Telnet
Commands for a Thomson / Technicolor Router
Tested on a TG587n V2 but may work on other Thomson routers
Important
Use the routers web interface to backup the router settings before
playing.
Reinstalling
the backup or in the worst case resetting to factory default and
reinstalling the backup should get things back to how they were.
Use these commands at your own risk.
Enable Telnet in Vista
or Windows 7
If using Vista or Windows 7, telnet
is not enabled by default but it's very easy to do and you only need do
this once.
Go to “Control Panel” > “Programs and Features” > click on “Turn windows
Features On and Off”
> place a tick in “Telnet Client” > click ok.
Start a telnet session
to the router.
Click on "start" in the bottom left corner of the desk top, in
the search box (vista) or run box (windows xp) type command
then press enter.
A black command window should pop up, in here
type telnet
192.168.1.254
You will be asked for your routers username and then password,
it’s the same ones used to access the routers web interface.
The first thing to do is disable the routers telnet timeout.
This prevents the telnet session unexpectedly closing.
Just enter the two commands as shown above to permanently disable the
timeout.
Telnet
example
This example displays the IP address of the DNS resolvers held in the
router.
Issue the
command "dns server
route list"
Make a note of the interface shown here, it will be needed in
some other commands on this page.
eg. the interface shown above is O2_ADSL2plus
this may not be the same as shown by your router.
Set
the router to use OpenDNS
--
R8 Firmware
| Command |
Comments |
| dns
server route list |
List all DNS resolvers set in the router. ( optional ) |
| dns
server route flush |
Clear |
| dns
server route add dns=208.67.222.222 metric=0 intf=Internet |
See
note (1) below regarding "intf=Internet" |
| dns
server route add dns=208.67.220.220 metric=0 intf=Internet |
See
note (1) below regarding "intf=Internet" |
| dns
server route list |
List
all DNS resolvers set in the router. (just checking) |
| saveall |
Make
the change permanent. |
The ISP DNS settings may creep back in over time.
A metric value of 0 has been used to give these new DNS settings
priority over any ISP settings.
eg the lower the metric the higher the priority.
Telnet script
download to configure the DNS setting for R8 and R10 firmware
http://npr.me.uk/dns-script.zip
Undo,
return to obtaining DNS resolvers via DHCP
| Command |
Comments |
| dns
server route flush |
Clear |
| dns
server route list |
List
all DNS resolvers set in the router. (just checking) |
| saveall |
Make
the change permanent.
|
May need to reboot or renew the ppp session to obtain the DNS settings.
Set
the router to use OpenDNS
--
New R10 Firmware
| Command |
Comments |
| dns
server forward dnsset list |
List all DNS resolvers set in the router. ( optional ) |
| dns
server forward dnsset flush |
Clear |
| dns
server forward dnsset add set=0 dns=208.67.222.222 metric=0
intf=Internet |
See
note (1) below regarding "intf=Internet" |
| dns
server forward dnsset add set=0 dns=208.67.220.220 metric=0
intf=Internet |
See
note (1) below regarding "intf=Internet" |
| dns
server forward dnsset list |
List
all DNS resolvers set in the router. (just checking) |
| saveall |
Make
the change permanent. |
The ISP DNS settings may creep back in over time.
A metric value of 0 has been used to give these new DNS settings
priority over any ISP settings.
eg the lower the metric the higher the priority.
Telnet
script download to configure the DNS setting for R8 and R10 firmware
http://npr.me.uk/dns-script.zip
Undo,
return to obtaining DNS resolvers via DHCP
| Command |
Comments |
| dns
server forward dnsset flush |
Clear |
| dns
server forward dnsset list |
List
all DNS resolvers set in the router. (just checking) |
| saveall |
Make
the change permanent.
|
May need to reboot or renew the ppp session to obtain the DNS settings.
