ZyXEL Communications ZyWall User manual

www.zyxel.com
Quick Start Guide
ZyWALL (ZLD) Series
Security Firewalls
Versions: 3.10
Edition 2, 12/2013
Copyright © 2011
ZyXEL Communications Corporation
CLI Reference Guide
Default Login Details
LAN Port IP Address http://192.168.1.1
User Name admin
Password 1234
Copyright © 2013 ZyXEL Communications Corporation

This is a Reference Guide for a series of products intended for people who want to configure ZLD-
based ZyWALLs via Command Line Interface (CLI).
Some commands or command options in this guide may not be available in your
product. See your product's User’s Guide for a list of supported features. Every effort
has been made to ensure that the information in this guide is accurate.
Please refer to www.zyxel.com for product specific User Guides and product certifications.
Do not use commands not documented in this guide.
How To Use This Guide
•ReadChapter 1 on page 19 for how to access and use the CLI (Command Line Interface).
•ReadChapter 2 on page 33 to learn about the CLI user and privilege modes.
Related Documentation
• Quick Start Guide
The Quick Start Guide shows how to connect the ZyWALL and access the Web Configurator
wizards. (See the wizard real time help for information on configuring each screen.) It also
contains a connection diagram and package contents list.
• User’s Guide
The User’s Guide explains how to use the Web Configurator to configure the ZyWALL.
It is recommended you use the Web Configurator to configure the ZyWALL.

ZyWALL (ZLD) CLI Reference Guide 3
Introduction ............................................................................................................................17
Command Line Interface ........................................................................................................... 19
User and Privilege Modes ......................................................................................................... 33
Reference ................................................................................................................................37
Object Reference ....................................................................................................................... 39
Status ......................................................................................................................................... 41
Registration ............................................................................................................................... 45
Interfaces ................................................................................................................................... 53
Trunks ........................................................................................................................................ 93
Route ......................................................................................................................................... 99
Routing Protocol ......................................................................................................................107
Zones ........................................................................................................................................111
DDNS .......................................................................................................................................115
Virtual Servers ..........................................................................................................................119
HTTP Redirect .........................................................................................................................123
ALG ......................................................................................................................................... 127
IP/MAC Binding ....................................................................................................................... 131
Firewall .................................................................................................................................... 133
IPSec VPN ...............................................................................................................................141
SSL VPN ................................................................................................................................. 151
L2TP VPN ................................................................................................................................ 157
Application Patrol ..................................................................................................................... 163
Anti-Virus .................................................................................................................................173
IDP Commands ....................................................................................................................... 181
Content Filtering ...................................................................................................................... 199
Anti-Spam .................................................................................................................................211
Device HA ................................................................................................................................ 221
User/Group ..............................................................................................................................229
Addresses ................................................................................................................................ 237
Services ................................................................................................................................... 243
Schedules ................................................................................................................................ 247
AAA Server ..............................................................................................................................249
Authentication Objects ............................................................................................................. 255
Certificates ...............................................................................................................................259
ISP Accounts ........................................................................................................................... 264
SSL Application .......................................................................................................................266
Endpoint Security .................................................................................................................... 269
DHCPv6 Objects .....................................................................................................................276
System ..................................................................................................................................... 279
System Remote Management .................................................................................................285
File Manager ............................................................................................................................ 299

ZyWALL (ZLD) CLI Reference Guide
4
Logs ......................................................................................................................................... 317
Reports and Reboot ................................................................................................................ 323
Session Timeout ...................................................................................................................... 329
Diagnostics ............................................................................................................................. 331
Packet Flow Explore ................................................................................................................ 333
Packet Flow Filter .................................................................................................................... 337
Maintenance Tools ................................................................................................................... 341
Watchdog Timer .......................................................................................................................347

