ZyXEL Communications ZyWALL Series User manual

Default Login Details
3'ŻMÍºŻGuide
Copyright © 2022 Zyxel and/or its affiliates. All rights reserved.
ZyWALL Series
LAN Port IP Address https://192.168.1.1
User Name admin
Password 1234
Version 4.10–5.32 Ed. 1, 9/2022

IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a Reference Guide for a series of products intended for people who want to configure the Zyxel
Device via Command Line Interface (CLI).
Note: The version number on the cover page refers to the latest firmware version supported
by the Zyxel Device. This guide applies to ZLD version 4.10–5.00 at the time of writing.
How To Use This Guide
1Read Chapter 1 on page 26 for how to access and use the CLI (Command Line Interface).
2Read Chapter 2 on page 42 to learn about the CLI user and privilege modes.
Some commands or command options in this guide may not be
available in your product. See your product's User’s Guide for a list of
supported features.
Do not use commands not documented in this guide. Use of
undocumented commands or misconfiguration can damage the unit
and possibly render it unusable.
Some commands are renamed between firmware versions. In cases
where a command has multiple names, the Reference Guide lists each
variation.
Related Documentation
•QuickStartGuide
The Quick Start Guide shows how to connect the Zyxel Device and access the Web Configurator.
• User’s Guide
The ZyWALL USG, ATP, USG FLEX and VPN series User Guides explain how to use the Web Configurator
to configure the Zyxel Device. It also shows the product feature matrix for each device. General
feature differences are written in the Introduction chapter while a more detailed table is in the
Product Feature appendix.
Note: It is recommended you use the Web Configurator to configure the Zyxel Device.
•MoreInformation
Go to support.zyxel.com to find other information on Zyxel Device.

Contents Overview
ZyWALL Series CLI Reference Guide
3
Contents Overview
Introduction .......................................................................................................................................25
Command Line Interface .................................................................................................................... 26
User and Privilege Modes .................................................................................................................... 42
Reference ..........................................................................................................................................44
Object Reference ................................................................................................................................ 45
Status ...................................................................................................................................................... 47
Registration ............................................................................................................................................ 53
AP Management .................................................................................................................................. 57
Built-in AP ............................................................................................................................................... 70
AP Group ............................................................................................................................................... 72
Wireless LAN Profiles .............................................................................................................................. 79
Rogue AP ............................................................................................................................................. 100
Wireless Health .................................................................................................................................... 104
Wireless Frame Capture ..................................................................................................................... 109
Dynamic Channel Selection ............................................................................................................. 112
Auto-Healing ....................................................................................................................................... 113
LEDs ...................................................................................................................................................... 115
Interfaces ............................................................................................................................................. 117
Trunks .................................................................................................................................................... 165
Route .................................................................................................................................................... 169
Routing Protocol ................................................................................................................................. 179
Zones .................................................................................................................................................... 186
DDNS .................................................................................................................................................... 189
Virtual Servers ...................................................................................................................................... 192
HTTP Redirect ....................................................................................................................................... 205
Redirect Service .................................................................................................................................. 207
ALG ....................................................................................................................................................... 211
UPnP ..................................................................................................................................................... 214
IP/MAC Binding ................................................................................................................................... 217
Layer 2 Isolation .................................................................................................................................. 219
Secure Policy ....................................................................................................................................... 222
Cloud CNM ......................................................................................................................................... 242
Web Authentication ........................................................................................................................... 250
Hotspot ................................................................................................................................................ 261
IPSec VPN ............................................................................................................................................ 276
SSL VPN ................................................................................................................................................ 295
L2TP VPN .............................................................................................................................................. 299

Contents Overview
ZyWALL Series CLI Reference Guide
4
Bandwidth Management .................................................................................................................. 307
Application Patrol ............................................................................................................................... 313
Anti-Virus .............................................................................................................................................. 317
RTLS ....................................................................................................................................................... 325
Reputation Filter .................................................................................................................................. 327
Sandboxing ......................................................................................................................................... 346
IDP Commands ................................................................................................................................... 349
Content Filtering ................................................................................................................................. 366
Anti-Spam ............................................................................................................................................ 400
Collaborative Detection & Response .............................................................................................. 412
SSL Inspection ...................................................................................................................................... 420
IP Exception ......................................................................................................................................... 428
Device HA ........................................................................................................................................... 430
Device Insight ...................................................................................................................................... 440
User/Group .......................................................................................................................................... 445
Application Object ............................................................................................................................ 457
Addresses ............................................................................................................................................ 460
Services ................................................................................................................................................ 468
Schedules ............................................................................................................................................ 471
AAA Server .......................................................................................................................................... 473
Authentication Objects ..................................................................................................................... 480
Authentication Server ........................................................................................................................ 492
Certificates .......................................................................................................................................... 494
ISP Accounts ........................................................................................................................................ 500
SSL Application ................................................................................................................................... 503
DHCPv6 Objects ................................................................................................................................. 506
Dynamic Guest Accounts ................................................................................................................. 509
System .................................................................................................................................................. 512
System Remote Management .......................................................................................................... 528
File Manager ....................................................................................................................................... 540
Logs ...................................................................................................................................................... 564
Reports and Reboot ........................................................................................................................... 571
Diagnostics and Remote Assistance ............................................................................................... 577
Session Timeout ................................................................................................................................... 580
Packet Flow Explore ........................................................................................................................... 581
Maintenance Tools ............................................................................................................................. 585
Miscellaneous ..................................................................................................................................... 596
Managed AP Commands ................................................................................................................. 603

