ZyXEL Communications ZyWALL USG Series User manual

www.zyxel.com
Quick Start Guide
ZyWALL / USG (ZLD) Series
Security Firewalls
Version: 4.11
Edition 1, 04/2015
Copyright © 2011
ZyXEL Communications Corporation
CLI Reference Guide
Default Login Details
LAN Port IP Address http://192.168.1.1
User Name admin
Password 1234
Copyright © 2015 ZyXEL Communications Corporation

This is a Reference Guide for a series of products intended for people who want to configure ZLD-
based ZyWALL / USGs via Command Line Interface (CLI).
Some commands or command options in this guide may not be available in your
product. See your product's User’s Guide for a list of supported features. Every effort
has been made to ensure that the information in this guide is accurate.
Please refer to www.zyxel.com for product specific User Guides and product certifications.
Do not use commands not documented in this guide.
How To Use This Guide
•ReadChapter 1 on page 21 for how to access and use the CLI (Command Line Interface).
•ReadChapter 2 on page 35 to learn about the CLI user and privilege modes.
Related Documentation
• Quick Start Guide
The Quick Start Guide shows how to connect the ZyWALL / USG and access the Web
Configurator wizards. (See the wizard real time help for information on configuring each screen.)
It also contains a connection diagram and package contents list.
• User’s Guide
The User’s Guide explains how to use the Web Configurator to configure the ZyWALL / USG.
It is recommended you use the Web Configurator to configure the ZyWALL / USG.
• Knowledge Base
See Support > Knowledge Base at the ZyXEL website for FAQs, application examples,
troubleshooting and other technical information on the ZyWALL / USG.

ZyWALL / USG (ZLD) CLI Reference Guide 3
Introduction ........................................................................................................................................19
Command Line Interface .........................................................................................................................21
User and Privilege Modes .......................................................................................................................35
Reference ...........................................................................................................................................39
Object Reference ....................................................................................................................................41
Status ......................................................................................................................................................43
Registration .............................................................................................................................................49
AP Management .....................................................................................................................................53
Wireless LAN Profiles .............................................................................................................................56
Rogue AP ................................................................................................................................................68
Wireless Frame Capture .........................................................................................................................72
Dynamic Channel Selection ....................................................................................................................74
Wireless Load Balancing .........................................................................................................................76
Auto-Healing ...........................................................................................................................................79
Interfaces ................................................................................................................................................81
Trunks ...................................................................................................................................................115
Route .....................................................................................................................................................119
Routing Protocol ....................................................................................................................................129
Zones ....................................................................................................................................................133
DDNS ....................................................................................................................................................137
Virtual Servers .......................................................................................................................................141
HTTP Redirect ......................................................................................................................................145
ALG .......................................................................................................................................................149
UPnP .....................................................................................................................................................153
IP/MAC Binding .....................................................................................................................................157
Layer 2 Isolation ....................................................................................................................................160
Secure Policy ........................................................................................................................................163
Web Authentication ...............................................................................................................................179
RTLS .....................................................................................................................................................183
IPSec VPN ............................................................................................................................................185
SSL VPN ...............................................................................................................................................199
L2TP VPN .............................................................................................................................................203
Bandwidth Management .......................................................................................................................209
Application Patrol ..................................................................................................................................215
Anti-Virus ...............................................................................................................................................219
IDP Commands .....................................................................................................................................225
Content Filtering ....................................................................................................................................237
Anti-Spam ..............................................................................................................................................247
SSL Inspection ......................................................................................................................................257
Device HA .............................................................................................................................................263
User/Group ............................................................................................................................................269

ZyWALL / USG (ZLD) CLI Reference Guide4
Application Object .................................................................................................................................276
Addresses .............................................................................................................................................279
Services ................................................................................................................................................285
Schedules .............................................................................................................................................289
AAA Server ...........................................................................................................................................291
Authentication Objects ..........................................................................................................................297
Authentication Server ............................................................................................................................300
Certificates ............................................................................................................................................303
ISP Accounts .........................................................................................................................................307
SSL Application .....................................................................................................................................309
DHCPv6 Objects ...................................................................................................................................312
System ..................................................................................................................................................315
System Remote Management ...............................................................................................................327
File Manager .........................................................................................................................................339
Logs ......................................................................................................................................................359
Reports and Reboot ..............................................................................................................................365
Session Timeout ...................................................................................................................................371
Diagnostics ...........................................................................................................................................373
Packet Flow Explore .............................................................................................................................375
Maintenance Tools ................................................................................................................................379
Watchdog Timer ....................................................................................................................................385