Table of Contents
ZyWALL (ZLD) CLI Reference Guide 5
Table of Contents
Table of Contents .................................................................................................................................5
Part I: Introduction ..........................................................................................17
Chapter 1
Command Line Interface....................................................................................................................19
1.1 Overview ...........................................................................................................................................19
1.1.1 The Configuration File .............................................................................................................19
1.2 Accessing the CLI .............................................................................................................................19
1.2.1 Console Port ............................................................................................................................20
1.2.2 Web Configurator Console ......................................................................................................20
1.2.3 Telnet .......................................................................................................................................23
1.2.4 SSH (Secure SHell) .................................................................................................................23
1.3 How to Find Commands in this Guide ...............................................................................................23
1.4 How Commands Are Explained ........................................................................................................24
1.4.1 Background Information (Optional) ..........................................................................................24
1.4.2 Command Input Values (Optional) ...........................................................................................24
1.4.3 Command Summary ................................................................................................................24
1.4.4 Command Examples (Optional) ..............................................................................................24
1.4.5 Command Syntax ....................................................................................................................24
1.4.6 Changing the Password ..........................................................................................................25
1.5 CLI Modes .........................................................................................................................................25
1.6 Shortcuts and Help ............................................................................................................................26
1.6.1 List of Available Commands ....................................................................................................26
1.6.2 List of Sub-commands or Required User Input .......................................................................26
1.6.3 Entering Partial Commands .....................................................................................................27
1.6.4 Entering a ? in a Command .....................................................................................................27
1.6.5 Command History ....................................................................................................................27
1.6.6 Navigation ................................................................................................................................27
1.6.7 Erase Current Command .........................................................................................................27
1.6.8 The no Commands ..................................................................................................................27
1.7 Input Values ......................................................................................................................................28
1.8 Ethernet Interfaces ............................................................................................................................31
1.9 Saving Configuration Changes .........................................................................................................31
1.10 Logging Out .....................................................................................................................................32
Chapter 2
User and Privilege Modes..................................................................................................................33

Table of Contents
ZyWALL (ZLD) CLI Reference Guide
6
2.1 User And Privilege Modes .................................................................................................................33
2.1.1 Debug Commands ...................................................................................................................34
Part II: Reference.............................................................................................37
Chapter 3
Object Reference ................................................................................................................................39
3.1 Object Reference Commands ...........................................................................................................39
3.1.1 Object Reference Command Example ....................................................................................40
Chapter 4
Status...................................................................................................................................................41
Chapter 5
Registration.........................................................................................................................................45
5.1 myZyXEL.com Overview ...................................................................................................................45
5.1.1 Subscription Services Available on the ZyWALL .....................................................................45
5.2 Registration Commands ....................................................................................................................46
5.2.1 Command Examples ...............................................................................................................47
5.3 Country Code ....................................................................................................................................48
Chapter 6
Interfaces.............................................................................................................................................53
6.1 Interface Overview ............................................................................................................................53
6.1.1 Types of Interfaces ..................................................................................................................53
6.1.2 Relationships Between Interfaces ...........................................................................................56
6.2 Interface General Commands Summary ...........................................................................................57
6.2.1 Basic Interface Properties and IP Address Commands ..........................................................57
6.2.2 DHCP Setting Commands .......................................................................................................63
6.2.3 Interface Parameter Command Examples ..............................................................................67
6.2.4 RIP Commands .......................................................................................................................68
6.2.5 OSPF Commands ...................................................................................................................68
6.2.6 Connectivity Check (Ping-check) Commands .........................................................................70
6.3 Ethernet Interface Specific Commands .............................................................................................71
6.3.1 MAC Address Setting Commands ...........................................................................................71
6.3.2 Port Grouping Commands .......................................................................................................72
6.4 Virtual Interface Specific Commands ................................................................................................73
6.4.1 Virtual Interface Command Examples .....................................................................................73
6.5 PPPoE/PPTP Specific Commands ...................................................................................................74
6.5.1 PPPoE/PPTP Interface Command Examples .........................................................................75
6.6 Cellular Interface Specific Commands ..............................................................................................76
6.6.1 Cellular Status .........................................................................................................................78