Table of Contents
ZyWALL Series CLI Reference Guide
5
Table of Contents
Contents Overview .............................................................................................................................3
Table of Contents.................................................................................................................................5
Part I: Introduction ..........................................................................................25
Chapter 1
Command Line Interface..................................................................................................................26
1.1 Overview ......................................................................................................................................... 26
1.1.1 The Configuration File ........................................................................................................... 27
1.2 Accessing the CLI ........................................................................................................................... 27
1.2.1 Console Port .......................................................................................................................... 28
1.2.2 Web Configurator Console .................................................................................................. 28
1.2.3 Telnet ...................................................................................................................................... 30
1.2.4 SSH (Secure SHell) .................................................................................................................. 31
1.3 How to Find Commands in this Guide .........................................................................................32
1.4 How Commands Are Explained ................................................................................................... 32
1.4.1 Background Information (Optional) ................................................................................... 32
1.4.2 Command Input Values (Optional) .................................................................................... 32
1.4.3 Command Summary ............................................................................................................ 32
1.4.4 Command Examples (Optional) ......................................................................................... 32
1.4.5 Command Syntax ................................................................................................................. 32
1.4.6 Naming Conventions ............................................................................................................ 33
1.4.7 Changing the Password ....................................................................................................... 33
1.4.8 Idle Timeout ........................................................................................................................... 33
1.5 CLI Modes ........................................................................................................................................ 33
1.6 Shortcuts and Help ......................................................................................................................... 34
1.6.1 List of Available Commands ................................................................................................ 34
1.6.2 List of Sub-commands or Required User Input ................................................................... 35
1.6.3 Entering Partial Commands ................................................................................................. 35
1.6.4 Entering a ? in a Command ................................................................................................36
1.6.5 Command History ................................................................................................................. 36
1.6.6 Navigation ............................................................................................................................. 36
1.6.7 Erase Current Command ..................................................................................................... 36
1.6.8 The no Commands ............................................................................................................... 36
1.7 Input Values .................................................................................................................................... 36
1.8 Ethernet Interfaces ......................................................................................................................... 41
1.9 Saving Configuration Changes .................................................................................................... 41

Table of Contents
ZyWALL Series CLI Reference Guide
6
1.10 Logging Out .................................................................................................................................. 41
1.11 Resetting the Zyxel Device .......................................................................................................... 41
Chapter 2
User and Privilege Modes .................................................................................................................42
2.1 User And Privilege Modes .............................................................................................................. 42
Part II: Reference ............................................................................................44
Chapter 3
Object Reference ..............................................................................................................................45
3.1 Object Reference Commands ..................................................................................................... 45
3.1.1 Object Reference Command Example ............................................................................. 46
Chapter 4
Status...................................................................................................................................................47
4.1 ATP Dashboard Commands ......................................................................................................... 51
4.2 CPU Temperature Monitor Commands ....................................................................................... 52
4.3 System Protection Signature Commands .................................................................................... 52
Chapter 5
Registration.........................................................................................................................................53
5.1 myZyxel Overview ........................................................................................................................... 53
5.1.1 Subscription Services Available on the Zyxel Device ........................................................ 53
5.1.2 Firewall as a Service (FaaS) License .................................................................................... 54
5.2 Registration Commands ................................................................................................................ 54
5.3 FaaS Commands ............................................................................................................................ 55
5.3.1 Command Examples ............................................................................................................ 55
Chapter 6
AP Management................................................................................................................................57
6.1 AP Management Overview .......................................................................................................... 57
6.1.1 AP Modes ............................................................................................................................... 57
6.1.2 Airtime Fairness ...................................................................................................................... 58
6.2 AP Management Value ................................................................................................................. 58
6.3 General AP Management Commands ....................................................................................... 59
6.3.1 AP Management Commands Example ............................................................................. 64
6.4 Remote AP ...................................................................................................................................... 66
6.4.1 Remote AP Notes .................................................................................................................. 68
6.4.2 Remote AP Commands .......................................................................................................68

Table of Contents
ZyWALL Series CLI Reference Guide
7
Chapter 7
Built-in AP............................................................................................................................................70
7.1 Built-in AP Commands .................................................................................................................... 70
Chapter 8
AP Group ............................................................................................................................................72
8.1 Wireless Load Balancing Overview .............................................................................................. 72
8.2 AP Group Commands ................................................................................................................... 72
8.2.1 AP Group Examples .............................................................................................................. 76
Chapter 9
Wireless LAN Profiles ..........................................................................................................................79
9.1 Wireless LAN Profiles Overview ...................................................................................................... 79
9.2 AP Radio & Monitor Profile Commands ....................................................................................... 79
9.2.1 AP Radio & Monitor Profile Commands Example ............................................................. 88
9.3 SSID Profile Commands .................................................................................................................. 89
9.3.1 SSID Profile Example .............................................................................................................. 92
9.4 Security Profile Commands ........................................................................................................... 92
9.4.1 Security Profile Example ....................................................................................................... 95
9.4.2 SSID and Security Profiles Example ...................................................................................... 96
9.5 MAC Filter Profile Commands ....................................................................................................... 97
9.5.1 MAC Filter Profile Example ................................................................................................... 97
9.6 ZyMesh Profile Commands ............................................................................................................ 98
Chapter 10
Rogue AP..........................................................................................................................................100
10.1 Rogue AP Detection Overview ................................................................................................. 100
10.2 Rogue AP Detection Commands ............................................................................................. 100
10.2.1 Rogue AP Detection Examples ....................................................................................... 101
10.3 Rogue AP Containment Overview ........................................................................................... 102
10.4 Rogue AP Containment Commands ....................................................................................... 103
10.4.1 Rogue AP Containment Example ................................................................................... 103
Chapter 11
Wireless Health.................................................................................................................................104
11.1 Wireless Health Overview .......................................................................................................... 104
11.2 Wireless Health Commands ...................................................................................................... 104
11.2.1 Wireless Health Radio and Station Settings .................................................................... 106
11.2.2 Wireless Health Radio and Station Actions .................................................................... 107
11.2.3 Wireless Health Command Examples ............................................................................. 107
Chapter 12
Wireless Frame Capture..................................................................................................................109