Update
OpenDNS using Dynamic DNS
| Command |
Comments |
| dyndns
service list |
View
existing settings -- It's the "custom" section we'll be changing |
| dyndns
service modify name=custom server=updates.dnsomatic.com
updateinterval=10800 |
Change
service provider to dnsomatic.com
updateinterval is 3 hours. (10800 seconds) |
| saveall |
Make the change permanent. |
Ensure your opendns account is set to -- enable dynamic IP update
Go to www.dnsomatic.com , sign in with your OpenDNS username / password.
While there, enable update opendns.
Go to the routers web interface Toolbox > Dynamic DNS >
Configure :-
Tick "Enabled"
Interface
-- Internet -- See Note (1)
Username --
Opendns username
Password --
Opendns password
Service -- custom
Host --
enter your opendns network label or enter the catch all
--
Click "Apply"
Check the routers event log to confirm "dyndns host has been updated".
Disable
telnet timeout
| Command |
Comments |
| env
get var=SESSIONTIMEOUT |
Check
existing setting. |
| env
set var=SESSIONTIMEOUT value=0 |
Disable
session timeout. |
| saveall |
Make
the change permanent. |
Get
router stats
| Command |
Comments |
| xdsl
info expand=enabled |
See Telnet Scripting for a method to get these stats
quick. |
Force
connection modulation mode to ADSL1, ADSL2 or ADSL2+
(also disable Annex M)
A useful byproduct of this command is that it causes a resync.
ie resetting the modulation to default (ie no change) can be used to
force the router to perform a resync.
| Command |
Comments |
| xdsl
debug multimode |
Show
all enabled modes. (optional) |
| xdsl debug
multimode config=t1.413issue2+g992.1_annex_a |
This
forces ADSL1 (ie g992.1 Annex A) |
| xdsl debug
multimode config=t1.413issue2+g992.3_annex_a |
This
forces ADSL2 (ie g992.3 Annex A) |
| xdsl debug
multimode config=t1.413issue2+g992.5_annex_a |
This
forces ADSL2+ (ie g992.5 Annex A) |
| xdsl debug
multimode
config=t1.413issue2+g992.1_annex_a+g992.3_annex_a+g992.3_annex_l+g992.5_annex_a |
Disable
Annex M on all connection modes |
xdsl debug
multimode
config=t1.413issue2+g992.1_annex_a+g992.3_annex_a+g992.3_annex_l+g9
92.3_annex_m+g992.5_annex_a+g992.5_annex_m |
Default,
all modes available. |
| saveall |
Use
one of the above commands then saveall ! |
Drop
and Re-start ADSL (resync)
| Command |
Comments |
| xdsl config
status=down |
Drop
ADSL connection |
| xdsl config
status=up |
Raise
ADSL connection |
Drop
/ Start PPP Session
With some ISP connections this may change your gateway it may also
change your IP address.
Useful if your ISP sometimes has congested gateways.
| Command |
Comments |
| ppp ifdetach
intf=Internet |
Drop
PPP |
| ppp ifattach
intf=Internet |
Connect
PPP |
DHCP
Client Lease Renew
| Command |
Comments |
| dhcp client
ifrenew intf=Internet |
See
note (1) below regarding "intf=Internet" |
| dhcp client
iflist expand=enabled |
Optional
-- View DHCP Client Info |
Reboot
the router
| Command |
Comments |
| system reboot |
|
Change
router password -- I've found this
troublesome using the web interface.
| Command |
Comments |
| user
config name=SuperUser password=mypassword |
Must
be an existing username ie "SuperUser" or "Administrator" |
| user
config name=Administrator password=mypassword |
|
| saveall |
Don't
forget this! |
Create username with "root"
privileges.
These two methods don't work with all firmware version.
