Telnet Commands for a Thomson Router

Telnet commands for a Thomson TG587n v2 router
Some of these commands may work on a Thomson TG585 router

Important
Use the routers web interface to backup the router settings before playing.
Reinstalling the backup or in the worst case resetting to factory default and reinstalling the backup should get things back to how they were.
Use these commands at your own risk.

Enable Telnet in Vista or Windows 7

If using Vista or Windows 7, telnet is not enabled by default but it's very easy to do and you only need do this once.
Go to “Control Panel” > “Programs and Features” > click on “Turn windows Features On and Off” > place a tick in “Telnet Client” > click ok.

Start a telnet session to the router.

Click on "start" in the bottom left corner of the desk top, in the search box (vista) or run box (windows xp) type command then press enter.
A black command window should pop up, in here type telnet 192.168.1.254
You will be asked for your routers username and then password, it’s the same ones used to access the routers web interface.

The first thing to do is disable the routers telnet timeout.
This prevents the telnet session unexpectedly closing.

Just enter the two commands as shown above to permanently disable the timeout.

Telnet example

This example displays the IP address of the DNS resolvers held in the router.
Issue the command "dns server route list"

Make a note of the interface shown here, it will be needed in some other commands on this page.
eg. the interface shown above is O2_ADSL2plus this may not be the same as shown by your router.

Set the router to use OpenDNS

Command	Comments
dns server route list	List all DNS resolvers set in the router. ( optional )
dns server route flush	Clear
dns server route add dns=208.67.222.222 metric=5 intf=Internet	See note (1) below regarding "intf=Internet"
dns server route add dns=208.67.220.220 metric=10 intf=Internet	See note (1) below regarding "intf=Internet"
dhcp client ifdetach intf=Internet	See note below regarding "intf=Internet"
dhcp client rqoptions delete intf=Internet option=domain-name-servers	Stop the router from getting the ISP's DNS resolver via DHCP
dhcp client ifattach intf=Internet	See note (1) below regarding "intf=Internet"
dns server route list	List all DNS resolvers set in the router. (just checking)
saveall	Make the change permanent.

Undo, return to obtaining DNS resolvers via DHCP

Command	Comments
dns server route flush	Clear
dhcp client ifdetach intf=Internet	See note (1) below regarding "intf=Internet"
dhcp client rqoptions add intf=Internet option=domain-name-servers	Set the router to get the ISP's DNS resolver via DHCP
dhcp client ifattach intf=Internet	See note (1) below regarding "intf=Internet"
dns server route list	List all DNS resolvers set in the router. (just checking)
saveall	Make the change permanent.

Update OpenDNS using Dynamic DNS

Command	Comments
dyndns service list	View existing settings -- It's the "custom" section we'll be changing
dyndns service modify name=custom server=updates.dnsomatic.com updateinterval=10800	Change service provider to dnsomatic.com updateinterval is 3 hours. (10800 seconds)
saveall	Make the change permanent.

Ensure your opendns account is set to -- enable dynamic IP update
Go to www.dnsomatic.com , sign in with your OpenDNS username / password.
While there, enable update opendns.

Go to the routers web interface Toolbox > Dynamic DNS > Configure :-
Tick "Enabled"
Interface -- Internet -- See Note (1)
Username -- Opendns username
Password -- Opendns password
Service -- custom
Host -- enter your opendns network label or enter the catch all -- all.dnsomatic.com
Click "Apply"

Check the routers event log to confirm "dyndns host has been updated".

Disable telnet timeout

Command	Comments
env get var=SESSIONTIMEOUT	Check existing setting.
env set var=SESSIONTIMEOUT value=0	Disable session timeout.
saveall	Make the change permanent.

Get router stats

Command	Comments
xdsl info expand=enabled	See Telnet Scripting for a method to get these stats quick.

Force connection modulation mode to ADSL1, ADSL2 or ADSL2+ (also disable Annex M on TG587n)
A useful byproduct of this command is that it causes a resync.
ie resetting the modulation to default (ie no change) can be used to force the router to perform a resync.

Command	Comments
xdsl debug multimode	Show all enabled modes. (optional)
xdsl debug multimode config=t1.413issue2+g992.1_annex_a	This forces ADSL1 (ie g992.1 Annex A)
xdsl debug multimode config=t1.413issue2+g992.3_annex_a	This forces ADSL2 (ie g992.3 Annex A)
xdsl debug multimode config=t1.413issue2+g992.5_annex_a	This forces ADSL2+ (ie g992.5 Annex A)
xdsl debug multimode config=t1.413issue2+g992.1_annex_a+g992.3_annex_a+g992.3_annex_l+g9 92.3_annex_m+g992.5_annex_a+g992.5_annex_m	Default, all modes available.
saveall	Use one of the above commands then saveall !

DHCP Client Lease Renew

Command	Comments
dhcp client ifrenew intf=Internet	See note (1) below regarding "intf=Internet"
dhcp client iflist expand=enabled	Optional -- View DHCP Client Info

Reboot the router

Command	Comments
system reboot

Change router password -- I've found this troublesome using the web interface.