Table of Contents
ZyWALL Series CLI Reference Guide
8
12.1 Wireless Frame Capture Overview ...........................................................................................109
12.2 Wireless Frame Capture Commands ....................................................................................... 109
12.2.1 Wireless Frame Capture Examples .................................................................................. 110
12.2.2 Remote Packet Capture .................................................................................................. 110
Chapter 13
Dynamic Channel Selection...........................................................................................................112
13.1 DCS Overview ............................................................................................................................. 112
13.2 DCS Commands ......................................................................................................................... 112
Chapter 14
Auto-Healing....................................................................................................................................113
14.1 Auto-Healing Overview ............................................................................................................. 113
14.2 Auto-Healing Commands ......................................................................................................... 113
14.2.1 Auto-Healing Examples .................................................................................................... 114
Chapter 15
LEDs ...................................................................................................................................................115
15.1 LED Suppression Mode ............................................................................................................... 115
15.2 LED Suppression Commands ..................................................................................................... 115
15.2.1 LED Suppression Commands Example ........................................................................... 115
15.3 LED Locator ................................................................................................................................. 116
15.4 LED Locator Commands ............................................................................................................ 116
15.4.1 LED Locator Commands Example .................................................................................. 116
Chapter 16
Interfaces..........................................................................................................................................117
16.1 Interface Overview .................................................................................................................... 117
16.1.1 Types of Interfaces ............................................................................................................ 117
16.1.2 Relationships Between Interfaces ................................................................................... 120
16.2 Interface General Commands Summary ................................................................................ 121
16.2.1 Basic Interface Properties and IP Address Commands ................................................ 121
16.2.2 IGMP Proxy Commands ................................................................................................... 128
16.2.3 Proxy ARP Commands ......................................................................................................129
16.2.4 DHCP Setting Commands ................................................................................................ 130
16.2.5 Interface Parameter Command Examples ................................................................... 135
16.2.6 RIP Commands .................................................................................................................. 136
16.2.7 OSPF Commands .............................................................................................................. 137
16.2.8 Connectivity Check (Ping-check) Commands ............................................................. 138
16.3 Ethernet Interface Specific Commands .................................................................................. 139
16.3.1 MAC Address Setting Commands .................................................................................. 140
16.3.2 Port Grouping Commands .............................................................................................. 140
16.4 Virtual Interface Specific Commands ...................................................................................... 142

Table of Contents
ZyWALL Series CLI Reference Guide
9
16.4.1 Virtual Interface Command Examples ........................................................................... 142
16.5 PPPoE/PPTP Specific Commands ............................................................................................. 142
16.5.1 PPPoE/PPTP Interface Command Examples .................................................................. 144
16.6 Cellular Interface Specific Commands ................................................................................... 144
16.6.1 Cellular Status .................................................................................................................... 147
16.6.2 Cellular Interface Command Examples ......................................................................... 149
16.7 Tunnel Interface Specific Commands ..................................................................................... 150
16.7.1 Tunnel Interface Command Examples ........................................................................... 152
16.8 USB Storage Specific Commands .............................................................................................152
16.8.1 Firmware Upgrade via USB Stick ...................................................................................... 153
16.8.2 USB Storage Commands Example .................................................................................. 155
16.9 VLAN Interface Specific Commands ....................................................................................... 155
16.9.1 VLAN Interface Command Examples ............................................................................ 156
16.10 Bridge Specific Commands .................................................................................................... 156
16.10.1 Bridge Interface Command Examples ......................................................................... 157
16.11 LAG Commands ....................................................................................................................... 157
16.11.1 LAG Interface Command Example .............................................................................. 160
16.12 VTI Commands ......................................................................................................................... 161
16.12.1 Restrictions for IPsec Virtual Tunnel Interface ............................................................... 161
16.12.2 VTI Interface Command Example ................................................................................ 164
Chapter 17
Trunks ................................................................................................................................................165
17.1 Trunks Overview .......................................................................................................................... 165
17.2 Trunk Scenario Examples ........................................................................................................... 165
17.3 Trunk Commands Input Values ................................................................................................. 166
17.4 Trunk Commands Summary ...................................................................................................... 166
17.5 Trunk Command Examples ....................................................................................................... 167
Chapter 18
Route.................................................................................................................................................169
18.1 Policy Route ................................................................................................................................ 169
18.1.1 Source Network Address Translation (SNAT) .................................................................. 169
18.2 Policy Route Commands ........................................................................................................... 170
18.2.1 Assured Forwarding (AF) PHB for DiffServ ....................................................................... 175
18.2.2 Policy Route Command Example ................................................................................... 175
18.3 IP Static Route ............................................................................................................................. 176
18.4 Static Route Commands ........................................................................................................... 177
18.4.1 Static Route Commands Examples ................................................................................ 178
Chapter 19
Routing Protocol...............................................................................................................................179
19.1 Routing Protocol Overview ....................................................................................................... 179

