Watchguard Firebox V10 User manual

WatchGuard®
Command Line
Interface
User Guide
WatchGuard Firebox Vclass 5.1

ii WatchGuard Vclass 5.1
Copyright
Copyright © 1998-2003 WatchGuard Technologies, Inc.
All rights reserved.
Notice to Users
Information in this document is subject to change and
revision without notice. This documentation and the software
described herein is subject to and may only be used and
copied as outlined in the Firebox System software end-user
license agreement. No part of this manual may be reproduced
by any means, electronic or mechanical, for any purpose
other than the purchaser’s personal use, without prior written
permission from WatchGuard Technologies, Inc.
TRADEMARK NOTES
WatchGuard and LiveSecurity are either trademarks or
registered trademarks of WatchGuard Technologies, Inc. in
the United States and other countries. Firebox, ServerLock,
DVCP, and Designing peace of mind are trademarks of
WatchGuard Technologies, Inc. All other trademarks or
trade names mentioned herein, if any, are the property of
their respective owners.
Part No: 1200016

WatchGuard Command Line Interface Guide iii
WatchGuard Technologies, Inc.
Firebox System Software
End-User License Agreement
WatchGuard Firebox System (WFS) End-User License
Agreement
IMPORTANT — READ CAREFULLY BEFORE
ACCESSING WATCHGUARD SOFTWARE:
This WFS End-User License Agreement (“AGREEMENT”)
is a legal agreement between you (either an individual or a
single entity) and WatchGuard Technologies, Inc.
(“WATCHGUARD”)for the WATCHGUARD WFS software
product identified above, which includes computer software
and may include associated media, printed materials, and on-
line or electronic documentation (“SOFTWARE
PRODUCT”). WATCHGUARD is willing to license the
SOFTWARE PRODUCT to you only on the condition that you
accept all of the terms contained in this Agreement. Please
read this Agreement carefully. By installing or using the
SOFTWARE PRODUCT you agree to be bound by the terms
of this Agreement. If you do not agree to the terms of this
AGREEMENT, WATCHGUARD will not license the
SOFTWARE PRODUCT to you, and you will not have any
rights in the SOFTWARE PRODUCT. In that case, promptly
return the SOFTWARE PRODUCT, along with proof of
payment, to the authorized dealer from whom you obtained
the SOFTWARE PRODUCT for a full refund of the price you
paid.
1. Ownership and License. The SOFTWARE PRODUCT is
protected by copyright laws and international copyright
treaties, as well as other intellectual property laws and
treaties. This is a license agreement and NOT an agreement
for sale. All title and copyrights in and to the SOFTWARE
PRODUCT (including but not limited to any images,
photographs, animations, video, audio, music, text, and
applets incorporated into the SOFTWARE PRODUCT), the
accompanying printed materials, and any copies of the

iv WatchGuard Vclass 5.1
SOFTWARE PRODUCT are owned by WATCHGUARD or its
suppliers. Your rights to use the SOFTWARE PRODUCT are
as specified in this AGREEMENT, and WATCHGUARD
retains all rights not expressly granted to you in this
AGREEMENT. Nothing in this AGREEMENT constitutes a
waiver of our rights under U.S. copyright law or any other
law or treaty.
2. Permitted Uses. You are granted the following rights to
the SOFTWARE PRODUCT:
(A) You may install and use the SOFTWARE PRODUCT on
any single computer at any single location. If you wish to use
the SOFTWARE PRODUCT on a different computer, you
must erase the SOFTWARE PRODUCT from the first
computer on which you installed it before you install it onto
a second.
(B) To use the SOFTWARE PRODUCT on more than one
computer at once, you must license an additional copy of the
SOFTWARE PRODUCT for each additional computer on
which you want to use it.
(C)You may make a single copy of the SOFTWARE
PRODUCT for backup or archival purposes only.
3. Prohibited Uses. You may not, without express written
permission from WATCHGUARD:
(A) Use, copy, modify, merge or transfer copies of the
SOFTWARE PRODUCT or printed materials except as
provided in this AGREEMENT;
(B) Use any backup or archival copy of the SOFTWARE
PRODUCT(or allow someone else to use such a copy) for any
purpose other than to replace the original copy in the event it
is destroyed or becomes defective;
(C) Sublicense, lend, lease or rent the SOFTWARE
PRODUCT;
(D) Transfer this license to another party unless (i) the
transfer is permanent, (ii) the third party recipient agrees to
the terms of this AGREEMENT, and (iii) you do not retain
any copies of the SOFTWARE PRODUCT; or
(E) Reverse engineer, disassemble or decompile the
SOFTWARE PRODUCT.

