The Cli - D-Link DFL-1660 User Manual

2.1.4. The CLI

Management Traffic Routing with VPN Tunnels
If there is a problem with the management interface when communicating alongside VPN tunnels,
check the main routing table and look for an all-nets route to the VPN tunnel. Management traffic
may be using this route.
If no specific route is set up for the management interface then all management traffic coming from
NetDefendOS will automatically be routed into the VPN tunnel. If this is the case then a route
should be added by the administrator to route management traffic destined for the management
network to the correct interface.
2.1.4. The CLI
NetDefendOS provides a Command Line Interface (CLI) for administrators who prefer or require a
command line approach to administration, or who need more granular control of system
configuration. The CLI is available either locally through the serial console port (connection to this
is described below), or remotely via an Ethernet interface using the Secure Shell (SSH) protocol
from an SSH client.
The CLI provides a comprehensive set of commands that allow the display and modification of
configuration data as well as allowing runtime data to be displayed and allowing system
maintenance tasks to be performed.
This section only provides a summary for using the CLI. For a complete reference for all CLI
commands, see the separate D-Link CLI Reference Guide.
The most often used CLI commands are:
• add - Adds an object such as an IP address or a rule to a NetDefendOS configuration.
• set - Sets some property of an object to a value. For example, this might be used to set the source
interface on an IP rule.
• show - Displays the current categories or display the values of a particular object.
• delete - Deletes a specific object.
CLI Command Structure
CLI commands usually have the structure:
<command> <object_category> <object_type> <object_name>
For example, to display an IP address object called my_address, the command would be:
gw-world:/> show Address IPAddress my_address
The object category in this case is Address and the type within this category is IPAddress.
When typing commands, the object category can be left out where the command's meaning is
unambiguous. For example, the show command above could have been entered as:
gw-world:/> show IPAddress my_address
However, tab completion will always assume the category is included. For example, tab completion
would not be able to help complete the above command if the tab is pressed during or after the
IPAddress object type.
The same object name could be used within two different categories or types although this is best
Chapter 2. Management and Maintenance
36