D-Link NetDefend
Internet Security Firewall
CLI Reference Guide
Version 1.0
Revised: 01/17/06
COPYRIGHT & TRADEMARKS
Copyright © 2005 SofaWare, All Rights Reserved. No part of this
document may be reproduced in any form or by any means withou t
written permission from SofaWare.
Information in this document is subject to change without notice and
does not represent a commitment on part of SofaWare Technologies
Ltd.
SofaWare, Safe@Home and Safe@Office are trademarks, service
marks, or registered trademarks of SofaWare Technologies Ltd.
Check Point, the Check Point logo, FireWall-1, FireWall-1
SecureServer, FireWall-1 SmallOffice, FloodGate-1, INSPECT, IQ
Engine, Meta IP, MultiGate, Open Security Extension, OPSEC,
Provider-1, SecureKnowledge, SecureUpdate, SiteManager-1, SVN,
UAM, User-to-Address Mapping, UserAuthority, Visual Policy
Editor, VPN-1, VPN-1 Accelerator Card, VPN-1 Gateway, VPN-1
SecureClient, VPN-1 SecuRemote, VPN-1 SecureServer, and VPN-1
Edge are trademarks, service marks, or registe red tra dem arks of Chec k
Point Software Technologies Ltd. or its affiliates.
All other product names mentioned herein are trademarks or registered
trademarks of their respective owners.
The products described in th is document are protected by U .S. Patent
No. 5,606,668 and 5,835,726 and may be protected by other U.S.
Patents, foreign patents, or pending applications.
GNU GENERAL PUBLIC LICENSE
Version 2, June 1991
Copyright © 1989, 1991 Free Software Foundation, Inc.
59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
Everyone is permitted to copy and distribute verbatim copies of this
license document, but changing it is not all ow ed.
PREAMBLE
The licenses for most software are designed to take aw ay your
freedom to share and change it. By contrast, the GNU General Public
License is intended to guarantee your freedom to share and change
free software--to make sure the software is free for all its users. This
General Public License applies to most of the Free Software
Foundation's software and to any other program whose authors
commit to using it. (Some other Free Software Foundation software is
covered by the GNU Library General Public License instead.) You
can apply it to your program s, too.
When we speak of free software, we are referring to freedom, not
price. Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
this service if you wish), that you receive source code or can get it if
you want it, that you can change the software or use pieces of it in new
free programs; and that you know you can do these things.
To protect your rights, we need to make restrictions that forbid anyone
to deny you these rights or to ask you to surrender the rights. These
restrictions translate to certain responsibilities for you if you distribute
copies of the software, or if you modify it.
For example, if you distribute copies of such a program, whether
gratis or for a fee, you must give the recipients all the rights that you
have. You must make sure that they, too, receive or can get the source
code. And you must show them these terms so they know their rights.
We protect your rights with two steps: (1) copyright the software, and
(2) offer you this license which gives you legal permissio n to copy,
distribute and/or modify the software.
Also, for each author's protection and ours, we want to make certain
that everyone understands that there is no warranty for this free
software. If the software is modified by someone else and passed on,
we want its recipients to know that what they have is not the original,
so that any problems introd uced by others will not reflect on the
original authors' reputations.
Finally, any free program is threatened constantly by software patents.
We wish to avoid the danger that r e distributors of a free program will
individually obtain patent licenses, in effect making the program
proprietary. To prevent this, we have made it clear that any patent
must be licensed for everyone's free use or not licensed at all.
The precise terms and conditions for copying, distribution and
modification follow.
GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS
FOR COPYING, DISTRIBUTION AND MODIFICATION
0. This License applies to any program or other work which
contains a notice placed by the copyright holder saying it may be
distributed under the terms of this General Public License. The
"Program", below, refers to any such program or work, and a "work
based on the Program" means either the Program or any derivative
work under copyright law: that is to say, a work containing the
Program or a portion of it, either verbatim or with modifications
and/or translated into another language. (Hereinafter, translation is
included without limitation in the term "modification".) Each licensee
is addressed as "you".
Activities other than copy ing, distribution and modification are not
covered by this License; they are outside its scope. The act of running
the Program is not restricted, and the output from the Program is
covered only if its contents constitute a work based on the Program
(independent of having been made by running the Program). Whether
that is true depends on what the Program does.
1. You may copy and distribute verbatim copies of the Program's
source code as you receive it, in any medium, provided that you
conspicuously and appropriately publish on each copy an appropriate
copyright notice and disclaimer of warranty; keep intact all the notices
that refer to this License and to the absence of any warranty; and give
any other recipients of the Program a copy of this License along with
the Program.
You may charge a fee for the physical act of transferring a copy, and
you may at your option offer warranty protection in exchange for a
fee.
2. You may modify your copy or copies of the Program or any
portion of it, thus form ing a work based on the Program, and copy and
distribute such modifications or work under the terms of Section 1
above, provided that you also meet all of these conditions:
a) You must cause the modified files to carry prominent
notices stating that you changed the files and the date of
any change.
b) You must cause any work that you distribute or publish,
that in whole or in part contains or is derived from the
Program or any part thereof, to be licensed as a whole at
no charge to all third partie s under the terms of this
License.
c) If the modified program normally reads commands
interactively when run, you must cause it, when started
running for such interactive use in the most ordinary way,
to print or display an announcement including an
appropriate copyright notice and a notice that there is no
warranty (or else, saying that you provide a warranty) and
that users may redistribute the program under these
conditions, and telling the user how to view a copy of this
License. (Exception: if the Program itself is interactive but
does not normally print such an announcement, your work
based on the Program is not requ ired to print an
announcement.)
These requirements apply to the modified work as a whole. If
identifiable sections of that work are not derived from the Program,
and can be reasonably considered independent and separate works in
themselves, then this License, and its terms, do not apply to those
sections when you distribu te them as separate works. But when you
distribute the same sections as part of a whole which is a work based
on the Program, the distribution of the whole must be on the terms of
this License, whose permissions for other licensees extend to the
entire whole, and thus to each and every part regardless of who wrote
it.
Thus, it is not the intent of this section to claim rights or contest your
rights to work written entirely by you; rather, the intent is to exercise
the right to control the distribution of derivative or collective works
based on the Program.
In addition, mere aggregation of another work not based on the
Program with the Program (or with a work based on the Program) on a
volume of a storage or distribution medium does not bring the other
work under the scope of this License.
3. You may copy and distribute the Program (or a work based on it,
under Section 2) in object code or executable form under the terms of
Sections 1 and 2 above provided that you also do one of the following :
a) Accompany it with the complete corresponding
machine-readable source code, which must be distributed
under the terms of Sections 1 and 2 above on a medium
customarily used for software interchange; or,
b) Accompany it with a written offer, valid for at least
three years, to give any third party, for a charge no more
than your cost of physically performing source
distribution, a complete machine-readable copy of the
corresponding source code, to be distributed under the
terms of Sections 1 and 2 above on a medium customarily
used for software interchange; or,
c) Accompany it with the information you received as to
the offer to distribute corresponding source code. (This
alternative is allowed only for noncommercial distribution
and only if you received the program in object code or
executable form with such an offer, in accord with
Subsection b above.)
The source code for a work means the preferred form of the work for
making modifications to it. For an executable work, complete source
code means all the source code for all modules it contains, plus any
associated interface definition files, plus the scripts used to control
compilation and installation of the executable. However, as a special
exception, the source code distributed need not include anything that
is normally distributed (in either source or binary form) with t he major
components (compiler, ker nel, and so on) of the operating syste m on
which the executable runs, unless that component itself accompanies
the executable.
If distribution of executable or object code is made by offering access
to copy from a designated place, then offering equivalent access to
copy the source code from the same place counts as distribution of the
source code, even though third parties are not compelled to copy the
source along with the object code.
4. You may not copy, modify, sublicense, or distribute the Program
except as expressly provided under this License. Any attempt
otherwise to copy, modify, sublicense or distribute the Program is
void, and will automatically terminate your rights under this License.
However, parties who have received copies, or rights, from you under
this License will not have their licenses terminated so long as such
parties remain in full compliance.
5. You are not required to accept this License, since you have not
signed it. However, nothing else grants you permission to modify or
distribute the Program or its derivative works. These actions are
prohibited by law if you do not accept this License. Therefore, by
modifying or distributing the Program (or any work based on the
Program), you indicate your acceptance of this License to do so, and
all its terms and conditions for copying, distributing or m odifying the
Program or works based on it.
6. Each time you redistribute the Program (or any work based on
the Program), the recipient automatically receives a license from the
original licensor to copy, distribute or modify the Program subject to
these terms and conditions. You may not impose any further
restrictions on the recipients' exercise of the rights granted herein. You
are not responsible for enforcing compliance by third parties to this
License.
7. If, as a consequence of a court judgment or allegation of patent
infringement or for any other reason (not limited to patent issues),
conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
excuse you from the conditions of this License. If you cannot
distribute so as to satisfy simultaneously your obligations under this
License and any other pertinent obligations, then as a consequence
you may not distribute the Program at all. For example, if a patent
license would not permit royalty-free redistribution of the Progr am by
all those who receive copies directly or indirectly through you, th e n
the only way you could satisfy both it and this License would be to
refrain entirely from distribution of the Program.
If any portion of this section is held invalid or unenforceable under
any particular circumstance, the balance of the section is intended to
apply and the section as a whole is intended to apply in other
circumstances.
