ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Betriebsanweisung Seite 1

www.zyxel.comZyWALL (ZLD)CLI Reference GuideVersion 2.213/2010Edition 1DEFAULT LOGINUser Name adminPassword 1234

10

Chapter 9 Routing ProtocolZyWALL (ZLD) CLI Reference Guide1009.2.5 Learned Routing Information CommandsThis table lists the commands to look at learn

ZyWALL (ZLD) CLI Reference Guide101CHAPTER 10 ZonesSet up zones to configure network security and network policies in the ZyWALL. 10.1 Zones Overvie

Chapter 10 ZonesZyWALL (ZLD) CLI Reference Guide10210.2 Zone Commands SummaryThe following table describes the values required for many zone commands

Chapter 10 ZonesZyWALL (ZLD) CLI Reference Guide10310.2.1 Zone Command ExamplesThe following commands add Ethernet interfaces ge1 and ge2 to zone A

Chapter 10 ZonesZyWALL (ZLD) CLI Reference Guide104

ZyWALL (ZLD) CLI Reference Guide105CHAPTER 11 DDNSThis chapter describes how to configure dynamic DNS (DDNS) services for the ZyWALL.11.1 DDNS Overv

Chapter 11 DDNSZyWALL (ZLD) CLI Reference Guide10611.2 DDNS Commands SummaryThe following table describes the values required for many DDNS commands.

Chapter 11 DDNSZyWALL (ZLD) CLI Reference Guide107[no] wan-iface interface_name Sets the WAN interface in the specified DDNS profile. The no command

Chapter 11 DDNSZyWALL (ZLD) CLI Reference Guide108

ZyWALL (ZLD) CLI Reference Guide109CHAPTER 12 Virtual ServersThis chapter describes how to set up, manage, and remove virtual servers. Virtual server

ZyWALL (ZLD) CLI Reference Guide11CHAPTER 1 Command Line InterfaceThis chapter describes how to access and use the CLI (Command Line Interface).1.1

Chapter 12 Virtual ServersZyWALL (ZLD) CLI Reference Guide110The following table lists the virtual server commands.Table 58 ip virtual-server Comman

Chapter 12 Virtual ServersZyWALL (ZLD) CLI Reference Guide111ip virtual-server profile_name interface interface_name original-ip {any | IP | address_

Chapter 12 Virtual ServersZyWALL (ZLD) CLI Reference Guide11212.2.1 Virtual Server Command ExamplesThe following command creates virtual server WAN-L

Chapter 12 Virtual ServersZyWALL (ZLD) CLI Reference Guide113Create two address objects. One is named DMZ_HTTP for the HTTP server’s private IP addre

Chapter 12 Virtual ServersZyWALL (ZLD) CLI Reference Guide114

ZyWALL (ZLD) CLI Reference Guide115CHAPTER 13 HTTP RedirectThis chapter shows you how to configure HTTP redirection on your ZyWALL.13.1 HTTP Redire

Chapter 13 HTTP RedirectZyWALL (ZLD) CLI Reference Guide11613.2 HTTP Redirect CommandsThe following table identifies the values required for many of

Chapter 13 HTTP RedirectZyWALL (ZLD) CLI Reference Guide11713.2.1 HTTP Redirect Command ExamplesThe following commands create a HTTP redirect rule,

Chapter 13 HTTP RedirectZyWALL (ZLD) CLI Reference Guide118

ZyWALL (ZLD) CLI Reference Guide119CHAPTER 14 ALGThis chapter covers how to use the ZyWALL’s ALG feature to allow certain applications to pass throug

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide12" The ZyWALL might force you to log out of your session if reauthentication tim

Chapter 14 ALGZyWALL (ZLD) CLI Reference Guide12014.2 ALG Commands The following table lists the alg commands. You must use the configure terminal co

Chapter 14 ALGZyWALL (ZLD) CLI Reference Guide12114.3 ALG Commands ExampleThe following example turns on pass through for SIP and turns it off for H

Chapter 14 ALGZyWALL (ZLD) CLI Reference Guide122

123PART IIIFirewallFirewall (125)

124

ZyWALL (ZLD) CLI Reference Guide125CHAPTER 15 FirewallThis chapter introduces the ZyWALL’s firewall and shows you how to configure your ZyWALL’s fire

Chapter 15 FirewallZyWALL (ZLD) CLI Reference Guide126Your customized rules take precedence and override the ZyWALL’s default settings. The ZyWALL che

Chapter 15 FirewallZyWALL (ZLD) CLI Reference Guide127firewall zone_object {zone_object|ZyWALL} rule_numberEnters the firewall sub-command mode to se

Chapter 15 FirewallZyWALL (ZLD) CLI Reference Guide12815.2.1 Firewall Sub-CommandsThe following table describes the sub-commands for several firewall

Chapter 15 FirewallZyWALL (ZLD) CLI Reference Guide12915.2.2 Firewall Command ExamplesThe following example shows you how to add a firewall rule to

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide13Enter the user name and password at the prompts." The default login username i

Chapter 15 FirewallZyWALL (ZLD) CLI Reference Guide130The following command displays the firewall rule(s) (including the default firewall rule) that a

Chapter 15 FirewallZyWALL (ZLD) CLI Reference Guide131The following table describes the session-limit commands. You must use the configure terminal c

Chapter 15 FirewallZyWALL (ZLD) CLI Reference Guide132

133PART IVVPNIPSec VPN (135)SSL VPN (145)L2TP VPN (151)

134

ZyWALL (ZLD) CLI Reference Guide135CHAPTER 16 IPSec VPNThis chapter explains how to set up and maintain IPSec VPNs in the ZyWALL. 16.1 IPSec VPN Ove

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide136Figure 20 VPN: IKE SA and IPSec SA In this example, a computer in network A is exchanging dat

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide137The following sections list the IPSec VPN commands.16.2.1 IKE SA CommandsThis table lists the

