Die Telnet Befehle erschliessen beim 2100er ganz neue Horizonte.

Doch auch hier das Ganze geschieht natürlich auf eigene Gefahr.

Am Anfang mittels "Start" > "Ausführen"

links stehenden Befehl eingeben natürlich mit der IP Adresse deines APs

D-Link Corp. Access Point login: admin
Password: ******

Benützer "admin" und Passwort "123456" eingeben:

Interessante Hiden Telnet Befehle

Mit der Firmware 2.01eu (DWL2100AP-firmware-v201eu-r137.tfp) kann man eine AES-verschlüsselte PtP-Bridge aufbauen, funktioniert meiner Erkenntnisse nur mit dieser Firmware-Version. Der Bridge-Link ist absolut stabil, keine Aufhänger, Abstürze etc. Hier nun eine kurze Beschreibung zur Einrichtung mit Telnet (das WEB-Interface nervt nur und kastriert die Einstell-Möglichkeiten); die Beschreibung geht von Werkseinstellungen mit der Firmware 2.01eu aus.

1. ApModus: PtP-Bridge

set apmode p2p
set wdsacl xx:xx:xx:xx:xx:xx <- MAC-Adr. des anderen AP

2. MAC-Adressfilter: keine MAC-Adresse darf sich connecten

set acl strict

3. Filter: keine Kommunikation zwischen WLAN-Cients/Ethernet:

set sta2sta disable
set eth2sta disable

4. Verschlüsselung: AES (Advanced Encryption Standard)

set cipher aes

5. Schlüssel-Eingabe:

set key 1 128 12345678901234567890123456789012 <- 32 hex-Ziffern
set key 1 default

6. Verschlüsselung aktivieren:

set encryption enable

7. Fertig

reboot

Hinweise:
---------
- SSID Broadcast nicht abschalten, sonst funktioniert es nicht zuverlässig! (ein abgeschalteter SSID Broadcast bringt sowieso nichts)
- SSID kann auf beiden APs beliebig gewählt werden, muss nicht identisch sein.
- die 32 hex-Ziffern für den Schlüssel sollten natürlich zufällig gewählt sein
- das Webinterface zeigt die eingestellte Verschlüsselung falsch an (nicht wundern)!

Wer nicht glaubt, dass obige Konfiguration eine sichere PtP-Bridge darstellt, der möge mal Airsnort und Aircrack bemühen sowie AiroPeek als Paket-Analyzer.

Mit "Help more" bekommt man die Auflistung der Erweiterten Befehle.

D-Link Corp. Access Point wlan1 -> HELP MORE
List of Access Point CLI commands:
config wlan -- config wlanX
connect bss -- connect to bssX
del acl -- Delete Access Control List
del wdsacl -- Delete WDS Access Control List
del key -- Delete Encryption key
find bss -- Find BSS
find channel -- Find Available Channel
find all -- Find All BSS
dhcps help -- Display DHCP Server Command Help
get 11gonly -- Display 11g Only Allowed
get 11goptimize -- Display 11g Optimization Level
get 11goverlapbss -- Display Overlapping BSS Protection
get acl -- Display Access Control List
get wdsacl -- Display WDS Access Control List
get wdsap -- Display WDS Access Point
get apmode -- Display AP Mode(runtime)
get aging -- Display Aging Interval
get antenna -- Display Antenna Diversity
get association -- Display Association Table
get authentication -- Display Authentication Type
get autochannelselect -- Display Auto Channel Select
get basisconnect -- Display Basis of Connect Mode
get beaconinterval -- Display Beacon Interval
get burstSeqThreshold -- Display Max Number of frames in a Burst
get burstTime -- Display Burst Time
get channel -- Display Radio Channel
get availablechannel -- Display Available Radio Channel
get cipher -- Display Encryption cipher
get config -- Display Current AP Configuration
get countrycode -- Display Country Code
get ctsmode -- Display CTS mode
get ctsrate -- Display CTS rate
get ctstype -- Display CTS type
get dhcpc -- Display DHCP Clinet State
get domainsuffix -- Display Domain Name Server suffix
get dtim -- Display Data Beacon Rate (DTIM)
get encryption -- Display Encryption Mode
get eth2wlan -- Display Eth2Wlan Broadcast packet filter state
get extendedchanmode -- Display Extended Channel Mode
get fragmentthreshold -- Display Fragment Threshold
get frequency -- Display Radio Frequency (MHz)
get gateway -- Display Gateway IP Address
get groupkeyupdate -- Display Group Key Update Interval (in Seconds)
get hardware -- Display Hardware Revisions
get hostipaddr -- Display Host IP Address
get ipaddr -- Display IP Address
get ipmask -- Display IP Subnet Mask
get key -- Display Encryption Key
get keyentrymethod -- Display Encyrption Key Entry Method
get keysource -- Display Source Of Encryption Keys
get login -- Display Login User Name
get macaddress -- Display Mac address
get minimumrate -- Display Minimum Rate
get nameaddr -- Display IP address of name server
get pktLogEnable -- Display Packet Logging Mode
get power -- Display Transmit Power Setting
get radarChRecord -- Display RadarChannelRecord
get radiusname -- Display RADIUS server name or IP address
get radiusport -- Display RADIUS port number
get rate -- Display Data Rate
get remoteAp -- Display Remote Ap's Mac Address
get rtsthreshold -- Display RTS/CTS Threshold
get shortpreamble -- Display Short Preamble Usage
get shortslottime -- Display Short Slot Time Usage
get sntpserver -- Display SNTP/NTP Server IP Address
get ssid -- Display Service Set ID
get ssidsuppress -- Display SSID Suppress Mode
get station -- Display Station Status
get SuperG -- Display SuperG Feature Status
get systemname -- Display Access Point System Name
get sta2sta -- Display wireless STAs to wireless STAs connect state
get eth2sta -- Display ethernet to wireless STAs connect state
get telnet -- Display Telnet Mode
get timeout -- Display Telnet Timeout
get syslog -- Display Syslog Information
get tzone -- Display Time Zone Setting
get uptime -- Display UpTime
get wirelessmode -- Display Wireless LAN Mode
get wlanstate -- Display wlan state
get vlanstate -- Display Vlan State State
get nativevlan -- Display Native Vlan Tag
get multi-state -- Display Multi-SSID Mode
get multi-ind-state [index] -- Display Individual Multi-SSID State
get Vlantag -- Display Vlantag
get multi-ssid [index] -- Display Service Set ID for Multi-SSID
get multi-authentication [index] -- Display Authentication Type for Multi-SSID
get multi-cipher [index] -- Display Encryption cipher for Multi-SSID
get multi-encryption [index] -- Display Encryption Mode for Multi-SSID
get multi-keyentrymethod -- Display Encyrption Key Entry Method for Multi-SSID
get multi-vlantag [index] -- Display Vlan-Tag for Multi-SSID
get multi-key -- Display Encryption Key for Multi-SSID
get multi-config [index] -- Display AP Configuration for Multi-SSID
help -- Display CLI Command List
ping -- Ping
pktLog -- Packet Log
reboot -- Reboot Access Point
quit -- Logoff
set 11gonly disable -- Disable 11g only allowed
set 11gonly enable -- Enable 11g only allowed
set 11goptimize -- Set 11g Optimization Level
set 11goverlapbss disable -- Disable Overlapping BSS protection
set 11goverlapbss enable -- Enable Overlapping BSS protection
set acl allow -- Add MAC address to the ACL
set acl enable -- Select Restricted Access
set acl deny -- Add MAC address to the disabled ACL
set acl disable -- Select Unrestrict Access
set acl keymap -- Add Encryption key mapping for MAC address
set acl strict -- Select Restricted (w/ACL match) Access
set wdsacl allow -- Add MAC address to the WDS ACL
set aging -- Set Aging Interval
set antenna best -- Enable antenna diversity
set antenna 1 -- Select antenna 1
set antenna 2 -- Select antenna 2
set apmode ap -- Normal AP mode
set apmode p2p -- P2P Mode
set apmode p2mp -- P2MP Mode
set apmode p2pwithoutAP -- P2P without AP Mode
set apmode p2mpwithoutAP -- P2MP without AP Mode
set apmode apr -- AP Repeater mode
set apmode apc -- AP Client mode
set authentication open-system -- Select Open-System Authentication Type
set authentication shared-key -- Select Shared-Key Authentication Type
set authentication auto -- Select auto Authentication Type
set authentication WPA -- Select Authentication WPA Type
set authentication WPA-PSK -- Select Authentication WPA-PSK Type
set autochannelselect disable -- Disable Automatic Channel Selection
set autochannelselect enable -- Enable Automatic Channel Selection
set basisconnect ssid -- Base on SSID
set basisconnect bssid -- Base on BSSID
set beaconinterval -- Modify Beacon Interval
set burstSeqThreshold -- Set Max Number of frames in a Burst
set burstTime -- Set Burst Time
set channel -- Set Radio Channel
set cipher wep -- Select wep
set cipher aes -- Select aes
set cipher tkip -- Select tkip
set cipher auto -- Select cipher through negotiation
set ctsmode -- Set CTS Mode
set ctsrate -- Set CTS Rate
set ctstype -- Set CTS Type
set dhcpc -- Set DHCP Clinet State
set domainsuffix -- Set Domain Name Server Suffix
set dtim -- Set Data Beacon Rate (DTIM)
set encryption disable -- Disable Encryption
set encryption enable -- Enable Encryption
set extendedchanmode disable -- Disable Extended Channel Mode
set extendedchanmode enable -- Enable Extended Channel Mode
set eth2wlan -- Set Eth2Wlan Broadcast packet filter stat e
set factorydefault -- Restore to Default Factory Settings
set fragmentthreshold -- Set Fragment Threshold
set frequency -- Set Radio Frequency (MHz)
set gateway -- Set Gateway IP Address
set groupkeyupdate -- Set Group Key Update Interval (in Second
set hostipaddr -- Set Host IP address
set ipaddr -- Set IP Address
set ipmask -- Set IP Subnet Mask set key default -- Set Default Encryption Key
set key 40 -- Set 40-bit Encryption Key
set key 104 -- Set 104-bit Encryption Key
set key 128 -- Set 128-bit Encryption Key
set keyentrymethod hexadecimal -- Key contains (0 - 9, A - F)
set keyentrymethod asciitext -- Key contains keyboard characters
set keysource flash -- All keys will be read from flash (no key
derivation)
set keysource server -- All keys will be derived from authentication server
set keysource mixed -- Keys read from flash or derived from authentication server
set login -- Modify Login User Name
set syslog -- Set sysLog settings
set nameaddress -- Set Name Server IP address
set password -- Modify Password
set passphrase -- Modify Passphrase
set pktLogEnable -- Enable Packet Logging
set power full -- Set maximum (normal) transmit power
set power half -- Set fractional (1/2) transmit power
set power quarter -- Set fractional (1/4) transmit power
set power eighth -- Set fractional (1/8) transmit power
set power min -- Set minimum transmit power
set radiusname -- Set RADIUS name or IP address
set radiusport -- Set RADIUS port number
set radiussecret -- Set RADIUS shared secret
set rate best -- Select best data rate
set rate 0.25 -- Select 0.25 Mbps
set rate 0.5 -- Select 0.5 Mbps
set rate 1 -- Select 1 Mbps
set rate 2 -- Select 2 Mbps
set rate 1x -- Select 1 Mbps
set rate 2x -- Select 2 Mbps
set rate 3 -- Select 3 Mbps
set rate 5.5 -- Select 5.5 Mbps
set rate 11 -- Select 11 Mbps
set rate 6 -- Select 6 Mbps
set rate 9 -- Select 9 Mbps
set rate 12 -- Select 12 Mbps
set rate 18 -- Select 18 Mbps
set rate 24 -- Select 24 Mbps
set rate 36 -- Select 36 Mbps
set rate 48 -- Select 48 Mbps
set rate 54 -- Select 54 Mbps
set remoteAP -- Set Remote AP's Mac Address
set rtsthreshold -- Set RTS/CTS Threshold
set shortpreamble disable -- Disable Short Preamble (use only long)
set shortpreamble enable -- Enable Short and Long Preamble
set shortslottime disable -- Disable Short Slot Time (use only long)
set shortslottime enable -- Enable Short Slot Time
set sntpserver -- Set SNTP/NTP Server IP Address
set ssid -- Set Service Set ID
set ssidsuppress enable -- Enable SSID suppress mode
set ssidsuppress disable -- Disable SSID suppress mode
set SuperG enable -- Enable SuperG Features
set SuperG disable -- Disable SuperG Features
set systemname -- Set Access Point System Name
set sta2sta disable -- Disable sta2sta state
set sta2sta enable -- Enable sta2sta state
set eth2sta disable -- Disable eth2sta state
set eth2sta enable -- Enable eth2sta state
set tzone -- Set Time Zone Setting
set wlanstate disable -- Disable wlan
set wlanstate enable -- Enable wlan
set wirelessmode 11b -- 802.11b
set wirelessmode 11g -- 802.11g
set wirelessmode 108g static -- 802.11g Static Turbo
set wirelessmode 108g dynamic -- 802.11g Dynamic Turbo
set vlanstate disable -- VLAN is disabled
set vlanstate enable -- VLAN is enabled
set nativevlan -- Set Native Vlan Tag
set multi-state disable -- Multi-SSID is disabled
set multi-state enable -- Multi-SSID is enabled
set multi-ind-state disable [index] -- Disable this Multi-SSID
set multi-ind-state enable [index] -- Enable this Multi-SSID
set Vlantag -- Modify Vlantag
set multi-ssid -- Set Service Set ID for Multi-SSID
set multi-authentication open-system [index] -- Select Open-System Authentication Type
set multi-authentication shared-key [index] -- Select Shared-Key Authentication Type
set multi-cipher wep [index] -- Select wep
set multi-encryption disable [index] -- Disable Encryption
set multi-encryption enable [index] -- Enable Encryption
set multi-keyentrymethod hexadecimal [index] -- Key contains (0 - 9, A - F)
set multi-keyentrymethod asciitext [index] -- Key contains keyboard characters
set multi-vlantag [tag value] [index] -- Set Vlan-Tag for Multi-SSID
set multi-key default -- Set Default Encryption Key
set multi-key 40 -- Set 40-bit Encryption Key
set multi-key 104 -- Set 104-bit Encryption Key
set multi-key 128 -- Set 128-bit Encryption Key
set telnet 0 -- Disable Telnet access
set telnet 1 -- Enable Telnet access
set timeout -- Set Telnet Timeout
timeofday -- Display Current Time of Day
version -- Software version
rstp setstp -- Modify Spanning Tree Settings
rstp getstp -- Show Spanning Tree Settings
rstp setport -- Modify STP Port Settings
rstp getport -- Show STP Port Settings
rstp setstate -- Modify Spanning Tree State
rstp getstate -- Show Spanning Tree State
rstp setdefault -- Set Factory Default
snmp adduser -- Add User To SNMP Agent
snmp deluser -- Delete User From SNMP Agent
snmp showuser -- Show User In SNMP Agent
snmp setauthkey -- Set User Auth Key
snmp setprivkey -- Set User Private Key
snmp addgroup -- Add User Group
snmp delgroup -- Delete User Group
snmp showgroup -- Show User Group
snmp addview -- Add User View
snmp delview -- Delete User View
snmp showview -- Show User View
snmp addcomm -- Add Communication String
snmp delcomm -- Delete Communication String
snmp showcomm -- Show Communication String
snmp addhost -- Add Host To Notify List
snmp delhost -- Delete Host From Notify List
snmp showhost -- Show Host In Notify List
snmp authtrap -- Set Auth Trap Status
snmp sendtrap -- Send Warm Trap
snmp status -- Display SNMP Agent status
snmp suspend -- Suspend SNMP Agent
snmp resume -- Resume SNMP Agent
snmp load_default -- Load SNMP Default Setting
tftp get -- Get a file from TFTP Server.
tftp uploadtxt -- Upload the configuration of the device to
TFTP Server.
tftp srvip -- Setup the TFTP Server IP address.
tftp update -- Update the file to the device.
tftp info -- Information about the TFTPC setting.
D-Link Corp. Access Point wlan1 ->