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide 5
Table of Contents
Table of Contents .................................................................................................................................5
Part I: Introduction ..........................................................................................19
Chapter 1
Command Line Interface....................................................................................................................21
1.1 Overview ...........................................................................................................................................21
1.1.1 The Configuration File .............................................................................................................21
1.2 Accessing the CLI .............................................................................................................................21
1.2.1 Console Port ............................................................................................................................22
1.2.2 Web Configurator Console ......................................................................................................22
1.2.3 Telnet .......................................................................................................................................25
1.2.4 SSH (Secure SHell) .................................................................................................................25
1.3 How to Find Commands in this Guide ...............................................................................................25
1.4 How Commands Are Explained ........................................................................................................26
1.4.1 Background Information (Optional) ..........................................................................................26
1.4.2 Command Input Values (Optional) ...........................................................................................26
1.4.3 Command Summary ................................................................................................................26
1.4.4 Command Examples (Optional) ..............................................................................................26
1.4.5 Command Syntax ....................................................................................................................26
1.4.6 Changing the Password ..........................................................................................................27
1.5 CLI Modes .........................................................................................................................................27
1.6 Shortcuts and Help ............................................................................................................................28
1.6.1 List of Available Commands ....................................................................................................28
1.6.2 List of Sub-commands or Required User Input .......................................................................28
1.6.3 Entering Partial Commands .....................................................................................................29
1.6.4 Entering a ? in a Command .....................................................................................................29
1.6.5 Command History ....................................................................................................................29
1.6.6 Navigation ................................................................................................................................29
1.6.7 Erase Current Command .........................................................................................................29
1.6.8 The no Commands ..................................................................................................................29
1.7 Input Values ......................................................................................................................................30
1.8 Ethernet Interfaces ............................................................................................................................33
1.9 Saving Configuration Changes .........................................................................................................33
1.10 Logging Out .....................................................................................................................................34
Chapter 2
User and Privilege Modes..................................................................................................................35

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide
6
2.1 User And Privilege Modes .................................................................................................................35
2.1.1 Debug Commands ...................................................................................................................36
Part II: Reference.............................................................................................39
Chapter 3
Object Reference ................................................................................................................................41
3.1 Object Reference Commands ...........................................................................................................41
3.1.1 Object Reference Command Example ....................................................................................42
Chapter 4
Status...................................................................................................................................................43
Chapter 5
Registration.........................................................................................................................................49
5.1 myZyXEL.com Overview ...................................................................................................................49
5.1.1 Subscription Services Available on the ZyWALL / USG ..........................................................49
5.2 Registration Commands ....................................................................................................................50
5.2.1 Command Examples ...............................................................................................................51
Chapter 6
AP Management..................................................................................................................................53
6.1 AP Management Overview ...............................................................................................................53
6.2 AP Management Commands ............................................................................................................53
6.2.1 AP Management Commands Example ...................................................................................55
Chapter 7
Wireless LAN Profiles ........................................................................................................................56
7.1 Wireless LAN Profiles Overview .......................................................................................................56
7.2 AP Radio Profile Commands ............................................................................................................56
7.2.1 AP Profile Commands Example ..............................................................................................60
7.3 AP Monitor Profile Commands ..........................................................................................................61
7.4 SSID Profile Commands ...................................................................................................................62
7.4.1 SSID Profile Example ..............................................................................................................64
7.5 Security Profile Commands ...............................................................................................................65
7.5.1 Security Profile Example .........................................................................................................66
7.6 MAC Filter Profile Commands ...........................................................................................................67
7.6.1 MAC Filter Profile Example .....................................................................................................67
Chapter 8
Rogue AP.............................................................................................................................................68
8.1 Rogue AP Detection Overview ..........................................................................................................68