It is not the purpose of this section to induce you to infringe any
patents or other property right claims or to contest validity of any such
claims; this section has the sole purpose of protecting the integrity of
the free software distribution system, which is implemented by public
license practices. Many people have made generous contribu tions to
the wide range of software distributed through that system in reliance
on consistent application of that system; it is up to the author/donor to
decide if he or she is willing to distribute software through any other
system and a licensee cannot impose that choice.
This section is intended to make thoroughly clear what is believed to
be a consequence of the rest of this License.
8. If the distribution and/or use of the Program is restricted in
certain countries either by patents or by copyrighted interfaces, the
original copyright holder who places the Program under this License
may add an explicit geographical distribution limitation excluding
those countries, so that dis tribution is permitted only in or among
countries not thus excluded. In such case, this License incorporates the
limitation as if written in the body of this License.
9. The Free Software Foundation may publish revised and/or new
versions of the General Public License from time to time. Such new
versions will be similar in spirit to the present version, but may differ
in detail to address new problems or concerns.
Each version is given a distinguishing version number. If the Program
specifies a version number of this License which applies to it and "any
later version", you have the option of following the terms and
conditions either of that version or of any later version published by
the Free Software Foundation. If the Program does not specify a
version number of this License, you may choose any version ever
published by the Free Software Foundation.
10. If you wish to incorporate parts of the Program into other free
programs whose distribution conditions are different, write to the
author to ask for permission. For software which is copyrighted by the
Free Software Foundation, write to the Free Software Foundation; we
sometimes make exceptions for this. Our decision will be guided by
the two goals of preserving the free status of all derivatives of our free
software and of promoting the sharing and reuse of software generally.
NO WARRANTY
11. BECAUSE THE PROGRAM IS LICENSED FREE OF
CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO
THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT
WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
HOLDERS AND/OR OTHER PARTIES PROVIDE THE
PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND,
EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND
PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD
THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST
OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE
LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT
HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY
AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED
ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING
ANY GENERAL, SPECIAL, INCIDENTAL OR
CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR
INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT
LIMITED TO LOSS OF DATA OR DATA BEING RENDERED
INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE
WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR
OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
SUCH DAMAGES.
To receive the SofaWare GPL licensed code, contact
info@sofaware.com.
SAFETY PRECAUTIONS
Carefully read the Safety Instructions the Installation and Operating
Procedures provided in this User's Guide before at tempting to install
or operate the appliance. Failure to follow these instructions may
result in damage to equipm e nt and/or personal injuries.
Before cleaning the appliance, unplug the power cord. Use
only a soft cloth dampened with water for cleaning.
When installing the appliance, ensure that the vents are not
blocked.
Do not place this product on an unstable surface or support.
The product may fall, causing serious injury to a child or adult,
as well as serious damage to the product.
Do not use the appliance outdoors.
Do not expose the appliance to liquid or moisture.
Do not expose the appliance to e xtreme high or low
temperatures.
Do not disassemble or open the appliance. Failure to comply
will void the warranty.
Do not use any accessories other than those approved by
Check Point. Failure to do so may result in loss of
performance, damage to the product, fire, electric shock or
injury, and will void the warranty.
Route power supply cords where they are not likely to be
walked on or pinched by items placed on or against them. Pay
particular attention to cords where they are attached to plugs
and convenience receptacles, and examine the point where
they exit the unit.
Do not connect or disconnect power supply cables and data
transmission lines during thunderstorms.
Do not overload wall outlets or extension cords, as this can
result in a risk of fire or electric shock. Overloaded AC outlets,
extension cords, frayed power cords, damaged or cracked wire
insulation, and broken plugs are dangerous. They may result in
a shock or fire hazard. Periodically examine the cord, and if its
appearance indicates damage or deteriorated insulation, have it
replaced by your service technician.
If the unit or any part of it is damaged, disconnect the power
plug and inform the responsible service personnel. Nonobservance may result in damage to the router.
POWER ADAPTER
Operate this product only from the type of power source
indicated on the product’s marking label. If you are not sure of
the type of power supplied to your home, consult your dealer
or local power company.
Use only the power supply provided with your product. Check
whether the device’s set supply voltage is the same as the local
supply voltage.
To reduce risk of damage to the unit, remove it from the outlet
by holding the power adapter rather than the cord.
SECURITY DISCLAIMER
The appliance provides your office network with the highest level of
security. However, no single security product can provide you with
absolute protection against a determined effort to break into your
system. We recommend using additional security measures to secure
highly valuable or sensitive information.
Contents
Contents
Chapter 1: Introduction.......................................................................................................................1
About Your D-Link NetDefend Firewall............................................................................................1
Using This Reference..........................................................................................................................2
Document Conventions and Syntax....................................................................................................3
Related Publications............................................................................................................................4
Chapter 2: Using the Serial Console....................................................................................................5
Chapter 3: Using the NetDefend Command Line Interface..............................................................7
General Guidelines..............................................................................................................................8
Command Line Editing...................................................................................................................9
Running Commands............................................................................................................................9
Using the NetDefend Portal..................................................................................................... .....10
Using SSH.....................................................................................................................................11
Importing CLI Scripts...................................................................................................................13
Typical Return Values.......................................................................................................................14
Chapter 4: CLI Commands................................................................................................................17
Variable Operation Commands.........................................................................................................18
add.................................................................................................................................................19
clear...............................................................................................................................................22
delete.............................................................................................................................................25
set..................................................................................................................................................28
show..............................................................................................................................................30
Appliance Operation Commands......................................................................................................32
quit................................................................................................................................................33
reset certificate..............................................................................................................................34
reset defaults .................................................................................................................................35
reset firmware ...............................................................................................................................36
Contents i
Contents
reset gateway.................................................................................................................................37
reset logs .......................................................................................................................................38
reset services.................................................................................................................................39
reset smartdefense ai cifs file-sharing patterns..............................................................................40
reset statistics................................................................................................................................41
reset vstream-database ..................................................................................................................42
updatenow.....................................................................................................................................43
Informational Commands..................................................................................................................44
authenticate...................................................................................................................................46
export............................................................................................................................................49
help................................................................................................................................................ 53
info certificate...............................................................................................................................56
info computers ..............................................................................................................................59
info connections............................................................................................................................64
info device.....................................................................................................................................67
info fw...........................................................................................................................................70
info logs ........................................................................................................................................72
info nat..........................................................................................................................................74
info net..........................................................................................................................................78
info ospf........................................................................................................................................80
info ospf database .........................................................................................................................81
info ospf interface.........................................................................................................................84
info ospf neighbor.........................................................................................................................86
info ospf routes .............................................................................................................................88
info ports.......................................................................................................................................90
info printers...................................................................................................................................92
info probe......................................................................................................................................94
ii D-Link NetDefend CLI Reference Guide
Contents
info statistics .................................................................................................................................96
info statistics interface ..................................................................................................................99
info statistics qos.........................................................................................................................102
info tunnels..................................................................................................................................104
info vstream ................................................................................................................................107
info wan ......................................................................................................................................109
info wireless ap...........................................................................................................................112
Chapter 5: CLI Variables.................................................................................................................115
certificate.........................................................................................................................................118
clock................................................................................................................................................121
device..............................................................................................................................................123
dhcp scopes.....................................................................................................................................125
dialup...............................................................................................................................................131
fw....................................................................................................................................................134
fw rules............................................................................................................................................137
fw servers........................................................................................................................................145
ha.....................................................................................................................................................148
ha effect...........................................................................................................................................152
ha track............................................................................................................................................154
https.................................................................................................................................................156
hotspot.............................................................................................................................................159
mailfilter antispam ..........................................................................................................................162
mailfilter antivirus...........................................................................................................................164
mailfilter protocols..........................................................................................................................166
net dmz............................................................................................................................................168
net dmz ha.......................................................................................................................................175
net dmz ospf....................................................................................................................................177
Contents iii
Contents
net dmz ospf md5............................................................................................................................179
net lan..............................................................................................................................................181
net lan ha.........................................................................................................................................187
net lan ospf......................................................................................................................................188
net lan ospf md5..............................................................................................................................189
net officemode.................................................................................................................................190
net wan............................................................................................................................................195
net wan ospf....................................................................................................................................208
net wan ospf md5............................................................................................................................209
net wan probe..................................................................................................................................210
net wan2..........................................................................................................................................214
net wan2 ospf..................................................................................................................................216
net wan2 ospf md5..........................................................................................................................217
net wan2 probe................................................................................................................................218
net wlan...........................................................................................................................................219
net wlan ha......................................................................................................................................225
netobj...............................................................................................................................................226
ospf..................................................................................................................................................231
ospf area..........................................................................................................................................234
ospf network....................................................................................................................................236
ospf redistribute...............................................................................................................................238
ospf redistribute connected .............................................................................................................239
ospf redistribute kernel....................................................................................................................241
port dmz..........................................................................................................................................243
port lan1 / port lan2 / port lan3 / port lan4......................................................................................245
port serial ........................................................................................................................................247
port wan ..........................................................................................................................................249
iv D-Link NetDefend CLI Reference Guide
Contents
printers ............................................................................................................................................251
qos classes.......................................................................................................................................253
radius permissions...........................................................................................................................259
radius servers...................................................................................................................................262
routes...............................................................................................................................................265
smartdefense ai cifs file-sharing......................................................................................................268
smartdefense ai cifs file-sharing patterns........................................................................................271
smartdefense ai ftp..........................................................................................................................274
smartdefense ai ftp bounce..............................................................................................................277
smartdefense ai ftp commands........................................................................................................279
smartdefense ai im icq..................................................................................................................... 282
smartdefense ai im skype................................................................................................................284
smartdefense ai im yahoo................................................................................................................285
smartdefense ai p2p bittorrent .........................................................................................................286
smartdefense ai p2p emule..............................................................................................................288
smartdefense ai p2p gnutella...........................................................................................................290
smartdefense ai p2p kazaa...............................................................................................................292
smartdefense ai routing igmp..........................................................................................................294
smartdefense network-security dos flooding...................................................................................296
smartdefense network-security dos land.........................................................................................299
smartdefense network-security dos ping-of-death...........................................................................301
smartdefense network-security dos teardrop...................................................................................303
smartdefense network-security ip-icmp cisco-ios...........................................................................305
smartdefense network-security ip-icmp fragments .........................................................................308
smartdefense network-security ip-icmp max-ping-size...................................................................311
smartdefense network-security ip-icmp net-quota..........................................................................313
smartdefense network-security ip-icmp null-payload.....................................................................316
Contents v
Contents
smartdefense network-security ip-icmp packet-sanity....................................................................318
smartdefense network-security ip-icmp welchia.............................................................................321
smartdefense network-security port-scan host-port-scan................................................................323
smartdefense network-security port-scan ip-sweep-scan................................................................326
smartdefense network-security tcp small-pmtu...............................................................................329
smartdefense network-security tcp strict-tcp...................................................................................331
smp..................................................................................................................................................333
snmp................................................................................................................................................335
ssh ...................................................................................................................................................338
statistics...........................................................................................................................................341
syslog ..............................................................................................................................................343
users ................................................................................................................................................345
vlan..................................................................................................................................................350
vlan ospf..........................................................................................................................................357
vlan ospf md5..................................................................................................................................359
vpn externalserver...........................................................................................................................361
vpn internalserver............................................................................................................................364
vpn sites ..........................................................................................................................................366
vpn sites ospf...................................................................................................................................378
vpn sites ospf md5...........................................................................................................................380
vstream............................................................................................................................................382
vstream archive-options..................................................................................................................385
vstream options...............................................................................................................................388
vstream policy rule..........................................................................................................................392
webfilter..........................................................................................................................................400
webfilter categories.........................................................................................................................402
wireless ...........................................................................................................................................404
vi D-Link NetDefend CLI Reference Guide
Contents
wireless wep....................................................................................................................................416
wireless wpa....................................................................................................................................419
wireless wpapsk ..............................................................................................................................421
Chapter 6: Country Codes...............................................................................................................423
Glossary of Terms.............................................................................................................................429
Index...................................................................................................................................................437
Contents vii
About Your D-Link NetDefend Firewall
Chapter 1
Introduction
This chapter introduces the D-Link NetDefend Firewall and this guide.