Table of Contents
ZyWALL (ZLD) CLI Reference Guide 7
6.6.2 Cellular Interface Command Examples ...................................................................................80
6.7 Tunnel Interface Specific Commands ...............................................................................................81
6.7.1 Tunnel Interface Command Examples ....................................................................................82
6.8 USB Storage Specific Commands ....................................................................................................82
6.8.1 USB Storage General Commands Example ............................................................................83
6.9 WLAN Specific Commands ...............................................................................................................83
6.9.1 WLAN General Commands .....................................................................................................84
6.9.2 WLAN Interface Commands ....................................................................................................85
6.9.3 WLAN MAC Filter Commands .................................................................................................87
6.10 VLAN Interface Specific Commands ...............................................................................................88
6.10.1 VLAN Interface Command Examples ....................................................................................89
6.11 Bridge Specific Commands .............................................................................................................89
6.11.1 Bridge Interface Command Examples ...................................................................................90
6.12 Auxiliary Interface Specific Commands ...........................................................................................90
6.12.1 Auxiliary Interface Command Examples ................................................................................91
Chapter 7
Trunks..................................................................................................................................................93
7.1 Trunks Overview ...............................................................................................................................93
7.2 Trunk Scenario Examples .................................................................................................................93
7.3 Trunk Commands Input Values .........................................................................................................94
7.4 Trunk Commands Summary .............................................................................................................94
7.5 Trunk Command Examples ...............................................................................................................95
7.6 Link Sticking ......................................................................................................................................96
7.7 Link Sticking Commands Summary ..................................................................................................97
7.8 Link Sticking Command Example ......................................................................................................97
Chapter 8
Route....................................................................................................................................................99
8.1 Policy Route ......................................................................................................................................99
8.2 Policy Route Commands ...................................................................................................................99
8.2.1 Assured Forwarding (AF) PHB for DiffServ ...........................................................................104
8.2.2 Policy Route Command Example ..........................................................................................104
8.3 IP Static Route ................................................................................................................................105
8.4 Static Route Commands .................................................................................................................105
8.4.1 Static Route Commands Examples .......................................................................................106
Chapter 9
Routing Protocol...............................................................................................................................107
9.1 Routing Protocol Overview ..............................................................................................................107
9.2 Routing Protocol Commands Summary ..........................................................................................107
9.2.1 RIP Commands .....................................................................................................................108
9.2.2 General OSPF Commands ....................................................................................................108

Table of Contents
ZyWALL (ZLD) CLI Reference Guide
8
9.2.3 OSPF Area Commands .........................................................................................................109
9.2.4 Virtual Link Commands ..........................................................................................................109
9.2.5 Learned Routing Information Commands ..............................................................................110
9.2.6 show ip route Command Example .........................................................................................110
Chapter 10
Zones ................................................................................................................................................. 111
10.1 Zones Overview ............................................................................................................................ 111
10.2 Zone Commands Summary ..........................................................................................................112
10.2.1 Zone Command Examples ..................................................................................................113
Chapter 11
DDNS..................................................................................................................................................115
11.1 DDNS Overview ............................................................................................................................115
11.2 DDNS Commands Summary ........................................................................................................116
Chapter 12
Virtual Servers ..................................................................................................................................119
12.1 Virtual Server Overview ................................................................................................................119
12.1.1 1:1 NAT and Many 1:1 NAT .................................................................................................119
12.2 Virtual Server Commands Summary .............................................................................................119
12.2.1 Virtual Server Command Examples .....................................................................................121
12.2.2 Tutorial - How to Allow Public Access to a Server ...............................................................122
Chapter 13
HTTP Redirect...................................................................................................................................123
13.1 HTTP Redirect Overview ..............................................................................................................123
13.1.1 Web Proxy Server ................................................................................................................123
13.2 HTTP Redirect Commands ...........................................................................................................124
13.2.1 HTTP Redirect Command Examples ..................................................................................125
Chapter 14
ALG ....................................................................................................................................................127
14.1 ALG Introduction ...........................................................................................................................127
14.2 ALG Commands ............................................................................................................................128
14.3 ALG Commands Example .............................................................................................................129
Chapter 15
IP/MAC Binding.................................................................................................................................131
15.1 IP/MAC Binding Overview .............................................................................................................131
15.2 IP/MAC Binding Commands .........................................................................................................131
15.3 IP/MAC Binding Commands Example ..........................................................................................132

