用户手册 — ZyXEL Communications 3.1

目录

• ZyWALL (ZLD) Series

  1
  • Table of Contents

    5
• Introduction

  17
  • Command Line Interface

    19
    • 1.1 Overview

      19
      • 1.1.1 The Configuration File

        19
    • 1.2 Accessing the CLI

      19
      • 1.2.1 Console Port

        20
      • 1.2.2 Web Configurator Console

        20
      • 1.2.3 Telnet

        23
      • 1.2.4 SSH (Secure SHell)

        23
    • 1.3 How to Find Commands in this Guide

      23
    • 1.4 How Commands Are Explained

      24
      • 1.4.1 Background Information (Optional)

        24
      • 1.4.2 Command Input Values (Optional)

        24
      • 1.4.3 Command Summary

        24
      • 1.4.4 Command Examples (Optional)

        24
      • 1.4.5 Command Syntax

        24
      • 1.4.6 Changing the Password

        25
    • 1.5 CLI Modes

      25
    • 1.6 Shortcuts and Help

      26
      • 1.6.1 List of Available Commands

        26
      • 1.6.2 List of Sub-commands or Required User Input

        26
      • 1.6.3 Entering Partial Commands

        27
      • 1.6.4 Entering a ? in a Command

        27
      • 1.6.5 Command History

        27
      • 1.6.6 Navigation

        27
      • 1.6.7 Erase Current Command

        27
      • 1.6.8 The no Commands

        27
    • 1.7 Input Values

      28
    • 1.8 Ethernet Interfaces

      31
    • 1.9 Saving Configuration Changes

      31
    • 1.10 Logging Out

      32
  • User and Privilege Modes

    33
    • 2.1 User And Privilege Modes

      33
      • 2.1.1 Debug Commands

        34
• Reference

  37
  • Object Reference

    39
    • 3.1 Object Reference Commands

      39
      • 3.1.1 Object Reference Command Example

        40
  • Status

    41
  • Registration

    45
    • 5.1 myZyXEL.com Overview

      45
      • 5.1.1 Subscription Services Available on the ZyWALL

        45
    • 5.2 Registration Commands

      46
      • 5.2.1 Command Examples

        47
    • 5.3 Country Code

      48
  • Interfaces

    53
    • 6.1 Interface Overview

      53
      • 6.1.1 Types of Interfaces

        53
      • 6.1.2 Relationships Between Interfaces

        56
    • 6.2 Interface General Commands Summary

      57
      • 6.2.1 Basic Interface Properties and IP Address Commands

        57
      • 6.2.2 DHCP Setting Commands

        63
      • 6.2.3 Interface Parameter Command Examples

        67
      • 6.2.4 RIP Commands

        68
      • 6.2.5 OSPF Commands

        68
      • 6.2.6 Connectivity Check (Ping-check) Commands

        70
    • 6.3 Ethernet Interface Specific Commands

      71
      • 6.3.1 MAC Address Setting Commands

        71
      • 6.3.2 Port Grouping Commands

        72
    • 6.4 Virtual Interface Specific Commands

      73
      • 6.4.1 Virtual Interface Command Examples

        73
    • 6.5 PPPoE/PPTP Specific Commands

      74
      • 6.5.1 PPPoE/PPTP Interface Command Examples

        75
    • 6.6 Cellular Interface Specific Commands

      76
      • 6.6.1 Cellular Status

        78
      • 6.6.2 Cellular Interface Command Examples

        80
    • 6.7 Tunnel Interface Specific Commands

      81
      • 6.7.1 Tunnel Interface Command Examples

        82
    • 6.8 USB Storage Specific Commands

      82
      • 6.8.1 USB Storage General Commands Example

