions txrip off test1
remote setipoptions txrip1 off test1
remote setipoptions txrip2 off test1
remote setipoptions txdef off test1
remote setipoptions private on test1
remote setipoptions multicast off test1
remote setipoptions LANConfig off test1
remote setipoptions lcpecho on test1
remote setipoptions dhcpClient off test1
remote setipoptions dynamicDns off test1
remote setipxoptions ripsap on test1
remote setbroptions stp off test1
remote setbroptions pppoe on test1
remote enabridge test1
remote setmtu 1492 test1
remote setPVC 1*51 test1
remote add ppp
remote setPPPoEService * ppp
remote enable ppp
remote start ppp
remote disAuthen ppp
remote setAuthen PAP ppp
remote setInAuthen none ppp
#Hier Username und Password eintragen
remote setOurPasswd ******* ppp
remote setOurSysName *************@q-dsl.de ppp
remote setprotocol PPP ppp
remote setOAMF5 ete off ppp
remote setOAMF5 seg off ppp
remote setOAMCC ete off ppp
remote setOAMCC seg off ppp
remote setATMTraffic 0 0 3 1 ppp
remote setBwThresh 50 ppp
remote setBod both ppp
remote setMaxLine 1 ppp
remote setMinLine 1 ppp
remote setTimer 300 ppp
remote setDialBack off ppp
remote setIPTranslate on ppp
remote setIPslavePPP no ppp
remote setpppoptions ipslavemode off ppp
remote setpppoptions lcpecho on ppp
remote setpppoptions reacqipaddr off ppp
remote setpppoptions ripsap on ppp
remote setPPPRetryTimer 0 ppp
remote blockNetBIOS off ppp
remote setsrcipaddr 0.0.0.0 0.0.0.0 ppp
remote setrmtipaddr 0.0.0.0 0.0.0.0 ppp
remote setmgmtipaddr 0.0.0.0 0.0.0.0 ppp
remote setipoptions rxrip off ppp
remote setipoptions rxrip1 off ppp
remote setipoptions rxrip2 off ppp
remote setipoptions rxdef off ppp
remote setipoptions txrip off ppp
remote setipoptions txrip1 off ppp
remote setipoptions txrip2 off ppp
remote setipoptions txdef off ppp
remote setipoptions private on ppp
remote setipoptions multicast off ppp
remote setipoptions LANConfig off ppp
remote setipoptions lcpecho on ppp
remote setipoptions dhcpClient off ppp
remote setipoptions dynamicDns on ppp
remote setipxoptions ripsap on ppp
remote setbroptions stp off ppp
remote setbroptions pppoe off ppp
remote disbridge ppp
remote setmtu 1492 ppp
#Hier könnt ihr euren Packetfilter konfigurieren z.B. (news):
#remote ipfilter insert input drop -p 0 ppp
#remote ipfilter insert input accept -p tcp -tcp ack -sp 119 -dp 1024:65535 ppp
#remote ipfilter insert input accept -p tcp -tcp rst -sp 119 -dp 1024:65535 ppp
#remote ipfilter insert input accept -p tcp -tcp syn -tcp ack -sp 119 -dp 1024:65535 ppp
#...
remote addIproute 0.0.0.0 0.0.0.0 1 ppp
#192.68.0.22 ist mein Sipura Adapter, 192.68.0.2 mein Rechner (Portforwarding für P2P).
remote addServer 192.68.0.2 6 3000 ppp
remote addServer 192.68.0.22 17 5060 ppp
remote addServer 192.68.0.2 17 8000 ppp
# === end dump for dod ===

# === start dump for sys ===
system mgmt off
system riptimer update 30
system riptimer validate 180
system riptimer remove 120
system resetswitch passwordrecovery
system authen none
system community public
system securityTimer 30
system telnetport default
system snmpport default
system trapport default
system sip setalgport 5060 5060
system syslogport default
system wan2wanforwarding on
system oneWANdialup off
system blockNetBIOSDefault no
system backup disable
system backup retry 30
system backup stability 3
system backup retrystability 0
system securemode set enable
system securemode set wan untrusted
system securemode set lan trusted
system securemode set cli 8
system vpnpassthru disable
system vpnanysrcport off
system pppTimer 8
system virtualroutingfailover disable
system remoteSyncVRRP disable
system addSyslogFilter lan
system addSyslogServer 192.68.0.2
system writecommunity public
# === end dump for sys ===


# === start dump for radius ===
radius set retries 3
radius set timeout 3
# === end dump for radius ===

# === start dump for tacplus ===
tacplus set retries 2
tacplus set timeout 10
tacplus set cache-time 4
# === end dump for tacplus ===

# === start dump for user ===
user add user superuser ******
user enable superuser
user add class network read superuser
user add class network write superuser
user add class system read superuser
user add class system write superuser
user add class admin read superuser
user add class admin write superuser
user add class security read superuser
user add class security write superuser
user add class debug read superuser
user add class debug write superuser
user add access lan superuser
user add access wan superuser
user add access console superuser
user set lookup primary local
user set lookup secondary none
user set minimum 6
# === end dump for user ===

# === start dump for snmp ===
snmp community public
snmp snmpPasswd admin
snmp snmpport default
snmp trapport default
snmp enablesnmpif wan
snmp enablesnmpif lan
snmp settrapenable on
snmp setusemgmtipaddr off
snmp writecommunity public
# === end dump for snmp ===

# === start dump for fwall ===
# Konfiguration der eingebauten Firewall, die inbound Regeln sind für P2P (amule, bittorrent...)
firewall watch off
firewall set on
firewall setsynfloodthreshold 200
firewall setpingfloodthreshold 1000
firewall setudpfloodthreshold 1000
firewall setdroppktthreshold 200
firewall allow -p tcp -q -d out
firewall allow -p udp -q -d out
firewall allow -p icmp -q -d both
firewall allow -p tcp -dp 3000 -q -d in
firewall allow -p udp -dp 8000 -q -d in
# === end dump for fwall ===

# === start dump for qos ===
# Quality of service für meinen Sipura Adapter 192.68.0.22 
qos on
qos diffserv on
qos setweight high 255
qos setweight medium 10
qos setweight normal 10
qos setweight low 1
qos append voip
qos set -sa 192.68.0.22 voip
qos set -da off voip
qos set -p off voip
qos set -sp off voip
qos set -dp off voip
qos set -pr high voip
qos set -ic off voip
qos set -oc off voip
qos set -b on voip
qos set -st 21:01 voip
qos set -du 00:00 voip
qos set -r off voip
qos set -f off voip
qos enable voip
# === end dump for qos ===

# === start dump for brfilter ===
# === end dump for brfilter ===

# === start dump for dns ===
# Dyndns Support, Account einrichten ist kostenlos. Achtung nur dyndns.org Addressen funktionieren
dns set hostname ******.dyndns.org
dns set username *******
dns set password *******
# === end dump for dns ===

# === start dump for ardd ===
ardd disable
ardd set hostName
ardd set hostPort 8190
ardd set retryDelay 2
# === end dump for ardd ===
save