Table of Contents
ZyWALL (ZLD) CLI Reference Guide 9
Chapter 16
Firewall ..............................................................................................................................................133
16.1 Firewall Overview ..........................................................................................................................133
16.2 Firewall Commands ......................................................................................................................134
16.2.1 Firewall Sub-Commands .....................................................................................................137
16.2.2 Firewall Command Examples ..............................................................................................138
16.3 Session Limit Commands .............................................................................................................139
Chapter 17
IPSec VPN..........................................................................................................................................141
17.1 IPSec VPN Overview ....................................................................................................................141
17.2 IPSec VPN Commands Summary ................................................................................................142
17.2.1 IKE SA Commands ..............................................................................................................143
17.2.2 IPSec SA Commands (except Manual Keys) ......................................................................144
17.2.3 IPSec SA Commands (for Manual Keys) ............................................................................147
17.2.4 VPN Concentrator Commands ............................................................................................147
17.2.5 VPN Configuration Provisioning Commands .......................................................................148
17.2.6 SA Monitor Commands .......................................................................................................149
Chapter 18
SSL VPN ............................................................................................................................................151
18.1 SSL Access Policy ........................................................................................................................151
18.1.1 SSL Application Objects ......................................................................................................151
18.1.2 SSL Access Policy Limitations .............................................................................................151
18.2 SSL VPN Commands ....................................................................................................................151
18.2.1 SSL VPN Commands ..........................................................................................................152
18.2.2 Setting an SSL VPN Rule Tutorial .......................................................................................153
Chapter 19
L2TP VPN...........................................................................................................................................157
19.1 L2TP VPN Overview .....................................................................................................................157
19.2 IPSec Configuration ......................................................................................................................157
19.2.1 Using the Default L2TP VPN Connection ............................................................................158
19.3 Policy Route ..................................................................................................................................158
19.4 L2TP VPN Commands ..................................................................................................................159
19.4.1 L2TP VPN Commands ........................................................................................................159
19.5 L2TP VPN Example ......................................................................................................................160
19.5.1 Configuring the Default L2TP VPN Gateway Example ........................................................161
19.5.2 Configuring the Default L2TP VPN Connection Example ....................................................161
19.5.3 Configuring the L2TP VPN Settings Example .....................................................................161
19.5.4 Configuring the Policy Route for L2TP Example .................................................................162

Table of Contents
ZyWALL (ZLD) CLI Reference Guide
10
Chapter 20
Application Patrol.............................................................................................................................163
20.1 Application Patrol Overview ..........................................................................................................163
20.2 Application Patrol Commands Summary ......................................................................................163
20.2.1 Pre-defined Application Commands ....................................................................................164
20.2.2 Rule Commands for Pre-defined Applications .....................................................................164
20.2.3 Exception Commands for Pre-defined Applications ............................................................166
20.2.4 Other Application Commands ..............................................................................................167
20.2.5 Rule Commands for Other Applications ..............................................................................167
20.2.6 General Commands for Application Patrol ..........................................................................168
Chapter 21
Anti-Virus...........................................................................................................................................173
21.1 Anti-Virus Overview .......................................................................................................................173
21.2 Anti-virus Commands ....................................................................................................................173
21.2.1 General Anti-virus Commands ............................................................................................174
21.2.2 Zone to Zone Anti-virus Rules .............................................................................................174
21.2.3 White and Black Lists ..........................................................................................................176
21.2.4 Signature Search Anti-virus Command ...............................................................................177
21.3 Update Anti-virus Signatures ........................................................................................................178
21.3.1 Update Signature Examples ................................................................................................179
21.4 Anti-virus Statistics ........................................................................................................................179
21.4.1 Anti-virus Statistics Example ...............................................................................................180
Chapter 22
IDP Commands .................................................................................................................................181
22.1 Overview .......................................................................................................................................181
22.2 General IDP Commands ...............................................................................................................181
22.2.1 IDP Activation ......................................................................................................................181
22.3 IDP Profile Commands ..................................................................................................................182
22.3.1 Global Profile Commands ....................................................................................................182
22.3.2 IDP Zone to Zone Rules ......................................................................................................183
22.3.3 Editing/Creating IDP Signature Profiles ...............................................................................184
22.3.4 Editing/Creating Anomaly Profiles .......................................................................................184
22.3.5 Editing System Protect ........................................................................................................188
22.3.6 Signature Search .................................................................................................................188
22.4 IDP Custom Signatures .................................................................................................................191
22.4.1 Custom Signature Examples ...............................................................................................192
22.5 Update IDP Signatures .................................................................................................................195
22.5.1 Update Signature Examples ................................................................................................196
22.6 IDP Statistics .................................................................................................................................196
22.6.1 IDP Statistics Example ........................................................................................................197