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide 7
8.2 Rogue AP Detection Commands ......................................................................................................68
8.2.1 Rogue AP Detection Examples ...............................................................................................69
8.3 Rogue AP Containment Overview ....................................................................................................70
8.4 Rogue AP Containment Commands .................................................................................................71
8.4.1 Rogue AP Containment Example ............................................................................................71
Chapter 9
Wireless Frame Capture.....................................................................................................................72
9.1 Wireless Frame Capture Overview ...................................................................................................72
9.2 Wireless Frame Capture Commands ................................................................................................72
9.2.1 Wireless Frame Capture Examples .........................................................................................73
Chapter 10
Dynamic Channel Selection...............................................................................................................74
10.1 DCS Overview .................................................................................................................................74
10.2 DCS Commands .............................................................................................................................74
10.2.1 DCS Examples ......................................................................................................................75
Chapter 11
Wireless Load Balancing ...................................................................................................................76
11.1 Wireless Load Balancing Overview .................................................................................................76
11.2 Wireless Load Balancing Commands .............................................................................................76
11.2.1 Wireless Load Balancing Examples .......................................................................................77
Chapter 12
Auto-Healing .......................................................................................................................................79
12.1 Auto-Healing Overview ...................................................................................................................79
12.2 Auto-Healing Commands ................................................................................................................79
12.2.1 Auto-Healing Examples .........................................................................................................80
Chapter 13
Interfaces.............................................................................................................................................81
13.1 Interface Overview ..........................................................................................................................81
13.1.1 Types of Interfaces ................................................................................................................81
13.1.2 Relationships Between Interfaces .........................................................................................84
13.2 Interface General Commands Summary .........................................................................................85
13.2.1 Basic Interface Properties and IP Address Commands ........................................................85
13.2.2 IGMP Proxy Commands ........................................................................................................91
13.2.3 DHCP Setting Commands .....................................................................................................92
13.2.4 Interface Parameter Command Examples ............................................................................96
13.2.5 RIP Commands .....................................................................................................................97
13.2.6 OSPF Commands .................................................................................................................97
13.2.7 Connectivity Check (Ping-check) Commands .......................................................................99

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide
8
13.3 Ethernet Interface Specific Commands .........................................................................................100
13.3.1 MAC Address Setting Commands .......................................................................................100
13.3.2 Port Grouping Commands ...................................................................................................101
13.4 Virtual Interface Specific Commands ............................................................................................102
13.4.1 Virtual Interface Command Examples .................................................................................102
13.5 PPPoE/PPTP Specific Commands ...............................................................................................103
13.5.1 PPPoE/PPTP Interface Command Examples .....................................................................104
13.6 Cellular Interface Specific Commands ..........................................................................................105
13.6.1 Cellular Status .....................................................................................................................107
13.6.2 Cellular Interface Command Examples ...............................................................................109
13.7 Tunnel Interface Specific Commands ...........................................................................................110
13.7.1 Tunnel Interface Command Examples ................................................................................ 111
13.8 USB Storage Specific Commands ................................................................................................ 111
13.8.1 USB Storage General Commands Example ........................................................................112
13.9 VLAN Interface Specific Commands .............................................................................................112
13.9.1 VLAN Interface Command Examples ..................................................................................113
13.10 Bridge Specific Commands .........................................................................................................113
13.10.1 Bridge Interface Command Examples ...............................................................................114
Chapter 14
Trunks................................................................................................................................................115
14.1 Trunks Overview ...........................................................................................................................115
14.2 Trunk Scenario Examples .............................................................................................................115
14.3 Trunk Commands Input Values .....................................................................................................116
14.4 Trunk Commands Summary .........................................................................................................116
14.5 Trunk Command Examples ...........................................................................................................117
Chapter 15
Route..................................................................................................................................................119
15.1 Policy Route ..................................................................................................................................119
15.2 Policy Route Commands ...............................................................................................................119
15.2.1 Assured Forwarding (AF) PHB for DiffServ .........................................................................124
15.2.2 Policy Route Command Example ........................................................................................125
15.3 IP Static Route ..............................................................................................................................125
15.4 Static Route Commands ...............................................................................................................126
15.4.1 Static Route Commands Examples .....................................................................................127
Chapter 16
Routing Protocol...............................................................................................................................129
16.1 Routing Protocol Overview ............................................................................................................129
16.2 Routing Protocol Commands Summary ........................................................................................129
16.2.1 RIP Commands ...................................................................................................................130
16.2.2 General OSPF Commands ..................................................................................................130