        83
    • 6.9 WLAN Specific Commands

      83
      • 6.9.1 WLAN General Commands

        84
      • 6.9.2 WLAN Interface Commands

        85
      • 6.9.3 WLAN MAC Filter Commands

        87
    • 6.10 VLAN Interface Specific Commands

      88
      • 6.10.1 VLAN Interface Command Examples

        89
    • 6.11 Bridge Specific Commands

      89
      • 6.11.1 Bridge Interface Command Examples

        90
    • 6.12 Auxiliary Interface Specific Commands

      90
      • 6.12.1 Auxiliary Interface Command Examples

        91
  • Trunks

    93
    • 7.1 Trunks Overview

      93
    • 7.2 Trunk Scenario Examples

      93
    • 7.3 Trunk Commands Input Values

      94
    • 7.4 Trunk Commands Summary

      94
    • 7.5 Trunk Command Examples

      95
    • 7.6 Link Sticking

      96
    • 7.7 Link Sticking Commands Summary

      97
    • 7.8 Link Sticking Command Example

      97
  • Route

    99
    • 8.1 Policy Route

      99
    • 8.2 Policy Route Commands

      99
      • 8.2.1 Assured Forwarding (AF) PHB for DiffServ

        104
      • 8.2.2 Policy Route Command Example

        104
    • 8.3 IP Static Route

      105
    • 8.4 Static Route Commands

      105
      • 8.4.1 Static Route Commands Examples

        106
  • Routing Protocol

    107
    • 9.1 Routing Protocol Overview

      107
    • 9.2 Routing Protocol Commands Summary

      107
      • 9.2.1 RIP Commands

        108
      • 9.2.2 General OSPF Commands

        108
      • 9.2.3 OSPF Area Commands

        109
      • 9.2.4 Virtual Link Commands

        109
      • 9.2.5 Learned Routing Information Commands

        110
      • 9.2.6 show ip route Command Example

        110
  • Zones

    111
    • 10.1 Zones Overview

      111
    • 10.2 Zone Commands Summary

      112
      • 10.2.1 Zone Command Examples

        113
  • DDNS

    115
    • 11.1 DDNS Overview

      115
    • 11.2 DDNS Commands Summary

      116
  • Virtual Servers

    119
    • 12.1 Virtual Server Overview

      119
      • 12.1.1 1:1 NAT and Many 1:1 NAT

        119
    • 12.2 Virtual Server Commands Summary

      119
      • 12.2.1 Virtual Server Command Examples

        121
      • 12.2.2 Tutorial - How to Allow Public Access to a Server

        122
  • HTTP Redirect

    123
    • 13.1 HTTP Redirect Overview

      123
      • 13.1.1 Web Proxy Server

        123
    • 13.2 HTTP Redirect Commands

      124
      • 13.2.1 HTTP Redirect Command Examples

        125
  • ALG

    127
    • 14.1 ALG Introduction

      127
    • 14.2 ALG Commands

      128
    • 14.3 ALG Commands Example

      129
  • IP/MAC Binding

    131
    • 15.1 IP/MAC Binding Overview

      131
    • 15.2 IP/MAC Binding Commands

      131
    • 15.3 IP/MAC Binding Commands Example

      132
  • Firewall

    133
    • 16.1 Firewall Overview

      133
    • 16.2 Firewall Commands

      134
      • 16.2.1 Firewall Sub-Commands

        137
      • 16.2.2 Firewall Command Examples

        138
    • 16.3 Session Limit Commands

      139
  • IPSec VPN

    141
    • 17.1 IPSec VPN Overview

      141
    • 17.2 IPSec VPN Commands Summary

      142
      • 17.2.1 IKE SA Commands

        143
      • 17.2.2 IPSec SA Commands (except Manual Keys)

        144
      • 17.2.3 IPSec SA Commands (for Manual Keys)