Table of Contents
ZyWALL (ZLD) CLI Reference Guide 11
Chapter 23
Content Filtering...............................................................................................................................199
23.1 Content Filtering Overview ............................................................................................................199
23.2 Content Filtering Policies ..............................................................................................................199
23.3 External Web Filtering Service ......................................................................................................199
23.4 Content Filtering Reports ..............................................................................................................199
23.5 Content Filter Command Input Values ..........................................................................................200
23.6 General Content Filter Commands ...............................................................................................201
23.7 Content Filter Filtering Profile Commands ....................................................................................203
23.8 Content Filter URL Cache Commands ..........................................................................................205
23.9 Content Filtering Statistics .............................................................................................................206
23.9.1 Content Filtering Statistics Example ....................................................................................207
23.10 Content Filtering Commands Example .......................................................................................207
Chapter 24
Anti-Spam..........................................................................................................................................211
24.1 Anti-Spam Overview ......................................................................................................................211
24.2 Anti-Spam Commands ..................................................................................................................211
24.2.1 General Anti-Spam Commands ...........................................................................................211
24.2.2 Zone to Zone Anti-spam Rules ............................................................................................212
24.2.3 White and Black Lists ..........................................................................................................214
24.2.4 DNSBL Anti-Spam Commands ............................................................................................216
24.3 Anti-Spam Statistics ......................................................................................................................219
24.3.1 Anti-Spam Statistics Example ..............................................................................................219
Chapter 25
Device HA..........................................................................................................................................221
25.1 Device HA Overview .....................................................................................................................221
25.1.1 Before You Begin .................................................................................................................222
25.2 General Device HA Commands ....................................................................................................222
25.3 Active-Passive Mode Device HA ...................................................................................................222
25.4 Active-Passive Mode Device HA Commands ...............................................................................223
25.4.1 Active-Passive Mode Device HA Commands ......................................................................223
25.4.2 Active-Passive Mode Device HA Command Example ........................................................225
25.5 Legacy Mode (VRRP) Device HA .................................................................................................225
25.6 Legacy Mode (VRRP) Device HA Commands ..............................................................................225
25.6.1 VRRP Group Commands ....................................................................................................226
25.6.2 VRRP Synchronization Commands .....................................................................................226
25.6.3 Link Monitoring Commands .................................................................................................227
Chapter 26
User/Group........................................................................................................................................229
26.1 User Account Overview .................................................................................................................229

Table of Contents
ZyWALL (ZLD) CLI Reference Guide
12
26.1.1 User Types ..........................................................................................................................229
26.2 User/Group Commands Summary ................................................................................................230
26.2.1 User Commands ..................................................................................................................230
26.2.2 User Group Commands .......................................................................................................231
26.2.3 User Setting Commands .....................................................................................................231
26.2.4 Force User Authentication Commands ................................................................................233
26.2.5 Additional User Commands .................................................................................................235
Chapter 27
Addresses .........................................................................................................................................237
27.1 Address Overview .........................................................................................................................237
27.2 Address Commands Summary .....................................................................................................237
27.2.1 Address Object Commands .................................................................................................238
27.2.2 Address Group Commands .................................................................................................240
Chapter 28
Services.............................................................................................................................................243
28.1 Services Overview ........................................................................................................................243
28.2 Services Commands Summary .....................................................................................................243
28.2.1 Service Object Commands ..................................................................................................243
28.2.2 Service Group Commands ..................................................................................................244
Chapter 29
Schedules..........................................................................................................................................247
29.1 Schedule Overview .......................................................................................................................247
29.2 Schedule Commands Summary ...................................................................................................247
29.2.1 Schedule Command Examples ...........................................................................................248
Chapter 30
AAA Server........................................................................................................................................249
30.1 AAA Server Overview ...................................................................................................................249
30.2 Authentication Server Command Summary ..................................................................................249
30.2.1 ad-server Commands ..........................................................................................................249
30.2.2 ldap-server Commands .......................................................................................................250
30.2.3 radius-server Commands ....................................................................................................251
30.2.4 radius-server Command Example .......................................................................................251
30.2.5 aaa group server ad Commands .........................................................................................251
30.2.6 aaa group server ldap Commands ......................................................................................252
30.2.7 aaa group server radius Commands ...................................................................................253
30.2.8 aaa group server Command Example .................................................................................254
Chapter 31
Authentication Objects.....................................................................................................................255

