Gearlinx logo

Introduction

The Duckfone platform is an enterprise 4G LTE cellular gateway and connectivity solution, designed to provide cellular connectivity and remote access to enterprise, retail, branch, and remote locations.

This manual documents administration of the device – the configuration, status, and commands – using the command line interface (CLI) and the web interface.

Hardware

  • Global 4G LTE module
  • 2 × SIM slots
  • 4 × RJ45 serial ports
  • 1 × 10/100/1000 Ethernet port

Product image

Accessing the device

The device's default configuration allows logging in to the device with the following credentials:

  • Username: admin
  • Password: see unique password on device label

Additionally, if the device is connected to the internet and can access Gearlinx ZERO, a user permitted to access the device via ZERO can log in locally with their ZERO credentials.

Network services

Network services are accessible on the device's internal network interfaces. The device's hostname is set as its serial number, and the device's IP address can be resolved with mDNS. For example, NR4448-0000123456789.local.

The following network services are available:

  • SSH to the device at <serial>.local.
  • Enter https://<serial>.local in your browser to access the web interface.
  • Access the device's web interface via Gearlinx ZERO.

Serial console

The device's serial port labelled Console runs a login. Connect to the serial port with settings 115200 / 8N1.

Resource menu

After logging in to the device over a terminal interface such as SSH or the serial console, you will be presented with the resource menu.

The resource menu shows the textual resources that the authenticated user is given access to, such as serial ports and system logs. The CLI is available to users with the Administration permission under the option System / CLI.

When accessing the web interface, the resource menu can be found under the Connect menu in the page header. Users with the Administration permission will find the Administration menu on the navigation bar on the left of the page. This menu provides access to the same configuration, status, and command functionality as the CLI.

CLI

The command line interface (CLI) is used to perform administration tasks when accessing the device over a terminal interface. Administration tasks include changing configuration, viewing status, and running commands.

The structure of the CLI commands and printed data is consistent with the structure of the web interface's administration pages. See the Administration reference section of this manual for documentation on the structure and content of this data.

Using the CLI

When the CLI starts, the main prompt is printed:

(cli)>

Typing ? shows contextual information and suggestions for autocompletion:

Gearlinux CLI

config  Enter configuration mode.
show    Enter show mode.
run     Run a command.
exit    Exit the CLI.

Pressing the TAB key also shows the suggestions list, and will autocomplete the word if the start of a word already entered prefixes one of the suggestions. The CLI supports line editing.

Configuration and status data is printed in YAML format. Output text that exceeds the height of the terminal is paged. When paged, pressing the space key shows the next page of text, pressing r prints the remaining text, and q cancels the pager without printing.

Basic configuration command

The CLI can be used to inspect and change the device's configuration. While at the main CLI prompt, the config command interacts with the device's current configuration, and is updated automatically when the device's configuration changes by automations or other administration sessions.

To print configuration, enter config keyword and the administration path, then press enter.

(cli)> config <PATH>

For example, to print details of the device at path system info:

(cli)> config system info
name: null
location: null
contact: null

To make simple configuration changes to string, integer, boolean, selection, and reference data types, append a value to the print command.

(cli)> config <PATH> <VALUE>

For example, to set the device's name system info name to nr44-bay18

(cli)> config system info name nr44-bay18

Multiple values can be set in one command by adding another path (relative to the previous set field) and value.

(cli)> config system info name nr44-bay18 location "Data center 1"

The changes are applied and saved to disk if they pass validation.

Configuration mode

Configuration mode allows advanced configuration changes, including adding or deleting items of a list, reverting configuration to defaults, and applying configuration changes without saving them to disk, require using the configuration mode. In configuration mode, a copy of the device's current configuration is made available for editing so that multiple operations can be performed before saving.

Enter configuration mode by running config with no parameters.

(cli)> config

The syntax of the basic configuration command, without the leading config keyword, is used to show and change the configuration.

(config)> system info name nr44-bay18

(config)> system info
name: nr44-bay18
location: null
contact: null

The following commands are available:

add       Add an item.
delete    Delete an item or value.
cd        Change data path.
validate  Validate the configuration.
apply     Apply the configuration.
save      Save the configuration to disk.
default   Revert to default.
discard   Discard the configuration changes.
changes   Show unapplied changes.
exit      Leave configuration mode without saving.

Enter the command keyword followed by ? to view help for the command.

When the configuration has been edited as required, run the save command to apply the configuration changes and save them to disk. The save command will fail if any configuration fields are invalid.

(config)> save

Run the exit command to return to the main CLI prompt.

(config)> exit
(cli)>

Show state command (configuration and status)

The CLI can be used to inspect the device's state. While at the main CLI prompt, the show command prints the device's current configuration and status, and is updated automatically.

To print state, enter the show keyword and the administration path, then press enter.

(cli)> show <PATH>

For example, to print details of the device at path system info:

(cli)> show system info
name: null
hostname: NR4416-0110923000657
mac: d4:c3:b0:01:03:b0
serial: NR4416-0110923000657
location: null
contact: null

Running commands

The CLI can be used to run administrative operation commands.

To run a command, enter the run keyword and the administration path, then parameters using the configuration set path/value syntax.

For example, backing up the configuration to the local configuration store with the name backup 2023-06-15:

(cli)> run system config save-to-store name "backup 2023-06-15"

Command succeeded.

To run a command with no parameters, or default parameters (if available), omit the parameters. For example, restart the device by running the command:

(cli)> run system operations restart

System restarting.

Serial ports

The device's serial ports.

Default Serial port items cannot be deleted.

Serial port

Properties

Enable

Enable the serial port for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config serial <key> enable

Label

The label used to describe and locate this serial port.

Whenever this serial port is displayed the label will be used in preference, or addition to, the serial port number. The Label is also added as a tag allowing it to be located easily is searching and configuration.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config serial <key> label

Device type

OptionLabel
ttySerial port
tcpTCP port
  • Data type: string select
  • Default: tty
  • Configuration
  • Required

CLI: (cli)> config serial <key> type

Resource tags

Apply these tags to resources associated with this serial port.

Tagging provides a convenient method for finding single and group resources. The serial port label is automatically added to the ports tags.

  • Data type: string list
  • Configuration

CLI: (cli)> config serial <key> tags

Mode

The mode of operation for this serial port.

The serial port mode determines how serial port is accessed and what options are allowed when connected.

OptionLabelDescription
remoteRemote accessAccess an external serial appliance remotely. Suitable for remotely accessing a serial console on servers or other appliances, and if required, interacting with those appliances via their serial interface.
loginSystem loginProvide a traditional login service. A login service will allow remote CLI access to this device. A console server, modem or other appliance can be used to access the CLI on this device via the serial port.
  • Data type: string select
  • Default: remote
  • Configuration
  • Required

CLI: (cli)> config serial <key> mode

Escape character (ASCII character code)

The escape character to enter for menu and command access.

Enter the escape character followed by a command character while connected to a serial port in order to access the menu or serial port commands. The following sequences are possible:

 Escape-Char 'q' : quit
 Escape-Char 'b' : send serial break
 Escape-Char 'd' : list or disconnect other sessions
 Escape-Char 's' : port history (graphical terminal only)
 Escape-Char '?' : help

The table below lists the decimal values for the escape character, control characters are prefixed with '^'.

00102030405060708090100110120
0^J^T^^(2<FPZdnx
1^A^K^U^)3=GQ[eoy
2^B^L^V^?*4>HR\fpz
3^C^M^W!+5?IS]gq{
4^D^N^X",6@JT^hr
5^E^O^Y#-7AKU_is}
6^F^P^Z$.8BLV`jt~
7^G^Q^[%/9CMWakuDEL
8^H^R^\&0:DNXblv
9^I^S^]'1;EOYcmw
  • Data type: integer
  • Default: 30
  • Minimum: 1
  • Maximum: 255
  • Configuration
  • Required

CLI: (cli)> config serial <key> escape-character

Single user mode

Allow only one user at a time.

The port will allow a single user to connect. While a user is connected, all other connection requests will be rejected and logged.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config serial <key> single-user

TCP

Settings for serial over TCP.

Properties

Hostname

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config serial <key> tcp hostname

Port

  • Data type: integer
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config serial <key> tcp port

Communications settings

The communications settings used for serial data and signaling.

Properties

Baud

The serial baud rate for this port.

The Baud rate determines the speed of the serial port. It is expressed in bits-per-second (bps). Communicating devices must be set to the same baud rate. The higher the baud rate the faster the connection. 9600 or 115200 are commonly used settings.

OptionLabel
5050
7575
110110
134134
150150
200200
300300
600600
12001200
18001800
24002400
48004800
96009600
1920019200
3840038400
5760057600
115200115200
  • Data type: string select
  • Default: 115200
  • Configuration
  • Required

CLI: (cli)> config serial <key> comms baud

Data bits

The number of data bits in each character transmitted or received.

8 data bits is by far the most common setting, only choose 7 data bits if it is required by the connected device.

OptionLabel
77
88
  • Data type: string select
  • Default: 8
  • Configuration
  • Required

CLI: (cli)> config serial <key> comms data-bits

Stop bits

The number of bits signifying the end of data.

1 stop bit is most commonly used with 8 data bits, other options should only be chosen when the communicating equipment is known to required specific settings.

OptionLabel
11
22
1.51.5
  • Data type: string select
  • Default: 1
  • Configuration
  • Required

CLI: (cli)> config serial <key> comms stop-bits

Parity

Parity checking is used to detect errors in the communication.

No parity checking is commonly used, only on specific use cases will another parity setting be required.

OptionLabelDescription
noneNone
evenEvenEven parity checking bits. The number of bits in each each transmission, including the parity bit, is even.
oddOddOdd parity checking bits. The number of bits in each each transmission, including the parity bit, is odd.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config serial <key> comms parity

Flow control

Flow control is used to pause communications when required.

No flow control is often used for low bandwidth interactive connections. A suitable flow control option should be chosen for higher throughput communications or when it is desirable to tell the peer to pause transmission to prevent overflows while the currently received data is processed.

OptionLabelDescription
noneNoneNo flow control. It is not possible to inform the peer that transmission should be paused, if either device is unable to receive incoming data it will be lost.
rts-ctsRTS/CTSRTS and CTS are used to set/check flow control status. RTS is asserted when it is ready for the peer to transmit, data is only transmitted to the peer when CTS asserted.
dtr-dsrDTR/DSRDTR and DSR are used to set/check flow control status. DTR is asserted when it is ready for the peer to transmit, data is only transmitted to the peer when DSR asserted.
swSoftware (XON/XOFF)In-band data characters are used to stop/start communications. IXOFF (^S) is transmitted to request the peer to pause sending, an IXOFF (^Q) is transmitted when it is ready for the peer to resume communications.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config serial <key> comms flow-control

Pinout

Select the Pinout of the serial connector.

This port has the ability to change the pinout it uses to help with communications to different devices.

OptionLabelDescription
straightStraightCisco straight pinout.
RJ45 Female PinSignal
---------------------
1CTS
2DSR
3RXD
4GND
5Not Connected
6TXD
7DTR
8RTS
rolledRolledAvocent/Cyclades pinout.
RJ45 Female PinSignal
---------------------
1RTS
2DTR
3TXD
4GND
5CTS
6RXD
7DCD
8DSR
  • Data type: string select
  • Default: straight
  • Configuration
  • Required

CLI: (cli)> config serial <key> comms pinout

Signals

Properties

CTS

CTS pin state.

  • Data type: boolean
  • Status

CLI: (cli)> show serial <key> signal cts

RTS

RTS pin state.

  • Data type: boolean
  • Status

CLI: (cli)> show serial <key> signal rts

DTR

DTR pin state.

  • Data type: boolean
  • Status

CLI: (cli)> show serial <key> signal dtr

DSR

DSR pin state.

  • Data type: boolean
  • Status

CLI: (cli)> show serial <key> signal dsr

DCD

DCD pin state.

  • Data type: boolean
  • Status

CLI: (cli)> show serial <key> signal dcd

Statistics

Properties

Received bytes

Total number of bytes received on the serial port.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show serial <key> statistics rx-bytes

Transmitted bytes

Total number of bytes transmitted on the serial port.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show serial <key> statistics tx-bytes

Framing errors

Total number of framing errors detected on the serial port.

A framing error occurs when the receiver does not see a clean start bit/stop bit data frame. It can be caused by incorrect settings or corruption.

  • Data type: integer
  • Status

CLI: (cli)> show serial <key> statistics framing-errors

Parity errors

Total number of parity errors detect on the serial port.

A parity error occurs when a bit in a data frame is corrupted.It can be caused by incorrect settings or corruption. Parity checking is a very rudimentary form of error checking and only detects some simple errors.

  • Data type: integer
  • Status

CLI: (cli)> show serial <key> statistics parity-errors

FIFO overruns

Total number of fifo overruns.

Fifo overruns occur when to much data is received for the serial port hardware to process and some data is discarded. This can caused by incorrect or no flow control settings.

  • Data type: integer
  • Status

CLI: (cli)> show serial <key> statistics fifo-overruns

Buffer overruns

Total number of buffer overruns.

Buffer overruns occur when to much data is received for the receiving application to process and the systems buffers have filled and extra data is discarded. This can caused by incorrect or no flow control settings preventing the receiving system from informing the transmitting system to pause transmission.

  • Data type: integer
  • Status

CLI: (cli)> show serial <key> statistics buffer-overruns

Serial breaks

Total number breaks.

A break on a serial port means a special 'non-data' bit sequence was received. Breaks are often used to send a special event or notification outside of the normal serial communications.

  • Data type: integer
  • Status

CLI: (cli)> show serial <key> statistics serial-breaks

Direct access

  • SSH - Allow direct connection to the serial port using SSH.
  • Telnet - Allow direct connection to the serial port using telnet.

SSH

Allow direct connection to the serial port using SSH.

Access the serial port with an encrypted SSH session using a command similar to:

ssh -p <port> <username>@<ip address of device>

Use the SSH escape character to control the SSH session.

Properties

Enable

Enable the network service.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config serial <key> access ssh enable

Port

The IP port the service operates on.

  • Data type: integer
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Optional

CLI: (cli)> config serial <key> access ssh port

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config serial <key> access ssh acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config serial <key> access ssh acl zone

Telnet

Allow direct connection to the serial port using telnet.

Access the serial port with telnet using a command similar to:

telnet <ip address of device> <port>

Use the telnet escape character to control the session (traditionally ^[).

Properties

Enable

Enable the network service.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config serial <key> access telnet enable

Port

The IP port the service operates on.

  • Data type: integer
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Optional

CLI: (cli)> config serial <key> access telnet port

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config serial <key> access telnet acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config serial <key> access telnet acl zone

Logging

  • File based log settings - Control how serial information is logged to a file.
  • Syslog - Configure how serial port logs are distinguished within log files.

Properties

Mode

Customize the serial information that is logged.

Choose the level of detail that is logged for this serial port. The more types of information that are logged the larger the quantity of data logged.

OptionLabel
noneNo logging
eventsEvents (Login/Logout/Signals)
events+rxEvents + RXed characters
events+rx+txEvents RXed/TXed characters (Warning: will echo passwords)
  • Data type: string select
  • Default: events+rx
  • Configuration
  • Required

CLI: (cli)> config serial <key> logging log-mode

Destination

Direct serial logs to different log stores.

OptionLabel
fileFilesystem
syslogSystem log
  • Data type: string select
  • Default: file
  • Configuration
  • Required

CLI: (cli)> config serial <key> logging log-destination

File based log settings

Control how serial information is logged to a file.

Properties

Store logs on File System

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Default: /storage/volume/serial-logs
  • Configuration
  • Required

CLI: (cli)> config serial <key> logging file-settings file-system

Maximum log file size (kB)

  • Data type: integer
  • Default: 256
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config serial <key> logging file-settings log-file-size

Number of allowed rotations

  • Data type: integer
  • Default: 3
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config serial <key> logging file-settings num-rotations

Syslog

Configure how serial port logs are distinguished within log files.

Properties

Log facility

The syslog 'log' facility used in serial port logs.

OptionLabel
0kernel
1user-level
2mail system
3system daemons
4security/auth
5internal syslog
6line printer
7news
8uucp
9clock
10security/authpriv
11ftp
12ntp
13log audit
14log alert
15clock daemon
16local0
17local1
18local2
19local3
20local4
21local5
22local6
23local7
  • Data type: string select
  • Default: 16
  • Configuration
  • Required

CLI: (cli)> config serial <key> logging syslog-settings log-facility

Log severity

The syslog 'log' severity used in serial port logs.

OptionLabel
0Emergency
1Alert
2Critical
3Error
4Warning
5Notice
6Info
7Debug
  • Data type: string select
  • Default: 6
  • Configuration
  • Required

CLI: (cli)> config serial <key> logging syslog-settings log-severity

Connected users

Session details

Active session details for connections to this port.

Properties

Username

The username used to authenticate when connecting to this port.

  • Data type: string
  • Status

CLI: (cli)> show serial <key> connected-user <index> username

Session start time

The time at which this user session started.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show serial <key> connected-user <index> session-start

Source address

The address the user is connecting from.

  • Data type: string
  • Status

CLI: (cli)> show serial <key> connected-user <index> src-address

Access method

Method used by user to access the serial port.

A serial port may be accessed by many methods. The method used by each connected user will be shown

OptionLabel
sshSSH
webWeb administration
telnetTelnet
serialSerial port
  • Data type: string select
  • Status

CLI: (cli)> show serial <key> connected-user <index> access-method

User has locked port

Access to the port is locked by this user.

A port that is set to single user mode will be locked while this user is connected and other users will be prevented from accessing the port.

  • Data type: boolean
  • Status

CLI: (cli)> show serial <key> connected-user <index> user-locked-port

Storage

  • Volumes
  • Disks - The device's internal storage disks.
  • Downloads - Download files to the device's storage.

Volumes

New Volume items can be added.

Volume

An object for the storage of data.

  • Volume size - Information on the capacity of the volume.

Properties

Label

The label used to describe and locate this filesystem.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config storage volume <key> label

Resource tags

Apply these tags to resources associated with this filesystem.

  • Data type: string list
  • Configuration

CLI: (cli)> config storage volume <key> tags

Disk

The disk that the volume's contents will be stored on.

  • Data type: reference path
  • References instances of: Storage / Disks
  • Default: /storage/disk/user-data
  • Configuration
  • Required

CLI: (cli)> config storage volume <key> disk

Volume size

Information on the capacity of the volume.

Properties

Space used

The disk space occupied by the files contained in the volume.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show storage volume <key> size used

Space available

The remaining space available on the disk.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show storage volume <key> size available

Disks

The device's internal storage disks.

Default Disk items cannot be deleted. New Disk items can be added.

Disk

Define a disk for use by the system.

  • Match disk - Use the attached disk that matches the criteria.
  • Match partition - Use the disk partition that matches the criteria.
  • Disk size - Information on the size of the disk.

Properties

Enable

Enable this disk.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config storage disk <key> enable

Label

The label used to describe and locate this disk.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config storage disk <key> label

Resource tags

Apply these tags to resources associated with this filesystem.

  • Data type: string list
  • Configuration

CLI: (cli)> config storage disk <key> tags

Status

The status of this disk.

  • Data type: string
  • Status

CLI: (cli)> show storage disk <key> status

Match disk

Use the attached disk that matches the criteria.

If no match criteria is configured, then any unused disk will match.

Match partition

Use the disk partition that matches the criteria.

If no match criteria is configured, then any unused disk partition will match.

Properties

Match partition label

The partition on the matched disk with this label will be used.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config storage disk <key> match-partition label

Match partition index

The partition on the matched disk with this index will be used.

  • Data type: integer
  • Minimum: 1
  • Configuration
  • Optional

CLI: (cli)> config storage disk <key> match-partition index

Disk size

Information on the size of the disk.

Properties

Partition size

The total size of the partition/disk

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show storage disk <key> size total

Space used

The amount of storage space currently occupied on the partition/disk.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show storage disk <key> size used

Space available

The amount of storage space available for use on the partition/disk.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show storage disk <key> size available

Downloads

Download files to the device's storage.

Downloaded files can be used with other device functionality, such as as virtual machine disk images, and firmware images for provisioning other devices with TFTP.

New Download items can be added.

Download

A file to download to the device's storage.

Properties

Enable

Enable this download.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config storage download <key> enable

File ready

Download is successful and complete.

  • Data type: boolean
  • Status

CLI: (cli)> show storage download <key> ready

Status

Current download status.