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide138transform-set isakmp-algo [isakmp_algo [isakmp_algo]]Sets the encryption and authentication alg

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide13916.2.2 IPSec SA Commands (except Manual Keys)This table lists the commands for IPSec SAs, exc

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide14Figure 4 Web Console: User Name 5 Enter the user name you want to use to log in to

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide140scenario {site-to-site-static|site-to-site-dynamic|remote-access-server|remote-access-client}Se

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide141in-snat source address_name destination address_name snat address_nameConfigures in-bound traf

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide14216.2.3 IPSec SA Commands (for Manual Keys)This table lists the additional commands for IPSec S

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide14316.2.5 SA Monitor CommandsThis table lists the commands for the SA monitor.[no] crypto map_na

Chapter 16 IPSec VPNZyWALL (ZLD) CLI Reference Guide144

ZyWALL (ZLD) CLI Reference Guide145CHAPTER 17 SSL VPNThis chapter shows you how to set up secure SSL VPN access for remote user login.17.1 SSL Acces

Chapter 17 SSL VPNZyWALL (ZLD) CLI Reference Guide146The following sections list the SSL VPN commands.17.2.1 SSL VPN CommandsThis table lists the com

Chapter 17 SSL VPNZyWALL (ZLD) CLI Reference Guide14717.2.2 Setting an SSL VPN Rule TutorialHere is an example SSL VPN configuration. The SSL VPN ru

Chapter 17 SSL VPNZyWALL (ZLD) CLI Reference Guide1481 First of all, configure 10.1.1.254/24 for the IP address of interface ge2 which is an external

Chapter 17 SSL VPNZyWALL (ZLD) CLI Reference Guide1495 Create an SSL VPN rule named SSL_VPN_TEST. Enable it and apply objects you just created.6 Disp

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide15Figure 7 Web Console 7 To use most commands in this User’s Guide, enter configure

Chapter 17 SSL VPNZyWALL (ZLD) CLI Reference Guide150

ZyWALL (ZLD) CLI Reference Guide151CHAPTER 18 L2TP VPNThis chapter explains how to set up and maintain L2TP VPNs in the ZyWALL. 18.1 L2TP VPN Overvi

Chapter 18 L2TP VPNZyWALL (ZLD) CLI Reference Guide152• Not be a manual key VPN connection. •Use Pre-Shared Key authentication.• Use a VPN gateway wit

Chapter 18 L2TP VPNZyWALL (ZLD) CLI Reference Guide15318.4 L2TP VPN CommandsThe following table describes the values required for some L2TP VPN comm

Chapter 18 L2TP VPNZyWALL (ZLD) CLI Reference Guide15418.5 L2TP VPN ExampleThis example uses the following settings in creating a basic L2TP VPN tunn

Chapter 18 L2TP VPNZyWALL (ZLD) CLI Reference Guide155Figure 23 L2TP VPN Example• The ZyWALL has a static IP address of 172.23.37.205 for the ge3 i

Chapter 18 L2TP VPNZyWALL (ZLD) CLI Reference Guide156•For the Remote Policy, create an address object that uses host type and an IP address of 0.0.0.

Chapter 18 L2TP VPNZyWALL (ZLD) CLI Reference Guide157• Enable the policy route. Router(config)# policy 3Router(policy-route)# source LAN_SUBNETRout

Chapter 18 L2TP VPNZyWALL (ZLD) CLI Reference Guide158

159PART VApplication PatrolApplication Patrol (161)

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide16Figure 8 SSH Login Example 1.3 How to Find Commands in this GuideYou can simply l

160

ZyWALL (ZLD) CLI Reference Guide161CHAPTER 19 Application PatrolThis chapter describes how to set up application patrol for the ZyWALL. 19.1 Applica

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide16219.2 Application Patrol Commands SummaryThe following table describes the values requ

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide16319.2.2 Rule Commands for Pre-defined ApplicationsThis table lists the commands for r

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide16419.2.3 Exception Commands for Pre-defined ApplicationsThis table lists the commands f

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide16519.2.3.1 Exception Rule Sub-commandsThe following table describes the sub-commands f

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide16619.2.4 Other Application CommandsThis table lists the commands for other applications

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide16719.2.6 General Commands for Application Patrol" You must register for the IDP/A

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide168[no] app other protocol_name bandwidth-graph Sets traffic for unidentified application

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide16919.2.6.1 General Command ExamplesThe following examples show the information that is

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide171.4.3 Command SummaryThis section lists the commands for the feature in one or mor

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide170Router# configure terminalRouter(config)# show app http rule allindex: default activa

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide171Router# configure terminalRouter(config)# show app other rule allindex: 1 activate:

Chapter 19 Application PatrolZyWALL (ZLD) CLI Reference Guide172

173PART VIAnti-XAnti-Virus (175)IDP Commands (183)Content Filtering (201)Anti-Spam (211)

174

ZyWALL (ZLD) CLI Reference Guide175CHAPTER 20 Anti-VirusThis chapter introduces and shows you how to configure the anti-virus scanner. 20.1 Anti-Vir

Chapter 20 Anti-VirusZyWALL (ZLD) CLI Reference Guide17620.2.1 General Anti-virus CommandsThe following table describes general anti-virus commands.