Table of Contents
ZyWALL Series CLI Reference Guide
10
19.2 Routing Protocol Commands Summary .................................................................................. 179
19.2.1 RIP Commands .................................................................................................................. 180
19.2.2 General OSPF Commands ............................................................................................... 180
19.2.3 OSPF Area Commands .................................................................................................... 181
19.2.4 Virtual Link Commands ..................................................................................................... 181
19.2.5 Learned Routing Information Commands ..................................................................... 182
19.2.6 Show IP Route Command Example ................................................................................ 182
19.3 BGP (Border Gateway Protocol) .............................................................................................. 182
19.3.1 BGP Commands ................................................................................................................ 184
Chapter 20
Zones.................................................................................................................................................186
20.1 Zones Overview .......................................................................................................................... 186
20.2 Zone Commands Summary ...................................................................................................... 187
20.2.1 Zone Command Examples .............................................................................................. 188
Chapter 21
DDNS .................................................................................................................................................189
21.1 DDNS Overview ........................................................................................................................... 189
21.2 DDNS Commands Summary .....................................................................................................190
21.3 DDNS Commands Example ...................................................................................................... 191
Chapter 22
Virtual Servers...................................................................................................................................192
22.1 Virtual Server Overview .............................................................................................................. 192
22.1.1 1:1 NAT and Many 1:1 NAT ............................................................................................... 192
22.2 Virtual Server Commands Summary ......................................................................................... 192
22.2.1 Virtual Server Command Examples ................................................................................ 194
22.2.2 Tutorial - How to Allow Public Access to a Server ......................................................... 195
22.3 Virtual Server Load Balancing ................................................................................................... 196
22.3.1 Load Balancing Example 1 .............................................................................................. 196
22.3.2 Load Balancing Example 2 .............................................................................................. 197
22.3.3 Virtual Server Load Balancing Process ........................................................................... 198
22.3.4 Load Balancing Rules ....................................................................................................... 199
22.3.5 Virtual Server Load Balancing Algorithms ...................................................................... 200
22.3.6 Virtual Server Load Balancing Commands .................................................................... 201
Chapter 23
HTTP Redirect....................................................................................................................................205
23.1 HTTP Redirect Overview ............................................................................................................. 205
23.1.1 Web Proxy Server .............................................................................................................. 205
23.2 HTTP Redirect Commands ......................................................................................................... 205
23.2.1 HTTP Redirect Command Examples ............................................................................... 206

Table of Contents
ZyWALL Series CLI Reference Guide
11
Chapter 24
Redirect Service...............................................................................................................................207
24.1 HTTP Redirect ............................................................................................................................... 207
24.2 SMTP Redirect ............................................................................................................................. 207
24.3 Redirect Commands .................................................................................................................. 208
24.3.1 Redirect Command Example .......................................................................................... 210
Chapter 25
ALG....................................................................................................................................................211
25.1 ALG Introduction ........................................................................................................................ 211
25.2 ALG Commands ......................................................................................................................... 212
25.3 ALG Commands Example ......................................................................................................... 213
Chapter 26
UPnP...................................................................................................................................................214
26.1 UPnP and NAT-PMP Overview ................................................................................................... 214
26.2 UPnP and NAT-PMP Commands ............................................................................................... 214
26.3 UPnP & NAT-PMP Commands Example ................................................................................... 215
Chapter 27
IP/MAC Binding................................................................................................................................217
27.1 IP/MAC Binding Overview ......................................................................................................... 217
27.2 IP/MAC Binding Commands ..................................................................................................... 217
27.3 IP/MAC Binding Commands Example ..................................................................................... 218
Chapter 28
Layer 2 Isolation...............................................................................................................................219
28.1 Layer 2 Isolation Overview ......................................................................................................... 219
28.2 Layer 2 Isolation Commands ..................................................................................................... 220
28.2.1 Layer 2 Isolation White List Sub-Commands .................................................................. 220
28.3 Layer 2 Isolation Commands Example ..................................................................................... 221
Chapter 29
Secure Policy....................................................................................................................................222
29.1 Secure Policy Overview ............................................................................................................. 222
29.2 Secure Policy Commands ......................................................................................................... 223
29.2.1 Secure Policy Sub-Commands ........................................................................................ 226
29.2.2 Security Services Multiple Profiles .................................................................................... 228
29.2.3 Secure Policy Command Examples ................................................................................ 229
29.3 Session Limit Commands ........................................................................................................... 233
29.4 ADP Commands Overview ....................................................................................................... 235
29.4.1 ADP Command Input Values .......................................................................................... 236
29.4.2 ADP Activation Commands ............................................................................................ 236