  • Data type: string
  • Status

CLI: (cli)> show storage download <key> status

URL

The URL to download.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config storage download <key> url

Destination filesystem

Download the file to this filesystem.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Default: /storage/disk/user-data
  • Configuration
  • Required

CLI: (cli)> config storage download <key> filesystem

Destination path

Path relative to the destination filesystem.

May contain "/" path separators to download to a subdirectory. Terminate with a path separator character to preserve the original filename.

  • Data type: string
  • Default: /
  • Configuration
  • Required

CLI: (cli)> config storage download <key> path

Read only

Downloaded file will be set read-only.

If the file is set as read-only and is modified, the hash check will fail and the file will be re-downloaded.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config storage download <key> read-only

Hash method

Check the downloaded file's integrity with a hash.

Select the hashing method for checking the downloaded file.

OptionLabelDescription
noneNoneNo hashing will be performed.
md5MD5MD5 hashing will be performed.
sha1SHA1SHA1 hashing will be performed.
sha256SHA256No hashing will be performed.
sha512SHA512No hashing will be performed.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config storage download <key> hash-method

Hash

The hash used to check the downloaded file's integrity.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config storage download <key> hash

Download progress

Information showing the download progress.

Properties

Downloaded

The percentage of the download completed.

  • Data type: integer
  • Units: %
  • Minimum: 0
  • Maximum: 100
  • Status

CLI: (cli)> show storage download <key> progress percent

Elapsed time

The elapse time since the download started.

  • Data type: integer
  • Units: seconds
  • Minimum: 0
  • Status

CLI: (cli)> show storage download <key> progress time-elapsed

Estimated time remaining

The estimated time until the download completes.

  • Data type: integer
  • Units: seconds
  • Minimum: 0
  • Status

CLI: (cli)> show storage download <key> progress time-remaining

Downloaded size

The number of bytes downloads so far.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show storage download <key> progress downloaded-size

File size

The full size of the download in progress.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show storage download <key> progress file-size

Average speed

The average download speed this download is achieving.

  • Data type: integer
  • Units: bytes/second
  • Minimum: 0
  • Status

CLI: (cli)> show storage download <key> progress average-speed

Network

  • Cellular
  • Ethernet - The device's ethernet interfaces.
  • VLANs - 802.1Q encapsulation for VLAN interfaces over Layer 2 network interfaces.
  • Flow - Control packet routing, filtering and forwarding with flow rules and zones.

Cellular

Connections

Connection

Properties

Enable

Enable this connection.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular connection <index> enable

Label

The Label used to help identify and find a connection.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network cellular connection <index> label

Connected

The network connection status.

OptionLabel
trueConnected
falseNot connected
  • Data type: boolean
  • Status

CLI: (cli)> show network cellular connection <index> connected

Status

Network connection status state.

  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> status

Connection attempts

The current number of attempts to establish the conneciton.

  • Data type: integer
  • Status

CLI: (cli)> show network cellular connection <index> attempts

Configured APN

The user configured APN for this connection.

  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> apn-config

Activated APN

The APN that is currently active for this connection.

  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> apn-activated

Metric

The network metric used for routing this connection.

  • Data type: integer
  • Default: 10
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> metric

APNs

Configured Access Point Names for this connection.

APN

Settings for this APN.

Properties

APN

The Access Point Name.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> apn <index> apn

Authentication method

The authentication needed by this APN.

OptionLabelDescription
noneNoneNo authentication is required.
papPAPPAP authentication is required.
chapCHAPCHAP authentication is required.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> apn <index> auth

Username

The username for authentication requests.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> apn <index> username

Password

The password for authentication requests.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> apn <index> password

IPv4

Static or fixed IPv4 address.

  • DNS servers - The DNS servers provided by this connection

Properties

Enable

Enable this IPv4 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular connection <index> ipv4 enable

Connected

Network connection status state.

OptionLabel
trueConnected
falseNot connected
  • Data type: boolean
  • Status

CLI: (cli)> show network cellular connection <index> ipv4 connected

Status

Network connection status state.

  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv4 status

Address

The static IPv4 Address/Network prefix using CIDR notation.

Specify the IPv4 address using the usual dotted quad (A.B.C.D) followed by the network prefix, for example 192.168.0.1/24.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv4 address

Gateway

The upstream IPv4 address for the default routing of packets.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv4 gateway

DNS servers

The DNS servers provided by this connection

DNS server

Properties

DNS server address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv4 dns <index> address

IPv6

Static or fixed IPv6 address.

Properties

Enable

Enable this IPv6 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular connection <index> ipv6 enable

Connected

OptionLabel
trueConnected
falseNot connected
  • Data type: boolean
  • Status

CLI: (cli)> show network cellular connection <index> ipv6 connected

Status

  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv6 status

Address

The static IPv6 Address/Network prefix using CIDR notation.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv6 address

Gateway

The upstream IPv6 address for the default routing of packets.

FormatDescription
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv6 gateway

Network prefix

IPv6 prefix.

Properties

Prefix network

The network for the prefix.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv6 prefix network

DNS servers

DNS server

Properties

DNS server address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> ipv6 dns <index> address

Interface

  • Statistics - Network interface statistics
  • Connectivity testing - Check interface connectivity to ensure its status is a true reflection of its operational capacity.

Properties

Source NAT

Replace the source address of packets leaving this interface.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular connection <index> interface snat

Weight

The weight for this interface when part of a multipath route reflecting its relative bandwidth or quality.

The weight should reflect the relative bandwidth or quality of this interface. The larger the weight, the better bandwidth or quality an interface provides. For example if interface A has twice the bandwidth of interface B, respectively using the weights 2 and 1 would reflect this.

  • Data type: integer
  • Default: 100
  • Minimum: 0
  • Maximum: 10000
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface weight

State

OptionLabelDescription
upUpThe interface is up and usable. An UP status does not ensure the interface is fully operational. Connectivity tests need to be performed on an interface that is UP.
downDownThe interface is down and is not usable.
unavailableUnavailableThe interface status is currently unavailable.
  • Data type: string select
  • Status

CLI: (cli)> show network cellular connection <index> interface state

MTU

Maximum Transmission Unit.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network cellular connection <index> interface mtu

Statistics

Network interface statistics

Properties

Received bytes

The total number of received bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network cellular connection <index> interface statistics rx-bytes

Transmitted bytes

The total number of transmitted bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network cellular connection <index> interface statistics tx-bytes

Received packets

The total number of received packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show network cellular connection <index> interface statistics rx-packets

Transmitted packets

The total number of transmitted packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show network cellular connection <index> interface statistics tx-packets

Connectivity testing

Check interface connectivity to ensure its status is a true reflection of its operational capacity.

  • Tests - Tests to run in order to determine if interface is ready.

Commands

Properties

Enable

Enable connectivity testing.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network cellular connection <index> interface connectivity enable

Interface ready

The interface is ready when it is passing its connectivity tests.

OptionLabel
trueInterface ready
falseInterface not ready
  • Data type: boolean
  • Status

CLI: (cli)> show network cellular connection <index> interface connectivity ready

Last pass at

The last time this connectivity test passed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network cellular connection <index> interface connectivity last-pass

Last fail at

The last time this connectivity test failed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network cellular connection <index> interface connectivity last-fail

Status

A Description of the current connectivity testing status.

  • Data type: string
  • Status

CLI: (cli)> show network cellular connection <index> interface connectivity status

Test interval

The time to wait between connectivity tests.

  • Data type: integer
  • Units: seconds
  • Default: 60
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity interval

Tests

Tests to run in order to determine if interface is ready.

Tests are executed in order until a test result determines the state of the interface, or, all tests have run and at least one passed.

Test

A single interface test.

Properties

Condition

OptionLabelDescription
requiredRequiredIf this test fails, the interface is considered not ready and testing stops.
If this test passes, testing continue with the next test.
sufficientSufficientIf this test passes, the interface is considered ready and testing stops.
If this test fails, testing continue with the next test.
  • Data type: string select
  • Default: required
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> condition

Number of runs

The number of times in a row that this test must run succesfully to pass. If a run fails the test fails immediately.

  • Data type: integer
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> runs

Run interval

The time to wait between test runs.

  • Data type: integer
  • Units: seconds
  • Default: 1
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> interval

Timeout period

Consider the run failed if it does not receive a successful response within a set period of time.

  • Data type: integer
  • Units: seconds
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> timeout

Test type

OptionLabelDescription
pingPingPerform an ICMP ping/response sequence.
fetchFetch (HTTP/HTTPS/FTP)Connection to a network host.
dnsDNSPerform a DNS lookup.
  • Data type: string select
  • Default: ping
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> type

Ping test

Check the interface with an ICMP echo request/reply.

Properties

Host

Host to ping during testing.

An ICMP echo-request will be sent to the provided host and the the coresponding ICMP echo-reply checked. A hostname or IP may be provided to test against.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> ping host

Payload size

The size of the packets used for testing.

Tuning the payload size of ping tests can be important for bandwidth sensitive applications.i The test interval in combination with the payload size allows the bandwidth consumption of the tests to be calculated and adjusted if required.

  • Data type: integer
  • Units: bytes
  • Default: 20
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> ping payload-size

HTTP/HTTPS/FTP file fetch test

Check the interface by downloading a file over HTTP, HTTPS, or FTP.

Properties

URL

The URL of the file to fetch.

Connectivity testing will check that it can download the file at the provided URL and receive a successful response. The URL may use the HTTP, HTTPS, or FTP protocol.

  • http://www.not-a-real-site.com/
  • https://www.not-a-real-site.com/
  • ftp://ftp.not-a-real-site.com/
FormatDescription
HTTP URLAn HTTP URL to a file.
HTTPS URLAn HTTPS URL to a file.
FTP URLAn FTP URL to a file.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> fetch url

DNS test

Check the interface by performing a DNS lookup.

Properties

DNS server address

The DNS server to test.

DNS testing will use the DNS server discovered on the interface if this is left blank. If a specific DNS server is required, its address or hostname should be entered here.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network cellular connection <index> interface connectivity test <index> dns address

Run tests

Run the configured tests now.

The command takes no parameters.

Signal

Properties

Signal level

  • Data type: integer
  • Units: / 5
  • Minimum: 0
  • Maximum: 5
  • Status

CLI: (cli)> show network cellular signal level

RSSI

Received Signal Strength Indicator.

  • Data type: integer
  • Units: dBm
  • Status

CLI: (cli)> show network cellular signal rssi

RSRP

Reference Signal Receive Power.

  • Data type: integer
  • Units: dBm
  • Status

CLI: (cli)> show network cellular signal rsrp

RSRQ

Reference Signal Receive Quality.

  • Data type: integer
  • Units: dB
  • Status

CLI: (cli)> show network cellular signal rsrq

SNR

Signal-to-Noise Ratio.

  • Data type: integer
  • Units: dB
  • Status

CLI: (cli)> show network cellular signal snr

Ec/Io

Energy per chip to Interference power ratio.

  • Data type: integer
  • Units: dBm
  • Status

CLI: (cli)> show network cellular signal ecio

Io

Interference power ratio.

  • Data type: integer
  • Units: dBm
  • Status

CLI: (cli)> show network cellular signal io

SINR

Signal to Interference and Noise Ratio.

  • Data type: integer
  • Units: dB
  • Status

CLI: (cli)> show network cellular signal sinr

Frequency band

The current band in use.

  • Data type: string
  • Status

CLI: (cli)> show network cellular signal band

Access technology

Network access scheme in use.

  • Data type: string
  • Status

CLI: (cli)> show network cellular signal access-tech

Automation

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular signal led enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Default: Signal strength LEDs
  • Configuration
  • Optional

CLI: (cli)> config network cellular signal led label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show network cellular signal led running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show network cellular signal led error

Script

The javascript automation source.

  • Data type: string
  • Default: `const platform = await import('@dryjs/platform');

const level = data;

for (let i = 1; i <= 5; i++) { await platform.setLED(signal${i}, level >= i); } `

  • Configuration
  • Required

CLI: (cli)> config network cellular signal led script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network cellular signal led schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular signal led run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Default: /network/cellular/signal/level
  • Configuration
  • Optional

CLI: (cli)> config network cellular signal led data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network cellular signal led data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network cellular signal led data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

Network

Information on current network connection.

Properties

Cellular generation

OptionLabel
2G2G
3G3G
4G4G
5G5G
  • Data type: string select
  • Status

CLI: (cli)> show network cellular network generation

Radio access network (RAN)

The Radio access network in use.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network ran

Operator

The provider of the network in use.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network operator

MCC

Mobile Country Code.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network mcc

MNC

Mobile Network Code.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network mnc

4G network

Properties

Registered

Has the device registered on a network.

  • Data type: boolean
  • Status

CLI: (cli)> show network cellular network 4g registered

Status

The current status of the connection.

OptionLabel
unregisteredUnregistered
registeredRegistered
searchingSearching
deniedRegistration denied
roamingRoaming
emergency-servicesEmergency services
unknownUnknown
  • Data type: string select
  • Status

CLI: (cli)> show network cellular network 4g status

Tracking Area Code (TAC)

Combines with CID to provide serving tower location.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network 4g tac

Cell ID (CID)

Combines with TAC to provide serving tower location.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network 4g cell-id

3G network

Properties

Registered

Has the device registered on a network.

  • Data type: boolean
  • Status

CLI: (cli)> show network cellular network 3g registered

Status

The current status of the connection.

OptionLabel
unregisteredUnregistered
registeredRegistered
searchingSearching
deniedRegistration denied
roamingRoaming
emergency-servicesEmergency services
unknownUnknown
  • Data type: string select
  • Status

CLI: (cli)> show network cellular network 3g status

Location area code (LAC)

Combines with CID to provide serving tower location.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network 3g lac

Cell ID (CID)

Combines with LAC to provide serving tower location.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network 3g cell-id

Automation

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular network led enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Default: Network status LED
  • Configuration
  • Optional

CLI: (cli)> config network cellular network led label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show network cellular network led running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show network cellular network led error

Script

The javascript automation source.

  • Data type: string
  • Default: `const platform = await import('@dryjs/platform');

if (data.active === false) return;

const connected = data.connection && Object.values(data.connection || {}).some(c => c.connected); let colour;

if (data.sim[data.sim.active]?.ready) { colour = { '5G': 'purple', '4G': 'blue', '3G': 'green', }[data.network.generation] || 'white'; } else { colour = 'red'; }

await platform.setLED(data.plugin ? 'plugin' : 'cell', colour, !connected); `

  • Configuration
  • Required

CLI: (cli)> config network cellular network led script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network cellular network led schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular network led run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Default: /network/cellular
  • Configuration
  • Optional

CLI: (cli)> config network cellular network led data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network cellular network led data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network cellular network led data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

SIM

Commands

Properties

Active SIM

The currently active SIM.

OptionLabel
sim1SIM1
sim2SIM2
  • Data type: string select
  • Status

CLI: (cli)> show network cellular sim active

Preferred SIM

Force the use of a specific SIM.

OptionLabel
sim1SIM1
sim2SIM2
  • Data type: string select
  • Configuration
  • Optional

CLI: (cli)> config network cellular sim preferred

SIM1

Properties

Present

The SIM is present.

  • Data type: boolean
  • Status

CLI: (cli)> show network cellular sim sim1 present

Ready

The SIM is ready for use.

  • Data type: boolean
  • Status

CLI: (cli)> show network cellular sim sim1 ready

Operator

The provider of the SIM in use.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim1 operator

IMSI

International Mobile Subscriber Identity.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim1 imsi

ICCID

Integrated Circuit Card ID.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim1 iccid

Phone number

The provisioned phone number for this SIM.

All active SIMs will have a phone number, however, it is not always possible to retrieve the number as it depends on the provisioning process for the SIM.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim1 number

Modem configuration

Modem configuration chosen for this SIM.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim1 config

Modem configuration version

Modem configuration version chosen for this SIM.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim1 config-version

SIM2

Properties

Present

The SIM is present.

  • Data type: boolean
  • Status

CLI: (cli)> show network cellular sim sim2 present

Ready

The SIM is ready for use.

  • Data type: boolean
  • Status

CLI: (cli)> show network cellular sim sim2 ready

Operator

The provider of the SIM in use.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim2 operator

IMSI

International Mobile Subscriber Identity.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim2 imsi

ICCID

Integrated Circuit Card ID.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim2 iccid

Phone number

The provisioned phone number for this SIM.

All active SIMs will have a phone number, however, it is not always possible to retrieve the number as it depends on the provisioning process for the SIM.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim2 number

Modem configuration

Modem configuration chosen for this SIM.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim2 config

Modem configuration version

Modem configuration version chosen for this SIM.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim sim2 config-version

Failover

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular sim failover enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Default: SIM failover
  • Configuration
  • Optional

CLI: (cli)> config network cellular sim failover label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show network cellular sim failover running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show network cellular sim failover error

Script

The javascript automation source.

  • Data type: string
  • Default: `const active = await model.pull('/network/cellular/sim/active'); const alt = active === 'sim1' ? 'sim2' : 'sim1';

/* Don't switch to the alternative SIM slot if it is absent. */ if (!data.sim[alt].present) return;

const maxAttempts = 5; const maxAttemptsExceeded = Object.values(data.connection || {}).some(con => con.attempts > maxAttempts);

/* Switch slot if the current SIM is absent, or a connection has exceeded the

  • maximum number of connection attempts. */ if (!data.sim[active].present || maxAttemptsExceeded) { console.log(Switching from ${active.toUpperCase()} to ${alt.toUpperCase()}); await model.runCommand('/network/cellular/sim/switch'); } `
  • Configuration
  • Required

CLI: (cli)> config network cellular sim failover script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network cellular sim failover schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network cellular sim failover run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network cellular sim failover data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network cellular sim failover data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network cellular sim failover data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

Switch SIM slot

Switch the active SIM slot now.

The command takes no parameters.

Details

Cellular Details

Properties

IMEI

The International Mobile Equipment Identity (IMEI) of the cellular modem.

  • Data type: string
  • Status

CLI: (cli)> show network cellular details imei

Serial number

The serial number of the cellular modem.

  • Data type: string
  • Status

CLI: (cli)> show network cellular details serial

Software revision

The software revision of the cellular modem.

  • Data type: string
  • Status

CLI: (cli)> show network cellular details revision

Platform

The platform reported by the cellular modem.

  • Data type: string
  • Status

CLI: (cli)> show network cellular details platform

Platform version

The platform version reported by the cellular modem.

  • Data type: string
  • Status

CLI: (cli)> show network cellular details platform-version

Ethernet

The device's ethernet interfaces.

Default Ethernet interface items cannot be deleted.

Ethernet interface

Properties

Enable

Enable this Layer 2 interface.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> enable

Label

The label used to describe and locate this ethernet interface.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> label

Speed

The negotiated (or fixed) speed of the connection

  • Data type: integer
  • Units: Mb/s
  • Status

CLI: (cli)> show network ethernet <key> speed

Duplex

The duplex status of the interface.

OptionLabelDescription
fullFullFull duplex connections allow data flow in both direction simultaneously
halfHalfHalf duplex connections only allow data flow in one direction at a time
  • Data type: string select
  • Status

CLI: (cli)> show network ethernet <key> duplex

Interface

  • Statistics - Network interface statistics
  • Connectivity testing - Check interface connectivity to ensure its status is a true reflection of its operational capacity.

Properties

Source NAT

Replace the source address of packets leaving this interface.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network ethernet <key> interface snat

Weight

The weight for this interface when part of a multipath route reflecting its relative bandwidth or quality.

The weight should reflect the relative bandwidth or quality of this interface. The larger the weight, the better bandwidth or quality an interface provides. For example if interface A has twice the bandwidth of interface B, respectively using the weights 2 and 1 would reflect this.

  • Data type: integer
  • Default: 100
  • Minimum: 0
  • Maximum: 10000
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface weight

State

OptionLabelDescription
upUpThe interface is up and usable. An UP status does not ensure the interface is fully operational. Connectivity tests need to be performed on an interface that is UP.
downDownThe interface is down and is not usable.
unavailableUnavailableThe interface status is currently unavailable.
  • Data type: string select
  • Status

CLI: (cli)> show network ethernet <key> interface state

Carrier

Carrier indicated that an interface is physically able to pass traffic.

OptionLabel
trueCarrier
falseNo carrier
  • Data type: boolean
  • Status

CLI: (cli)> show network ethernet <key> interface carrier

MAC address

Media Access Control address.

The MAC address is a unique identifier assigned to this interface for use as a network address in communications with a network segment.