Chapter 20 Anti-VirusZyWALL (ZLD) CLI Reference Guide177anti-virus rule <1..32> Enters the anti-virus sub-command mode to edit the specified di

Chapter 20 Anti-VirusZyWALL (ZLD) CLI Reference Guide17820.2.2.1 Zone to Zone Anti-virus Rule ExampleThis example shows how to configure (and display

Chapter 20 Anti-VirusZyWALL (ZLD) CLI Reference Guide17920.2.3.1 White and Black Lists ExampleThis example shows how to enable the white list and co

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide18See Chapter 25 on page 233 for more information about the user types. User users can

Chapter 20 Anti-VirusZyWALL (ZLD) CLI Reference Guide18020.2.4 Signature Search Anti-virus Command The following table describes the command for sea

Chapter 20 Anti-VirusZyWALL (ZLD) CLI Reference Guide18120.3.1 Update Signature ExamplesThese examples show how to enable/disable automatic anti-vir

Chapter 20 Anti-VirusZyWALL (ZLD) CLI Reference Guide18220.4.1 Anti-virus Statistics ExampleThis example shows how to collect and display anti-virus

ZyWALL (ZLD) CLI Reference Guide183CHAPTER 21 IDP CommandsThis chapter introduces IDP-related commands.21.1 OverviewCommands mostly mirror web confi

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide184This table shows the IDP signature, anomaly, and system-protect activation commands.21.2.1.1

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide18521.3.1.1 Example of Global Profile CommandsIn this example we rename an IDP signature prof

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide18621.3.2.1 Example of IDP Zone to Zone Rule CommandsThe following example creates IDP zone to

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide18721.3.4 Editing/Creating Anomaly ProfilesUse these commands to create a new anomaly profile

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide188[no] scan-detection open-port {activate | log [alert] | block}Activates or deactivates open

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide189[no] icmp-decoder {truncated-header | truncated-timestamp-header | truncated-address-header

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide19Figure 9 Help: Available Commands Example 1 Figure 10 Help: Available Command E

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide19021.3.4.1 Creating an Anomaly Profile ExampleIn this example we create a profile named “test

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide19121.3.5 Editing System ProtectUse these commands to edit the system protect profiles. 21.3.

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide19221.3.6.1 Search Parameter TablesThe following table displays the command line severity, pla

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide193The following table displays the command line service and action equivalent values. If you

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide194" You must use the web configurator to import a custom signature file. 21.4.1 Custom S

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide195This example shows you how to edit a custom signature. This example shows you how to displa

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide196This example shows you how to display custom signature contents. Router(config)# show idp si

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide197This example shows you how to display all details of a custom signature. This example shows

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide19821.5.1 Update Signature ExamplesThese examples show how to enable/disable automatic IDP dow

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide19921.6.1 IDP Statistics ExampleThis example shows how to collect and display IDP statistics.

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide201.6.3 Entering Partial CommandsThe CLI does not accept partial or incomplete comman

Chapter 21 IDP CommandsZyWALL (ZLD) CLI Reference Guide200

ZyWALL (ZLD) CLI Reference Guide201CHAPTER 22 Content FilteringThis chapter covers how to use the content filtering feature to control web access. 22

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide202Figure 24 Content Filtering Lookup Procedure1 A computer behind the ZyWALL tries to a

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide203trust_hosts The IP address or domain name of a trusted web site. Use a host name such

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide204The following table lists the content filtering web category names.rating_server The ho

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide20522.6 General Content Filter CommandsThe following table lists the commands that you c

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide20622.7 Content Filter Filtering Profile CommandsThe following table lists the commands t

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide20722.8 Content Filter Commands The following table lists the commands that you can use

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide208Use the configure terminal command to enter the configuration mode to be able to use th

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide2091 First, create a sales address object. This example uses a subnet that covers IP addr

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide211.7 Input ValuesYou can use the ? or [TAB] to get more information about the next

Chapter 22 Content FilteringZyWALL (ZLD) CLI Reference Guide210Use this command to display the settings of the profile.Router(config)# show content-fi

ZyWALL (ZLD) CLI Reference Guide211CHAPTER 23 Anti-SpamThis chapter introduces and shows you how to configure the anti-spam scanner. 23.1 Anti-Spam

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide21223.2.1.1 Activate/Deactivate Anti-Spam ExampleThis example shows how to activate and deactivat

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide21323.2.2.1 Zone to Zone Anti-spam Rule ExampleThis example shows how to configure (and display)

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide214Use the white list to identify legitimate e-mail and the black list to identify spam e-mail. Th

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide21523.2.3.1 White and Black Lists ExampleThis example shows how to configure and enable a white

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide216The following table identifies the values required for many of these commands. Other input valu

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide21723.2.4.1 DNSBL ExampleThis example:• Sets the ZyWALL to use “DNSBL-example.com” as a DNSBL.•

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide21823.3 Anti-Spam StatisticsThe following table describes the commands for collecting and display

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide21923.3.1 Anti-Spam Statistics ExampleThis example shows how to collect anti-spam statistics and

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide22domain name Used in content filtering0+ lower-case letters, numbers, or .-Used in ip

Chapter 23 Anti-SpamZyWALL (ZLD) CLI Reference Guide220

221PART VIIDevice HADevice HA (223)

222

ZyWALL (ZLD) CLI Reference Guide223CHAPTER 24 Device HAUse device HA to increase network reliability. Device HA lets a backup ZyWALL (B) automaticall

Chapter 24 Device HAZyWALL (ZLD) CLI Reference Guide224" Only ZyWALLs of the same model and firmware version can synchronize.Otherwise you must m

Chapter 24 Device HAZyWALL (ZLD) CLI Reference Guide225Monitored Interfaces in Active-Passive Mode Device HAYou can select which interfaces device HA

Chapter 24 Device HAZyWALL (ZLD) CLI Reference Guide226device-ha ap-mode priority <1..254> Sets backup ZyWALL’s priority. The backup ZyWALL with

Chapter 24 Device HAZyWALL (ZLD) CLI Reference Guide22724.4.2 Active-Passive Mode Device HA Command ExampleThis example configures a ZyWALL to be a

Chapter 24 Device HAZyWALL (ZLD) CLI Reference Guide228VRRP Group OverviewIn the ZyWALL, you should create a VRRP group to add one of its interfaces t

Chapter 24 Device HAZyWALL (ZLD) CLI Reference Guide22924.6.2 VRRP Synchronization CommandsThis table lists the commands for synchronization. You ca