Method 1
| Command |
Comments |
script add
name=useroot command="user add name=me password=pass role=root"
|
Change
"me" and "pass" for your own username and password. |
| script run
name=useroot pars="" |
Run
the script. |
| saveall |
Don't
forget this! |
Method 2
| Commands |
Comments |
| user
flush |
Delete
all usernames and passwords |
| Exit
telnet session and start a new one. |
No
username or password needed. |
| user
add name=MyUserName password=MyPassWord role=root defuser=enabled
defremadmin=enabled deflocadmin=enabled |
Replace
MyUserName and MyPassWord
with ones of your own. |
| saveall |
Make
permanent. |
Spoof
routers WAN MAC
| Command |
Comments |
| ip
iflist expand=enabled |
Show
routers MAC and other stuff |
| ip
ifdetach intf=Internet |
See
note (1) below regarding "intf=Internet" |
| ip
ifconfig intf=Internet hwaddr=00:xx:xx:xx:xx:xx |
See
note (1) Replace "xx" with your spoof MAC |
| ip
ifattach intf=Internet |
See
note (1) below regarding "intf=Internet" |
| saveall |
Don't
forget this! |
Disable
CWMP -- Remote management by the ISP
| Command |
Comments |
| service
system list |
Show
if enabled or disabled. |
| service
system modify name=CWMP-S state=disabled |
Disable
remote assistance from the ISP. |
| service
system modify name=CWMP-C state=disabled |
Disable
checking for firmware updates etc "phone home". |
| saveall |
Don't forget this! |
Undo -- Enable CWMP -- default mode
| Command |
Comments |
| service
system modify name=CWMP-S state=enabled |
Return
to default setting |
| service
system modify name=CWMP-C state=enabled |
Return
to default setting |
| saveall |
Don't
forget this! |
Enable
reply to Pings from WAN
| Command |
Comments |
| service
system list name=PING_RESPONDER expand=enabled |
Check
if "interface group" is associated with WAN (ie enabled) |
| service
system ifadd name=PING_RESPONDER group=wan |
Add
to WAN "interface group" (ie enabled) |
| saveall |
Don't forget this! |
Undo -- Disable reply to Pings from WAN -- Default mode
| Command |
Comments |
| service
system ifdelete name=PING_RESPONDER group=wan |
Remove
WAN from "interface group" (ie disabled) -- Default |
| saveall |
Don't
forget this! |
Disable wireless n
speed
--Routers using R8 firmware
| Command |
Comments |
| wireless
ifconfig |
Show
wireless settings (optional) |
| wireless
ifconfig interop=802.11b/g |
Disable
wireless n |
| saveall |
Don't
forget this! |
Undo -- Enable all wireless
speeds
| Command |
Comments |
| wireless
ifconfig interop=802.11b/g/n |
Enable
wireless b, g and n -- Default |
| saveall |
Don't
forget this! |
Disable wireless n
speed
--Routers using R10 firmware
| Command |
Comments |
| wireless
radio interop=802.11b/g |
Disable
wireless n |
| saveall |
Don't
forget this! |
Undo -- Enable all wireless
speeds
| Command |
Comments |
| wireless
radio interop=802.11b/g/n |
Enable
wireless b, g and n -- Default |
| saveall |
Don't
forget this! |
Change wireless n speed (TG582n only)
| Command |
Comments |
| wireless
radio channelwidth=20 sgi=enabled |
Wireless
Speed 144(n) |
| wireless radio
channelwidth=20/40 sgi=disabled |
Wireless
Speed 270(n) |
| wireless radio
channelwidth=20/40 sgi=enabled |
Wireless
Speed 300(n) |
| wireless radio
channelwidth=20 sgi=disabled |
Wireless
Speed 130(n) Default |
| saveall |
Don't
forget this! |
When
in 270(n) or 300(n) mode the router is not very good at switching off
the extra channels when not needed or when it may cause interference
to other wireless access points.
For this reason please use these modes responsibly.