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide 9
16.2.3 OSPF Area Commands .......................................................................................................131
16.2.4 Virtual Link Commands ........................................................................................................131
16.2.5 Learned Routing Information Commands ............................................................................132
16.2.6 show ip route Command Example .......................................................................................132
Chapter 17
Zones .................................................................................................................................................133
17.1 Zones Overview ............................................................................................................................133
17.2 Zone Commands Summary ..........................................................................................................134
17.2.1 Zone Command Examples ..................................................................................................135
Chapter 18
DDNS..................................................................................................................................................137
18.1 DDNS Overview ............................................................................................................................137
18.2 DDNS Commands Summary ........................................................................................................138
18.3 DDNS Commands Example ..........................................................................................................139
Chapter 19
Virtual Servers ..................................................................................................................................141
19.1 Virtual Server Overview ................................................................................................................141
19.1.1 1:1 NAT and Many 1:1 NAT .................................................................................................141
19.2 Virtual Server Commands Summary .............................................................................................141
19.2.1 Virtual Server Command Examples .....................................................................................143
19.2.2 Tutorial - How to Allow Public Access to a Server ...............................................................144
Chapter 20
HTTP Redirect...................................................................................................................................145
20.1 HTTP Redirect Overview ..............................................................................................................145
20.1.1 Web Proxy Server ................................................................................................................145
20.2 HTTP Redirect Commands ...........................................................................................................146
20.2.1 HTTP Redirect Command Examples ..................................................................................147
Chapter 21
ALG ....................................................................................................................................................149
21.1 ALG Introduction ...........................................................................................................................149
21.2 ALG Commands ............................................................................................................................150
21.3 ALG Commands Example .............................................................................................................151
Chapter 22
UPnP ..................................................................................................................................................153
22.1 UPnP and NAT-PMP Overview .....................................................................................................153
22.2 UPnP and NAT-PMP Commands ..................................................................................................153
22.3 UPnP & NAT-PMP Commands Example ......................................................................................154

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide
10
Chapter 23
IP/MAC Binding.................................................................................................................................157
23.1 IP/MAC Binding Overview .............................................................................................................157
23.2 IP/MAC Binding Commands .........................................................................................................157
23.3 IP/MAC Binding Commands Example ..........................................................................................158
Chapter 24
Layer 2 Isolation ...............................................................................................................................160
24.1 Layer 2 Isolation Overview ............................................................................................................160
24.2 Layer 2 Isolation Commands ........................................................................................................161
24.2.1 Layer 2 Isolation White List Sub-Commands ......................................................................161
24.3 Layer 2 Isolation Commands Example .........................................................................................162
Chapter 25
Secure Policy ....................................................................................................................................163
25.1 Secure Policy Overview ................................................................................................................163
25.2 Secure Policy Commands .............................................................................................................164
25.2.1 Secure Policy Sub-Commands ............................................................................................167
25.2.2 Secure Policy Command Examples ....................................................................................169
25.3 Session Limit Commands .............................................................................................................171
25.4 ADP Commands Overview ...........................................................................................................173
25.4.1 ADP Command Input Values ...............................................................................................174
25.4.2 ADP Activation Commands .................................................................................................174
25.4.3 ADP Global Profile Commands ...........................................................................................174
25.4.4 ADP Zone-to-Zone Rule Commands ...................................................................................174
25.4.5 ADP Add/Edit Profile Commands ........................................................................................175
Chapter 26
Web Authentication..........................................................................................................................179
26.1 Web Authentication Overview .......................................................................................................179
26.2 Web Authentication Commands ....................................................................................................179
26.2.1 web-auth policy Sub-commands .........................................................................................180
26.3 SSO Overview ...............................................................................................................................181
26.3.1 SSO Configuration Commands ...........................................................................................181
26.3.2 SSO Show Commands ........................................................................................................182
26.3.3 Command Setup Sequence Example .................................................................................182
Chapter 27
RTLS ..................................................................................................................................................183
27.1 RTLS Overview .............................................................................................................................183
27.1.1 RTLS Configuration Commands ..........................................................................................184
27.1.2 RTLS Configuration Examples ............................................................................................184

