Talk:ADSL2MUE
Oficial firmware includes a comand line interface that allows for a few more modes of operation. The standard web based GUI allows you to configure RFC2684 bridged mode with LLC or VC encapsulation only, but the CLI allows you to configure RFC2684 routed mode also. I got into the CLI through the console and after enabling privileges (CLI enable password matches web password) you can configure the WAN interface as statically managed and set RFC2684 routed as the interface type. Keep in mind that this hidden feature allows you to use this piece of hardware as a router connected to a routed mode RFC2684 ATM/DSL connection. Still work needs to be done on OpenWrt AR7 port to let this hardware become the modem it claims to be.'
Can somebody plz explain me how to do that ?
Contents |
access to Linux interface
Taken from www.linksysinfo.org (search the "other Linksys devices" forum for iptables to find this posting).
1) open an SSH connection to the device and login with 'root' and whatever password you've set for admin account.
2) use the "shell" command and you'll be dropped to a standard unix shell.
3) use the "iptables" command to setup the port forwarding you want.
For example, if you want all incoming traffic to be redirected to the address 192.168.1.2, except for HTTP traffic that should be redirected to 192.168.1.3:
iptables -D FORWARD -i ppp0 -j DROP
iptables -t nat -I PREROUTING -i ppp0 -j DNAT --to-destination 192.168.1.2
iptables -t nat -I PREROUTING -i ppp0 -p tcp --dport 80 -j DNAT --to-destination 192.168.1.3
The only problem with this approach is that your rules will be lost upon system reset (or after a power failure). But it works well if you don't turn it off.
access to Command Line Interface
To keep settings, you can use the CLI (command line interface)
Given that adsl2mue modem internal IP address is 192.168.1.254:
user@linux~$ ssh 192.168.1.254 -l root
root@192.168.1.254's password:
DSL Modem CLI
Copyright (c) 2004 Texas Instruments, Inc.
cli> enable
Password: **********
New priv level = 5
cli#
typing '?' list available options
You can configure nat table to redirect HTTP traffic to 192.168.1.3:8080 as it is done above with iptables by typing the following commands:
cli# wan
cli(wan)# connection 1
cli(wan connection1)# port forward rule-add name http protocol tcp src-ip 0.0.0.0 src-netmask 0.0.0.0 dst-ip 192.168.1.3 dst-netmask 255.255.255.0 port-start 80 port-end 80 port-map 8080
cli(wan connection1)# apply
cli(wan connection1)# show port-forward
Port Forward Rule List
Name Src IP Dest IP Start Protocol
Src Mask Dest Mask Stop
Map
--------------------------------------------------------------------
01: http 0.0.0.0 192.168.1.1 80 TCP
Enabled 0.0.0.0 255.255.255.0 80
8080
Now, you can save your changes:
cli(wan connection1)# save
enjoy ! ...