Wireless n tweaks (TG582n only)
Change
MTU setting
| Command |
Comments |
| ip iflist |
Show
present setting (optional) |
| ip ifconfig
intf=Internet mtu=1458 |
See
note (1) regarding "intf=Internet" -- Set MTU for WAN |
| ip ifconfig
intf=LocalNetwork mtu=1458 |
Set
MTU for LAN |
| saveall |
Don't
forget this! |
Undo
-- Return to default MTU of 1500
| Command |
Comments |
| ip ifconfig
intf=Internet mtu=1500 |
See
note (1) regarding "intf=Internet" -- Set 1500 MTU for WAN |
| ip ifconfig
intf=LocalNetwork mtu=1500 |
Set
1500 MTU for LAN |
| saveall |
Don't
forget this! |
Disable
ethernet port
| Command |
Comments |
| eth device
ifconfig intf=ethif1 state=disabled |
Disable
ethernet port 1. (
ethif1 = port 1, ethif2 = port 2 etc ) |
| saveall |
Don't
forget this! |
| eth device
iflist |
List
state of ports (optional) |
Undo
-- Enable ethernet port
| Command |
Comments |
| eth device
ifconfig intf=ethif1 state=enabled |
Enable
ethernet port 1. ( ethif1
= port 1, ethif2 = port 2 etc ) |
| saveall |
Don't
forget this! |
Wireless
MAC access control -- Block a wireless connection
First configure the
access control list by adding the device you wish to control -- only
required once for each device.
| Command |
Comments |
| wireless
macacl add ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx
permission=allow |
Change
"00:xx:xx:xx:xx:xx" to the wireless MAC of the target PC .
Only used once for each wireless MAC added to the list. |
| saveall |
|
Use the following
commands to stop or allow a wireless connection as
required.
| Command |
Comments |
| wireless
macacl list |
Optional
-- Display preset wireless MAC's |
| wireless
macacl modify ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx
permission=deny |
Deny
connection from the target PC -- Use when required |
| wireless
macacl modify ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx
permission=allow |
Allow
connection from the target PC -- Use when required |
Undo
-- Remove from Wireless
MAC access control list
| Command |
Comments |
| wireless
macacl list |
Optional
-- display MAC address on list |
| wireless
macacl delete ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx |
Remove
MAC from list. |
| saveall |
Don't
forget this. |
Check
which devices are connected
| Command |
Comments |
| hostmgr list |
Look
in the "Flags" column,
"C" indicates connected |
Enable
WPS -- This is disabled by default on some models.
| Command |
Comments |
| wireless wps
config state=enabled |
The
WPS button should now work |
| saveall |
|
Undo
-- Disable WPS
| Command |
Comments |
| wireless wps
config state=disabled |
|
| saveall |
|
Syslog
--
This log survives a reboot
| Command |
Comments |
| syslog
msgbuf show |
View
router log in the telnet window. |
| syslog
msgbuf send dest=192.168.1.67 |
Send
all the log to syslog client at IP address |
| syslog
msgbuf flush |
Clear
the log |
ftp://ftp.3com.com/pub/utilbin/win32/3CSyslog.zip
Link now dead, a google search will find a suitable syslog client. |
Free
syslog client from 3Com |
| syslog
config activate=enabled |
Enable
continuous update to a syslog client. |
| syslog
ruleadd fac=all sev=debug dest=192.168.1.67 |
Rule
to send all the log items to syslog client at 192.168.1.67 |
Change
the LAN IP of a Connected Device -- Static DHCP
| Command |
Comments |
| dhcp
server lease list |
View
the pool name and MAC address of the connected device |
| dhcp server
lease delete clientid=00:23:4d:xx:xx:xx |
First
delete the device.
clientid
= [the MAC address found above] |
| dhcp
server lease add clientid=00:23:4d:xx:xx:xx pool=LAN_private
addr=192.168.1.100 leasetime=0 |
clientid
= [the MAC address found above]
pool = [the pool name found above]
addr = [the lan IP you wish to assign - range 192.168.1.65 to 252]
leasetime=0 [infinite lease time] |
| saveall |
Don't
forget this. |
| Reboot
the device to obtain the new IP address |
|
Disable
the Factory Reset Button
Caution
-- If you
forget the username or password you will be locked out of the
router permanently.
Be very sure
you know the risks before using this command.
| Command |
| system
config resetbutton=disabled |
| saveall |
Undo
-- Enable the Factory Reset Button (Default)
| Command |
| system
config resetbutton=enabled |
| saveall |
Fix
a
Problem
with VOIP not working
| Command |
| connection
unbind application=SIP port=5060
|
| saveall |
Undo
--
Default
| Command |
| connection
bind application=SIP port=5060 |
| saveall |
Disable
Intrusion Detection (IDS)
May help with online game problems but reduces security.
| Command |
| ids
config state=disabled |
| saveall |
Undo
| Command |
| ids
config state=enabled |
| saveall |
Disable
CPU Low Clock Speed -- TG587n v2 and TG582n
Make the router more responsive.
| Command |
Comments |
| pwr
config |
Optional
- view state |
| pwr
config
cpu-lowspeed=disabled |
Disable
slow speed CPU |
| saveall |
Make
permanent |
Undo
-- default
| Command |
Comments |
| pwr
config
cpu-lowspeed=enabled |
Enable
slow speed CPU |
| saveall |
Make
permanent |
Additional
pwr config
commands
| Command |
Comments |
| pwr config
eco-manager=enabled / disabled |
The
ECO manager |
| pwr
config
cpu-microsleep=enabled / disabled |
Allow
the CPU to use low power instructions |
| pwr
config
cpu-lowspeed=enabled /disabled |
Allows
the CPU to adjust it's clock speed. |
| pwr
config
usb-controller=enabled / disabled |
The
USB controller |
| pwr
config
wlan-pwrcontrol=enabled / disabled |
Wireless
LAN power control |
Note:
There are reports that having these power settings enabled can cause
intermittent network and internet access problems.
Disabling all of these settings followed by a router reboot cured the
problem.
Awaiting more information on this issue.
Cone-type
NAT's for Teredo Tunneling
Required for Windows
Meeting Space
The default for a Thomson router is symmetric-type NATs
UPnP needs to be enabled in the routers GUI.
Test with Microsoft's Internet Connectivity Evaluation Tool
| Command |
| connection
bind application=CONE(UDP) port=3544 |
| saveall |
Undo
-- return to the default of symmetric-type NATs
| Command |
| connection
unbind application=CONE(UDP) port=3544 |
| saveall |
Log
Web Site Visits
| Command |
Comments |
| dsd
config state=enabled |
Enable
address based filtering. |
| dsd
syslog config syslog=all |
Select
what to log |
| saveall |
Make
the change permanent. |
| dsd
syslog list |
Use
this command to view the log.
Alternatively use a syslog client as show in the syslog commands above. |
| syslog
msgbuf flush |
Empty
the log. -- Optional |
This may quickly fill the routers memory and cause unexpected issues.
Undo
| Command |
Comments |
| dsd
syslog config syslog=none |
|
| dsd
config state=disabled |
|
| saveall |
|
SNTP
-- Change time server settings
| Command |
Comments |
| sntp list |
List
the time servers |
| sntp add
name=2.uk.pool.ntp.org |
Add
a time server.
This can be done in the routers GUI |
| sntp delete
name=2.uk.pool.ntp.org |
Delete
a time server.
This can be done in the routers GUI |
sntp config
poll=360
saveall |
Set
poll interval to 6 hours.
Default is 60 minutes. |
| system settime |
View
system time settings |
Unbind
the FTP ALG -- Fix access problem to a local FTP server from the
internet.
Normal port forward rules are still required.
| Command |
Comments |
connection
bindlist
|
Optional
- view the bind list |
| connection
unbind application=FTP port=21 |
Unbind
the FTP helper |
connection
bindlist
|
Optional
- view the bind list |
| saveall |
Make
permanent |
Undo
| Command |
Comments |
| connection
bind application=FTP port=21 |
Bind
the FTP helper to port 21 |
| connection
bindlist |
Optional
- view the bind list |
| saveall |
Make
permanent |
DLNA
Server (Media Sharing) Not Discovered Across LAN / WLAN.
SOLVED
This issue is present in firmware 8.2.7.7 Don't
know about other firmware versions.
| Command |
Comments |
| eth bridge
igmpsnooping config |
View
present state.
