The Cli; Enabling Remote Management Via Https - D-Link NetDefend DFL-210 User Manual

2.1.4. The CLI

Controlling Access to the Web Interface
By default, the Web Interface is accessible only from the internal network. If you need to enable
access from other parts of the network, you can do so by modifying the remote management policy.
Example 2.1. Enabling remote management via HTTPS
Command-Line Interface
gw-world:/> add RemoteManagement RemoteMgmtHTTP https
Web Interface
1. Go to System > Remote Management > Add > HTTP/HTTPS Management
2. Enter a Name for the HTTP/HTTPS remote management policy, for example https
3. Check the HTTPS checkbox
4. Select the following from the dropdown lists:
• User Database: AdminUsers
• Interface: any
• Network: all-nets
5. Click OK
Logging out from the Web Interface
When you have finished working in the Web Interface, you should always logout to prevent other
users with access to your workstation to get unauthorized access to the system. Logout by clicking
on the Logout button at the right of the menu bar.
2.1.4. The CLI
NetDefendOS provides a Command Line Interface (CLI) for administrators who prefer or require a
command line approach to administration, or who need more granular control of system
configuration. The CLI is available either locally through the serial console port (connection to this
Network=all-nets Interface=any
LocalUserDatabase=AdminUsers HTTPS=Yes
Caution: Don't expose the management interface
The above example is provided for informational purposes only. It is never
recommended to expose any management interface to any user on the Internet.
Tip: Correctly routing management traffic
If there is a problem with the management interface when communicating alongside
VPN tunnels, check the main routing table and look for an all-nets route to the VPN
tunnel. Management traffic may be using this route.
If no specific route is set up for the management interface then all management traffic
coming from NetDefendOS will automatically be routed into the VPN tunnel. If this is
the case then a route should be added by the administrator to route management
traffic destined for the management network to the correct interface.
Chapter 2. Management and Maintenance
31