This chapter includes the following topics:
About Your D-Link NetDefend Firewall .....................................................1
Using This Reference ...................................................................................2
Document Conventions and Syntax..............................................................3
Related Publications.....................................................................................4
About Your D-Link NetDefend Firewall
The D-Link NetDefend firewall is a unified threat management (UTM) appliance
that enables secure high-speed Internet access from the office. Incorporating
software by SofaWare Technologies, an affiliate of Check Point Software
Technologies, the worldwide leader in securing the Internet, the NetDefend
Secured by Check Point Product Family includes both wired and wireless models.
The D-Link firewall, based on the world-leading Check Point Embedded NGX
Stateful Inspection technology, inspects and filters all incoming and outgoing
traffic, blocking all unauthorized traffic.
The NetDefend firewall also allows sharing your Internet connection among
several PCs or other network devices, enabling advanced office networking and
saving the cost of purchasing static IP addresses.
With the NetDefend firewall, you can subscribe to additional security services
available from select service providers, including firewall security and software
updates, Antivirus, Web Filtering, reporting, and VPN management. By supporting
integrated VPN capabilities, the NetDefend firewall allows teleworkers and road
warriors to securely connect to the office network, and enables secure
interconnection of branch offices.
Chapter 1: Introduction 1
Using This Reference
Using This Reference
This reference guide explains how to use CLI commands to control your
NetDefend firewall.
In the chapter CLI Commands on page 17, the CLI commands are divided into
groups, according to their purpose. The commands are presented in alphabetical
order within those groups.
Several CLI commands have CLI variables as their parameters. These CLI
variables function as sub-commands and may have multiple fields.
This guide presents CLI variables in a separate chapter, CLI Variables on page
115. Like CLI commands, the CLI variables appear in alphabetical order. However,
the variables are not divided into groups, because a single variable may be used by
more than one group of commands.
The following information is provided for each CLI command or variable:
Purpose Describes the command or variable's purpose and provides
background information
Effect Describes the effect of running the command. Relevant for
Appliance Operation commands only.
Syntax The format of the command
Parameters Describes the command's parameters, if there are any.
Relevant for commands only.
Fields Describes the variable's fields, if there are any. Relevant for
variables only.
2 D-Link NetDefend CLI Reference Guide
Document Conventions and Syntax
Return Values The values returned in the command line interface.
This information is provided only when running the
command results in return values other than the typical
values, for example when you run Informational commands.
For information on the typical return values, see Typical
Return Values on page 14. For information on Informational
commands, see Informational Commands on page 44.
Examples One or more examples that illustrate the command or
variable's usage
Note: The information in this guide is relevant for both NetDefend firewalls. For
information on specific NetDefend firewall models, refer to your NetDefend firewall's
User Guide (see Related Publications on page 4).
Document Conventions and Syntax
To make finding information in this manual easier, some types of information are
marked with special symbols or formatting.
Boldface type is used for button names.
Note: Notes are denoted by indented text and preceded by the Note icon.
Warning: Warnings are denoted by indented text and preceded by the Warning icon.
CLI commands and variables appear in Courier style:
command
CLI command syntax is presented in the following format:
command mandatory-parameter [optional-parameter]
CLI variable syntax is presented in the following format:
variable mandatory-field [optional-field]
Chapter 1: Introduction 3
Related Publications
Examples appear in Courier style in boxes:
This is an example of a CLI command.
Related Publications
Use this guide in conjunction with the User Guide provided with your appliance:
• NetDefend Secured by Check Point User Guide
4 D-Link NetDefend CLI Reference Guide
Related Publications
Chapter 2
Using the Serial Console
You can connect a console to the NetDefend firewall, and use the console to
control the appliance via the command line.
Note: Your terminal emulation software must be set to 57600 bps, N-8-1.
To run commands using a console
1. Connect the serial console to your NetDefend firewall's serial port, using an RS232 Null modem cable.
2. Log on to the NetDefend Portal.
For instructions, refer to the User Guide.
3. Click Network in the main menu, and click the Ports tab.
The Ports page appears.
4. In the RS232 drop-down list, select Console.
5. Click Apply.
You can now control the NetDefend firewall from the serial console.
Chapter 2: Using the Serial Console 5
Related Publications
Chapter 3
Using the NetDefend Command Line
Interface
This chapter explains how to use the command line interface to run a CLI
command and provides a list of typical return values.
This chapter includes the following topics:
General Guidelines.......................................................................................8
Running Commands.....................................................................................9
Typical Return Values................................................................................14
Chapter 3: Using the NetDefend Command Line Interface 7
General Guidelines
General Guidelines
When running commands in the NetDefend firewall, follow these guidelines:
• NetDefend CLI commands, variables, and fields are case-sensitive.
• It is not necessary to type a command or variable in its entirety; it is
sufficient to type the shortest string that is unique to the command or
variable.
For example, instead of typing:
delete netobj 3
You can type:
del neto 3
You cannot abbreviate netobj to net, because these letters are not unique to
netobj.
• If a command or variable is composed of multiple words, you may only
abbreviate the final word.
For example, instead of typing:
show qos classes 1
You can type:
sh qos cl 1
You cannot abbreviate qos classes to qos.
• Do not enclose commands, variables, or field names in quotation marks.
8 D-Link NetDefend CLI Reference Guide
Running Commands
• Occasionally, a field's value will be a string containing one or more spaces.
In this case, enclose the string in quotation marks.
For example:
set dialup type "Hayes Accura 56K"
Tip: If you are unsure how to configure a particular setting via the command line, you
can configure it in the NetDefend Portal tab, export the NetDefend firewall settings,
and then examine the exported settings to find out how the CLI command for the
desired setting looks.
For information on exporting settings via the command line, see export on page 49.
Command Line Editing
When using SSH or Serial Console:
• You can press the TAB key to either complete the current command, or
show a list of possible completions.
• All commands entered during a CLI session are saved in a command
history. You can browse through the command history by using the UP and
DOWN arrow keys.
Running Commands
Depending on your NetDefend model, you can control your appliance via the
command line in the following ways:
• Using the NetDefend Portal's command line interface.
See Using the NetDefend Portal on page 10.
• Using a console connected to the NetDefend firewall.
For information, see Using the Serial Console on page 5.
• Using an SSH client.
See Using SSH on page 11.
• Importing CLI scripts
Chapter 3: Using the NetDefend Command Line Interface 9
Running Commands
See Importing CLI Scripts on page 13.
Using the NetDefend Portal
You can run commands using the NetDefend Portal.
To run commands using the NetDefend Portal
1. Log on to the NetDefend Portal.
For instructions, refer to the User Guide.
2. Click Setup in the main menu, and click the Tools tab.
The Tools page appears.
3. Click Command.
The Command Line page appears.
4. In the upper field, type a command.
5. Click Go.
The command is implemented.
Return values appear in the lower field.
10 D-Link NetDefend CLI Reference Guide
Running Commands
Using SSH
NetDefend users can control the firewall via the command line, using the SSH
(Secure Shell) management protocol.
