Talk:ADSL2MUE

From LinuxMIPS
Jump to: navigation, search

Oficial firmware includes a comand line interface that allows for a few more modes of operation. The standard web based GUI allows you to configure RFC2684 bridged mode with LLC or VC encapsulation only, but the CLI allows you to configure RFC2684 routed mode also. I got into the CLI through the console and after enabling privileges (CLI enable password matches web password) you can configure the WAN interface as statically managed and set RFC2684 routed as the interface type. Keep in mind that this hidden feature allows you to use this piece of hardware as a router connected to a routed mode RFC2684 ATM/DSL connection. Still work needs to be done on OpenWrt AR7 port to let this hardware become the modem it claims to be.'

Can somebody plz explain me how to do that ?

access to Linux interface

Taken from www.linksysinfo.org (search the "other Linksys devices" forum for iptables to find this posting).

1) open an SSH connection to the device and login with 'root' and whatever password you've set for admin account.
2) use the "shell" command and you'll be dropped to a standard unix shell.

3) use the "iptables" command to setup the port forwarding you want.

For example, if you want all incoming traffic to be redirected to the address 192.168.1.2, except for HTTP traffic that should be redirected to 192.168.1.3:

iptables -D FORWARD -i ppp0 -j DROP
iptables -t nat -I PREROUTING -i ppp0 -j DNAT --to-destination 192.168.1.2
iptables -t nat -I PREROUTING -i ppp0 -p tcp --dport 80 -j DNAT --to-destination 192.168.1.3


The only problem with this approach is that your rules will be lost upon system reset (or after a power failure). But it works well if you don't turn it off.


access to Command Line Interface

To keep settings, you can use the CLI (command line interface)

Given that adsl2mue modem internal IP address is 192.168.1.254:

user@linux~$ ssh 192.168.1.254 -l root
root@192.168.1.254's password:
DSL Modem CLI
Copyright (c) 2004 Texas Instruments, Inc.
cli> enable
Password: **********
New priv level = 5
cli#

typing '?' list available options

You can configure nat table to redirect HTTP traffic to 192.168.1.3:8080 as it is done above with iptables by typing the following commands:
cli# wan
cli(wan)# connection 1
cli(wan connection1)# port forward rule-add name http protocol tcp src-ip 0.0.0.0 src-netmask 0.0.0.0 dst-ip 192.168.1.3 dst-netmask 255.255.255.0 port-start 80 port-end 80 port-map 8080
cli(wan connection1)# apply
cli(wan connection1)# show port-forward
Port Forward Rule List

          Name         Src IP           Dest IP          Start    Protocol
                       Src Mask         Dest Mask        Stop
                                                         Map
      --------------------------------------------------------------------
      01: http         0.0.0.0          192.168.1.1      80       TCP
          Enabled      0.0.0.0          255.255.255.0    80
                                                         8080


Now, you can save your changes:
cli(wan connection1)# save

enjoy ! ...


common menu options:

apply         Apply the current changes to the running system. Does not save the settings to flash
disable       Set privilege level to zero
discard       Discards any pending changes to the system
enable        Change privilege level
exit          Quit the CLI
help          CLI usage help
logoff        Quit the CLI
quit          Quit the CLI
reboot        Reboots the system.
save          Saves any applied changes to flash.
show          Show current information


menu tree:

advanced Modify settings in the advanced menu

 router   Configure router parameters
       rip  Configure RIP Protocol
               authentication  Modify the RIP authentication settings
                       disable  Disable RIP Authentication
                       enable   Enable RIP Authentication
               disable         Disable RIP
               enable          Enable RIP
               protocol        Specify RIP Protocol version support
                       ripv1            RIP version 1
                       ripv1compatible  RIP version 1 Compatible
                       ripv2            RIP Protocol 2
 snmp     Setup SNMP parameters
       agent      Enable/Disable SNMP agent
               disable  Disable SNMP
               enable   Enable SNMP
       community  Configure SMNP community parameters
               clear  Clear a community name entry
                       all    Clear all community name entries
                       1-3  Clear this specific community name entry
               set    Set a SNMP community information
                       1-3  SNMP community entry to change
                               name  Specify a SNMP community name entry
                                       WORD  Community Name
       system     Configure SNMP name, location, and contact info
               contact   Specify contact information for the modem
                       STRING  Contact Info
               location  Specify physical location of the modem
                       STRING  Physical Location
               name      Specify administratively assigned name for the modem
                       STRING  Administratively Assigned Name
       traps      Configure SMNP trap parameters
               clear    Clear a trap entry
                       all    Clear all trap entries
                       1-3  Clear this specific trap entry
               disable  Disable traps
               enable   Enable traps
               set      Set a SNMP trap entry
                       1-3  SNMP trap entry to change
                               HOSTADDR  Trap destination
 sntp     Setup SNTP parameters
       daylight          Setting Daylight feature
       disable           Disable SNTP
       enable            Enable SNTP
       polling-interval  Set the SNTP polling interval
               0-30  Polling interval (min)
       retries           Set the number of SNTP retries
               0-5  Number of retries
       server            Set SNTP servers
               primary  Assign a primary server
       timeout           Set the timeout value
               0-30  Timeout (sec)
       timezone          Set timezone
               GMTN0100  (GMT-01:00) Cape Vade
               GMTN0200  (GMT-02:00) Mid-Atlantic
               GMTN0300  (GMT-03:00) Brasilia, Beunon Aires, Greenland
               GMTN0400  (GMT-04:00) Atlantic Time (US, Canada)
               GMTN0500  (GMT-05:00) Eastern Time (US, Canada)
               GMTN0600  (GMT-06:00) Central America, Central Time (US, Canada)
               GMTN0700  (GMT-07:00) Arizona, Mountain Time (US, Canada)
               GMTN0800  (GMT-08:00) Pacific Time (US, Canada), Tijuana
               GMTN0900  (GMT-09:00) Alaska
               GMTN1000  (GMT-10:00) Hawaii
               GMTN1100  (GMT-11:00) Midway Island
               GMTN1200  (GMT-12:00) International Date Line West
               GMTP0100  (GMT+01:00) Amsterdam, Berlin, Rome, Stockholm, Vienna, Paris
               GMTP0200  (GMT+02:00) Athens, Istanbul, Cairo, Harare, Jerusalem
               GMTP0300  (GMT+03:00) Baghdad, Kuwait, Riyadh, Moscow
               GMTP0400  (GMT+04:00) Muscat
               GMTP0500  (GMT+05:00) Islamabad, Karachi
               GMTP0530  (GMT+05:30) Chennai, Kolkota, Mumbai, New Delhi
               GMTP0600  (GMT+06:00) Dhaka
               GMTP0700  (GMT+07:00) Bangkok, Hanoi, Jakartha
               GMTP0800  (GMT+08:00) Beijing, Kong Kong
               GMTP0900  (GMT+09:00) Tokyo, Seoul
               GMTP1000  (GMT+10:00) Brisbane, Sydney
               GMTP1100  (GMT+11:00) Magadan, Solomon Islands
               GMTP1200  (GMT+12:00) Auckland, Wellington, Fiji

