D-Link DSR-150, Reference Manual

Page 1: ...Unified Services Router CLI Reference Guide Release 1 05 Building Networks for People Small Business Gateway Solution DSR 150 150N 250 250N 500 500N 1000 1000N...

Page 2: ...CLI Reference Guide Unified Services Router D Link Corporation Copyright 2012 http www dlink com...

Page 3: ...y or fitness for any particular purpose The manufacturer reserves the right to revise this publication and to make changes from time to time in the content hereof without obligation of the manufacture...

Page 4: ..._address 18 6 4 util system_check capturePackets start ltinterface 18 6 5 util system_check capturePackets download ltfileName ltipAddr 18 6 6 util cat ltfileName 19 6 7 util md5sum ltfileName 19 6 8...

Page 5: ...pv4 configure 48 8 32 net wan wan3 threeG configure 56 8 33 net wan mode configure 57 8 34 net wan port_setup configure 59 8 35 net wan configurable_port configure 59 8 36 net wan wan1 ipv6 configure...

Page 6: ..._network ips setup 75 9 7 security application_rules add 76 9 8 security application_rules edit ltrow_id 76 9 9 security application_rules delete ltrow_id 77 9 10 security firewall custom_service add...

Page 7: ...cked_keywords delete ltrow_id 89 9 48 security website_filter blocked_keywords enable ltrow_id 89 9 49 security website_filter blocked_keywords disable ltrow_id 90 Chapter 10 Configuration commands un...

Page 8: ...105 11 6 dot11 accesspoint delete ltap_name 106 11 7 dot11 accesspoint disable ltap_name 106 11 8 dot11 accesspoint enable ltap_name 106 11 9 dot11 radio configure 106 11 10 dot11 radio advanced confi...

Page 9: ...vpn sslvpn users groups delete ltrow_id 118 12 29 vpn sslvpn users users add 118 12 30 vpn sslvpn users users edit ltrow_id 119 12 31 vpn sslvpn users users login_policies ltrow_id 119 12 32 vpn sslv...

Page 10: ...managed by the CLI Firmware Upgrade Configuration Backup Restore Certificate Generate Upload Power Savings mode configuration System Dashboard Resource Utilization Please access the web browser based...

Page 11: ...to completes syntax checks then executes a command If there is a syntax error then offending part of the command line will be highlighted and explained space Auto completes or if the command is alread...

Page 12: ...es Router CLI Reference Guide 10 2 5 ESCAPE SEQUENCES Substitute the last command line N Substitute the Nth command line absolute as per history command N Substitute the command line entered N lines b...

Page 13: ...ds can be divided into 4 categories Global commands Show commands Utility commands Configuration commands 3 2 The router configuration is divided into 5 branches Net Network Settings Security Security...

Page 14: ...xit Exit this session help Display an overview of the CLI syntax top Return to the default mode reboot Reboot the system history Display the current session s command line history Number of commands i...

Page 15: ...hcp 18 show net dmz dhcp reserved_ip 19 show net dmz dhcp reserved_ip setup Show list of DMZ DHCP Reserved Addresses 20 show net dmz dhcp leased_clients 21 show net dmz dhcp leased_clients list Show l...

Page 16: ...v3 Configuration 69 show net port 70 show net port management 71 show net port management setup Display port management configuration 72 show net wan pppoe Display pppoe client Configuration 73 show n...

Page 17: ...blocked_keywords Display blocked keyw ords configuration The command show system at the CLI prompt would give the description of all the show commands in the branch system which is as follows Sl No Co...

Page 18: ...tatus ltap_name Display w ireless stats 7 show dot11 radius Display radius Information 8 show dot11 wps Display WPS Information 9 show dot11 wireless_statistics Display w ireless_statisticsInformation...

Page 19: ...ies by browser 28 show vpn sslvpn userslogin_policies ltrow _id show sslvpn userslogin policies 29 show vpn sslvpn usersip_policies ltrow _id show sslvpn usersip policy 30 show vpn ipsec show vpn poli...