By default, SSH access is allowed only from the internal networks. You can allow
SSH access via the Internet, by configuring remote SSH access.
Note: The NetDefend firewall supports SSHv2 clients only. The SSHv1 protocol
contains security vulnerabilities and is not supported.
To enable SSH access from the Internet
1. Log on to the NetDefend Portal.
For instructions, refer to the User Guide.
2. Click Setup in the main menu, and click the Management tab.
The Management page appears.
3. Specify from where SSH access should be granted.
See Access Options on page 12 for information.
Warning: If remote SSH is enabled, your NetDefend firewall settings can be changed
remotely, so it is especially important to make sure all NetDefend firewall users’
passwords are difficult to guess.
If you selected IP Address Range, additional fields appear.
4. If you selected IP Address Range, enter the desired IP address range in the fields
provided.
5. Click Apply.
You can now control the NetDefend firewall using an SSHv2 client.
Chapter 3: Using the NetDefend Command Line Interface 11
Running Commands
Table 1: Access Options
Select this
To allow access from…
option…
Internal Network The internal network only.
This disables remote access capability. This is the default.
Internal Network and
VPN
IP Address Range A particular range of IP addresses.
ANY Any IP address.
The internal network and your VPN.
Additional fields appear, in which you can enter the desired I P address
range.
12 D-Link NetDefend CLI Reference Guide
Running Commands
Importing CLI Scripts
All NetDefend models enable you to import CLI scripts to the appliance.
To import CLI scripts
1. Do one of the following:
• Write a CLI script in a text file with the extension *.cfg.
• Edit an exported NetDefend configuration file.
For information on exporting configuration files, refer to the User Guide.
2. Log on to the NetDefend Portal.
For instructions, refer to the User Guide.
3. Click Setup in the main menu, and click the Tools tab.
The Tools page appears.
4. Click Import.
The Import Settings page appears.
5. Do one of the following:
• In the Import Settings field, type the full path to the configuration file.
Or
• Click Browse, and browse to the configuration file.
6. Click Upload.
A confirmation message appears.
7. Click OK.
The NetDefend firewall settings are imported.
The Import Settings page displays the configuration file's content and the result
of implementing each configuration command.
Chapter 3: Using the NetDefend Command Line Interface 13
Typical Return Values
Note: If the appliance's IP address changed as a result of the configuration import,
your computer may be disconnected from the network; therefore you may not be
able to see the results.
Typical Return Values
When you run a command whose purpose is to display information, the return
value is the information. For example, if you run the command
command line interface returns information about the firewall. These return values
are described after each relevant command and variable in this guide.
When you run a command whose purpose is not informational, the command line
interface typically returns one of the values listed in the table below.
Table 2: Typical Return Values
Value Explanation
info fw, then the
OK
Failed
item {deleted |
The command was implemented successfully.
The command failed.
The add / delete / clear command was implemented successfully.
added | cleared}
item cannot be
The add / delete / clear command failed.
{deleted | added |
cleared}
Possible
completions
<list of possible
The command you entered is not complete, because a variable or
a field is missing. Use the list provided to complete the command,
and then run the command again.
completions>
14 D-Link NetDefend CLI Reference Guide
Typical Return Values
Value Explanation
Missing value for
property name
Syntax error
<error>
Invalid index
The command you entered is not complete, because a field's
value is missing. Complete the command, and then run the
command again.
The syntax of the command you entered is incorrect. The
erroneous syntax is displayed.
The command you entered relates to a table in an incorrect way.
For example, in the case of
applies only to tables, and the variable is not a type of table.
delete device, the command
Chapter 3: Using the NetDefend Command Line Interface 15
Typical Return Values
Chapter 4
CLI Commands
This chapter provides a list of CLI commands for controlling your NetDefend
firewall. The CLI commands are divided into the following groups:
• Variable Operation Commands. CLI commands for working with variables
• Appliance Operation Commands. CLI commands for managing the
NetDefend firewall
• Informational Commands. CLI commands for displaying information about
your NetDefend firewall, its settings
Several CLI commands use CLI variables. For information on CLI variables, see
CLI Variables on page 115.
This chapter includes the following topics:
Variable Operation Commands..................................................................18
Appliance Operation Commands................................................................32
Informational Commands...........................................................................44
Chapter 4: CLI Commands 17
Variable Operation Commands
Variable Operation Commands
The commands in this section enable you to perform the following actions on
variables:
• Add a variable to a table
• Delete a variable from a table
• Modify a variable
• Display a variable's settings
• Display a table of variables
• Clear a table of variables
For information on CLI variables, see CLI Variables on page 115.
18 D-Link NetDefend CLI Reference Guide
Variable Operation Commands
add
PURPOSE
The
add command is used for adding new variables to a table. Use this command
to add any of the following:
• A self-signed certificate
• DHCP scopes
• Firewall rules
• Network objects
• OSPF areas
• OSPF networks
• QoS classes
• RADIUS servers
• Static routes
• SmartDefense worm patterns
• SmartDefense blocked and allowed FTP commands
• Users
• VLAN networks
• VPN sites
• VStream Antivirus policy rules
YNTAX
S
add variable
Chapter 4: CLI Commands 19
Variable Operation Commands
PARAMETERS
variable
String. The type of variable you want to add. This can be any of
the following:
certificate - A self-signed certificate
•
• dhcp scopes - A DHCP scope
• fw rules - A firewall rule
•
netobj - A network object
• ospf area - An OSPF area
• ospf network - An OSPF network
• qos classes - A QoS class
• radius servers
• routes - A static route
• smartdefense ai cifs file-
sharing patterns
SmartDefense should detect
smartdefense ai ftp command - An
•
FTP command that SmartDefense should allow or
block
users - A NetDefend Portal user
•
•
vlan - A VLAN network
• vpn sites - A VPN site
vstream policy rules - A VStream
•
Antivirus policy rule
For information on these variables and how to use them with
the
add command, see CLI Variables on page 115.
RETURN VALUES
See Typical Return Values on page 14.
- A RADIUS server
- A worm pattern that
20 D-Link NetDefend CLI Reference Guide
Variable Operation Commands
EXAMPLE
The following command adds the user JohnSmith and assigns him the password
JohnS1.
add users name JohnSmith password JohnS1
Chapter 4: CLI Commands 21
Variable Operation Commands
clear
PURPOSE
The
clear command is used for deleting all the variables in a table. Use this
command to clear any of the following:
• A certificate
• DHCP scopes
• Firewall rules
• Network objects
• OSPF areas
• OSPF networks
• QoS classes
• RADIUS servers
• Static routes
• SmartDefense worm patterns
• SmartDefense blocked and allowed FTP commands
• Users
• VLAN networks
• VPN sites
• VStream Antivirus policy rules
Note: You cannot delete the admin user (user 1), the Default QoS class (QoS class 1),
or the Default static route (static route 1).
SYNTAX
clear variable
22 D-Link NetDefend CLI Reference Guide
Variable Operation Commands
PARAMETERS
variable
String. The type of variables in the table you want to clear.
This can be any of the following:
certificate - A certificate
•
• dhcp scopes - DHCP scopes
• fw rules - Firewall rules
•
netobj - Network objects
• ospf area - OSPF areas
• ospf network - OSPF networks
• qos classes
• radius servers
• routes - Static routes
•
smartdefense ai cifs filesharing patterns
detected by SmartDefense
smartdefense ai ftp command -
•
FTP commands that SmartDefense allows or
blocks
users - NetDefend Portal users
•
• vlan - VLAN networks
vpn sites - VPN sites
•
•
vstream policy rules - VStream
Antivirus policy rules
For information on these variables and how to use them with
the
clear command, see CLI Variables on page 115.
RETURN VALUES
See Typical Return Values on page 14.
- QoS classes
- RADIUS servers
- Worm patterns
Chapter 4: CLI Commands 23
Variable Operation Commands
EXAMPLE
The following command deletes all users except the "admin" user.
clear users
24 D-Link NetDefend CLI Reference Guide
Variable Operation Commands
delete
PURPOSE
The
delete command is used for deleting variables from a table. Use this
command to delete any of the following:
• DHCP scopes
• Firewall rules
• Firewall servers
• Network objects
• OSPF areas
• OSPF networks
• QoS classes
• RADIUS servers
• Static routes
• SmartDefense worm patterns
• SmartDefense blocked and allowed FTP commands
• Users
• VLAN networks
• VPN sites
• VStream Antivirus policy rules
Note: You cannot delete the admin user (user 1), the Default QoS class (QoS class 1),
or the Default static route (static route 1).
SYNTAX
delete variable
Chapter 4: CLI Commands 25
Variable Operation Commands
PARAMETERS
variable
String. The type of variable you want to delete. This can be
any of the following:
• dhcp scopes - A DHCP scope
• fw rules - A firewall rule
• fw servers - A firewall server rule
•
netobj - A network object
• ospf area - An OSPF area
• ospf network - An OSPF network
•
qos classes - A QoS class
• radius servers - A RADIUS server
• routes - A static route
• smartdefense ai cifs file-
sharing patterns
SmartDefense should detect
smartdefense ai ftp command - An
•
FTP command that SmartDefense should allow or
block
users - A NetDefend Portal user
•
• vlan - A VLAN network
•
vpn sites - A VPN site
vstream policy rules - A VStream
•
Antivirus policy rule
- A worm pattern that
For information on these variables and how to use them with
the
delete command, see CLI Variables on page 115.
RETURN VALUES
See Typical Return Values on page 14.
