LCOS 10.80 Reference Manual

Collapse All Expand All

LCOS – the LANCOM Operating System
- Free operating system
- Security from our own closed-source operating system
- Future-proof
- The LCOS promise
Configuration
- Ways and means of configuration
- Configuration software
  - LANconfig
  - WEBconfig
  - LANCOM Management Cloud (LMC)
  - Terminal program
  - SNMP management program
- LANCOM Layer 2 Management protocol (LL2M)
  - Introduction
  - Configuring the LL2M server
  - Commands for the LL2M client
- Saving and loading device-configuration and script files
  - Configuration management with WEBconfig and the console
  - Script management with WEBconfig and the console
  - Configuration management with LANconfig
- Alternative boot config
  - Introduction
  - Using the boot configuration
  - Storing and uploading the boot configurations
  - Deleting the boot configuration
  - Working with certificates
- FirmSafe
  - Introduction
  - Configuration
  - Toggling the active firmware via console command
  - Asymmetric FirmSafe
    - Switching over to asymmetric FirmSafe
    - Firmware upgrade with asymmetric FirmSafe
- Uploading firmware to the device via a client
  - Firmware upload via LANconfig
  - Firmware upload via WEBconfig
  - Firmware upload by terminal program
  - Firmware upload via outband with reset of the configuration
- LANCOM Auto Updater
  - Configuring the Auto Updater
- Loading files directly from/to the device via TFTP, HTTP(S) or SCP
  - Loading a file via a TFTP client
  - Loading a file via an SCP client
  - File download from a TFTP or HTTP(S) server
- Automatic upload of firmware or configuration from USB
  - Automatic upload of loader and/or firmware files
  - Automatic upload of configuration and/or script files
  - Configuring automatic uploads via USB
- Resetting the device
  - Configuring the reset button
- Managing rights for different administrators
  - Rights for the administrators
    - Access rights
    - Function rights
  - Configuring SNMP read-only access
- Device-internal SSH/SSL keys
  - Automatic generation of device-specific SSH/SSL keys
  - Manually create custom SSH keys
- SSH authentication using a public key
  - Certificate check on SSH access
  - Generating an SSH keypair with PuTTY
  - Syntax and modifying public-key users
  - Setting up a device for public-key authentication
  - Public-key authentication with PuTTY
  - Public-key authentication with LANconfig
- SSH and Telnet client in LCOS
  - Introduction
  - Syntax of SSH clients
  - Syntax of the Telnet client
  - Public keys for authentication
    - List of known SSH servers
    - Manually deleting known SSH server keys
  - Creating SSH keys in LCOS
  - Priorities for SSH authentication
  - Rights for operating the SSH/Telnet client
- Importing files by copy & paste on the CLI
- Basic HTTP file server for external storage media
  - Introduction
  - Preparing the USB storage medium
  - Determine the mount point of the USB medium in the LCOS
  - Accessing the files on a USB medium
  - Rules for directory access
  - Supported content type
- Rollout Wizard
  - Default Rollout Wizard
  - Custom Rollout Wizard
  - Activating the Rollout Wizard in WEBconfig
  - Configuration with LANconfig
  - Receiving LSR information via DHCP server (zero-touch rollout)
    - Configuring the zero-touch rollout
- TCP port tunnel
  - Configuring the TCP/HTTP tunnel
  - Create the TCP/HTTP tunnel
  - Deleting the TCP/HTTP tunnel before it expires
- The LANCOM High Availability Clustering Option
  - Setting up configuration synchronization
  - 1-Click WLC High Availability Clustering Wizard
- CPE WAN Management Protocol (CWMP)
  - Setting up CWMP with LANconfig
  - Device configuration via CWMP
- LANCOM Battery Pack
  - Configuration with LANconfig
- Setting known loopback addresses
- Configuration option for IPv4/IPv6 resolution with DNS resolutions
- Customize the management ports for device access
- Changing the SIM card PIN
LANtools
- LANconfig – configuring devices
- LANmonitor – monitoring devices on the LAN
- WLANmonitor – monitoring wireless devices
- LANtracer – tracing with LANconfig and LANmonitor
Diagnosis
- Trace information—for advanced users
- Tracing with LANmonitor
- Recording and analyzing data packets
- The SYSLOG module
- Parameter overview for the ping command
- Monitoring the switch
- Cable test
- Average value of the CPU load display
  - Introduction
  - Configuration
- Sending attachments with the mailto command
- Enhanced Sysinfo
- Bandwidth measurements with iPerf
- SLA monitoring
  - Configuring SLA monitoring with LANconfig
  - Displaying the SLA monitoring results in LANmonitor
- Layer-7 application detection
  - IPv4/IPv6 traffic accounting
Security
- Protecting the configuration
- Securing ISDN dial-in access
  - Identification control
    - Verification of user name and password
    - Number verification
  - Callback
- Location verification by ISDN or GPS
- Preventing password form fields in the browser from storing passwords
- The security checklist
Routing and WAN connections
- General information about WAN connections
  - Bridges for standard protocols
    - Which protocols are used on WAN connections?
