With the action table you can define actions that the LANCOM is to execute when the status of a WAN connection changes.
In LANconfig, the action table is located under
- Entry active: Activates or deactivates this entry.
- Name: Action name. This name can be referenced with the wildcard %h (hostname) in the fields Action and Result check.
- Remote site: A change in status of this remote site triggers the action defined in this entry.
- Routing tag: You can use the routing tag to specify which remote site is used when the action is applied. Of course, this site must be equipped with the appropriate routing tag.
- Lock time: Prevents this action from being repeated within the period defined here in seconds (max. 10 characters).
- Condition: Various changes in WAN-connection status can be set here, and the action is triggered when this condition occurs. Possible values are:
- Establish – the action triggers if the device has successfully established the connection.
- Disconnect without failure – the action triggers if the device itself terminates the connection (e.g. through manual disconnection or expiry of a holding time).
- End (disconnect or broken) – the action triggers as soon as the connection terminates (regardless of the reason).
- Establish failure – the action triggers if connection establishment was unsuccessful.
- Volume budget exhausted – this action executes when the specified volume is reached.
- Volume budget released – this action occurs after a state change from 'Volume exceeded' to 'Volume no longer exceeded', e.g. when you reset an exceeded volume or when the device enters a new billing period. If the volume has not been exceeded at the time of the reset, no action takes place.
- Action: This item describes the action to be executed by the device when there is a change in the status of the WAN connection. You can specify only one action per entry (max. 250 characters). Possible values are:
- exec: – This prefix initiates any command as you would enter it at the Telnet console. For example, the action exec:do /o/m/d terminates all current connections.
- dnscheck: – This prefix initiates an IPv4 DSN name resolution. For example, the action dnscheck:myserver.dyndns.org requests the IPv4 address of the indicated server.
- dnscheck6: – This prefix initiates an IPv6 DSN name resolution. For example, the action dnscheck6:myserver.dyndns.org requests the IPv6 address of the indicated server.
- http: – This prefix initiates an HTTP-get request. For example, you can use the following action to execute a DynDNS update at dyndns.org:
http://username:password@members.dyndns.org/nic/update? system=dyndns&hostname=%h&myip=%a
(The line-break is for legibility only and is not to be entered into the action.) The meaning of the place holders %h and %a is described below. - https: – Like http:, except that the connection is encrypted.
- gnudip: – This prefix initiates a request to the corresponding DynDNS server via the GnuDIP protocol. For example, you can use the following action to use the GnuDIP protocol to execute a DynDNS update at a DynDNS provider: gnudip://gnudipsrv?method=tcp&user=myserver&domn=mydomain.org&pass=password&reqc=0&addr=%a. The meaning of the place holder %a is described below.
- repeat: – This prefix together with a time in seconds repeats all actions with the condition "Establish" as soon as the connection has been established. For example, the action repeat 300 causes all of the establish actions to be repeated every 5 minutes.
- mailto: – This prefix causes an e-mail to be sent. For example, you can use the following action to send an e-mail to the system administrator as soon as a connection is terminated: mailto:admin@mycompany.com?subject=VPN connection broken at %t?body=VPN connection to branch office 1 was broken.Optional variables for the actions:
- %a – WAN IPv4 address of the WAN connection relating to the action.Important: Using the variable %z requires that you specify the IPv6 address. If you do not supply an address, the device will not execute the script.
- %z – WAN IPv6 address of the WAN connection relating to the action.
- %H – Host name of the WAN connection relating to the action.
- %h – Like %h, except the hostname is in small letters
- %c – Connection name of the WAN connection relating to the action.
- %n – Device name
- %s – Device serial number
- %m – Device MAC address (as in Sysinfo)
- %t – Time and date in the format YYYY-MM-DD hh:mm:ss
- %e – Description of the error that was reported when connection establishment failed.
- %a – WAN IPv4 address of the WAN connection relating to the action.
- Result check: You can evaluate the result of the action here to determine the number of lines to be skipped in the processing of the action table. Possible values for the actions (max. 50 characters):
- contains= – This prefix checks if the result of the action contains the defined string.
- isequal= – This prefix checks if the result of the action is exactly equal to the defined string.
- ?skipiftrue= – This suffix skips the defined number of lines in the list of actions if the result of the "contains" or "isequal" query is TRUE.
- ?skipiffalse= – This suffix skips the defined number of lines in the list of actions if the result of the "contains" or "isequal" query is FALSE.
- As with the definition of the action.
- A DNS check queries the IP address of an address in the form "myserver.dyndns.org". The check contains=%a?skipiftrue=2 allows you to skip the two following entries in the action table if the IP address found by the DNS check agrees with the current IP address (%a) of the device.
- Owner: Owner of the action. The exec actions are executed with the rights of the owner. If the owner does not have the necessary rights (e.g. administrators with write access) then the device cannot execute the action.