Table of Contents
ZyWALL (ZLD) CLI Reference Guide 13
31.1 Authentication Objects Overview ..................................................................................................255
31.2 aaa authentication Commands .....................................................................................................255
31.2.1 aaa authentication Command Example ...............................................................................256
31.3 test aaa Command ........................................................................................................................256
31.3.1 Test a User Account Command Example ............................................................................256
Chapter 32
Certificates ........................................................................................................................................259
32.1 Certificates Overview ....................................................................................................................259
32.2 Certificate Commands ...................................................................................................................259
32.3 Certificates Commands Input Values ............................................................................................259
32.4 Certificates Commands Summary ................................................................................................260
32.5 Certificates Commands Examples ................................................................................................263
Chapter 33
ISP Accounts.....................................................................................................................................264
33.1 ISP Accounts Overview .................................................................................................................264
33.1.1 PPPoE and PPTP Account Commands ..............................................................................264
33.1.2 Cellular Account Commands ...............................................................................................265
Chapter 34
SSL Application ................................................................................................................................266
34.1 SSL Application Overview .............................................................................................................266
34.1.1 SSL Application Object Commands ....................................................................................266
34.1.2 SSL Application Command Examples .................................................................................268
Chapter 35
Endpoint Security.............................................................................................................................269
35.1 Endpoint Security Overview ..........................................................................................................269
35.1.1 Endpoint Security Commands Summary .............................................................................270
35.1.2 Endpoint Security Object Commands ..................................................................................270
35.1.3 Endpoint Security Object Command Example .....................................................................273
Chapter 36
DHCPv6 Objects................................................................................................................................276
36.1 DHCPv6 Object Commands Summary .........................................................................................276
36.1.1 DHCPv6 Object Commands ................................................................................................276
36.1.2 DHCPv6 Object Command Examples .................................................................................277
Chapter 37
System...............................................................................................................................................279
37.1 System Overview ..........................................................................................................................279
37.2 Customizing the WWW Login Page ..............................................................................................279