  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> interface mac

MTU

Maximum Transmission Unit.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network ethernet <key> interface mtu

Statistics

Network interface statistics

Properties

Received bytes

The total number of received bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network ethernet <key> interface statistics rx-bytes

Transmitted bytes

The total number of transmitted bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network ethernet <key> interface statistics tx-bytes

Received packets

The total number of received packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show network ethernet <key> interface statistics rx-packets

Transmitted packets

The total number of transmitted packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show network ethernet <key> interface statistics tx-packets

Connectivity testing

Check interface connectivity to ensure its status is a true reflection of its operational capacity.

  • Tests - Tests to run in order to determine if interface is ready.

Commands

Properties

Enable

Enable connectivity testing.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network ethernet <key> interface connectivity enable

Interface ready

The interface is ready when it is passing its connectivity tests.

OptionLabel
trueInterface ready
falseInterface not ready
  • Data type: boolean
  • Status

CLI: (cli)> show network ethernet <key> interface connectivity ready

Last pass at

The last time this connectivity test passed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network ethernet <key> interface connectivity last-pass

Last fail at

The last time this connectivity test failed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network ethernet <key> interface connectivity last-fail

Status

A Description of the current connectivity testing status.

  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> interface connectivity status

Test interval

The time to wait between connectivity tests.

  • Data type: integer
  • Units: seconds
  • Default: 60
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity interval

Tests

Tests to run in order to determine if interface is ready.

Tests are executed in order until a test result determines the state of the interface, or, all tests have run and at least one passed.

Test

A single interface test.

Properties

Condition

OptionLabelDescription
requiredRequiredIf this test fails, the interface is considered not ready and testing stops.
If this test passes, testing continue with the next test.
sufficientSufficientIf this test passes, the interface is considered ready and testing stops.
If this test fails, testing continue with the next test.
  • Data type: string select
  • Default: required
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> condition

Number of runs

The number of times in a row that this test must run succesfully to pass. If a run fails the test fails immediately.

  • Data type: integer
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> runs

Run interval

The time to wait between test runs.

  • Data type: integer
  • Units: seconds
  • Default: 1
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> interval

Timeout period

Consider the run failed if it does not receive a successful response within a set period of time.

  • Data type: integer
  • Units: seconds
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> timeout

Test type

OptionLabelDescription
pingPingPerform an ICMP ping/response sequence.
fetchFetch (HTTP/HTTPS/FTP)Connection to a network host.
dnsDNSPerform a DNS lookup.
  • Data type: string select
  • Default: ping
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> type

Ping test

Check the interface with an ICMP echo request/reply.

Properties

Host

Host to ping during testing.

An ICMP echo-request will be sent to the provided host and the the coresponding ICMP echo-reply checked. A hostname or IP may be provided to test against.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> ping host

Payload size

The size of the packets used for testing.

Tuning the payload size of ping tests can be important for bandwidth sensitive applications.i The test interval in combination with the payload size allows the bandwidth consumption of the tests to be calculated and adjusted if required.

  • Data type: integer
  • Units: bytes
  • Default: 20
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> ping payload-size

HTTP/HTTPS/FTP file fetch test

Check the interface by downloading a file over HTTP, HTTPS, or FTP.

Properties

URL

The URL of the file to fetch.

Connectivity testing will check that it can download the file at the provided URL and receive a successful response. The URL may use the HTTP, HTTPS, or FTP protocol.

  • http://www.not-a-real-site.com/
  • https://www.not-a-real-site.com/
  • ftp://ftp.not-a-real-site.com/
FormatDescription
HTTP URLAn HTTP URL to a file.
HTTPS URLAn HTTPS URL to a file.
FTP URLAn FTP URL to a file.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> interface connectivity test <index> fetch url

DNS test

Check the interface by performing a DNS lookup.

Properties

DNS server address

The DNS server to test.

DNS testing will use the DNS server discovered on the interface if this is left blank. If a specific DNS server is required, its address or hostname should be entered here.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> interface connectivity test <index> dns address

Run tests

Run the configured tests now.

The command takes no parameters.

IPv4

Static IP addresses

Static IP address

Static or fixed IPv4 address.

Properties

Enable

Enable this IPv4 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 static <index> enable

Address

The static IPv4 Address/Network prefix using CIDR notation.

Specify the IPv4 address using the usual dotted quad (A.B.C.D) followed by the network prefix, for example 192.168.0.1/24.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 static <index> address

Gateway

The upstream IPv4 address for the default routing of packets.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 static <index> gateway

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 static <index> metric

Static routes

Route

A route to a host or network.

Properties

Enable

Enable this route.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 route <index> enable

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 route <index> dst

Gateway address

The upstream gateway for routes associated with this connection.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Default: 0.0.0.0
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 route <index> gateway

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 route <index> metric

DHCP

Properties

DHCP mode

OptionLabel
clientClient
serverServer
relayRelay
noneNone
passthroughPassthrough
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp mode

DHCP client

Request addressing from a DHCP server connect via this interface.

  • Lease - The current lease details.

Properties

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp client metric

Client identifier

The identifier sent in DHCP requests.

Include this string value in the DHCP client identifier option (number 61) instead of the interface's MAC address.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp client client-identifier

Lease

The current lease details.

  • DNS servers - The DNS servers provided by the current lease.
  • NTP servers - The NTP servers provided by the current lease.

Properties

Lease address

The address provided by the current lease.

Specify the IPv4 address using the usual dotted quad (A.B.C.D) followed by the network prefix, for example 192.168.0.1/24.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease address

Gateway

The gateway provided by the current lease.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease gateway

DNS servers

The DNS servers provided by the current lease.

DNS server

Properties

DNS server address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease dns <index> address

Source address

  • Data type: reference path
  • References instances of: Network / ip / Addresses
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease dns <index> src

NTP servers

The NTP servers provided by the current lease.

NTP server

The NTP server used for time synchronization.

Properties

Address

The network address of the NTP server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease ntp <index> address

Authentication key index

  • Data type: integer
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease ntp <index> auth-key-idx

Server pool

Server address is a pool of servers.

  • Data type: boolean
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease ntp <index> pool

Protocol version

OptionLabel
3NTPv3
4NTPv4
  • Data type: string select
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp client lease ntp <index> version

DHCP server

A DHCP server instance.

  • Lease pool - A group of IP address that can be issued to clients requesting an address.
  • Static leases - Lock a specific lease address to a known host.
  • Active leases - Leases that have been provided or renewed with the previous lease time period.
  • DHCP options - DHCP options can be used to fine tune a DHCP server for a particular deployment scenario.

Properties

Lease time

The time this lease will remain valid for when issued.

  • Data type: integer
  • Units: seconds
  • Default: 43200
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp server lease-time

Lease pool

A group of IP address that can be issued to clients requesting an address.

More than one lease pool can be provided. Addresses will be allocated from the combination of all pools.

Lease range

The range of addresses to add to the pool.

Range start and Range end are included in the pool.

Properties

Range start

The first address of the range.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
Unsigned integer (8-bit)An integer between 0 and 255.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server lease-pool <index> start

Range end

The final address of the range.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
Unsigned integer (8-bit)An integer between 0 and 255.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server lease-pool <index> end

Static leases

Lock a specific lease address to a known host.

Static leases are used to ensure essential servers like servers always use the same address.

Static lease

A single static lease.

Properties

MAC

The MAC address of the client this lease applies to.

FormatDescription
MAC address (wildcard match)A MAC address with colon (:) separated octets. Use '*' in place of an octect number to match any value.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp server static-lease <index> mac

Hostname

FormatDescription
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server static-lease <index> hostname

Address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server static-lease <index> address

Active leases

Leases that have been provided or renewed with the previous lease time period.

Lease

Properties

Hostname

FormatDescription
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp server active-lease <index> hostname

Address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp server active-lease <index> address

MAC

The MAC address of the client receiving the address.

FormatDescription
MAC addressA MAC address with colon (:) separated octets.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp server active-lease <index> mac

Expires at

The time at which this lease expires.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp server active-lease <index> expires

Relay address

The address of the upstream DHCP server that provided the lease.

  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp server active-lease <index> relay

DHCP options

DHCP options can be used to fine tune a DHCP server for a particular deployment scenario.

Properties

Gateway

Provide the client with a default route via this gateway address.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option gateway

MTU

Instruct the client to set its MTU to the provided value.

  • Data type: integer
  • Units: bytes
  • Default: 1500
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option mtu

DNS servers

Provide the client with the listed DNS servers

Properties

DNS option mode

Controls how DNS servers are provided to clients.

When the DNS server is enabled and Automatic DNS servers is selected, the DHCP server provides clients with the address of this DNS server rather than the upstream DNS servers.

OptionLabelDescription
autoAutomatic DNS serversProvide the local caching DNS server, if enabled, otherwise provide upstream DNS servers.
customCustom DNS serversProvide the DNS servers listed here.
  • Data type: string select
  • Default: auto
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option dns mode

Custom DNS servers

Clients are provided the listed DNS servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option dns custom

NTP servers

Provide the client with the listed NTP servers

Properties

Custom NTP servers

Clients are provided the listed NTP servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option ntp custom

WINS servers

Provide the client with the listed WINS servers

Properties

Custom WINS servers

Clients are provided the listed WINS servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option wins custom

BOOT File

Provide a boot file to the client.

Properties

BOOT filename

The name of the file the client should load.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option boot filename

TFTP server address

The address of the TFTP server hosting the file.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option boot server

Custom DHCP options

Arbitary custom DHCP server options

There are a huge number of DHCP options, many of which are rarely used. If the option required is not listed above, most other options can be manually configure using the following paramaters.

Option

Properties

Option number

The RFC2939 option number.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option custom <index> number

Value

The value for this option.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option custom <index> value

Always send to client

Send this option in all communications with a client when enabled.

Without Always send to client enabled, the option is only sent if requested by the client.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp server option custom <index> always-send

DHCP relay

Properties

DHCP relay servers

Relay DHCP requests to these DHCP servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp relay server

Passthrough

Properties

Source address

The address to passthrough.

  • Data type: reference path
  • References instances of: Network / ipv4 / Static IP addresses
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp passthrough address

Client MAC address

The MAC address of the client receiving the passthrough address.

Provide the lease of the passthrough address to the client with this MAC address.

FormatDescription
MAC addressA MAC address with colon (:) separated octets.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp passthrough mac

Link-local address

Properties

Enable

Enable Link-local address on this interface.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 link-local enable

Address

The Link-local address obtained this interface.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 link-local address

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 100
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 link-local metric

Automation

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Default: DHCP client / link-local address fallback
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp-client-link-local-fallback running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv4 dhcp-client-link-local-fallback error

Script

The javascript automation source.

  • Data type: string
  • Default: if (data.mode === 'client') { const enable = !data.client.lease.address; console.log(${enable ? 'Enabling' : 'Disabling'} IPv4 link-local address) await model.push('../link-local/enable', enable); }
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Default: ../dhcp
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv4 dhcp-client-link-local-fallback data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

IPv6

Static IP addresses

Static IP address

Static or fixed IPv6 address.

Properties

Enable

Enable this IPv6 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 static <index> enable

Address

The static IPv6 Address/Network prefix using CIDR notation.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 static <index> address

Gateway

The upstream IPv6 address for the default routing of packets.

FormatDescription
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv6 static <index> gateway

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 static <index> metric

Prefix assignments

Prefix assignment

An IPv6 prefix assignment.

Properties

Enable

Enable this IPv6 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 prefix-assignment <index> enable

Address

The static IPv6 Address/Network prefix using CIDR notation.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv6 prefix-assignment <index> address

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 prefix-assignment <index> metric

Source prefix

The source network prefix.

  • Data type: reference path
  • References instances of: Network / ipv6 / Prefixes
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 prefix-assignment <index> prefix

Subnet

The IPv6 subnet.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Default: 0:0:0:0::/64
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 prefix-assignment <index> subnet

Static routes

Route

A route to a host or network.

Properties

Enable

Enable this route.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 route <index> enable

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 route <index> dst

Gateway address

The upstream gateway for routes associated with this connection.

FormatDescription
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Default: ::
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv6 route <index> gateway

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 route <index> metric

SLAAC/DHCPv6 client

Configuration for a SLAAC/DHCPv6 client on this interface.

Properties

Enable

Enable this SLAAC/DHCPv6 client.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 client enable

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 client metric

IPv6 addresses

The IPv6 addresses obtained.

Static IP address

Static or fixed IPv6 address.

Properties

Address

The static IPv6 Address/Network prefix using CIDR notation.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client address <index> address

Address Type

The source of this assigned address.

OptionLabelDescription
dhcpv6DHCPv6Address acquired using DHCPv6 provided or supplemented information.
slaacSLAACAddress acquired using stateless autoconfiguration.
noneNo addressNo address has been acquired.
  • Data type: string select
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client address <index> address-type

Request prefix delegation

Acquired prefix delegations.

Delegated prefix

An acquired prefix delegation.

Properties

Prefix network

The network for the prefix.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client prefix <index> network

DNS servers

Provided DNS servers.

DNS server

Properties

DNS server address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client dns <index> address

Routes

Provided routes.

Route

A route to a host or network.

Properties

Enable

Enable this route.

  • Data type: boolean
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client route <index> enable

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client route <index> dst

Gateway address

The upstream gateway for routes associated with this connection.

FormatDescription
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client route <index> gateway

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Minimum: 0
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client route <index> metric

NTP servers

Provided NTP servers.

NTP server

The NTP server used for time synchronization.

Properties

Address

The network address of the NTP server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client ntp <index> address

Authentication key index

  • Data type: integer
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client ntp <index> auth-key-idx

Server pool

Server address is a pool of servers.

  • Data type: boolean
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client ntp <index> pool

Protocol version

OptionLabel
3NTPv3
4NTPv4
  • Data type: string select
  • Status

CLI: (cli)> show network ethernet <key> ipv6 client ntp <index> version

RA/DHCPv6 server

RA/DHCPv6 server configurtion for an interace.

  • DHCPv6 options - Optional configuration provided by DHCPv6 server to clients.

Properties

Enable

Enable this RA/DHCPv6 server.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 server enable

Lease time

The lease time assigned to client leases.

  • Data type: integer
  • Units: seconds
  • Default: 43200
  • Configuration
  • Optional

CLI: (cli)> config network ethernet <key> ipv6 server lease-time

DHCPv6 options

Optional configuration provided by DHCPv6 server to clients.

DNS servers

Provide the client with these DNS servers.

Properties

DNS option mode

Controls how DNS servers are provided to clients.

When the DNS server is enabled and Automatic DNS servers is selected, the DHCP server provides clients with the address of this DNS server rather than the upstream DNS servers.

OptionLabelDescription
autoAutomatic DNS serversProvide the local caching DNS server, if enabled, otherwise provide upstream DNS servers.
customCustom DNS serversProvide the DNS servers listed here.
  • Data type: string select
  • Default: auto
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 server option dns mode

Custom DNS servers

Clients are provided the listed DNS servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 server option dns custom

NTP servers

Provide the client with the listed NTP servers

Properties

Custom NTP servers

Custom NTP servers

  • Data type: string list
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 server option ntp custom

Custom DHCP options

Arbitary custom DHCP server options

There are a huge number of DHCP options, many of which are rarely used. If the option required is not listed above, most other options can be manually configure using the following paramaters.

Option

Properties

Option number

The RFC2939 option number.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 server option custom <index> number

Value

The value for this option.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network ethernet <key> ipv6 server option custom <index> value

Always send to client

Send this option in all communications with a client when enabled.

Without Always send to client enabled, the option is only sent if requested by the client.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network ethernet <key> ipv6 server option custom <index> always-send

VLANs

802.1Q encapsulation for VLAN interfaces over Layer 2 network interfaces.

New VLAN items can be added.

VLAN

Properties

Enable

Enable this VLAN.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> enable

Label

The label used to describe and locate this VLAN.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> label

Parent interface

The interface the VLAN will operate on.

  • Data type: reference path
  • References instances of: Network / Layer 2 interfaces
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> parent-interface

VLAN ID

The ID for this VLAN.

Devices participating on the VLAN must have the same ID.

  • Data type: integer
  • Default: 1
  • Minimum: 0
  • Maximum: 4095
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> vlan-id

Interface

  • Statistics - Network interface statistics
  • Connectivity testing - Check interface connectivity to ensure its status is a true reflection of its operational capacity.

Properties

Source NAT

Replace the source address of packets leaving this interface.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network vlan <key> interface snat

Weight

The weight for this interface when part of a multipath route reflecting its relative bandwidth or quality.

The weight should reflect the relative bandwidth or quality of this interface. The larger the weight, the better bandwidth or quality an interface provides. For example if interface A has twice the bandwidth of interface B, respectively using the weights 2 and 1 would reflect this.

  • Data type: integer
  • Default: 100
  • Minimum: 0
  • Maximum: 10000
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface weight

State

OptionLabelDescription
upUpThe interface is up and usable. An UP status does not ensure the interface is fully operational. Connectivity tests need to be performed on an interface that is UP.
downDownThe interface is down and is not usable.
unavailableUnavailableThe interface status is currently unavailable.
  • Data type: string select
  • Status

CLI: (cli)> show network vlan <key> interface state

Carrier

Carrier indicated that an interface is physically able to pass traffic.

OptionLabel
trueCarrier
falseNo carrier
  • Data type: boolean
  • Status

CLI: (cli)> show network vlan <key> interface carrier

MAC address

Media Access Control address.

The MAC address is a unique identifier assigned to this interface for use as a network address in communications with a network segment.

  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> interface mac

MTU

Maximum Transmission Unit.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network vlan <key> interface mtu

Statistics

Network interface statistics

Properties

Received bytes

The total number of received bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network vlan <key> interface statistics rx-bytes

Transmitted bytes

The total number of transmitted bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show network vlan <key> interface statistics tx-bytes

Received packets

The total number of received packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show network vlan <key> interface statistics rx-packets

Transmitted packets

The total number of transmitted packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show network vlan <key> interface statistics tx-packets

Connectivity testing

Check interface connectivity to ensure its status is a true reflection of its operational capacity.

  • Tests - Tests to run in order to determine if interface is ready.

Commands

Properties

Enable

Enable connectivity testing.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network vlan <key> interface connectivity enable

Interface ready

The interface is ready when it is passing its connectivity tests.

OptionLabel
trueInterface ready
falseInterface not ready
  • Data type: boolean
  • Status

CLI: (cli)> show network vlan <key> interface connectivity ready

Last pass at

The last time this connectivity test passed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network vlan <key> interface connectivity last-pass

Last fail at

The last time this connectivity test failed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network vlan <key> interface connectivity last-fail

Status

A Description of the current connectivity testing status.

  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> interface connectivity status

Test interval

The time to wait between connectivity tests.

  • Data type: integer
  • Units: seconds
  • Default: 60
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity interval

Tests

Tests to run in order to determine if interface is ready.

Tests are executed in order until a test result determines the state of the interface, or, all tests have run and at least one passed.

Test

A single interface test.

Properties

Condition

OptionLabelDescription
requiredRequiredIf this test fails, the interface is considered not ready and testing stops.
If this test passes, testing continue with the next test.
sufficientSufficientIf this test passes, the interface is considered ready and testing stops.
If this test fails, testing continue with the next test.
  • Data type: string select
  • Default: required
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> condition

Number of runs

The number of times in a row that this test must run succesfully to pass. If a run fails the test fails immediately.

  • Data type: integer
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> runs

Run interval

The time to wait between test runs.

  • Data type: integer
  • Units: seconds
  • Default: 1
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> interval

Timeout period

Consider the run failed if it does not receive a successful response within a set period of time.

  • Data type: integer
  • Units: seconds
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> timeout

Test type

OptionLabelDescription
pingPingPerform an ICMP ping/response sequence.
fetchFetch (HTTP/HTTPS/FTP)Connection to a network host.
dnsDNSPerform a DNS lookup.
  • Data type: string select
  • Default: ping
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> type

Ping test

Check the interface with an ICMP echo request/reply.

Properties

Host

Host to ping during testing.

An ICMP echo-request will be sent to the provided host and the the coresponding ICMP echo-reply checked. A hostname or IP may be provided to test against.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> ping host

Payload size

The size of the packets used for testing.

Tuning the payload size of ping tests can be important for bandwidth sensitive applications.i The test interval in combination with the payload size allows the bandwidth consumption of the tests to be calculated and adjusted if required.