lan Modify settings in the Lan menu

 lan-group  Enter lan group configuration menu
       1-8  lan group number
               access-list  Configures Access Control List
                       disable  Disable Access Control List
                       enable   Enable Access Control List
                       ip       Add IP Address to ACL
                               add    Add IP Address to Access Control List
                                       HOSTADDR  IP Address
                               clear  Deletes all IP Addresses on the ACL
                               del    Delete IP Address from Access Control List
                                       0-15  Associated Index Number for ACL
                       service  Services Enabled/Disabled for ACL on LAN
                               ftp     Enable/Disable ftp protocol
                               snmp    Enable/Disable snmp protocol
                               ssh     Enable/Disable ssh protocol
                               telnet  Enable/Disable telnet protocol
                               tftp    Enable/Disable tftp protocol
                               web     Enable/Disable web protocol
               bridge       Bridge with filtering mechanism
                       filter  Rules to allow/deny frames thrugh bridge
                               clear            Flush Bridge Filter Rules
                               disable          Disable Bridge Filtering Mechanism
                               enable           Enable Bridge Filtering Mechanism
                               management-port  Management Port
                               rule             Bridge Filter Rule
                                       add  Add Bridge Filter Rule
                                               mode  Bridge Filter Mode
                                                       allow  Allow frames matching rule
                                                               src-mac  Source MAC Address
                                                                       STRING  Source MAC Address
                                                       deny   Deny frames matching rule
                                       del  Delete Bridge Filter Rule
               dhcp         Dhcp configuration commands
                       client-dynamic  Configure dynamic LAN clients
                               reserve  Reserve dynamic DHCP address for LAN client
                                       STRING  Enter index number of dynamic LAN client (use 'show dhcp_dynamic' for list)
                       client-static   Configure static LAN clients
                               add    Add static LAN clients
                                       HOSTADDR  Enter static LAN IP address
                               clear  Delete all static LAN clients
                               del    Delete static LAN clients
                       off             Disable DHCP Server/Relay
                       relay           Configure DHCP relay
                               HOSTADDR  Enter DHCP relay IP address
                       server          Enable/Configure DHCP Server/Relay
                               start  follow with starting ip address
                                       HOSTADDR  Enter starting DHCP server IP address
               domain-name  Domain name of the modem
                       STRING  Provide domain name for modem
               host-name    Host name of the modem
                       STRING  Provide host-name for modem
               ip           IP
                       filter  Filter Rules
                               add    Add a Filter Rule
                               clear  Flush all Filter Rules
                               del    Delete a Filter Rule
               management   Modify the management settings
                       interface  Configure Management Interface
                               A.B.C.D  Management IP address
                       type       Modify the management type
                               dynamic    Set this lan group to use dynamic IP settings (DHCP)
                               static     Set this lan group to use static IP settings
                               unmanaged  Set this lan group to be unmanaged
               route        Configure static routes
                               static-add    Add a static route
                               static-clear  Clear all static routes
                               static-del    Delete a static route entry
 port       Configure Ethernet port parameters
       assign  Assign ports to a given lan group
               ap    Wireless Access Point (AP)
                       lan1        Assign to LAN group 1
                       lan2        Assign to LAN group 2
                       lan3        Assign to LAN group 3
                       unassigned  Remove from all LAN groups
               eth0  Ethernet port 0
                       lan1        Assign to LAN group 1
                       lan2        Assign to LAN group 2
                       lan3        Assign to LAN group 3
                       unassigned  Remove from all LAN groups
               usb   USB port
                       lan1        Assign to LAN group 1
                       lan2        Assign to LAN group 2
                       lan3        Assign to LAN group 3
                       unassigned  Remove from all LAN groups
       1-4   Specify port number

product-info Product information
log Set Log Level
shell Go to the system shell
stats List modem stats

 connection  Connection stats
 modem       Modem stats
 network     Network stats

system Modify settings in the system menu

 firewall_nat  Enable Firewall and NAT Service
       disable  Disable
       enable   Enable
 password      Change a privilege level's password. (Password changes take place immediatly.)
       1     view.    User can look at stats and settings. Cannot change any settings.
       2     logger.  User can look at stats and settings. Can change log settings.
       5     admin.   User can look and change all settings
       WORD  new password (if not entered, prompt for password)

voice-nmm Enter the voice NMM command shell

 ????