Page 20: ...mmand Name Description Type and Description 1 ltdns To retrieve the IP address of a Web FTP Mail or any other Server on the Internet String 6 3 util system_check traceroute ltip_address S No Command N...

Page 21: ...sum ltfileName S No CommandName Description Type and Description 1 ltfileName Compute and checkMD5 message digest String 6 8 util copy ltfileName1 ltfileName2 S No CommandName Description Type and Des...

Page 22: ...elector add It allow s to add a traffic selector for a bandwidth prof ile 12 net bandw idth traffic_selector edit ltrow _id It allow s to edit a traffic selector for a bandwidth prof ile 13 net bandw...

Page 23: ...figuration mode 59 net w an wan1 w an configuration mode 60 net w an wan1 ipv4 ipv4 w an configuration mode 61 net w an wan1 ipv4 configure ipv4 w an wan1 configuration mode 62 net w an wan2 w an conf...

Page 24: ...deleteAll Delete all the configured IPV6 routes 112 net tahi settings for tahi test suite 113 net tahi add default route ltip_address add ipv6 default route on lan interface 114 net tahi delete defaul...

Page 25: ...Checks configuration mode 4 security advanced_networkigmp Security igmp setup 5 security advanced_networkigmp allow edsubnets Configure netw orkaddress of multicast source 6 security advanced_networki...

Page 26: ...configuration mode 49 security mac_filter source 50 security mac_filter source add Source Mac Filter configuration mode 51 security mac_filter source edit ltrow_id Source Mac Filter configuration mod...

Page 27: ...guration delete mode 7 systemremote_management https configure Remote management configuration mode 8 systemsnmp sys configure Snmp systemconfiguration mode 9 systemsnmp trap configure agent_ip Snmp t...

Page 28: ...nfiguration commands 17 vpn sslvpn portforwarding appconfig sslvpn portforwarding application configuration commands 18 vpn sslvpn portforwarding appconfig add Add an application configuration rule 19...

Page 29: ...ups configuration mode 46 vpn sslvpn users groups delete ltrow_id Users group delete mode 47 vpn sslvpn users users add Users configuration mode 48 vpn sslvpn users users edit ltrow_id Users configura...

Page 30: ...c delete Delete a MAC Address froman ACL List of an AP 7 dot11 radio advanced configure 802 11 advanced radio configuration mode 8 dot11 radio configure 802 11 radio configuration mode 9 dot11 profile...

Page 31: ...and exit current mode 3 maximum_rate Maximum Bandw idth provided by user Maximum Bandw idth rate 100 100000 Kbps 4 minimum_rate Minimum Bandw idth provided by user Minimum Bandw idth provided by user...

Page 32: ...Name traf fic selectors Port types 10 vlan_id Vlan ID Unsigned integer 8 5 net bandwidth traffic_selector edit ltrow_id S No Command Name De s cription Type and Description 1 ltrow _id It allow s to...

Page 33: ...le Set Timeperiod as 30 days Boolean choice 9 w ild_flag_enable Enable Disable using wild cards Boolean choice 8 8 net ddns wan2 configure S No Command Name De s cription Type and Description 1 save S...

Page 34: ...nfiguration changes 3 exit Save dhcpc configuration changes and current mode 4 GetDnsFromIspEnab le Enable Disable Get DNS Automatically f rom ISP Boolean choice 5 PrimaryDns Set Primary DNS server IP...

Page 35: ...xy Enable Disable Boolean choice 15 enable_ldap Enable Disable LDAP Server Inf o IP address AAA BBB CCC DDD w here each part is in the range 0 255 8 13 net dmz dhcp reserved_ip configure ltmac_address...

Page 36: ...emLANsubnet mask IP address AAA BBB CCC DDD w here each part is in the range 0 255 7 dhcp Configure DHCP Settings 8 dhcp mode Set dhcp mode dhcpv4 modes 9 dhcp start_address Set dhcp servers start add...

Page 37: ...AA BBB CCC DDD w here each part is in the range 0 255 33 dns host_name mapping 3 host_name Set Host Name String 34 dns host_name mapping 3 ipaddress Set Host Name IP address AAA BBB CCC DDD w here eac...

Page 38: ...ver type dhcpv6 dns server types 13 dhcp primary_dns primary dns server IP address abcd abcd abcd abcd abcd abcd abc d abcd w here each part is in the range 0 9A Fa f 14 dhcp secondary_dns Secondary d...

Page 39: ...Boolean choice 5 Wan_hosts IntelAmt Wan Host Type Intel Amt Wan Host type 6 Wan_host_Address IntelAmt Wan Host Address String 7 Internal_Address IntelAmt intenal Address IP address AAA BBB CCC DDD w h...

Page 40: ...server configuration changes and exit current mode 4 Interface Select the Interface for the Ip Aliasing WAN interface type 5 Ip_Address Ip Address forip Aliasing IP address AAA BBB CCC DDD w here each...

Page 41: ...isatap add S No CommandName Description Type and Description 1 save Save isatap tunnel configuration changes 2 exit Save isaptap tunnel configuration changes and exit current mode 3 cancel Roll back...

Page 42: ...back Basic Security Level configuration changes 4 type Select NAT or Classical Routing mode routing mode type 8 30 net wan wan1 ipv4 configure S No CommandName Description Type and Description 1 save...

Page 43: ...ver IP Address IP address AAA BBB CCC DDD w here each part is in the range 0 255 17 static secondary_dns Valid secondary DNS Server IP Address IP address AAA BBB CCC DDD w here each part is in the ran...

Page 44: ...ptp username Enter the username to log in String 37 pptp password Enter the passw ord to log in String 38 pptp ip_address If Address Mode is Static give static ip IP address AAA BBB CCC DDD w here eac...

Page 45: ...er_address IP address of the PPTP server if applicable IP address AAA BBB CCC DDD w here each part is in the range 0 255 58 russ_pptp connectivity_type Set ISP Type ISP Connectivity Types 59 russ_pptp...

Page 46: ...D w here each part is in the range 0 255 76 l2tp connectivity_type Set ISP Type ISP Connectivity Types 77 l2tp idle_time Set ISP Type idle timeout value type 78 l2tp ip_address If Address Mode is Stat...

Page 47: ...ver IP address AAA BBB CCC DDD w here each part is in the range 0 255 96 russ_l2tp subnet_mask If Address Mode is Static give subnet mask IP address AAA BBB CCC DDD w here each part is in the range 0...

Page 48: ...h part is in the range 0 255 114 japanese_pppoe primary_profile get_ip_from_isp Enter Yes to get IP dynamically from ISP if you have not been assigned any static IP address The ISP w illautomatically...

Page 49: ...s AA BB CC DD EE FF w here each part is in the range 00 FF 132 dual_pppoe If ISP Type selected is Dual PPPoE this field gives you options to configure Dual AccessPPPoE credentials 133 dual_pppoe usern...

Page 50: ...phy Enter Yes to get dns dynamically from interal ISP if you have not been assigned any static Dns address The internal ISP w illautomatically assign an DNS address to the router using Dhcp netw ork p...

Page 51: ...tor IP address AAA BBB CCC DDD w here each part is in the range 0 255 15 static gatew ay_address IP address of the ISP s gatew ay This is usually provided by the ISP or your netw orkadministrator IP a...

Page 52: ...the range 0 255 32 pppoe subnet_mask Valid subnet mask IP address AAA BBB CCC DDD w here each part is in the range 0 255 33 pppoe mac_type Select the Mac Address Source Types of mac address source 34...

Page 53: ...h part is in the range 00 FF 52 russ_pptp If ISP Type selected is Russian dual access PPTP this field gives you options to configure credentials 53 russ_pptp username Enter the username to log in Stri...

Page 54: ...l2tp secret Enter the secret to log in String 73 l2tp split_tunnel select the split_tunnel Boolean choice 74 l2tp gatew ay IP address assigned by the ISP to make a connection w ith the ISP server IP...

Page 55: ...pe Set ISP Type ISP Connectivity Types 93 russ_l2tp idle_time Set ISP Type idle timeout value type 94 russ_l2tp ip_address If Address Mode is Static give static ip IP address AAA BBB CCC DDD w here ea...