  • Data type: integer
  • Units: bytes
  • Default: 20
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> ping payload-size

HTTP/HTTPS/FTP file fetch test

Check the interface by downloading a file over HTTP, HTTPS, or FTP.

Properties

URL

The URL of the file to fetch.

Connectivity testing will check that it can download the file at the provided URL and receive a successful response. The URL may use the HTTP, HTTPS, or FTP protocol.

  • http://www.not-a-real-site.com/
  • https://www.not-a-real-site.com/
  • ftp://ftp.not-a-real-site.com/
FormatDescription
HTTP URLAn HTTP URL to a file.
HTTPS URLAn HTTPS URL to a file.
FTP URLAn FTP URL to a file.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> interface connectivity test <index> fetch url

DNS test

Check the interface by performing a DNS lookup.

Properties

DNS server address

The DNS server to test.

DNS testing will use the DNS server discovered on the interface if this is left blank. If a specific DNS server is required, its address or hostname should be entered here.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> interface connectivity test <index> dns address

Run tests

Run the configured tests now.

The command takes no parameters.

IPv4

Static IP addresses

Static IP address

Static or fixed IPv4 address.

Properties

Enable

Enable this IPv4 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 static <index> enable

Address

The static IPv4 Address/Network prefix using CIDR notation.

Specify the IPv4 address using the usual dotted quad (A.B.C.D) followed by the network prefix, for example 192.168.0.1/24.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 static <index> address

Gateway

The upstream IPv4 address for the default routing of packets.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 static <index> gateway

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 static <index> metric

Static routes

Route

A route to a host or network.

Properties

Enable

Enable this route.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 route <index> enable

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 route <index> dst

Gateway address

The upstream gateway for routes associated with this connection.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Default: 0.0.0.0
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 route <index> gateway

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 route <index> metric

DHCP

Properties

DHCP mode

OptionLabel
clientClient
serverServer
relayRelay
noneNone
passthroughPassthrough
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp mode

DHCP client

Request addressing from a DHCP server connect via this interface.

  • Lease - The current lease details.

Properties

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp client metric

Client identifier

The identifier sent in DHCP requests.

Include this string value in the DHCP client identifier option (number 61) instead of the interface's MAC address.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp client client-identifier

Lease

The current lease details.

  • DNS servers - The DNS servers provided by the current lease.
  • NTP servers - The NTP servers provided by the current lease.

Properties

Lease address

The address provided by the current lease.

Specify the IPv4 address using the usual dotted quad (A.B.C.D) followed by the network prefix, for example 192.168.0.1/24.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease address

Gateway

The gateway provided by the current lease.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease gateway

DNS servers

The DNS servers provided by the current lease.

DNS server

Properties

DNS server address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease dns <index> address

Source address

  • Data type: reference path
  • References instances of: Network / ip / Addresses
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease dns <index> src

NTP servers

The NTP servers provided by the current lease.

NTP server

The NTP server used for time synchronization.

Properties

Address

The network address of the NTP server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease ntp <index> address

Authentication key index

  • Data type: integer
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease ntp <index> auth-key-idx

Server pool

Server address is a pool of servers.

  • Data type: boolean
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease ntp <index> pool

Protocol version

OptionLabel
3NTPv3
4NTPv4
  • Data type: string select
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp client lease ntp <index> version

DHCP server

A DHCP server instance.

  • Lease pool - A group of IP address that can be issued to clients requesting an address.
  • Static leases - Lock a specific lease address to a known host.
  • Active leases - Leases that have been provided or renewed with the previous lease time period.
  • DHCP options - DHCP options can be used to fine tune a DHCP server for a particular deployment scenario.

Properties

Lease time

The time this lease will remain valid for when issued.

  • Data type: integer
  • Units: seconds
  • Default: 43200
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp server lease-time

Lease pool

A group of IP address that can be issued to clients requesting an address.

More than one lease pool can be provided. Addresses will be allocated from the combination of all pools.

Lease range

The range of addresses to add to the pool.

Range start and Range end are included in the pool.

Properties

Range start

The first address of the range.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
Unsigned integer (8-bit)An integer between 0 and 255.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server lease-pool <index> start

Range end

The final address of the range.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
Unsigned integer (8-bit)An integer between 0 and 255.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server lease-pool <index> end

Static leases

Lock a specific lease address to a known host.

Static leases are used to ensure essential servers like servers always use the same address.

Static lease

A single static lease.

Properties

MAC

The MAC address of the client this lease applies to.

FormatDescription
MAC address (wildcard match)A MAC address with colon (:) separated octets. Use '*' in place of an octect number to match any value.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp server static-lease <index> mac

Hostname

FormatDescription
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server static-lease <index> hostname

Address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server static-lease <index> address

Active leases

Leases that have been provided or renewed with the previous lease time period.

Lease

Properties

Hostname

FormatDescription
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp server active-lease <index> hostname

Address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp server active-lease <index> address

MAC

The MAC address of the client receiving the address.

FormatDescription
MAC addressA MAC address with colon (:) separated octets.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp server active-lease <index> mac

Expires at

The time at which this lease expires.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp server active-lease <index> expires

Relay address

The address of the upstream DHCP server that provided the lease.

  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp server active-lease <index> relay

DHCP options

DHCP options can be used to fine tune a DHCP server for a particular deployment scenario.

Properties

Gateway

Provide the client with a default route via this gateway address.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp server option gateway

MTU

Instruct the client to set its MTU to the provided value.

  • Data type: integer
  • Units: bytes
  • Default: 1500
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server option mtu

DNS servers

Provide the client with the listed DNS servers

Properties

DNS option mode

Controls how DNS servers are provided to clients.

When the DNS server is enabled and Automatic DNS servers is selected, the DHCP server provides clients with the address of this DNS server rather than the upstream DNS servers.

OptionLabelDescription
autoAutomatic DNS serversProvide the local caching DNS server, if enabled, otherwise provide upstream DNS servers.
customCustom DNS serversProvide the DNS servers listed here.
  • Data type: string select
  • Default: auto
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server option dns mode

Custom DNS servers

Clients are provided the listed DNS servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp server option dns custom

NTP servers

Provide the client with the listed NTP servers

Properties

Custom NTP servers

Clients are provided the listed NTP servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp server option ntp custom

WINS servers

Provide the client with the listed WINS servers

Properties

Custom WINS servers

Clients are provided the listed WINS servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp server option wins custom

BOOT File

Provide a boot file to the client.

Properties

BOOT filename

The name of the file the client should load.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp server option boot filename

TFTP server address

The address of the TFTP server hosting the file.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp server option boot server

Custom DHCP options

Arbitary custom DHCP server options

There are a huge number of DHCP options, many of which are rarely used. If the option required is not listed above, most other options can be manually configure using the following paramaters.

Option

Properties

Option number

The RFC2939 option number.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server option custom <index> number

Value

The value for this option.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp server option custom <index> value

Always send to client

Send this option in all communications with a client when enabled.

Without Always send to client enabled, the option is only sent if requested by the client.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp server option custom <index> always-send

DHCP relay

Properties

DHCP relay servers

Relay DHCP requests to these DHCP servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp relay server

Passthrough

Properties

Source address

The address to passthrough.

  • Data type: reference path
  • References instances of: Network / ipv4 / Static IP addresses
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp passthrough address

Client MAC address

The MAC address of the client receiving the passthrough address.

Provide the lease of the passthrough address to the client with this MAC address.

FormatDescription
MAC addressA MAC address with colon (:) separated octets.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp passthrough mac

Link-local address

Properties

Enable

Enable Link-local address on this interface.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 link-local enable

Address

The Link-local address obtained this interface.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 link-local address

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 100
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 link-local metric

Automation

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Default: DHCP client / link-local address fallback
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp-client-link-local-fallback running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv4 dhcp-client-link-local-fallback error

Script

The javascript automation source.

  • Data type: string
  • Default: if (data.mode === 'client') { const enable = !data.client.lease.address; console.log(${enable ? 'Enabling' : 'Disabling'} IPv4 link-local address) await model.push('../link-local/enable', enable); }
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Default: ../dhcp
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv4 dhcp-client-link-local-fallback data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

IPv6

Static IP addresses

Static IP address

Static or fixed IPv6 address.

Properties

Enable

Enable this IPv6 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 static <index> enable

Address

The static IPv6 Address/Network prefix using CIDR notation.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 static <index> address

Gateway

The upstream IPv6 address for the default routing of packets.

FormatDescription
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv6 static <index> gateway

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 static <index> metric

Prefix assignments

Prefix assignment

An IPv6 prefix assignment.

Properties

Enable

Enable this IPv6 Address for use.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 prefix-assignment <index> enable

Address

The static IPv6 Address/Network prefix using CIDR notation.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv6 prefix-assignment <index> address

Metric

The network metric used for routing this network.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 prefix-assignment <index> metric

Source prefix

The source network prefix.

  • Data type: reference path
  • References instances of: Network / ipv6 / Prefixes
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 prefix-assignment <index> prefix

Subnet

The IPv6 subnet.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Default: 0:0:0:0::/64
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 prefix-assignment <index> subnet

Static routes

Route

A route to a host or network.

Properties

Enable

Enable this route.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 route <index> enable

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 route <index> dst

Gateway address

The upstream gateway for routes associated with this connection.

FormatDescription
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Default: ::
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv6 route <index> gateway

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 route <index> metric

SLAAC/DHCPv6 client

Configuration for a SLAAC/DHCPv6 client on this interface.

Properties

Enable

Enable this SLAAC/DHCPv6 client.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 client enable

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 client metric

IPv6 addresses

The IPv6 addresses obtained.

Static IP address

Static or fixed IPv6 address.

Properties

Address

The static IPv6 Address/Network prefix using CIDR notation.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv6 client address <index> address

Address Type

The source of this assigned address.

OptionLabelDescription
dhcpv6DHCPv6Address acquired using DHCPv6 provided or supplemented information.
slaacSLAACAddress acquired using stateless autoconfiguration.
noneNo addressNo address has been acquired.
  • Data type: string select
  • Status

CLI: (cli)> show network vlan <key> ipv6 client address <index> address-type

Request prefix delegation

Acquired prefix delegations.

Delegated prefix

An acquired prefix delegation.

Properties

Prefix network

The network for the prefix.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv6 client prefix <index> network

DNS servers

Provided DNS servers.

DNS server

Properties

DNS server address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv6 client dns <index> address

Routes

Provided routes.

Route

A route to a host or network.

Properties

Enable

Enable this route.

  • Data type: boolean
  • Status

CLI: (cli)> show network vlan <key> ipv6 client route <index> enable

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv6 client route <index> dst

Gateway address

The upstream gateway for routes associated with this connection.

FormatDescription
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv6 client route <index> gateway

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Minimum: 0
  • Status

CLI: (cli)> show network vlan <key> ipv6 client route <index> metric

NTP servers

Provided NTP servers.

NTP server

The NTP server used for time synchronization.

Properties

Address

The network address of the NTP server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Status

CLI: (cli)> show network vlan <key> ipv6 client ntp <index> address

Authentication key index

  • Data type: integer
  • Status

CLI: (cli)> show network vlan <key> ipv6 client ntp <index> auth-key-idx

Server pool

Server address is a pool of servers.

  • Data type: boolean
  • Status

CLI: (cli)> show network vlan <key> ipv6 client ntp <index> pool

Protocol version

OptionLabel
3NTPv3
4NTPv4
  • Data type: string select
  • Status

CLI: (cli)> show network vlan <key> ipv6 client ntp <index> version

RA/DHCPv6 server

RA/DHCPv6 server configurtion for an interace.

  • DHCPv6 options - Optional configuration provided by DHCPv6 server to clients.

Properties

Enable

Enable this RA/DHCPv6 server.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 server enable

Lease time

The lease time assigned to client leases.

  • Data type: integer
  • Units: seconds
  • Default: 43200
  • Configuration
  • Optional

CLI: (cli)> config network vlan <key> ipv6 server lease-time

DHCPv6 options

Optional configuration provided by DHCPv6 server to clients.

DNS servers

Provide the client with these DNS servers.

Properties

DNS option mode

Controls how DNS servers are provided to clients.

When the DNS server is enabled and Automatic DNS servers is selected, the DHCP server provides clients with the address of this DNS server rather than the upstream DNS servers.

OptionLabelDescription
autoAutomatic DNS serversProvide the local caching DNS server, if enabled, otherwise provide upstream DNS servers.
customCustom DNS serversProvide the DNS servers listed here.
  • Data type: string select
  • Default: auto
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 server option dns mode

Custom DNS servers

Clients are provided the listed DNS servers.

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 server option dns custom

NTP servers

Provide the client with the listed NTP servers

Properties

Custom NTP servers

Custom NTP servers

  • Data type: string list
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 server option ntp custom

Custom DHCP options

Arbitary custom DHCP server options

There are a huge number of DHCP options, many of which are rarely used. If the option required is not listed above, most other options can be manually configure using the following paramaters.

Option

Properties

Option number

The RFC2939 option number.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 server option custom <index> number

Value

The value for this option.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network vlan <key> ipv6 server option custom <index> value

Always send to client

Send this option in all communications with a client when enabled.

Without Always send to client enabled, the option is only sent if requested by the client.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config network vlan <key> ipv6 server option custom <index> always-send

Flow

Control packet routing, filtering and forwarding with flow rules and zones.

  • Rules
  • Zones - Group network interfaces into zones to simplify flow rules and service ACLs.

Rules

New Flow rule items can be added.

Flow rule

Flow rules defined how network traffic flows through the device.

Properties

Enable

Enable this flow rule.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config network flow rule <key> enable

Label

The label used to describe and locate this flow rule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> label

Priority

The priority for this flow rule.

  • Data type: integer
  • Default: 0
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> priority

Packet origin

The source or packets this rule applies to.

OptionLabelDescription
remoteRemote hostsThis flow applies to packets from remote hosts.
localSent by local servicesThis flow applies to packets from the local host.
  • Data type: string select
  • Default: remote
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> origin

Action

The action to take on packets matching this flow rule.

OptionLabelDescription
forwardForwardPackets matching this flow rule will be forwarded.
dropDropPackets matching this flow rule will be dropped.
rejectRejectPackets matching this flow rule will be rejected.
  • Data type: string select
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> action

Rejection

The response to send on packets rejection.

Properties

Reject with ICMP code

The icmp response for IPv4 packet rejection.

OptionLabelDescription
net-unreachableNetwork unreachableReply with an ICMP Network unreachable.
host-unreachableHost unreachableReply with an ICMP Host unreachable.
prot-unreachableProtocol unreachableReply with an ICMP Protocol unreachable.
port-unreachablePort unreachableReply with an ICMP Port unreachable.
net-prohibitedNetwork prohibitedReply with an ICMP Network unreachable.
host-prohibitedHost prohibitedReply with an ICMP Host prohibited.
admin-prohibitedAdministratively prohibitedReply with an ICMP Administratively prohibited.
  • Data type: string select
  • Default: admin-prohibited
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> reject icmp-code

Reject with ICMPv6 code

The icmp response for IPv6 packet rejection.

OptionLabelDescription
no-routeNo routeReply with an ICMPv6 No route.
admin-prohibitedAdministratively prohibitedReply with an ICMPv6 Administratively prohibited.
addr-unreachableAddress unreachableReply with an ICMPv6 Address unreachable.
port-unreachablePort unreachableReply with an ICMPv6 Port unreachable.
policy-failPolicy failureReply with an ICMPv6 Policy failure.
reject-routeRejected routeReply with an ICMPv6 Rejected route.
  • Data type: string select
  • Default: admin-prohibited
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> reject icmpv6-code

Input matches

Flow matches packets on these inputs.

Properties

Interfaces

Input interfaces.

  • Data type: reference list
  • Configuration

CLI: (cli)> config network flow rule <key> input interface

Zones

Input zones,

  • Data type: reference list
  • Configuration

CLI: (cli)> config network flow rule <key> input zone

Filter packets

Packet filter list.

Packet selector

Match on specific packet attributes relating to their flow.

  • ICMP - Match specific ICMP packet attributes.
  • ICMPv6 - Match specific ICMPv6 packet attributes.
  • Source - Match on source attributes.
  • Destination - Match on destination attributes.

Properties

IP version

Match packets from the given IP family.

OptionLabelDescription
anyAnyMatch any IP packet.
ipv4IPv4Match any IPv4 packet.
ipv6IPv6Match any IPv6 packet.
  • Data type: string select
  • Default: any
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> ip-version

Protocol

Match packets for the given IP protocol.

OptionLabelDescription
anyAnyMatch any IP protocol.
tcpTCPMatch TCP protocol.
udpUDPMatch UDP protocol.
icmpICMPMatch any ICMP protocol.
customCustom protocolMatch a specified IP protocol by number.
  • Data type: string select
  • Default: any
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> protocol

Protocol number

The numeric value of the IP protocol to match.

  • Data type: integer
  • Minimum: 0
  • Maximum: 255
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> custom-protocol

DSCP

Match packets using Differentiated Services Code Point (DSCP).

  • Data type: integer
  • Minimum: 0
  • Maximum: 63
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> dscp

ICMP

Match specific ICMP packet attributes.

Properties

ICMP type

Match on specific ICMP packet types.

OptionLabelDescription
echo-replyEcho replyMatch ICMP type, echo replay packets.
destination-unreachableDestination unreachableMatch ICMP type, destination unreachable packets.
source-quenchSource quenchMatch ICMP type, source quench packets.
redirectRedirectMatch ICMP type, redirect packets.
echo-requestEcho requestMatch ICMP type, echo request packets.
time-exceededTime exceededMatch ICMP type, time exceeded packets.
parameter-problemParameter problemMatch ICMP type, paramater problem packets.
timestamp-requestTimestamp requestMatch ICMP type, timestamp request packets.
timestamp-replyTimestamp replyMatch ICMP type, timestamp replay packets.
info-requestInfo requestMatch ICMP type, info request packets.
info-replyInfo replyMatch ICMP type, info reply packets.
address-mask-requestAddress mask requestMatch ICMP type, mask request packets.
address-mask-replyAddress mask replyMatch ICMP type, mask reply packets.
router-advertisementRouter advertisementMatch ICMP type, router advertisement packets.
router-solicitationRouter solicitationMatch ICMP type, router solicitation packets.
  • Data type: string select
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> icmp type

ICMP code

Match on ICMP code.

OptionLabelDescription
net-unreachableNetwork unreachableMatch ICMP code, network unreachable.
host-unreachableHost unreachableMatch ICMP code, host unreachable.
prot-unreachableProtocol unreachableMatch ICMP code, protocol unreachable.
port-unreachablePort unreachableMatch ICMP code, port unreachable.
net-prohibitedNetwork prohibitedMatch ICMP code, network prohibited.
host-prohibitedHost prohibitedMatch ICMP code, host prohibited.
admin-prohibitedAdministratively prohibitedMatch ICMP code, administratively prohibited.
  • Data type: string select
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> icmp code

ICMPv6

Match specific ICMPv6 packet attributes.

Properties

ICMPv6 type

Match on specific ICMPv6 packet types.

OptionLabelDescription
destination-unreachableDestination unreachableMatch ICMPv6 packet type, destination unreachable.
packet-too-bigPacket too bigMatch ICMPv6 Packet packet type, too big.
time-exceededTime exceededMatch ICMPv6 packet type, time exceeded.
echo-requestEcho requestMatch ICMPv6 packet type, echo request.
echo-replyEcho replyMatch ICMPv6 packet type, echo reply.
mld-listener-queryMLD listener queryMatch ICMPv6 packet type, MLD listener query.
mld-listener-reportMLD listener reportMatch ICMPv6 packet type, MLD listener report.
mld-listener-reductionMLD listener reductionMatch ICMPv6 packet type, MLD listener reduction.
nd-router-solicitND router solicitMatch ICMPv6 packet type, ND router solicit.
nd-router-advertND router advertMatch ICMPv6 packet type, ND router advert.
nd-neighbor-solicitND neighbor solicitMatch ICMPv6 packet type, ND neighbour solicit.
nd-neighbor-advertND neighbor-advertMatch ICMPv6 packet type, ND neighbour advert.
nd-redirectND redirectMatch ICMPv6 packet type, ND redirect.
parameter-problemParameter problemMatch ICMPv6 packet type, parameter problem.
router-renumberingRouter renumberingMatch ICMPv6 packet type, router renumbering.
  • Data type: string select
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> icmpv6 type

ICMPv6 code

Match on ICMPv6 code

OptionLabelDescription
no-routeNo routeMatch on ICMv6 code, no route.
admin-prohibitedAdministratively prohibitedMatch on ICMv6 code, administratively prohibited.
addr-unreachableAddress unreachableMatch on ICMv6 code, address unreachable.
port-unreachablePort unreachableMatch on ICMv6 code, port unreachable.
policy-failPolicy failureMatch on ICMv6 code, policy failure.
reject-routeRejected routeMatch on ICMv6 code, reject route.
  • Data type: string select
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> icmpv6 code

Source

Match on source attributes.