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide23password: less than 15 chars1-15 alphanumeric or `~!@#$%^&*()_\-+={}|\;:'&

Chapter 24 Device HAZyWALL (ZLD) CLI Reference Guide23024.6.3 Link Monitoring CommandsThis table lists the commands for link monitoring. Link monitor

231PART VIIIObjectsUser/Group (233)Addresses (241)Services (245)Schedules (249)AAA Server (251)Authentication Objects (259)Certificates (263)IS

232

ZyWALL (ZLD) CLI Reference Guide233CHAPTER 25 User/GroupThis chapter describes how to set up user accounts, user groups, and user settings for the Zy

Chapter 25 User/GroupZyWALL (ZLD) CLI Reference Guide23425.2 User/Group Commands SummaryThe following table identify the values required for many use

Chapter 25 User/GroupZyWALL (ZLD) CLI Reference Guide23525.2.2 User Group CommandsThis table lists the commands for groups.25.2.3 User Setting Comm

Chapter 25 User/GroupZyWALL (ZLD) CLI Reference Guide23625.2.3.1 User Setting Command ExamplesThe following commands show the current settings for th

Chapter 25 User/GroupZyWALL (ZLD) CLI Reference Guide23725.2.4 Force User Authentication CommandsThis table lists the commands for forcing user auth

Chapter 25 User/GroupZyWALL (ZLD) CLI Reference Guide23825.2.4.1 force-auth Sub-commandsThe following table describes the sub-commands for several fo

Chapter 25 User/GroupZyWALL (ZLD) CLI Reference Guide23925.2.4.2 Force Authentication Policy Insert Command ExampleThe following commands show how t

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide241.8 Ethernet InterfacesHow you specify an Ethernet interface depends on the ZyWALL

Chapter 25 User/GroupZyWALL (ZLD) CLI Reference Guide24025.2.5.1 Additional User Command ExamplesThe following commands display the users that are cu

ZyWALL (ZLD) CLI Reference Guide241CHAPTER 26 AddressesThis chapter describes how to set up addresses and address groups for the ZyWALL.26.1 Address

Chapter 26 AddressesZyWALL (ZLD) CLI Reference Guide242The following sections list the address object and address group commands.26.2.1 Address Objec

Chapter 26 AddressesZyWALL (ZLD) CLI Reference Guide24326.2.2 Address Group CommandsThis table lists the commands for address groups.26.2.2.1 Addre

Chapter 26 AddressesZyWALL (ZLD) CLI Reference Guide244

ZyWALL (ZLD) CLI Reference Guide245CHAPTER 27 ServicesUse service objects to define TCP applications, UDP applications, and ICMP messages. You can al

Chapter 27 ServicesZyWALL (ZLD) CLI Reference Guide24627.2.1.1 Service Object Command ExamplesThe following commands create four services, displays t

Chapter 27 ServicesZyWALL (ZLD) CLI Reference Guide24727.2.2.1 Service Group Command ExamplesThe following commands create service ICMP_ECHO, create

Chapter 27 ServicesZyWALL (ZLD) CLI Reference Guide248

ZyWALL (ZLD) CLI Reference Guide249CHAPTER 28 SchedulesUse schedules to set up one-time and recurring schedules for policy routes, firewall rules, ap

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide25" Always save the changes before you log out after each management session. Al

Chapter 28 SchedulesZyWALL (ZLD) CLI Reference Guide250The following table lists the schedule commands.28.2.1 Schedule Command ExamplesThe following

ZyWALL (ZLD) CLI Reference Guide251CHAPTER 29 AAA ServerThis chapter introduces and shows you how to configure the ZyWALL to use external authenticat

Chapter 29 AAA ServerZyWALL (ZLD) CLI Reference Guide25229.2.1 ad-server Commands The following table lists the ad-server commands you use to set the

Chapter 29 AAA ServerZyWALL (ZLD) CLI Reference Guide25329.2.3 radius-server Commands The following table lists the radius-server commands you use t

Chapter 29 AAA ServerZyWALL (ZLD) CLI Reference Guide25429.2.5 aaa group server ad Commands The following table lists the aaa group server ad command

Chapter 29 AAA ServerZyWALL (ZLD) CLI Reference Guide25529.2.6 aaa group server ldap Commands The following table lists the aaa group server ldap co

Chapter 29 AAA ServerZyWALL (ZLD) CLI Reference Guide25629.2.7 aaa group server radius Commands The following table lists the aaa group server radius

Chapter 29 AAA ServerZyWALL (ZLD) CLI Reference Guide25729.2.8 aaa group server Command ExampleThe following example creates a RADIUS server group w

Chapter 29 AAA ServerZyWALL (ZLD) CLI Reference Guide258

ZyWALL (ZLD) CLI Reference Guide259CHAPTER 30 Authentication ObjectsThis chapter shows you how to select different authentication methods for user au

Chapter 1 Command Line InterfaceZyWALL (ZLD) CLI Reference Guide26

Chapter 30 Authentication ObjectsZyWALL (ZLD) CLI Reference Guide26030.2.1 aaa authentication Command ExampleThe following example creates an authent

Chapter 30 Authentication ObjectsZyWALL (ZLD) CLI Reference Guide26130.3 test aaa CommandThe following table lists the test aaa command you use to t

Chapter 30 Authentication ObjectsZyWALL (ZLD) CLI Reference Guide262

ZyWALL (ZLD) CLI Reference Guide263CHAPTER 31 CertificatesThis chapter explains how to use the Certificates.31.1 Certificates OverviewThe ZyWALL can

Chapter 31 CertificatesZyWALL (ZLD) CLI Reference Guide26431.4 Certificates Commands SummaryThe following table lists the commands that you can use t

Chapter 31 CertificatesZyWALL (ZLD) CLI Reference Guide265ca generate pkcs10 name certificate_name cn-type {ip cn cn_address|fqdn cn cn_domain_name|m