    - Close cooperation with the router modules
  - What happens with a request from the LAN?
- IP routing
  - Routing behavior
  - Routing options
  - Prefix lists
  - The routing table
    - Administrative distance
    - Routing tables for IPv4/IPv6
      - IPv4
      - IPv6
  - Policy-based routing
    - Routing tags for VPN and PPTP connections
  - Dynamic routing with IP RIP
  - SYN/ACK speedup
    - Switch off in case of problems
- Advanced Routing and Forwarding (ARF)
  - Introduction
  - Defining networks and assigning interfaces
  - Assigning logical interfaces to bridge groups
  - Filtering protocols
  - Interfaces tags for remote sites
    - Assigning interface tags via the tag table
  - Setting the routing tag for local routes
  - Routing tags for DNS forwarding
  - Virtual routers
  - >NetBIOS proxy
- Configuring remote sites
  - Remote sites
  - Layers list
- Generic routing encapsulation (GRE)
  - Understanding the generic routing encapsulation (GRE) protocol
    - Configuring a GRE tunnel
  - Ethernet-over-GRE (EoGRE)
    - Configuring an EoGRE tunnel
    - Connecting a local interface to an EoGRE tunnel
- IP masquerading
  - Simple masquerading
  - Port forwarding (inverse masquerading)
- Demilitarized Zone (DMZ)
  - Assigning network zones to the DMZ
  - Address check with DMZ and intranet interfaces
  - Unmasked Internet access for servers in the DMZ
    - Two local networks – operating servers in the DMZ
    - Separation of intranet and DMZ
- Multi PPPoE
  - Example application: Home office with private Internet access
  - Configuration
- Load balancing
  - DSL port mapping
    - Assignment of switch ports to the DSL ports
    - Assigning MAC addresses to the DSL ports
  - DSL channel bundling (MLPPPoE)
  - Dynamic load balancing
  - Dynamic load balancing
    - Destination-based channel selection
    - Policy-based routing
  - Indirect bundling for LAN-LAN links via PPTP
  - Configuring load balancing
- SD‑WAN Dynamic Path Selection
  - Configuring Dynamic Path Selection
  - Show commands
  - Sample configurations
    - Scenario with two VPN tunnels over two different Internet connections from the branch office to the headquarters
- N:N mapping
  - Example applications
    - Network coupling
    - Remote maintenance and monitoring of networks
  - Configuration
- Select the protocol for the ADSL interface
- Connection establishment with PPP
  - The protocol
  - Everything OK? Checking the line with LCP
  - Assigning IP addresses via PPP
    - Examples
  - Settings in the PPP list
  - The meaning of the DEFAULT remote site
  - RADIUS authentication of PPP connections
    - WAN RADIUS table
  - 32 additional gateways for PPTP connections
    - Introduction
    - Configuration
- DSL connection establishment using PPTP
  - Configuring PPTP
- Permanent connection for flat rates – keep-alive
  - Configuring the keep-alive function
- Data volumes on the WAN interface
  - Configuring data volume budgets
  - Budget analysis
- Callback functions
  - Callback as per Microsoft CBCP
  - Callback, fast procedure
  - Callback as per RFC 1570 (PPP LCP extensions)
    - Configuration
  - Overview of the callback function configuration
- ISDN channel bundling with MLPPP
  - Two methods of channel bundling
  - How to configure channel bundling
- Operating a modem over the serial interface
  - Introduction
  - System requirements
  - Installation
  - Set the serial interface to modem operation
  - Configuring the modem parameters
  - Direct entry of AT commands
  - Statistics
  - Trace output
  - Configuring remote sites for V.24 WAN interfaces
  - Configuring a backup connection on the serial interface
  - Contact assignment of the LANCOM modem adapter kit
- Manual definition of the MTU
  - Configuration
  - Statistics
- WAN RIP
- The Rapid Spanning Tree Protocol
  - Classic and rapid spanning tree