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide 11
Chapter 28
IPSec VPN..........................................................................................................................................185
28.1 IPSec VPN Overview ....................................................................................................................185
28.2 IPSec VPN Commands Summary ................................................................................................186
28.2.1 IPv4 IKEv1 SA Commands ..................................................................................................187
28.2.2 IPv4 IPSec SA Commands (except Manual Keys) ..............................................................188
28.2.3 IPv4 IPSec SA Commands (for Manual Keys) ....................................................................191
28.2.4 VPN Concentrator Commands ............................................................................................191
28.2.5 VPN Configuration Provisioning Commands .......................................................................192
28.2.6 SA Monitor Commands .......................................................................................................193
28.2.7 IPv4 IKEv2 SA Commands ..................................................................................................193
28.2.8 IPv6 IKEv2 SA Commands ..................................................................................................195
28.2.9 IPv6 IPSec SA Commands ..................................................................................................196
28.2.10 IPv6 VPN Concentrator Commands ..................................................................................197
Chapter 29
SSL VPN ............................................................................................................................................199
29.1 SSL Access Policy ........................................................................................................................199
29.1.1 SSL Application Objects ......................................................................................................199
29.1.2 SSL Access Policy Limitations .............................................................................................199
29.2 SSL VPN Commands ....................................................................................................................199
29.2.1 SSL VPN Commands ..........................................................................................................200
29.2.2 Setting an SSL VPN Rule Tutorial .......................................................................................201
Chapter 30
L2TP VPN...........................................................................................................................................203
30.1 L2TP VPN Overview .....................................................................................................................203
30.2 IPSec Configuration ......................................................................................................................203
30.2.1 Using the Default L2TP VPN Connection ............................................................................204
30.3 Policy Route ..................................................................................................................................204
30.4 L2TP VPN Commands ..................................................................................................................205
30.4.1 L2TP VPN Commands ........................................................................................................205
30.5 L2TP VPN Example ......................................................................................................................206
30.5.1 Configuring the Default L2TP VPN Gateway Example ........................................................207
30.5.2 Configuring the Default L2TP VPN Connection Example ....................................................207
30.5.3 Configuring the L2TP VPN Settings Example .....................................................................207
30.5.4 Configuring the Policy Route for L2TP Example .................................................................208
Chapter 31
Bandwidth Management...................................................................................................................209
31.1 Bandwidth Management Overview ...............................................................................................209
31.1.1 BWM Type ...........................................................................................................................209
31.2 Bandwidth Management Commands ............................................................................................209

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide
12
31.2.1 Bandwidth Sub-Commands .................................................................................................210
31.3 Bandwidth Management Commands Examples ...........................................................................213
Chapter 32
Application Patrol.............................................................................................................................215
32.1 Application Patrol Overview ..........................................................................................................215
32.2 Application Patrol Commands Summary ......................................................................................215
32.2.1 Application Patrol Commands .............................................................................................216
Chapter 33
Anti-Virus...........................................................................................................................................219
33.1 Anti-Virus Overview .......................................................................................................................219
33.2 Anti-virus Commands ....................................................................................................................219
33.2.1 General Anti-virus Commands ............................................................................................220
33.2.2 Anti-Virus Profile ..................................................................................................................220
33.2.3 White and Black Lists ..........................................................................................................221
33.2.4 Signature Search Anti-virus Command ...............................................................................222
33.3 Update Anti-virus Signatures ........................................................................................................223
33.3.1 Update Signature Examples ................................................................................................223
33.4 Anti-virus Statistics ........................................................................................................................224
33.4.1 Anti-virus Statistics Example ...............................................................................................224
Chapter 34
IDP Commands .................................................................................................................................225
34.1 Overview .......................................................................................................................................225
34.2 General IDP Commands ...............................................................................................................225
34.2.1 IDP Activation ......................................................................................................................225
34.3 IDP Profile Commands ..................................................................................................................226
34.3.1 Global Profile Commands ....................................................................................................226
34.3.2 Editing/Creating IDP Signature Profiles ...............................................................................227
34.3.3 Signature Search .................................................................................................................227
34.4 IDP Custom Signatures .................................................................................................................229
34.4.1 Custom Signature Examples ...............................................................................................230
34.5 Update IDP Signatures .................................................................................................................233
34.5.1 Update Signature Examples ................................................................................................234
34.6 IDP Statistics .................................................................................................................................234
34.6.1 IDP Statistics Example ........................................................................................................235
Chapter 35
Content Filtering...............................................................................................................................237
35.1 Content Filtering Overview ............................................................................................................237
35.2 External Web Filtering Service ......................................................................................................237
35.3 Content Filtering Reports ..............................................................................................................237

