CLI Guide - WatchGuard Technologies

CLI Guide - WatchGuard Technologies CLI Guide - WatchGuard Technologies

watchguard.com
from watchguard.com More from this publisher
25.06.2013 Views

CHAPTER 3: Configuration Mode Commands Level 2 Remote Access Service (RAS) configuration commands group_profile command (configure RAS level) WG#config WG(config)#ras WG(config-ras)#group_profile \ [no][-address_pool ] \ [-dns ] [-session_time_out ] \ [-idle_time_out ] \ [-concurrent_logins_per_user ] Effect Creates a new RAS group profile (or modifies an existing profile) that controls the connection parameters of all associated remote access user accounts. Arguments This argument records a name for this group profile, which will be used when creating individual user profile accounts. [no] [-address_pool ] This argument specifies the name of an address group containing a pool of internal IP addresses assigned to remote access connections. [-dns ] This argument assigns a DNS IP address to the remote users belong to this group. [-session_time_out ] This argument limits the total time any one account user can continuously log into the network. The default time limit is 8 (hours). [-idle_time_out ] This argument sets the time limit for an inactive 102 WatchGuard Vclass 5.1

Second level configuration mode commands connection before it is automatically broken. The default is 15 (minutes.) [-concurrent_logins_per_user ] This argument specifies the number of concurrent connections a user can establish. The default is 1. Example WG(config-ras)#group consultants – address sjnet10 \ -dns 134.12.33.2 -session 2 hr -idle 5 min –con 1 user_profile command (configure RAS level) WG#config WG(config)#ras WG(config-ras)#user_profile \ [enable|disable] \ [-password "password"] \ [-full_name ] \ [-group_profile "profile_name"] \ [-pw_expiry ] \ [-account_expiry ] \ [-concurrent_logins ] Effect Enters a new remote access user account (or modifies an existing account) in an internal database in the WatchGuard appliance. Arguments This argument records the login ID used by this remote user account, and should be between 1-15 characters in length. This argument activates (or deactivates) this account. The default state is “enable”. This argument records the initial password first WatchGuard Command Line Interface Guide 103

Second level configuration mode commands<br />

connection before it is automatically broken. The<br />

default is 15 (minutes.)<br />

[-concurrent_logins_per_user ]<br />

This argument specifies the number of concurrent<br />

connections a user can establish. The default is 1.<br />

Example<br />

WG(config-ras)#group consultants –<br />

address sjnet10 \<br />

-dns 134.12.33.2 -session 2 hr -idle 5<br />

min –con 1<br />

user_profile command (configure RAS level)<br />

WG#config<br />

WG(config)#ras<br />

WG(config-ras)#user_profile \<br />

[enable|disable] \<br />

[-password "password"] \<br />

[-full_name ] \<br />

[-group_profile "profile_name"] \<br />

[-pw_expiry ] \<br />

[-account_expiry ] \<br />

[-concurrent_logins ]<br />

Effect<br />

Enters a new remote access user account (or<br />

modifies an existing account) in an internal<br />

database in the <strong>WatchGuard</strong> appliance.<br />

Arguments<br />

<br />

This argument records the login ID used by this<br />

remote user account, and should be between 1-15<br />

characters in length.<br />

<br />

This argument activates (or deactivates) this<br />

account. The default state is “enable”.<br />

<br />

This argument records the initial password first<br />

<strong>WatchGuard</strong> Command Line Interface <strong>Guide</strong> 103

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!