Summary of CLI Commands 19
Chapter 1: Configuring
Summary of CLI Commands
The following sets of commands include all the CLI commands used in the example
configuration featured in the previous sections in this chapter. The section in which
each type of command is described is also provided.
CLI Commands – Example Firewall Configuration
Commands Descriptions
set clock dd/mm/yyyy hh:mm:ss
set console timeout number
“System Clock and Console
Timeout” on page 5
set admin name name_str
set admin password pswd_str
“Admin Name and Password”
on page 5
set interface ethernet1/1 zone untrust
set interface ethernet1/2 zone dmz
set interface ethernet2/1 zone trust
set interface ethernet1/1 ip 1.1.1.1/30
set interface ethernet1/2 ip 1.2.2.1/29
set interface ethernet2/1 ip 10.1.1.1/24
set interface ethernet2/1 nat
set interface mgt ip 1.2.2.1/28
“Security Zones and
Interfaces” on page 6
set dns host dns1 2.2.2.5
set dns host dns1 2.2.2.6
set vrouter trust-vr route 0.0.0.0/0 interface
ethernet1/1 gateway 1.1.1.2
“DNS and Default Route” on
page 12
set address dmz web1 1.2.2.2/32
set address dmz mail-relay 1.2.2.3/32
set address trust mail1 10.1.1.4/32
“Addresses” on page 13
set policy id 1 from trust to dmz mail1 mail-relay
mail permit log count
set policy id 2 from trust to dmz any web1 http
permit log count
set policy id 3 from trust to untrust any any any
permit log count
set policy id 4 from dmz to trust mail-relay mail1
mail permit log count
set policy id 5 from dmz to untrust mail-relay any
mail permit log count
save
“Policies” on page 13