Table of Contents
ZyWALL (ZLD) CLI Reference Guide
14
37.3 Host Name Commands .................................................................................................................281
37.4 Time and Date ..............................................................................................................................281
37.4.1 Date/Time Commands .........................................................................................................282
37.5 Console Port Speed .....................................................................................................................282
37.6 DNS Overview ..............................................................................................................................283
37.6.1 Domain Zone Forwarder .....................................................................................................283
37.6.2 DNS Commands ..................................................................................................................283
37.6.3 DNS Command Example ....................................................................................................284
Chapter 38
System Remote Management..........................................................................................................285
38.1 Remote Management Overview ....................................................................................................285
38.1.1 Remote Management Limitations ........................................................................................285
38.1.2 System Timeout ...................................................................................................................285
38.2 Common System Command Input Values ....................................................................................286
38.3 HTTP/HTTPS Commands .............................................................................................................286
38.3.1 HTTP/HTTPS Command Examples ....................................................................................288
38.4 SSH ...............................................................................................................................................288
38.4.1 SSH Implementation on the ZyWALL ..................................................................................288
38.4.2 Requirements for Using SSH ...............................................................................................288
38.4.3 SSH Commands ..................................................................................................................289
38.4.4 SSH Command Examples ...................................................................................................289
38.5 Telnet ............................................................................................................................................290
38.6 Telnet Commands .........................................................................................................................290
38.6.1 Telnet Commands Examples ...............................................................................................290
38.7 Configuring FTP ...........................................................................................................................291
38.7.1 FTP Commands ..................................................................................................................291
38.7.2 FTP Commands Examples ..................................................................................................292
38.8 SNMP ...........................................................................................................................................292
38.8.1 Supported MIBs ...................................................................................................................292
38.8.2 SNMP Traps ........................................................................................................................292
38.8.3 SNMP Commands ...............................................................................................................293
38.8.4 SNMP Commands Examples ..............................................................................................293
38.9 ICMP Filter ...................................................................................................................................294
38.10 Dial-in Management ...................................................................................................................294
38.10.1 AT Command Strings .........................................................................................................295
38.10.2 DTR Signal ........................................................................................................................295
38.10.3 Response Strings ..............................................................................................................295
38.10.4 Dial-in Management Commands .......................................................................................295
38.11 Vantage CNM .............................................................................................................................296
38.11.1 Vantage CNM Commands .................................................................................................296
38.12 Language Commands .................................................................................................................297
38.13 IPv6 Commands ..........................................................................................................................298

Table of Contents
ZyWALL (ZLD) CLI Reference Guide 15
Chapter 39
File Manager......................................................................................................................................299
39.1 File Directories ..............................................................................................................................299
39.2 Configuration Files and Shell Scripts Overview ...........................................................................299
39.2.1 Comments in Configuration Files or Shell Scripts ...............................................................300
39.2.2 Errors in Configuration Files or Shell Scripts .......................................................................301
39.2.3 ZyWALL Configuration File Details ......................................................................................301
39.2.4 Configuration File Flow at Restart .......................................................................................302
39.3 File Manager Commands Input Values .........................................................................................302
39.4 File Manager Commands Summary .............................................................................................303
39.5 File Manager Command Examples ...............................................................................................304
39.6 FTP File Transfer ..........................................................................................................................304
39.6.1 Command Line FTP File Upload .........................................................................................304
39.6.2 Command Line FTP Configuration File Upload Example ....................................................305
39.6.3 Command Line FTP File Download .....................................................................................305
39.6.4 Command Line FTP Configuration File Download Example ...............................................306
39.7 ZyWALL File Usage at Startup ......................................................................................................306
39.8 Notification of a Damaged Recovery Image or Firmware .............................................................307
39.9 Restoring the Recovery Image ......................................................................................................308
39.10 Restoring the Firmware ...............................................................................................................310
39.11 Restoring the Default System Database .....................................................................................312
39.11.1 Using the atkz -u Debug Command ...................................................................................314
Chapter 40
Logs ...................................................................................................................................................317
40.1 Log Commands Summary ............................................................................................................317
40.1.1 Log Entries Commands .......................................................................................................318
40.1.2 System Log Commands ......................................................................................................318
40.1.3 Debug Log Commands ........................................................................................................319
40.1.4 E-mail Profile Commands ....................................................................................................320
40.1.5 Console Port Logging Commands .......................................................................................322
Chapter 41
Reports and Reboot..........................................................................................................................323
41.1 Report Commands Summary ........................................................................................................323
41.1.1 Report Commands ..............................................................................................................323
41.1.2 Report Command Examples ...............................................................................................324
41.1.3 Session Commands ............................................................................................................324
41.1.4 Packet Size Statistics Commands .......................................................................................324
41.2 Email Daily Report Commands .....................................................................................................325
41.2.1 Email Daily Report Example ................................................................................................326
41.3 Reboot ...........................................................................................................................................328