26 D-Link NetDefend CLI Reference Guide
Variable Operation Commands
EXAMPLE 1
The following command deletes the second user in the Users table:
delete users 2
EXAMPLE 2
The following command deletes the FTP server rule in the Servers table:
delete fw servers ftp
Chapter 4: CLI Commands 27
Variable Operation Commands
set
PURPOSE
The
set command is used for modifying existing variables.
Note: You cannot rename the admin user (user 1), the Default QoS class (QoS class
1), or the Default static route (static route 1).
SYNTAX
set variable
P
ARAMETERS
variable
String. The type of variable you want to modify. This can be
any variable except for the following:
• certificate
• A variable that represents a category of variables,
but does not have fields of its own. For example,
the variable
net can be used in the command
show net to display the settings for all
variables in the
lan
, net dmz, etc), but it has no fields of its
own and therefore cannot be used with
net category (such as net
set.
For information on variables and how to use them with the
set command, see CLI Variables on page 115.
RETURN VALUES
See Typical Return Values on page 14.
28 D-Link NetDefend CLI Reference Guide
Variable Operation Commands
EXAMPLE 1
The following command sets the password for user 2 to "mysecretpassword":
set users 2 password mysecretpassword
EXAMPLE 2
The following command enables the internal VPN Server:
set vpn internalserver mode enabled
EXAMPLE 3
The following command sets the FTP server rule so that only FTP connections
made through a VPN are allowed.
set fw servers ftp enconly true
Chapter 4: CLI Commands 29
Variable Operation Commands
show
PURPOSE
The
show command is used for displaying variables and their fields.
S
YNTAX
show variable
ARAMETERS
P
variable
RETURN VALUES
The desired variables and their fields.
Note: The following information is displayed in encrypted format:
String. The type of variable you want to display. This can be
any variable except
For information on variables and how to use them with the
certificate.
show command, see CLI Variables on page 115.
• NetDefend Portal user passwords
• Password for authenticating to the ISP
• Passwords for VPN authentication
• Shared secrets for VPN authentication
• Registration key for authenticating to Service Center
• Passwords and keys for wireless authentication
EXAMPLE 1
The following command displays all QoS classes:
show qos classes
The following command displays information about QoS class 3:
show qos classes 3
30 D-Link NetDefend CLI Reference Guide
Variable Operation Commands
The following command displays the relative weight of QoS class 3:
show qos classes 3 weight
EXAMPLE 2
The following command displays all server rules:
show fw servers
The following command displays all of the FTP server rule's settings:
show fw servers ftp
Use the following command to find out whether the FTP server rule specifies that
only FTP connections made through a VPN are allowed.
show fw servers ftp enconly
Chapter 4: CLI Commands 31
Appliance Operation Commands
Appliance Operation Commands
The commands in this section enable you to manage your NetDefend firewall in the
following ways:
• Log out of the current session, when connected to the NetDefend Portal via
SSH or serial console
• Replace the installed certificate with a new self-signed certificate
• Reset the NetDefend firewall to its default settings
• Reset the NetDefend firewall to the firmware version that shipped with the
appliance
• Reboot the NetDefend firewall
• Clear the Event Log
• Reboot the my.firewall Web service
• Reset the SmartDefense list of worm patterns to its defaults
• Clear Traffic Monitor reports
• Uninstall the VStream Antivirus signature databases
• Check for new security and software updates
32 D-Link NetDefend CLI Reference Guide
Appliance Operation Commands
quit
PURPOSE
The
quit command is used to log out of the current session, when connected to the
NetDefend Portal via SSH or a serial console.
EFFECT
After you run this command, the SSH client or serial console logs off the
NetDefend Portal.
S
YNTAX
quit
P
ARAMETERS
None.
ETURN VALUES
R
None.
Chapter 4: CLI Commands 33
Appliance Operation Commands
reset certificate
PURPOSE
The
reset certificate command is used to replace the installed certificate
with a new self-signed certificate.
Note: If your NetDefend firewall is centrally managed, a certificate is automatically
generated and downloaded to your appliance. In this case, there is no need to
generate a self-signed certificate.
EFFECT
After you run this command, the NetDefend firewall generates a new self-signed
certificate, and replaces the old certificate with the new one. This may take a few
seconds.
S
YNTAX
reset certificate
ARAMETERS
P
None.
ETURN VALUES
R
A message indicating that the certificate was replaced successfully.
34 D-Link NetDefend CLI Reference Guide
Appliance Operation Commands
reset defaults
PURPOSE
The
reset defaults command is used to reset the NetDefend firewall to its
default settings. When you reset your NetDefend firewall, it reverts to the state it
was originally in when you purchased it. The current firmware version is retained.
For information on resetting the firmware version, see reset firmware on page 36.
Warning: This operation erases all your settings and password information. You will
have to set a new password and reconfigure your NetDefend firewall for Internet
connection.
EFFECT
After you run this command, the NetDefend firewall is restarted, and the
PWR/SEC LED flashes quickly. This may take a few minutes.
S
YNTAX
reset defaults
ARAMETERS
P
None.
ETURN VALUES
R
See Typical Return Values on page 14.
Chapter 4: CLI Commands 35
Appliance Operation Commands
reset firmware
PURPOSE
The
reset firmware command is used to reset the NetDefend firewall to the
firmware version that shipped with the appliance.
EFFECT
The NetDefend firewall is restarted, and the PWR/SEC LED flashes quickly. This
may take a few minutes.
S
YNTAX
reset firmware
P
ARAMETERS
None.
ETURN VALUES
R
See Typical Return Values on page 14.
36 D-Link NetDefend CLI Reference Guide
Appliance Operation Commands
reset gateway
PURPOSE
The
reset gateway command is used to reboot the NetDefend firewall. If your
NetDefend firewall is not functioning properly, rebooting it may solve the problem.
EFFECT
The PWR/SEC LED flashes quickly. This may take a few minutes.
YNTAX
S
reset gateway
P
ARAMETERS
None.
ETURN VALUES
R
See Typical Return Values on page 14.
Chapter 4: CLI Commands 37
Appliance Operation Commands
reset logs
PURPOSE
The
reset logs command is used to clear the Event Log. The Event Log
displays the most recent events, including the date and the time that each event
occurred, and its type.
E
FFECT
The logs in the Event Log are cleared.
YNTAX
S
reset logs
P
ARAMETERS
None.
ETURN VALUES
R
A message indicating that the Event Log was reset successfully.
38 D-Link NetDefend CLI Reference Guide
Appliance Operation Commands
reset services
PURPOSE
The
reset services command is used to restart the NetDefend Service Center
connection.
EFFECT
The NetDefend Service Center connection is restarted.
YNTAX
S
reset services
P
ARAMETERS
None.
ETURN VALUES
R
See Typical Return Values on page 14.
Chapter 4: CLI Commands 39
Appliance Operation Commands
reset smartdefense ai cifs file-sharing patterns
PURPOSE
The
reset smartdefense ai cifs file-sharing patterns command
is used to reset SmartDefense's list of worm patterns to its defaults.
For information on configuring this list, see smartdefense ai cifs file-sharing
patterns on page 271.
E
FFECT
The list of worm patterns is reset to its defaults.
S
YNTAX
reset smartdefense ai cifs file-sharing patterns
ARAMETERS
P
None.
ETURN VALUES
R
A message indicating that the list of worm patterns was reset successfully.
40 D-Link NetDefend CLI Reference Guide
Appliance Operation Commands
reset statistics
PURPOSE
The
reset statistics command is used to clear the Traffic Monitor. The
Traffic Monitor displays reports for incoming and outgoing traffic, for selected
network interfaces and QoS classes.
E
FFECT
The statistics displayed in all Traffic Monitor reports are cleared.
YNTAX
S
reset statistics
P
ARAMETERS
None.
ETURN VALUES
R
A message indicating that the Traffic Monitor was reset successfully.
Chapter 4: CLI Commands 41
Appliance Operation Commands
reset vstream-database
PURPOSE
The
reset vstream-database command is used to uninstall the VStream
Antivirus signature databases. This is useful for troubleshooting purposes.
EFFECT
Both the VStream Antivirus main database and daily database are uninstalled, and
VStream Antivirus is disabled.
To re-install the VStream Antivirus databases, use the
updatenow command. See
updatenow on page 43.
Note: You must be subscribed to VStream Antivirus signature updates, in order to reinstall the databases.
SYNTAX
reset vstream-database
P
ARAMETERS
None.
ETURN VALUES
R
A message indicating that the VStream Antivirus databases were reset successfully.
42 D-Link NetDefend CLI Reference Guide
Appliance Operation Commands
updatenow
PURPOSE
The
updatenow command is used to check for new security and software updates,
as well as VStream Antivirus signature database updates.
Note: Software Updates and VStream Antivirus Signature Updates are only available if
you are connected to a Service Center and subscribed to this service.
The NetDefend firewall automatically checks for software updates and installs
them without user intervention, in the following cases:
• Your NetDefend firewall is remotely managed.
• Your NetDefend firewall is locally managed, and it is set it to
automatically check for software updates.
However, you can still use this command to check for updates manually, if needed.
E
FFECT
The system checks for new updates and installs them.
YNTAX
S
updatenow
ARAMETERS
P
None.
ETURN VALUES
R
See Typical Return Values on page 14.