        147
      • 17.2.4 VPN Concentrator Commands

        147
      • 17.2.5 VPN Configuration Provisioning Commands

        148
      • 17.2.6 SA Monitor Commands

        149
  • SSL VPN

    151
    • 18.1 SSL Access Policy

      151
      • 18.1.1 SSL Application Objects

        151
      • 18.1.2 SSL Access Policy Limitations

        151
    • 18.2 SSL VPN Commands

      151
      • 18.2.1 SSL VPN Commands

        152
      • 18.2.2 Setting an SSL VPN Rule Tutorial

        153
  • L2TP VPN

    157
    • 19.1 L2TP VPN Overview

      157
    • 19.2 IPSec Configuration

      157
      • 19.2.1 Using the Default L2TP VPN Connection

        158
    • 19.3 Policy Route

      158
    • 19.4 L2TP VPN Commands

      159
      • 19.4.1 L2TP VPN Commands

        159
    • 19.5 L2TP VPN Example

      160
      • 19.5.1 Configuring the Default L2TP VPN Gateway Example

        161
      • 19.5.2 Configuring the Default L2TP VPN Connection Example

        161
      • 19.5.3 Configuring the L2TP VPN Settings Example

        161
      • 19.5.4 Configuring the Policy Route for L2TP Example

        162
  • Application Patrol

    163
    • 20.1 Application Patrol Overview

      163
    • 20.2 Application Patrol Commands Summary

      163
      • 20.2.1 Pre-defined Application Commands

        164
      • 20.2.2 Rule Commands for Pre-defined Applications

        164
      • 20.2.3 Exception Commands for Pre-defined Applications

        166
      • 20.2.4 Other Application Commands

        167
      • 20.2.5 Rule Commands for Other Applications

        167
      • 20.2.6 General Commands for Application Patrol

        168
  • Anti-Virus

    173
    • 21.1 Anti-Virus Overview

      173
    • 21.2 Anti-virus Commands

      173
      • 21.2.1 General Anti-virus Commands

        174
      • 21.2.2 Zone to Zone Anti-virus Rules

        174
      • 21.2.3 White and Black Lists

        176
      • 21.2.4 Signature Search Anti-virus Command

        177
    • 21.3 Update Anti-virus Signatures

      178
      • 21.3.1 Update Signature Examples

        179
    • 21.4 Anti-virus Statistics

      179
      • 21.4.1 Anti-virus Statistics Example

        180
  • IDP Commands

    181
    • 22.1 Overview

      181
    • 22.2 General IDP Commands

      181
      • 22.2.1 IDP Activation

        181
    • 22.3 IDP Profile Commands

      182
      • 22.3.1 Global Profile Commands

        182
      • 22.3.2 IDP Zone to Zone Rules

        183
      • 22.3.3 Editing/Creating IDP Signature Profiles

        184
      • 22.3.4 Editing/Creating Anomaly Profiles

        184
      • 22.3.5 Editing System Protect

        188
      • 22.3.6 Signature Search

        188
    • 22.4 IDP Custom Signatures

      191
      • 22.4.1 Custom Signature Examples

        192
    • 22.5 Update IDP Signatures

      195
      • 22.5.1 Update Signature Examples

        196
    • 22.6 IDP Statistics

      196
      • 22.6.1 IDP Statistics Example

        197
  • Content Filtering

    199
    • 23.1 Content Filtering Overview

      199
    • 23.2 Content Filtering Policies

      199
    • 23.3 External Web Filtering Service

      199
    • 23.4 Content Filtering Reports

      199
    • 23.5 Content Filter Command Input Values

      200
    • 23.6 General Content Filter Commands

      201
    • 23.7 Content Filter Filtering Profile Commands

      203
    • 23.8 Content Filter URL Cache Commands

      205
    • 23.9 Content Filtering Statistics

      206
      • 23.9.1 Content Filtering Statistics Example

        207
    • 23.10 Content Filtering Commands Example

      207
  • Anti-Spam

    211
    • 24.1 Anti-Spam Overview

      211
    • 24.2 Anti-Spam Commands

      211
      • 24.2.1 General Anti-Spam Commands

        211
      • 24.2.2 Zone to Zone Anti-spam Rules

        212
      • 24.2.3 White and Black Lists

        214
      • 24.2.4 DNSBL Anti-Spam Commands

        216
    • 24.3 Anti-Spam Statistics

      219
      • 24.3.1 Anti-Spam Statistics Example

        219
  • Device HA

    221
    • 25.1 Device HA Overview

      221
      • 25.1.1 Before You Begin

        222