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide 13
35.4 Content Filter Command Input Values ..........................................................................................238
35.5 General Content Filter Commands ...............................................................................................239
35.6 Content Filter Filtering Profile Commands ....................................................................................241
35.7 Content Filtering Statistics .............................................................................................................243
35.7.1 Content Filtering Statistics Example ....................................................................................243
35.8 Content Filtering Commands Example .........................................................................................243
Chapter 36
Anti-Spam..........................................................................................................................................247
36.1 Anti-Spam Overview ......................................................................................................................247
36.2 Anti-Spam Commands ..................................................................................................................247
36.2.1 Anti-spam Profile Rules .......................................................................................................247
36.2.2 White and Black Lists ..........................................................................................................250
36.2.3 DNSBL Anti-Spam Commands ............................................................................................252
36.3 Anti-Spam Statistics ......................................................................................................................254
36.3.1 Anti-Spam Statistics Example ..............................................................................................255
Chapter 37
SSL Inspection..................................................................................................................................257
37.1 SSL Inspection Overview ..............................................................................................................257
37.2 SSL Inspection Commands Summary ..........................................................................................257
37.2.1 SSL Inspection Exclusion Commands .................................................................................258
37.2.2 SSL Inspection Profile Settings ...........................................................................................258
37.2.3 SSL Inspection Certificate Cache ........................................................................................259
37.2.4 SSL Inspection Certificate Update .......................................................................................259
37.2.5 SSL Inspection Statistics .....................................................................................................260
37.2.6 SSL Inspection Command Examples ..................................................................................261
Chapter 38
Device HA..........................................................................................................................................263
38.1 Device HA Overview .....................................................................................................................263
38.1.1 Before You Begin .................................................................................................................264
38.2 General Device HA Commands ....................................................................................................264
38.3 Active-Passive Mode Device HA ...................................................................................................264
38.4 Active-Passive Mode Device HA Commands ...............................................................................265
38.4.1 Active-Passive Mode Device HA Commands ......................................................................265
38.4.2 Active-Passive Mode Device HA Command Example ........................................................267
Chapter 39
User/Group........................................................................................................................................269
39.1 User Account Overview .................................................................................................................269
39.1.1 User Types ..........................................................................................................................269
39.2 User/Group Commands Summary ................................................................................................270

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide
14
39.2.1 User Commands ..................................................................................................................270
39.2.2 User Group Commands .......................................................................................................271
39.2.3 User Setting Commands .....................................................................................................271
39.2.4 MAC Auth Commands .........................................................................................................273
39.2.5 Additional User Commands .................................................................................................274
Chapter 40
Application Object............................................................................................................................276
40.1 Application Object Commands Summary .....................................................................................276
40.1.1 Application Object Commands ............................................................................................276
40.1.2 Application Object Group Commands .................................................................................277
Chapter 41
Addresses .........................................................................................................................................279
41.1 Address Overview .........................................................................................................................279
41.2 Address Commands Summary .....................................................................................................279
41.2.1 Address Object Commands .................................................................................................280
41.2.2 Address Group Commands .................................................................................................282
Chapter 42
Services.............................................................................................................................................285
42.1 Services Overview ........................................................................................................................285
42.2 Services Commands Summary .....................................................................................................285
42.2.1 Service Object Commands ..................................................................................................285
42.2.2 Service Group Commands ..................................................................................................286
Chapter 43
Schedules..........................................................................................................................................289
43.1 Schedule Overview .......................................................................................................................289
43.2 Schedule Commands Summary ...................................................................................................289
43.2.1 Schedule Command Examples ...........................................................................................290
Chapter 44
AAA Server........................................................................................................................................291
44.1 AAA Server Overview ...................................................................................................................291
44.2 Authentication Server Command Summary ..................................................................................291
44.2.1 ad-server Commands ..........................................................................................................291
44.2.2 ldap-server Commands .......................................................................................................292
44.2.3 radius-server Commands ....................................................................................................293
44.2.4 radius-server Command Example .......................................................................................293
44.2.5 aaa group server ad Commands .........................................................................................293
44.2.6 aaa group server ldap Commands ......................................................................................294
44.2.7 aaa group server radius Commands ...................................................................................295

