ZyXEL Communications ZYWALL - CLI Manuel utilisateur

www.zyxel.com

ZyWALL (ZLD)

CLI Reference Guide

Version 2.20, 2.21

2/2011

Edition 3

DEFAULT LOGIN

User Name admin

Password 1234

About This CLI Reference Guide

ZyWALL (ZLD) CLI Reference Guide 3

About This CLI Reference Guide

Intended Audience

This manual is intended for people who want to configure ZLD-based ZyWALLs via

Command Line Interface (CLI). You should have at least a basic knowledge of TCP/IP

networking concepts and topology. Generally, it is organized by feature as outlined in the web

configurator.

"This guide is intended as a command reference for a series of products.

Therefore many commands or command options in this guide may not be

available in your product. See your User’s Guide for a list of supported

features and details about feature implementation.

Please refer to www.zyxel.com or your product’s CD for product specific User Guides and

product certifications.

How To Use This Guide

1Read Chapter 1 on page 11 for how to access and use the CLI (Command Line

Interface).

2Read Chapter 2 on page 27 to learn about the CLI user and privilege modes.

3Subsequent chapters are arranged by menu item as defined in the web configurator. Read

each chapter carefully for detailed information on that menu item.

"Some features cannot be configured in both the web configurator and CLI.

CLI Reference Guide Feedback

Help us help you. Send all Reference Guide-related comments, questions or suggestions for

improvement to the following address, or use e-mail instead. . Thank you!

The Technical Writing Team,

ZyXEL Communications Corp.,

6 Innovation Road II,

Science-Based Industrial Park,

Hsinchu, 300, Taiwan.

E-mail: [email protected]

Document Conventions

ZyWALL (ZLD) CLI Reference Guide

Document Conventions

Warnings and Notes

These are how warnings and notes are shown in this User’s Guide.

1Warnings tell you about things that could harm you or your device.

"Notes tell you other important information (for example, other things you may

need to configure or helpful tips) or recommendations.

Syntax Conventions

• The ZLD-based ZyWALL may be referred to as the “ZyWALL”, the “device”, the

“system” or the “product” in this User’s Guide.

• Product labels, screen names, field labels and field choices are all in bold font.

• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]

means the “enter” or “return” key on your keyboard.

• “Enter” means for you to type one or more characters and then press the [ENTER] key.

“Select” or “choose” means for you to use one of the predefined choices.

• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,

Maintenance > Log > Log Setting means you first click Maintenance in the navigation

panel, then the Log sub menu and finally the Log Setting tab to get to that screen.

• Units of measurement may denote the “metric” value or the “scientific” value. For

example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”

or “1048576” and so on.

• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions

ZyWALL (ZLD) CLI Reference Guide 5

Icons Used in Figures

Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an

exact representation of your device.

ZyWALL Computer Notebook computer

Server Firewall Telephone

Switch Router

Document Conventions

ZyWALL (ZLD) CLI Reference Guide

Contents Overview

ZyWALL (ZLD) CLI Reference Guide 7

Contents Overview

Introduction ..............................................................................................................................9

Command Line Interface ............................................................................................................11

User and Privilege Modes ......................................................................................................... 27

Object Reference ....................................................................................................................... 31

Status ......................................................................................................................................... 33

Registration ............................................................................................................................... 37

Network ...................................................................................................................................45

Interfaces ................................................................................................................................... 47

Trunks ........................................................................................................................................ 85

Route ......................................................................................................................................... 91

Routing Protocol ........................................................................................................................ 99

Zones ....................................................................................................................................... 103

DDNS ...................................................................................................................................... 107

Virtual Servers ..........................................................................................................................111

HTTP Redirect ..........................................................................................................................117

ALG ......................................................................................................................................... 121

Firewall ..................................................................................................................................125

Firewall .................................................................................................................................... 127

VPN ........................................................................................................................................135

IPSec VPN ............................................................................................................................... 137

SSL VPN ................................................................................................................................. 147

L2TP VPN ................................................................................................................................ 153

Application Patrol ................................................................................................................161

Application Patrol ..................................................................................................................... 163

Anti-X ....................................................................................................................................175

Anti-Virus ................................................................................................................................. 177

IDP Commands ....................................................................................................................... 185

Content Filtering ...................................................................................................................... 203

Anti-Spam ................................................................................................................................ 215

Device HA .............................................................................................................................225

Device HA ................................................................................................................................ 227

Contents Overview

ZyWALL (ZLD) CLI Reference Guide

Objects ..................................................................................................................................235

User/Group .............................................................................................................................. 237

Addresses ................................................................................................................................ 245

Services ................................................................................................................................... 249

Schedules ................................................................................................................................ 253

AAA Server .............................................................................................................................. 255

Authentication Objects ............................................................................................................. 263

Certificates ............................................................................................................................... 267

ISP Accounts ........................................................................................................................... 273

SSL Application ....................................................................................................................... 277

Endpoint Security ....................................................................................................................281

System ..................................................................................................................................289

System ..................................................................................................................................... 291

System Remote Management ................................................................................................. 299

Maintenance .........................................................................................................................313

File Manager ............................................................................................................................ 315

Logs ......................................................................................................................................... 333

Reports and Reboot ................................................................................................................339

Session Timeout ...................................................................................................................... 345

Diagnostics ............................................................................................................................. 347

Packet Flow Explore ................................................................................................................ 349

Maintenance Tools ................................................................................................................... 353

Watchdog Timer ....................................................................................................................... 359

Command List ......................................................................................................................363

List of Commands (Alphabetical) ............................................................................................. 365

PART I

Introduction

Command Line Interface (11)

User and Privilege Modes (27)

Object Reference (31)

Status (33)

Registration (37)

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels ZyXEL Communications Porte

ZyXEL Communications

ZyXEL Communications VMG1312-BX0D Manuel utilisateur

ZyXEL Communications

ZyXEL Communications EMG2926-Q10A Manuel utilisateur

ZyXEL Communications

ZyXEL Communications UAG4100 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HNT1 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWall USG20-VPN Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HW-Tx v3 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications USG60 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL 2WE Instructions d'installation

ZyXEL Communications

ZyXEL Communications Unified Security Gateway ZyWALL 300 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZYAIR Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWALL USG 20/20W Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications VMG3625-T20A Manuel utilisateur

ZyXEL Communications

ZyXEL Communications CNA100 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HW-Tx v3 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications SBG3310 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWALL USG 100 Plus Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P660HW-T1V3 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications 400 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-792H v2 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWALL 1050 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications VMG4927-B50A Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Unified Security Gateway ZyWALL 300 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HW-T1 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ADSL 2+ Security Gateway Manuel utilisateur

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur

RTA

RTA 460MCBC-N2E Fiche technique