Chapter 4: CLI Commands 43
Informational Commands
Informational Commands
The commands in this section enable you to display information about your
NetDefend firewall and its settings. You can display any of the following:
• Certificate details
• Currently active computers on your network
• Currently active connections to and from your network
• Device details
• Firewall statistics for incoming and outgoing traffic
• Event logs
• NAT rules that are currently in effect
• Your appliance's network interfaces
• Your appliance's general OSPF settings
• OSPF database details
• The OSPF mode each for network interface and VTI (Virtual Tunnel
Interface)
• OSPF neighbors
• OSPF routes
• The status of the NetDefend firewall's ports, including each Ethernet
connection's duplex state
• Network printers details
• Connection probing results for the WAN and WAN2 interfaces
• General traffic reports
• Traffic reports for specific traffic types and network interfaces
• Traffic reports for specific QoS classes
44 D-Link NetDefend CLI Reference Guide
Informational Commands
• Currently established VPN tunnels
• Information about VStream Antivirus signature databases
• VStream Antivirus virus signatures
• Information about the defined Internet connections
• Information about your wireless access point
• Information about wireless stations in the WLAN
You can also do the following:
• Export your appliance's configuration
• Check whether a user name and password combination are valid
• Display help on any CLI command
Chapter 4: CLI Commands 45
Informational Commands
authenticate
PURPOSE
The
authenticate command is used to check whether a username and password
combination is valid.
SYNTAX
authenticate username password
ARAMETERS
P
username
password String. The password to authenticate
RETURN VALUES
An indication of whether the username and password combination is valid:
ok
String. The username to authenticate
Authentication succeeded. The combination is valid.
failed
Authentication failed. The username, password, or usernamepassword combination is invalid.
Information about the user's permissions:
write
46 D-Link NetDefend CLI Reference Guide
Indicates whether the user has write permissions. This can
have the following values:
true - The user has write permissions.
•
• false - The user does not have write
permissions.
Informational Commands
read
vpnaccess
filteroverride
Indicates whether the user has read permissions. This can
have the following values:
true - The user has read permissions.
•
false - The user does not have read
•
permissions.
Note: If this value is
NetDefend Portal.
Indicates whether the user is allowed to connect to the
NetDefend firewall using their VPN client. This can have the
following values:
true - The user has write permissions.
•
•
false - The user does not have write
permissions.
For information on setting up VPN remote access, refer to the
User Guide.
Indicates whether the user is allowed to override Web
Filtering. This can have the following values:
false, then the user cannot access the
true - the user has write permissions
•
• false - the user does not have write
permissions
This permission only appears if the Web Filtering service is
defined.
Chapter 4: CLI Commands 47
Informational Commands
EXAMPLE
The following command authenticates the username "JohnS" and the password
"mysecretpassword":
authenticate JohnS mysecretpassword
Running this command results in information such as the following:
[700000] ok [permissions: write true read true vpnaccess true
filteroverride true ]
48 D-Link NetDefend CLI Reference Guide
Informational Commands
export
PURPOSE
The
export command is used to display NetDefend firewall settings.
This is useful in the following cases:
• You are troubleshooting a problem and need to examine the firewall
settings.
• You want to change the firewall configuration.
After exporting the configuration, you can copy it and paste it in a *.cfg file.
You can then change the settings as desired and import the modified file to one
or more NetDefend firewalls.
For information on importing configuration files, refer to the User Guide.
• You want to backup the NetDefend firewall settings.
After exporting the configuration, you can copy it and paste it in a *.cfg file.
You can then use this file to backup and restore, as needed.
YNTAX
S
export [variable]
Chapter 4: CLI Commands 49
Informational Commands
PARAMETERS
variable
String. The type of settings you want to export. This can be
any variable or a variable that represents a category of
variables. For example, the variable
command
variables in the
dmz
For information on variables and how to use them with the
export net to display the settings for all
net category (such as net lan, net
, etc).
net can be used in the
export command, see CLI Variables on page 115.
If you do not include this parameter, all settings are exported.
RETURN VALUES
The desired NetDefend Portal firewall settings.
The exported settings are in CLI script format and can be executed.
E
XAMPLE
The following command exports the NetDefend Portal firewall user database:
export
Running this command results in information such as the following:
50 D-Link NetDefend CLI Reference Guide
Informational Commands
export
# Configuration script
# License: D-Link NetDefend (10 nodes)
# Gateway MAC: 00:08:da:77:70:70
# firmware version: 6.0.45x
# Device settings
set device productkey 7a747a-a77a4a-79a8bf hostname "" behindnat
undefined
# Clock settings
set clock timezone GMT-08:00 ntp1 "" ntp2 ""
...
# High availability settings
set ha mode disabled syncinterface lan priority 0 groupid 55
Chapter 4: CLI Commands 51
Informational Commands
# lower priority when not connected
set ha track wan1 0 wan2 0
# Effect other modules according to current status
set ha effect vpn enabled
# END Configuration script
52 D-Link NetDefend CLI Reference Guide
Informational Commands
help
PURPOSE
The
help command is used to display information about a command.
S
YNTAX
help command [variable]
P
ARAMETERS
command
String. The command for which you want to display
information.
variable
String. One or more variables that follow the command and
create a valid expression.
RETURN VALUES
When you run this command, the following information appears:
• A brief description of the command
• A list of variables that can follow the command
XAMPLE
E
To display information about the
help add
add command, enter the following command:
Chapter 4: CLI Commands 53
Informational Commands
The following information is displayed:
add Add an item to a table
subcommands:
---------------------
fw Firewall settings
vpn VPN settings
users User database
routes Static routes database
radius RADIUS settings
qos Quality of Service
netobj Network Objects
certificate Certificate Creation
vlan VLAN Networks
ospf OSPF router setting
dhcp DHCP settings
vstream Vstream settings
54 D-Link NetDefend CLI Reference Guide
Informational Commands
EXAMPLE 2
You can add variables to the command, and display information about the final
variable in the command:
help add users
The users variable's fields are listed:
users User database
subcommands:
---------------------
name Username
password Password for user authentication
adminaccess Administrator access level
vpnaccess Allow user to login using VPN client
filteroverride Allow user to override Web Filtering
hotspotaccess Allow HotSpot access
expire Expiration date
EXAMPLE 3
You cannot display information about a variable alone:
help users
If you attempt to do so, an error message is displayed, along with suggestions for
correcting the command syntax:
help users
[700002] Syntax error: users
Possible completions:
help, authenticate, set, show, clear, delete, export, add, reset,
updatenow, quit, info
Chapter 4: CLI Commands 55
Informational Commands
info certificate
PURPOSE
The
info certificate command is used to display information about the
certificate currently installed on your appliance.
SYNTAX
info certificate
PARAMETERS
None.
ETURN VALUES
R
The following information is displayed for your appliance's certificate and for the
CA's certificate:
GMT
The time zone of the Validity Start Time and Validity End
Time, relative to GMT (Greenwich Mean Time).
Validity Start
Time
The day of the week, date, and time from which this certificate
is valid.
This information is presented in the format:
Day MM DD hh:mm:ss YYYY
where:
Day = the day of the week
MM = the month
DD = the date
hh = hours
mm = minutes
ss = seconds
YYYY = the year
56 D-Link NetDefend CLI Reference Guide
Informational Commands
Validity End Time
The day of the week, date, and time when this certificate
expires. This information is provided in the same format as
Validity Start Time.
Certificate DN
Fingerprint
The Distinguished Name (DN) (identifying information).
The certificate's fingerprint.
EXAMPLE
Running this command results in information such as the following:
[700000] Certificate Information:
Device Certificate
==================
GMT: GMT+02:00
Validity Start Time: Sat Dec 3 08:47:42 2005
Validity End Time: Sat Nov 29 08:47:42 2025
Certificate DN: /O=EmbeddedNG/OU=Gateways/CN=00:07:d7:77:70:70
Fingerprint: FEET DAB BODY HULL LYNN VARY GOSH SETS DOT DAR
DOME PAT
Chapter 4: CLI Commands 57
Informational Commands
CA Certificate
==============
GMT: GMT+02:00
Validity Start Time: Sat Dec 3 08:47:39 2005
Validity End Time: Sat Nov 29 08:47:39 2025
Certificate DN: /O=EmbeddedNG/OU=LocalCA/CN=CA00:07:d7:77:70:70
Fingerprint: NO THAT JUST SUM MENU SLAM DING GURU MICE HUGO
WOK VASE
58 D-Link NetDefend CLI Reference Guide
Informational Commands
info computers
PURPOSE
The
info computers command is used to display information about the
currently-active computers on your network.
SYNTAX
info computers
PARAMETERS
None.
ETURN VALUES
R
The following information is displayed for each network device in the LAN, DMZ,
WLAN, and OfficeMode network:
The device's IP address
mac
type
The device's MAC address.
The device's type. This can be either of the following:
• firewall
• computer
name
license
Chapter 4: CLI Commands 59
The device's name.
The status of the device's license. This can be either of the
following:
licensed - the device is licensed
•
•
inactive - the device did not communicate
through the firewall, and therefore did not use a
license
N/A - the device's license status is not available
•
Informational Commands
In addition to the information above, the following information is displayed for
each wireless station (in wireless models):
rate
The current transmission rate in Mbps
signal
rx rate
tx rate
WLAN mode
signal
XR
wpa was
negotiated
The signal strength in dB
The current reception rate in Mbps
The current transmission rate in Mbps
The wireless client's operation mode, indicating the client's
maximum speed. Possible values are B, G, and 108G
The signal strength in dB
Indicates whether the wireless client supports Extended
Range (XR) mode. Possible values are:
yes. The wireless client supports XR mode.
•
•
no. The wireless client does not support XR
mode.
Indicates whether WPA was negotiated with the wireless
client. Possible values are:
yes. WPA was negotiated.
•
no. WPA was not negotiated.