Table of Contents
ZyWALL (ZLD) CLI Reference Guide
16
Chapter 42
Session Timeout...............................................................................................................................329
Chapter 43
Diagnostics ......................................................................................................................................331
43.1 Diagnostics ....................................................................................................................................331
43.2 Diagnosis Commands ...................................................................................................................331
43.3 Diagnosis Commands Example ....................................................................................................331
Chapter 44
Packet Flow Explore.........................................................................................................................333
44.1 Packet Flow Explore .....................................................................................................................333
44.2 Packet Flow Explore Commands ..................................................................................................333
44.3 Packet Flow Explore Commands Example ...................................................................................334
Chapter 45
Packet Flow Filter.............................................................................................................................337
45.1 Packet Flow Filter ..........................................................................................................................337
45.2 Packet Flow Filter Commands ......................................................................................................337
45.3 Packet Flow Filter Commands Examples .....................................................................................338
Chapter 46
Maintenance Tools............................................................................................................................341
46.1 Maintenance Command Examples ...............................................................................................343
46.1.1 Packet Capture Command Example ...................................................................................344
Chapter 47
Watchdog Timer................................................................................................................................347
47.1 Hardware Watchdog Timer ...........................................................................................................347
47.2 Software Watchdog Timer .............................................................................................................347
47.3 Application Watchdog ...................................................................................................................348
47.3.1 Application Watchdog Commands Example ........................................................................348
List of Commands (Alphabetical)....................................................................................................351

17
PART I
Introduction

18

ZyWALL (ZLD) CLI Reference Guide 19
CHAPTER 1
Command Line Interface
This chapter describes how to access and use the CLI (Command Line Interface).
1.1 Overview
If you have problems with your ZyWALL, customer support may request that you issue some of
these commands to assist them in troubleshooting.
Use of undocumented commands or misconfiguration can damage the
ZyWALL and possibly render it unusable.
1.1.1 The Configuration File
When you configure the ZyWALL using either the CLI (Command Line Interface) or the web
configurator, the settings are saved as a series of commands in a configuration file on the ZyWALL.
You can store more than one configuration file on the ZyWALL. However, only one configuration file
is used at a time.
You can perform the following with a configuration file:
• Back up ZyWALL configuration once the ZyWALL is set up to work in your network.
• Restore ZyWALL configuration.
• Save and edit a configuration file and upload it to multiple ZyWALLs (of the same model) in your
network to have the same settings.
Note: You may also edit a configuration file using a text editor.
1.2 Accessing the CLI
You can access the CLI using a terminal emulation program on a computer connected to the console
port, from the web configurator or access the ZyWALL using Telnet or SSH (Secure SHell).
Note: The ZyWALL might force you to log out of your session if reauthentication time,
lease time, or idle timeout is reached. See Chapter 26 on page 229 for more
information about these settings.

Chapter 1 Command Line Interface
ZyWALL (ZLD) CLI Reference Guide
20
1.2.1 Console Port
The default settings for the console port are as follows.
When you turn on your ZyWALL, it performs several internal tests as well as line initialization. You
can view the initialization information using the console port.
• Garbled text displays if your terminal emulation program’s speed is set lower than the ZyWALL’s.
• No text displays if the speed is set higher than the ZyWALL’s.
• If changing your terminal emulation program’s speed does not get anything to display, restart the
ZyWALL.
• If restarting the ZyWALL does not get anything to display, contact your local customer support.
Figure 1 Console Port Power-on Display
After the initialization, the login screen displays.
Figure 2 Login Screen
Enter the user name and password at the prompts.
Note: The default login username is admin and password is 1234. The username and
password are case-sensitive.
1.2.2 Web Configurator Console
Note: Before you can access the CLI through the web configurator, make sure your
computer supports the Java Runtime Environment. You will be prompted to
download and install the Java plug-in if it is not already installed.
Table 1 Managing the ZyWALL: Console Port
SETTING VALUE
Speed 115200 bps
Data Bits 8
Parity None
Stop Bit 1
Flow Control Off
FLASH: AMD 16M
BootModule Version: V1.14 | 07/09/2010 11:00:00
DRAM: Size = 256 Mbytes
Kernel Version: V2.6.25.4 | 2011-10-28 00:25:30
ZLD Version: V3.00(BDR.0)b9 | 2011-10-28 14:41:45
Press any key to enter debug mode within 1 seconds.
.....................
Welcome to ZyWALL USG 20W
Username: