Watchguard Firebox V10 Manuale utente

WatchGuard®

Command Line

Interface

User Guide

WatchGuard Firebox Vclass 5.1

ii WatchGuard Vclass 5.1

Notice to Users

Information in this document is subject to change and

revision without notice. This documentation and the software

described herein is subject to and may only be used and

copied as outlined in the Firebox System software end-user

license agreement. No part of this manual may be reproduced

by any means, electronic or mechanical, for any purpose

other than the purchaser’s personal use, without prior written

permission from WatchGuard Technologies, Inc.

TRADEMARK NOTES

WatchGuard and LiveSecurity are either trademarks or

registered trademarks of WatchGuard Technologies, Inc. in

the United States and other countries. Firebox, ServerLock,

DVCP, and Designing peace of mind are trademarks of

WatchGuard Technologies, Inc. All other trademarks or

trade names mentioned herein, if any, are the property of

their respective owners.

Part No: 1200016

WatchGuard Command Line Interface Guide iii

WatchGuard Technologies, Inc.

Firebox System Software

End-User License Agreement

WatchGuard Firebox System (WFS) End-User License

Agreement

IMPORTANT — READ CAREFULLY BEFORE

ACCESSING WATCHGUARD SOFTWARE:

This WFS End-User License Agreement (“AGREEMENT”)

is a legal agreement between you (either an individual or a

single entity) and WatchGuard Technologies, Inc.

(“WATCHGUARD”)for the WATCHGUARD WFS software

product identified above, which includes computer software

and may include associated media, printed materials, and on-

line or electronic documentation (“SOFTWARE

PRODUCT”). WATCHGUARD is willing to license the

SOFTWARE PRODUCT to you only on the condition that you

accept all of the terms contained in this Agreement. Please

read this Agreement carefully. By installing or using the

SOFTWARE PRODUCT you agree to be bound by the terms

of this Agreement. If you do not agree to the terms of this

AGREEMENT, WATCHGUARD will not license the

SOFTWARE PRODUCT to you, and you will not have any

rights in the SOFTWARE PRODUCT. In that case, promptly

return the SOFTWARE PRODUCT, along with proof of

payment, to the authorized dealer from whom you obtained

the SOFTWARE PRODUCT for a full refund of the price you

paid.

1. Ownership and License. The SOFTWARE PRODUCT is

protected by copyright laws and international copyright

treaties, as well as other intellectual property laws and

treaties. This is a license agreement and NOT an agreement

for sale. All title and copyrights in and to the SOFTWARE

PRODUCT (including but not limited to any images,

photographs, animations, video, audio, music, text, and

applets incorporated into the SOFTWARE PRODUCT), the

accompanying printed materials, and any copies of the

iv WatchGuard Vclass 5.1

SOFTWARE PRODUCT are owned by WATCHGUARD or its

suppliers. Your rights to use the SOFTWARE PRODUCT are

as specified in this AGREEMENT, and WATCHGUARD

retains all rights not expressly granted to you in this

AGREEMENT. Nothing in this AGREEMENT constitutes a

waiver of our rights under U.S. copyright law or any other

law or treaty.

2. Permitted Uses. You are granted the following rights to

the SOFTWARE PRODUCT:

(A) You may install and use the SOFTWARE PRODUCT on

any single computer at any single location. If you wish to use

the SOFTWARE PRODUCT on a different computer, you

must erase the SOFTWARE PRODUCT from the first

computer on which you installed it before you install it onto

a second.

(B) To use the SOFTWARE PRODUCT on more than one

computer at once, you must license an additional copy of the

SOFTWARE PRODUCT for each additional computer on

which you want to use it.

(C)You may make a single copy of the SOFTWARE

PRODUCT for backup or archival purposes only.