wan Modify settings in the Wan menu

 access-list  Configures Access Control List
       disable  Disable Access Control List
       enable   Enable Access Control List
       ip       Add IP Address to ACL
               add    Add IP Address to Access Control List
               clear  Deletes all IP Addresses on the ACL
               del    Delete IP Address from Access Control List
       service  Services Enabled/Disabled for ACL on LAN
               ftp     Enable/Disable ftp protocol
               snmp    Enable/Disable snmp protocol
               ssh     Enable/Disable ssh protocol
               telnet  Enable/Disable telnet protocol
               tftp    Enable/Disable tftp protocol
               web     Enable/Disable web protocol
 connection   Enter connection configuration menu
       1-8  connection ID number
               atm         Set ATM parameters
                       pvc  Set the ATM PVC parameters
                               0-255  VPI value
                                       0-1023  VCI value
                       qos  Set ATM QoS Parameters
                               cbr  Set QoS CBR class type
                                       0-65534  Peak Cell Rate (cells per second)
                                               cdvt  Set Cell delay variance threshold
                                                       0-65534  Cell delay variance threshold (usecs)
                                               End of CBR command parameters
                               ubr  Set QoS to UBR
                               vbr  Set QoS VBR class type
                                       0-65534  Peak Cell Rate (cells per second)
                                               cdvt  Set Cell delay variance threshold
                                                       0-65534  Cell delay variance threshold (usecs)
                                               mbs   Set Maximum Burst Size
                                                       0-65534  Maximum Burst Size (cells)
                                               scr   Set Sustainable Cell Rate
                                                       0-65534  Sustainable Cell Rate (cells per second)
                                               End of VBR command parameters
               connection  Set the basic connection settings
                       name  set the user friendly name for this connection
                               WORD  user friendly name for this connection
                       type  Set the connection type
                               bridge  set this connection to a bridged mode
                               clip    set this connection to use clip
                               dhcp    set this connection to use a dhcp client
                               off     disable this connection
                               pppoa   set this connection to use pppoa
                               pppoe   set this connection to use pppoe
                               static  set this connection to use a statically assigned IP address
               dmz         Enable/Disable DMZ
                       client-add  Add a LAN IP to DMZ
                               A.B.C.D  Set the LAN IP address
                       disable     Disable DMZ
                       enable      Enable DMZ
               firewall    Enable/Disable Firewall
                       disable  Disable Firewall
                       enable   Enable Firewall
               igmp        Enable/Disable IGMP
                       disable  Disable IGMP
                       enable   Enable IGMP
               ipqos       Enable IP QoS
                       disable       Disable
                       enable        Enable
                       queue         Set Queue Priorities Low + High = 100%
                               low   Set Low Queue Priorities
                               med   Set Medium Queue Priorities
                               End of the IPQoS parameters
                       rule-add      Add a rule for IP QoS
                               dst-ip          Add a destination IP
                               dst-netmask     Add a destination Netmask
                               dst-port-end    Add end port number
                               dst-port-start  Add start port number
                               name            Specify a name for this rule
                               phy-port        LAN Physical Port Number
                               priority        Set Queue Priority for this rule
                               protocol        Add protocol to rule
                               src-ip          Specify a source IP
                               src-netmask     Add a source Netmask
                               src-port-end    Add end port number
                               src-port-start  Add start port numb
                               tos             Add TOS marking
                               End of IPQoS add rule parameters
                       rule-clear    Clear all IPQoS rules
                       rule-del      Delete a IPQoS rule
                               UINT  use: show IPQoS rules to get index number
                       trusted-mode  Required keyword
                               disable  Disable
                               enable   Enable
               nat         Enable/Disable NAT
                       disable  Disable NAT
                       enable   Enable NAT
               port        Access Port Forward settings
                       forward  Access Port Forward settings
                               disable     Disable Port Forwarding
                               enable      Enable Port Forwarding
                               rule-add    Add a Port Forwarding rule
                                       dst-ip       Specify a destination IP
                                               A.B.C.D  Destination IP address
                                       dst-netmask  Specify a destination Netmask
                                               A.B.C.D  Destination Netmask
                                       name         Specify a name for this rule
                                               WORD  Name for this rule
                                       port-end     Specify an end port number
                                               0-65535  Port end number
                                       port-map     Specify a port map number (Change src port to a different dest port)
                                               0-65535  Port map number
                                       port-start   Specify a start port number
                                               0-65535  Port start number
                                       protocol     Specify a protocol to use
                                               any      ANY Protocol
                                               tcp      TCP Protocol
                                               tcp_udp  TCP+UDP Protocol
                                               udp      UDP Protocol
                                       src-ip       Specify a source IP
                                               A.B.C.D  Source IP address. '*' indicates all ip's
                                       src-netmask  Specify a source Netmask
                                               A.B.C.D  Source Netmask
                                       cr         Add the specified Port Forward rule
                               rule-clear  Clear all port forwarding rules
                               rule-del    Delete a port forwarding rule
                                       1-30  entry number. use 'show port-forward' to get index number
               ppp         Set up a PPP Connection
                       authentication   Specify the PPP Authentication parameters
                               password  Specify a PPP password
                                       WORD  PPP Password
                               type      Specify the PPP authentication type
                                       auto  PPP Authentication Type: Auto
                                       chap  PPP Authentication Type: CHAP
                                       pap   PPP Authentication Type: PAP
                               username  Specify a PPP username
                                       Username  PPP User name
                       connection-mode  Set the on-demand or keep-alive connection mode
                               keep-alive  Choose keep-alive mode
                                       time  Specify a keep-alive time
                                               1-100  Keep alive time (minutes)
                               on-demand   Choose on-demand mode
                                       idle-timeout  Specify an idle-timeout
                                               0-60000  Idle time before PPP disconnects (seconds)
                       debug            Choose the debug mode for PPP
                               disable  Disable debug capability
                               enable   Enable debug capability
                       default-route    Select whether PPP sets the default route
                               disable  PPP will not set the default route
                               enable   PPP will set the default route
                       encapsulation    Set encapsulation mode for PPP
                               llc  Set LLC encapsulation
                               vc   Set VC MUX encapsulation
                       mtu              Set MTU size for PPP
                               128-1500  MTU (Bytes)
               route       Configure static routes
                       static-add    Add a static route
                               A.B.C.D  Destination IP address
                       static-clear  Clear all static routes
                       static-del    Delete a static route entry
                               1-30  entry number. use 'show static routes' to get index number
               show        Show current configuration
                       all           Show all subcontexts
                       atm           Show the atm settings
                       connection    Show the basic connection settings
                       dns           Show the Static DNS entries
                       ip-qos        Show IP QoS configuration
                       port-forward  Show the port forwarding rules
                       ppp           Show the PPP connection settings
                       route         Show route information
                       voice-config  Show Voice configuration
               upnp        Enable/Disable UPNP
                       disable  Disable UPNP
                       enable   Enable UPNP
               voice       Enable Voice
                       disable  Disable
                       enable   Enable
 modem        Modem test
       test  Required keyword
               0-255  VPI value
                       0-1023  VCI value
                               f4end  F4 flows End to End
                               f4seg  F4 flows Segment
                               f5end  F5 flows End to End
                               f5seg  F5 flows Segment
 modulation   Set the DSL modulation
       gdmt   Modulation Type = GDMT
       glite  Modulation Type = GLITE
       mmode  Modulation Type = Multi-Mode
       t1413  Modulation Type = T1413
       cr   Accept the modulation type