If state=enabled then apply the fix |
| eth bridge
igmpsnooping config brname=bridge state=disabled |
Apply
fix |
| saveall |
Make
permanent |
Turn Off LED Lights
| Command |
Comments |
| system qual
led value=alloff |
Turn
all LED's off |
| saveall |
Make
permanent |
Undo
-- Enable LED lights
| Command |
Comments |
| system qual
led value=unlock |
Enable
LED's |
| saveall |
Make
permanent |
Correct The Decimal (.) and Digit (,)
Separators
Some firmware versions confuse the decimal point with the comma.
| Command |
Comment |
| system locale |
Display
present settings |
| system locale
dec_symbol=. |
Assign
the decimal point |
| system locale
group_symbol=, |
Assign
the comma |
| saveall |
Make
permanent |
No Auto Retrain
Prevent reconnecting after dropping the ADSL connection
| Commands |
Comments |
| xdsl
qual freeze-showtime state=enabled |
Stop reconnecting |
| saveall |
Make permanent |
Undo
| Commands |
Comments |
| xdsl
qual freeze-showtime state=disable |
Default |
| saveall |
Make permanent |
Throttle Speed Through a Ethernet
Port -- Shaper
| Commands |
Comments |
| eth
switch shaper iflist |
Use anytime to view shaper settings
|
| eth
switch shaper ifconfig port=1 ingress=disabled shaper=0 state=enabled
speed=384000 burstsize=16 |
Ethernet port 1
Egress speed 384000 bps
|
| eth
switch shaper ifconfig port=1 ingress=enabled shaper=0 state=enabled
speed=768000 burstsize=16 |
Ethernet port 1
Ingress speed 768000 bps |
| eth
switch shaper config shaper=0 unicast=enabled multicast=enabled
broadcast=enabled control=disabled unknown=enabled discard=disabled
normalize=disabled exclude_ipg=disabled |
Configure shaper 0 to throttle on ingress, not needed
for egress
|
| saveall |
Make permanent |
Change the port and speed to suit your requirements.
Speed automatically notches in steps of 64Kbps.
Note
(1) :
The "intf=Internet"
part of the above commands may need to be changed depending on the
routers firmware.
ie "intf=Internet"
should be correct for standard firmware.
O2 supplied routers may need "intf=Internet"
replacing with :-
For O2 supplied routers on a LLU connections replace with "intf=O2_ADSL2plus"
or in some cases "intf=RoutedEthoA"
For O2 supplied routers on the Access service replace with "intf=O2_ADSL"
Hint - You can check which one to use for the WAN interface by looking
at the results from
the "dns server route
list" command.
See the screen capture below, in this case it's "intf=O2_ADSL2plus".
Note
(2)
To close the telnet session type -- exit
-- press "enter"
Thinking of
moving to PlusNet Broadband?
You can support this site by signing up via the above link.
Reference
CLI
Reference Guide TG857n v2 r8.4.3
This reference guide also shows all the hidden commands.
Source Produced by Alex
at www.modem-help.co.uk
Thomson CLI Reference Guide TG587n
Thomson CLI
Reference Guide TG585 v7
Technicolor Customer
Release Note - Main Track R8.4.3 Maintenance 2
projects
Telnet
Project for Thomson / Technicolor Routers
Telnet
commands for a
Thomson router
Change DNS Settings on a Thomson
Router -- (Two methods)
Multiple
SSID
Web Access Control Schedule (TOD)
Web
content filter
Telnet scripting
Enable
WDS
Connect
Two Thomson
Routers Together
Basic
DMZ on a Thomson Router
Advanced
DMZ on a Thomson TG587n
Forward
all ports to a specific LAN
IP
IP
QoS
Wake
on LAN from Internet
Xbox
and PS3 on a Thomson router
Remote
Access to a Thomson Router
Fix
a problem with VPN (IPSec) Connections
(Firmware Release 8.4.3
only)
Fix
a problem with VPN (PPTP) Connections
Bridge
Mode and Create a EWAN Port
Home
Page
footer
