Configuration

With the Action table you can define actions that the device executes when the status of a WAN connection changes.

In LANconfig, the Action table is located under Communication > General > Action table

Entry active

Activates or deactivates this entry.

Name

Action name. This name can be referenced with the wildcard %h (hostname) in the fields Action and Result check.

Remote site

A change in status of this remote site triggers the action defined in this entry.

Routing tag

You can use the routing tag to specify which remote site the device uses when the action is applied. Of course, this site must be equipped with the appropriate routing tag.

Block time

Prevents this action from being repeated within the period defined here in seconds (max. 10 characters).

Condition

Various changes in WAN-connection status can be set here, and the action is triggered when this condition occurs. Possible values are:

Establish

The action triggers if the device has successfully established the connection.

Disconnect without failure

The action triggers if the device itself terminates the connection (e.g. through manual disconnection or expiry of a holding time).

End (disconnect or broken)

The action triggers as soon as the connection terminates (regardless of the reason).

Broken with failure

This action is triggered on disconnects that were not initiated or expected by the device.

Establish failure

The action triggers if connection establishment was unsuccessful.

Volume budget exhausted

This action executes when the specified volume is reached.

Volume budget released

This action occurs after a state change from "Volume exceeded" to "Volume no longer exceeded", e.g. when you reset an exceeded volume or when the device enters a new billing period. If the volume has not been exceeded at the time of the reset, no action takes place.

Action

This item describes the action to be executed by the device when there is a change in the status of the WAN connection. You can specify only one action per entry (max. 250 characters). For each of the following values, the colon (:) is part of the action value. Possible values are:

exec:

This prefix initiates any command as you would enter it at the CLI. For example, the action exec:do /o/m/d terminates all current connections.

dnscheck:

This prefix initiates an IPv4 DSN name resolution. For example, the action dnscheck:myserver.dyndns.org requests the IPv4 address of the indicated server.

dnscheck6:

This prefix initiates an IPv6 DSN name resolution. For example, the action dnscheck6:myserver.dyndns.org requests the IPv6 address of the indicated server.

http:

This prefix initiates an HTTP-get request. For example, you can use the following action to execute a DynDNS update at dyndns.org:

http://username:password@members.dyndns.org/nic/update?system=dyndns&hostname=%h&myip=%a

The meaning of the place holders %h and %a is further below.

https:

Like http:, except that the connection is encrypted.

gnudip:

This prefix initiates a request to the corresponding DynDNS server via the GnuDIP protocol. For example, you can use the following action to use the GnuDIP protocol to execute a DynDNS update at a DynDNS provider:

gnudip://gnudipsrv?method=tcp&user=myserver&domn=mydomain.org&pass=password&reqc=0&addr=%a

The meaning of the place holder %a is described below.

repeat:

This prefix together with a time in seconds repeats all actions with the condition "Establish" as soon as the connection has been established. For example, the action repeat 300 causes all of the establish actions to be repeated every 5 minutes.

mailto:

This prefix causes an e‑mail to be sent. For example, you can use the following action to send an e‑mail to the system administrator as soon as a connection is terminated: mailto:admin@mycompany.com?subject=VPN connection broken at %t?body=VPN connection to branch office 1 was broken.

Optional variables for the actions:

%a

WAN IPv4 address of the WAN connection relating to the action.

Note:

If the string &myip=%a is removed from the entries in the Action table, the DynDNS provider uses the public IP address of the packet from which the request originates. This is especially useful in scenarios where an Internet connection with an IP address from a private IP address range is used.

%x

The current IPv6 LAN prefix as a string in the format "fd00:0:0:1::/64"

%{xnetwork name}

For example %{xTEST-NET} for the current IPv6 LAN prefix of the TEST-NET network as a string in the format "fd00:0:0:1::/64".

Note: The variable %x only transmits the values of the network with the fixed name INTRANET. This can also be used to transmit the LAN network name that will be used for this variable.

%y

The current IPv6 LAN address of the device as a string in the format "fd00::1:2a0:57ff:fa1b:9d7b".

%{ynetwork name}

For example %{yTEST-NET} for the current IPv6 LAN address of the device in the TEST-NET network as a string in the format "fd00::1:2a0:57ff:fa1b:9d7b".

Note: The variable %y only transmits the values of the network with the fixed name INTRANET. This can also be used to transmit the LAN network name that will be used for this variable.

%z

WAN IPv6 address of the WAN connection relating to the action.

%H

Host name of the WAN connection relating to the action.

%h

Like %h, except the hostname is in small letters.

%c

Connection name of the WAN connection relating to the action.

%n

The device name.

%s

The device serial number.

%m

Device MAC address (as in Sysinfo)

%t

Time and date in the format "YYYY-MM-DD hh:mm:ss".

%e

Description of the error that was reported when connection establishment failed.

Important: Using the variable %z requires that you specify the IPv6 address. If you do not supply an address, the device will not execute the script.

Important: The variable %z is available only for native IPv6 WAN connections and not for tunnel connections (6to4, 6in4, 6rd).

You can inspect the outcome of the actions in the field Result check.

Result check

You can evaluate the result of the action here to determine the number of lines to be skipped in the processing of the action table. Possible values for the actions (max. 50 characters):

contains=

This prefix checks if the result of the action contains the defined string.

isequal=

This prefix checks if the result of the action is exactly equal to the defined string.

?skipiftrue=

This suffix skips the defined number of lines in the list of actions if the result of "contains" or "isequal" is TRUE.

?skipiffalse=

This suffix skips the defined number of lines in the list of actions if the result of "contains" or "isequal" is FALSE.

The optional variables for the actions are the same as for the actions above. Example: A DNS check queries the IP address of an address in the form "myserver.dyndns.org". The check contains=%a?skipiftrue=2 allows you to skip the two following entries in the action table if the IP address found by the DNS check agrees with the current IP address (%a) of the device.

Owner

Owner of the action. The exec actions are executed with the rights of the owner. If the owner does not have the necessary rights (e.g. administrators with write access) then the device cannot execute the action.

Comment

Enter a descriptive comment for this entry.