  - Improvements from rapid spanning tree
  - Configuring the Spanning Tree Protocol
    - General parameters
    - Port table
  - Status reports via the Spanning Tree Protocol
- The Action table
  - Introduction
  - Actions for Dynamic DNS
  - Further example actions
    - Broken connection alert as an SMS to a mobile telephone
    - Example: Suppress messaging in case of re-connects with a DSL connection
  - Configuration
- Using the serial interface in the LAN
  - Introduction
  - Operating modes
  - Serial interface configuration
  - Configuring the COM port server
  - WAN device configuration
  - Serial connection status information
  - COM-port adapters
- Forwarding data packets from LAN via X.25 (ISDN)
- IGMP / MLD snooping
  - Introduction
  - IGMP/MLD snooping operation
  - IGMP/MLD snooping through multiple bridges
  - Configuration
  - IGMP/MLD status
- Configuring WWAN access
- Switching between mobile profiles or SIM cards
- BGPv4
  - Border Gateway Protocol version 4 (BGPv4)
    - Configuring BGPv4 with LANconfig
  - Best-path selection algorithm
    - Influencing the routing algorithm with attributes
  - Tutorial: Setting up BGPv4 under LANconfig
  - Tutorial: Setting preferences for prefixes
  - Tutorial: Setting the Community attribute
  - Tutorial: Filtering received prefixes
- OSPF
  - Setting up OSPF with LANconfig
  - Show commands via CLI
- Bidirectional Forwarding Detection (BFD)
  - Profiles
  - Key-Chains
  - Show commands via CLI
- BGP RPKI-RTR
  - Configuring RPKI
    - RPKI caches
  - The CLI show commands
- Locator / ID Separation Protocol (LISP)
  - Configuration
  - LISP tutorial
- Route monitor
  - Configuring the route monitor with LANconfig
- DSLoL for WLAN routers
IPv6
- IPv6 basics
- Basic settings
- Router-Advertisement
- DHCPv6
- IPv6 firewall
- IPv6 tunnel technologies
Firewall
- Threat analysis
- What is a firewall?
  - The tasks of a firewall
    - Checking data packets
    - Logging and alerting
  - Different types of firewalls
- The firewall in the device
- Configuring the firewall with LANconfig
  - Definition of firewall objects
  - Defining firewall rules
    - Adding a new firewall rule
    - Editing firewall rules
- Configuring firewall rules from the command line
- Firewall diagnosis
  - The firewall table
- Firewall limitations
- Protection against break-in attempts: Intrusion detection
  - Examples of attempted break-ins
    - IP spoofing
    - Port scan detection
  - Configuring the IDS
- Protection against Denial-of-Service attacks
- WAN policy-based NAT
  - Configuring policy-based NAT with firewall rules
Quality of Service
- What is QoS used for?
- Which data packets to prefer?
- The queue concept
  - Queues in the send direction
  - Queues in the receiving direction
- Reducing the packet length
- QoS parameters for Voice-over-IP applications
- QoS in send or receive direction
- QoS configuration
- QoS for WLANs according to IEEE 802.11e (WMM/WME)
Multicast routing
- General multicast show commands
- General settings
  - IPv4 filter lists
  - IPv6 filter lists
- IGMP (Internet Group Management Protocol)
- MLD (Multicast Listener Discovery)
- PIM (Protocol Independent Multicast)
- Further Multicast Protocols
  - Bonjour proxy
    - Bonjour basics
    - Configuration with LANconfig
Virtual Private Networks – VPN
- What does VPN offer?
  - Conventional network infrastructure
  - Networking via the Internet
  - Private IP addresses on the Internet?
    - Routing at the IP level with VPN
  - Secure communications via the Internet?
    - VPN – Security through encryption
    - Send your data through the tunnel – for security’s sake
- The VPN module at a glance
  - VPN example application
  - Functions of the VPN module
- VPN connections in detail
  - LAN-LAN links
    - Internet access in parallel
  - Dial-in connections (Remote Access Service)
- What is LANCOM Dynamic VPN?
