D-Link NetDefendOS User Manual page 65

NetDefendOS maintains a simple two level directory structure which consists of the top level root
and a number of sub-directories. However, these "directories" such as sshlclientkey should be
more correctly thought of as object types. All the files stored in the NetDefendOS root as well as
all the object types can be displayed using the CLI command ls.
The resulting output is shown below:
gw-world:/> ls
HTTPALGBanners/
HTTPAuthBanners/
certificate/
config.bak
full.bak
script/
sshclientkeys/
Apart from the individual files, the objects types listed are:
• HTTPAuthBanners/ - The folder containing the HTML banner files for user authentication.
Uploading these is described further in Section 6.3.4.5, "Customizing WCF HTML Pages".
• HTTPALGBanners/ - The folder containing HTML banner files for HTML ALG dynamic content
filtering. Uploading these is described further in Section 6.3.4.5, "Customizing WCF HTML
Pages".
• certificate/ - The folder containing uploaded X.509 digital certificates for VPN.
• script/ - The folder containing all CLI scripts. Scripts are described further in Section 2.1.6, "CLI
Scripts".
• sshclientkeys/ - The folder containing SSH client public key files that allow automatic
authentication from an SSH client which has the matching private key installed. The filename
should not have a filetype (in other words, there should be no period character in the name).
After upload, the administrator should associate the file with a User object so that user can
have automatic authentication enabled.
SSH authentication with certificates is described further in Section 2.1.5, "The CLI".
Examples of Uploading and Downloading
In some cases, a file is located in the NetDefendOS root directory. Configuration backup files
(config.bak) and the complete system backup files (full.bak) will be saved to the root directory.
When uploading, these files contain a unique header which identifies what they are.
NetDefendOS checks this header and ensures the file is stored only in the root (all files do not
have a header).
If an administrator username is admin1 and the IPv4 address of the NetDefend Firewall is
10.5.62.11 then to upload a configuration backup, the SCP command would be:
> scp config.bak admin1@10.5.62.11:
To download a configuration backup to the current local directory, the command would be:
> scp admin1@10.5.62.11:config.bak ./
To upload a file to an object type under the root, the command is slightly different. If we have a
local CLI script file called my_script.sgs then the upload command would be:
Chapter 2: Management and Maintenance
65