CLI Reference Guide Clavister CorePlus - Dreamland

Transcription

CLI Reference GuideClavister CorePlusVersion: 9.15.02Clavister ABSjögatan 6JSE-89160 ÖrnsköldsvikSWEDENPhone: 46-660-299200Fax: 46-660-12250www.clavister.comPublished 2010-05-04Copyright 2010 Clavister AB

CLI Reference GuideClavister CorePlusVersion: 9.15.02Published 2010-05-04Copyright 2010 Clavister ABCopyright NoticeThis publication, including all photographs, illustrations and software, is protected underinternational copyright laws, with all rights reserved. Neither this manual, nor any of the materialcontained herein, may be reproduced without the written consent of Clavister.DisclaimerThe information in this document is subject to change without notice. Clavister makes norepresentations or warranties with respect to the contents hereof and specifically disclaims anyimplied warranties of merchantability or fitness for a particular purpose. Clavister reserves theright to revise this publication and to make changes from time to time in the content hereofwithout any obligation to notify any person or parties of such revision or changes.Limitations of LiabilityUNDER NO CIRCUMSTANCES SHALL CLAVISTER OR ITS SUPPLIERS BE LIABLE FOR DAMAGES OFANY CHARACTER (E.G. DAMAGES FOR LOSS OF PROFIT, SOFTWARE RESTORATION, WORKSTOPPAGE, LOSS OF SAVED DATA OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES)RESULTING FROM THE APPLICATION OR IMPROPER USE OF THE CLAVISTER PRODUCT ORFAILURE OF THE PRODUCT, EVEN IF CLAVISTER IS INFORMED OF THE POSSIBILITY OF SUCHDAMAGES. FURTHERMORE, CLAVISTER WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINSTCUSTOMER FOR LOSSES OR DAMAGES. CLAVISTER WILL IN NO EVENT BE LIABLE FOR ANYDAMAGES IN EXCESS OF THE AMOUNT CLAVISTER RECEIVED FROM THE END-USER FOR THEPRODUCT.2

Table of ContentsPreface . 91. Introduction . 111.1. Running a command . 111.2. Help . 121.2.1. Help for commands . 121.2.2. Help for object types . 121.3. Function keys . 131.4. Command line history . 141.5. Tab completion . 151.5.1. Inline help . 151.5.2. Autocompleting Current and Default value . 161.5.3. Configuration object type categories . 161.6. User roles . 182. Command Reference . 202.1. Configuration . 202.1.1. activate . 202.1.2. add . 202.1.3. cancel . 222.1.4. cc . 222.1.5. commit . 232.1.6. delete . 232.1.7. pskgen . 242.1.8. reject . 252.1.9. reset . 262.1.10. set . 272.1.11. show . 282.1.12. undelete . 292.2. Runtime . 312.2.1. about . 312.2.2. alarm . 312.2.3. arp . 312.2.4. arpsnoop . 322.2.5. ats . 332.2.6. blacklist . 332.2.7. buffers . 342.2.8. cam . 352.2.9. certcache . 362.2.10. cfglog . 362.2.11. connections . 362.2.12. cpuid . 372.2.13. crashdump . 382.2.14. cryptostat . 382.2.15. dconsole . 382.2.16. dhcp . 392.2.17. dhcprelay . 392.2.18. dhcpserver . 402.2.19. dns . 412.2.20. dnsbl . 412.2.21. dynroute . 422.2.22. frags . 422.2.23. ha . 432.2.24. hostmon . 442.2.25. httpalg . 442.2.26. httpposter . 452.2.27. hwaccel . 452.2.28. hwm . 453

CLI Reference Guide2.2.29. idppipes . 462.2.30. ifstat . 462.2.31. igmp . 472.2.32. ikesnoop . 482.2.33. ippool . 482.2.34. ipsecglobalstats . 492.2.35. ipseckeepalive . 492.2.36. ipsecstats . 502.2.37. ipsectunnels . 502.2.38. killsa . 512.2.39. languagefiles . 522.2.40. ldap . 522.2.41. license . 532.2.42. linkmon . 532.2.43. lockdown . 532.2.44. logout . 542.2.45. memory . 542.2.46. natpool . 552.2.47. netcon . 552.2.48. netobjects . 552.2.49. ospf . 562.2.50. pcapdump . 572.2.51. pciscan . 592.2.52. pipes . 602.2.53. pptpalg . 612.2.54. reconfigure . 612.2.55. routemon . 622.2.56. routes . 622.2.57. rtmonitor . 632.2.58. rules . 642.2.59. selftest . 652.2.60. services . 672.2.61. sessionmanager . 672.2.62. settings . 692.2.63. shutdown . 692.2.64. sipalg . 702.2.65. sshserver . 712.2.66. stats . 712.2.67. sysmsgs . 722.2.68. techsupport . 722.2.69. time . 722.2.70. uarules . 732.2.71. updatecenter . 742.2.72. userauth . 742.2.73. vlan . 752.2.74. vpnstats . 762.3. Utility . 772.3.1. ping . 772.4. Misc . 782.4.1. echo . 782.4.2. help . 782.4.3. history . 792.4.4. ls . 792.4.5. script . 803. Configuration Reference . 833.1. Access . 853.2. Address . 863.2.1. AddressFolder . 863.2.2. EthernetAddress . 883.2.3. EthernetAddressGroup . 883.2.4. IP4Address . 884