Firmware with extra feature set

It seems as though someone has found a firmware numbered 2.17 TI, possibly from the Australian market.

The original thread appeared on the Official eMule-Board which can be found here: http://forum.emule-project.net/index.php?showtopic=93984&hl=adsl2mue

The firmware including screenshots can be found here: http://www.esnips.com/web/ADSL2MUE"
(note this link is NOT conected to myself in any way).

THIS FIRMWARE MAYBE BETA/ALPHA SO USE IT AT YOUR OWN RISK!!

The screenshots show a whole set of features that can be editied.

It seems as though this firmware opens up the 'router' element of this modem allowing users to use it far beyond what it was originally intended to be able to do.

alternative implementation

cli> shell

BusyBox v0.61.pre (2005.03.22-06:57+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands.

  1. iptables -D FORWARD -i ppp0 -j DROP

iptables: Bad rule (does a matching rule exist in that chain?)

  1. iptables -t nat -I PREROUTING -i ppp0 -j DNAT --to-destination 192.168.1.6
  2. iptables -L -t nat

Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT all -- anywhere anywhere to:192.168.1.6 DNAT tcp -- anywhere anywhere tcp dpt:ftp to:192.168.1.6:21 DNAT tcp -- anywhere anywhere tcp dpt:443 to:192.168.1.6:443 DNAT tcp -- anywhere anywhere tcp dpt:www to:192.168.1.6:80 DNAT all -- anywhere anywhere to:192.168.1.6

Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT) target prot opt source destination

suggested config rule rejected?

cli# wan cli(wan)# connection 1 cli(wan connection1)# <e http protocol tcp src-ip 0.0.0.0 src-netmask 0.0.0.0 dst-ip 192.168.1.6 dst-netmask 255.255.255.0 port-start 80 port-end 80 port-map 8080 cli(wan connection1)# apply Apply failed. All sets discarded % Apply Error. Changes rejected cli(wan connection1)# show port-forward Port Forward Rule List

     Name         Src IP           Dest IP          Start    Protocol  
                  Src Mask         Dest Mask        Stop               
                                                    Map                

 01: http         0.0.0.0          192.168.1.6      80       TCP       
     Enabled      0.0.0.0          255.255.255.0    80                 
                                                    8080               

cli(wan connection1)# save cli(wan connection1)#

password for enable doesn't match ssh login or web login...

cli(system)> enable 5 Password: ************ % Incorrect password cli(system)> enable Password: ***** % Incorrect password cli(system)>

^ My password for enable doesn't match ssh login or web login. hmm... Jago25 98 16:54, 21 November 2008 (UTC)jago25_98

I have the same problem --Anttil 17:38, 12 June 2009 (UTC)

Password for 'enable' is different one then web or ssh login , to access level 5 need to use password: Admin

--serzhant 11:00, 24 June 2009 (UTC)