Properties

Source port

Match on packets using this source port.

  • Data type: integer
  • Minimum: 0
  • Maximum: 65535
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> source port

Source address

Match on source address.

Properties

Source address type

Match on a source address type.

OptionLabelDescription
anyAny addressMatch any source address.
customCustom networkMatch a source from a custom network.
hostnameHost by nameMatch a source by name.
networkLocal networkMatch a source from a local network.
  • Data type: string select
  • Default: any
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> source address type

Source network address

Match on a source from this custom network address.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv4 networkAn IPv4 network address and prefix length.
IPv6 host addressAn IPv6 host address.
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> source address custom

Hostname

Match on the source being this hostname.

  • Data type: reference path
  • References instances of: internal / dns / hostname
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> source address hostname

Source network

Match on the source from this local network.

  • Data type: reference path
  • References instances of: Network / ip / Routes
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> source address network

Destination

Match on destination attributes.

Properties

Destination port

Match on packets using this destination port.

  • Data type: integer
  • Minimum: 0
  • Maximum: 65535
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> destination port

Destination address

Match on destination address.

Properties

Destination address type

Match on a destination address type.

OptionLabelDescription
anyAny addressMatch any destination address.
customCustom networkMatch a destination from a custom network.
hostnameHost by nameMatch a destination by name.
networkLocal networkMatch a destination from a local network.
addressLocal addressMatch a destination from a local address.
  • Data type: string select
  • Default: any
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> destination address type

Destination network address

Match on a destination from this custom network address.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv4 networkAn IPv4 network address and prefix length.
IPv6 host addressAn IPv6 host address.
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> destination address custom

Hostname

Match on a destination from this hostname.

  • Data type: reference path
  • References instances of: internal / dns / hostname
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> destination address hostname

Local network

Match on a destination from this local network.

  • Data type: reference path
  • References instances of: Network / ip / Routes
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> destination address network

Local address

Match on a destination from this local address.

  • Data type: reference path
  • References instances of: Network / ip / Addresses
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> filter <index> destination address address

Output interfaces

Match packets on these output interfaces and zones.

Properties

Interfaces

Match packets output on the following interfaces.

  • Data type: reference list
  • Configuration

CLI: (cli)> config network flow rule <key> output interface

Zones

Match packets output to the following zones.

  • Data type: reference list
  • Configuration

CLI: (cli)> config network flow rule <key> output zone

Modify packet on output

Make changes to packets on output.

Source NAT

Apply SNAT changes to packet on output.

Properties

Source port

Modify the source port of TCP and UDP packets.

  • Data type: integer
  • Minimum: 0
  • Maximum: 65535
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> modify source port

Source address

Properties

Source address type

The type of source address to use for SNAT.

OptionLabelDescription
noneNoneDo not change the source address.
customCustom addressUse the provided address for SNAT.
hostnameHost by nameUse the provided hostname for SNAT.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> modify source address type

Custom address

SNAT to the provided address.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> modify source address custom

Hostname

SNAT to the provided hostname

  • Data type: reference path
  • References instances of: internal / dns / hostname
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> modify source address hostname

Destination NAT

Apply DNAT changes to packet on output.

Properties

Destination port

Modify the source port of TCP and UDP packets.

  • Data type: integer
  • Minimum: 0
  • Maximum: 65535
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> modify destination port

Destination address

The type of destrination address to use for DNAT.

Properties

Destination address type

The type of source address to use for SNAT.

OptionLabelDescription
noneNoneDo not change the destination address.
customCustom addressUse the provided address for DNAT.
hostnameHost by nameUse the provided hostname for DNAT.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> modify destination address type

Destination address

DNAT to the provided address.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> modify destination address custom

Hostname

DNAT to the provided hostname

  • Data type: reference path
  • References instances of: internal / dns / hostname
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> modify destination address hostname

Zones

Group network interfaces into zones to simplify flow rules and service ACLs.

New Flow zone items can be added.

Flow zone

Properties

Label

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config network flow zone <key> label

Interfaces

  • Data type: reference list
  • Configuration

CLI: (cli)> config network flow zone <key> interface

VPN

Virtual Private Network tunnels for secure networking.

Wireguard

New Wireguard tunnel items can be added.

Wireguard tunnel

Configuration for a wireguard tunnel.

Properties

Enable

Enable this tunnel.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config vpn wireguard <key> enable

Port

The UDP port listening for connections incoming from peers.

  • Data type: integer
  • Default: 51820
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> port

Label

The label used to describe and locate this wireguard tunnel.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config vpn wireguard <key> label

Private key

Leave empty to have the device generate a private key.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config vpn wireguard <key> private-key

Public key

Add this device's public key to the peer.

  • Data type: string
  • Status

CLI: (cli)> show vpn wireguard <key> public-key

Tunnel addresses

The IP addresses set on the tunnel interface.

Tunnel address

An address to set on the tunnel interface.

Properties

Address

The IP address in standard notation.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> tunnel-address <index> address

Ready

IP address is operational.

  • Data type: boolean
  • Status

CLI: (cli)> show vpn wireguard <key> tunnel-address <index> ready

Interface

  • Statistics - Network interface statistics
  • Connectivity testing - Check interface connectivity to ensure its status is a true reflection of its operational capacity.

Properties

Source NAT

Replace the source address of packets leaving this interface.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config vpn wireguard <key> interface snat

Weight

The weight for this interface when part of a multipath route reflecting its relative bandwidth or quality.

The weight should reflect the relative bandwidth or quality of this interface. The larger the weight, the better bandwidth or quality an interface provides. For example if interface A has twice the bandwidth of interface B, respectively using the weights 2 and 1 would reflect this.

  • Data type: integer
  • Default: 100
  • Minimum: 0
  • Maximum: 10000
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface weight

State

OptionLabelDescription
upUpThe interface is up and usable. An UP status does not ensure the interface is fully operational. Connectivity tests need to be performed on an interface that is UP.
downDownThe interface is down and is not usable.
unavailableUnavailableThe interface status is currently unavailable.
  • Data type: string select
  • Status

CLI: (cli)> show vpn wireguard <key> interface state

MTU

Maximum Transmission Unit.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show vpn wireguard <key> interface mtu

Statistics

Network interface statistics

Properties

Received bytes

The total number of received bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show vpn wireguard <key> interface statistics rx-bytes

Transmitted bytes

The total number of transmitted bytes.

  • Data type: integer
  • Units: bytes
  • Status

CLI: (cli)> show vpn wireguard <key> interface statistics tx-bytes

Received packets

The total number of received packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show vpn wireguard <key> interface statistics rx-packets

Transmitted packets

The total number of transmitted packets.

  • Data type: integer
  • Units: packets
  • Status

CLI: (cli)> show vpn wireguard <key> interface statistics tx-packets

Connectivity testing

Check interface connectivity to ensure its status is a true reflection of its operational capacity.

  • Tests - Tests to run in order to determine if interface is ready.

Commands

Properties

Enable

Enable connectivity testing.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config vpn wireguard <key> interface connectivity enable

Interface ready

The interface is ready when it is passing its connectivity tests.

OptionLabel
trueInterface ready
falseInterface not ready
  • Data type: boolean
  • Status

CLI: (cli)> show vpn wireguard <key> interface connectivity ready

Last pass at

The last time this connectivity test passed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show vpn wireguard <key> interface connectivity last-pass

Last fail at

The last time this connectivity test failed.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show vpn wireguard <key> interface connectivity last-fail

Status

A Description of the current connectivity testing status.

  • Data type: string
  • Status

CLI: (cli)> show vpn wireguard <key> interface connectivity status

Test interval

The time to wait between connectivity tests.

  • Data type: integer
  • Units: seconds
  • Default: 60
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity interval

Tests

Tests to run in order to determine if interface is ready.

Tests are executed in order until a test result determines the state of the interface, or, all tests have run and at least one passed.

Test

A single interface test.

Properties

Condition

OptionLabelDescription
requiredRequiredIf this test fails, the interface is considered not ready and testing stops.
If this test passes, testing continue with the next test.
sufficientSufficientIf this test passes, the interface is considered ready and testing stops.
If this test fails, testing continue with the next test.
  • Data type: string select
  • Default: required
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> condition

Number of runs

The number of times in a row that this test must run succesfully to pass. If a run fails the test fails immediately.

  • Data type: integer
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> runs

Run interval

The time to wait between test runs.

  • Data type: integer
  • Units: seconds
  • Default: 1
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> interval

Timeout period

Consider the run failed if it does not receive a successful response within a set period of time.

  • Data type: integer
  • Units: seconds
  • Default: 3
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> timeout

Test type

OptionLabelDescription
pingPingPerform an ICMP ping/response sequence.
fetchFetch (HTTP/HTTPS/FTP)Connection to a network host.
dnsDNSPerform a DNS lookup.
  • Data type: string select
  • Default: ping
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> type

Ping test

Check the interface with an ICMP echo request/reply.

Properties

Host

Host to ping during testing.

An ICMP echo-request will be sent to the provided host and the the coresponding ICMP echo-reply checked. A hostname or IP may be provided to test against.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> ping host

Payload size

The size of the packets used for testing.

Tuning the payload size of ping tests can be important for bandwidth sensitive applications.i The test interval in combination with the payload size allows the bandwidth consumption of the tests to be calculated and adjusted if required.

  • Data type: integer
  • Units: bytes
  • Default: 20
  • Minimum: 1
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> ping payload-size

HTTP/HTTPS/FTP file fetch test

Check the interface by downloading a file over HTTP, HTTPS, or FTP.

Properties

URL

The URL of the file to fetch.

Connectivity testing will check that it can download the file at the provided URL and receive a successful response. The URL may use the HTTP, HTTPS, or FTP protocol.

  • http://www.not-a-real-site.com/
  • https://www.not-a-real-site.com/
  • ftp://ftp.not-a-real-site.com/
FormatDescription
HTTP URLAn HTTP URL to a file.
HTTPS URLAn HTTPS URL to a file.
FTP URLAn FTP URL to a file.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> fetch url

DNS test

Check the interface by performing a DNS lookup.

Properties

DNS server address

The DNS server to test.

DNS testing will use the DNS server discovered on the interface if this is left blank. If a specific DNS server is required, its address or hostname should be entered here.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config vpn wireguard <key> interface connectivity test <index> dns address

Run tests

Run the configured tests now.

The command takes no parameters.

Peers

The peers for this VPN tunnel.

Peer

A wireguard tunnel peer.

  • Routes - Network routes to the peer over the tunnel.

Properties

Enable

Enable connection to this peer.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config vpn wireguard <key> peer <index> enable

Public key

The peer's public key.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> peer <index> public-key

Pre-shared key

The pre-shared key or secret required for this VPN connection.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config vpn wireguard <key> peer <index> pre-shared-key

Address

The IP address or hostname of the peer for initiating an outgoing connections.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> peer <index> initiate-address

Port

The port number of the peer's Wireguard endpoint for initiating an outgoing connections.

  • Data type: integer
  • Default: 51820
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> peer <index> initiate-port

Connected address

The remote IP address of the current connection to the peer.

  • Data type: string
  • Status

CLI: (cli)> show vpn wireguard <key> peer <index> connected-address

Connected port

The remote port number of current connection to the peer.

  • Data type: integer
  • Minimum: 0
  • Status

CLI: (cli)> show vpn wireguard <key> peer <index> connected-port

Last handshake at

The handshake process occur every 2 minutes.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show vpn wireguard <key> peer <index> handshake-timestamp

Persistent keepalive interval

Send a keepalive packet at a regular interval to keep the connection alive through stateful firewalls.

  • Data type: integer
  • Units: seconds
  • Default: 25
  • Minimum: 1
  • Configuration
  • Optional

CLI: (cli)> config vpn wireguard <key> peer <index> keepalive-interval

Routes

Network routes to the peer over the tunnel.

Route

A route to a destination reachable through this VPN.

Properties

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> peer <index> route <index> dst

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Default: 0
  • Minimum: 0
  • Configuration
  • Required

CLI: (cli)> config vpn wireguard <key> peer <index> route <index> metric

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config vpn wireguard <key> acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config vpn wireguard <key> acl zone

Monitoring

  • SNMP - Monitor the device with Simple Network Management Protocol (SNMP).

SNMP

Monitor the device with Simple Network Management Protocol (SNMP).

Properties

Enable

Enable the SNMP agent.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config monitoring snmp enable

Port

The network port that the SNMP agent listens on.

The SNMP agent will accept requests sent over TCP and UDP.

  • Data type: integer
  • Default: 161
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config monitoring snmp port

Allow SNMPv1

SNMPv1 is considered very insecure and should be avoided if possible.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config monitoring snmp v1-enable

Allow SNMPv2c

Enable SNMPv2c support.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config monitoring snmp v2c-enable

Allow SNMPv3

Enable SNMPv3 support.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config monitoring snmp v3-enable

SNMPv1/v2c configuration

Configuration specific to SNMPv1/v2c.

Properties

Community string

The community string is used to restrict access if required.

  • Data type: string
  • Default: public
  • Configuration
  • Required

CLI: (cli)> config monitoring snmp v1v2-configuration rocommunity

SNMPv3 configuration

Configuration specific to SNMPv3.

Properties

Authentication policy

The type of authentication for securing SNMP queries.

OptionLabelDescription
noauthNoAuthNo Authentication or Encryption.
authAuthAuthentication only.
privPrivAuthentication and Encryption.
  • Data type: string select
  • Default: priv
  • Configuration
  • Required

CLI: (cli)> config monitoring snmp v3-configuration auth-policy

SNMPv3 authentication user

The user credentials for securing SNMP queries.

SNMPv3 authentication

SNMPv3 authentication credentials.

Properties

Authentication Protocol

The authentication protocol used by the SNMPD server.

OptionLabelDescription
md5MD5MD5 (128 bit).
shaSHA1SHA1 (160 bit).
sha-224SHA-224SHA (224 bit).
sha-256SHA-256SHA (256 bit).
sha-384SHA-384SHA (384 bit).
sha-512SHA-512SHA (512 bit).
  • Data type: string select
  • Default: sha
  • Configuration
  • Required

CLI: (cli)> config monitoring snmp v3-configuration user <index> auth-protocol

Privacy Protocol

The encryption protol in use for SMP.

OptionLabelDescription
desDESDES (56 Bit)
aesAESAES (128 bit)
aes-192AES-192AES (192 bit)
aes-256AES-256AES (256 bit)
  • Data type: string select
  • Default: aes
  • Configuration
  • Required

CLI: (cli)> config monitoring snmp v3-configuration user <index> privacy-protocol

Username

The username that SNMPv3 clients will use to authenticate with

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config monitoring snmp v3-configuration user <index> username

Authentication Passphrase

The passphrase that SNMPv3 clients will use to authenticate with

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config monitoring snmp v3-configuration user <index> auth-passphrase

Privacy Passphrase

The passphrase that SNMPv3 clients will use to encrypt the connection with.

Leave blank to use the Authentication Passphrase

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config monitoring snmp v3-configuration user <index> privacy-passphrase

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config monitoring snmp acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config monitoring snmp acl zone

Services

Services start, stop and monitor the processes within the device.

  • Web interface - An HTTPS server providing a device administration interface and access to resources.
  • SSH - An SSH server providing system login and access to resources.
  • TFTP - Serve files with Trivial File Transfer Protocol (TFTP).
  • DNS - A caching DNS server that forwards queries to upstream nameservers, and responds with local hostnames.
  • mDNS - Resolve the system's hostname, and advertise network services, using Multicast DNS (mDNS).
  • Syslog server - Collect syslog messages sent from remote hosts and print them to the system log.
  • QXDM - Diagnostic services for the cellular modem.

Web interface

An HTTPS server providing a device administration interface and access to resources.

Properties

Enable

Enable the web interface over HTTPS.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config service webui enable

Port

The TCP port to listen for HTTPS requests on.

  • Data type: integer
  • Default: 443
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config service webui port

Private key

A private key in PEM format for the server to use for TLS.

Leave this field empty to have the device generate a private key.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config service webui private-key

Certificate

An X.509 certificate issued for the public key corresponding to the private key.

Leave this field empty to have the device self-sign a certificate.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config service webui certificate

Fingerprint

The SHA256 fingerprint of the X.509 certificate used by the web server, which can be used to identify the private key in use.

  • Data type: string
  • Status

CLI: (cli)> show service webui fingerprint

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service webui acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service webui acl zone

Unencrypted redirect

Redirect unencrypted HTTP requests to the HTTPS server.

Properties

Enable

Enable the HTTP redirect.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config service webui http-redirect enable

Port

The TCP port to listen for HTTP requests on.

  • Data type: integer
  • Default: 80
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config service webui http-redirect port

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service webui http-redirect acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service webui http-redirect acl zone

SSH

An SSH server providing system login and access to resources.

Passwordless login can be configured for a user by adding public keys to their SSH public keys list in the Authentication / Users configuration.

Properties

Enable

Enable the SSH service.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config service ssh enable

Port

The TCP port to listen for SSH connections on.

  • Data type: integer
  • Default: 22
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config service ssh port

Private key

An SSH private key in PEM format for the server to use for encryption.

Leave this field empty to have the device generate a private key.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config service ssh private-key

Fingerprint

The fingerprint of the SSH server's public key, which can be used to identify the private key in use.

  • Data type: string
  • Status

CLI: (cli)> show service ssh fingerprint

Enable SFTP

Allow users to access filesystems using an SFTP client.

The user is presented with a virtual filesystem that maps their accessible filesystems.

Users with access to the System / Shell resource have access to the root filesystem.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config service ssh sftp

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service ssh acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service ssh acl zone

TFTP

Serve files with Trivial File Transfer Protocol (TFTP).

The TFTP server can be used in conjunction with DHCP server custom options to bootstrap devices that support Zero Touch Provisioning over TFTP.

Files may be downloaded from the TFTP server. Uploads are not supported.

Properties

Enable

Enable the network service.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config service tftp enable

Port

The UDP port to listen for TFTP client requests on.

  • Data type: integer
  • Default: 69
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config service tftp port

Serve files from filesystem

TFTP clients may get files from the referenced filesystem.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Default: /storage/volume/tftpboot
  • Configuration
  • Required

CLI: (cli)> config service tftp filesystem

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service tftp acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service tftp acl zone

DNS

A caching DNS server that forwards queries to upstream nameservers, and responds with local hostnames.

The DNS server resolves queries using the following methods:

  • Lookup the local cache of previous DNS replies.
  • Reply with hostnames discovered from DHCP leases.
  • Reply with hostnames configured in System / DNS / Hostnames, and additional sources of hostname/address associations such as Connected hosts and Compute / Containers.
  • Forward to DNS servers discovered by DHCP clients and SLAAC/DHCPv6 clients.
  • Forward to DNS servers configured in System / DNS / DNS servers.

When the DNS server is enabled and a DHCP server's DNS option mode is set to Automatic DNS servers, the DHCP server provides clients with the address of this DNS server rather than the upstream DNS servers.

Properties

Enable

Enable the DNS service.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config service dns enable

Allow DNS rebind

Allow addresses in private ranges from upstream nameservers.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config service dns dns-rebind

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over the interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service dns acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service dns acl zone

mDNS

Resolve the system's hostname, and advertise network services, using Multicast DNS (mDNS).

mDNS clients querying for the system hostname suffixed by the .local top-level domain will be resolved by the device, for example NR4416-0110923000657.local.

The resource records in mDNS answers resolved by the device include information about running network services, such as Service / SSH and Service / Web interface.

Properties

Enable

Enable the network service.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config service mdns enable

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service mdns acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service mdns acl zone

Syslog server

Collect syslog messages sent from remote hosts and print them to the system log.

Properties

Enable

Enable the syslog server.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config service syslog enable

Port

The network port that the syslog server listens on.

The syslog server will accept log messages sent over TCP connections and UDP packets.

  • Data type: integer
  • Default: 514
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config service syslog port

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service syslog acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service syslog acl zone

QXDM

Diagnostic services for the cellular modem.

Connect to the QXDM service as instructed by support to collect logs from the cellular modem.

Properties

Enable

Enable the QXDM service.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config service qxdm enable

Port

The TCP port to listen for QXDM connections on.

  • Data type: integer
  • Default: 2500
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config service qxdm port

Access control list

The set of interfaces that the service is accessible from.

Set both Interfaces and Zones to empty to remove interface restrictions.

Properties

Interfaces

Allow the service to be accessed over interfaces in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service qxdm acl interface

Zones

Allow the service to be accessed over interfaces in the zones in this list.

  • Data type: reference list
  • Configuration

CLI: (cli)> config service qxdm acl zone

Alerting

Serial port alerts

Send alerts on events relating to a serial port or ports.

New Serial alert items can be added.

Serial alert

A single serial alert source.

Properties

Serial ports

The serial ports to monitor.

  • Data type: reference list
  • Configuration

CLI: (cli)> config alerting serial-alert <key> port

Alert type

The type of serial alert.

OptionLabelDescription
pattern-matchPattern matchA PCRE regular expression to match against serial input.
control-line-changeControl line changeA status change in a serial control line.
user-eventUser connection/disconnectionAlert when a user first connects or is disconnected.
  • Data type: string select
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> alert-type

Enable

Enable the alert.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config alerting serial-alert <key> enable

Action type

The notification or action to take when the conditions are met.

OptionLabelDescription
emailSend EmailWhen an alert trippers, send an email to the listed recipients.
smsSend SMSWhen an alert trippers, send an SMS to the listed recipients.
snmp-trapSend SNMP TrapWhen an alert trippers, send an SNMP trap to the listed receivers.
httpreqMake HTTP(S) RequestWhen an alert trippers, fetch the URL provided.
customCustomWhen an alert trippers, run the customized automation script.
  • Data type: string select
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> action-type

Alert options

Configuration options for the different types of alert.

Properties

PCRE pattern

A PCRE pattern to match against serial input on the selected ports.

A details description of the PCRE format can be found at https://www.pcre.org/original/doc/html/pcrepattern.html and a quick reference summary at https://www.pcre.org/original/doc/html/pcresyntax.html . For simple use cases, a sequence of words and be entered and will match that same sequence of words.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> alert-options pattern-match

Control line

Alert on the status of an input control line changing.

The DCD signal is only available on ports in rolled mode.

OptionLabelDescription
ctsCTSClear To Send (CTS)
dsrDSRData Set Ready (DSR)
dcdDCDData Carrier Detect (DCD)
  • Data type: string select
  • Default: dsr
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> alert-options control-line

User event

Alert on the connected status of a user.

OptionLabelDescription
connectUser connectAlert when a user connects to the serial port.
disconnectUser disconnectAlert when a user disconnects from the serial port.
eitherEitherAlert when a user connects or disconnects from the serial port.
  • Data type: string select
  • Default: either
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> alert-options user-event

Action options

The attributes controlling the action for the alert.

  • Email - Send an email when the alert triggers.
  • SNMP trap - Send an SNMP trap when the alert triggers.
  • HTTP(S) - Perform an HTTP(S) request when the alert triggers.

Email

Send an email when the alert triggers.

Properties

Addresses to email

The list of recipients email addresses that will receive this alert.

  • Data type: string list
  • Configuration

CLI: (cli)> config alerting serial-alert <key> action-options email address

Subject

The subject for the alert email.

Enter the subject to be sent when the alert triggers. The following variables are available for customizing the subject.

VariableDescription
HOSTNAMEThe system hostname
ALERTNAMEThe name of the alert
PATHThe system status/configuration path
LABELThe label for this alert
EVENT_STRINGThe message produced by this alert
VALUEThe value that triggered the alert
ENTITYThe entity that trigger the alert
  • Data type: string
  • Default: Alert $ALERTNAME triggered on $HOSTNAME
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> action-options email subject

Message

The text body for the email message.

Enter the message to be sent when the alert triggers. The following variables are available for customizing the subject.

VariableDescription
HOSTNAMEThe system hostname
ALERTNAMEThe name of the alert
PATHThe system status/configuration path
LABELThe label for this alert
EVENT_STRINGThe message produced by this alert
VALUEThe value that triggered the alert
ENTITYThe entity that trigger the alert
  • Data type: string
  • Default: Alert $ALERTNAME triggered on $HOSTNAME $EVENT_STRING
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> action-options email message

SNMP trap

Send an SNMP trap when the alert triggers.

HTTP(S)

Perform an HTTP(S) request when the alert triggers.

Properties

URL

The request URL.

FormatDescription
HTTP URLAn HTTP URL to a file.
HTTPS URLAn HTTPS URL to a file.
  • Data type: string
  • Default: https://www.example.org/alert?name=$ALERTNAME&value=$VALUE
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> action-options httpreq url

Request Type

The HTTP request type.

OptionLabelDescription
getGETA HTTP GET request.
postPOSTA HTTP POST request.
patchPATCHA HTTP PATCH request.
putPUTA HTTP PUT request.
  • Data type: string select
  • Default: get
  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> action-options httpreq request-type

Request message body

The body of the HTTP request in JSON format.

Enter the message to be sent when the alert triggers. The following variables are available for customizing the subject.

VariableDescription
HOSTNAMEThe system hostname
ALERTNAMEThe name of the alert
PATHThe system status/configuration path
LABELThe label for this alert
EVENT_STRINGThe message produced by this alert
VALUEThe value that triggered the alert
ENTITYThe entity that trigger the alert
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config alerting serial-alert <key> action-options httpreq request-body

Automation

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config alerting serial-alert <key> automation enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Default: Alert Logic
  • Configuration
  • Optional

CLI: (cli)> config alerting serial-alert <key> automation label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show alerting serial-alert <key> automation running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show alerting serial-alert <key> automation error

Script

The javascript automation source.

  • Data type: string
  • Default: `const alerting = await import('@dryjs/alerting'); const alerts = await alerting.handleSerialAlert(data);

//Alter this function to implement a custom alert function customAlert(alerts) { console.log(alerts); }

if (alerts.length > 0) await alerting.processAlerts(data, alerts, customAlert);`

  • Configuration
  • Required

CLI: (cli)> config alerting serial-alert <key> automation script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config alerting serial-alert <key> automation schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config alerting serial-alert <key> automation run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Default: ../
  • Configuration
  • Optional

CLI: (cli)> config alerting serial-alert <key> automation data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config alerting serial-alert <key> automation data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config alerting serial-alert <key> automation data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

Network interface alerts

Send alerts on events relating to a network interface.

New Network interface alert items can be added.

Network interface alert

A single network interface alert source.

Properties

Enable

Enable the alert.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config alerting interface-alert <key> enable

Network interfaces

The network interfaces to monitor.

  • Data type: reference list
  • Configuration

CLI: (cli)> config alerting interface-alert <key> interface

Alert type

The type of network interface alert.

OptionLabelDescription
interface-upNetwork interface upThe status of the network interface changes to up.
interface-downNetwork interface downThe status of the network interface changes to down.
interface-stateNetwork interface stateThe status of the network interface changes.
  • Data type: string select
  • Default: interface-state
  • Configuration
  • Required

CLI: (cli)> config alerting interface-alert <key> alert-type

Action type

The notification or action to take when the conditions are met.

OptionLabelDescription
emailSend EmailWhen an alert trippers, send an email to the listed recipients.
smsSend SMSWhen an alert trippers, send an SMS to the listed recipients.
snmp-trapSend SNMP TrapWhen an alert trippers, send an SNMP trap to the listed receivers.
httpreqMake HTTP(S) RequestWhen an alert trippers, fetch the URL provided.
customCustomWhen an alert trippers, run the customized automation script.
  • Data type: string select
  • Configuration
  • Required

CLI: (cli)> config alerting interface-alert <key> action-type

Action options

The attributes controlling the action for the alert.

  • Email - Send an email when the alert triggers.
  • SNMP trap - Send an SNMP trap when the alert triggers.
  • HTTP(S) - Perform an HTTP(S) request when the alert triggers.

Email

Send an email when the alert triggers.

Properties

Addresses to email

The list of recipients email addresses that will receive this alert.

  • Data type: string list
  • Configuration

CLI: (cli)> config alerting interface-alert <key> action-options email address

Subject

The subject for the alert email.

Enter the subject to be sent when the alert triggers. The following variables are available for customizing the subject.

VariableDescription
HOSTNAMEThe system hostname
ALERTNAMEThe name of the alert
PATHThe system status/configuration path
LABELThe label for this alert
EVENT_STRINGThe message produced by this alert
VALUEThe value that triggered the alert
ENTITYThe entity that trigger the alert
  • Data type: string
  • Default: Alert $ALERTNAME triggered on $HOSTNAME
  • Configuration
  • Required

CLI: (cli)> config alerting interface-alert <key> action-options email subject

Message

The text body for the email message.

Enter the message to be sent when the alert triggers. The following variables are available for customizing the subject.

VariableDescription
HOSTNAMEThe system hostname
ALERTNAMEThe name of the alert
PATHThe system status/configuration path
LABELThe label for this alert
EVENT_STRINGThe message produced by this alert
VALUEThe value that triggered the alert
ENTITYThe entity that trigger the alert
  • Data type: string
  • Default: Alert $ALERTNAME triggered on $HOSTNAME $EVENT_STRING
  • Configuration
  • Required

CLI: (cli)> config alerting interface-alert <key> action-options email message

SNMP trap

Send an SNMP trap when the alert triggers.

HTTP(S)

Perform an HTTP(S) request when the alert triggers.

Properties

URL

The request URL.

FormatDescription
HTTP URLAn HTTP URL to a file.
HTTPS URLAn HTTPS URL to a file.
  • Data type: string
  • Default: https://www.example.org/alert?name=$ALERTNAME&value=$VALUE
  • Configuration
  • Required

CLI: (cli)> config alerting interface-alert <key> action-options httpreq url

Request Type

The HTTP request type.

OptionLabelDescription
getGETA HTTP GET request.
postPOSTA HTTP POST request.
patchPATCHA HTTP PATCH request.
putPUTA HTTP PUT request.
  • Data type: string select
  • Default: get
  • Configuration
  • Required

CLI: (cli)> config alerting interface-alert <key> action-options httpreq request-type

Request message body

The body of the HTTP request in JSON format.

Enter the message to be sent when the alert triggers. The following variables are available for customizing the subject.

VariableDescription
HOSTNAMEThe system hostname
ALERTNAMEThe name of the alert
PATHThe system status/configuration path
LABELThe label for this alert
EVENT_STRINGThe message produced by this alert
VALUEThe value that triggered the alert
ENTITYThe entity that trigger the alert
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config alerting interface-alert <key> action-options httpreq request-body

Automation

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config alerting interface-alert <key> automation enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Default: Alert Logic
  • Configuration
  • Optional

CLI: (cli)> config alerting interface-alert <key> automation label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show alerting interface-alert <key> automation running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show alerting interface-alert <key> automation error

Script

The javascript automation source.

  • Data type: string
  • Default: `const alerting = await import('@dryjs/alerting'); const alerts = await alerting.handleNetworkAlert(data);

//Alter this function to implement a custom alert function customAlert(alerts) { console.log(alerts); }

if (alerts.length > 0) await alerting.processAlerts(data, alerts, customAlert);`

  • Configuration
  • Required

CLI: (cli)> config alerting interface-alert <key> automation script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config alerting interface-alert <key> automation schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config alerting interface-alert <key> automation run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Default: ../
  • Configuration
  • Optional

CLI: (cli)> config alerting interface-alert <key> automation data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config alerting interface-alert <key> automation data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config alerting interface-alert <key> automation data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

Automation

New Automation items can be added.

Automation

Automations provide a method to automate tasks and action.

  • Trigger data - The model data that will tripper (start) this automation.

Commands

  • Start - Start this automation.
  • Stop - Stop this automation.

Properties

Enable

Enable this automation.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config automation <key> enable

Label

The label used to describe and locate this automation.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config automation <key> label

Running

The run status of this automation.

OptionLabel
trueRunning
falseNot running
  • Data type: boolean
  • Status

CLI: (cli)> show automation <key> running

Error

The error associated with the recent failed run.

  • Data type: string
  • Status

CLI: (cli)> show automation <key> error

Script

The javascript automation source.

  • Data type: string
  • Default: console.log(data)
  • Configuration
  • Required

CLI: (cli)> config automation <key> script

Run schedule

Run the automation action on a schedule.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config automation <key> schedule

Run on start

Run the automation action immediately after boot up or the automation is added.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config automation <key> run-on-start

Trigger data

The model data that will tripper (start) this automation.

Properties

Data path

Run the automation action when configuration or status data changes.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config automation <key> data path

Include data subpaths

Filter the data to include the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config automation <key> data include

Exclude data subpaths

Filter the data to exclude the listed subpaths.

  • Data type: string list
  • Configuration

CLI: (cli)> config automation <key> data exclude

Start

Start this automation.

The command takes no parameters.

Stop

Stop this automation.

The command takes no parameters.

Authentication

  • Users - Local user accounts available for system login.
  • Groups - Grant group members permission to access resources.
  • Authentication methods - The methods used to authenticate a user when they attempt to log in, in listed order.
  • Sessions - Manage user login sessions.
  • Resources - The device's resources available for access by users.

Users

Local user accounts available for system login.

The username and password for these users are used for Authentication method type Local.

New User items can be added.

User

A local user account.

Properties

Enable

Enable the user account.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth user <key> enable

Password

The user's password.

The password is used to authenticate when challenged by the Authentication method type Local.

If left empty, the device's default setup password is required.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth user <key> password

Groups

Local groups that the user is a member of, controlling access permissions.

Group access permissions are configured in Authentication / Groups.

  • Data type: reference list
  • Configuration

CLI: (cli)> config auth user <key> group

SSH public keys

Add the user's public keys in SSH or PEM format for passwordless login over SSH.

  • Data type: string list
  • Configuration

CLI: (cli)> config auth user <key> ssh-public-key

Groups

Grant group members permission to access resources.

Groups define rules to grant specific permissions to Authentication / Resources that have tags that match a filter. Members of the group inherit these permissions, and can access matching resources in the web interface and terminal interface (such as over SSH).

New Group items can be added.

Group

Members of this group are permitted access according to the resource rules.

  • Resource rules - Permit access to resources matching the filter tags and permissions.

Properties

Enable

Members of the group will be able to access the resources when the group is enabled.

Enable the group.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth group <key> enable

Label

A user-defined label for the group.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config auth group <key> label

Resource rules

Permit access to resources matching the filter tags and permissions.

Resource rule

Properties

Filter by tags

Apply permissions to resources that match all of the filter tags.

Each filter tag is used as a case insensitive regular expressions tested against resource tags. A disjunct filter can be created with regular expressions, for example serial port|compute.

Leave empty to match all resources.

  • Data type: string list
  • Configuration

CLI: (cli)> config auth group <key> resource <index> tags

Administration permission

Match resources that are tagged with the Administration permission. Administration resources allow management of the device using the CLI and web interface.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth group <key> resource <index> admin

Access permission

Match resources that are tagged with the Access permission. This includes resources such as serial ports, connected devices, compute resources, and storage.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth group <key> resource <index> access

Audit permission

Match resources that are tagged with the Audit permission. This includes resources such logs and read-only storage filesystems.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth group <key> resource <index> audit

Authentication methods

The methods used to authenticate a user when they attempt to log in, in listed order.

Authentication method

A local or remote authentication method used to determine if a user is allowed access to the device, and which local authentication groups they are a member of.

  • RADIUS - Options for authenticating with RADIUS servers.
  • TACACS+ - Options for authenticating with TACACS+ servers.
  • LDAP - Options for authenticating with LDAP servers.

Properties

Enable

Enable the authentication method.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth method <index> enable

Type

The authentication method type.

OptionLabelDescription
localLocalAuthenticate against user accounts defined in Authentication / Users.
radiusRADIUSAuthenticate with RADIUS (Remote Authentication Dial-In User Service) servers.
tacacs-plusTACACS+Authenticate with TACACS+ (Terminal Access Controller Access-Control System Plus) servers.
ldapLDAPAuthenticate with LDAP (Lightweight Directory Access Protocol) servers.
zeroGearlinx ZEROAuthenticate with your Gearlinx ZERO credentials.
  • Data type: string select
  • Configuration
  • Required

CLI: (cli)> config auth method <index> type

RADIUS

Options for authenticating with RADIUS servers.

Use RADIUS (Remote Authentication Dial-In User Service) to authenticate and authorize users.

The RADIUS server must be configured to respond with the list of local authentication groups that the RADIUS user is a member of inside the Frame-Filter-ID attribute. The format of the attribute must be group_name=<GROUPS> where <GROUPS> is a comma-separated list of group names. If the Frame-Filter-ID is already in use, the groups can be separated using colons. For example: ...:group_name=admin,operator:....

  • Servers - RADIUS servers to contact when authenticating a user.

Properties

NAS ID

The Network Access Server Identifier (NAS ID) sent in requests to RADIUS servers.

Leave this field empty to use the device's hostname.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config auth method <index> radius nas-id

Servers

RADIUS servers to contact when authenticating a user.

The RADIUS servers are tried in the listed order until a successful response is received, or all respond with failure.

Server

A RADIUS server .

Properties

RADIUS server address

The network address of the RADIUS server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth method <index> radius server <index> address

Port

The port the RADIUS server listens on.

  • Data type: integer
  • Default: 1812
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config auth method <index> radius server <index> port

Shared secret

The shared secret is used by both servers and clients to secure the connection.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth method <index> radius server <index> secret

TACACS+

Options for authenticating with TACACS+ servers.

Use TACACS+ (Terminal Access Controller Access-Control System Plus) to authenticate and authorize users.

The TACACS+ server must be configured to respond with the list of local authentication groups that the TACACS+ user is a member of inside the groupname attribute. To specify multiple groups, set the groupname attribute to a comma-separated list of the names. For example: admin,operator.

  • Servers - A list of TACACS+ servers.

Properties

Authentication protocol

The authentication protocol required to connect to the server.

OptionLabelDescription
papPAPPassword AUthentication Protocol.
chapCHAPChallenge Handshake Authentication Protocol.
cleartextCleartextLogin and password details are sent in cleartext..
  • Data type: string select
  • Default: pap
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus auth-protocol

Service

The service to use with this server.

  • Data type: string
  • Default: raccess
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus service

Protocol

The protocol to use with this server.

  • Data type: string
  • Default: unknown
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus protocol

Group attribute

The group attributes to use with this server.

  • Data type: string
  • Default: groupname
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus group-attribute

Timeout

Specifies the number of seconds to wait for a response from the TACACS+ server before trying the next TACACS+ server.

  • Data type: integer
  • Units: seconds
  • Default: 5
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus timeout

Servers

A list of TACACS+ servers.

Server

A TACACS+ server.

Properties

TACACS+ server address

The network address of the TACACS+ server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus server <index> address

Port

The port the TACACS+ server listens on.

  • Data type: integer
  • Default: 49
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus server <index> port

Shared secret

Shared secret

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth method <index> tacacs-plus server <index> secret

LDAP

Options for authenticating with LDAP servers.

  • Servers - The LDAP servers to use.

Properties

Protocol

The protocol to use when communicating with the LDAP server.

OptionLabelDescription
rawLDAP (raw TCP)Connect to the LDAP server with raw TCP. Conventionally, LDAP servers accept connections on port 389.
start-tlsLDAP (StartTLS)Connect to the LDAP server with raw TCP and upgrade to a TLS connection using StartTLS. Conventionally, LDAP servers accept connections on port 389.
tlsLDAPS (TLS)Connect to the LDAP server with TLS encryption. Conventionally, LDAP servers accept connections on port 636.
  • Data type: string select
  • Default: raw
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap protocol

Client key

The private key used for the TLS session.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config auth method <index> ldap client-key

Client certificate

The certificate used to identify this device to the LDAP server.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config auth method <index> ldap client-certificate

Verify server

Options to perform server verification.

OptionLabelDescription
noDo not verify serverNo server verification will be performed.
root-caRoot CA certificateVerify server using public root CA certificates.
certificateCustom certificateVerify server using a custom certificate.
  • Data type: string select
  • Default: no
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap verify-server

Server certificate

The LDAP server's certificate, or the certificate used to sign the server's certificate.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap server-certificate

Bind DN

Authenticate with the LDAP server using this user DN.

Leave empty to bind anonymously.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config auth method <index> ldap bind-dn

Bind password

The password associated with the bind user.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config auth method <index> ldap bind-password

Search base

E.g. "dc=example,dc=org"

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap search-base

User attribute

User attribute to use with this server.

  • Data type: string
  • Default: uid
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap user-attribute

Group attribute

Group attribute to use with this server.

  • Data type: string
  • Default: ou
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap group-attribute

Timeout

Timeout before moving to the next server.

  • Data type: integer
  • Units: seconds
  • Default: 5
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap timeout

Servers

The LDAP servers to use.

Server

An LDAP server.

Properties

LDAP server address

The LDAP servers network address.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap server <index> address

Port

The port this server listens on.

  • Data type: integer
  • Default: 389
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config auth method <index> ldap server <index> port

Sessions

Manage user login sessions.

Properties

Idle timeout

The time that a login session may be idle before it is closed due to inactivity.

Leave empty to allow sessions to be idle indefinitely.

  • Data type: integer
  • Units: seconds
  • Minimum: 60
  • Configuration
  • Optional

CLI: (cli)> config auth session idle-timeout

Text to display to users after they log in.

The banner is shown on the web interface, and before the login menu when the user logs in via a text interface such as SSH or a serial port console.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config auth session banner

Active sessions

Users currently logged on to the device.

Active session items are status and cannot be added or deleted.

Active session

Commands

  • Kick session - Close the session, requiring the user to re-authenticate.

Properties

User name

The name of the user that logged in to the session.

  • Data type: string
  • Status

CLI: (cli)> show auth session active <key> username

Service

The service that the user used to log in.

  • Data type: string
  • Status

CLI: (cli)> show auth session active <key> service

Source address

The source address of the user's client.

  • Data type: string
  • Status

CLI: (cli)> show auth session active <key> src-address

Session start time

The time that the user logged in.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show auth session active <key> session-start

Kick session

Close the session, requiring the user to re-authenticate.

The command takes no parameters.

Resources

The device's resources available for access by users.

Users are granted access to these resources by membership in Authentication / Groups which give permission based on matching tags.

Resource

Properties

Label

  • Data type: string list
  • Status

CLI: (cli)> show auth resource <index> label

Tags

  • Data type: string list
  • Status

CLI: (cli)> show auth resource <index> tags

System

  • Operations - Perform basic system management tasks.
  • Configuration
  • Information - Device details and identifying information.
  • Firmware - View details about the device's firmware and perform firmware upgrades.
  • Sensors - System sensors provide feedback on the devices operational status.
  • Logs - System loging settings and services.
  • Plugins - Device plugins to extend funcitonality.
  • Time
  • DNS - Settings for host/domain name resolution.
  • Notification - The available channel for system notifications and alerts.
  • Advanced settings - Settings for advanced system functionality.

Operations

Perform basic system management tasks.

Commands

Restart

Restart the system.

The command takes no parameters.

Backup system to file

Create a backup of the device's configuration and data. The backup file is saved to a filesystem on the device, and can be retrieved using any of the file access methods such as the web interface.

The backup file can be restored using the Operations / Restore system from backup file command.

Command parameters

  • contents - Select the data to include in the backup file.

Properties

Filesystem

The filesystem that the backup file will be saved to.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Configuration
  • Required

CLI: (cli)> run system operations backup filesystem <value>

Filename

The name of the backup file to create on the filesystem.

The filename will have the following patterns substituted:

  • ${serial} - The device's serial number.

  • ${mac} - The device's primary MAC address.

  • ${class} - The device's model name.

  • ${version} - The version of the firmware that the device is currently running.

  • ${date} - The date string in YYYYMMDD format.

  • ${timestamp} - The time in YYYYMMDD-HH-MM-SS format.

  • Data type: string

  • Default: backup-${serial}-${timestamp}.bin

  • Configuration

  • Required

CLI: (cli)> run system operations backup filename <value>

Encryption

Encrypt the backup file to secure sensitive device information.

OptionLabelDescription
noneNoneDo not encrypt the backup file.
passwordPasswordEncrypt the backup file with a password. The password must be provided when restoring the backup file to a device.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> run system operations backup encryption <value>

Password

The password to encrypt the backup file with.

The password must be provided when restoring the backup file to a device.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> run system operations backup password <value>

contents

Select the data to include in the backup file.

Properties

Current saved configuration

The last configuration saved to disk.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system operations backup contents config

Stored configurations

The configurations saved in System / Configuration / Stored configurations.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system operations backup contents config-store

System data

System data includes DHCP leases, and autogenerated keys and certificates.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system operations backup contents system

User data filesystem

The contents of the Storage / Disks / User data filesystem.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config system operations backup contents user-data

Restore system from backup file

Restore configuration and data from a backup file that was created with the Operations / Backup system to file command.

Command parameters

Properties

Filesystem

The name of the filesystem that the backup file is on.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Configuration
  • Required

CLI: (cli)> run system operations restore filesystem <value>

Filename

The name of the backup file on the filesystem.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> run system operations restore filename <value>

Password

The password that was used to encrypt the backup file when it was created. Omit if a password is not required.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> run system operations restore password <value>

Restore to factory defaults

Delete the configuration, generated cryptographic keys, and user data.

Restoring factory defaults deletes the configuration, generated cryptographic keys, and user data.

The command takes no parameters.

Generate support report

Provide a support report when contacting Gearlinx for support.

Generate a support report and save it to a filesystem for retrieval.

Command parameters

Properties

Filesystem

The filesystem that the support report will be saved to.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Default: /storage/disk/ram
  • Configuration
  • Required

CLI: (cli)> run system operations generate-support-report filesystem <value>

Filename

The name of the support report file to create on the filesystem.

The filename will have the following patterns substituted:

  • ${serial} - The device's serial number.

  • ${mac} - The device's primary MAC address.

  • ${class} - The device's model name.

  • ${version} - The version of the firmware that the device is currently running.

  • ${date} - The date string in YYYYMMDD format.

  • ${timestamp} - The time in YYYYMMDD-HH-MM-SS format.

  • Data type: string

  • Default: support-report-${serial}-${timestamp}.tar.gz

  • Configuration

  • Required

CLI: (cli)> run system operations generate-support-report filename <value>

Configuration

Manage the device's saved configurations.

Commands

Stored configurations

Named configurations that can be applied to the device.

Save the current device configuration to the store by running the Save to configuration store command.

Stored configuration items are status and cannot be added or deleted.

Stored configuration

A stored configuration than can be applied to the device.

Commands

  • Apply - Apply the stored configuration.
  • Delete - Delete the stored configuration.

Properties

Notes

Notes that describe the configuration, written when the configuration is saved.

  • Data type: string
  • Status

CLI: (cli)> show system config store <key> notes

Firmware version

The firmware version that the configuration applies to.

The configuration can be applied to the device when it is running any firmware version, but may not be valid on all firmware and will fail to apply.

  • Data type: string
  • Status

CLI: (cli)> show system config store <key> firmware-version

Saved at

The time that the configuration was saved to the store.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show system config store <key> saved-at

Apply

Apply the stored configuration.

The command takes no parameters.

Delete

Delete the stored configuration.

The command takes no parameters.

Save configuration

Saves the running configuration to disk so it persists across restarts.

The command takes no parameters.

Apply saved configuration

Reapplies the saved configuration, losing any unsaved applied changes.

The command takes no parameters.

Delete configuration

Delete the saved configuration and load the factory default configuration.

The command takes no parameters.

Save to configuration store

Save the current device configuration to the store.

Command parameters

Properties

Name

A name to used to identify the configuration.

  • Data type: string
  • Default: config-${timestamp}
  • Configuration
  • Required

CLI: (cli)> run system config save-to-store name <value>

Notes

Notes that describe the configuration.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> run system config save-to-store notes <value>

Information

Device details and identifying information.

Properties

Name

A name used to identify the device.

The system name is used to generate the network hostname. Leave this field blank to have the hostname set to the serial number.

FormatDescription
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system info name

Hostname

The device's network hostname.

This hostname is used to identify this device in network services including DNS, mDNS, LLDP, and DHCP client requests. The hostname is set to the system name if available, otherwise the serial number is used.

  • Data type: string
  • Status

CLI: (cli)> show system info hostname

MAC address identifier

The MAC address of the device's primary ethernet interface.

The MAC address can be found on the manufacturing label on the device.

  • Data type: string
  • Status

CLI: (cli)> show system info mac

Serial number

A serial number used to identify the device.

The serial number can be found on the manufacturing label on the device.

  • Data type: string
  • Status

CLI: (cli)> show system info serial

Device location

A description of the device's location.

The device location is advertised by services such as SNMP.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system info location

System management contact

Contact information for the team managing this device.

The contact infromation is advertised by services usch as SNMP.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system info contact

Firmware

View details about the device's firmware and perform firmware upgrades.

  • Modem FOTA - FOTA (Firmware Over The Air) updates for the cellular modem.

Commands

Properties

Firmware version

The version of firmware that the device is running.

  • Data type: string
  • Status

CLI: (cli)> show system firmware version

Distribution version

The distribution version that the firmware is built from.

  • Data type: string
  • Status

CLI: (cli)> show system firmware distribution

Modem FOTA

FOTA (Firmware Over The Air) updates for the cellular modem.

Properties

Enable

Enable FOTA updates.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config system firmware fota enable

Update status

FOTA update status.

  • Data type: string
  • Status

CLI: (cli)> show system firmware fota status

Current software revision

Pre update software revision of modem.

  • Data type: string
  • Status

CLI: (cli)> show system firmware fota current-revision

Firmware update revision

Revision of firmware applied by this FOTA update.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system firmware fota update-revision

Firmware update image URL

The download URL for the FOTA update.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system firmware fota update-url

Download

A file to download to the device's storage.

Properties

Enable

Enable this download.

  • Data type: boolean
  • Status

CLI: (cli)> show system firmware fota download enable

File ready

Download is successful and complete.

  • Data type: boolean
  • Status

CLI: (cli)> show system firmware fota download ready

Status

Current download status.

  • Data type: string
  • Status

CLI: (cli)> show system firmware fota download status

Destination filesystem

Download the file to this filesystem.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Default: /storage/disk/ram
  • Configuration
  • Required

CLI: (cli)> config system firmware fota download filesystem

Hash method

Check the downloaded file's integrity with a hash.

Select the hashing method for checking the downloaded file.

OptionLabelDescription
noneNoneNo hashing will be performed.
md5MD5MD5 hashing will be performed.
sha1SHA1SHA1 hashing will be performed.
sha256SHA256No hashing will be performed.
sha512SHA512No hashing will be performed.
  • Data type: string select
  • Default: none
  • Configuration
  • Required

CLI: (cli)> config system firmware fota download hash-method

Hash

The hash used to check the downloaded file's integrity.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system firmware fota download hash

Download progress

Information showing the download progress.

Properties

Downloaded

The percentage of the download completed.

  • Data type: integer
  • Units: %
  • Minimum: 0
  • Maximum: 100
  • Status

CLI: (cli)> show system firmware fota download progress percent

Elapsed time

The elapse time since the download started.

  • Data type: integer
  • Units: seconds
  • Minimum: 0
  • Status

CLI: (cli)> show system firmware fota download progress time-elapsed

Estimated time remaining

The estimated time until the download completes.

  • Data type: integer
  • Units: seconds
  • Minimum: 0
  • Status

CLI: (cli)> show system firmware fota download progress time-remaining

Downloaded size

The number of bytes downloads so far.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show system firmware fota download progress downloaded-size

File size

The full size of the download in progress.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show system firmware fota download progress file-size

Average speed

The average download speed this download is achieving.

  • Data type: integer
  • Units: bytes/second
  • Minimum: 0
  • Status

CLI: (cli)> show system firmware fota download progress average-speed

Update firmware

Update from a firmware image file.

Command parameters

Properties

Filesystem

The filesystem where firmware image is located.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Configuration
  • Required

CLI: (cli)> run system firmware update filesystem <value>

Firmware image filename

The name of the firmware image file.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> run system firmware update filename <value>

Sensors

System sensors provide feedback on the devices operational status.

Properties

CPU temperature

The systems core CPU temperature.

  • Data type: integer
  • Units: º Celsius
  • Status

CLI: (cli)> show system sensor cpu-temperature

Power amplifier temperature

The systems power amplifier temperature.

  • Data type: integer
  • Units: º Celsius
  • Status

CLI: (cli)> show system sensor power-amplifier-temperature

Oscillator temperature

The systems oscillator temperature.

  • Data type: integer
  • Units: º Celsius
  • Status

CLI: (cli)> show system sensor oscillator-temperature

Logs

System loging settings and services.

Properties

Syslog size limit

Limit the syslog to this number of bytes.

When the log file exceeds this limit, the log will be rotated.

  • Data type: integer
  • Units: bytes
  • Default: 100000
  • Minimum: 1000
  • Configuration
  • Required

CLI: (cli)> config system log file-size-limit

Log to filesystem

Log to one or more files in the filesystem.

Filesystem

A file to log into.

Properties

Enable

Enable this logging destination.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system log filesystem <index> enable

Filesystem

The filesystem containing the file.

  • Data type: reference path
  • References instances of: Storage / Filesystems
  • Configuration
  • Required

CLI: (cli)> config system log filesystem <index> filesystem

Minimum severity level

The minimum severity level to log.

All higher severity levels will also be logged.

OptionLabel
debugDebug
infoInformation
noticeNotice
warningWarning
errorError
criticalCritical
alertAlert
emergencyEmergency
  • Data type: string select
  • Default: debug
  • Configuration
  • Required

CLI: (cli)> config system log filesystem <index> level

File size limit

Limit the log file to this number of bytes.

When the log file exceeds this limit, the log will be rotated.

  • Data type: integer
  • Units: bytes
  • Default: 100000
  • Minimum: 1000
  • Configuration
  • Required

CLI: (cli)> config system log filesystem <index> file-size-limit

Log to remote servers

Log to one or more remote servers.

Server

A remote server.

Properties

Enable

Enable logging to this remote server.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system log remote <index> enable

Protocol

The protocol accepted by the remote server.

OptionLabel
udpUDP
tcpTCP
  • Data type: string select
  • Default: udp
  • Configuration
  • Required

CLI: (cli)> config system log remote <index> protocol

Address

The network address or the remote server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system log remote <index> address

Port

The IP Port the remote server listens on.

  • Data type: integer
  • Default: 514
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config system log remote <index> port

Minimum severity level

The minimum severity level to log.

All higher severity levels will also be logged.

OptionLabel
debugDebug
infoInformation
noticeNotice
warningWarning
errorError
criticalCritical
alertAlert
emergencyEmergency
  • Data type: string select
  • Default: debug
  • Configuration
  • Required

CLI: (cli)> config system log remote <index> level

Plugins

Device plugins to extend funcitonality.

New Plugin items can be added.

Plugin

A device plugin extends the base system.

Properties

Enable

Enable this plugin.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system plugin <key> enable

Label

The label used to describe and locate this plugin.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system plugin <key> label

Schema

The schema required to integrate this plugin.

This schema entry is used to ended the Devices configuration and monitoring capabilities.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system plugin <key> schema

Time

  • NTP client - Synchronize the system's time with NTP servers.

Properties

Timezone

  • Options: UTC, Africa/Abidjan, Africa/Accra, Africa/Addis_Ababa, Africa/Algiers, Africa/Asmara, Africa/Bamako, Africa/Bangui, Africa/Banjul, Africa/Bissau, Africa/Blantyre, Africa/Brazzaville, Africa/Bujumbura, Africa/Cairo, Africa/Casablanca, Africa/Ceuta, Africa/Conakry, Africa/Dakar, Africa/Dar_es_Salaam, Africa/Djibouti, Africa/Douala, Africa/El_Aaiun, Africa/Freetown, Africa/Gaborone, Africa/Harare, Africa/Johannesburg, Africa/Juba, Africa/Kampala, Africa/Khartoum, Africa/Kigali, Africa/Kinshasa, Africa/Lagos, Africa/Libreville, Africa/Lome, Africa/Luanda, Africa/Lubumbashi, Africa/Lusaka, Africa/Malabo, Africa/Maputo, Africa/Maseru, Africa/Mbabane, Africa/Mogadishu, Africa/Monrovia, Africa/Nairobi, Africa/Ndjamena, Africa/Niamey, Africa/Nouakchott, Africa/Ouagadougou, Africa/Porto-Novo, Africa/Sao_Tome, Africa/Tripoli, Africa/Tunis, Africa/Windhoek, America/Adak, America/Anchorage, America/Anguilla, America/Antigua, America/Araguaina, America/Argentina/Buenos_Aires, America/Argentina/Catamarca, America/Argentina/Cordoba, America/Argentina/Jujuy, America/Argentina/La_Rioja, America/Argentina/Mendoza, America/Argentina/Rio_Gallegos, America/Argentina/Salta, America/Argentina/San_Juan, America/Argentina/San_Luis, America/Argentina/Tucuman, America/Argentina/Ushuaia, America/Aruba, America/Asuncion, America/Atikokan, America/Bahia, America/Bahia_Banderas, America/Barbados, America/Belem, America/Belize, America/Blanc-Sablon, America/Boa_Vista, America/Bogota, America/Boise, America/Cambridge_Bay, America/Campo_Grande, America/Cancun, America/Caracas, America/Cayenne, America/Cayman, America/Chicago, America/Chihuahua, America/Costa_Rica, America/Creston, America/Cuiaba, America/Curacao, America/Danmarkshavn, America/Dawson, America/Dawson_Creek, America/Denver, America/Detroit, America/Dominica, America/Edmonton, America/Eirunepe, America/El_Salvador, America/Fort_Nelson, America/Fortaleza, America/Glace_Bay, America/Goose_Bay, America/Grand_Turk, America/Grenada, America/Guadeloupe, America/Guatemala, America/Guayaquil, America/Guyana, America/Halifax, America/Havana, America/Hermosillo, America/Indiana/Indianapolis, America/Indiana/Knox, America/Indiana/Marengo, America/Indiana/Petersburg, America/Indiana/Tell_City, America/Indiana/Vevay, America/Indiana/Vincennes, America/Indiana/Winamac, America/Inuvik, America/Iqaluit, America/Jamaica, America/Juneau, America/Kentucky/Louisville, America/Kentucky/Monticello, America/Kralendijk, America/La_Paz, America/Lima, America/Los_Angeles, America/Lower_Princes, America/Maceio, America/Managua, America/Manaus, America/Marigot, America/Martinique, America/Matamoros, America/Mazatlan, America/Menominee, America/Merida, America/Metlakatla, America/Mexico_City, America/Miquelon, America/Moncton, America/Monterrey, America/Montevideo, America/Montserrat, America/Nassau, America/New_York, America/Nipigon, America/Nome, America/Noronha, America/North_Dakota/Beulah, America/North_Dakota/Center, America/North_Dakota/New_Salem, America/Nuuk, America/Ojinaga, America/Panama, America/Pangnirtung, America/Paramaribo, America/Phoenix, America/Port-au-Prince, America/Port_of_Spain, America/Porto_Velho, America/Puerto_Rico, America/Punta_Arenas, America/Rainy_River, America/Rankin_Inlet, America/Recife, America/Regina, America/Resolute, America/Rio_Branco, America/Santarem, America/Santiago, America/Santo_Domingo, America/Sao_Paulo, America/Scoresbysund, America/Sitka, America/St_Barthelemy, America/St_Johns, America/St_Kitts, America/St_Lucia, America/St_Thomas, America/St_Vincent, America/Swift_Current, America/Tegucigalpa, America/Thule, America/Thunder_Bay, America/Tijuana, America/Toronto, America/Tortola, America/Vancouver, America/Whitehorse, America/Winnipeg, America/Yakutat, America/Yellowknife, Antarctica/Casey, Antarctica/Davis, Antarctica/DumontDUrville, Antarctica/Macquarie, Antarctica/Mawson, Antarctica/McMurdo, Antarctica/Palmer, Antarctica/Rothera, Antarctica/Syowa, Antarctica/Troll, Antarctica/Vostok, Arctic/Longyearbyen, Asia/Aden, Asia/Almaty, Asia/Amman, Asia/Anadyr, Asia/Aqtau, Asia/Aqtobe, Asia/Ashgabat, Asia/Atyrau, Asia/Baghdad, Asia/Bahrain, Asia/Baku, Asia/Bangkok, Asia/Barnaul, Asia/Beirut, Asia/Bishkek, Asia/Brunei, Asia/Chita, Asia/Choibalsan, Asia/Colombo, Asia/Damascus, Asia/Dhaka, Asia/Dili, Asia/Dubai, Asia/Dushanbe, Asia/Famagusta, Asia/Gaza, Asia/Hebron, Asia/Ho_Chi_Minh, Asia/Hong_Kong, Asia/Hovd, Asia/Irkutsk, Asia/Istanbul, Asia/Jakarta, Asia/Jayapura, Asia/Jerusalem, Asia/Kabul, Asia/Kamchatka, Asia/Karachi, Asia/Kathmandu, Asia/Khandyga, Asia/Kolkata, Asia/Krasnoyarsk, Asia/Kuala_Lumpur, Asia/Kuching, Asia/Kuwait, Asia/Macau, Asia/Magadan, Asia/Makassar, Asia/Manila, Asia/Muscat, Asia/Nicosia, Asia/Novokuznetsk, Asia/Novosibirsk, Asia/Omsk, Asia/Oral, Asia/Phnom_Penh, Asia/Pontianak, Asia/Pyongyang, Asia/Qatar, Asia/Qostanay, Asia/Qyzylorda, Asia/Riyadh, Asia/Sakhalin, Asia/Samarkand, Asia/Seoul, Asia/Shanghai, Asia/Singapore, Asia/Srednekolymsk, Asia/Taipei, Asia/Tashkent, Asia/Tbilisi, Asia/Tehran, Asia/Thimphu, Asia/Tokyo, Asia/Tomsk, Asia/Ulaanbaatar, Asia/Urumqi, Asia/Ust-Nera, Asia/Vientiane, Asia/Vladivostok, Asia/Yakutsk, Asia/Yangon, Asia/Yekaterinburg, Asia/Yerevan, Atlantic/Azores, Atlantic/Bermuda, Atlantic/Canary, Atlantic/Cape_Verde, Atlantic/Faroe, Atlantic/Madeira, Atlantic/Reykjavik, Atlantic/South_Georgia, Atlantic/St_Helena, Atlantic/Stanley, Australia/Adelaide, Australia/Brisbane, Australia/Broken_Hill, Australia/Darwin, Australia/Eucla, Australia/Hobart, Australia/Lindeman, Australia/Lord_Howe, Australia/Melbourne, Australia/Perth, Australia/Sydney, Europe/Amsterdam, Europe/Andorra, Europe/Astrakhan, Europe/Athens, Europe/Belgrade, Europe/Berlin, Europe/Bratislava, Europe/Brussels, Europe/Bucharest, Europe/Budapest, Europe/Busingen, Europe/Chisinau, Europe/Copenhagen, Europe/Dublin, Europe/Gibraltar, Europe/Guernsey, Europe/Helsinki, Europe/Isle_of_Man, Europe/Istanbul, Europe/Jersey, Europe/Kaliningrad, Europe/Kiev, Europe/Kirov, Europe/Lisbon, Europe/Ljubljana, Europe/London, Europe/Luxembourg, Europe/Madrid, Europe/Malta, Europe/Mariehamn, Europe/Minsk, Europe/Monaco, Europe/Moscow, Europe/Nicosia, Europe/Oslo, Europe/Paris, Europe/Podgorica, Europe/Prague, Europe/Riga, Europe/Rome, Europe/Samara, Europe/San_Marino, Europe/Sarajevo, Europe/Saratov, Europe/Simferopol, Europe/Skopje, Europe/Sofia, Europe/Stockholm, Europe/Tallinn, Europe/Tirane, Europe/Ulyanovsk, Europe/Uzhgorod, Europe/Vaduz, Europe/Vatican, Europe/Vienna, Europe/Vilnius, Europe/Volgograd, Europe/Warsaw, Europe/Zagreb, Europe/Zaporozhye, Europe/Zurich, Indian/Antananarivo, Indian/Chagos, Indian/Christmas, Indian/Cocos, Indian/Comoro, Indian/Kerguelen, Indian/Mahe, Indian/Maldives, Indian/Mauritius, Indian/Mayotte, Indian/Reunion, Pacific/Apia, Pacific/Auckland, Pacific/Bougainville, Pacific/Chatham, Pacific/Chuuk, Pacific/Easter, Pacific/Efate, Pacific/Enderbury, Pacific/Fakaofo, Pacific/Fiji, Pacific/Funafuti, Pacific/Galapagos, Pacific/Gambier, Pacific/Guadalcanal, Pacific/Guam, Pacific/Honolulu, Pacific/Kiritimati, Pacific/Kosrae, Pacific/Kwajalein, Pacific/Majuro, Pacific/Marquesas, Pacific/Midway, Pacific/Nauru, Pacific/Niue, Pacific/Norfolk, Pacific/Noumea, Pacific/Pago_Pago, Pacific/Palau, Pacific/Pitcairn, Pacific/Pohnpei, Pacific/Port_Moresby, Pacific/Rarotonga, Pacific/Saipan, Pacific/Tahiti, Pacific/Tarawa, Pacific/Tongatapu, Pacific/Wake, Pacific/Wallis
  • Data type: string select
  • Default: UTC
  • Configuration
  • Required