Table of Contents
ZyWALL Series CLI Reference Guide
12
29.4.3 ADP Global Profile Commands ....................................................................................... 236
29.4.4 ADP Zone-to-Zone Rule Commands ............................................................................... 237
29.4.5 ADP Add/Edit Profile Sub Commands ............................................................................ 237
29.4.6 ADP Flood Detection Whitelist Commands ................................................................... 240
Chapter 30
Cloud CNM.......................................................................................................................................242
30.1 Cloud CNM Overview ................................................................................................................ 242
30.2 Cloud CNM SecuManager ....................................................................................................... 242
30.2.1 Introduction to XMPP ........................................................................................................ 243
30.2.2 Cloud CNM SecuManager Commands ........................................................................ 244
30.2.3 Cloud CNM SecuManager Command Example .......................................................... 247
30.3 Cloud CNM SecuReporter ......................................................................................................... 247
30.3.1 Cloud CNM SecuReporter Commands .......................................................................... 247
30.3.2 Cloud CNM SecuReporter Commands Example .......................................................... 249
Chapter 31
Web Authentication.........................................................................................................................250
31.1 Web Authentication Overview ................................................................................................. 250
31.1.1 User Two-Factor Authentication ...................................................................................... 250
31.1.2 802.1X Single Sign-On ....................................................................................................... 251
31.1.3 Summary of User Authentication Methods .................................................................... 251
31.2 Web Authentication Commands ............................................................................................. 252
31.2.1 web-auth login setting Sub-commands ......................................................................... 254
31.2.2 web-auth policy Sub-commands ................................................................................... 255
31.2.3 Facebook Wi-Fi Commands ............................................................................................ 257
31.3 SSO Overview .............................................................................................................................. 257
31.3.1 SSO Configuration Commands ....................................................................................... 258
31.3.2 SSO Show Commands ...................................................................................................... 258
31.3.3 Command Setup Sequence Example ........................................................................... 259
31.3.4 Two-Factor Web Authentication Command Example ................................................. 259
Chapter 32
Hotspot..............................................................................................................................................261
32.1 Hotspot Overview ....................................................................................................................... 261
32.2 Billing Overview ........................................................................................................................... 261
32.3 Billing Commands ....................................................................................................................... 261
32.3.1 Billing Profile Sub-commands ........................................................................................... 263
32.3.2 Billing Command Example ............................................................................................... 263
32.3.3 Payment Service ............................................................................................................... 265
32.4 Printer Manager Overview ........................................................................................................ 268
32.5 Printer-manager Commands .................................................................................................... 268
32.5.1 Printer-manager Printer Sub-commands ........................................................................ 269

Table of Contents
ZyWALL Series CLI Reference Guide
13
32.5.2 Printer-manager Command Example ............................................................................ 269
32.6 Free Time Overview .................................................................................................................... 270
32.7 Free-Time Commands ................................................................................................................ 270
32.8 Free-Time Commands Example ................................................................................................271
32.9 IPnP Overview ............................................................................................................................. 271
32.10 IPnP Commands ....................................................................................................................... 271
32.11 IPnP Commands Example ....................................................................................................... 272
32.12 Walled Garden Overview ....................................................................................................... 272
32.13 Walled Garden Commands ...................................................................................................272
32.13.1 walled-garden rule Sub-commands ............................................................................. 273
32.13.2 walled-garden domain-ip rule Sub-commands .......................................................... 274
32.13.3 Walled Garden Command Example ........................................................................... 274
32.14 Advertisement Overview ......................................................................................................... 275
32.15 Advertisement Commands ..................................................................................................... 275
32.15.1 Advertisement Command Example ............................................................................. 275
Chapter 33
IPSec VPN .........................................................................................................................................276
33.1 IPSec VPN Overview ................................................................................................................... 276
33.2 IPSec VPN Commands Summary ............................................................................................. 277
33.2.1 IPv4 IKEv1 SA Commands ................................................................................................. 278
33.2.2 IPv4 IPSec SA Commands (except Manual Keys) ......................................................... 280
33.2.3 IPv4 IPSec SA Commands (for Manual Keys) ................................................................. 285
33.2.4 VPN Concentrator Commands ....................................................................................... 286
33.2.5 VPN Configuration Provisioning Commands ................................................................. 286
33.2.6 SA Monitor Commands .................................................................................................... 288
33.2.7 IPv4 IKEv2 SA Commands ................................................................................................. 289
33.2.8 IPv6 IKEv2 SA Commands ................................................................................................. 290
33.2.9 IPv6 IPSec SA Commands ................................................................................................ 292
33.2.10 IPv6 VPN Concentrator Commands ............................................................................. 294
Chapter 34
SSL VPN..............................................................................................................................................295
34.1 SSL Access Policy ........................................................................................................................ 295
34.1.1 SSL Application Objects ................................................................................................... 295
34.1.2 SSL Access Policy Limitations ...........................................................................................295
34.2 SSL VPN Commands ................................................................................................................... 295
34.2.1 SSL VPN Commands ......................................................................................................... 296
34.2.2 Setting an SSL VPN Rule Tutorial ...................................................................................... 297
Chapter 35
L2TP VPN............................................................................................................................................299
35.1 L2TP VPN Overview ..................................................................................................................... 299