CLI Reference Guide3.2.5. IP4Group . 883.2.6. IP4HAAddress . 883.3. AdvancedScheduleProfile . 893.3.1. AdvancedScheduleOccurrence . 893.4. ALG . 903.4.1. ALG FTP . 903.4.2. ALG H323 . 913.4.3. ALG HTTP . 913.4.4. ALG POP3 . 933.4.5. ALG PPTP . 933.4.6. ALG SIP . 943.4.7. ALG SMTP . 943.4.8. ALG TFTP . 963.4.9. ALG TLS . 963.5. ARP . 983.6. BlacklistWhiteHost . 993.7. Certificate . 1003.8. Client . 1013.8.1. DynDnsClientCjbNet . 1013.8.2. DynDnsClientDyndnsOrg . 1013.8.3. DynDnsClientDynsCx . 1013.8.4. DynDnsClientPeanutHull . 1023.9. CommentGroup . 1033.10. COMPortDevice . 1043.11. ConfigModePool . 1053.12. DateTime . 1063.13. Device . 1073.14. DHCPRelay . 1083.15. DHCPServer . 1093.15.1. DHCPServerPoolStaticHost . 1093.15.2. DHCPServerCustomOption . 1103.16. DNS . 1113.17. Driver . 1123.17.1. BNE2EthernetPCIDriver . 1123.17.2. BroadcomEthernetPCIDriver . 1123.17.3. E1000EthernetPCIDriver . 1123.17.4. E100EthernetPCIDriver . 1133.17.5. IXP4NPEEthernetDriver . 1133.17.6. MarvellEthernetPCIDriver . 1143.17.7. R8139EthernetPCIDriver . 1143.17.8. R8169EthernetPCIDriver . 1143.17.9. ST201EthernetPCIDriver . 1153.17.10. TulipEthernetPCIDriver . 1153.17.11. X3C905EthernetPCIDriver . 1153.18. DynamicRoutingRule . 1173.18.1. DynamicRoutingRuleExportOSPF . 1183.18.2. DynamicRoutingRuleAddRoute . 1183.19. EthernetDevice . 1203.20. HighAvailability . 1213.21. HTTPALGBanners . 1223.22. HTTPAuthBanners . 1233.23. HTTPPoster . 1243.24. HWM . 1253.25. IDList . 1263.25.1. ID . 1263.26. IDPRule . 1273.26.1. IDPRuleAction . 1273.27. IGMPRule . 1293.28. IGMPSetting . 1313.29. IKEAlgorithms . 1323.30. Interface . 1335

CLI Reference Guide3.30.1. DefaultInterface . 1333.30.2. Ethernet . 1333.30.3. GRETunnel . 1343.30.4. InterfaceGroup . 1353.30.5. IPsecTunnel . 1353.30.6. L2TPClient . 1383.30.7. L2TPServer . 1393.30.8. LoopbackInterface . 1403.30.9. PPPoETunnel . 1413.30.10. VLAN . 1423.31. IPPool . 1443.32. IPRuleSet . 1453.32.1. IPRule . 1453.32.2. IPRuleFolder . 1473.33. IPsecAlgorithms . 1493.34. LDAPDatabase . 1503.35. LDAPServer . 1513.36. LinkMonitor . 1523.37. LocalUserDatabase . 1533.37.1. User . 1533.38. LogReceiver . 1543.38.1. EventReceiverSNMP2c . 1543.38.2. LogReceiverMemory . 1553.38.3. LogReceiverSMTP . 1553.38.4. LogReceiverSyslog . 1563.39. NATPool . 1573.40. OSPFProcess . 1583.40.1. OSPFArea . 1593.41. Pipe . 1633.42. PipeRule . 1663.43. PSK . 1673.44. RadiusAccounting . 1683.45. RadiusServer . 1693.46. RealTimeMonitorAlert . 1703.47. RemoteIDList . 1713.48. RemoteManagement . 1723.48.1. RemoteMgmtHTTP . 1723.48.2. RemoteMgmtNetcon . 1723.48.3. RemoteMgmtSNMP . 1733.48.4. RemoteMgmtSSH . 1733.49. RouteBalancingInstance . 1753.50. RouteBalancingSpilloverSettings . 1763.51. RoutingRule . 1773.52. RoutingTable . 1783.52.1. Route . 1783.52.2. SwitchRoute . 1803.53. ScheduleProfile . 1813.54. Service . 1823.54.1. ServiceGroup . 1823.54.2. ServiceICMP . 1823.54.3. ServiceIPProto . 1833.54.4. ServiceTCPUDP . 1833.55. Settings . 1853.55.1. ARPTableSettings . 1853.55.2. AuthenticationSettings . 1863.55.3. ConnTimeoutSettings . 1863.55.4. DHCPRelaySettings . 1873.55.5. DHCPServerSettings . 1873.55.6. EthernetSettings . 1883.55.7. FragSettings . 1893.55.8. HWMSettings . 1906

CLI Reference Guide3.55.9. ICMPSettings . 1913.55.10. IPsecTunnelSettings . 1913.55.11. IPSettings . 1923.55.12. L2TPServerSettings . 1933.55.13. LengthLimSettings . 1943.55.14. LocalReassSettings . 1953.55.15. LogSettings . 1953.55.16. MiscSettings . 1953.55.17. MulticastSettings . 1963.55.18. RemoteMgmtSettings . 1973.55.19. RoutingSettings . 1983.55.20. SSLSettings . 2003.55.21. StateSettings . 2003.55.22. TCPSettings . 2013.55.23. VLANSettings . 2033.56. SSHClientKey . 2043.57. ThresholdRule . 2053.57.1. ThresholdAction . 2053.58. UpdateCenter . 2073.59. UserAuthRule . 208Alphabetical Index . 2127

List of Examples1. Command option notation . 91.1. Help for commands . 121.2. Help for object types . 121.3. Command line history . 141.4. Tab completion . 151.5. Inline help . 151.6. Edit an existing property value . 161.7. Using categories with tab completion . 162.1. Create a new object . 212.2. Change context . 222.3. Delete an object . 242.4. Reject changes .

Preface Gateway. help 9