    • 25.2 General Device HA Commands

      222
    • 25.3 Active-Passive Mode Device HA

      222
    • 25.4 Active-Passive Mode Device HA Commands

      223
      • 25.4.1 Active-Passive Mode Device HA Commands

        223
      • 25.4.2 Active-Passive Mode Device HA Command Example

        225
    • 25.5 Legacy Mode (VRRP) Device HA

      225
    • 25.6 Legacy Mode (VRRP) Device HA Commands

      225
      • 25.6.1 VRRP Group Commands

        226
      • 25.6.2 VRRP Synchronization Commands

        226
      • 25.6.3 Link Monitoring Commands

        227
  • User/Group

    229
    • 26.1 User Account Overview

      229
      • 26.1.1 User Types

        229
    • 26.2 User/Group Commands Summary

      230
      • 26.2.1 User Commands

        230
      • 26.2.2 User Group Commands

        231
      • 26.2.3 User Setting Commands

        231
      • 26.2.4 Force User Authentication Commands

        233
      • 26.2.5 Additional User Commands

        235
  • Addresses

    237
    • 27.1 Address Overview

      237
    • 27.2 Address Commands Summary

      237
      • 27.2.1 Address Object Commands

        238
      • 27.2.2 Address Group Commands

        240
  • Services

    243
    • 28.1 Services Overview

      243
    • 28.2 Services Commands Summary

      243
      • 28.2.1 Service Object Commands

        243
      • 28.2.2 Service Group Commands

        244
  • Schedules

    247
    • 29.1 Schedule Overview

      247
    • 29.2 Schedule Commands Summary

      247
      • 29.2.1 Schedule Command Examples

        248
  • AAA Server

    249
    • 30.1 AAA Server Overview

      249
    • 30.2 Authentication Server Command Summary

      249
      • 30.2.1 ad-server Commands

        249
      • 30.2.2 ldap-server Commands

        250
      • 30.2.3 radius-server Commands

        251
      • 30.2.4 radius-server Command Example

        251
      • 30.2.5 aaa group server ad Commands

        251
      • 30.2.6 aaa group server ldap Commands

        252
      • 30.2.7 aaa group server radius Commands

        253
      • 30.2.8 aaa group server Command Example

        254
  • Authentication Objects

    255
    • 31.1 Authentication Objects Overview

      255
    • 31.2 aaa authentication Commands

      255
      • 31.2.1 aaa authentication Command Example

        256
    • 31.3 test aaa Command

      256
      • 31.3.1 Test a User Account Command Example

        256
  • Certificates

    259
    • 32.1 Certificates Overview

      259
    • 32.2 Certificate Commands

      259
    • 32.3 Certificates Commands Input Values

      259
    • 32.4 Certificates Commands Summary

      260
    • 32.5 Certificates Commands Examples

      263
  • ISP Accounts

    264
    • 33.1 ISP Accounts Overview

      264
      • 33.1.1 PPPoE and PPTP Account Commands

        264
      • 33.1.2 Cellular Account Commands

        265
  • SSL Application

    266
    • 34.1 SSL Application Overview

      266
      • 34.1.1 SSL Application Object Commands

        266
      • 34.1.2 SSL Application Command Examples

        268
  • Endpoint Security

    269
    • 35.1 Endpoint Security Overview

      269
      • 35.1.1 Endpoint Security Commands Summary

        270
      • 35.1.2 Endpoint Security Object Commands

        270
      • 35.1.3 Endpoint Security Object Command Example

        273
  • DHCPv6 Objects

    276
    • 36.1 DHCPv6 Object Commands Summary

      276
      • 36.1.1 DHCPv6 Object Commands

        276
      • 36.1.2 DHCPv6 Object Command Examples

        277
  • System

    279
    • 37.1 System Overview

      279
    • 37.2 Customizing the WWW Login Page

      279
    • 37.3 Host Name Commands

      281
    • 37.4 Time and Date

      281
      • 37.4.1 Date/Time Commands

        282
    • 37.5 Console Port Speed

      282
    • 37.6 DNS Overview

      283
      • 37.6.1 Domain Zone Forwarder

        283
      • 37.6.2 DNS Commands

        283
      • 37.6.3 DNS Command Example

        284
  • System Remote Management

    285
    • 38.1 Remote Management Overview

      285
      • 38.1.1 Remote Management Limitations

        285
      • 38.1.2 System Timeout

        285