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide 15
44.2.8 aaa group server Command Example .................................................................................296
Chapter 45
Authentication Objects.....................................................................................................................297
45.1 Authentication Objects Overview ..................................................................................................297
45.2 aaa authentication Commands .....................................................................................................297
45.2.1 aaa authentication Command Example ...............................................................................298
45.3 test aaa Command ........................................................................................................................298
45.3.1 Test a User Account Command Example ............................................................................298
Chapter 46
Authentication Server ......................................................................................................................300
46.1 Authentication Server Overview ....................................................................................................300
46.2 Authentication Server Commands ................................................................................................300
46.2.1 Authentication Server Command Examples ........................................................................301
Chapter 47
Certificates ........................................................................................................................................303
47.1 Certificates Overview ....................................................................................................................303
47.2 Certificate Commands ...................................................................................................................303
47.3 Certificates Commands Input Values ............................................................................................303
47.4 Certificates Commands Summary ................................................................................................304
47.5 Certificates Commands Examples ................................................................................................306
Chapter 48
ISP Accounts.....................................................................................................................................307
48.1 ISP Accounts Overview .................................................................................................................307
48.1.1 PPPoE and PPTP Account Commands ..............................................................................307
48.1.2 Cellular Account Commands ...............................................................................................308
Chapter 49
SSL Application ................................................................................................................................309
49.1 SSL Application Overview .............................................................................................................309
49.1.1 SSL Application Object Commands ....................................................................................309
49.1.2 SSL Application Command Examples .................................................................................311
Chapter 50
DHCPv6 Objects................................................................................................................................312
50.1 DHCPv6 Object Commands Summary .........................................................................................312
50.1.1 DHCPv6 Object Commands ................................................................................................312
50.1.2 DHCPv6 Object Command Examples .................................................................................313
Chapter 51
System...............................................................................................................................................315

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide
16
51.1 System Overview ..........................................................................................................................315
51.2 Customizing the WWW Login Page ..............................................................................................315
51.3 Host Name Commands .................................................................................................................317
51.4 Time and Date ..............................................................................................................................317
51.4.1 Date/Time Commands .........................................................................................................318
51.5 Console Port Speed .....................................................................................................................318
51.6 DNS Overview ..............................................................................................................................319
51.6.1 Domain Zone Forwarder .....................................................................................................319
51.6.2 DNS Commands ..................................................................................................................320
51.6.3 DNS Command Examples ...................................................................................................322
51.7 Authentication Server Overview ....................................................................................................322
51.7.1 Authentication Server Commands .......................................................................................323
51.7.2 Authentication Server Command Examples ........................................................................324
51.8 Language Commands ...................................................................................................................324
51.9 IPv6 Commands ............................................................................................................................325
51.10 ZON Overview .............................................................................................................................325
51.10.1 LLDP ..................................................................................................................................325
51.10.2 ZON Commands ................................................................................................................325
51.10.3 ZON Examples ..................................................................................................................326
Chapter 52
System Remote Management..........................................................................................................327
52.1 Remote Management Overview ....................................................................................................327
52.1.1 Remote Management Limitations ........................................................................................327
52.1.2 System Timeout ...................................................................................................................327
52.2 Common System Command Input Values ....................................................................................328
52.3 HTTP/HTTPS Commands .............................................................................................................328
52.3.1 HTTP/HTTPS Command Examples ....................................................................................330
52.4 SSH ...............................................................................................................................................330
52.4.1 SSH Implementation on the ZyWALL / USG .......................................................................330
52.4.2 Requirements for Using SSH ...............................................................................................330
52.4.3 SSH Commands ..................................................................................................................331
52.4.4 SSH Command Examples ...................................................................................................331
52.5 Telnet ............................................................................................................................................332
52.6 Telnet Commands .........................................................................................................................332
52.6.1 Telnet Commands Examples ...............................................................................................332
52.7 Configuring FTP ...........................................................................................................................333
52.7.1 FTP Commands ..................................................................................................................333
52.7.2 FTP Commands Examples ..................................................................................................333
52.8 SNMP ...........................................................................................................................................334
52.8.1 Supported MIBs ...................................................................................................................334
52.8.2 SNMP Traps ........................................................................................................................334
52.8.3 SNMP Commands ...............................................................................................................335