Table of Contents
ZyWALL Series CLI Reference Guide
14
35.2 IPSec Configuration .................................................................................................................... 299
35.2.1 Using the Default L2TP VPN Connection ........................................................................ 300
35.3 LAN Policy Route ........................................................................................................................ 300
35.4 WAN Policy Route ....................................................................................................................... 300
35.5 L2TP VPN Commands ................................................................................................................. 301
35.5.1 L2TP VPN Commands .......................................................................................................302
35.5.2 L2TP Account Commands ............................................................................................... 303
35.6 L2TP VPN Examples ..................................................................................................................... 304
35.6.1 Configuring the Default L2TP VPN Gateway Example ................................................. 304
35.6.2 Configuring the Default L2TP VPN Connection Example ............................................. 304
35.6.3 Configuring the L2TP VPN Settings Example .................................................................. 305
35.6.4 Configuring the LAN Policy Route for L2TP Example ..................................................... 305
35.6.5 Configuring the WAN Policy Route for L2TP Example ................................................... 306
Chapter 36
Bandwidth Management................................................................................................................307
36.1 Bandwidth Management Overview ........................................................................................ 307
36.1.1 BWM Type .......................................................................................................................... 307
36.2 Bandwidth Management Commands .................................................................................... 307
36.2.1 Bandwidth Sub-Commands ............................................................................................ 308
36.3 Bandwidth Management Commands Examples ................................................................... 311
Chapter 37
Application Patrol............................................................................................................................313
37.1 Application Patrol Overview ..................................................................................................... 313
37.2 Application Patrol Commands Summary ................................................................................ 313
37.2.1 Application Patrol Commands ........................................................................................ 314
Chapter 38
Anti-Virus...........................................................................................................................................317
38.1 Anti-Virus Overview .................................................................................................................... 317
38.2 Anti-Virus Commands ................................................................................................................ 317
38.2.1 General Anti-Virus Commands ........................................................................................ 318
38.2.2 Anti-Virus Profile ................................................................................................................. 319
38.2.3 White and Black Lists ......................................................................................................... 320
38.2.4 Signature Search Anti-Virus Command .......................................................................... 322
38.3 Update Anti-Virus Signatures ..................................................................................................... 323
38.3.1 Update Signature Examples ............................................................................................ 323
38.4 Anti-Virus Statistics ....................................................................................................................... 324
38.4.1 Anti-Virus Statistics Example ............................................................................................. 324
Chapter 39
RTLS....................................................................................................................................................325

Table of Contents
ZyWALL Series CLI Reference Guide
15
39.1 RTLS Overview ............................................................................................................................. 325
39.1.1 RTLS Configuration Commands ....................................................................................... 326
39.1.2 RTLS Configuration Examples ........................................................................................... 326
Chapter 40
Reputation Filter ...............................................................................................................................327
40.1 Overview ..................................................................................................................................... 327
40.1.1 Signature Database Priority .............................................................................................328
40.2 IP Reputation Commands ......................................................................................................... 328
40.2.1 Update IP Reputation Signatures .................................................................................... 330
40.2.2 IP Reputation Statistics ...................................................................................................... 330
40.2.3 IP Reputation External Black List ...................................................................................... 330
40.3 URL Threat Filter Commands ..................................................................................................... 332
40.3.1 URL Threat Filter Command Examples ............................................................................ 334
40.3.2 URL Threat Filter Profile Commands ............................................................................... 335
40.3.3 URL Threat Filter External Black List .................................................................................. 336
40.3.4 Update URL Threat Filter Signatures ................................................................................ 338
40.3.5 Update Signature Examples ............................................................................................ 339
40.3.6 URL Threat Filter Statistics .................................................................................................. 339
40.3.7 URL Threat Filter Statistics Example .................................................................................. 340
40.4 DNS Threat Filter Commands ..................................................................................................... 342
40.5 Blocking Secure DNS Query Packets Command Examples .................................................. 345
Chapter 41
Sandboxing ......................................................................................................................................346
41.1 Sandboxing Overview ................................................................................................................ 346
41.2 Sandbox Commands ................................................................................................................. 346
41.2.1 Sandbox Command Examples ....................................................................................... 348
Chapter 42
IDP Commands ................................................................................................................................349
42.1 Overview ..................................................................................................................................... 349
42.2 General IDP Commands ........................................................................................................... 350
42.2.1 IDP Activation .................................................................................................................... 350
42.3 IDP Profile Commands ............................................................................................................... 352
42.3.1 Global Profile Commands ............................................................................................... 352
42.3.2 Editing/Creating IDP Signature Profiles ........................................................................... 353
42.3.3 Editing Rate Based Signatures Profiles ............................................................................ 353
42.3.4 Signature Search ............................................................................................................... 355
42.4 IDP Custom Signatures ............................................................................................................... 356
42.4.1 Custom Signature Examples ............................................................................................ 357
42.5 Update IDP Signatures ............................................................................................................... 360
42.5.1 Update Signature Examples ............................................................................................ 361

