SECTION "About" { # Cable/DSL Router Test Suite # # Auto-generated by cdrouter-cli -upgrade-config on 2022-06-03 12:25:19 # Version: Version 13.1.1 (cf9d6b1), built 2022-04-05 17:19:59 by build@cdr-forge7.corp.qacafe.com (x86_64) # # Local.conf # # This is the main configuration file for CDRouter. This file defines the # configuration of the router under test and controls various aspects of # CDRouter's behavior. This file consists of a number of unique test variables # called 'testvars' which are grouped by interface, protocol, or functionality. # The basic syntax for all testvars is: # # testvar NAME VALUE } SECTION "Base Configuration" { SECTION "WAN" { SECTION "WAN Interface" { # testvar wanInterface eth2 # testvar wanMode DHCP # testvar wanIspIp 202.254.1.1 # testvar wanIspAssignIp 202.254.1.2 # testvar wanIspMask 255.255.255.0 # testvar wanDomainName qacafe.com # testvar forwardingMode route # testvar wanDutMac none # testvar wanDutClientID 01000000000001 # testvar wanAuthenticator no # testvar wanNatIp 202.254.1.2 # testvar wanIspNextIp 202.254.1.3 } SECTION "WAN Gateway and DHCP Relay" { # testvar wanIspGateway 10.0.0.2 # testvar wanIspAssignGateway 4.0.0.1 # testvar wanIspAssignMask 255.255.255.0 # testvar IPv4HopCount 1 # testvar dhcpRelayServer 10.0.0.2 } SECTION "DHCP Server" { # testvar dhcpLeaseTime 300 # testvar dhcpServerBroadcast no # testvar dhcpServerRapidCommit yes # testvar dhcpServerClientIDBehavior rfc6842 # testvar dhcpServerResponseDelay 4500 # testvar dhcpConnectOnDemand no # testvar dhcpServerOptionCode1 69 # testvar dhcpServerOptionData1 04040404 # testvar wanDhcpClientOptionCode1 60 # testvar wanDhcpClientOptionData1 04040404 # testvar dhcpClientMac auto } SECTION "DHCP Authentication" { # testvar supportsDhcpAuth no } SECTION "PPPoE Server" { # testvar pppoeConnectOnDemand no # testvar pppoeIdleTimeout 60 # testvar pppoeUser qacafe # testvar pppoePassword qacafe123 # testvar pppoeAcName qacafe-ac # testvar pppoeServiceName any # testvar pppoeAcCookie auto # testvar pppoeMaxPayload none } SECTION "PPTP Server" { # testvar pptpUser qacafe # testvar pptpPassword qacafe123 # testvar pptpConnectOnDemand yes # testvar pptpServerIp 202.254.201.1 # testvar pptpClientIp 202.254.201.2 # testvar pptpUseDHCP no } SECTION "L2TP Server" { # testvar l2tpUser qacafe # testvar l2tpPassword qacafe123 # testvar l2tpConnectOnDemand yes # testvar l2tpServerIp 202.254.201.1 # testvar l2tpClientIp 202.254.201.2 # testvar l2tpUseDHCP no } SECTION "DS-Lite" { # testvar ipv6DsliteAftr 3001:aaaa::1 # testvar dhcpv6WanAftrName aftr.qacafe.com # testvar dsliteFirewallMode address-restricted } SECTION "MAP / LW4o6" { # testvar mapBmrRuleIpv6Prefix 5002:db8:0:2ff:: # testvar mapBmrRuleIpv6PrefixLen 48 # testvar mapBmrRuleIpv4Prefix 5.0.0.0 # testvar mapBmrRuleIpv4PrefixLen 24 # testvar mapBmrRuleEABitLen 16 # testvar mapSharingRatio 256 # testvar mapStartPort 4096 # testvar mapPsid 255 # testvar mapEnableDhcpv6Options yes SECTION "MAP-E / LW4o6" { # testvar mapTunnelFlowLabel 0 # testvar mapTunnelHopLimit 64 # testvar mapTunnelTrafficClass 0 } SECTION "MAP-T" { # testvar mapDmrIpv6Prefix 5001:db8:: # testvar mapDmrIpv6PrefixLen 48 # testvar mapTosTranslate yes } } SECTION "PPP Options" { # testvar pppAuthType PAP # testvar pppForceLcpMRU 1500 # testvar pppMagicNumber yes # testvar pppConnectionDelay 10 # testvar pppRestartTimeout 300000 # testvar pppFailUsesICMP no } SECTION "WAN 802.1q VLAN" { # testvar wanVlanId 100 # testvar wanVlanPriority 0 } SECTION "WAN 802.1ad VLAN" { # testvar enableVlanStacking no # testvar wanInnerVlanId 100 # testvar wanInnerVlanPriority 0 # testvar wanOuterVlanId 100 # testvar wanOuterVlanPriority 0 # testvar wanOuterVlanQinQ no } SECTION "Wireless Access Point (AP)" { # testvar wanApBand 2.4GHz # testvar wanApSSID qa-net # testvar wanApChannel auto SECTION "WPA Authenticator" { # testvar wanApWpaMode RSN # testvar wanApWpaKeyMgmt PSK # testvar wanApWpaCipher CCMP-128 # testvar wanApWpaGroupCipher auto # testvar wanApWpaPMF auto # testvar wanApWpaPsk qacafe123 # testvar wanApWpaSaePassword "sae secret" } } SECTION "WAN 802.1X and RADIUS" { SECTION "WAN RADIUS" { # testvar wanRadiusEnable no # testvar wanRadiusInterface wan # testvar wanRadiusIp 3.3.3.44 # testvar wanRadiusSecret qacafe123 # testvar wanRadiusServerAttrType1 200 # testvar wanRadiusServerAttrData1 04040404 } SECTION "WAN EAP Settings" { # testvar wanEapType eap-md5 SECTION "WAN Supplicant Credentials" { # testvar wanEapIdentity1 user1 # testvar wanEapPassword1 qacafe123 } SECTION "WAN Authentication Options" { # testvar wanEapRootCert /usr/cdrouter/tests/root.pem # testvar wanEapServerCertPath /usr/cdrouter/tests/server.pem # testvar wanEapServerCertPassword qacafe123 # testvar wanEapFragmentSize 1024 } } } SECTION "WAN DNS" { # testvar wanDnsServer 202.254.101.1 # testvar wanBackupDnsServer 202.254.101.2 # testvar wanBackupDnsServer2 0.0.0.0 # testvar wanBackupDnsServer3 0.0.0.0 # testvar DNStoDHCP no # testvar supportsDnsProxy yes # testvar supportsDnsCaching yes # testvar dnsCacheSize 150 # testvar dnsLookupTimeout 5 # testvar dnsFailoverAuth "2 4 5" # testvar dnsFailoverNonAuth "2 4 5" # testvar dnsFailoverDelay 10 # testvar dnsFailoverAttempts 20 # testvar dnsRelayFailover 120 # testvar dnsForwardServerStatus no # testvar dnsUsageProfile opportunistic-privacy # testvar dnsCaptive no SECTION "User Configurable DNS Entries" { # testvar dnsHostname1 test.qacafe.com # testvar dnsIp1 5.5.5.5 } } SECTION "HTTP" { # testvar supportsHttpProxy yes # testvar httpProxyIdleTimeout 30 # testvar httpMaxHeaderCount 200 } SECTION "NTP" { # testvar ntpServer1 3.3.3.6 # testvar ntpServerName1 time.nist.gov # testvar ntpServer2 3.3.3.7 # testvar ntpServerName2 time.foo.com # testvar ntpStartDate "6/2/2007 11:00 am UTC" # testvar ntpOffset 0 # testvar enableRFC868TimeProtocol no } SECTION "Dynamic DNS" { # testvar supportsDynDns no # testvar dynDnsServerIp 66.37.215.49 # testvar dynDnsTransport http # testvar dynDnsHostname test.domain.com # testvar dynDnsUsername qacafe # testvar dynDnsPassword qacafe123 # testvar dynDnsSystem dyndns # testvar dynDnsMx mail.domain.com # testvar dynDnsBackMx no # testvar dynDnsWildcard off # testvar dynDnsAgent RAS/1.1 # testvar dynDnsWait 30 # testvar testDynDnsErrorCode no # testvar dynDnsServerReturn !yours } SECTION "WINS Servers" { # testvar winsServer1 3.3.3.4 # testvar winsServer2 3.3.3.5 } SECTION "WAN Static Routes" { # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 # testvar staticRouteWanNextHop1 wan } } SECTION "LAN" { SECTION "LAN Interface" { # testvar lanInterface eth1 # testvar lanMode DHCP # testvar lanClients 1 # testvar lanSecurity NONE # testvar lanIp 192.168.1.1 # testvar lanMask 255.255.255.0 # testvar lanDomainName qacafe.com # testvar lanMtu default testvar lanHostname prplOS # testvar lanGuestMode no SECTION "ARP Settings" { # testvar arpMode strict # testvar arpSupportGratuitous yes } } SECTION "LAN DNS" { # testvar lanDnsServer 192.168.1.1 # testvar lanStaticDns no # testvar supportsDnsHostnameCreate