Chapter 31 CertificatesZyWALL (ZLD) CLI Reference Guide266ocsp url url [id name password password] [deactivate]Sets the validation configuration for t

Chapter 31 CertificatesZyWALL (ZLD) CLI Reference Guide26731.5 Certificates Commands ExamplesThe following example creates a self-signed X.509 certi

Chapter 31 CertificatesZyWALL (ZLD) CLI Reference Guide268

ZyWALL (ZLD) CLI Reference Guide269CHAPTER 32 ISP AccountsUse ISP accounts to manage Internet Service Provider (ISP) account information for PPPoE/PP

ZyWALL (ZLD) CLI Reference Guide27CHAPTER 2 User and Privilege ModesThis chapter describes how to use these two modes.2.1 User And Privilege Modes T

Chapter 32 ISP AccountsZyWALL (ZLD) CLI Reference Guide27032.1.2 Cellular Account CommandsThe following table lists the cellular ISP account commands

Chapter 32 ISP AccountsZyWALL (ZLD) CLI Reference Guide271[no] password password Sets the password for the specified ISP account. The no command clea

Chapter 32 ISP AccountsZyWALL (ZLD) CLI Reference Guide272

ZyWALL (ZLD) CLI Reference Guide273CHAPTER 33 SSL ApplicationThis chapter describes how to configure SSL application objects for use in SSL VPN.33.1

Chapter 33 SSL ApplicationZyWALL (ZLD) CLI Reference Guide274server-type file-sharing share-path share-pathSpecifies the IP address, domain name or Ne

Chapter 33 SSL ApplicationZyWALL (ZLD) CLI Reference Guide27533.1.2 SSL Application Command ExamplesThe following commands create and display a serv

Chapter 33 SSL ApplicationZyWALL (ZLD) CLI Reference Guide276

ZyWALL (ZLD) CLI Reference Guide277CHAPTER 34 Endpoint SecurityThis chapter describes how to configure endpoint security objects for use in authentic

Chapter 34 Endpoint SecurityZyWALL (ZLD) CLI Reference Guide278RequirementsUser computers must have Sun’s Java (Java Runtime Environment or ‘JRE’) ins

Chapter 34 Endpoint SecurityZyWALL (ZLD) CLI Reference Guide279[no] personal-firewall personal_firewall_software_name detect-auto-protection {enable

Chapter 2 User and Privilege ModesZyWALL (ZLD) CLI Reference Guide28diag P Provided for support personnel to collect internal system information. It i

Chapter 34 Endpoint SecurityZyWALL (ZLD) CLI Reference Guide280os-type {windows | linux | mac-osx | others}Select the type of operating system the use

Chapter 34 Endpoint SecurityZyWALL (ZLD) CLI Reference Guide28134.1.3 Endpoint Security Object Command ExamplePeter wants to create and display an e

Chapter 34 Endpoint SecurityZyWALL (ZLD) CLI Reference Guide282Then he also needs to check the personal firewall software name defined on the ZyWALL.

Chapter 34 Endpoint SecurityZyWALL (ZLD) CLI Reference Guide283Then he leaves the sub-command mode and uses the show command to view the EPS object s

Chapter 34 Endpoint SecurityZyWALL (ZLD) CLI Reference Guide284

285PART IXSystemSystem (287)System Remote Management (295)

286

ZyWALL (ZLD) CLI Reference Guide287CHAPTER 35 SystemThis chapter provides information on the commands that correspond to what you can configure in th

Chapter 35 SystemZyWALL (ZLD) CLI Reference Guide288Figure 27 Access Page Customization You can specify colors in one of the following ways:• color

Chapter 35 SystemZyWALL (ZLD) CLI Reference Guide28935.3 Host Name CommandsThe following table describes the commands available for the hostname and

Chapter 2 User and Privilege ModesZyWALL (ZLD) CLI Reference Guide29Subsequent chapters in this guide describe the configuration commands. User/privi

Chapter 35 SystemZyWALL (ZLD) CLI Reference Guide29035.4.1 Date/Time CommandsThe following table describes the commands available for date and time s

Chapter 35 SystemZyWALL (ZLD) CLI Reference Guide29135.5 Console Port Speed This section shows you how to set the console port speed when you connec

Chapter 35 SystemZyWALL (ZLD) CLI Reference Guide29235.6.2 DNS CommandsThe following table identifies the values required for many of these commands.

Chapter 35 SystemZyWALL (ZLD) CLI Reference Guide29335.6.3 DNS Command ExampleThis command sets an A record that specifies the mapping of a fully qu

Chapter 35 SystemZyWALL (ZLD) CLI Reference Guide294

ZyWALL (ZLD) CLI Reference Guide295CHAPTER 36 System Remote ManagementThis chapter shows you how to determine which services/protocols can access whi

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide29636.2 Common System Command Input ValuesThe following table identifies the value

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide297[no] ip http secure-server cert certificate_name Specifies a certificate used b

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide29836.3.1 HTTP/HTTPS Command ExamplesThis following example adds a service control

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide29936.4.3 SSH CommandsThe following table describes the commands available for SS

About This CLI Reference GuideZyWALL (ZLD) CLI Reference Guide3About This CLI Reference GuideIntended AudienceThis manual is intended for people who

Chapter 2 User and Privilege ModesZyWALL (ZLD) CLI Reference Guide30debug no myzyxel server (*) Set the myZyXEL.com registration/update server to the

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide300This command sets a certificate (Default) to be used to identify the ZyWALL.36.5

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30136.6.1 Telnet Commands ExamplesThis command sets a service control rule that a

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30236.7.2 FTP Commands ExamplesThis command sets a service control rule that allow

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30336.8.1 Supported MIBsThe ZyWALL supports MIB II that is defined in RFC-1213 an

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30436.8.4 SNMP Commands ExamplesThe following command sets a service control rule