Table of Contents
ZyWALL Series CLI Reference Guide
16
42.6 IDP Statistics ................................................................................................................................. 361
42.6.1 IDP Statistics Example ....................................................................................................... 363
42.7 IDP White List ............................................................................................................................... 363
42.8 IDP Packet Capture ................................................................................................................... 364
42.8.1 IDP Packet Capture Example .......................................................................................... 365
Chapter 43
Content Filtering...............................................................................................................................366
43.1 Content Filtering Overview ........................................................................................................ 366
43.1.1 Web Content Filter ............................................................................................................ 366
43.1.2 DNS Content Filter ............................................................................................................. 366
43.2 External Web Filtering Service ................................................................................................... 367
43.3 Content Filter Command Input Values .................................................................................... 368
43.4 Web Content Filter ..................................................................................................................... 370
43.4.1 General Web Content Filter Commands ....................................................................... 370
43.4.2 Web Content Filter Profile Commands ........................................................................... 372
43.4.3 Web Content Filtering Statistics ....................................................................................... 377
43.4.4 Web Content Filtering Statistics Example ....................................................................... 377
43.5 DNS Content Filter ...................................................................................................................... 377
43.5.1 DNS Content Filter Commands ....................................................................................... 377
43.5.2 DNS Content Filter Profile Commands ............................................................................ 379
43.5.3 DNS Content Filtering Statistics ........................................................................................380
43.6 Web Content Filtering Example ................................................................................................ 380
43.7 Content Filter Category Definitions .......................................................................................... 382
43.8 Web Content Filter Example ..................................................................................................... 395
43.9 DNS Content Filter Example ...................................................................................................... 396
Chapter 44
Anti-Spam.........................................................................................................................................400
44.1 Anti-Spam Overview .................................................................................................................. 400
44.2 Anti-Spam Commands .............................................................................................................. 400
44.2.1 Anti-Spam Profile Rules ..................................................................................................... 400
44.2.2 White and Black Lists ......................................................................................................... 405
44.2.3 DNSBL Anti-Spam Commands ......................................................................................... 407
44.3 Anti-Spam Statistics .................................................................................................................... 410
44.3.1 Anti-Spam Statistics Example ........................................................................................... 411
Chapter 45
Collaborative Detection & Response.............................................................................................412
45.1 Overview ..................................................................................................................................... 412
45.1.1 CDR Example Scenario ....................................................................................................412
45.2 Before You Begin ........................................................................................................................ 413
45.3 CDR Commands ........................................................................................................................ 415

Table of Contents
ZyWALL Series CLI Reference Guide
17
45.3.1 CDR General Commands ................................................................................................ 415
45.3.2 CDR Show Commands ..................................................................................................... 417
45.3.3 Update CDR Signatures ...................................................................................................417
Chapter 46
SSL Inspection...................................................................................................................................420
46.1 SSL Inspection Overview ............................................................................................................ 420
46.2 SSL Inspection Commands Summary ....................................................................................... 420
46.2.1 SSL Inspection General Settings ...................................................................................... 421
46.2.2 SSL Inspection Exclusion Command Input Values ......................................................... 422
46.2.3 SSL Inspection Exclusion Commands .............................................................................. 422
46.2.4 SSL Inspection Profile Settings .......................................................................................... 424
46.2.5 SSL Inspection Certificate Cache ................................................................................... 425
46.2.6 SSL Inspection Certificate Update .................................................................................. 425
46.2.7 SSL Inspection Statistics ..................................................................................................... 426
46.2.8 SSL Inspection Command Examples .............................................................................. 426
Chapter 47
IP Exception......................................................................................................................................428
47.1 IP Exception Overview ............................................................................................................... 428
47.2 IP Exception Commands ........................................................................................................... 428
Chapter 48
Device HA.........................................................................................................................................430
48.1 Device HA Overview .................................................................................................................. 430
48.1.1 Before You Begin ............................................................................................................... 431
48.1.2 Device HA and Device HA Pro ........................................................................................ 431
48.2 General Device HA Commands .............................................................................................. 432
48.3 Active-Passive Mode Device HA .............................................................................................. 432
48.4 Active-Passive Mode Device HA Commands ........................................................................ 433
48.4.1 Active-Passive Mode Device HA Commands ............................................................... 433
48.4.2 Active-Passive Mode Device HA Command Example ................................................ 435
48.5 Device HA Pro ............................................................................................................................. 435
48.5.1 Deploying Device HA Pro ................................................................................................ 435
48.5.2 Device HA Pro Commands .............................................................................................. 436
48.5.3 Device HA2 Command Example .................................................................................... 438
Chapter 49
Device Insight...................................................................................................................................440
49.1 Device Insight Overview ............................................................................................................ 440
49.1.1 Device Insight Commands .............................................................................................. 441
49.1.2 Device Insight Command Examples .............................................................................. 442

Table of Contents
ZyWALL Series CLI Reference Guide
18
Chapter 50
User/Group.......................................................................................................................................445
50.1 User Account Overview ............................................................................................................. 445
50.1.1 User Types ........................................................................................................................... 445
50.2 User/Group Commands Summary ........................................................................................... 446
50.2.1 User Commands ................................................................................................................ 446
50.2.2 User Group Commands ................................................................................................... 448
50.2.3 User Setting Commands ...................................................................................................448
50.2.4 MAC Auth Commands ..................................................................................................... 451
50.2.5 Additional User Commands ............................................................................................. 453
Chapter 51
Application Object..........................................................................................................................457
51.1 Application Object Commands Summary .............................................................................. 457
51.1.1 Application Object Commands ..................................................................................... 457
51.1.2 Application Object Group Commands ......................................................................... 458
Chapter 52
Addresses.........................................................................................................................................460
52.1 Address Overview ....................................................................................................................... 460
52.2 Address Commands Summary ................................................................................................. 460
52.2.1 Address Object Commands ............................................................................................ 461
52.2.2 Address Group Commands ............................................................................................. 464
52.2.3 FQDN Object ..................................................................................................................... 465
52.2.4 Geo IP ................................................................................................................................. 466
52.2.5 FQDN / Geo IP Commands ............................................................................................. 466
52.2.6 Geo IP Command Examples ........................................................................................... 467
Chapter 53
Services.............................................................................................................................................468
53.1 Services Overview ...................................................................................................................... 468
53.2 Services Commands Summary .................................................................................................468
53.2.1 Service Object Commands ............................................................................................. 468
53.2.2 Service Group Commands .............................................................................................. 470
Chapter 54
Schedules.........................................................................................................................................471
54.1 Schedule Overview .................................................................................................................... 471
54.2 Schedule Commands Summary ............................................................................................... 471
54.2.1 Schedule Command Examples ...................................................................................... 472
Chapter 55
AAA Server .......................................................................................................................................473