3. Prohibited Uses. You may not, without express written

permission from WATCHGUARD:

(A) Use, copy, modify, merge or transfer copies of the

SOFTWARE PRODUCT or printed materials except as

provided in this AGREEMENT;

(B) Use any backup or archival copy of the SOFTWARE

PRODUCT(or allow someone else to use such a copy) for any

purpose other than to replace the original copy in the event it

is destroyed or becomes defective;

PRODUCT;

(D) Transfer this license to another party unless (i) the

transfer is permanent, (ii) the third party recipient agrees to

the terms of this AGREEMENT, and (iii) you do not retain

any copies of the SOFTWARE PRODUCT; or

(E) Reverse engineer, disassemble or decompile the

SOFTWARE PRODUCT.

WatchGuard Command Line Interface Guide v

4. Limited Warranty. WATCHGUARD makes the

following limited warranties for a period of ninety (90) days

from the date you obtained the SOFTWARE PRODUCT from

WatchGuard Technologies or an authorized dealer:

(A) Media. The disks and documentation will be free from

defects in materials and workmanship under normal use. If

the disks or documentation fail to conform to this warranty,

you may, as your sole and exclusive remedy, obtain a

replacement free of charge if you return the defective disk or

documentation to us with a dated proof of purchase.

(B) SOFTWARE PRODUCT. The SOFTWARE PRODUCT

will materially conform to the documentation that

accompanies it. If the SOFTWARE PRODUCT fails to

operate in accordance with this warranty, you may, as your

sole and exclusive remedy, return all of the SOFTWARE

PRODUCT and the documentation to the authorized dealer

from whom you obtained it, along with a dated proof of

purchase, specifying the problems, and they will provide you

with a new version of the SOFTWARE PRODUCT or a full

refund, at their election.

Disclaimer and Release. THE WARRANTIES,

OBLIGATIONS AND LIABILITIES OF WATCHGUARD,

AND YOUR REMEDIES, SET FORTH IN PARAGRAPHS

4, 4(A) AND 4(B) ABOVE ARE EXCLUSIVE AND IN

SUBSTITUTION FOR, AND YOU HEREBY WAIVE,

DISCLAIM AND RELEASE ANY AND ALL OTHER

WARRANTIES, OBLIGATIONS AND LIABILITIES OF

WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND

REMEDIES YOU MAY HAVE AGAINST WATCHGUARD,

EXPRESS OR IMPLIED, ARISING BY LAW OR

OTHERWISE, WITH RESPECT TO ANY

NONCONFORMANCE OR DEFECT IN THE SOFTWARE

PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY

IMPLIED WARRANTY OF MERCHANTABILITY OR

FITNESS FOR A PARTICULAR PURPOSE, ANY

IMPLIED WARRANTY ARISING FROM COURSE OF

PERFORMANCE, COURSE OF DEALING, OR USAGE OF

TRADE, ANY WARRANTY OF NONINFRINGEMENT,

ANY WARRANTY THAT THIS SOFTWARE PRODUCT

vi WatchGuard Vclass 5.1

WILL MEET YOUR REQUIREMENTS, ANY WARRANTY

OF UNINTERRUPTED OR ERROR-FREE OPERATION,

ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR

REMEDY IN TORT, WHETHER OR NOT ARISING FROM

THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR

IMPUTED) OR FAULT OF WATCHGUARD AND ANY

OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY

FOR LOSS OR DAMAGE TO, OR CAUSED BY OR

CONTRIBUTED TO BY, THE SOFTWARE PRODUCT).