    • 38.2 Common System Command Input Values

      286
    • 38.3 HTTP/HTTPS Commands

      286
      • 38.3.1 HTTP/HTTPS Command Examples

        288
    • 38.4 SSH

      288
      • 38.4.1 SSH Implementation on the ZyWALL

        288
      • 38.4.2 Requirements for Using SSH

        288
      • 38.4.3 SSH Commands

        289
      • 38.4.4 SSH Command Examples

        289
    • 38.5 Telnet

      290
    • 38.6 Telnet Commands

      290
      • 38.6.1 Telnet Commands Examples

        290
    • 38.7 Configuring FTP

      291
      • 38.7.1 FTP Commands

        291
      • 38.7.2 FTP Commands Examples

        292
    • 38.8 SNMP

      292
      • 38.8.1 Supported MIBs

        292
      • 38.8.2 SNMP Traps

        292
      • 38.8.3 SNMP Commands

        293
      • 38.8.4 SNMP Commands Examples

        293
    • 38.9 ICMP Filter

      294
    • 38.10 Dial-in Management

      294
      • 38.10.1 AT Command Strings

        295
      • 38.10.2 DTR Signal

        295
      • 38.10.3 Response Strings

        295
      • 38.10.4 Dial-in Management Commands

        295
    • 38.11 Vantage CNM

      296
      • 38.11.1 Vantage CNM Commands

        296
    • 38.12 Language Commands

      297
    • 38.13 IPv6 Commands

      298
  • File Manager

    299
    • 39.1 File Directories

      299
    • 39.2 Configuration Files and Shell Scripts Overview

      299
      • 39.2.1 Comments in Configuration Files or Shell Scripts

        300
      • 39.2.2 Errors in Configuration Files or Shell Scripts

        301
      • 39.2.3 ZyWALL Configuration File Details

        301
      • 39.2.4 Configuration File Flow at Restart

        302
    • 39.3 File Manager Commands Input Values

      302
    • 39.4 File Manager Commands Summary

      303
    • 39.5 File Manager Command Examples

      304
    • 39.6 FTP File Transfer

      304
      • 39.6.1 Command Line FTP File Upload

        304
      • 39.6.2 Command Line FTP Configuration File Upload Example

        305
      • 39.6.3 Command Line FTP File Download

        305
      • 39.6.4 Command Line FTP Configuration File Download Example

        306
    • 39.7 ZyWALL File Usage at Startup

      306
    • 39.8 Notification of a Damaged Recovery Image or Firmware

      307
    • 39.9 Restoring the Recovery Image

      308
    • 39.10 Restoring the Firmware

      310
    • 39.11 Restoring the Default System Database

      312
      • 39.11.1 Using the atkz -u Debug Command

        314
  • Logs

    317
    • 40.1 Log Commands Summary

      317
      • 40.1.1 Log Entries Commands

        318
      • 40.1.2 System Log Commands

        318
      • 40.1.3 Debug Log Commands

        319
      • 40.1.4 E-mail Profile Commands

        320
      • 40.1.5 Console Port Logging Commands

        322
  • Reports and Reboot

    323
    • 41.1 Report Commands Summary

      323
      • 41.1.1 Report Commands

        323
      • 41.1.2 Report Command Examples

        324
      • 41.1.3 Session Commands

        324
      • 41.1.4 Packet Size Statistics Commands

        324
    • 41.2 Email Daily Report Commands

      325
      • 41.2.1 Email Daily Report Example

        326
    • 41.3 Reboot

      328
  • Session Timeout

    329
  • Diagnostics

    331
    • 43.1 Diagnostics

      331
    • 43.2 Diagnosis Commands

      331
    • 43.3 Diagnosis Commands Example

      331
  • Packet Flow Explore

    333
    • 44.1 Packet Flow Explore

      333
    • 44.2 Packet Flow Explore Commands

      333
    • 44.3 Packet Flow Explore Commands Example

      334
  • Packet Flow Filter

    337
    • 45.1 Packet Flow Filter

      337
    • 45.2 Packet Flow Filter Commands

      337
    • 45.3 Packet Flow Filter Commands Examples

      338
  • Maintenance Tools

    341
    • 46.1 Maintenance Command Examples

      343
      • 46.1.1 Packet Capture Command Example

        344
  • Watchdog Timer

    347
    • 47.1 Hardware Watchdog Timer

      347
    • 47.2 Software Watchdog Timer

      347
    • 47.3 Application Watchdog

      348
      • 47.3.1 Application Watchdog Commands Example

        348
  • List of Commands (Alphabetical)

    351