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30536.9 ICMP Filter The ip icmp-filter commands are obsolete. See Chapter 15 on p

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30636.10.3 Response StringsThe response strings tell the ZyWALL the tags, or label

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30736.11 Vantage CNM Vantage CNM (Centralized Network Management) is a browser-ba

Chapter 36 System Remote ManagementZyWALL (ZLD) CLI Reference Guide30836.11.1.1 Vantage CNM Command ExamplesThe following example turns on Vantage CN

309PART XMaintenance File Manager (311)Logs (329)Reports and Reboot (335)Diagnostics (343)Maintenance Tools (345)

ZyWALL (ZLD) CLI Reference Guide31CHAPTER 3 Object ReferenceThis chapter describes how to use object reference commands.3.1 Object Reference Command

310

ZyWALL (ZLD) CLI Reference Guide311CHAPTER 37 File ManagerThis chapter covers how to work with the ZyWALL’s firmware, certificates, configuration fil

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide312 These files have the same syntax, which is also identical to the way you run CLI commands m

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide313" “exit” or “!'” must follow sub commands if it is to make the ZyWALL exit sub co

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide314• When you change the configuration, the ZyWALL creates a startup-config.conf file of the cu

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide31537.4 File Manager Commands SummaryThe following table lists the commands that you can use

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide31637.5 File Manager Command ExampleThis example saves a back up of the current configuration

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide3171 The firmware update can take up to five minutes. Do not turn off or reset the ZyWALL whil

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide31837.6.4 Command Line FTP Configuration File Download ExampleThe following example gets a con

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide31937.8 Notification of a Damaged Recovery Image or FirmwareThe ZyWALL’s recovery image and/o

Chapter 3 Object ReferenceZyWALL (ZLD) CLI Reference Guide323.1.1 Object Reference Command ExampleThis example shows how to check which configuration

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide320on page 322 to restore it. If the message does not display, the firmware is OK and you do no

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide321Figure 36 atuk Command for Restoring the Recovery Image4 Enter Y and wait for the “Starti

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide322Figure 40 atgo Debug Command37.10 Restoring the Firmware This procedure requires the ZyWA

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide3238 After the transfer is complete, “Firmware received” or “ZLD-current received” displays. W

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide324Figure 45 Restart Complete37.11 Restoring the Default System Database The default system

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide325Figure 46 Default System Database Console Session Warning at Startup: Anti-virusFigure 47

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide32637.11.1 Using the atkz -u Debug Command" You only need to use the atkz -u command if t

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide3278 Set the transfer mode to binary (type bin).9 Transfer the firmware file from your compute

Chapter 37 File ManagerZyWALL (ZLD) CLI Reference Guide328Figure 55 Startup Complete

ZyWALL (ZLD) CLI Reference Guide329CHAPTER 38 LogsThis chapter provides information about the ZyWALL’s logs. " When the system log reaches the m

ZyWALL (ZLD) CLI Reference Guide33CHAPTER 4 StatusThis chapter explains some commands you can use to display information about the ZyWALL’s current o

Chapter 38 LogsZyWALL (ZLD) CLI Reference Guide33038.1.2 System Log CommandsThis table lists the commands for the system log settings.38.1.2.1 Syste

Chapter 38 LogsZyWALL (ZLD) CLI Reference Guide33138.1.3 Debug Log CommandsThis table lists the commands for the debug log settings.This table lists

Chapter 38 LogsZyWALL (ZLD) CLI Reference Guide332This table lists the commands for setting how often to send information to the VRPT (ZyXEL’s Vantage

Chapter 38 LogsZyWALL (ZLD) CLI Reference Guide33338.1.4.1 E-mail Profile Command ExamplesThe following commands set up e-mail log 1.38.1.5 Console

Chapter 38 LogsZyWALL (ZLD) CLI Reference Guide334logging console category module_name level {alert | crit | debug | emerg | error | info | notice | w

ZyWALL (ZLD) CLI Reference Guide335CHAPTER 39 Reports and RebootThis chapter provides information about the report associated commands and how to res

Chapter 39 Reports and RebootZyWALL (ZLD) CLI Reference Guide33639.1.2 Report Command ExamplesThe following commands start collecting data, display t

Chapter 39 Reports and RebootZyWALL (ZLD) CLI Reference Guide33739.2 Email Daily Report CommandsThe following table identifies the values used in so

Chapter 39 Reports and RebootZyWALL (ZLD) CLI Reference Guide33839.2.1 Email Daily Report ExampleThis example sets the ZyWALL to send a daily report

Chapter 39 Reports and RebootZyWALL (ZLD) CLI Reference Guide339This displays the email daily report settings and has the ZyWALL send the report now.

Chapter 4 StatusZyWALL (ZLD) CLI Reference Guide34Here are examples of the commands that display the fan speed, MAC address, memory usage, RAM size, a

Chapter 39 Reports and RebootZyWALL (ZLD) CLI Reference Guide340

ZyWALL (ZLD) CLI Reference Guide341CHAPTER 40 Session TimeoutUse these commands to modify and display the session timeout values. You must use the co

Chapter 40 Session TimeoutZyWALL (ZLD) CLI Reference Guide342

ZyWALL (ZLD) CLI Reference Guide343CHAPTER 41 DiagnosticsThis chapter covers how to use the diagnostics feature. 41.1 DiagnosticsThe diagnostics f

Chapter 41 DiagnosticsZyWALL (ZLD) CLI Reference Guide344

ZyWALL (ZLD) CLI Reference Guide345CHAPTER 42 Maintenance ToolsUse the maintenance tool commands to check the conditions of other devices through the

Chapter 42 Maintenance ToolsZyWALL (ZLD) CLI Reference Guide346duration <0..300> Sets a time limit in seconds for the capture. The ZyWALL stops

Chapter 42 Maintenance ToolsZyWALL (ZLD) CLI Reference Guide34742.0.1 Command ExamplesSome packet-trace command examples are shown below.Router# pac

Chapter 42 Maintenance ToolsZyWALL (ZLD) CLI Reference Guide348Here are maintenance tool commands that you can use in configure mode.The following exa

Chapter 42 Maintenance ToolsZyWALL (ZLD) CLI Reference Guide349• Duration: 150 secondsExit the sub-command mode and have the ZyWALL capture packets a

Chapter 4 StatusZyWALL (ZLD) CLI Reference Guide35Here is an example of the command that displays the open ports. Router(config)# show socket openNo.