Page 56: ...ss to the router using PPPOE netw ork protocol Otherw ise Enter No and give valid static dns addresses Boolean choice 112 japanese_pppoe primary_profile primary_dns Valid primary DNS Server IP Address...

Page 57: ...ese_pppoe secondary_profile static_ip Valid IP Address IP address AAA BBB CCC DDD w here each part is in the range 0 255 129 japanese_pppoe secondary_profile subnet_mask Valid subnet mask IP address A...

Page 58: ...s of physicalinterface IP address AAA BBB CCC DDD w here each part is in the range 0 255 147 dual_pppoe subnet_mask_phy Valid subnet mask of physicalnetw ork IP address AAA BBB CCC DDD w here each par...

Page 59: ...range 0 255 13 Secondary_dns Valid secondary DNS Server IP Address IP address AAA BBB CCC DDD w here each part is in the range 0 255 8 33 net wan mode configure S No CommandName Description Type and...

Page 60: ...etry_interval idle timeout value type 21 loadbalancing failover_method retry_attempts number in range of 2 to 999 22 rollover Wan Mode in Auto Rollover 23 rollover w an_port Select the Auto rollover W...

Page 61: ...n1 mtu_type Enter MTU type mtu type 7 w an1 mtu_size Enter MTU size for WAN1 mtu size 8 w an1 port_speed Enter the type of port speed for WAN1 Port Speed types 9 w an2 WAN2 port settings 10 w an2 mtu_...

Page 62: ...dress abcd abcd abcd abcd abcd abcd ab cd abcd w here each part is in the range 0 9A Fa f 14 pppoe pppoe over ipv6 configuration parameters 15 pppoe username Enter the username to authenticate String...

Page 63: ...4 pppoe pppoe over ipv6 configuration parameters 15 pppoe username Enter the username to authenticate String 16 pppoe password Enter the passw ord to authenticate String 17 pppoe authOpt Enter the Aut...

Page 64: ...ckets If Authentication Type is Simple then ospf packets are authenticated using simple text key If Authentication Type is MD5 then the interface authenticates ospf packets with MD5 authentication OSP...

Page 65: ...w ay and netw orkto determine the optimal port settings Boolean choice 7 duplex_mode Choose betw een Half Duplex and Full Duplex based on the port support The default is Full Duplex for all ports sele...

Page 66: ...n changes 4 Service Available Service service type 5 Local_Gatew ay local gatew ay type WAN interface type 6 Source_Netw ork source netw orktype firew allrule address type 7 Destination_Netw ork desti...

Page 67: ...ation user IP address AAA BBB CCC DDD w here each part is in the range 0 255 8 44 net routing protocol_binding enable ltrow_id S No CommandName Description Type and Description 1 ltrow_id protocol_bin...

Page 68: ...address_start starting IP of the Source Netw ork IP address AAA BBB CCC DDD w here each part is in the range 0 255 10 source_address_end ending IP of the Source user IP address AAA BBB CCC DDD w here...

Page 69: ...rk Boolean choice 5 mode select N to send router advertisements RA s to all interfaces else Y radvd advertizement mode type 6 interval The time in seconds between sending unsolicited multicast RA s Th...

Page 70: ...l configuration changes and exit current mode 4 cancel Roll back radvd Pool configuration changes 5 prefix_type Option w hether to select the prefix type as 6to4 or Global Local ISATAP ipv6 prefix typ...

Page 71: ...h in w hich md5 authentication key validity ends Month in the format MM 01 12 19 first_key valid_to day day in w hich md5 authentication key validity ends Day in the format DD 01 31 20 first_key valid...

Page 72: ...tatic ipv4 configure ltname S No CommandName Description Type and Description 1 ltname Add new static routes String 2 save Save static route changes 3 exit Save static routes changes and exit current...

Page 73: ...ther its an active IPV6 route Boolean choice 8 54 net routing static ipv4 delete ltname S No CommandName Description Type and Description 1 ltname Delete a specific route String 8 55 net routing stati...

