ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 CLI Reference Manual 350 East Plumeria Drive San Jose, CA 95134 USA August 2012 202-11138-01 v1.0 ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 © 2012 NETGEAR, Inc. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc. NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change without notice. Other brand and product names are registered trademarks or trademarks of their respective holders. © 2012 All rights reserved. Technical Support Thank you for choosing NETGEAR. To register your product, get the latest product updates, get support online, or for more information about the topics covered in this manual, visit the Support website at http://support.netgear.com. Phone (US & Canada only): 1-888-NETGEAR Phone (Other Countries): Check the list of phone numbers at http://support.netgear.com/app/answers/detail/a_id/984. Statement of Conditions To improve internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use, or application of, the product(s) or circuit layout(s) described herein. Revision History Publication Part Number Version Publish Date Comments 202-11138-01 1.0 August 2012 First publication 2 Contents Chapter 1 Introduction Command Syntax and Conventions. 7 Command Conventions . 7 Description of a Command . 8 Common Parameters . 9 The Four Categories of Commands . 9 The Four Main Modes for Configuration Commands . 10 Save Commands . 12 Global Commands . 13 The Three Basic Types of Commands. 14 Command Autocompletion and Command Abbreviation . 15 CLI Line-Editing Conventions . 15 Access the CLI . 16 Chapter 2 Overview of the Configuration Commands Network Settings (Net Mode) Configuration Commands . 17 Security Settings (Security Mode) Configuration Commands . 20 Administrative and Monitoring Settings (System Mode) Configuration Commands. 23 VPN Settings (VPN Mode) Configuration Commands . 24 Chapter 3 Net Mode Configuration Commands General WAN Commands . 27 IPv4 WAN Commands . 31 IPv6 WAN Commands . 46 IPv6 Tunnel Commands. 50 Dynamic DNS Commands . 53 IPv4 LAN Commands. 54 IPv6 LAN Commands. 66 IPv4 DMZ Setup Commands . 74 IPv6 DMZ Setup Commands . 76 WAN QoS Commands . 80 IPv4 Routing Commands . 93 IPv6 Routing Commands . 98 Chapter 4 Security Mode Configuration Commands Security Services Commands . 101 Security Schedules Commands . 110 3 ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 IPv4 Add Firewall Rule and Edit Firewall Rule Commands . 112 IPv4 General Firewall Commands . 154 IPv6 Firewall Commands . 155 Attack Check Commands. 162 Session Limit, Time-Out, and Advanced Commands. 165 Address Filter and IP/MAC Binding Commands . 168 Port Triggering Commands . 173 UPnP Command . 176 Bandwidth Profile Commands . 177 Content Filtering Commands . 180 Chapter 5 System Mode Configuration Commands Remote Management Commands . 186 SNMP Commands . 191 Time Zone Command. 192 WAN Traffic Meter Command . 198 Firewall Logs and Email Alerts Commands . 201 Chapter 6 VPN Mode Configuration Commands IPSec VPN Wizard Command . 208 IPSec IKE Policy Commands . 210 IPSec VPN Policy Commands . 216 IPSec VPN Mode Config Commands. 228 SSL VPN Portal Layout Commands. 231 SSL VPN Authentication Domain Commands . 234 SSL VPN Authentication Group Commands . 238 SSL VPN User Commands . 239 SSL VPN Port Forwarding Commands . 246 SSL VPN Client and Client Route Commands. 248 SSL VPN Resource Commands . 252 SSL VPN Policy Commands . 256 RADIUS Server Command. 263 PPTP Server Commands . 265 L2TP Server Commands . 266 Chapter 7 Overview of the Show Commands Network Settings (Net Mode) Show Commands . 267 Security Settings (Security Mode) Show Commands. 269 Administrative and Monitoring Settings (System Mode) Show Commands . 270 VPN Settings (VPN Mode) Show Commands . 271 Chapter 8 Show Commands Network Settings (Net Mode) Show Commands . 273 WAN IPv4 and WAN IPv6 Show Commands. 273 4 ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Network Settings (Net Mode) Show Commands . .273 WAN IPv4 and WAN IPv6 Show Commands . .273 IPv6 Mode, IPv6 Tunnel, and SIIT Show Commands . .277 LAN DHCP Show Commands . .278 Dynamic DNS Show Commands . .279 IPv4 LAN Show Commands . .280 IPv6 LAN Show Commands . .284 DMZ Show Commands. .286 Routing Show Commands . .288 Network Statistics Show Commands . .289 Security Settings (Security Mode) Show Commands. .290 Services Show Command . .290 Schedules Show Command . .292 Firewall Rules Show Command . .292 Attack Checks Show Commands . .294 Session Limits Show Commands . .295 Advanced Firewall Show Commands. .296 Address Filter Show Commands . .296 Port Triggering Show Commands. .297 UPnP Show Commands. .298 Bandwidth Profiles Show Command . .298 Content Filtering Show Commands . .299 Administrative and Monitoring Settings (System Mode) Show Commands . .300 Remote Management Show Command . .301 SNMP Show Commands . .301 Time Show Command . .302 Firmware Version Show Command . .302 Status Show Command ..