•
wpa2 was
negotiated
cipher
60 D-Link NetDefend CLI Reference Guide
Indicates whether WPA2 was negotiated with the wireless
client. Possible values are:
yes. WPA2 was negotiated.
•
•
no. WPA2 was not negotiated.
The security protocol used for the connection with the
wireless client
Informational Commands
The following statistics are divided into receive and transmit for each wireless
station (in wireless models):
frames ok
The total number of frames that were successfully transmitted
and received
errors
discard frames
dropped frames
unicast frames
broadcast frames
multicast frames
The total number of transmitted and received frames for which
an error occurred
The total number of discarded frames received
The total number of dropped frames transmitted
The number of unicast frames transmitted and received
The number of broadcast frames transmitted and received
The number of multicast frames transmitted and received
Chapter 4: CLI Commands 61
Informational Commands
EXAMPLE
Running this command results in information such as the following:
lan:
192.168.10.1:
mac: 00:08:da:77:70:6e
type: firewall
name: Gateway
license: N/A
192.168.10.12:
mac: 00:0c:6e:41:5d:6a
type: computer
name: HOME
license: licensed
wlan:
192.168.252.1:
mac: 00:20:ed:08:7a:e0
type: firewall
name: Gateway
license: N/A
62 D-Link NetDefend CLI Reference Guide
Informational Commands
192.168.252.106:
mac: 00:40:05:60:97:5a
type: computer
name: laptop
license: N/A
rx rate: 2 Mbps
tx rate: 11 Mbps
WLAN mode: B
signal: 22 dB
XR: no
wpa was negotiated: no
wpa2 was negotiated: no
cipher: WEP
receive:
frames ok: 159
errors: 0
discarded frames: 0
unicast frames: 93
broadcast frames: 57
multicast frames: 9
transmit:
frames ok: 76
errors: 0
dropped frames: 0
unicast frames: 76
Chapter 4: CLI Commands 63
Informational Commands
info connections
PURPOSE
The
info connections command is used to display information about
currently active connections between your network and the external world.
SYNTAX
info connections
PARAMETERS
None.
ETURN VALUES
R
Connection table
The following information is displayed for each connection:
src_ip
The number of currently active connections.
The source IP address.
sport
dst_ip
dport
ip_p
time
64 D-Link NetDefend CLI Reference Guide
The source port.
The destination IP address.
The destination port.
The IP protocol.
The connection timeout (in seconds).
If no packets pass for this interval of time, the firewall
terminates the connection.
Informational Commands
options
QoS class
Internal
attributes
Displays further details about the connection:
• Plain - The connection is not encrypted.
AES/3DES - The connection is encrypted.
•
•
Through VPN - The connection is a VPN
connection.
Scanned - The connection is being scanned by
•
VStream Antivirus.
The QoS class to which the connection belongs.
The connection's internal attributes. This can be any of the
following:
BOTH_FIN ESTABLISHED - The connection
•
was terminated by both parties.
SRC_FIN ESTABLISHED - The connection
•
was terminated by the source party.
• DST_FIN ESTABLISHED - The connection
was terminated by the destination party.
ESTABLISHED - The connection is in
•
established state.
MORE_INSPECT - The connection needs more
•
inspection by the firewall.
Chapter 4: CLI Commands 65
Informational Commands
EXAMPLE
Running this command results in information such as the following:
info connect
Connection table - 8 connections
src_ip | sport | dst_ip | dport | ip_p | time | Options | QoS class
| Internal attributes
-------------------------
192.168.10.12 | 3163 | 192.168.10.1 | 80 | 6 | 13 | Plain | Default
| BOTH_FIN ESTABLISHED
192.168.10.12 | 3162 | 192.168.10.1 | 80 | 6 | 3 | Plain | Default
| BOTH_FIN ESTABLISHED
....
66 D-Link NetDefend CLI Reference Guide
Informational Commands
info device
PURPOSE
The
info device command is used to display information about your appliance,
such as your current firmware version and additional details.
SYNTAX
info device
PARAMETERS
None.
ETURN VALUES
R
MAC Address
The appliance's WAN MAC address.
Bootcode version
Hardware version
Appliance Type
Product Key
Product Name
Used Nodes
Uptime
Debug Firmware
The version of the NetDefend bootloader.
The version of the hardware.
The type of the current NetDefend firewall hardware.
The installed Product Key.
The licensed software and the number of allowed nodes.
The number of nodes used.
The time that elapsed from the moment the unit was turned
on.
Indicates whether the currently installed firmware is a special
debug firmware. This can be either of the following:
• Yes
• No
This field is used by support personnel.
Chapter 4: CLI Commands 67
Informational Commands
Free Memory
Running Firmware
Backup Firmware
VStream database
(Main)
VStream database
(Daily)
Displays the amount of free memory in kilobytes:
User - The amount of free memory in the user
•
module.
Kernel - The amount of free memory in the
•
kernel module.
The version of the firmware that is currently in use.
The version of the backup firmware.
If no backup firmware is available, this field displays
Information about the VStream Antivirus main database:
• The date and time at which the database was last
updated
Version - The version number
•
•
Size - The database's size
CRC - The database's CRC (Cyclic Redundancy
•
Check) value for file verification
Information about the VStream Antivirus daily database:
• The date and time at which the database was last
updated
Version - The version number
•
•
Size - The database's size
CRC - The database's CRC value for file
•
verification
N/A.
68 D-Link NetDefend CLI Reference Guide
Informational Commands
EXAMPLE
Running this command results in information such as the following:
[700000] Device Information:
MAC Address: 00:08:da:77:70:70
Bootcode version: 19
Hardware version: 1.1
Appliance Type: SBox-200
Product Key: 747478-22234-e5d66f
Product Name: D-Link NetDefend, 10 nodes
Used Nodes: 1
Uptime: 45 days, 02:05:53
Debug Firmware: No
Free Memory: User 914K
Kernel 1829K
Running Firmware: 6.0.45x
Primary Firmware: 6.0.45x
Backup Firmware: N/A
VStream database (Main): Sep 13, 2005 12:20 GMT. Version: 1.1.0
Size: 703312 bytes CRC: 0x823d70ef
VStream database (Daily): Dec 04, 2005 06:29 GMT. Version:
1.1.46 Size: 175754 bytes CRC: 0x6d7368d2
Chapter 4: CLI Commands 69
Informational Commands
info fw
PURPOSE
The
info fw command is used to display firewall statistics for incoming and
outgoing traffic.
SYNTAX
info fw
PARAMETERS
None.
ETURN VALUES
R
The displayed firewall statistics is divided into information on he following:
Inbound packets - Statistics for incoming data packets in the active connection
Outbound packets - Statistics for outgoing data packets in the active connection
Total
Accepted
Dropped
Total
Accepted
Dropped
The total number of incoming data packets
The number of incoming data packets received
The number of incoming data packets that were blocked by
the firewall
The total number of outgoing data packets
The number of data packets sent
The number of outgoing data packets that were blocked by
the firewall
70 D-Link NetDefend CLI Reference Guide
Informational Commands
EXAMPLE
Running this command results in information such as the following:
[700000] Firewall statistics:
Inbound packets:
Total: 35867
Accepted: 14919
Dropped: 20948
Outbound packets:
Total: 13641
Accepted: 13477
Dropped: 164
Chapter 4: CLI Commands 71
Informational Commands
info logs
PURPOSE
The
info logs command is used to display information about the most recent
events, including the date and the time that each event occurred, and its type.
SYNTAX
info logs
PARAMETERS
None.
ETURN VALUES
R
The Event Log. The following information is displayed for each event:
Number The log's number in the Event Log
Date
Time The time in the format:
The date in the format:
day/month
HH:MM:SS
where:
HH
= hours
MM = minutes
SS = seconds
Log The log identification number
72 D-Link NetDefend CLI Reference Guide
Informational Commands
The following additional information is displayed for logged connections:
Src
The source IP address
SPort
Dst
DPort
IPP
Rule
The source port
The destination IP address
The destination port
The IP protocol
The rule identification number. This can be any of the
following:
• A positive number - Indicates user -defined rules
and default policy rules.
• A negative number - Indicates an implied rule.
EXAMPLE
Running this command results in information such as the following:
Event Logs:
00299 4/12 09:33:22 Log 60031: User admin logged in
(Source IP: 192.168.10.12)
00298 4/12 09:32:44 Log 50000: Dropped Inbound packet
(Policy rule) Src:217.132.249.147 SPort:1339
Dst:217.132.214.83 DPort:139 IPP:6 Rule: 15
00297 4/12 09:32:34 Log 50000: Dropped Inbound packet
(Cisco IOS DoS) Src:212.143.205.164 SPort:8192
Dst:224.0.0.13 DPort:51393 IPP:103
...
Chapter 4: CLI Commands 73
Informational Commands
info nat
PURPOSE
The
info nat command is used to display the NAT (Network Address
Translation) rules that are currently in effect. The NetDefend firewall supports the
following types of NAT:
• Hide NAT - Enables you to share a single public Internet IP address among
several computers, by “hiding” the private IP addresses of the internal
network computers behind the network's single Internet IP address. For
information on configuring Hide NAT for an internal network, see net lan
on page 181, net dmz on page 168, net wlan on page 219, and vlan on
page 350.
• Static NAT - Allows the mapping of Internet IP addresses or address
ranges to hosts inside the internal network. For information on configuring
Static NAT for a network object, see netobj on page 226.
S
YNTAX
info nat
ARAMETERS
P
None.
74 D-Link NetDefend CLI Reference Guide
Informational Commands
RETURN VALUES
NAT table
The number of NAT rules.
