CLI Guide - WatchGuard Technologies

More documents

Recommendations

Info

CHAPTER 2: Administration Mode Commands account command WG#admin WG(admin)#account -login_limit -login_limit -status -unlock |all -all Effect Allows you to view, set, and clear failed login attempt limits. Login limits provide a further level of security, and eliminate susceptibility to a “brute force” password hacks. The account management feature is available in all three operation modes (normal, FIPS, and CC). The CLI allows only the root superadmin “admin” to log in, while rejecting all other accounts, including userdefined superamin accounts. If you set the login_limit feature on the root superadmin user, it is possible for the superadmin to be locked out of the system. To work around this possible problem: 1 Create another superadmin account in addition to the root superadmin “admin” account, using Vcontroller, before you set the login_limit for the root superadmin account. If the root superadmin “admin” is locked out because of exceeded login failures, you can use this separate, non-root-level superadmin account to login to Vcontroller with full administration privileges. 2 In a text editor, create and save an ASCII text file with the following two lines: admin account -unlock admin 3 In Vcontroller, click Diagnostics/CLI and select the CLI tab. This feature allows you to select a text file that contains CLI commands. 28 WatchGuard Vclass 5.1
Administration mode commands 4 Click Open. A Browse dialog appears. 5 Select the text file you created earlier, and click Select. The admin account is unlocked. Arguments -login_limit This command displays the current login limits set for admin and user on the device. -login_limit This command sets the limit for failed attempts for the specified user type (admin or user) to the number specified. -status This command displays a table of failed login attempts for each user, provided the limit for the login name is greater than 0. -unlock |all This command unlocks a login name or all login names, after the name or names are locked due to failed login attempts. -all This command displays detailed information for all accounts on the device. Examples WG#admin WG(admin)#account -login_limit WG#admin WG(admin)#account -login_limit admin 5 WG#admin WG(admin)#account -unlock joe_user downgrade command WG#admin WG(admin)#downgrade WatchGuard Command Line Interface Guide 29
Page 1 and 2: WatchGuard ® Command Line Interfac
Page 3 and 4: WatchGuard Technologies, Inc. Fireb
Page 5 and 6: 4. Limited Warranty. WATCHGUARD mak
Page 7 and 8: 6. Export Controls. You agree not t
Page 9 and 10: Contents Contents .................
Page 11 and 12: CHAPTER 3 Configuration Mode Comman
Page 13 and 14: CHAPTER 5 Other Commands ..........
Page 15 and 16: CHAPTER 1 Using the Command Line In
Page 17 and 18: CLI limitations CLI Guide text conv
Page 19 and 20: Getting started with the WatchGuard
Page 23 and 24: Case sensitivity Getting started wi
Page 27 and 28: Navigating through the CLI Getting
Page 29 and 30: Arguments None. Example WG(admin)#e
Page 33 and 34: Installing and configuring a WatchG
Page 35 and 36: Command Description Installing and
Page 37 and 38: Installing and configuring a WatchG
Page 39 and 40: CHAPTER 2 Administration Mode Comma
Page 41: Administration mode commands plete
Page 45 and 46: Administration mode commands #ex: e
Page 47 and 48: crl command Administration mode com
Page 49 and 50: Administration mode commands Merge
Page 51 and 52: Administration mode commands Proces
Page 53 and 54: Administration mode commands Shuts
Page 55 and 56: CHAPTER 3 Configuration Mode Comman
Page 57 and 58: abort command Top-level configurati
Page 59 and 60: certificate command Top-level confi
Page 61 and 62: Top-level configuration mode comman
Page 63 and 64: interface command Top-level configu
Page 65 and 66: Arguments None Example WG#config WG
Page 67 and 68: [no] traffic command (log level) WG
Page 75 and 76: as command Top-level configuration
Page 81 and 82: Second level configuration mode com
Page 87 and 88: Example Second level configuration
Page 93 and 94:
Second level configuration mode com
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Arguments Second level configurati
Page 107 and 108:
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128:
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Level 3 configuration mode commands
Page 139 and 140:
Level 3 configuration mode commands
Page 141 and 142:
CHAPTER 4 Debug Mode Commands All W
Page 143 and 144:
arp command Debugging/troubleshooti
Page 145 and 146:
Debugging/troubleshooting commands
Page 147 and 148:
- images/rs_sublogo.gif Debugging/t
Page 149 and 150:
pppoe_config command Debugging/trou
Page 151 and 152:
Page 153 and 154:
set_dos_if command Debugging/troubl
Page 155 and 156:
Page 157 and 158:
CHAPTER 5 Other Commands No command
Page 159 and 160:
Show address command Display curren
Page 161 and 162:
Show all_routes command WG#show all
Page 163 and 164:
Effect Displays any DNS configurati
Page 165 and 166:
Show command component, action or p
Page 167 and 168:
Show command Effect Displays whethe
Page 169 and 170:
Show command Arguments This argume
Page 171 and 172:
Show command Arguments This argume
Page 173 and 174:
Show command Effect Displays the ba
Page 175 and 176:
Index A abbreviations 8 abort syste
Page 177 and 178:
administration mode disable 108 CLI
Page 179 and 180:
log configuration, level 3 commands
Page 181:
X xml export debugging information
show all

CLI Guide - WatchGuard Technologies

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?