ras> sys server load
ras> sys server access https wan1 on
ras> sys server secureip https 2.2.2.2
ras> sys server save
ras> sys server disp
TELNET server
Server Port= 23, Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 0.0.0.0
FTP server
Server Port= 21, Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 0.0.0.0
SSH server
Certificate = auto_generated_self_signed_cert
Server Port= 22, Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 0.0.0.0
HTTPS server
Certificate = auto_generated_self_signed_cert
Authenticate Client Certificates = No
Server Port= 443, Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 2.2.2.2
HTTP server
Server Port= 80, Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 0.0.0.0
ICMP ping
Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 0.0.0.0
SNMP service
Server Port= 161, Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 0.0.0.0
DNS service
Server Port= 53, Access= LAN+WAN1+DMZ+WLAN+WAN2, Secure Ip= 0.0.0.0

ras> sys logs load
ras> sys logs category access 3
ras> sys logs save
ras> sys logs display access
# .time source destination notes
message
0|06/08/2004 05:58:21 |172.21.4.154 |224.0.1.24 |ACCESS
BLOCK
Firewall default policy: IGMP (W to W/ZW)
1|06/08/2004 05:58:20 |172.21.3.56 |239.255.255.250 |ACCESS
BLOCK
Firewall default policy: IGMP (W to W/ZW)
2|06/08/2004 05:58:20 |172.21.0.2 |239.255.255.254 |ACCESS
BLOCK
Firewall default policy: IGMP (W to W/ZW)
3|06/08/2004 05:58:20 |172.21.3.191 |224.0.1.22 |ACCESS
BLOCK
Firewall default policy: IGMP (W to W/ZW)
4|06/08/2004 05:58:20 |172.21.0.254 |224.0.0.1 |ACCESS
BLOCK
Firewall default policy: IGMP (W to W/ZW)
5|06/08/2004 05:58:20 |172.21.4.187:137 |172.21.255.255:137 |ACCESS
BLOCK
Firewall default policy: UDP (W to W/ZW)

ras> ls wrr 10 5
ras> ls mode 2
ras> ls disp
Load Sharing Active: Yes
Load Sharing dispatch outgoing traffic by Weighted Round Robin
WAN1 weight: 10, WAN2 weight: 5

ras> ipsec ipsecAdd
ras> ipsec ipsecConfig name VPN-ph2
ras> ipsec ipsecConfig active Yes
ras> ipsec ipsecConfig saIndex 1
ras> ipsec ipsecConfig activeProtocol 1
ras> ipsec ipsecConfig encap 0
ras> ipsec ipsecConfig lcAddrType 2
ras> ipsec ipsecConfig lcAddrStart 192.168.1.1
ras> ipsec ipsecConfig lcAddrEndMask 255.255.255.0
ras> ipsec ipsecConfig rmAddrType 0
ras> ipsec ipsecConfig rmAddrStart 192.168.2.250
ras> ipsec ipsecSave

Richiama la phase 1 definita nell’ saIndex 1.

ras> ipsec ikeAdd
ras> ipsec ikeConfig name VPN-ph1
ras> ipsec ikeConfig myIpAddr 10.1.1.1
ras> ipsec ikeConfig secureGwAddr 10.1.1.2
ras> ipsec ikeConfig authMethod 0
ras> ipsec ikeConfig preShareKey 12345678
ras> ipsec ikeSave

Setta l’ IP WAN a 10.1.1.1, l’ IP remoto a 10.1.1.2 e la PSK a 12345678.

ras> ip pingext 172.16.2.56 -n 5
Resolving 172.16.2.56… 172.16.2.56
sent rcvd size rtt avg max min
1 1 36 0 0 0 0
2 2 36 0 0 0 0
3 3 36 0 0 0 0
4 4 36 0 0 0 0
5 5 36 0 0 0 0
Extended Ping From device to 172.16.2.56:
Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),
Approximate Round Trip Times in milli-seconds:
RTT: Average = 0ms, Maximum = 0ms, Minimum = 0ms

ras> ip ifconfig enif1 172.16.2.2/16
enif1: mtu 1500 mss 1460
inet 172.16.2.2, netmask 0xffff0000, broadcast 172.16.255.255
RIP RX:None, TX:None,
[InOctets 197396] [InUnicast 621] [InMulticast 982]
[InDiscards 72] [InErrors 0] [InUnknownProtos 72]
[OutOctets 89305] [OutUnicast 629] [OutMulticast 0]
[OutDiscards 0] [OutErrors 0]

ras> ip stroute load 3
========== Routing Rule in Buffer ==========
Route number : 3
Route Name :
Active : No
Destination IP Address : 0.0.0.0
IP Subnet Mask : 0.0.0.0
Gateway IP Address : 0.0.0.0
Metric : 0
Private : No
ras> ip stroute config name Example
Change Route Name to : Example
ras> ip stroute config destination 2.2.2.2 192.168.1.9 3
Change Destination IP Address to : 2.2.2.2
Change Gateway IP Address to : 192.168.1.9
Change Subnet Mask to : 255.0.0.0
ras> ip stroute config active yes
Setting Active to Yes.
ras> ip stroute save
=========== Routing Rule Setting ===========
Route number : 3
Route Name : Example
Active : Yes
Destination IP Address : 2.2.2.2
IP Subnet Mask : 255.0.0.0
Gateway IP Address : 192.168.1.9
Metric : 3
Private : No

Invia tutto il traffico per l’IP address 2.2.2.2 al gateway 192.168.1.9 con metric 3.

ras> ip igmp status
Group groupLink ifaceLink flags
224.0.0.12 [0102fd80 00c618c0] [0102fdc4 0102fdc4] 0003
224.0.0.9 [0102fd4c 0102fdb4] [0102fd90 0102fd90] 0001
224.0.0.2 [0102fd18 0102fd80] [0102fd5c 0102fd5c] 0001
224.0.0.1 [00c618c0 0102fd4c] [0102fd28 0102fd28] 0001
iface enif0 flags 00000000
query interval 125 sec, max rsp time 100 1/10 sec, group timeout 260 sec,
counter 0, query timer 0 sec, v1 host present timer 0 sec,
ttl threshold 1
multicast group:
——————snip———————-iface enif5:1 flags 00000000
query interval 0 sec, max rsp time 0 1/10 sec, group timeout 0 sec,
counter 0, query timer 0 sec, v1 host present timer 0 sec,
ttl threshold 0
multicast group:

ras> ip dns lan edit 0 0 1 1
ras> ip dns lan edit 1 1 192.168.1.5
ras> ip dns lan edit 2 3
ras> ip dns lan display
Router assigned DNS servers to host
===================================
First DNS server is from WAN_1, DNS server index 1
Second DNS server is user defined: 192.168.1.5
Third DNS server is none