Chapter 42 Maintenance ToolsZyWALL (ZLD) CLI Reference Guide350

ZyWALL (ZLD) CLI Reference Guide351CHAPTER 43 Watchdog TimerThis chapter provides information about the ZyWALL’s watchdog timers. 43.1 Hardware Watc

Chapter 43 Watchdog TimerZyWALL (ZLD) CLI Reference Guide35243.3 Application WatchdogThe application watchdog has the system restart a process that f

Chapter 43 Watchdog TimerZyWALL (ZLD) CLI Reference Guide35343.3.1 Application Watchdog Commands ExampleThe following example displays the applicati

Chapter 43 Watchdog TimerZyWALL (ZLD) CLI Reference Guide354

355PART XICommand List List of Commands (Alphabetical) (357)

356

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide357List of Commands (Alphabetical)This section lists the commands and sub-commands in

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide358[no] anti-spam statistics collect ... 2

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide359[no] authentication string authkey ...

Chapter 4 StatusZyWALL (ZLD) CLI Reference Guide36Here are examples of the commands that display the system uptime and model, firmware, and build info

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide360[no] content-filter profile filtering_profile url match {block | log} ... 2

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide361[no] dial-timeout <30..120> ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide362[no] idle <0..360> ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide363[no] ip telnet server ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide364[no] mss <536..1452> ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide365[no] redistribute {static | rip} ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide366[no] service-name {ip | hostname | service_name} ... 27

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide367[no] users idle-detection timeout <1..60> ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide368anti-spam tag {dnsbl | dnsbl-timeout} [tag] ... 21

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide369budget {log-percentage|log-percentage-alert} [recursive <1..65535>] ...

ZyWALL (ZLD) CLI Reference Guide37CHAPTER 5 RegistrationThis chapter introduces myzyxel.com and shows you how to register the ZyWALL for IDP/AppPatro

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide370crypto map map_name ... 1

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide371debug no myzyxel server (*) ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide372firewall zone_object {zone_object|ZyWALL} move rule_number to rule_number ... 1

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide373interface ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide374{ALL|address_object} zone {ALL|zone_object} action {accept|deny} ... 300ip te

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide375network ip mask ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide376nslookup ... 2

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide377router rip ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide378show ... 23

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide379show app protocol_name rule rule_number ...

Chapter 5 RegistrationZyWALL (ZLD) CLI Reference Guide38When using the trial, you can switch from one engine to the other in the Registration screen.

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide380show eps failure-messages ... 2

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide381show idp profiles ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide382show ldap-server ... 2

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide383show reference object-group address [profile] ...

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide384signature sid log [alert] ... 1

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide385windows-version {windows-2000 | windows-xp | windows-2003 | windows-2008 | windows

List of Commands (Alphabetical)ZyWALL (ZLD) CLI Reference Guide386

Chapter 5 RegistrationZyWALL (ZLD) CLI Reference Guide395.2 Registration CommandsThe following table identifies the values required for many of thes

Document ConventionsZyWALL (ZLD) CLI Reference Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s G

Chapter 5 RegistrationZyWALL (ZLD) CLI Reference Guide40The following command displays the account information and whether the device is registered.Th

Chapter 5 RegistrationZyWALL (ZLD) CLI Reference Guide41033 Brunei Darussalam 034 Bulgaria035 Burkina Faso 036 Burundi037 Cambodia 038 Cameroon039 Ca

Chapter 5 RegistrationZyWALL (ZLD) CLI Reference Guide42109 Japan 110 Jersey111 Jordan 112 Kazakhstan113 Kenya 114 Kiribati115 Korea, Republic of 116

Chapter 5 RegistrationZyWALL (ZLD) CLI Reference Guide43185 Senegal 186 Seychelles187 Sierra Leone 188 Singapore189 Slovak Republic 190 Slovenia191 S

Chapter 5 RegistrationZyWALL (ZLD) CLI Reference Guide44

45PART IINetworkInterfaces (47)Trunks (83)Route (89)Routing Protocol (97)Zones (101)DDNS (105)Virtual Servers (109)HTTP Redirect (115)ALG (11

46

ZyWALL (ZLD) CLI Reference Guide47CHAPTER 6 InterfacesThis chapter shows you how to use interface-related commands.6.1 Interface OverviewIn general,

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide48• Virtual interfaces (IP alias) provide additional routing information in the ZyWALL. There are

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide49* - Each name consists of 2-4 letters (interface type), followed by a number (x). For most inte

Document ConventionsZyWALL (ZLD) CLI Reference Guide5Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The ZyWAL

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide50** - Cellular interfaces can be added to the WAN zone or no zone. 6.1.2 Relationships Between I

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide516.2 Interface General Commands SummaryThe following table identifies the values required for m

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide52[no] description description Specifies the description for the specified interface. The no comma

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide536.2.1.1 Basic Interface Properties Command ExamplesThe following commands make Ethernet interf

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide54This example shows how to modify the name of interface ge4 to “VIP”. First you have to check the

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide55This example shows how to restart an interface. You can check all interface names on the ZyWALL

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide56[no] host ip Specifies the static IP address the ZyWALL should assign. Use this command, along w

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide57[no] starting-address ip pool-size <1..65535>Sets the IP start address and maximum pool s