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide 17
52.8.4 SNMP Commands Examples ..............................................................................................336
52.9 ICMP Filter ...................................................................................................................................337
Chapter 53
File Manager......................................................................................................................................339
53.1 File Directories ..............................................................................................................................339
53.2 Configuration Files and Shell Scripts Overview ...........................................................................339
53.2.1 Comments in Configuration Files or Shell Scripts ...............................................................340
53.2.2 Errors in Configuration Files or Shell Scripts .......................................................................341
53.2.3 ZyWALL / USG Configuration File Details ...........................................................................341
53.2.4 Configuration File Flow at Restart .......................................................................................342
53.3 File Manager Commands Input Values .........................................................................................342
53.4 File Manager Commands Summary .............................................................................................343
53.5 File Manager Dual Firmware Commands .....................................................................................344
53.6 File Manager Command Examples ...............................................................................................345
53.7 FTP File Transfer ..........................................................................................................................345
53.7.1 Command Line FTP File Upload .........................................................................................346
53.7.2 Command Line FTP Configuration File Upload Example ....................................................346
53.7.3 Command Line FTP File Download .....................................................................................346
53.7.4 Command Line FTP Configuration File Download Example ...............................................347
53.8 ZyWALL / USG File Usage at Startup ...........................................................................................347
53.9 Notification of a Damaged Recovery Image or Firmware .............................................................348
53.10 Restoring the Recovery Image ....................................................................................................349
53.11 Restoring the Firmware ...............................................................................................................351
53.12 Restoring the Default System Database .....................................................................................353
53.12.1 Using the atkz -u Debug Command ..................................................................................355
Chapter 54
Logs ...................................................................................................................................................359
54.1 Log Commands Summary ............................................................................................................359
54.1.1 Log Entries Commands .......................................................................................................360
54.1.2 System Log Commands ......................................................................................................360
54.1.3 Debug Log Commands ........................................................................................................361
54.1.4 E-mail Profile Commands ....................................................................................................363
54.1.5 Console Port Logging Commands .......................................................................................364
Chapter 55
Reports and Reboot..........................................................................................................................365
55.1 Report Commands Summary ........................................................................................................365
55.1.1 Report Commands ..............................................................................................................365
55.1.2 Report Command Examples ...............................................................................................366
55.1.3 Session Commands ............................................................................................................366
55.1.4 Packet Size Statistics Commands .......................................................................................366

Table of Contents
ZyWALL / USG (ZLD) CLI Reference Guide
18
55.2 Email Daily Report Commands .....................................................................................................367
55.2.1 Email Daily Report Example ................................................................................................368
55.3 Reboot ...........................................................................................................................................370
Chapter 56
Session Timeout...............................................................................................................................371
Chapter 57
Diagnostics ......................................................................................................................................373
57.1 Diagnostics ....................................................................................................................................373
57.2 Diagnosis Commands ...................................................................................................................373
57.3 Diagnosis Commands Example ....................................................................................................373
Chapter 58
Packet Flow Explore.........................................................................................................................375
58.1 Packet Flow Explore .....................................................................................................................375
58.2 Packet Flow Explore Commands ..................................................................................................375
58.3 Packet Flow Explore Commands Example ...................................................................................376
Chapter 59
Maintenance Tools............................................................................................................................379
59.1 Maintenance Command Examples ...............................................................................................381
59.1.1 Packet Capture Command Example ...................................................................................382
Chapter 60
Watchdog Timer................................................................................................................................385
60.1 Hardware Watchdog Timer ...........................................................................................................385
60.2 Software Watchdog Timer .............................................................................................................385
60.3 Application Watchdog ...................................................................................................................386
60.3.1 Application Watchdog Commands Example ........................................................................387
List of Commands (Alphabetical)....................................................................................................389

19
PART I
Introduction

20