The following information is displayed for each NAT rule:
Number The NAT rule's number.
original source
original
destination
original ports
translated source
The original source. This can be the following:
• An internal network
• An IP address
• An IP range
•
any - Any source
The original destination. This can be the following:
• An internal network
• An IP address
• An IP range
•
any - Any destination
The original port. This can be the following:
• A port
• A range of ports
•
any - Any port
The translated source. This can be the following:
• An internal network
• An IP address
• An IP range
•
original - The original destination
translated
destination
Chapter 4: CLI Commands 75
The translated destination. This can be the following:
• An internal network
• An IP address
• An IP range
•
original - The original destination
Informational Commands
translated ports
type
source
The translated ports. This can be the following:
• A port
• A range of ports
original - The original port
•
The type of NAT used. This can be the following:
hide - Hide NAT
•
• static - Static NAT
The source of the NAT rule. This can be the following:
local - The rule was created locally, by
•
configuring an Allow & Forward rule, Hide NAT for
an internal network, or Static NAT for a network
object.
management - The rule was downloaded from
•
the remote management.
EXAMPLE
Running this command results in information such as the following:
NAT Table - 2 NAT rules
1 :
original source: lan
original destination: any
original ports: any
translated source: 217.132.233.250
translated destination: original
translated ports: original
type: hide
source: local
76 D-Link NetDefend CLI Reference Guide
Informational Commands
2 :
original source: dmz
original destination: any
original ports: any
translated source: 217.132.233.250
translated destination: original
translated ports: original
type: hide
source: local
Chapter 4: CLI Commands 77
Informational Commands
info net
PURPOSE
The
info net command is used to display information about your appliance's
network interfaces.
SYNTAX
info net [interface]
P
ARAMETERS
interface
Integer. The network interface for which to display
information. This parameter can have the following values:
1 - Display information for the WAN interface
•
• 2 - Display information for the LAN interface
•
3 - Display information about the DMZ interface
• 4 - Display information about the WLAN interface
• 5 - Display information about the OfficeMode
interface
If you do not include this parameter, information is displayed
for all networks.
RETURN VALUES
The following information is displayed for each network interface:
name
ip
mac
78 D-Link NetDefend CLI Reference Guide
The network interface's name.
Note: The OfficeMode network's name is
The appliance's current IP address on the specified interface.
The appliance's MAC address on the specified interface.
Note: The OfficeMode network's MAC address is
office.
undefined.
Informational Commands
EXAMPLE
Running this command for all network interfaces results in information such as the
following:
net:
1:
name wan
ip 217.132.214.83
mac 00:08:da:77:70:70
2:
name lan
ip 192.168.10.1
mac 00:08:da:77:70:6e
3:
name dmz
ip 192.168.253.1
mac 00:08:da:77:70:6f
4:
name wlan
ip 192.168.252.1
mac 00:20:ed:08:7a:e0
5:
name office
ip 192.168.254.1
mac undefined
Chapter 4: CLI Commands 79
Informational Commands
info ospf
PURPOSE
The
info ospf command is used to display general information about your
appliance's OSPF settings.
SYNTAX
info ospf
PARAMETERS
None.
ETURN VALUES
R
General OSPF information.
XAMPLE
E
Running this command results in information such as the following:
OSPF Routing Process, Router ID: 1.2.3.4
Supports only single TOS (TOS0) routes
This implementation conforms to RFC2328
RFC1583Compatibility flag is disabled
SPF schedule delay 1 secs, Hold time between two SPFs 1 secs
Refresh timer 10 secs
Number of external LSA 0
Number of areas attached to this router: 5
80 D-Link NetDefend CLI Reference Guide
Informational Commands
info ospf database
PURPOSE
The
info ospf database command is used to display information about the
OSPF link-state database.
SYNTAX
info ospf database
PARAMETERS
None.
ETURN VALUES
R
Information about reported link states.
XAMPLE
E
Running this command results in information such as the following:
Chapter 4: CLI Commands 81
Informational Commands
OSPF Router with ID (62.90.32.158)
Router Link States (Area 0.0.0.0)
Link ID ADV Router Age Seq# CkSum Link count
62.90.32.158 62.90.32.158 569 0x80000005 0x65da 1
192.168.10.3 192.168.10.3 630 0x80000005 0xfb66 1
192.168.10.4 192.168.10.4 631 0x80000006 0xfa62 1
192.168.10.10 192.168.10.10 634 0x80000005 0x0629 1
192.168.10.11 192.168.10.11 570 0x80000008 0xe85d 1
Net Link States (Area 0.0.0.0)
Link ID ADV Router Age Seq# CkSum
192.168.10.11 192.168.10.11 570 0x80000004 0x24e8
Summary Link States (Area 0.0.0.0)
Link ID ADV Router Age Seq# CkSum Route
1.1.2.0 192.168.10.4 1053 0x80000001 0x36a1 1.1.2.0/24
10.0.0.0 192.168.10.11 3 0x80000002 0xb613 10.0.0.0/24
ASBR-Summary Link States (Area 0.0.0.0)
Link ID ADV Router Age Seq# CkSum
# 62.90.32.131 192.168.10.4 997 0x80000001 0x6d31
82 D-Link NetDefend CLI Reference Guide
Informational Commands
Router Link States (Area 2.2.2.2)
Link ID ADV Router Age Seq# CkSum Link count
62.90.32.158 62.90.32.158 590 0x80000001 0xeac9 0
AS External Link States
Link ID ADV Router Age Seq# CkSum Route
0.0.0.0 62.90.32.131 999 0x80000001 0x0120 E1 0.0.0.0/0
[0x0]
0.0.0.0 192.168.10.3 1090 0x80000001 0xb2bd E2 0.0.0.0/0
[0x0]
0.0.0.0 192.168.10.4 1057 0x80000001 0xa34e E2 0.0.0.0/0
[0x0]
62.90.32.0 192.168.10.3 634 0x80000004 0x7a12 E2
62.90.32.0/24 [0x0]
Chapter 4: CLI Commands 83
Informational Commands
info ospf interface
PURPOSE
The
info ospf interface command is used to display the status and OSPF
settings of each network interface and VTI (Virtual Tunnel Interface).
SYNTAX
info ospf interface
PARAMETERS
None.
ETURN VALUES
R
OSPF information for each network interface and VIT.
84 D-Link NetDefend CLI Reference Guide
Informational Commands
EXAMPLE
Running this command results in information such as the following:
lan is up
ifindex 9, MTU 1500 bytes, BW 0 Kbit
<UP,BROADCAST,RUNNING,MULTICAST>
Internet Address 192.168.10.101/24, Broadcast 192.168.10.255,
Area 0.0.0.0
MTU mismatch detection:enabled
Router ID 192.168.10.101, Network Type BROADCAST, Cost: 10
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 192.168.10.101, Interface Address
192.168.10.101
No backup designated router on this network
Multicast group memberships: OSPFAllRouters OSPFDesignatedRouters
Timer intervals configured, Hello 10s, Dead 40s, Wait 40s,
Retransmit 5
Hello due in 7.952s
Neighbor Count is 0, Adjacent neighbor count is 0
wan is up
ifindex 3, MTU 1500 bytes, BW 0 Kbit
<UP,BROADCAST,RUNNING,MULTICAST>
OSPF not enabled on this interface
dmz is up
ifindex 4, MTU 1500 bytes, BW 0 Kbit <UP,BROADCAST,MULTICAST>
OSPF not enabled on this interface
Chapter 4: CLI Commands 85
Informational Commands
info ospf neighbor
PURPOSE
The
info ospf neighbor command is used to display information about your
appliance's OSPF neighbors.
SYNTAX
info ospf neighbor
PARAMETERS
None.
ETURN VALUES
R
A list of OSPF neighbors. The information provided for each OSPF neighbor
includes the following:
Neighbor ID Pri
State
The OSPF neighbor's router ID.
Dead Time Address
Interface
86 D-Link NetDefend CLI Reference Guide
The interval of time in seconds after which the OSPF neighbor
will be considered "dead", if it does not communicate in any
way.
The NetDefend firewall's IP address used for communicating
with this neighbor.
Informational Commands
EXAMPLE
Running this command results in information such as the following:
Neighbor ID Pri State Dead Time Address Interface
RXmtL RqstL DBsmL
192.168.10.3 1 Full/DROther 34.231s 192.168.10.3
lan:192.168.10.101 0 0 0
192.168.10.4 1 Full/DROther 34.234s 192.168.10.4
lan:192.168.10.101 0 0 0
192.168.10.10 1 Full/DROther 33.112s 192.168.10.10
lan:192.168.10.101 0 0 0
192.168.10.11 1 Full/Backup 34.230s 192.168.10.11
lan:192.168.10.101 0 0 0
Chapter 4: CLI Commands 87
Informational Commands
info ospf routes
PURPOSE
The
info ospf routes command is used to display information about OSPF
routes.
SYNTAX
info ospf routes
PARAMETERS
None.
ETURN VALUES
R
A list of OSPF-related routes. Each route is marked with a code that indicates its
type. The NetDefend firewall supports the following route types:
K
A kernel route.
Kernel routes are routes that are recognized by the OSPF daemon
via the kernel. For example, a static route.
C
R
O
I
>
88 D-Link NetDefend CLI Reference Guide
A connected route.
Connected routes are routes that are created for each new network
defined on the NetDefend firewall. For example, LAN
An RIP route.
An OSPF route.
OSPF routes are routes learned via OSPF.
An ISIS route.
A selected route.
Loading...