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide586.2.2.1 DHCP Setting Command ExamplesThe following example uses these commands to configure DHC

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide596.2.4 RIP CommandsThis table lists the commands for RIP settings.Router(config)# interface cel

Document ConventionsZyWALL (ZLD) CLI Reference Guide6

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide606.2.5 OSPF CommandsThis table lists the commands for OSPF settings.[no] ip rip {send | receive}

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide61ip ospf message-digest-key <1..255> md5 passwordSets the ID and password for OSPF MD5 aut

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide626.2.6 Connectivity Check (Ping-check) CommandsUse these commands to have an interface regularly

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide636.2.6.1 Connectivity Check Command ExampleThe following commands show you how to set the WAN1

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide646.3.2 Port Grouping CommandsThis section covers commands that are specific to port grouping.&qu

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide656.3.2.1 Port Grouping Command ExamplesThe following commands add physical port 5 to representa

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide666.4 Virtual Interface Specific CommandsVirtual interfaces use many of the general interface com

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide676.5.1 PPPoE/PPTP Interface Command ExamplesThe following commands show you how to configure PP

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide68The following commands show you how to connect and disconnect ppp0.6.6 Cellular Interface Speci

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide69[no] budget data active {download-upload|download|upload} <1..100000>Sets how much downst

Contents OverviewZyWALL (ZLD) CLI Reference Guide7Contents OverviewIntroduction ...

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide70no budget log-percentage [recursive]Sets the ZyWALL to not create a log when the set percentage

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide716.6.1 Cellular StatusThe following table describes the different kinds of cellular connection

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide726.6.2 Cellular Interface Command ExamplesThis example shows the configuration of a cellular int

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide73This example shows the 3G connection profile settings for interface cellular2 on the ZyWALL. Yo

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide746.7.1.1 WLAN General Commands ExampleThis example sets wireless slot 1 to use the IEEE 802.11b

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide756.7.2 WLAN Interface CommandsUse these commands to configure global settings that apply to all

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide76security wpa <tkip | aes> eap internal profile-name tls-cert certificate nameConfigures W

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide776.7.2.1 WLAN Interface Commands ExampleThis example configures WLAN AP interface 2 for slot 1

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide786.7.3.1 WLAN MAC Filter Commands ExampleThis example creates a MAC filter entry for MAC address

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide796.8.1 VLAN Interface Command ExamplesThe following commands show you how to set up VLAN vlan10

Contents OverviewZyWALL (ZLD) CLI Reference Guide8Objects ...

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide806.9.1 Bridge Interface Command ExamplesThe following commands show you how to set up a bridge i

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide816.10.1 Auxiliary Interface Command ExamplesThe following commands show you how to set up the a

Chapter 6 InterfacesZyWALL (ZLD) CLI Reference Guide82

ZyWALL (ZLD) CLI Reference Guide83CHAPTER 7 TrunksThis chapter shows you how to configure trunks on your ZyWALL.7.1 Trunks OverviewYou can group mul

Chapter 7 TrunksZyWALL (ZLD) CLI Reference Guide847.3 Trunk Commands Input ValuesThe following table explains the values you can input with the inter

Chapter 7 TrunksZyWALL (ZLD) CLI Reference Guide857.5 Trunk Command ExamplesThe following example creates a weighted round robin trunk for Ethernet

Chapter 7 TrunksZyWALL (ZLD) CLI Reference Guide86The following example creates a spill-over trunk for Ethernet interfaces ge1 and ge3. The ZyWALL sen

Chapter 7 TrunksZyWALL (ZLD) CLI Reference Guide877.6 Link StickingYou can have the ZyWALL send each local computer’s traffic through a single WAN i

Chapter 7 TrunksZyWALL (ZLD) CLI Reference Guide887.7 Link Sticking Commands SummaryThe following table lists the ip load-balancing link-sticking com

ZyWALL (ZLD) CLI Reference Guide89CHAPTER 8 RouteThis chapter shows you how to configure policies for IP routing and static routes on your ZyWALL.8.1

9PART IIntroductionCommand Line Interface (11)User and Privilege Modes (27)Object Reference (31)Status (33)Registration (37)

Chapter 8 RouteZyWALL (ZLD) CLI Reference Guide90The following table describes the commands available for policy route. You must use the configure ter

Chapter 8 RouteZyWALL (ZLD) CLI Reference Guide91[no] dscp {any | <0..63>} Sets a custom DSCP code point (0~63). This is the DSCP value of inco

Chapter 8 RouteZyWALL (ZLD) CLI Reference Guide92[no] sslvpn tunnel_name Sets the incoming interface to an SSL VPN tunnel. The no command removes the

Chapter 8 RouteZyWALL (ZLD) CLI Reference Guide938.2.1 Assured Forwarding (AF) PHB for DiffServAssured Forwarding (AF) behavior is defined in RFC 25

Chapter 8 RouteZyWALL (ZLD) CLI Reference Guide948.2.2 Policy Route Command ExampleThe following commands create two address objects (TW_SUBNET and G

Chapter 8 RouteZyWALL (ZLD) CLI Reference Guide95Figure 15 Example of Static Routing Topology8.4 Static Route CommandsThe following table describe

Chapter 8 RouteZyWALL (ZLD) CLI Reference Guide96

ZyWALL (ZLD) CLI Reference Guide97CHAPTER 9 Routing ProtocolThis chapter describes how to set up RIP and OSPF routing protocols for the ZyWALL.9.1 R

Chapter 9 Routing ProtocolZyWALL (ZLD) CLI Reference Guide989.2.1 RIP CommandsThis table lists the commands for RIP.9.2.2 General OSPF CommandsThis

Chapter 9 Routing ProtocolZyWALL (ZLD) CLI Reference Guide999.2.3 OSPF Area CommandsThis table lists the commands for OSPF areas.9.2.4 Virtual Link