Page 74: ...d abcd abcd w here each part is in the range 0 9A Fa f 8 60 net tahi ipv6 Alias Del LAN ltip6_address S No CommandName Description Type and Description 1 ltip6_address Delete an ipv6 address fromLAN i...

Page 75: ...d w here each part is in the range 0 9A Fa f 8 66 net tahi pmtu route add ltipAdd S No CommandName Description Type and Description 1 ltipAdd add ipv6 route on lan interface IP address abcd abcd abcd...

Page 76: ...Allow BlockTcp Filter Check Boolean choice 10 block_icmp_notification Enable or Disable ICMP notifications on Internet Ports Boolean choice 11 block_fragmented_packets Enable or Disable Fragmented Pa...

Page 77: ...current mode 4 cancel Roll back igmp configuration changes 5 multicast_source_address Enter the address of the multicast source IP address AAA BBB CCC DDD w here each part is in the range 0 255 6 mult...

Page 78: ...port start port number of the incoming traffic Port number 11 incoming_end_port end port number of the incoming traffic Port number 9 8 security application_rules edit ltrow_id S No CommandName Descri...

Page 79: ...the Destination user number in range of 0 40 icmp or 1 255 icmpv6 8 finish_port Port of the Destiation user Port number 9 11 security firewall custom_service edit ltrow_id S No Command Name Descriptio...

Page 80: ...he rule firew allrule action type 12 schedule Name of schedule for w hich the rule is applicable String 13 source_address_type Type of the source user firew allrule address type 14 destination_address...

Page 81: ...iguration changes 3 exit Save Firew allIPV4 rules configuration changes and exit current mode 4 cancel Roll back IPV4 rules configuration changes 5 from_zone Set fromZone security type firew allrule t...

Page 82: ...s Boolean choice 27 internal_ip_address Send to LocalServer DNAT IP Specifies an IP address and port number of a machine on the Local Netw orkw hich is hosting the server IP address AAA BBB CCC DDD w...

Page 83: ...olean choice 11 Tftp Protocal to be enabled at ALGs Boolean choice 9 21 security firewall ipv6 configure S No CommandName Description Type and Description 1 save Save Firew allIPV6 rules configuration...

Page 84: ...V6 rules configuration changes 3 exit Save Firew allIPV6 rules configuration changes and exit current mode 4 cancel Roll back IPV6 rules configuration changes 5 rule_type Type of rule to be added fire...

Page 85: ..._id Firew allIPV6 Rules configuration mode Unsigned integer 9 25 security firewall ipv6 delete ltrow_id S No CommandName Description Type and Description 1 ltrow_id Firew allIPV6 Rules configuration m...

Page 86: ...ration Unsigned integer 7 udp_session_timeout UDP Session Timeout Duration Unsigned integer 8 other_session_timeout Other Session Timeout Duration Unsigned integer 9 tcp_session_cleanup_latency TCP Se...

Page 87: ...edules configuration changes and exit current mode 4 cancel Roll back schedules configuration changes 5 name Name of the schedule for w hicha rule is to be added String 6 days schedule days 7 days all...

Page 88: ...policy Set the mac address policy policy type for mac addresses 9 34 security mac_filter source add S No CommandName Description Type and Description 1 save Save source mac filter configuration change...

Page 89: ...CC DDD w here each part is in the range 0 255 7 log_dropped_packets Specify logging option for this rule Boolean choice 9 38 security ip_or_mac_binding edit ltrow_id S No CommandName Description Type...

Page 90: ...2 exit Save content Filtering configuration changes and exit current mode 3 cancel Roll back content filtering configuration changes 4 content_filtering Enable Disable content Filtering Boolean choice...

Page 91: ...onfiguration changes 4 blocked_keyw ord enter keyw ord to be blocked String 9 46 security website_filter blocked_keywords edit ltrow_id S No CommandName Description Type and Description 1 ltrow_id blo...

Page 92: ...ices Router CLI Reference Guide 90 9 49 security website_filter blocked_keywords disable ltrow_id S No CommandName Description Type and Description 1 ltrow_id blocked Keyw ords configuration mode Unsi...