Command	Comments
user config name=SuperUser password=mypassword	Must be an existing username ie "SuperUser" or "Administrator"
user config name=Administrator password=mypassword
saveall	Don't forget this!

Spoof routers WAN MAC

Command	Comments
ip iflist expand=enabled	Show routers MAC and other stuff
ip ifdetach intf=Internet	See note (1) below regarding "intf=Internet"
ip ifconfig intf=Internet hwaddr=00:xx:xx:xx:xx:xx	See note (1) Replace "xx" with your spoof MAC
ip ifattach intf=Internet	See note (1) below regarding "intf=Internet"
saveall	Don't forget this!

Disable CWMP -- Remote management by the ISP

Command	Comments
service system list	Show if enabled or disabled.
service system modify name=CWMP-S state=disabled	Disable remote assistance from the ISP.
service system modify name=CWMP-C state=disabled	Disable checking for firmware updates etc "phone home".
saveall	Don't forget this!

Undo -- Enable CWMP -- default mode

Command	Comments
service system modify name=CWMP-S state=enabled	Return to default setting
service system modify name=CWMP-C state=enabled	Return to default setting
saveall	Don't forget this!

Enable reply to Pings from WAN

Command	Comments
service system list name=PING_RESPONDER expand=enabled	Check if "interface group" is associated with WAN (ie enabled)
service system ifadd name=PING_RESPONDER group=wan	Add to WAN "interface group" (ie enabled)
saveall	Don't forget this!

Undo -- Disable reply to Pings from WAN -- Default mode

Command	Comments
service system ifdelete name=PING_RESPONDER group=wan	Remove WAN from "interface group" (ie disabled) -- Default
saveall	Don't forget this!

Disable wireless n speed (TG587n only)

Command	Comments
wireless ifconfig	Show wireless settings (optional)
wireless ifconfig interop=802.11b/g	Disable wireless n
saveall	Don't forget this!

Undo -- Enable all wireless speeds (TG587n only)

Command	Comments
wireless ifconfig interop=802.11b/g/n	Enable wireless b, g and n -- Default
saveall	Don't forget this!

Change MTU setting

Command	Comments
ip iflist	Show present setting (optional)
ip ifconfig intf=Internet mtu=1458	See note (1) regarding "intf=Internet" -- Set MTU for WAN
ip ifconfig intf=LocalNetwork mtu=1458	Set MTU for LAN
saveall	Don't forget this!

Undo -- Return to default MTU of 1500

Command	Comments
ip ifconfig intf=Internet mtu=1500	See note (1) regarding "intf=Internet" -- Set 1500 MTU for WAN
ip ifconfig intf=LocalNetwork mtu=1500	Set 1500 MTU for LAN
saveall	Don't forget this!

Disable ethernet port

Command	Comments
eth device ifconfig intf=ethif1 state=disabled	Disable ethernet port 1. ( ethif1 = port 1, ethif2 = port 2 etc )
saveall	Don't forget this!
eth device iflist	List state of ports (optional)

Undo -- Enable ethernet port

Command	Comments
eth device ifconfig intf=ethif1 state=enabled	Enable ethernet port 1. ( ethif1 = port 1, ethif2 = port 2 etc )
saveall	Don't forget this!

Wireless MAC access control -- Block a wireless connection

Command	Comments
wireless macacl add ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx permission=allow	Change "00:xx:xx:xx:xx:xx" to the wireless MAC of the target PC . Only used once for each wireless MAC added to the list.
saveall

Use the following commands to stop or allow a wireless connection as required.

Command	Comments
wireless macacl list	Optional -- Display preset wireless MAC's
wireless macacl modify ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx permission=deny	Deny connection from the target PC -- Use when required
wireless macacl modify ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx permission=allow	Allow connection from the target PC -- Use when required

Undo -- Remove from Wireless MAC access control list

Command	Comments
wireless macacl list	Optional -- display MAC address on list
wireless macacl delete ssid_id=0 radio_id=0 hwaddr=00:xx:xx:xx:xx:xx	Remove MAC from list.
saveall	Don't forget this.

Check which devices are connected

Command	Comments
hostmgr list	Look in the "Flags" column, "C" indicates connected

Enable WPS -- This is disabled by default on some models.