Limitation of Liability. WATCHGUARD’s liability (whether

in contract, tort, or otherwise; and notwithstanding any fault,

negligence, strict liability or product liability) with regard to

THE SOFTWARE Product will in no event exceed the

purchase price paid by you for such Product. IN NO EVENT

WILL WATCHGUARD BE LIABLE TO YOU OR ANY

THIRD PARTY, WHETHER ARISING IN CONTRACT

(INCLUDING WARRANTY), TORT (INCLUDING ACTIVE,

PASSIVE OR IMPUTED NEGLIGENCE AND STRICT

LIABILITY AND FAULT), FOR ANY INDIRECT, SPECIAL,

INCIDENTAL, OR CONSEQUENTIAL DAMAGES

(INCLUDING WITHOUT LIMITATION LOSS OF

BUSINESS PROFITS, BUSINESS INTERRUPTION, OR

LOSS OF BUSINESS INFORMATION) ARISING OUT OF

OR IN CONNECTION WITH THIS WARRANTY OR THE

USE OF OR INABILITY TO USE THE SOFTWARE

PRODUCT, EVEN IF WATCHGUARD HAS BEEN

ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

5. United States Government Restricted Rights. The

enclosed SOFTWARE PRODUCT and documentation are

provided with Restricted Rights. Use, duplication or

disclosure by the U.S. Government or any agency or

instrumentality thereof is subject to restrictions as set forth

in subdivision (c)(1)(ii) of the Rights in Technical Data and

Computer Software clause at DFARS 252.227-7013, or in

subdivision (c)(1) and (2) of the Commercial Computer

Software -- Restricted Rights Clause at 48 C.F.R. 52.227-

19, as applicable. Manufacturer is WatchGuard

Technologies, Incorporated, 505 Fifth Avenue, Suite 500,

Seattle, WA 98104.

WatchGuard Command Line Interface Guide vii

6. Export Controls. You agree not to directly or indirectly

transfer the SOFTWARE PRODUCT or documentation to

any country to which such transfer would be prohibited by the

U.S. Export Administration Act and the regulations issued

thereunder.

7. Termination. This license and your right to use the

SOFTWARE PRODUCT will automatically terminate if you

fail to comply with any provisions of this AGREEMENT,

destroy all copies of the SOFTWARE PRODUCT in your

possession, or voluntarily return the SOFTWARE PRODUCT

to WATCHGUARD. Upon termination you will destroy all

copies of the SOFTWARE PRODUCT and documentation

remaining in your control or possession.

8. Miscellaneous Provisions. This AGREEMENT will be

governed by and construed in accordance with the

substantive laws of Washington excluding the 1980 United

National Convention on Contracts for the International Sale

of Goods, as amended. This is the entire AGREEMENT

between us relating to the contents of this package, and

supersedes any prior purchase order, communications,

advertising or representations concerning the contents of this

package AND BY USING THE SOFTWARE PRODUCT

YOU AGREE TO THESE TERMS. No change or

modification of this AGREEMENT will be valid unless it is in

writing, and is signed by WATCHGUARD.

9. Canadian Transactions: If you obtained this

SOFTWARE PRODUCT in Canada, you agree to the

following:

The parties hereto have expressly required that the present

AGREEMENT and its Exhibits be drawn up in the English

language. / Les parties aux presentes ont expressement exige

que la presente conventions et ses Annexes soient redigees en

la langue anglaise.

viii WatchGuard Vclass 5.1

WatchGuard Command Line Interface Guide ix

Contents

Contents .......................................................................ix