Page 93: ...ccepted Pkts logs Enable Disable Boolean choice 11 dmz_w an_drop_packet_logs dmz to w an dropped Pkts logs Enable Disable Boolean choice 12 dmz_lan_accept_packet_logs dmz to lan accepted Pkts logs Ena...

Page 94: ...og messages String 5 email_logs_enable Set w hether or not systememails scheduled logs Boolean choice 6 email_server Set options for emailing of logs String 7 return_email Set email address SMTP serve...

Page 95: ...255 38 syslog_server server_name3 severity Set Syslog severity syslog server severity types 39 syslog_server server_name3 facility Set Syslog facility syslog server facility ID types 40 syslog_server...

Page 96: ...ccept_enable Enable Disable logging for the LAN to WAN Accept packets Boolean choice 5 lan_w an_drop_enable Enable Disable logging for the LAN to WAN Dropped packets Boolean choice 6 w an_lan_accept_e...

Page 97: ...n 1 ltagent_ip SNMP trap configuration mode IP address AAA BBB CCC DDD w here each part is in the range 0 255 2 save Save SNMP trap configuration changes 3 exit Save SNMP trap configuration changes an...

Page 98: ...formation String 6 sys name Set systemname information String 10 11 system snmp access add S No Command Name Description Type and Description 1 save Save SNMP access controlconfiguration changes 2 exi...

Page 99: ...andName Description Type and Description 1 save Save pow erMode configuration changes 2 exit Save pow er mode configuration changes and exit current mode 3 cancel Roll back content Filtering ow er mod...

Page 100: ...ode 3 cancel Roll back traffic meter configuration changes 4 enable Enable Disable the traffic meter status Boolean choice 5 limit_type Set traffic Limit Type 0 No limit 1 Dow nload only 2 Both Direct...

Page 101: ...lean choice 5 printer_enable Enable printer Boolean choice 6 Storage_enable Enable USB2 Boolean choice 7 usb_type Select the USB type 3G_USB_ADAPTOR USB_Disc usb device type 10 20 system usb shareport...

Page 102: ...Type and Description 1 ltrow_id systemgroups edit mode Unsigned integer 2 save Save systemgroup configuration changes 3 exit Save systemgroup configuration changes and exit current mode 4 cancel Roll...

Page 103: ...anges 5 username Enter the username here String 6 FirstName Enter the user s first name here String 7 LastName Enter the user s last name here String 8 password Enter the passw ord here String 9 passw...

Page 104: ...10 deny_login_w an deny login w an Boolean choice 11 allow _login_from_defined_ips login fromip Boolean choice 12 allow _login_from_defined_browsers login frombrow ser Boolean choice 10 31 system gro...

Page 105: ...roup_id group id Unsigned integer 5 address_type address type source address type for users ip policy 6 source_address Set the source address IP address AAA BBB CCC DDD w here each part is in the rang...

Page 106: ...ep passphrase Set WEP passphrase to generate WEP key from WEP key index type 1 4 String 12 w pa Set the WPA options 13 w pa authentication Set WPA authentication type WPA Authentication Types 14 w pa...

Page 107: ...tion Server IP address AAA BBB CCC DDD w here each part is in the range 0 255 6 port Set port number number in range of 0 to 65535 7 secret Set secret key for radius String 8 timeout Set timeout for r...

Page 108: ...cesspoint enable ltap_name S No CommandName Description Type and Description 1 ltap_name Enable an 802 11 access point String 11 9 dot11 radio configure S No CommandName Description Type and Descripti...

Page 109: ...retry_limit Set the retry limit for frame retransmission on transmission failure 802 11 Retry Limit 11 long_retry_limit Set the retry limit for frame retransmission on transmission failure 802 11 Retr...

Page 110: ...pe 6 mac_address Set accesspoint mac address MAC address AA BB CC DD EE FF w here each part is in the range 00 FF 11 13 dot11 accesspoint acl delete_mac_address ltrowid S No CommandName Description Ty...