CLI: (cli)> config system time timezone

NTP client

Synchronize the system's time with NTP servers.

Properties

Enable

Enable synchronization with NTP servers.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system time ntp enable

Servers

The servers used for synchronization.

NTP server

The NTP server used for time synchronization.

Properties

Address

The network address of the NTP server.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system time ntp server <index> address

Authentication key index

  • Data type: integer
  • Configuration
  • Optional

CLI: (cli)> config system time ntp server <index> auth-key-idx

Server pool

Server address is a pool of servers.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config system time ntp server <index> pool

Protocol version

OptionLabel
3NTPv3
4NTPv4
  • Data type: string select
  • Default: 4
  • Configuration
  • Required

CLI: (cli)> config system time ntp server <index> version

Authentication keys

The symmetric keys used for NTP authentication.

Authentication Key

The symmetric authentication key.

Properties

Key

The key value.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system time ntp auth-key <index> key

Key format

The format used to interpret the key.

OptionLabelDescription
asciiASCII StringAn ascii string containing the shared secret.
hexHEX StringA HEX encoded value containing the shared secret.
  • Data type: string select
  • Default: ascii
  • Configuration
  • Required

CLI: (cli)> config system time ntp auth-key <index> key-format

Type

The kind of key provided.

OptionLabelDescription
md5MD5MD5 hash (128 bits)
sha1SHA1SHA1 hash (160 bits)
sha256SHA256SHA256 hash (256 bits)
sha384SHA384SHA384 hash (384 bits)
sha512SHA512SHA512 hash (512 bits)
  • Data type: string select
  • Default: sha1
  • Configuration
  • Required

CLI: (cli)> config system time ntp auth-key <index> key-type

Key index

The key index is shared with the NTP server.

The key index and the key provide all the information required for authentications with the NTP server.

  • Data type: integer
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config system time ntp auth-key <index> key-idx

DNS

Settings for host/domain name resolution.

  • DNS servers - A list of upstream DNS servers that the device will send DNS requests to.
  • Search domains - A list of domains to search when the device resolves hostnames.
  • Hostnames - A list of hostnames and their associated IP address.

DNS servers

A list of upstream DNS servers that the device will send DNS requests to.

DNS server

Properties

Enable

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system dns server <index> enable

DNS server address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system dns server <index> address

Source address

  • Data type: reference path
  • References instances of: Network / ip / Addresses
  • Configuration
  • Optional

CLI: (cli)> config system dns server <index> src

Search domains

A list of domains to search when the device resolves hostnames.

Search domain

Properties

Enable

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config system dns search <index> enable

Domain

FormatDescription
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system dns search <index> domain

Hostnames

A list of hostnames and their associated IP address.

Hostname

Properties

Hostname

FormatDescription
HostnameA hostname containing letters, digits, and hyphens (-). The hostname must start and end with a letter or digit.
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system dns hostname <index> hostname

Address

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system dns hostname <index> address

Notification

The available channel for system notifications and alerts.

Email (SMTP)

Send email using the SMTP protocol.

Commands

Properties

Enable

Enable the email sender.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config system notification email enable

SMTP Server

The SMTP server that will receive the email.

  • Data type: string
  • Default: smtp.example.com
  • Configuration
  • Required

CLI: (cli)> config system notification email server

SMTP Port

The SMTP port the server is listening on.

  • Data type: integer
  • Default: 587
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config system notification email port

SMTP Connection Protocol

The protocol required to connect to the SMTP server.

OptionLabelDescription
unencryptedUnencryptedPlain text SMTP with no encryption.
starttlsStartTLSStart the connection using TLS and fallback to unencrypted if that fails.
tlsTLS OnlyRequire the connection to use TLS encryption.
  • Data type: string select
  • Default: starttls
  • Configuration
  • Required

CLI: (cli)> config system notification email protocol

Sender Address

The email address messages will be sent from.

  • Data type: string
  • Default: user@example.com
  • Configuration
  • Required

CLI: (cli)> config system notification email sender

Username

The username required to authenticate the connection.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system notification email username

Password

The password required to authenticate the connection.

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system notification email password

Send Test email

Send a test email immediately.

It is advisable to send a test email to confirm the configuration of SMTP.

Command parameters

Properties

Address

The recipient for the test email.

  • Data type: string
  • Default: address@example.com
  • Configuration
  • Required

CLI: (cli)> run system notification email test address <value>

SNMP Trap Receivers

The receivers that wish to receive SNMP traps from this device.

New SNMP Trap Receiver items can be added.

SNMP Trap Receiver

The receiver to send SNMP traps to.

  • Trap User - The trap user required by the SNMPv3 receiver.

Properties

Receiver Address

The network address of the receiver.

FormatDescription
Domain nameA domain or subdomain name containing letters, digits, hyphens (-), and periods (.). The domain name must start and end with a letter or digit.
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> address

Receiver Port

The network port the receiver is listening on.

  • Data type: integer
  • Default: 162
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> port

Transport Protocol

The network protocol the receiver is listening for.

OptionLabelDescription
udpUDPSend traps using UDP datagrams.
tcpTCPSend traps using a TCP connection.
  • Data type: string select
  • Default: udp
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> transport-protocol

Internet Protocol

Select the IP protocol the receiver is listening for.

OptionLabelDescription
ipv4IPv4The receiver expects IPv4.
ipv6IPv6The receiver expects IPv6.
  • Data type: string select
  • Default: ipv4
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> internet-protocol

SNMP Version

The SNMP protocol version supported by the receiver.

OptionLabelDescription
3SNMPv3SNMP protocol version 3.
2cSNMPv2cSNMP protocol version 2c.
  • Data type: string select
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> version

Community String

The credentials or 'password' required for the receiver.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> community-string

Engine ID

The Engine ID is required by SNMPv3 receivers.

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> engine-id

Auth Policy

The auth policy required by the SNMPv3 receiver.

OptionLabelDescription
noauthNoAuthNo Authentication or Encryption.
authAuthAuthentication only.
privPrivAuthentication and Encryption.
  • Data type: string select
  • Default: priv
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> auth-policy

Trap User

The trap user required by the SNMPv3 receiver.

Properties

Authentication Protocol

The authentication protocol used by the SNMPD server.

OptionLabelDescription
md5MD5MD5 (128 bit).
shaSHA1SHA1 (160 bit).
sha-224SHA-224SHA (224 bit).
sha-256SHA-256SHA (256 bit).
sha-384SHA-384SHA (384 bit).
sha-512SHA-512SHA (512 bit).
  • Data type: string select
  • Default: sha
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> trap-user auth-protocol

Privacy Protocol

The encryption protol in use for SMP.

OptionLabelDescription
desDESDES (56 Bit)
aesAESAES (128 bit)
aes-192AES-192AES (192 bit)
aes-256AES-256AES (256 bit)
  • Data type: string select
  • Default: aes
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> trap-user privacy-protocol

Username

The username that SNMPv3 clients will use to authenticate with

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> trap-user username

Authentication Passphrase

The passphrase that SNMPv3 clients will use to authenticate with

  • Data type: string
  • Configuration
  • Required

CLI: (cli)> config system notification snmp-trap-receiver <key> trap-user auth-passphrase

Privacy Passphrase

The passphrase that SNMPv3 clients will use to encrypt the connection with.

Leave blank to use the Authentication Passphrase

  • Data type: string
  • Configuration
  • Optional

CLI: (cli)> config system notification snmp-trap-receiver <key> trap-user privacy-passphrase

Advanced settings

Settings for advanced system functionality.

Properties

Shell access

Provides an access resource for a root shell session on the device.

The resource is tagged with Shell and the Administration permission.

  • Data type: boolean
  • Default: false
  • Configuration

CLI: (cli)> config system advanced shell

Gearlinx ZERO

Gearlinx ZERO cloud management status.

Commands

Properties

Enable

Enable ZERO management.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config zero enable

Status

Status of the ZERO connection.

  • Data type: string
  • Status

CLI: (cli)> show zero status

Last synchronized at

Time of last successful synchronization with Gearlinx ZERO.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show zero last-sync-time

Registered

Device is registered with ZERO.

OptionLabel
trueRegistered
falseNot registered
  • Data type: boolean
  • Status

CLI: (cli)> show zero registered

Service URL

The URL for the ZERO service managing this device.

  • Data type: string
  • Default: https://zero.gearlinx.com/api
  • Configuration
  • Required

CLI: (cli)> config zero service-url

Synchronization schedule

Schedule the synchronization with ZERO.

  • Data type: string
  • Default: 0 0 */1 * * *
  • Configuration
  • Required

CLI: (cli)> config zero sync-schedule

Firmware update required

Set when a firmware update is required to match the device's configuration on ZERO.

The firmware update is either in progress, or an error has occurred while downloading or apply the update.

  • Data type: boolean
  • Status

CLI: (cli)> show zero firmware-update-required

Remote access

Provide access to this device via Gearlinx ZERO.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config zero remote-access

Synchronization information

The ZERO management Synchronization status.

Device

Properties

Device label

The label used by ZERO to describe and locate this device.

  • Data type: string
  • Status

CLI: (cli)> show zero info device label

Device tags

The tags used by ZERO to identify this device or its services.

  • Data type: string list
  • Status

CLI: (cli)> show zero info device tags

Organization

Properties

Organization label

The organization label used ZERO for this device.

  • Data type: string
  • Status

CLI: (cli)> show zero info org label

Configuration

Device configuration control settings.

Properties

Configuration method

Select how this devices configuration is managed.

OptionLabelDescription
sharedShared configurationThe device is assigned a shared configuration on Gearlinx ZERO.
individualIndividual configurationThe device is configured on Gearlinx ZERO.
localLocal configurationThe device is not assigned a configuration on Gearlinx ZERO and must be configured locally.
  • Data type: string select
  • Status

CLI: (cli)> show zero info config method

Shared configuration label

The label used to identify this devices shared configuration.

  • Data type: string
  • Status

CLI: (cli)> show zero info config label

Firmware update

Pending firmware update status.

  • Download - The state of the firmware image download.
  • Flash - The state of flashing the firmware image to disk.

Properties

Updating to firmware version

The version of the pending or in progress version.

  • Data type: string
  • Status

CLI: (cli)> show zero firmware version

Download

The state of the firmware image download.

Properties

File ready

Download is successful and complete.

  • Data type: boolean
  • Status

CLI: (cli)> show zero firmware download ready

Status

Current download status.

  • Data type: string
  • Status

CLI: (cli)> show zero firmware download status

Download progress

Information showing the download progress.

Properties

Downloaded

The percentage of the download completed.

  • Data type: integer
  • Units: %
  • Minimum: 0
  • Maximum: 100
  • Status

CLI: (cli)> show zero firmware download progress percent

Elapsed time

The elapse time since the download started.

  • Data type: integer
  • Units: seconds
  • Minimum: 0
  • Status

CLI: (cli)> show zero firmware download progress time-elapsed

Estimated time remaining

The estimated time until the download completes.

  • Data type: integer
  • Units: seconds
  • Minimum: 0
  • Status

CLI: (cli)> show zero firmware download progress time-remaining

Downloaded size

The number of bytes downloads so far.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show zero firmware download progress downloaded-size

File size

The full size of the download in progress.

  • Data type: integer
  • Units: bytes
  • Minimum: 0
  • Status

CLI: (cli)> show zero firmware download progress file-size

Average speed

The average download speed this download is achieving.

  • Data type: integer
  • Units: bytes/second
  • Minimum: 0
  • Status

CLI: (cli)> show zero firmware download progress average-speed

Flash

The state of flashing the firmware image to disk.

Properties

Status

A description of the firmware update status.

  • Data type: string
  • Status

CLI: (cli)> show zero firmware flash status

Flash progress

The flash update progress.

  • Data type: integer
  • Units: %
  • Minimum: 0
  • Maximum: 100
  • Status

CLI: (cli)> show zero firmware flash progress

Remote access VPN

The VPN connection to ZERO.

  • Tunnel addresses - The IP addresses set on the tunnel interface.
  • Peers - The peers for this VPN tunnel.

Properties

Enable

Enable this tunnel.

  • Data type: boolean
  • Status

CLI: (cli)> show zero vpn enable

Port

The UDP port listening for connections incoming from peers.

  • Data type: integer
  • Default: 61280
  • Minimum: 1
  • Maximum: 65535
  • Configuration
  • Required

CLI: (cli)> config zero vpn port

Label

The label used to describe and locate this wireguard tunnel.

  • Data type: string
  • Default: Gearlinx ZERO remote access
  • Configuration
  • Optional

CLI: (cli)> config zero vpn label

Private key

Leave empty to have the device generate a private key.

  • Data type: string
  • Status

CLI: (cli)> show zero vpn private-key

Public key

Add this device's public key to the peer.

  • Data type: string
  • Status

CLI: (cli)> show zero vpn public-key

Tunnel addresses

The IP addresses set on the tunnel interface.

Tunnel address

An address to set on the tunnel interface.

Properties

Address

The IP address in standard notation.

FormatDescription
IPv4 host addressAn IPv4 host address in dotted-quad notation.
IPv6 host addressAn IPv6 host address.
  • Data type: string
  • Status

CLI: (cli)> show zero vpn tunnel-address <index> address

Ready

IP address is operational.

  • Data type: boolean
  • Status

CLI: (cli)> show zero vpn tunnel-address <index> ready

Peers

The peers for this VPN tunnel.

Peer

A wireguard tunnel peer.

  • Routes - Network routes to the peer over the tunnel.

Properties

Enable

Enable connection to this peer.

  • Data type: boolean
  • Status

CLI: (cli)> show zero vpn peer <index> enable

Public key

The peer's public key.

  • Data type: string
  • Status

CLI: (cli)> show zero vpn peer <index> public-key

Pre-shared key

The pre-shared key or secret required for this VPN connection.

  • Data type: string
  • Status

CLI: (cli)> show zero vpn peer <index> pre-shared-key

Address

The IP address or hostname of the peer for initiating an outgoing connections.

  • Data type: string
  • Status

CLI: (cli)> show zero vpn peer <index> initiate-address

Port

The port number of the peer's Wireguard endpoint for initiating an outgoing connections.

  • Data type: integer
  • Minimum: 0
  • Status

CLI: (cli)> show zero vpn peer <index> initiate-port

Connected address

The remote IP address of the current connection to the peer.

  • Data type: string
  • Status

CLI: (cli)> show zero vpn peer <index> connected-address

Connected port

The remote port number of current connection to the peer.

  • Data type: integer
  • Minimum: 0
  • Status

CLI: (cli)> show zero vpn peer <index> connected-port

Last handshake at

The handshake process occur every 2 minutes.

  • Data type: integer
  • Units: seconds since epoch
  • Status

CLI: (cli)> show zero vpn peer <index> handshake-timestamp

Persistent keepalive interval

Send a keepalive packet at a regular interval to keep the connection alive through stateful firewalls.

  • Data type: integer
  • Units: seconds
  • Minimum: 1
  • Status

CLI: (cli)> show zero vpn peer <index> keepalive-interval

Routes

Network routes to the peer over the tunnel.

Route

A route to a destination reachable through this VPN.

Properties

Destination

The destination host or network that is the files destination for this route.

FormatDescription
IPv4 networkAn IPv4 network address and prefix length.
IPv6 networkAn IPv6 network address and prefix length.
  • Data type: string
  • Status

CLI: (cli)> show zero vpn peer <index> route <index> dst

Metric

The network metric assigned to routes associated with this connection.

  • Data type: integer
  • Minimum: 0
  • Status

CLI: (cli)> show zero vpn peer <index> route <index> metric

Synchronize

Synchronize with ZERO now.

The command takes no parameters.