  - A look at IP addressing
    - Static and dynamic IP addresses
    - Advantages and disadvantages of dynamic IP addresses
  - This is how LANCOM Dynamic VPN works
- Configuring VPN connections
  - VPN tunnel: Connections between VPN gateways
  - Set up VPN connections with the Setup Wizard
  - 1-Click-VPN for networks (site-to-site)
  - 1-Click-VPN for the LANCOM Advanced VPN Client
  - Inspecting VPN rules
  - Manually setting up VPN connections
  - IKE config mode
  - Diagnosis of VPN connections
- myVPN
  - Using the Setup Wizard in LANconfig to set up a VPN profile for the LANCOM myVPN app
  - Retrieve the VPN profile with the LANCOM myVPN app
  - Opening and closing the VPN connection on the iOS device
  - Deleting a VPN profile from the iOS device
  - Configuring the LANCOM myVPN app
- Working with digital certificates
  - Basics
    - Symmetrical encryption
    - Asymmetric encryption
    - Combination of symmetrical and asymmetrical encryption
    - Public key infrastructure
  - Advantages of certificates
  - Structure of certificates
    - Contents
    - Target application
    - Formats
    - File types
    - Validity
  - Security
  - Certificates for establishing VPN connections
  - Certificates from certificate service providers
  - Establishing a proprietary CA
  - Requesting a certificate with Stand-alone Windows CA
  - Export the certificate to a PKCS#12 file
    - Export via the Windows CLI root
  - Create certificates with OpenSSL
    - Installing OpenSSL
    - Issue a certificate for Root CA
    - Issue certificates for users or devices
  - Uploading certificates to the device
  - Saving and uploading certificates with LANconfig
  - Extended certificate support
    - Multi-level certificate hierarchies
    - Adjustable trace level for the SCEP client
  - Set up VPN connections to support certificates
  - Set up certificate-based VPN connections with the Setup Wizard
    - LAN connectivity
    - RAS connections
  - Setting up the LANCOM Advanced VPN Client for certificate connections
  - Simplified RAS with certificates
  - Simplified network connection with certificates – proadaptive VPN
  - Request certificates using CERTREQ
  - Certificate revocation list – CRL
    - Configuring the CRL function
    - CRL status display in LANmonitor
  - Wildcard matching of certificates
    - Introduction
    - Configuration
  - Diagnosis of VPN certificate connections
  - OCSP client for certificate validation
    - Introduction
- Multi-level certificates for SSL/TLS
  - Introduction
  - SSL/TLS with multi-level certificates
  - VPN with multi-level certificates
- Certificate enrollment via SCEP
  - SCEP server and SCEP client
  - Distributing certificates
  - Configuration of SCEP
  - Using smart certificates
- NAT Traversal (NAT-T)
- Extended Authentication Protocol (XAUTH)
  - Introduction
  - XAUTH in the firmware
  - Configuration of XAUTH
  - XAUTH with external RADIUS servers
- Backup via alternative VPN connection
  - Introduction
  - Backup-capable network infrastructure
  - Configuring the VPN backup
- Automatic configuration synchronization (Config Sync) with the LANCOM VPN High Availability Clustering XL option
- IPSec over HTTPS
  - Introduction
  - Configuring IPsec-over-HTTPS technology
  - Status displays of the IPsec-over-HTTPS technology
- MPPE for PPTP tunnels
- Layer-2 tunneling protocol (L2TP)
  - Configuring the L2TP tunnel
  - Authentication via RADIUS
  - Operation as an L2TP access concentrator (LAC)
  - Operation as an L2TP network server (LNS) with authentication via RADIUS
  - Operation as the L2TP network server (LNS) for RAS clients
  - Configuring a WLAN scenario for bridging payload data to the central site
- Specific examples of connections
  - Static / static
  - Dynamic / static
  - Static / dynamic (with LANCOMDynamic VPN)
  - Dynamic / dynamic (with LANCOMDynamic VPN)
  - VPN connections: High availability with load balancing
    - Multiple VPN gateway addresses
    - Grouping and prioritization of alternative gateways
- How does VPN operate?