WatchGuard Command Line Interface Guide v
4. Limited Warranty. WATCHGUARD makes the
following limited warranties for a period of ninety (90) days
from the date you obtained the SOFTWARE PRODUCT from
WatchGuard Technologies or an authorized dealer:
(A) Media. The disks and documentation will be free from
defects in materials and workmanship under normal use. If
the disks or documentation fail to conform to this warranty,
you may, as your sole and exclusive remedy, obtain a
replacement free of charge if you return the defective disk or
documentation to us with a dated proof of purchase.
(B) SOFTWARE PRODUCT. The SOFTWARE PRODUCT
will materially conform to the documentation that
accompanies it. If the SOFTWARE PRODUCT fails to
operate in accordance with this warranty, you may, as your
sole and exclusive remedy, return all of the SOFTWARE
PRODUCT and the documentation to the authorized dealer
from whom you obtained it, along with a dated proof of
purchase, specifying the problems, and they will provide you
with a new version of the SOFTWARE PRODUCT or a full
refund, at their election.
Disclaimer and Release. THE WARRANTIES,
OBLIGATIONS AND LIABILITIES OF WATCHGUARD,
AND YOUR REMEDIES, SET FORTH IN PARAGRAPHS
4, 4(A) AND 4(B) ABOVE ARE EXCLUSIVE AND IN
SUBSTITUTION FOR, AND YOU HEREBY WAIVE,
DISCLAIM AND RELEASE ANY AND ALL OTHER
WARRANTIES, OBLIGATIONS AND LIABILITIES OF
WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND
REMEDIES YOU MAY HAVE AGAINST WATCHGUARD,
EXPRESS OR IMPLIED, ARISING BY LAW OR
OTHERWISE, WITH RESPECT TO ANY
NONCONFORMANCE OR DEFECT IN THE SOFTWARE
PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY
IMPLIED WARRANTY OF MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE, ANY
IMPLIED WARRANTY ARISING FROM COURSE OF
PERFORMANCE, COURSE OF DEALING, OR USAGE OF
TRADE, ANY WARRANTY OF NONINFRINGEMENT,
ANY WARRANTY THAT THIS SOFTWARE PRODUCT

vi WatchGuard Vclass 5.1
WILL MEET YOUR REQUIREMENTS, ANY WARRANTY
OF UNINTERRUPTED OR ERROR-FREE OPERATION,
ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR
REMEDY IN TORT, WHETHER OR NOT ARISING FROM
THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR
IMPUTED) OR FAULT OF WATCHGUARD AND ANY
OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY
FOR LOSS OR DAMAGE TO, OR CAUSED BY OR
CONTRIBUTED TO BY, THE SOFTWARE PRODUCT).
Limitation of Liability. WATCHGUARD’s liability (whether
in contract, tort, or otherwise; and notwithstanding any fault,
negligence, strict liability or product liability) with regard to
THE SOFTWARE Product will in no event exceed the
purchase price paid by you for such Product. IN NO EVENT
WILL WATCHGUARD BE LIABLE TO YOU OR ANY
THIRD PARTY, WHETHER ARISING IN CONTRACT
(INCLUDING WARRANTY), TORT (INCLUDING ACTIVE,
PASSIVE OR IMPUTED NEGLIGENCE AND STRICT
LIABILITY AND FAULT), FOR ANY INDIRECT, SPECIAL,
INCIDENTAL, OR CONSEQUENTIAL DAMAGES
(INCLUDING WITHOUT LIMITATION LOSS OF
BUSINESS PROFITS, BUSINESS INTERRUPTION, OR
LOSS OF BUSINESS INFORMATION) ARISING OUT OF
OR IN CONNECTION WITH THIS WARRANTY OR THE
USE OF OR INABILITY TO USE THE SOFTWARE
PRODUCT, EVEN IF WATCHGUARD HAS BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
5. United States Government Restricted Rights. The
enclosed SOFTWARE PRODUCT and documentation are
provided with Restricted Rights. Use, duplication or
disclosure by the U.S. Government or any agency or
instrumentality thereof is subject to restrictions as set forth
in subdivision (c)(1)(ii) of the Rights in Technical Data and
Computer Software clause at DFARS 252.227-7013, or in
subdivision (c)(1) and (2) of the Commercial Computer
Software -- Restricted Rights Clause at 48 C.F.R. 52.227-
19, as applicable. Manufacturer is WatchGuard
Technologies, Incorporated, 505 Fifth Avenue, Suite 500,
Seattle, WA 98104.