common menu options:
apply Apply the current changes to the running system. Does not save the settings to flash disable Set privilege level to zero discard Discards any pending changes to the system enable Change privilege level exit Quit the CLI help CLI usage help logoff Quit the CLI quit Quit the CLI reboot Reboots the system. save Saves any applied changes to flash. show Show current information
menu tree:
advanced Modify settings in the advanced menu
router Configure router parameters
rip Configure RIP Protocol
authentication Modify the RIP authentication settings
disable Disable RIP Authentication
enable Enable RIP Authentication
disable Disable RIP
enable Enable RIP
protocol Specify RIP Protocol version support
ripv1 RIP version 1
ripv1compatible RIP version 1 Compatible
ripv2 RIP Protocol 2
snmp Setup SNMP parameters
agent Enable/Disable SNMP agent
disable Disable SNMP
enable Enable SNMP
community Configure SMNP community parameters
clear Clear a community name entry
all Clear all community name entries
1-3 Clear this specific community name entry
set Set a SNMP community information
1-3 SNMP community entry to change
name Specify a SNMP community name entry
WORD Community Name
system Configure SNMP name, location, and contact info
contact Specify contact information for the modem
STRING Contact Info
location Specify physical location of the modem
STRING Physical Location
name Specify administratively assigned name for the modem
STRING Administratively Assigned Name
traps Configure SMNP trap parameters
clear Clear a trap entry
all Clear all trap entries
1-3 Clear this specific trap entry
disable Disable traps
enable Enable traps
set Set a SNMP trap entry
1-3 SNMP trap entry to change
HOSTADDR Trap destination
sntp Setup SNTP parameters
daylight Setting Daylight feature
disable Disable SNTP
enable Enable SNTP
polling-interval Set the SNTP polling interval
0-30 Polling interval (min)
retries Set the number of SNTP retries
0-5 Number of retries
server Set SNTP servers
primary Assign a primary server
timeout Set the timeout value
0-30 Timeout (sec)
timezone Set timezone
GMTN0100 (GMT-01:00) Cape Vade
GMTN0200 (GMT-02:00) Mid-Atlantic
GMTN0300 (GMT-03:00) Brasilia, Beunon Aires, Greenland
GMTN0400 (GMT-04:00) Atlantic Time (US, Canada)
GMTN0500 (GMT-05:00) Eastern Time (US, Canada)
GMTN0600 (GMT-06:00) Central America, Central Time (US, Canada)
GMTN0700 (GMT-07:00) Arizona, Mountain Time (US, Canada)
GMTN0800 (GMT-08:00) Pacific Time (US, Canada), Tijuana
GMTN0900 (GMT-09:00) Alaska
GMTN1000 (GMT-10:00) Hawaii
GMTN1100 (GMT-11:00) Midway Island
GMTN1200 (GMT-12:00) International Date Line West
GMTP0100 (GMT+01:00) Amsterdam, Berlin, Rome, Stockholm, Vienna, Paris
GMTP0200 (GMT+02:00) Athens, Istanbul, Cairo, Harare, Jerusalem
GMTP0300 (GMT+03:00) Baghdad, Kuwait, Riyadh, Moscow
GMTP0400 (GMT+04:00) Muscat
GMTP0500 (GMT+05:00) Islamabad, Karachi
GMTP0530 (GMT+05:30) Chennai, Kolkota, Mumbai, New Delhi
GMTP0600 (GMT+06:00) Dhaka
GMTP0700 (GMT+07:00) Bangkok, Hanoi, Jakartha
GMTP0800 (GMT+08:00) Beijing, Kong Kong
GMTP0900 (GMT+09:00) Tokyo, Seoul
GMTP1000 (GMT+10:00) Brisbane, Sydney
GMTP1100 (GMT+11:00) Magadan, Solomon Islands
GMTP1200 (GMT+12:00) Auckland, Wellington, Fiji
lan Modify settings in the Lan menu
lan-group Enter lan group configuration menu
1-8 lan group number
access-list Configures Access Control List
disable Disable Access Control List
enable Enable Access Control List
ip Add IP Address to ACL
add Add IP Address to Access Control List
HOSTADDR IP Address
clear Deletes all IP Addresses on the ACL
del Delete IP Address from Access Control List
0-15 Associated Index Number for ACL
service Services Enabled/Disabled for ACL on LAN
ftp Enable/Disable ftp protocol
snmp Enable/Disable snmp protocol
ssh Enable/Disable ssh protocol
telnet Enable/Disable telnet protocol