CHAPTER 1 Using the Command Line Interface ..........1

Introducing the WatchGuard CLI .......................................1

CLI capabilities .............................................................2

CLI limitations ...............................................................3

CLI Guide text conventions ...............................................3

Getting started with the WatchGuard CLI ...........................5

Connecting to an appliance .............................................5

Logging into an appliance via a console connection .............6

Logging into an existing appliance via a network connection .7

Understanding the command prompt ................................8

Abbreviating commands and keywords ..............................8

Case sensitivity .............................................................9

Extending command lines ...............................................9

Typing arguments in a command ......................................9

Deleting text in the Command Line Interface ....................10

Using the CLI to add to or replace existing settings and policies

...........................................................................10

Grouping parameters in a command ...............................10

Reviewing the recently used commands ...........................11

x WatchGuard Vclass 5.1

Navigating through the CLI ........................................... 13

Common Navigation commands .................................... 14

Using keywords .......................................................... 15

Show command/argument (“name”) usage ...................... 16

Viewing context-sensitive online help ............................. 17

Logging out of the appliance ........................................ 18

Installing and configuring a WatchGuard appliance .......... 19

To log into a WatchGuard appliance for the first time: ........ 19

To assign network addresses to appliance interfaces .......... 20

To complete system configuration .................................. 20

To create and apply security policies ............................... 21

To remove/delete items from a WatchGuard database ....... 22

To save and apply your most recent changes .................... 22

To maintain an appliance .............................................. 22

To troubleshoot an appliance ........................................ 22

To restore an appliance to the factory-default state ........... 23

To review the most recent tasks (at any level) .................... 23

To get on-line help while working ................................... 24

CHAPTER 2 Administration Mode Commands .......... 25

Command syntax conventions used in this guide ............. 25

Administration mode commands .................................... 27

account command ...................................................... 28

downgrade command ................................................. 29

export command ........................................................ 30

flush command ........................................................... 31

ha_sync command ...................................................... 31

import command ........................................................ 32

operation_mode command .......................................... 35

passwd command ....................................................... 36

reboot command ........................................................ 37

restore default command ............................................. 38

shutdown command .................................................... 38

upgrade command ..................................................... 39

Altri manuali per Firebox V10

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Watchguard Firewall

Watchguard

Watchguard SOHO Manuale utente

Watchguard

Watchguard Firebox V10 Istruzioni per l'installazione

Watchguard

Watchguard Firebox T35 Manuale utente

Watchguard

Watchguard XTM 5 Series Manuale utente

Watchguard

Watchguard XCS Series Istruzioni per l'installazione

Watchguard

Watchguard Firebox SOHO 6 Wireless Manuale utente

Watchguard

Watchguard Firebox SOHO 6 Wireless Guida di riferimento

Watchguard

Watchguard Firebox V10 Manuale utente

Watchguard

Watchguard Firebox T35-R Manuale utente

Watchguard

Watchguard Firebox Vclass V200 Istruzioni per l'installazione

Watchguard

Watchguard XTM 330 Manuale utente

Watchguard

Watchguard XCS 580 Manuale utente

Watchguard

Watchguard SOHO Manuale utente

Watchguard

Watchguard Firebox T20 Manuale utente

Watchguard

Watchguard Firebox T70 Manuale utente

Watchguard

Watchguard Firebox T30 Manuale utente

Watchguard

Watchguard Firebox X55E Manuale utente

Watchguard

Watchguard XTM 1050 Manuale utente

Watchguard

Watchguard Firebox M400 Manuale utente

Watchguard

Watchguard Firebox SOHO 6 Wireless Manuale utente

Watchguard

Watchguard WatchGuard XCS 170 Manuale utente

Watchguard

Watchguard XTM 8 series Manuale utente

Watchguard

Watchguard SOHO Scheda tecnica

Watchguard

Watchguard Firebox M4800 Istruzioni per l'installazione

Manuali Firewall popolari di altre marche

Cisco

Cisco S190 Manuale utente

Fortinet

Fortinet FortiGate Voice Series Manuale utente

ADTRAN

ADTRAN NetVanta 2300 Manuale utente

SecureLogix

SecureLogix ETM System Manuale utente

NETGEAR

NETGEAR ProSafe FVX538 Manuale utente

Lanner

Lanner FW-8877 Manuale utente

Huawei

Huawei USG6000 Series Manuale di installazione e funzionamento

H3C

H3C SecPath F5000-AI-15 Manuale utente

Nexcom

Nexcom DNA 1150 Manuale utente

Fortinet

Fortinet FortiGate-60 series Manuale utente

Cisco

Cisco 3110 Manuale

Draytek

Draytek Vigor2860 Series Manuale utente

Lanner electronics

Lanner electronics FW-7650 Series Manuale utente

Swisscom

Swisscom Internet Backup Manuale utente

SonicWALL

SonicWALL NSa 5700 Manuale utente

DPtech

DPtech FW1000 SERIES Manuale utente

FEITIAN

FEITIAN MultiPass FIDO Manuale utente

EBLOCKER

EBLOCKER PRO Manuale utente