ZyXEL Communications ZYWALL USG CLI Manuel utilisateur

www.zyxel.com

ZyWALL (ZLD)

CLI Reference Guide

Version 2.11

6/2009

Edition 2

DEFAULT LOGIN

User Name admin

Password 1234

About This CLI Reference Guide

ZyWALL (ZLD) CLI Reference Guide 3

About This CLI Reference Guide

Intended Audience

This manual is intended for people who want to configure ZLD-based ZyWALLs via

Command Line Interface (CLI). You should have at least a basic knowledge of TCP/IP

networking concepts and topology. Generally, it is organized by feature as outlined in the web

configurator.

"This guide is intended as a command reference for a series of products.

Therefore many commands or command options in this guide may not be

available in your product. See your User’s Guide for a list of supported

features and details about feature implementation.

Please refer to www.zyxel.com or your product’s CD for product specific User Guides and

product certifications.

How To Use This Guide

1Read Chapter 1 on page 11 for how to access and use the CLI (Command Line

Interface).

2Read Chapter 2 on page 27 to learn about the CLI user and privilege modes.

3Subsequent chapters are arranged by menu item as defined in the web configurator. Read

each chapter carefully for detailed information on that menu item.

"Some features cannot be configured in both the web configurator and CLI.

CLI Reference Guide Feedback

Help us help you. Send all Reference Guide-related comments, questions or suggestions for

improvement to the following address, or use e-mail instead. . Thank you!

The Technical Writing Team,

ZyXEL Communications Corp.,

6 Innovation Road II,

Science-Based Industrial Park,

Hsinchu, 300, Taiwan.

E-mail: [email protected]

Document Conventions

ZyWALL (ZLD) CLI Reference Guide

Document Conventions

Warnings and Notes

These are how warnings and notes are shown in this User’s Guide.

1Warnings tell you about things that could harm you or your device.

"Notes tell you other important information (for example, other things you may

need to configure or helpful tips) or recommendations.

Syntax Conventions

• The ZLD-based ZyWALL may be referred to as the “ZyWALL”, the “device”, the

“system” or the “product” in this User’s Guide.

• Product labels, screen names, field labels and field choices are all in bold font.

• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]

means the “enter” or “return” key on your keyboard.

• “Enter” means for you to type one or more characters and then press the [ENTER] key.

“Select” or “choose” means for you to use one of the predefined choices.

• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,

Maintenance > Log > Log Setting means you first click Maintenance in the navigation

panel, then the Log sub menu and finally the Log Setting tab to get to that screen.

• Units of measurement may denote the “metric” value or the “scientific” value. For

example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”

or “1048576” and so on.

• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions

ZyWALL (ZLD) CLI Reference Guide 5

Icons Used in Figures

Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an

exact representation of your device.

ZyWALL Computer Notebook computer

Server Firewall Telephone

Switch Router

Document Conventions

ZyWALL (ZLD) CLI Reference Guide

Contents Overview

ZyWALL (ZLD) CLI Reference Guide 7

Contents Overview

Introduction ..............................................................................................................................9

Command Line Interface ............................................................................................................11

User and Privilege Modes ......................................................................................................... 27

Status ......................................................................................................................................... 31

Registration ............................................................................................................................... 35

Network ...................................................................................................................................43

Interfaces ................................................................................................................................... 45

Trunks ........................................................................................................................................ 75

Route ......................................................................................................................................... 81

Routing Protocol ........................................................................................................................ 87

Zones ......................................................................................................................................... 91

DDNS ........................................................................................................................................ 95

Virtual Servers ........................................................................................................................... 99

HTTP Redirect ......................................................................................................................... 103

ALG ......................................................................................................................................... 107

Firewall ..................................................................................................................................109

Firewall .....................................................................................................................................111

VPN ........................................................................................................................................119

IPSec VPN ............................................................................................................................... 121

SSL VPN ................................................................................................................................. 129

L2TP VPN ................................................................................................................................ 133

Application Patrol ................................................................................................................141

Application Patrol ..................................................................................................................... 143

Anti-X ....................................................................................................................................151

Anti-Virus ................................................................................................................................. 153

IDP Commands ....................................................................................................................... 161

Content Filtering ...................................................................................................................... 179

Anti-Spam ................................................................................................................................ 189

Device HA .............................................................................................................................199

Device HA ................................................................................................................................ 201

Contents Overview

ZyWALL (ZLD) CLI Reference Guide

Objects ..................................................................................................................................209

User/Group ...............................................................................................................................211

Addresses ................................................................................................................................ 219

Services ................................................................................................................................... 223

Schedules ................................................................................................................................ 227

AAA Server .............................................................................................................................. 229

Authentication Objects ............................................................................................................. 235

Certificates ............................................................................................................................... 237

ISP Accounts ........................................................................................................................... 243

SSL Application ....................................................................................................................... 247

System ..................................................................................................................................249

System ..................................................................................................................................... 251

System Remote Management ................................................................................................. 257

Maintenance .........................................................................................................................271

File Manager ............................................................................................................................ 273

Logs ......................................................................................................................................... 291

Reports and Reboot ................................................................................................................297

Session Timeout ...................................................................................................................... 303

Diagnostics ............................................................................................................................. 305

Maintenance Tools ................................................................................................................... 307

Watchdog Timer ........................................................................................................................311

Command List ......................................................................................................................315

List of Commands (Alphabetical) ............................................................................................. 317

PART I

Introduction

Command Line Interface (11)

User and Privilege Modes (27)

Registration (35)

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels ZyXEL Communications Porte

ZyXEL Communications

ZyXEL Communications ZyWall Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 792H Manuel utilisateur

ZyXEL Communications

ZyXEL Communications UAG Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660H Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications MAX208M Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyXEL Vantage VSG-1000 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications SBG5500 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications PRESTIGE 2302RL - Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 662H Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 660W Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWALL USG 2000 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ADSL2+ 4-port Gateway P-660H-D Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications VMG3625-T20A Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWALL USG100-Plus Manuel utilisateur

ZyXEL Communications

ZyXEL Communications N VDSL2 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications VFG6005 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Internet Security Gateway 10~100 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL USG-1000 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyWALL USG 100 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications SBG3500-N000 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660H-TX V2 - VERSION 3-40 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications SBG3300-N series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-661HNU Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-660HNU-Tx Manuel utilisateur

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur

RTA

RTA 460MCBC-N2E Fiche technique