  - IPsec – the foundation of VPN
    - Security in an IP environment
  - Alternatives to IPsec
- The standards behind IPsec
  - IPsec modules and their tasks
  - Security Associations – numbered tunnels
  - Encryption of the packets – the ESP protocol
  - Key management – IKE
    - Establishing an SA with ISAKMP/Oakley
    - The regular exchange of new keys
  - Replay detection
- IKEv2
  - Configuring IKEv2 with LANconfig
  - Two-factor authentication in the VPN
    - Configuration with LANconfig
  - RADIUS support for IKEv2
  - Tutorial: Setting up IKEv2 under LANconfig
  - Tutorial: Setting up a certificate-based IKEv2 VPN connection (RSA)
  - Tutorial: Setting up a certificate-based IKEv2 VPN connection (digital signature)
  - Tutorial – EAP client at an EAP server
- LANconfig application concepts
  - 1-Click-VPN for networks (site-to-site)
  - 1-Click-VPN for the Advanced VPN Client
Virtual LANs (VLAN)
- What is a virtual LAN?
- VLAN and how it works
- Configuration of VLANs
- Configurable VLAN IDs
- VLAN tags on layer 2/3 in the Ethernet
  - Introduction
  - Configuring VLAN tagging on layer 2 / 3
Wireless LAN – WLAN
- Introduction
- Application scenarios
- WLAN standards
- WLAN security
- LANCOM Active Radio Control (ARC)
- Dynamic frequency selection (DFS)
  - DFS configuration
- APSD – Automatic Power Save Delivery
- WLAN routing (isolated mode)
- IEEE 802.11e user priority converted into VLAN tags
- Establishing WLAN bridges
- Adaptive transmission power
- Opportunistic key caching (OKC)
  - Encrypted OKC via IAPP
- Fast roaming
  - Fast roaming with IAPP
- Bandwidth limitations in the WLAN
- Redundant connections using PRP
- Automatic adjustment of multicast and broadcast transmission rates
- LANCOM "Wireless Quality Indicators" (WQI)
- Configuring the WLAN parameters
- Configuring the client mode
WLAN management
- Initial situation
- Technical concepts
- Basic configuration of the WLAN controller function
- Configuration
- Access point administration
- AutoWDS – wireless integration of APs via P2P connections
- Central firmware and script management
  - General settings for firmware management
- RADIUS
- Displays and commands in LANmonitor
- RF optimization
  - Group-related radio field optimization
- Client steering by WLC
  - Configuration
- Channel-load display in WLC mode
- Backing up the certificates
- Backup solutions
- Automatic configuration synchronization (Config Sync) with the LANCOM WLC High Availability Clustering XL option
  - Special LANconfig icon for devices in a cluster or using Config Sync
  - Special LANmonitor icon for devices in a cluster or using Config Sync
Public Spot
- Introduction
- Setup and operation
- Access to the Public Spot
- Tutorials for setting up and using Public Spots
- XML interface
- Appendix
  - Commonly transmitted RADIUS attributes
    - Messages to and from the authentication server
      - Transferred attributes
      - Processed attributes
    - Messages to/from the accounting server
      - Transferred attributes
      - Processed attributes
  - RADIUS attributes transmitted via WISPr
 Voice over IP – VoIP
- Introduction
- VoIP implementation in LANCOM VoIP routers
  - Example applications
  - The central position of the LANCOM VoIP router
    - Users and lines
- Call switching: Call routing
- Configuring the VoIP parameters
- Call Manager Configuration
- Telephony (PBX) functions in LANCOM VoIP routers
- VoIP media proxy – Optimized management for SIP connections
- SIP-ID as switchboard number with trunk lines
- Switching at the SIP provider
- SIP Application Layer Gateway (SIP ALG)
  - Properties
  - Configuration
- Restricting or preventing SIP registration over WAN
- Certificates for encrypted telephony
- Handling canonical telephone numbers
- Processing Destination Domains
  - Registration at upstream exchanges
  - Switching internal calls
- Configuring the ISDN interfaces
- Configuration examples
- Diagnosis of VoiP connections
  - SIP traces
  - Connection diagnosis with LANmonitor
- VoSIP support in the Voice Call Manager
- Auto provisioning LANCOM DECT 510 IP
  - Configuring DECT base stations and handsets with LANconfig
Backup solutions
- High availability of networks
- Backup solutions and load balancing with VRRP
- Interface bundling with LACP
  - Configuring the LACP interfaces
- Support for vRouter redundancy in Amazon AWS