WatchGuard Command Line Interface Guide vii
6. Export Controls. You agree not to directly or indirectly
transfer the SOFTWARE PRODUCT or documentation to
any country to which such transfer would be prohibited by the
U.S. Export Administration Act and the regulations issued
thereunder.
7. Termination. This license and your right to use the
SOFTWARE PRODUCT will automatically terminate if you
fail to comply with any provisions of this AGREEMENT,
destroy all copies of the SOFTWARE PRODUCT in your
possession, or voluntarily return the SOFTWARE PRODUCT
to WATCHGUARD. Upon termination you will destroy all
copies of the SOFTWARE PRODUCT and documentation
remaining in your control or possession.
8. Miscellaneous Provisions. This AGREEMENT will be
governed by and construed in accordance with the
substantive laws of Washington excluding the 1980 United
National Convention on Contracts for the International Sale
of Goods, as amended. This is the entire AGREEMENT
between us relating to the contents of this package, and
supersedes any prior purchase order, communications,
advertising or representations concerning the contents of this
package AND BY USING THE SOFTWARE PRODUCT
YOU AGREE TO THESE TERMS. No change or
modification of this AGREEMENT will be valid unless it is in
writing, and is signed by WATCHGUARD.
9. Canadian Transactions: If you obtained this
SOFTWARE PRODUCT in Canada, you agree to the
following:
The parties hereto have expressly required that the present
AGREEMENT and its Exhibits be drawn up in the English
language. / Les parties aux presentes ont expressement exige
que la presente conventions et ses Annexes soient redigees en
la langue anglaise.

viii WatchGuard Vclass 5.1

WatchGuard Command Line Interface Guide ix
Contents
Contents .......................................................................ix
CHAPTER 1 Using the Command Line Interface ..........1
Introducing the WatchGuard CLI .......................................1
CLI capabilities .............................................................2
CLI limitations ...............................................................3
CLI Guide text conventions ...............................................3
Getting started with the WatchGuard CLI ...........................5
Connecting to an appliance .............................................5
Logging into an appliance via a console connection .............6
Logging into an existing appliance via a network connection .7
Understanding the command prompt ................................8
Abbreviating commands and keywords ..............................8
Case sensitivity .............................................................9
Extending command lines ...............................................9
Typing arguments in a command ......................................9
Deleting text in the Command Line Interface ....................10
Using the CLI to add to or replace existing settings and policies
...........................................................................10
Grouping parameters in a command ...............................10
Reviewing the recently used commands ...........................11

x WatchGuard Vclass 5.1
Navigating through the CLI ........................................... 13
Common Navigation commands .................................... 14
Using keywords .......................................................... 15
Show command/argument (“name”) usage ...................... 16
Viewing context-sensitive online help ............................. 17
Logging out of the appliance ........................................ 18
Installing and configuring a WatchGuard appliance .......... 19
To log into a WatchGuard appliance for the first time: ........ 19
To assign network addresses to appliance interfaces .......... 20
To complete system configuration .................................. 20
To create and apply security policies ............................... 21
To remove/delete items from a WatchGuard database ....... 22
To save and apply your most recent changes .................... 22
To maintain an appliance .............................................. 22
To troubleshoot an appliance ........................................ 22
To restore an appliance to the factory-default state ........... 23
To review the most recent tasks (at any level) .................... 23
To get on-line help while working ................................... 24
CHAPTER 2 Administration Mode Commands .......... 25
Command syntax conventions used in this guide ............. 25
Administration mode commands .................................... 27
account command ...................................................... 28
downgrade command ................................................. 29
export command ........................................................ 30
flush command ........................................................... 31
ha_sync command ...................................................... 31
import command ........................................................ 32
operation_mode command .......................................... 35
passwd command ....................................................... 36
reboot command ........................................................ 37
restore default command ............................................. 38
shutdown command .................................................... 38
upgrade command ..................................................... 39