Page 111: ...ipv6_prefix L2TP server IPv6 Prefix IP address AAA BBB CCC DDD w here each part is in the range 0 255 10 EnablePap enable pap authentication Boolean choice 11 EnableChap enable chap authentication Bo...

Page 112: ...Boolean choice 5 enable_v6 enable disable PPTP server in IPv4 IPv6 mode Boolean choice 6 Natenable enable disable PPTP NAT routing mode Boolean choice 7 start_address PPTP server starting IP address I...

Page 113: ...enable_portforwarding Specify w hether the port forwarding should be enabled Boolean choice 12 6 vpn sslvpn portal layouts edit ltrow_id S No CommandName Description Type and Description 1 ltrow_id Ed...

Page 114: ...ck portforwarding Appssettings changes 4 serverip server ip address IP address AAA BBB CCC DDD w here each part is in the range 0 255 5 port server port Port number 12 10 vpn sslvpn portforwarding app...

Page 115: ...S No CommandName Description Type and Description 1 ltresource_name Add an sslvpn resource object String Max 128 characters and no or empty space or 2 save Save sslvpn resource object settings 3 exit...

Page 116: ...8 characters and no or empty space or 8 policy_address policy address IP address AAA BBB CCC DDD w here each part is in the range 0 255 9 policy_masklength policy masklength number in range of 1 to 32...

Page 117: ...sslvpn policy delete ltrow_id S No CommandName Description Type and Description 1 ltrow_id Delete an sslvpn policy Unsigned integer 12 20 vpn sslvpn client S No CommandName Description Type and Descri...

Page 118: ...changes and exit current mode 3 cancel Roll back users domains configuration changes 4 domain_name Specify the domain name String 5 authentication_type Specify the authentication type Users domain aut...

Page 119: ...ring 8 authentication_server1 Specify the authentication server IP address AAA BBB CCC DDD w here each part is in the range 0 255 9 authentication_server2 Specify the authentication server IP address...

Page 120: ...ion Type and Description 1 ltrow_id Users groups configuration mode Unsigned integer 2 save Save users groups configuration changes 3 exit Save users groups configuration changesand exit current mode...

Page 121: ...cify the user name String 6 first_name Specify the user s first name String 7 last_name Specify the user s last name String 8 user_type Specify the user type Users type 9 group Specify the user s grou...

Page 122: ...s users ip_policies configure ltrow_id S No CommandName Description Type and Description 1 ltrow_id Users ip policy configuration mode Unsigned integer 2 save Save users ip policy configuration change...

Page 123: ...al_remote_end_point The IP address or Internet Name FQDN of the remote gatew ay or client PC 12 general_remote_end_point ip_address The IP address of the remote gatew ay or client PC IPV4 or IPv6 addr...

Page 124: ...gth of the ipv6 subnet used IPv6 Prefix length 29 general_enable_keepalive enable disable keepalive Boolean choice 30 general_keepalive_sourceip keepalive sourceip IPV4 or IPv6 address depending upon...

Page 125: ...se1_encryption_algorithm3DES Setting IKE encryption algorithm 55 auto_phase1_encryption_algorithm3DES enable_3DES Enable 3DES encryption algorithm Boolean choice 56 auto_phase1_encryption_algorithmAES...

Page 126: ...hentication method IPsec VPN IKE extended authentication method 87 auto_phase1_authentication_type setting extended authentication type IPsec VPN IKE extended authentication method 88 auto_phase1_xaut...

Page 127: ...28 encryption algorithm Boolean choice 119 auto_phase2_encryption_algorithmCAST128 keylength Enter CAST128 keylength Unsigned integer 120 auto_phase2_auth_algorithm Setting IKE authentication algorith...

Page 128: ...ng 12 39 vpn ipsec policy delete ltname S No CommandName Description Type and Description 1 ltname delete a vpn policy String 12 40 vpn ipsec policy connect ltname S No CommandName Description Type an...

Page 129: ...nt mode 4 cancel Roll back configuration changes 5 radius server Set RADIUS server IP address IP address AAA BBB CCC DDD w here each part is in the range 0 255 6 authentication port Set RADIUS server...