RADIUS
- How RADIUS works
- Using RADIUS to login to the LCOS management GUI
- RADIUS as authenticator or network access server (NAS)
- RADIUS server
- RADIUS attributes
  - RADIUS attributes configurable
  - RADIUS attribute extensions for IPv6 RAS services
- Dynamic Peer Discovery
- Dynamic authorization by RADIUS CoA (Change of Authorization)
  - Configuring dynamic authorization with LANconfig
- RADSEC
  - Configuring RADSEC for the client
    - Device as a RADIUS client
    - Device as a RADIUS server
  - Certificates for RADSEC
IoT – the Internet of Things
- Wireless ePaper
  - Settings for Wireless ePaper
- iBeacon
- BLE scanner and beacon
  - Settings for BLE
  - Monitoring
    - Monitoring on the CLI
    - Monitoring with LANmonitor
Other services
- Automatic IP address administration with DHCP
  - Introduction
  - Configuring DHCPv4 parameters with LANconfig
  - Configuring DHCP clients
  - DHCP-client option Classless Static Route
  - DHCP relay server
    - DNS resolution of names learned via DHCP
  - Displaying status information from the DHCP server
  - DHCP cluster
  - Alternative DHCP server for forwarding
  - DHCP snooping and DHCP option 82
  - Assigning IP addresses based on DHCP option 82
  - Delivering LANCOM Management Cloud parameters with the DHCP server
    - Configuration
- Domain Name Service (DNS)
  - What does a DNS server do?
    - How does the DNS server react to a request?
  - DNS forwarding
    - Special DNS forwarding
    - General DNS forwarding
  - Setting up the DNS server
  - Logging DNS queries with SYSLOG
  - URL blocking
  - DNS filter for DNS data tunnels
  - Dynamic DNS
    - How to deposit the current IP address at the Dynamic DNS server?
- Accounting
  - Operating principles
  - Switching accounting on or off on the fly
  - Data traffic counting
  - Configuring accounting
- Call charge management
  - Connection limits for DSL and cable modem
  - Charge-based ISDN connection limits
  - Time dependent ISDN connection limit
  - Settings in the charge module
- Time server for the local net
  - Configuring the time server under LANconfig
  - Configuring the NTP client
    - User-defined daylight-saving time change
  - Obtaining the device time via GPS
- Scheduled Events
  - Regular Execution of LCOS-Commands
  - CRON jobs with time delay
  - Configuring the scheduler
- PPPoE Servers
  - Introduction
  - PPPoE can only be used on a network segment.
  - Example application
  - Configuration
  - PPPoE snooping
- Simple Network Management Protocol (SNMP)
  - SNMPv3 basics
  - Configuring SNMP
    - SNMP settings
      - Traps
- Netflow / IPFIX
  - Configuring NetFlow / IPFIX
- Operating printers at the USB connector of the device
  - Configuring the printer server in the device
    - Access list
    - Printer
  - Printer configuration at the computer
- LANCOM Content Filter
  - Introduction
  - Requirements for using the LANCOM Content Filter
  - Quick start
  - Standard settings in the LANCOM Content Filter
  - General settings
  - Settings for blocking
    - Block text
    - Error text
  - Override settings
    - Override text
  - Profiles in the LANCOM Content Filter
  - Options for the LANCOM Content Filter
  - Additional settings for the LANCOM Content Filter
    - Firewall settings for the content filter
    - Timeframe
- BPjM module
  - Recommendations for use
  - Menu action to delete the BPjM signature definition
- TACACS+
  - Introduction
  - Configuring the TACACS+ parameters
  - Configuring the TACACS+ server
  - Login to the TACACS+ server
  - Assigning rights under TACACS+
  - Authorizing functions
  - Bypassing TACACS+
    - Introduction
    - Configuration
- LLDP
  - How it works
  - Structure of LLDP messages
  - Supported operating systems
- Sending and receiving SMS text messages
  - Receiving SMS text messages
  - Basic configuration of the SMS module
  - Managing SMS text messages with LANmonitor
  - Sending SMS text messages with LANmonitor
  - URL placeholder for sending SMS
  - Character set for sending SMS
  - Execute actions on incoming SMS
- Deactivating device LEDs – boot-persistent
- 802.1X authenticator for Ethernet ports
- xDSL Interface
  - ADSL/VDSL modem operation (bridge mode)
  - Further XDSL settings
- GPON support
- ACME-Client
  - ACME client configuration
Appendix
- CRON syntax