tftp Enable/Disable tftp protocol
web Enable/Disable web protocol
bridge Bridge with filtering mechanism
filter Rules to allow/deny frames thrugh bridge
clear Flush Bridge Filter Rules
disable Disable Bridge Filtering Mechanism
enable Enable Bridge Filtering Mechanism
management-port Management Port
rule Bridge Filter Rule
add Add Bridge Filter Rule
mode Bridge Filter Mode
allow Allow frames matching rule
src-mac Source MAC Address
STRING Source MAC Address
deny Deny frames matching rule
del Delete Bridge Filter Rule
dhcp Dhcp configuration commands
client-dynamic Configure dynamic LAN clients
reserve Reserve dynamic DHCP address for LAN client
STRING Enter index number of dynamic LAN client (use 'show dhcp_dynamic' for list)
client-static Configure static LAN clients
add Add static LAN clients
HOSTADDR Enter static LAN IP address
clear Delete all static LAN clients
del Delete static LAN clients
off Disable DHCP Server/Relay
relay Configure DHCP relay
HOSTADDR Enter DHCP relay IP address
server Enable/Configure DHCP Server/Relay
start follow with starting ip address
HOSTADDR Enter starting DHCP server IP address
domain-name Domain name of the modem
STRING Provide domain name for modem
host-name Host name of the modem
STRING Provide host-name for modem
ip IP
filter Filter Rules
add Add a Filter Rule
clear Flush all Filter Rules
del Delete a Filter Rule
management Modify the management settings
interface Configure Management Interface
A.B.C.D Management IP address
type Modify the management type
dynamic Set this lan group to use dynamic IP settings (DHCP)
static Set this lan group to use static IP settings
unmanaged Set this lan group to be unmanaged
route Configure static routes
static-add Add a static route
static-clear Clear all static routes
static-del Delete a static route entry
port Configure Ethernet port parameters
assign Assign ports to a given lan group
ap Wireless Access Point (AP)
lan1 Assign to LAN group 1
lan2 Assign to LAN group 2
lan3 Assign to LAN group 3
unassigned Remove from all LAN groups
eth0 Ethernet port 0
lan1 Assign to LAN group 1
lan2 Assign to LAN group 2
lan3 Assign to LAN group 3
unassigned Remove from all LAN groups
usb USB port
lan1 Assign to LAN group 1
lan2 Assign to LAN group 2
lan3 Assign to LAN group 3
unassigned Remove from all LAN groups
1-4 Specify port number
product-info Product information
log Set Log Level
shell Go to the system shell
stats List modem stats
connection Connection stats modem Modem stats network Network stats
system Modify settings in the system menu
firewall_nat Enable Firewall and NAT Service
disable Disable
enable Enable
password Change a privilege level's password. (Password changes take place immediatly.)
1 view. User can look at stats and settings. Cannot change any settings.
2 logger. User can look at stats and settings. Can change log settings.
5 admin. User can look and change all settings
WORD new password (if not entered, prompt for password)
voice-nmm Enter the voice NMM command shell
????
wan Modify settings in the Wan menu
access-list Configures Access Control List
disable Disable Access Control List
enable Enable Access Control List
ip Add IP Address to ACL
add Add IP Address to Access Control List
clear Deletes all IP Addresses on the ACL
del Delete IP Address from Access Control List
service Services Enabled/Disabled for ACL on LAN
ftp Enable/Disable ftp protocol
snmp Enable/Disable snmp protocol
ssh Enable/Disable ssh protocol
telnet Enable/Disable telnet protocol
tftp Enable/Disable tftp protocol
web Enable/Disable web protocol
connection Enter connection configuration menu
1-8 connection ID number
atm Set ATM parameters
pvc Set the ATM PVC parameters
0-255 VPI value
0-1023 VCI value
qos Set ATM QoS Parameters
cbr Set QoS CBR class type
0-65534 Peak Cell Rate (cells per second)
cdvt Set Cell delay variance threshold
0-65534 Cell delay variance threshold (usecs)
End of CBR command parameters
ubr Set QoS to UBR
vbr Set QoS VBR class type
0-65534 Peak Cell Rate (cells per second)
cdvt Set Cell delay variance threshold
0-65534 Cell delay variance threshold (usecs)
mbs Set Maximum Burst Size
0-65534 Maximum Burst Size (cells)
scr Set Sustainable Cell Rate
0-65534 Sustainable Cell Rate (cells per second)
End of VBR command parameters
connection Set the basic connection settings
name set the user friendly name for this connection
WORD user friendly name for this connection
type Set the connection type
bridge set this connection to a bridged mode
clip set this connection to use clip
dhcp set this connection to use a dhcp client
off disable this connection
pppoa set this connection to use pppoa
pppoe set this connection to use pppoe
static set this connection to use a statically assigned IP address
dmz Enable/Disable DMZ
client-add Add a LAN IP to DMZ
A.B.C.D Set the LAN IP address
disable Disable DMZ
enable Enable DMZ
firewall Enable/Disable Firewall
disable Disable Firewall
enable Enable Firewall
igmp Enable/Disable IGMP
disable Disable IGMP
enable Enable IGMP
ipqos Enable IP QoS
disable Disable
enable Enable
queue Set Queue Priorities Low + High = 100%
low Set Low Queue Priorities
med Set Medium Queue Priorities
End of the IPQoS parameters
rule-add Add a rule for IP QoS
dst-ip Add a destination IP
dst-netmask Add a destination Netmask
dst-port-end Add end port number
dst-port-start Add start port number
name Specify a name for this rule
phy-port LAN Physical Port Number
priority Set Queue Priority for this rule
protocol Add protocol to rule
src-ip Specify a source IP
src-netmask Add a source Netmask
src-port-end Add end port number
src-port-start Add start port numb
tos Add TOS marking
End of IPQoS add rule parameters
rule-clear Clear all IPQoS rules
rule-del Delete a IPQoS rule
UINT use: show IPQoS rules to get index number
trusted-mode Required keyword
disable Disable
enable Enable
nat Enable/Disable NAT
disable Disable NAT
enable Enable NAT
port Access Port Forward settings
forward Access Port Forward settings
disable Disable Port Forwarding
enable Enable Port Forwarding
rule-add Add a Port Forwarding rule
dst-ip Specify a destination IP
A.B.C.D Destination IP address
dst-netmask Specify a destination Netmask
A.B.C.D Destination Netmask
name Specify a name for this rule
WORD Name for this rule
port-end Specify an end port number
0-65535 Port end number
port-map Specify a port map number (Change src port to a different dest port)
0-65535 Port map number
port-start Specify a start port number
0-65535 Port start number
protocol Specify a protocol to use
any ANY Protocol
tcp TCP Protocol
tcp_udp TCP+UDP Protocol
udp UDP Protocol
src-ip Specify a source IP
A.B.C.D Source IP address. '*' indicates all ip's
src-netmask Specify a source Netmask
A.B.C.D Source Netmask
cr Add the specified Port Forward rule
rule-clear Clear all port forwarding rules
rule-del Delete a port forwarding rule
1-30 entry number. use 'show port-forward' to get index number
ppp Set up a PPP Connection
authentication Specify the PPP Authentication parameters
password Specify a PPP password
WORD PPP Password
type Specify the PPP authentication type
auto PPP Authentication Type: Auto
chap PPP Authentication Type: CHAP
pap PPP Authentication Type: PAP
username Specify a PPP username
Username PPP User name
connection-mode Set the on-demand or keep-alive connection mode
keep-alive Choose keep-alive mode
time Specify a keep-alive time
1-100 Keep alive time (minutes)
on-demand Choose on-demand mode
idle-timeout Specify an idle-timeout
0-60000 Idle time before PPP disconnects (seconds)
debug Choose the debug mode for PPP
disable Disable debug capability
enable Enable debug capability
default-route Select whether PPP sets the default route
disable PPP will not set the default route
enable PPP will set the default route
encapsulation Set encapsulation mode for PPP
llc Set LLC encapsulation
vc Set VC MUX encapsulation
mtu Set MTU size for PPP
128-1500 MTU (Bytes)
route Configure static routes
static-add Add a static route
A.B.C.D Destination IP address
static-clear Clear all static routes
static-del Delete a static route entry
1-30 entry number. use 'show static routes' to get index number
show Show current configuration
all Show all subcontexts
atm Show the atm settings
connection Show the basic connection settings
dns Show the Static DNS entries
ip-qos Show IP QoS configuration
port-forward Show the port forwarding rules
ppp Show the PPP connection settings
route Show route information
voice-config Show Voice configuration
upnp Enable/Disable UPNP
disable Disable UPNP
enable Enable UPNP
voice Enable Voice
disable Disable
enable Enable
modem Modem test
test Required keyword
0-255 VPI value
0-1023 VCI value
f4end F4 flows End to End
f4seg F4 flows Segment
f5end F5 flows End to End
f5seg F5 flows Segment
modulation Set the DSL modulation
gdmt Modulation Type = GDMT
glite Modulation Type = GLITE
mmode Modulation Type = Multi-Mode
t1413 Modulation Type = T1413
cr Accept the modulation type
Firmware with extra feature set
It seems as though someone has found a firmware numbered 2.17 TI, possibly from the Australian market.
The original thread appeared on the Official eMule-Board which can be found here: http://forum.emule-project.net/index.php?showtopic=93984&hl=adsl2mue
The firmware including screenshots can be found here: http://www.esnips.com/web/ADSL2MUE"
(note this link is NOT conected to myself in any way).
THIS FIRMWARE MAYBE BETA/ALPHA SO USE IT AT YOUR OWN RISK!!
The screenshots show a whole set of features that can be editied.
It seems as though this firmware opens up the 'router' element of this modem allowing users to use it far beyond what it was originally intended to be able to do.
alternative implementation
cli> shell
BusyBox v0.61.pre (2005.03.22-06:57+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands.
- iptables -D FORWARD -i ppp0 -j DROP
iptables: Bad rule (does a matching rule exist in that chain?)
- iptables -t nat -I PREROUTING -i ppp0 -j DNAT --to-destination 192.168.1.6
- iptables -L -t nat
Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT all -- anywhere anywhere to:192.168.1.6 DNAT tcp -- anywhere anywhere tcp dpt:ftp to:192.168.1.6:21 DNAT tcp -- anywhere anywhere tcp dpt:443 to:192.168.1.6:443 DNAT tcp -- anywhere anywhere tcp dpt:www to:192.168.1.6:80 DNAT all -- anywhere anywhere to:192.168.1.6
Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT) target prot opt source destination
suggested config rule rejected?
cli# wan cli(wan)# connection 1 cli(wan connection1)# <e http protocol tcp src-ip 0.0.0.0 src-netmask 0.0.0.0 dst-ip 192.168.1.6 dst-netmask 255.255.255.0 port-start 80 port-end 80 port-map 8080 cli(wan connection1)# apply Apply failed. All sets discarded % Apply Error. Changes rejected cli(wan connection1)# show port-forward Port Forward Rule List
Name Src IP Dest IP Start Protocol
Src Mask Dest Mask Stop
Map
01: http 0.0.0.0 192.168.1.6 80 TCP
Enabled 0.0.0.0 255.255.255.0 80
8080
cli(wan connection1)# save cli(wan connection1)#
password for enable doesn't match ssh login or web login...
cli(system)> enable 5 Password: ************ % Incorrect password cli(system)> enable Password: ***** % Incorrect password cli(system)>
^ My password for enable doesn't match ssh login or web login. hmm... Jago25 98 16:54, 21 November 2008 (UTC)jago25_98
- I have the same problem --Anttil 17:38, 12 June 2009 (UTC)
Password for 'enable' is different one then web or ssh login , to access level 5 need to use password: Admin
--serzhant 11:00, 24 June 2009 (UTC)