Table of Contents
ZyWALL Series CLI Reference Guide
19
55.1 AAA Server Overview ................................................................................................................. 473
55.2 Authentication Server Command Summary ........................................................................... 473
55.2.1 ad-server Commands ......................................................................................................474
55.2.2 ldap-server Commands ................................................................................................... 474
55.2.3 radius-server Commands ................................................................................................. 475
55.2.4 radius-server Command Example .................................................................................. 475
55.2.5 aaa group server ad Commands ................................................................................... 476
55.2.6 aaa group server ldap Commands ................................................................................ 477
55.2.7 aaa group server radius Commands ............................................................................. 478
55.2.8 aaa group server Command Example .......................................................................... 479
Chapter 56
Authentication Objects...................................................................................................................480
56.1 Authentication Objects Overview ............................................................................................ 480
56.2 aaa authentication Commands .............................................................................................. 480
56.2.1 aaa authentication Command Example ...................................................................... 481
56.3 test aaa Command ................................................................................................................... 481
56.3.1 Test a User Account Command Example ...................................................................... 482
56.4 VPN/Admin Two-Factor Authentication .................................................................................. 482
56.4.1 Two-Factor Authentication Methods .............................................................................. 483
56.4.2 Two-Factor Authentication with SMS/Email ................................................................... 483
56.4.3 SMS/Email Configuration .................................................................................................. 484
56.4.4 Two-Factor Authentication with Google Authenticator .............................................. 485
56.5 Two-Factor Authentication Commands .................................................................................. 486
56.5.1 Two-Factor Authentication VPN Access ........................................................................ 486
56.5.2 VPN Access Two-Factor Command Example ............................................................... 488
56.5.3 Admin Access .................................................................................................................... 488
56.5.4 Admin Access Two-Factor Command Examples .......................................................... 489
Chapter 57
Authentication Server......................................................................................................................492
57.1 Authentication Server Overview ............................................................................................... 492
57.2 Authentication Server Commands ........................................................................................... 492
57.2.1 Authentication Server Command Examples ................................................................. 493
Chapter 58
Certificates .......................................................................................................................................494
58.1 Certificates Overview ................................................................................................................ 494
58.2 Certificate Commands .............................................................................................................. 494
58.3 Certificates Commands Input Values ...................................................................................... 494
58.4 Certificates Commands Summary ........................................................................................... 496
58.5 Certificates Commands Examples ........................................................................................... 499

Table of Contents
ZyWALL Series CLI Reference Guide
20
Chapter 59
ISP Accounts.....................................................................................................................................500
59.1 ISP Accounts Overview .............................................................................................................. 500
59.1.1 PPPoE and PPTP Account Commands ........................................................................... 500
59.1.2 Cellular Account Commands ......................................................................................... 501
Chapter 60
SSL Application.................................................................................................................................503
60.1 SSL Application Overview .......................................................................................................... 503
60.1.1 SSL Application Object Commands ............................................................................... 503
60.1.2 SSL Application Command Examples ............................................................................ 505
Chapter 61
DHCPv6 Objects...............................................................................................................................506
61.1 DHCPv6 Object Commands Summary .................................................................................... 506
61.1.1 DHCPv6 Object Commands ........................................................................................... 506
61.1.2 DHCPv6 Object Command Examples ........................................................................... 507
Chapter 62
Dynamic Guest Accounts...............................................................................................................509
62.1 Dynamic Guest Accounts Overview ........................................................................................ 509
62.2 Dynamic-guest Commands ...................................................................................................... 509
62.2.1 dynamic-guest Sub-commands ...................................................................................... 510
62.2.2 Dynamic-guest Command Example .............................................................................. 511
Chapter 63
System...............................................................................................................................................512
63.1 System Overview ........................................................................................................................ 512
63.2 Customizing the WWW Login Page .......................................................................................... 512
63.3 Host Name Commands ............................................................................................................. 514
63.4 Time and Date ........................................................................................................................... 514
63.4.1 Date/Time Commands ..................................................................................................... 515
63.5 Console Port Speed .................................................................................................................. 516
63.6 DNS Overview ............................................................................................................................ 516
63.6.1 Domain Zone Forwarder ................................................................................................. 516
63.6.2 DNS Commands ................................................................................................................ 517
63.6.3 DNS Command Examples ................................................................................................ 519
63.7 Authentication Server Overview ............................................................................................... 519
63.7.1 Authentication Server Commands ................................................................................. 520
63.7.2 Authentication Server Command Examples ................................................................. 521
63.8 Notification .................................................................................................................................. 521
63.8.1 Mail Server Commands ....................................................................................................521
63.8.2 SMS Service Commands .................................................................................................. 522