no } SECTION "DHCP Client" { # testvar dhcpClientTimeout 5 # testvar dhcpInform no # testvar dhcpClientStart 192.168.1.2 # testvar dhcpClientEnd 192.168.1.254 # testvar dhcpClientLeaseTime 86400 # testvar dhcpRapidCommit no # testvar ipv4MaxLanClients auto # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" # testvar dhcpCreateDelay 0 # testvar dhcpReleaseDelay 300 # testvar dhcpServerMac auto # testvar dhcpClientVendorClass myIpDevice # testvar useDHCPpadding yes # testvar dhcpClientTrackSeconds no # testvar dhcpClientRequestNtp no # testvar lanDhcpClientOptionCode1 60 # testvar lanDhcpClientOptionData1 04040404 SECTION "DHCP Client Reservations" { # testvar dhcpClientReservedIp1 192.168.1.10 # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 } SECTION "DHCP Client Extra Parameters" { # testvar dhcpExtraClientParams "69 70" } SECTION "DHCP Client Extra Options" { # testvar dhcpClientOptionCode1 124 # testvar dhcpClientOptionData1 000000000401020304 } } SECTION "802.11 Wireless" { # testvar lanSSID qa-net # testvar lanChannel auto # testvar lan80211Phy auto # testvar lanBSSID auto # testvar lan80211BandSteering none SECTION "WPA Configuration Options" { # testvar wpaMode auto # testvar wpaKey qacafe123 # testvar wpaSaePassword "sae secret" # testvar wpaKeyMgmt PSK # testvar wpaCipher auto # testvar wpaGroupCipher auto # testvar wpaPMF auto } SECTION "WEP Encryption Options" { # testvar lanWEPKey off # testvar lanWEPKeyIndex 0 } SECTION "Hotspot Router Settings" { # testvar browserLoginUrl1 https://192.168.1.1/login?user=%USERNAME%&passwd=%PASSWORD% # testvar browserLogoutUrl1 http://192.168.1.1/logout?username=%USERNAME% SECTION "Hotspot Clients" { # testvar clientLoginName1 client1 # testvar clientLoginPassword1 admin1 } SECTION "Advanced Hotspot Settings" { # testvar browserLoginProc example_login # testvar browserLogoutProc example_logout # testvar browserScriptsPath /usr/cdrouter/tests/helper-scripts/hotspot-login.tcl } } SECTION "Expected Beacon Information" { # testvar wifiBeaconWpaMode none # testvar wifiBeaconWpaKeyMgmt PSK # testvar wifiBeaconWpaCipher CCMP-128 # testvar wifiBeaconRsnCipher CCMP-128 # testvar wifiBeaconWpaGroupCipher CCMP-128 # testvar wifiBeaconPhy "n a ac" } } SECTION "LAN 802.1X and RADIUS" { SECTION "LAN RADIUS" { # testvar enableRADIUSserver yes # testvar radiusHost remoteHost # testvar radiusSecret qacafe123 # testvar radiusServerAttrType1 200 # testvar radiusServerAttrData1 04040404 } SECTION "LAN EAP Settings" { # testvar eapType eap-tls SECTION "LAN Supplicant Credentials" { # testvar eapIdentity1 user1 # testvar eapPassword1 qacafe123 # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem # testvar eapUserCertPassword1 qacafe123 # testvar eapUserPrivateKey1 "" } SECTION "LAN Authentication Options" { # testvar eapRootCert /usr/cdrouter/tests/root.pem # testvar eapServerCertPath /usr/cdrouter/tests/server.pem # testvar eapServerCertPassword qacafe123 # testvar eapFragmentSize 1024 # testvar eapTxWhen 60 # testvar eapQuietPeriod 60 # testvar eapReAuthMax 2 # testvar eapSendLogoffFailure yes # testvar eapReAuthPeriod 0 } } } SECTION "LAN 802.1q VLAN" { # testvar lanVlanId 100 # testvar lanVlanPriority 0 } SECTION "LAN Static Routes" { # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 # testvar staticRouteLanNextHop1 192.168.1.18 } } SECTION "Firewall and NAT" { SECTION "NAT Options" { # testvar natSimultaneousTcp no # testvar natSrcPort0 yes # testvar natSupportsP2P yes # testvar natPortParity yes # testvar natMode port-restricted # testvar natVerifyIpId yes # testvar defaultTcpEchoPort 50000 # testvar defaultUdpEchoPort 50000 # testvar natRefreshBehavior both SECTION "NAT Timers" { # testvar natFinTimeout disabled # testvar natRstTimeout disabled # testvar natTcpTimeout disabled # testvar natSynTimeout disabled # testvar natUdpTimeout disabled # testvar natDnsTimeout disabled # testvar natIcmpTimeout disabled # testvar natRtspTimeout disabled # testvar natLagTime 0 } } SECTION "Protocol Pass Through" { SECTION "IPSEC Pass Through" { # testvar supportsIPSECpass yes # testvar ipsecMaxTunnels 20 # testvar ipsecScaleSameServer no # testvar alwaysUseIke no # testvar ipsecPassRetransmit no # testvar unknownPassthrough yes } SECTION "PPTP Pass Through" { # testvar supportsPPTPpass yes # testvar pptpMaxTunnels 20 } SECTION "L2TP Pass Through" { # testvar supportsL2TPpass yes # testvar l2tpMaxTunnels 20 } SECTION "PPPoE Pass Through" { # testvar supportsPPPoEpass no } } SECTION "Port Triggers" { # testvar portTriggers no # testvar portTriggerTimeout 0 # testvar portTriggerDelay 0 # testvar portTriggerOpenDelay 0 # testvar triggerName1 net2phone-1 # testvar triggerAddrType1 ipv4 # testvar triggerPort1 6801 # testvar triggerType1 udp # testvar triggerPublic1 30000 # testvar triggerPublicType1 both } SECTION "Application Layer Gateways (ALGs)" { SECTION "MSN Messenger" { # testvar supportsMsnAlg no # testvar msnNotificationServerPort 1863 # testvar msnSwitchBoardServerPort 1863 } SECTION "RTSP" { # testvar supportsRtspAlg no # testvar rtspTeardownDelay 5 # testvar rtspGetParameterInterval 5 } SECTION "SIP" { # testvar supportsSipAlg yes # testvar sipInterface wan # testvar sipServerIp 3.3.3.8 # testvar ipv6SipServerIp 3001:051a:cafe::4 # testvar sipCallTeardownDelay 5 # testvar sipMaxOutboundCalls 10 # testvar sipMaxInboundCalls 10 # testvar sipCallPacing 0 # testvar sipScaleRunTime 30 # testvar sipScaleServerPort 5060 # testvar sipScaleClientPort 5060 # testvar sipMaxUserNames -1 # testvar rtpSendInterval 5000 } SECTION "FTP" { # testvar ftpPortTimeout 120 } } SECTION "Virtual Services (Port Mappings)" { # testvar virtualWANTransType none # testvar virtualLANTransType public SECTION "TCP Virtual Services" { # testvar virtualTcpServices no # testvar virtualTcpServicePort1 21 # testvar virtualTcpServiceHost1 192.168.1.200 # testvar virtualTcpServiceName1 ftp # testvar virtualTcpServiceLanPort1 21 } SECTION "UDP Virtual Services" { # testvar virtualUdpServices no # testvar virtualUdpServicePort1 53 # testvar virtualUdpServiceHost1 192.168.1.203 # testvar virtualUdpServiceName1 dns # testvar virtualUdpServiceLanPort1 53 } } SECTION "Port Scanning, Firewall and DoS Options" { # testvar portScanStart 0 # testvar portScanStop 65535 # testvar portScanDelay 1 testvar firewallTcpOpenPorts "50805" # testvar firewallTcpClosedPorts 2323 # testvar firewallUdpOpenPorts 1234 testvar firewallUdpClosedPorts 68 # testvar firewallOutBlockedTcpPorts 1234 # testvar firewallOutBlockedUdpPorts 1234 # testvar firewallOutBlockedIpProtos 0 # testvar wanPingRespond no SECTION "Denial of Service Options" { # testvar dosRecoveryTime 5 # testvar dosAttackAttempts 100 # testvar dutMgmtPort 80 # testvar dutSecureMgmtPort disabled # testvar dosSynAttackPort 80 # testvar dosSynAttackAttempts 100 } SECTION "Deprecated SSL Protocols and Ciphers" { # testvar sslDeprecatedProtocols "sslv2 sslv3" # testvar sslDeprecatedCiphers "DES-CBC-SHA ECDH-ECDSA-RC4-SHA ECDH-RSA-RC4-SHA ECDHE-ECDSA-RC4-SHA ECDHE-RSA-RC4-SHA EDH-DSS-DES-CBC-SHA EDH-RSA-DES-CBC-SHA EXP-DES-CBC-SHA EXP-EDH-DSS-DES-CBC-SHA EXP-EDH-RSA-DES-CBC-SHA EXP-RC2-CBC-MD5 EXP-RC4-MD5 RC4-MD5" } } SECTION "DMZ" { # testvar lanDmzHost 192.168.1.253 # testvar lanDmzTcpPortExceptions 113 # testvar lanDmzUdpPortExceptions 1234 # testvar lanDmzIpProtoExceptions 2,47 # testvar lanDmzSupportsIcmp no } SECTION "URL Filtering" { # testvar urlFilterSupported no # testvar filtered-urls "http://abc.com/yahoo.htm http://www.foo.com/home.htm" # testvar non-filtered-urls http://qacafe.com # testvar urlFilterBlockedText "This website is blocked" } SECTION "XBox Live Options" { # testvar xboxNatMinType open # testvar xboxPort 3074 # testvar xboxMtu 1364 } } SECTION "Advanced Protocols" { SECTION "RIP v1/v2" { # testvar ripSupported no # testvar ripVersion 1 # testvar ripV2mode multicast # testvar ripAuthMode none # testvar ripPassword qacafe123 # testvar ripMaxRoutes 96 # testvar ripRouteTimeout 180 # testvar ripGarbageTimeout 120 # testvar ripRouteDelay 5000 # testvar ripAcceptWanUpdate no } SECTION "UPnP" { # testvar upnpSupported yes # testvar upnpVersion 1.1 # testvar upnpDevice InternetGatewayDevice:2 # testvar upnpWANPPPConnection no # testvar upnpLANDevice no # testvar upnpMaxTcpMappings 10 # testvar upnpMaxSubClients 10 # testvar upnpMinSubTimeout 40 # testvar upnpMaxSubTimeout 3600 # testvar upnpWANFailureTimeout 120 # testvar upnpPortStart 40000 # testvar upnpPortStop 50000 } SECTION "LLDP" { # testvar supportsLLDP no # testvar lldpLanMac none # testvar lldpLanChassisMac auto # testvar lldpMsgFastTx 1 # testvar lldpMsgTxInterval 30 # testvar lldpTxFastInit 4 } SECTION "IGMP (Multicast)" { # testvar supportsMulticast yes # testvar multicastType proxy # testvar supportsMulticastOut no # testvar igmpVersion 2 # testvar igmpFastLeave no # testvar igmpRouterOption yes # testvar igmpMaxGroups 64 # testvar multicastCacheTimeout 10 # testvar multicastPoolStart 224.0.1.0 # testvar multicastPoolStop 239.255.255.255 # testvar SSMulticastPoolStart 232.0.1.1 # testvar SSMulticastPoolStop 232.0.1.255 # testvar multicastJoinDelay 2 # testvar multicastScaleDelay 1 # testvar multicastInterface wan # testvar multicastBypassPPPoE no SECTION "IGMP Timers" { # testvar igmpQueryInterval 125 # testvar igmpRobustnessVariable 2 # testvar igmpQueryResponseInterval 10 } SECTION "IPTV Options" { # testvar iptvChannelRange 200 # testvar iptvChannelChangeDelay 200 # testvar iptvMaxFailures 10 } } SECTION "GRE Tunnels" { # testvar greDFflag on IGNORE testvar_group greTunnel1 { SECTION "Generic IPv4 GRE Tunnel Endpoints" { # testvar greType IPv4 # testvar greEndpoint 5.5.5.5 # testvar greLocalNet 192.168.1.0 # testvar greLocalMask 255.255.255.0 } SECTION "L2GRE Options" { # testvar greWanGroup wan2 } SECTION "L3GRE Remote IPv4 Network" { # testvar greHost 3.0.0.1 # testvar greRemoteNet 3.0.0.0 # testvar greRemoteMask 255.0.0.0 } } } } SECTION "Additional Features" { # testvar supportsIPv4 yes # testvar internalSmtpServer 5.5.5.5 # testvar remoteHostIp 3.3.3.3 # testvar startOtherLanFirst no # testvar cdrouterOui B0750C # testvar forwardingMaxFailures 20 # testvar forwardingPort 5001 # testvar jumboMtu disabled # testvar tcpUdpPortStart 10000 SECTION "General Purpose HTTP Server" { # testvar httpServerIp 3.3.3.16 # testvar httpServerPort 80 # testvar httpServerRoot /tmp } SECTION "Free Network Range" { # testvar FreeNetworkStart 200.0.0.0 # testvar FreeNetworkMask 255.255.255.0 # testvar FreeNetworkStop 201.0.0.0 } SECTION "TCP MSS Clamping" { # testvar mssClampingValue default # testvar mssClampingInValue default } SECTION "TCP/UDP Scaling Options" { # testvar scaleTcpConnsPerHost 5 # testvar natMaxTcpConns 200 # testvar natMaxUdpConns 100 } SECTION "Global Wireless Options" { # testvar wirelessRetry 3 # testvar lanWirelessMaxClients auto # testvar wifiCapture off # testvar wifiCaptureFilter {} } } SECTION "Test Execution Options and Auto-Reboot" { # testvar startDelay 3 # testvar lanStartDelay 3 # testvar startTimeout 90 # testvar wanCloseOnExit yes # testvar RestartDut none # testvar RestartDutDelay disabled # testvar ShutdownDut "echo -n" # testvar cpeRebootMode skip # testvar healthCheckEnable no } } SECTION "CDRouter DOCSIS Add-On" { # testvar supportsDocsis no SECTION "Basic Configuration" { # testvar docsisIpProvisioningMode ipv4-only # testvar docsisBootDelay 30 # testvar docsisClientMac auto } SECTION "IPv4 Provisioning" { SECTION "Default Gateway and Network" { # testvar docsisIp 10.10.10.1 # testvar docsisMask 255.255.255.0 } SECTION "DHCPv4 Server" { # testvar docsisDhcpServer 10.10.10.3 # testvar docsisAssignIp 10.10.10.2 # testvar docsisDomain docsis.qacafe.com # testvar docsisDhcpLeaseTime 300 # testvar docsisDhcpRapidCommit no # testvar docsisDhcpServerOptionCode1 69 # testvar docsisDhcpServerOptionData1 04040404 # testvar docsisDhcpClientOptionCode1 60 # testvar docsisDhcpClientOptionData1 04040404 SECTION "DHCPv4 Relay" { # testvar docsisGateway 6.6.6.7 # testvar docsisAssignGateway 6.6.6.6 # testvar docsisAssignMask 255.255.255.0 # testvar docsisDhcpRelayServer 6.6.6.7 } } SECTION "Log, Time, and TFTP Servers" { # testvar docsisLogServer 10.10.10.5 # testvar docsisTimeServer 10.10.10.6 # testvar docsisTftpServer 10.10.10.4 } } SECTION "IPv6 Provisioning" { SECTION "Default Gateway and Network" { # testvar docsisIpv6 8001::1 # testvar docsisIpv6PrefixLen 64 } SECTION "DHCPv6 Server" { # testvar docsisDhcpIpv6Server 8001::3 # testvar docsisAssignIpv6 8001::2 # testvar docsisDHCPv6PreferredLifetime 300 # testvar docsisDHCPv6ValidLifetime 300 # testvar docsisDhcpv6RapidCommit no # testvar docsisDhcpv6ServerOptionCode1 69 # testvar docsisDhcpv6ServerOptionData1 04040404 # testvar docsisDhcpv6ClientOptionCode1 60 # testvar docsisDhcpv6ClientOptionData1 04040404 } SECTION "DHCPv6 Relay" { # testvar docsisIpv6Gateway 9001::1 # testvar docsisAssignIpv6PrefixLen 64 # testvar docsisDhcpv6RelayServer 9001::1 } SECTION "Log, Time, and TFTP Servers" { # testvar docsisLogIpv6Server 8001::5 # testvar docsisTimeIpv6Server 8001::6 # testvar docsisTftpIpv6Server 8001::4 } } SECTION "CM Config File" { SECTION "Global TFTP Settings" { # testvar docsisTftpServerDirectory /usr/cdrouter-data/temp # testvar docsisTftpBootFile auto-docsis.bin } SECTION "Embedded Config File" { # testvar docsisConfig { # Main # { # NetworkAccess 1; # BaselinePrivacy # { # AuthTimeout 10; # ReAuthTimeout 10; # AuthGraceTime 600; # OperTimeout 1; # ReKeyTimeout 1; # TEKGraceTime 600; # AuthRejectTimeout 60; # SAMapWaitTimeout 1; # SAMapMaxRetries 4; # } # MaxCPE 3; # UsServiceFlow # { # UsServiceFlowRef 2; # QosParamSetType 7; # } # DsServiceFlow # { # DsServiceFlowRef 1; # QosParamSetType 7; # } # SNMPv1v2cCoexistenceConfig # { # SNMPv1v2cCommunityName "public"; # SNMPv1v2cTransportAddressAccess # { # SNMPv1v2cTransportAddress 0.0.0.0/0; # SNMPv1v2cTransportAddressMask 0.0.0.0/0; # } # SNMPv1v2cAccessViewType 2; # SNMPv1v2cAccessViewName "docsisManagerView"; # } # /* CmMic e07f5ace4d2b69cfd8d65cdeb30f739c; */ # /* CmtsMic 08187b8a159f0fa6021fa95be0be5a59; */ # /*EndOfDataMkr*/ # } # } } SECTION "Vendor Defined Config File" { # testvar docsisConfigFile none } } SECTION "CM Firewall Configuration" { SECTION "IPv4" { # testvar docsisTcpOpenPorts "22 443" # testvar docsisTcpClosedPorts all # testvar docsisUdpOpenPorts 1234 # testvar docsisUdpClosedPorts all } SECTION "IPv6" { # testvar docsisIpv6TcpOpenPorts "22 443 3000-3009" # testvar docsisIpv6TcpClosedPorts "2323 80" # testvar docsisIpv6UdpOpenPorts 1234 # testvar docsisIpv6UdpClosedPorts 113 } } } SECTION "CDRouter HomeKit Add-On" { # testvar supportsHomeKit no # testvar homeKitRouterName "HomeKit Router" # testvar homeKitHATHostname hat.local # testvar homeKitHATRulesPath /Users/hat/TestcasesJSON/ # testvar homeKitRouterSetupCode # testvar homeKitManualEnabled yes } SECTION "CDRouter IKE Add-On" { SECTION "Global IKE Options" { # testvar ikeMaxPhase2SA 20 # testvar ikeDeadPeerDetection no # testvar ikeNewQuickModeDelay 1000 # testvar ikeKeepAlive 20 # testvar ikeMinimumLifetime 20 # testvar ipsecMinimumLifetime 20 # testvar ikePhase2DeleteDelay 100 # testvar ikeMaxTransforms 21 # testvar ikeInitialContact yes # testvar ikeBringUpTunnels yes # testvar ikeAlwaysInitiate no # testvar useSameIpsecTunnel no # testvar ikeNatTraversal no # testvar ike_FQDN fqdn-test.cdrouter.com # testvar ike_USER_FQDN cdrouter@fqdn-test.cdrouter.com } SECTION "IPsec Tunnel Configurations" { SECTION "IPsec Tunnel Configuration 1" { # testvar ipsecTunnelKeyType1 manual # testvar ipsecTunnelEndpoint1 5.0.0.1 # testvar ipsecTunnelRemoteNetwork1 5.0.0.0 # testvar ipsecTunnelRemoteMask1 255.255.255.0 # testvar ipsecTunnelHost1 5.0.0.2 SECTION "Manual IPsec Tunnel Configuration" { # testvar ipsecTunnelOutboundSpi1 1000 # testvar ipsecTunnelOutEncrypt1 des # testvar ipsecTunnelOutEncryptKey1 0102030405060708 # testvar ipsecTunnelOutAuth1 md5-hmac # testvar ipsecTunnelOutAuthKey1 6262626262626262 # testvar ipsecTunnelInboundSpi1 1001 # testvar ipsecTunnelInEncrypt1 des # testvar ipsecTunnelInEncryptKey1 0102030405060708 # testvar ipsecTunnelInAuth1 md5-hmac # testvar ipsecTunnelInAuthKey1 6262626262626262 } SECTION "IKE IPsec Tunnel Configuration" { # testvar ipsecTunnelIkeEncrypt1 des # testvar ipsecTunnelIkeAuth1 md5-hmac # testvar ipsecTunnelIkeGroup1 1 # testvar ipsecTunnelIkeLifetime1 300 # testvar ipsecTunnelEncrypt1 3des # testvar ipsecTunnelAuth1 sha1-hmac # testvar ipsecTunnelPfsGroup1 1 # testvar ipsecTunnelLifetime1 120 # testvar ipsecTunnelPsk1 qacafe123 # testvar ipsecTunnelIkeMode1 main # testvar ipsecTunnelUsesNat1 no } } } } SECTION "CDRouter IPv6 Add-On" { # testvar supportsIPv6 no SECTION "IPv6 WAN" { # testvar ipv6WanMode DHCP # testvar ipv6PPPoEAddressMode DHCP # testvar ipv6WanIspIp 3001::1 # testvar ipv6WanIspAssignIp 3001::2 # testvar ipv6WanIspNextIp 3001::3 # testvar ipv6WanIspPrefixLen 64 # testvar ipv6WanDutDuid 00000000 # testvar ipv6RelayServer 192.88.99.1 # testvar ipv6RelayServerGlobal 3001:051a:cafe::6 # testvar ipv6rdPrefix 2001:1234:: # testvar ipv6rdPrefixLen 32 # testvar ipv6rdIPv4MaskLen 0 # testvar ipv6rdDHCPv4Option yes # testvar ipv6TunnelMtuType static # testvar ipv6WanMtu 1500 # testvar ipv6WanMtuOption no # testvar ipv6RASendInterval 10 # testvar ipv6ExpectRAonWan no SECTION "WAN IPv6 Gateway and DHCPv6 Relay" { # testvar ipv6WanIspGateway 3001::9 # testvar ipv6WanAssignPrefixLen 64 # testvar IPv6HopCount 1 # testvar dhcpv6RelayServer 3001::9 } SECTION "WAN IPv6 DNS" { # testvar ipv6WanDnsServer 3001:51a:cafe::2 # testvar ipv6WanBackupDnsServer 3001:51a:cafe::3 # testvar ipv6WanBackupDnsServer2 :: # testvar ipv6WanBackupDnsServer3 :: # testvar ipv6WanRDNSS no # testvar ipv6WanDNSSL no } SECTION "DHCPv6 Server" { # testvar dhcpv6IAValidLifetime 300 # testvar dhcpv6IAPreferredLifetime 300 # testvar dhcpv6DuidType 1 # testvar dhcpv6RestartLatency 10 # testvar dhcpv6ServerRapidCommit yes # testvar dhcpv6ServerOptionCode1 69 # testvar dhcpv6ServerOptionData1 04040404 # testvar wanDhcpv6ClientOptionCode1 60 # testvar wanDhcpv6ClientOptionData1 04040404 } SECTION "DHCPv6 Authentication" { # testvar supportsDhcpv6Auth no } SECTION "DHCPv6 Prefix Delegation" { # testvar dhcpv6WanEnablePD yes # testvar dhcpv6WanEnablePDExclude no # testvar dhcpv6WanAssignPrefix 3001:dddd:: # testvar dhcpv6WanAssignNextPrefix 3001:ddde:: # testvar dhcpv6WanAssignPrefixLen 48 # testvar dhcpv6PDLatency 30 } SECTION "IPv6 NTP" { # testvar ipv6NtpServer1 4321::23 # testvar ipv6NtpServerName1 time.nist.gov # testvar ipv6NtpServer2 4321::24 # testvar ipv6NtpServerName2 time.foo.com } SECTION "WAN IPv6 Static Routes" { # testvar staticIpv6RouteWanNetwork1 3001::/64 # testvar staticIpv6RouteWanNextHop1 wan } } SECTION "IPv6 LAN" { # testvar ipv6LanMode autoconf testvar ipv6LanIp 3001:dddd::1 # testvar ipv6LanPrivacyAddresses no # testvar ipv6LanPrefixLen 64 # testvar ipv6MaxLanClients 32 # testvar ipv6RAInterval 300 # testvar ipv6LanSubnetId 1 SECTION "DHCPv6 Client" { # testvar dhcpv6ClientTimeout 5 # testvar ipv6DhcpClientStart ::2 # testvar ipv6DhcpClientEnd ::1f # testvar ipv6DhcpClientExclude "::3 ::7" # testvar ipv6DhcpClientValidLifetime 86400 # testvar dhcpv6RapidCommit yes # testvar dhcpv6ClientOptionRequest "21 22" # testvar dhcpv6ClientOptionCode1 39 # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 } SECTION "IPv6 LAN DNS" { # testvar ipv6DNStoLAN yes # testvar ipv6RdnssSupport yes # testvar ipv6DnsslSupport yes # testvar ipv6LanStaticDns no } SECTION "Unique Local Address (ULA) Options" { # testvar supportsULA no # testvar ipv6LanULAPrefix fd00:: # testvar ipv6LanULAIp ::%eui64% # testvar ipv6LanULAMode autoconf } SECTION "LAN IPv6 Static Routes" { # testvar staticIpv6RouteLanNetwork1 2001::/64 # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a } } SECTION "IPv6 Firewall" { # testvar ipv6FirewallTcpOpenPorts "22 443 3000-3009" # testvar ipv6FirewallTcpClosedPorts "2323 80" # testvar ipv6FirewallUdpOpenPorts 1234 # testvar ipv6FirewallUdpClosedPorts 113 # testvar ipv6FirewallOutBlockedTcpPorts 1234 # testvar ipv6FirewallOutBlockedUdpPorts 1234 # testvar ipv6FirewallOutBlockedIpProtos 0 # testvar ipv6WanPingRespond no SECTION "IPv6 TCP MSS Clamping" { # testvar ipv6MssClampingValue default # testvar ipv6MssClampingInValue default # testvar ipv6MssClampingTestPort 8096 } } SECTION "IPv6 Advanced Protocols" { SECTION "RIPng" { # testvar supportsRIPng no } SECTION "MLD (IPv6 Multicast)" { # testvar supportsIPv6Multicast yes # testvar supportsIPv6MulticastOut no # testvar mldVersion 2 # testvar mldMaxGroups 64 # testvar mldFastLeave no # testvar ipv6MulticastCacheTimeout 10 # testvar ipv6MulticastJoinDelay 2 # testvar ipv6MulticastScaleDelay 1 SECTION "MLD Timers" { # testvar mldQueryInterval 125 # testvar mldRobustnessVariable 2 # testvar mldQueryResponseInterval 10 } SECTION "IPv6 IPTV Options" { # testvar ipv6IptvChannelRange 200 # testvar ipv6IptvChannelChangeDelay 200 # testvar ipv6IptvMaxFailures 10 } } } SECTION "IPv6 Additional Features" { SECTION "IPv6 Free Network Range" { # testvar ipv6RemoteHost 3001:051a:cafe::1 # testvar ipv6FreeNetworkStart 3001:cafe:1:: # testvar ipv6FreeNetworkPrefixLen 64 # testvar ipv6FreeNetworkStop 3001:cafe:ffff:: } SECTION "IPv6 Multicast Pool Ranges" { # testvar ipv6MulticastPoolStart ff0e::1 # testvar ipv6MulticastPoolStop ff0e:ffff:: # testvar ipv6SSMulticastPoolStart ff3e::8000:1 # testvar ipv6SSMulticastPoolStop ff3e::ffff:ffff } } } SECTION "CDRouter Multiport Add-On" { SECTION "Additional WAN Interface Setup" { # testvar wanFailoverTimeout 300 IGNORE testvar_group wan2 { SECTION "IPv4 WAN" { SECTION "WAN Interface" { # testvar wanInterface eth2 # testvar wanMode DHCP # testvar wanIspIp 202.254.2.1 # testvar wanIspAssignIp 202.254.2.2 # testvar wanIspMask 255.255.255.0 # testvar wanDomainName qacafe.com # testvar forwardingMode route # testvar wanDutMac none # testvar wanDutClientID 01000000000001 # testvar wanAuthenticator no # testvar wanNatIp 202.254.2.2 # testvar wanIspNextIp 202.254.2.3 # testvar wanAlwaysOn yes } SECTION "WAN Gateway and DHCP Relay" { # testvar wanIspGateway 10.0.0.2 # testvar wanIspAssignGateway 4.0.0.1 # testvar dhcpRelayServer 10.0.0.2 } SECTION "DHCP Server" { # testvar dhcpLeaseTime 300 # testvar dhcpServerBroadcast no # testvar dhcpServerOptionCode1 69 # testvar dhcpServerOptionData1 04040404 # testvar dhcpClientMac auto } SECTION "PPPoE Server" { # testvar pppoeUser qacafe # testvar pppoePassword qacafe123 # testvar pppoeAcName qacafe-ac # testvar pppoeServiceName any } SECTION "PPTP Server" { # testvar pptpUser qacafe # testvar pptpPassword qacafe123 # testvar pptpServerIp 202.254.202.1 # testvar pptpClientIp 202.254.202.2 } SECTION "L2TP Server" { # testvar l2tpUser qacafe # testvar l2tpPassword qacafe123 # testvar l2tpServerIp 202.254.202.1 # testvar l2tpClientIp 202.254.202.2 } SECTION "PPP Options" { # testvar pppAuthType PAP # testvar pppForceLcpMRU 1500 # testvar pppMagicNumber yes } SECTION "WAN 802.1q VLAN" { # testvar wanVlanId 100 # testvar wanVlanPriority 0 } SECTION "WAN 802.1ad VLAN" { # testvar enableVlanStacking no # testvar wanInnerVlanId 100 # testvar wanInnerVlanPriority 0 # testvar wanOuterVlanId 100 # testvar wanOuterVlanPriority 0 # testvar wanOuterVlanQinQ no } SECTION "WAN DNS" { # testvar wanDnsServer 202.254.102.1 # testvar wanBackupDnsServer 202.254.102.2 } SECTION "WAN Static Routes" { # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 # testvar staticRouteWanNextHop1 wan } } SECTION "IPv6 WAN" { # testvar ipv6WanMode DHCP # testvar ipv6PPPoEAddressMode DHCP # testvar ipv6WanIspIp 3001:0:0:2::1 # testvar ipv6WanIspAssignIp 3001:0:0:2::2 # testvar ipv6WanIspNextIp 3001:0:0:2::3 # testvar ipv6WanIspPrefixLen 64 SECTION "WAN IPv6 DNS" { # testvar ipv6WanDnsServer 3001:51a:cafe:2::2 # testvar ipv6WanBackupDnsServer 3001:51a:cafe:2::3 # testvar ipv6WanBackupDnsServer2 :: # testvar ipv6WanBackupDnsServer3 :: } SECTION "DHCPv6 Prefix Delegation" { # testvar dhcpv6WanEnablePD yes # testvar dhcpv6WanEnablePDExclude no # testvar dhcpv6WanAssignPrefix 3001:dddd:2:: # testvar dhcpv6WanAssignNextPrefix 3001:ddde:2:: # testvar dhcpv6WanAssignPrefixLen 48 } SECTION "WAN IPv6 Static Routes" { # testvar staticIpv6RouteWanNetwork1 3001::/64 # testvar staticIpv6RouteWanNextHop1 wan } } } IGNORE testvar_group wan3 { SECTION "IPv4 WAN" { SECTION "WAN Interface" { # testvar wanInterface eth2 # testvar wanMode DHCP # testvar wanIspIp 202.254.3.1 # testvar wanIspAssignIp 202.254.3.2 # testvar wanIspMask 255.255.255.0 # testvar wanDomainName qacafe.com # testvar forwardingMode route # testvar wanDutMac none # testvar wanDutClientID 01000000000001 # testvar wanAuthenticator no # testvar wanNatIp 202.254.3.2 # testvar wanIspNextIp 202.254.3.3 # testvar wanAlwaysOn yes } SECTION "WAN Gateway and DHCP Relay" { # testvar wanIspGateway 10.0.0.2 # testvar wanIspAssignGateway 4.0.0.1 # testvar dhcpRelayServer 10.0.0.2 } SECTION "DHCP Server" { # testvar dhcpLeaseTime 300 # testvar dhcpServerBroadcast no # testvar dhcpServerOptionCode1 69 # testvar dhcpServerOptionData1 04040404 # testvar dhcpClientMac auto } SECTION "PPPoE Server" { # testvar pppoeUser qacafe # testvar pppoePassword qacafe123 # testvar pppoeAcName qacafe-ac # testvar pppoeServiceName any } SECTION "PPTP Server" { # testvar pptpUser qacafe # testvar pptpPassword qacafe123 # testvar pptpServerIp 202.254.203.1 # testvar pptpClientIp 202.254.203.2 } SECTION "L2TP Server" { # testvar l2tpUser qacafe # testvar l2tpPassword qacafe123 # testvar l2tpServerIp 202.254.203.1 # testvar l2tpClientIp 202.254.203.2 } SECTION "PPP Options" { # testvar pppAuthType PAP # testvar pppForceLcpMRU 1500 # testvar pppMagicNumber yes } SECTION "WAN 802.1q VLAN" { # testvar wanVlanId 100 # testvar wanVlanPriority 0 } SECTION "WAN 802.1ad VLAN" { # testvar enableVlanStacking no # testvar wanInnerVlanId 100 # testvar wanInnerVlanPriority 0 # testvar wanOuterVlanId 100 # testvar wanOuterVlanPriority 0 # testvar wanOuterVlanQinQ no } SECTION "WAN DNS" { # testvar wanDnsServer 202.254.103.1 # testvar wanBackupDnsServer 202.254.103.2 } SECTION "WAN Static Routes" { # testvar staticRouteWanNetwork1 7.1.1.0/255.255.255.0 # testvar staticRouteWanNextHop1 wan } } SECTION "IPv6 WAN" { # testvar ipv6WanMode DHCP # testvar ipv6PPPoEAddressMode DHCP # testvar ipv6WanIspIp 3001:0:0:3::1 # testvar ipv6WanIspAssignIp 3001:0:0:3::2 # testvar ipv6WanIspNextIp 3001:0:0:3::3 # testvar ipv6WanIspPrefixLen 64 SECTION "WAN IPv6 DNS" { # testvar ipv6WanDnsServer 3001:51a:cafe:3::2 # testvar ipv6WanBackupDnsServer 3001:51a:cafe:3::3 # testvar ipv6WanBackupDnsServer2 :: # testvar ipv6WanBackupDnsServer3 :: } SECTION "DHCPv6 Prefix Delegation" { # testvar dhcpv6WanEnablePD yes # testvar dhcpv6WanEnablePDExclude no # testvar dhcpv6WanAssignPrefix 3001:dddd:3:: # testvar dhcpv6WanAssignNextPrefix 3001:ddde:3:: # testvar dhcpv6WanAssignPrefixLen 48 } SECTION "WAN IPv6 Static Routes" { # testvar staticIpv6RouteWanNetwork1 3001::/64 # testvar staticIpv6RouteWanNextHop1 wan } } } } SECTION "Additional LAN Interface Setup" { # testvar useSameLanInterface no IGNORE testvar_group lan2 { SECTION "IPv4 LAN" { SECTION "LAN Interface" { # testvar lanInterface eth1 # testvar lanMode DHCP # testvar lanClients 1 # testvar lanSecurity NONE # testvar lanIp 192.168.1.1 # testvar lanMask 255.255.255.0 # testvar lanGuestMode no SECTION "LAN Host IP" { # testvar hostIp 192.168.1.0 # testvar hostMask 255.255.255.0 # testvar hostGateway 192.168.1.1 } } SECTION "LAN DNS" { # testvar lanDnsServer 192.168.1.1 # testvar lanStaticDns no } SECTION "LAN 802.1q VLAN" { # testvar lanVlanId 100 # testvar lanVlanPriority 0 } SECTION "DHCP Client Configuration" { # testvar dhcpClientStart 192.168.1.2 # testvar dhcpClientEnd 192.168.1.254 # testvar dhcpClientLeaseTime 86400 # testvar dhcpClientExclude "192.168.1.47 192.168.1.48" # testvar dhcpClientVendorClass myIpDevice # testvar useDHCPpadding yes # testvar lanDhcpClientOptionCode1 60 # testvar lanDhcpClientOptionData1 04040404 # testvar dhcpClientOptionCode1 124 # testvar dhcpClientOptionData1 000000000401020304 # testvar dhcpExtraClientParams "69 70" SECTION "DHCP Client Reservations" { # testvar dhcpClientReservedIp1 192.168.1.10 # testvar dhcpClientReservedMac1 b0:75:0c:00:00:00 } } SECTION "802.11 Wireless" { # testvar lanSSID qa-net # testvar lanChannel auto # testvar lan80211Phy auto # testvar lanBSSID auto # testvar lan80211BandSteering none SECTION "WPA Configuration Options" { # testvar wpaMode auto # testvar wpaKey qacafe123 # testvar wpaSaePassword "sae secret" # testvar wpaKeyMgmt PSK # testvar wpaCipher auto # testvar wpaGroupCipher auto # testvar wpaPMF auto } SECTION "WEP Encryption Configuration Options" { # testvar lanWEPKey off # testvar lanWEPKeyIndex 0 } SECTION "Expected Beacon Information" { # testvar wifiBeaconWpaMode none # testvar wifiBeaconWpaKeyMgmt PSK # testvar wifiBeaconWpaCipher CCMP-128 # testvar wifiBeaconWpaGroupCipher CCMP-128 # testvar wifiBeaconPhy "n a ac" } } SECTION "LAN 802.1X" { # testvar eapType eap-tls SECTION "LAN Supplicant Credentials" { # testvar eapIdentity1 user1 # testvar eapPassword1 qacafe123 # testvar eapUserCertPath1 /usr/cdrouter/tests/user1.pem # testvar eapUserCertPassword1 qacafe123 # testvar eapUserPrivateKey1 "" } } SECTION "IPv4 Firewall and NAT" { SECTION "Static NAT" { # testvar staticNatIp 202.254.1.2 # testvar staticNatFirewall yes # testvar natMode port-restricted } SECTION "Special Application Port Triggers" { # testvar portTriggers no # testvar triggerName1 net2phone-1 # testvar triggerAddrType1 ipv4 # testvar triggerPort1 6801 # testvar triggerType1 udp # testvar triggerPublic1 30000 # testvar triggerPublicType1 both } SECTION "TCP and UDP Virtual Services (Port Mappings)" { # testvar virtualWANTransType none # testvar virtualLANTransType public SECTION "TCP Virtual Services" { # testvar virtualTcpServices no # testvar virtualTcpServicePort1 21 # testvar virtualTcpServiceHost1 192.168.1.200 # testvar virtualTcpServiceName1 ftp # testvar virtualTcpServiceLanPort1 21 } SECTION "UDP Virtual Services" { # testvar virtualUdpServices no # testvar virtualUdpServicePort1 53 # testvar virtualUdpServiceHost1 192.168.1.203 # testvar virtualUdpServiceName1 dns # testvar virtualUdpServiceLanPort1 53 } } } SECTION "LAN Static Routes" { # testvar staticRouteLanNetwork1 2.0.0.0/255.255.255.0 # testvar staticRouteLanNextHop1 192.168.1.18 } } SECTION "IPv6 LAN" { # testvar ipv6LanMode autoconf # testvar ipv6LanPrivacyAddresses no # testvar ipv6LanStaticDns no SECTION "LAN IPv6 Static Routes" { # testvar staticIpv6RouteLanNetwork1 2001::/64 # testvar staticIpv6RouteLanNextHop1 3001:dddd::1a } SECTION "LAN IPv6 DHCP Client" { # testvar dhcpv6ClientOptionRequest "21 22" # testvar dhcpv6ClientOptionCode1 39 # testvar dhcpv6ClientOptionData1 000671616361666503636f6d00 } } SECTION "Parental Controls" { # testvar internetScheduleSundayMode none # testvar internetScheduleSundayTimes "9:00am - 5:00pm" # testvar internetScheduleMondayMode none # testvar internetScheduleMondayTimes "9:00am - 5:00pm" # testvar internetScheduleTuesdayMode none # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" # testvar internetScheduleWednesdayMode none # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" # testvar internetScheduleThursdayMode none # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" # testvar internetScheduleFridayMode none # testvar internetScheduleFridayTimes "9:00am - 5:00pm" # testvar internetScheduleSaturdayMode none # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" } } } } SECTION "CDRouter Performance Add-On" { # testvar supportsPerformance no SECTION "Basic Configuration" { # testvar perfWanIp 202.254.1.4 # testvar perfWanIpv6 3001::4 # testvar perfPort 19750 # testvar perfPort2 19751 } SECTION "Performance Settings" { # testvar perfDuration 10 # testvar perfDownloadBandwidth 0.0 # testvar perfInterval auto # testvar perfIncrement 5 # testvar perfStreams 1 # testvar perfStreamIncr 0 # testvar perfUdpLen auto # testvar perfUploadBandwidth 0.0 # testvar perfLantoLanBandwidth 0.0 # testvar perfOmit 0 # testvar perfDSCP 0 # testvar perfFairness no } SECTION "WAN Download Thresholds" { # testvar perfDownloadMaxLatency 10000 # testvar perfDownloadTcpRetr any # testvar perfDownloadTcpLowThreshold 10.0 # testvar perfDownloadTcpHighThreshold 0.0 # testvar perfDownloadUdpLossPercentage 1.0 # testvar perfDownloadUdpLowThreshold 10.0 # testvar perfDownloadUdpHighThreshold 0.0 } SECTION "WAN Upload Thresholds" { # testvar perfUploadMaxLatency 10000 # testvar perfUploadTcpRetr any # testvar perfUploadTcpLowThreshold 10.0 # testvar perfUploadTcpHighThreshold 0.0 # testvar perfUploadUdpLossPercentage 1.0 # testvar perfUploadUdpLowThreshold 10.0 # testvar perfUploadUdpHighThreshold 0.0 } SECTION "LAN to LAN Thresholds" { # testvar perfLantoLanMaxLatency 10000 # testvar perfLantoLanTcpRetr any # testvar perfLantoLanTcpLowThreshold 10.0 # testvar perfLantoLanTcpHighThreshold 0.0 # testvar perfLantoLanUdpLossPercentage 1.0 # testvar perfLantoLanUdpLowThreshold 10.0 # testvar perfLantoLanUdpHighThreshold 0.0 } SECTION "Application Thresholds" { # testvar perfDHCPRenewMaxLatency 1000000 # testvar perfDHCPRestartMaxLatency 2000000 # testvar perfDNSMaxLatency 50000 } SECTION "Advanced Options" { # testvar perfPingEnable no # testvar perfEnableCapture no # testvar perfLatencyAttempts 25 # testvar perfApplicationAttempts 4 # testvar perfApplicationDelay 100 } SECTION "Wireless" { IGNORE testvar_group wireless-performance { SECTION "Performance Settings" { # testvar perfDownloadBandwidth 0.0 # testvar perfUploadBandwidth 0.0 # testvar perfLantoLanBandwidth 0.0 } SECTION "WAN Download Thresholds" { # testvar perfDownloadMaxLatency 10000 # testvar perfDownloadTcpRetr any # testvar perfDownloadTcpLowThreshold 10.0 # testvar perfDownloadTcpHighThreshold 0.0 # testvar perfDownloadUdpLossPercentage 1.0 # testvar perfDownloadUdpLowThreshold 10.0 # testvar perfDownloadUdpHighThreshold 0.0 } SECTION "WAN Upload Thresholds" { # testvar perfUploadMaxLatency 10000 # testvar perfUploadTcpRetr any # testvar perfUploadTcpLowThreshold 10.0 # testvar perfUploadTcpHighThreshold 0.0 # testvar perfUploadUdpLossPercentage 1.0 # testvar perfUploadUdpLowThreshold 10.0 # testvar perfUploadUdpHighThreshold 0.0 } SECTION "LAN to LAN Thresholds" { # testvar perfLantoLanMaxLatency 10000 # testvar perfLantoLanTcpRetr any # testvar perfLantoLanTcpLowThreshold 10.0 # testvar perfLantoLanTcpHighThreshold 0.0 # testvar perfLantoLanUdpLossPercentage 1.0 # testvar perfLantoLanUdpLowThreshold 10.0 # testvar perfLantoLanUdpHighThreshold 0.0 } SECTION "Application Thresolds" { # testvar perfDHCPRenewMaxLatency 1000000 # testvar perfDHCPRestartMaxLatency 2000000 # testvar perfDNSMaxLatency 50000 } } } } SECTION "CDRouter Security Add-On" { SECTION "Internet Connection Sharing (ICS)" { # testvar enableICS no # testvar icsInterface eth0 # testvar icsShareIPv4 yes # testvar icsShareIPv6 yes } SECTION "Traffic Analysis" { # testvar enableSuricata no } SECTION "Nmap Scans" { # testvar enableNmap no # testvar nmapPorts 0-65535 # testvar nmapScanTimeout 600 # testvar nmapTimingTemplate 5 } SECTION "Parental Controls" { # testvar internetScheduleBase auto # testvar internetScheduleTimeZone auto # testvar internetScheduleBlockedText "This website is blocked" # testvar internetScheduleSundayMode none # testvar internetScheduleSundayTimes "9:00am - 5:00pm" # testvar internetScheduleMondayMode none # testvar internetScheduleMondayTimes "9:00am - 5:00pm" # testvar internetScheduleTuesdayMode none # testvar internetScheduleTuesdayTimes "9:00am - 5:00pm" # testvar internetScheduleWednesdayMode none # testvar internetScheduleWednesdayTimes "9:00am - 5:00pm" # testvar internetScheduleThursdayMode none # testvar internetScheduleThursdayTimes "9:00am - 5:00pm" # testvar internetScheduleFridayMode none # testvar internetScheduleFridayTimes "9:00am - 5:00pm" # testvar internetScheduleSaturdayMode none # testvar internetScheduleSaturdayTimes "9:00am - 5:00pm" } } SECTION "CDRouter SNMP Add-On" { # testvar supportsSnmp no # testvar snmpPort 161 # testvar snmpDefaultUser auto # testvar snmpMibDirs "/var/lib/mibs /var/lib/my-mibs" # testvar snmpUpdateDelay 15 SECTION "SNMP Options and Users" { # testvar snmpManagerIp 3.3.3.33 # testvar snmpManagerIpv6 3001:051a:cafe::33 IGNORE testvar_group snmpuser1 { # testvar snmpVersion 2c # testvar snmpAccess read-only # testvar snmpTransport udp # testvar snmpRetries 5 # testvar snmpTimeout 5 SECTION "SNMP v1/2c Configuration" { # testvar snmpCommunity public } SECTION "SNMP v3 Configuration" { # testvar snmpSecurityLevel noAuthNoPriv # testvar snmpAuthProtocol MD5 # testvar snmpAuthUsername qacafe # testvar snmpAuthPassword qacafe123 # testvar snmpPrivacyProtocol DES # testvar snmpPrivacyPassword qacafe123 # testvar snmpContextName bridge1 # testvar snmpSecurityEngineId 800000020109840301 # testvar snmpContextEngineId 800000020109840301 } } } SECTION "SNMP Scenarios" { # testvar snmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.snmp # testvar snmpScenarioSingleMode no # testvar snmpScenarioInterface lan # testvar snmpScenarioIpVersion IPv4 } } SECTION "CDRouter Storage Add-On" { # testvar supportsStorage no # testvar storageFileSize 10 # testvar storageUserFilePath none # testvar useMulticastDNS no SECTION "SMB Options and Users" { # testvar supportsStorageSmb yes # testvar storageSmbMaxSessions 20 # testvar storageSmbTimeout 120 # testvar storageSmbPacing 0 IGNORE testvar_group smbuser1 { # testvar server MyNAS # testvar share data # testvar folder /home/qacafe # testvar guest no # testvar user qacafe # testvar password qacafe123 # testvar permission ReadWrite } } SECTION "FTP Options and Users" { # testvar supportsStorageFtp yes # testvar supportsStorageFtps yes # testvar storageFtpMaxSessions 20 # testvar storageFtpTimeout 120 # testvar storageFtpPacing 0 IGNORE testvar_group ftpuser1 { # testvar server MyNAS # testvar path /home/qacafe # testvar user qacafe # testvar password qacafe123 # testvar permission ReadWrite } } } SECTION "CDRouter TR-069 Add-On" { testvar supportsCWMP yes SECTION "Basic ACS Configuration" { # testvar acsIp 6.0.0.1 # testvar acsPort 80 testvar acsDomain acs-download.qacafe.com # testvar acsTransport http # testvar acsAuth digest # testvar acsDigestQopAuth yes # testvar acsInterface wan testvar acsDiscoveryUrl http://acs-download.qacafe.com:80/ # testvar acsWaitForInform 120 # testvar acsSkipInitialInform no # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp # testvar cwmpProtocolVersion 1.0 # testvar acsDeviceDiscovery no # testvar acsConfigurePeriodicInform yes # testvar tr69InitiateConnection yes testvar acsDefaultUser cdrouter testvar acsDefaultPassword cdrouter testvar acsCpeDefaultUser acs testvar acsCpeDefaultPassword acs # testvar acsFileServerUser file_server_user # testvar acsFileServerPassword file_server_password } SECTION "XMPP Connection Request Configuration" { # testvar acsSupportsXmppConnReq no # testvar acsXmppServerConnectAlgorithm DNS-SRV # testvar acsXmppConnReqUsername qacafe # testvar acsXmppConnReqResource cdrouter # testvar acsXmppConnReqPassword qacafe123 # testvar acsXmppConnReqUseTls no } SECTION "Advanced ACS Configuration" { # testvar acsCpeKeepAlive yes # testvar acsChunkedEncoding no # testvar acsChunkSize 64 # testvar acsAuthOncePerSession no # testvar acsCookieMode rfc6265 # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp # testvar acsNumberCpeAttempts 2 # testvar acsDelayCpeAttempts 10 # testvar acsWaitForConnectionRequest yes # testvar acsUseTcpOffload yes # testvar acsTargetDevice tr069_device2 # testvar acsDualStackIp 6000::1 # testvar acsStrictSyntaxChecking on } SECTION "SSL Configuration" { # testvar acsSslVersion tls # testvar acsCertPath /usr/cdrouter/tests/acs.cdroutertest.com.pem # testvar acsCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem # testvar acsDownloadCertPath /usr/cdrouter/tests/acs-download.cdroutertest.com.pem # testvar acsDownloadCaCertPath /usr/cdrouter/tests/acs.cdroutertest.com-ca.pem # testvar acsCipherSuite auto # testvar acsClientCaCertPath /path/to/client/ca/file } SECTION "Profiles" { # testvar cwmpSupportedDataModel auto # testvar cwmpDataValidation yes # testvar cwmpSkipParameters empty # testvar cwmpModifyParameters empty # testvar cwmpVendorSpecificParams none SECTION "Custom CWMP Profiles" { IGNORE testvar_group cwmp_profile1 { # testvar cwmpProfileName myVendorParameters # testvar cwmpProfilePath /usr/cdrouter-data/custom/myVendorParameters.cwmp # testvar cwmpProfileObject InternetGatewayDevice:1 } } } SECTION "CWMP Scenarios" { # testvar cwmpScenarioPath /usr/cdrouter-data/custom/myVendorScenario.cwmp # testvar cwmpScenarioSingleMode no # testvar cwmpScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.cwmp } SECTION "Additional TR-069 Options" { # testvar tr69DeviceType IGD # testvar tr69DeviceOui e09153 # testvar tr69DeviceSn 2673964 # testvar tr69InformTimeout 120 # testvar tr69MinPeriodicInform 60 # testvar tr69ScheduleInformRPC yes # testvar tr69UploadRPC no # testvar tr69UploadPath /tmp # testvar tr69ConfigUploadFilename vendor_configuration_file # testvar tr69LogUploadFilename vendor_log_file # testvar tr69FactoryResetRPC no # testvar tr69CpeGetRPCs no # testvar tr69ForceBoolean no # testvar tr69XMLCapturePath /tmp/tr69-xml # testvar tr69DownloadTimeout 600 # testvar tr69DownloadImage /path/to/image # testvar tr69DownloadImageVersion 1.0 # testvar tr69DownloadOriginalImage /path/to/original_image # testvar tr69RebootTimeout 300 # testvar tr69RpcTimeout 180 # testvar tr69DownloadConfig /path/to/config # testvar tr69MaxUserNameLen 256 # testvar tr69MaxPasswordLen 256 # testvar tr69MaxCpeUserNameLen 256 # testvar tr69MaxCpePasswordLen 256 # testvar tr69DUInstallImage /path/to/du.image # testvar tr69DUInstallImageVersion 1.0 # testvar tr69DUInstallImageAlternate /path/to/alternate/du.image # testvar tr69DUInstallImageAlternateVersion 1.0 # testvar tr69DUInstallUUID b1fbaaa4-44f0-11e0-94cb-001cc09333fb # testvar tr69DUChangeExecEnvRef openwrt # testvar tr69DUChangeTimeout 600 # testvar tr69WildcardPortMappingOnly no # testvar tr69PortMapDeletionDelay 15 # testvar tr69PortMapCreationDelay 0 # testvar tr69PortMapDisableDelay 15 # testvar tr69TraceRouteTimeout 120 } SECTION "TR-111 Parts 1 and 2" { # testvar supportsTr111Part1 yes # testvar supportsTr111Part2 no # testvar STUNMaximumKeepAlivePeriod 60 # testvar STUNMinimumKeepAlivePeriod 60 # testvar STUNAuth no # testvar STUNUsername qacafe # testvar STUNPassword qacafe123 # testvar acsUdpConnectionDelay 0 } SECTION "TR-143 Performance Tests" { # testvar tr143HttpDownloadSize 1000000 # testvar tr143HttpUploadSize 1000000 # testvar tr143HttpDownloadHighThreshold 0.0 # testvar tr143HttpDownloadLowThreshold 5.0 # testvar tr143HttpDownloadResponseMax 60 # testvar tr143HttpUploadHighThreshold 0.0 # testvar tr143HttpUploadLowThreshold 5.0 # testvar tr143HttpUploadResponseMax 60 } SECTION "TR-069 LAN Side Devices" { IGNORE testvar_group tr069_device2 { # testvar acsDefaultUser qacafe # testvar acsDefaultPassword qacafe123 # testvar acsCpeDefaultUser qacafe # testvar acsCpeDefaultPassword qacafe123 # testvar acsCreatePortMapOnIGD no # testvar acsPortMapPublicPort 20000 # testvar tr69DeviceOui e09153 # testvar tr69DeviceSn 2673964 # testvar tr69DeviceType IGD # testvar tr69DownloadImage /path/to/image # testvar tr69DownloadOriginalImage /path/to/original_image # testvar tr69DUInstallImage /path/to/du.image # testvar tr69DownloadConfig /path/to/config # testvar acsCpeConnReqURL http://192.168.200.2:80/cwmp # testvar acsCpeConnReqURLMapped http://5.5.5.5:5678/cwmp } } } SECTION "CDRouter USP Add-On" { # testvar supportsUSP no SECTION "Basic Controller Configuration" { # testvar uspControllerID proto::controller-id # testvar uspControllerInterface wan # testvar uspControllerIpMode ipv4-only # testvar uspControllerIpv4 6.0.0.2 # testvar uspControllerIpv6 6000::2 # testvar uspControllerPort auto # testvar uspControllerPath /controller-path # testvar uspControllerUseNonPayloadProtection no # testvar uspControllerUseSessionContext no # testvar uspControllerMTP websocket # testvar uspControllerMTPEncryption no # testvar uspControllerUSPEncryption no # testvar uspControllerDomain controller.cdroutertest.com # testvar uspSegmentationEnable no # testvar uspSegmentationSize auto # testvar uspControllerMTPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem # testvar uspControllerMTPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem # testvar uspControllerUSPCaCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com-ca.pem # testvar uspControllerUSPCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem # testvar uspControllerSenderCertPath /usr/cdrouter/tests/wildcard.cdroutertest.com.pem # testvar uspControllerVerifyRecordIntegrity no # testvar uspControllerExpiredCertPath /usr/cdrouter/tests/expired-wilcard.cdroutertest.com.pem # testvar uspControllerHost any # testvar uspControllerUsername qacafe # testvar uspControllerPassword qacafe123 } SECTION "Basic Agent Configuration" { # testvar uspAgentID proto::agent-id # testvar uspAgentIpv4 auto # testvar uspAgentIpv6 auto # testvar uspAgentPort auto # testvar uspAgentPath /agent-path # testvar uspMessageTimeout 30 # testvar uspNotificationTimeout 30 # testvar uspRebootTimeout 120 } SECTION "USP Scenarios" { # testvar uspScenarioPath /usr/cdrouter-data/custom/myUSPScenario.usp # testvar uspScenarioSingleMode no # testvar uspScenarioBootstrap /usr/cdrouter-data/custom/myBootstrapScenario.usp } SECTION "Data Model" { # testvar uspSkipParameters empty # testvar uspModifyParameters empty # testvar uspSupportedDataModel all SECTION "Custom USP Data Model" { IGNORE testvar_group usp_profile_1 { # testvar uspProfileName myVendorParameters # testvar uspProfilePath /usr/cdrouter-data/custom/myVendorParameters.xml } } } SECTION "USP Agent Data Model Configuration" { # testvar uspNestedMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. # testvar uspMultiInstancePath Device.LocalAgent.Controller.{i}.BootParameter.{i}. # testvar uspParameterPath1 Device.DeviceInfo.ModelName # testvar uspParameterPath2 Device.IP.Interface.3.Enable # testvar uspMissingParameterPath Device.DeviceInfo.DeviceCatagory # testvar uspExternallyChangeableParam Device.DeviceInfo.ProvisioningCode # testvar uspNotificationParamNewValue myCustomParameterValue # testvar uspObject1 Device.IP.Interface. # testvar uspObject2 Device.WiFi.AccessPoint. # testvar uspValidSearchPath {Device.LocalAgent.Controller.[Enable==true].} # testvar uspValidSearchPathResultParam PeriodicNotifInterval # testvar uspValidSearchPathResultValue 5000 # testvar uspFirmwareImage /path/to/firmware.bin # testvar uspOriginalFirmwareImage /path/to/firmwareOriginal.bin # testvar uspInactiveFirmwareSlot Device.DeviceInfo.FirmwareImage.1 } } SECTION "CDRouter BBF.069 Add-On" { # testvar supportsBBF069 yes SECTION "General" { SECTION "ACS URL" { # testvar bbf069ACSURL http://acs1.broadband-forum.org # testvar bbf069AlternateACSURL http://acs2.broadband-forum.org } SECTION "Security Certificates" { # testvar bbf069AlternateAcsCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCert.pem # testvar bbf069AlternateAcsCaCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs2/CDRouter_acsCaCert.pem # testvar bbf069InvalidCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCert.pem # testvar bbf069InvalidCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1invalid/CDRouter_acsCaCert.pem # testvar bbf069AncientCertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCert.pem # testvar bbf069AncientCACertPath /usr/cdrouter/tests/bbf.069/Security_Certificate/acs1expired/CDRouter_acsCaCert.pem } SECTION "HTTP Verification" { # testvar bbf069HTTPVerification no } } SECTION "Device Specific" { SECTION "General" { # testvar bbf069RootDataModel InternetGatewayDevice # testvar bbf069UnsupportedRPC ChangeDUState # testvar bbf069UploadType "1 Vendor Configuration File" # testvar bbf069ExpectedUpgradeTime 100 } SECTION "Data Model" { # testvar bbf069AddDeleteObject InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. # testvar bbf069ActiveParam InternetGatewayDevice.ManagementServer.PeriodicInformInterval # testvar bbf069ActiveParamType unsignedInt # testvar bbf069ActiveParamValue 60 # testvar bbf069CompletePath1 InternetGatewayDevice.ManagementServer.PeriodicInformInterval # testvar bbf069CompletePath1Type unsignedInt # testvar bbf069CompletePath1Value 73 # testvar bbf069CompletePath2 InternetGatewayDevice.ManagementServer.PeriodicInformEnable # testvar bbf069CompletePath2Type boolean # testvar bbf069CompletePath2Value true # testvar bbf069PartialPath InternetGatewayDevice.ManagementServer. # testvar bbf069PartialMultiPath InternetGatewayDevice.LANDevice. # testvar bbf069PartialMultiPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. # testvar bbf069PartialPathEmpty InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1.PortMapping. # testvar bbf069InvalidPath InternetGatewayDevice.ManagementServer.PeriodicInformInterv # testvar bbf069InvalidPathType unsignedInt # testvar bbf069UnwritablePath InternetGatewayDevice.DeviceInfo.Manufacturer # testvar bbf069UnwritableType string # testvar bbf069WritableString InternetGatewayDevice.Time.NTPServer1 } } }