Command	Comments
wireless wps config state=enabled	The WPS button should now work
saveall

Undo -- Disable WPS

Command	Comments
wireless wps config state=disabled
saveall

Syslog -- This log survives a reboot

Command	Comments
syslog msgbuf show	View router log in the telnet window.
syslog msgbuf send dest=192.168.1.67	Send all the log to syslog client at IP address
syslog msgbuf flush	Clear the log
ftp://ftp.3com.com/pub/utilbin/win32/3CSyslog.zip Link now dead, a google search will find a suitable syslog client.	Free syslog client from 3Com
syslog config activate=enabled	Enable continuous update to a syslog client.
syslog ruleadd fac=all sev=debug dest=192.168.1.67	Rule to send all the log items to syslog client at 192.168.1.67

Change the LAN IP of a Connected Device -- Static DHCP

Command	Comments
dhcp server lease list	View the pool name and MAC address of the connected device
dhcp server lease delete clientid=00:23:4d:xx:xx:xx	First delete the device. clientid = [the MAC address found above]
dhcp server lease add clientid=00:23:4d:xx:xx:xx pool=LAN_private addr=192.168.1.100 leasetime=0	clientid = [the MAC address found above] pool = [the pool name found above] addr = [the lan IP you wish to assign - range 192.168.1.65 to 252] leasetime=0 [infinite lease time]
saveall	Don't forget this.
Reboot the device to obtain the new IP address

Disable the Factory Reset Button

Caution -- If you forget the username or password you will be locked out of the router permanently.
Be very sure you know the risks before using this command.

Command
system config resetbutton=disabled
saveall

Undo -- Enable the Factory Reset Button (Default)

Command
system config resetbutton=enabled
saveall

Fix a Problem with VOIP not working

Command
connection unbind application=SIP port=5060
saveall

Undo -- Default

Command
connection bind application=SIP port=5060
saveall

Disable Intrusion Detection (IDS) May help with online game problems but reduces security.

Command
ids config state=disabled
saveall

Undo

Command
ids config state=enabled
saveall

Disable CPU Low Clock Speed -- TG587nv2
Make the router more responsive.

Command	Comments
pwr config	Optional - view state
pwr config cpu-lowspeed=disabled	Disable slow speed CPU
saveall	Make permanent

Undo -- default

Command	Comments
pwr config cpu-lowspeed=enabled	Enable slow speed CPU
saveall	Make permanent

Additional pwr config commands

Command	Comments
pwr config eco-manager=enabled / disabled	The ECO manager
pwr config cpu-microsleep=enabled / disabled	Allow the CPU to use low power instructions
pwr config cpu-lowspeed=enabled /disabled	Allows the CPU to adjust it's clock speed.
pwr config usb-controller=enabled / disabled	The USB controller
pwr config wlan-pwrcontrol=enabled / disabled	Wireless LAN power control

Cone-type NAT's for Teredo Tunneling
Required for Windows Meeting Space
The default for a Thomson router is symmetric-type NATs
UPnP needs to be enabled in the routers GUI.
Test with Microsoft's Internet Connectivity Evaluation Tool

Command
connection bind application=CONE(UDP) port=3544
saveall

Undo -- return to the default of symmetric-type NATs

Command
connection unbind application=CONE(UDP) port=3544
saveall

Log Web Site Visits

Command	Comments
dsd config state=enabled	Enable address based filtering.
dsd syslog config syslog=all	Select what to log
saveall	Make the change permanent.
dsd syslog list	Use this command to view the log. Alternatively use a syslog client as show in the syslog commands above.
syslog msgbuf flush	Empty the log. -- Optional

This may quickly fill the routers memory and cause unexpected issues.

Undo

Command	Comments
dsd syslog config syslog=none
dsd config state=disabled
saveall

SNTP -- Change time server settings

Command	Comments
sntp list	List the time servers
sntp add name=2.uk.pool.ntp.org	Add a time server. This can be done in the routers GUI
sntp delete name=2.uk.pool.ntp.org	Delete a time server. This can be done in the routers GUI
sntp config poll=360 saveall	Set poll interval to 6 hours. Default is 60 minutes.
system settime	View system time settings

Note (1) :
The "intf=Internet" part of the above commands may need to be changed depending on the routers firmware.
ie "intf=Internet" should be correct for standard firmware.
O2 supplied routers may need "intf=Internet" replacing with :-
For O2 supplied routers on a LLU connections replace with "intf=O2_ADSL2plus" or in some cases "intf=RoutedEthoA"
For O2 supplied routers on the Access service replace with "intf=O2_ADSL"
Hint - You can check which one to use for the WAN interface by looking at the results from the "dns server route list" command.
See the screen capture below, in this case it's "intf=O2_ADSL2plus".

Note (2)
To close the telnet session type -- exit -- press "enter"

Telnet Project for Thomson Routers

Telnet commands for a Thomson router

Multiple SSID -- (TG587n only)

Web Access Control Schedule (TOD) -- (TG587n only)

Web content filter

Telnet scripting

Enable WDS on a TG585v7 / TG587n

Connect Two Thomson Routers Together

Basic DMZ on a Thomson Router

Advanced DMZ on a Thomson TG587n

Forward all ports to a specific LAN IP

IP QoS

Wake on LAN from Internet

Xbox and PS3 on a Thomson router

Remote Access to a Thomson Router

Home Page

Reference

Thomson CLI Reference Guide TG587n
Thomson CLI Reference Guide TG585 v7
Technicolor Customer Release Note - Main Track R8.4.3 Maintenance 2

footer