Marcels: Die Seite wurde neu angelegt: „{{Archivhinweis|UTM/CLI/System|pre=14.0.0}} {{Set_lang}} {{#vardefine:headerIcon|spicon-utm}} {{var | display | CLI-Befehl: system | CLI command: system }} {{var | head | Syntax des CLI-Befehls ''system'' | Syntax of the CLI command ''system'' }} {{var | CLI Befehl | CLI Befehl | CLI Command }} {{var | Beispiel | Beispiel | Example }} {{var | system generate sshdkeys--desc | Erstellt neue Schlüssel für SSH-Verbindunge…“

2024-11-25T08:18:09Z

Die Seite wurde neu angelegt: „{{Archivhinweis|UTM/CLI/System|pre=14.0.0}} {{Set_lang}} {{#vardefine:headerIcon|spicon-utm}} {{var | display | CLI-Befehl: system | CLI command: system }} {{var | head | Syntax des CLI-Befehls ''system'' | Syntax of the CLI command ''system'' }} {{var | CLI Befehl | CLI Befehl | CLI Command }} {{var | Beispiel | Beispiel | Example }} {{var | system generate sshdkeys--desc | Erstellt neue Schlüssel für SSH-Verbindunge…“

Neue Seite

{{Archivhinweis|UTM/CLI/System|pre=14.0.0}}
{{Set_lang}}

{{#vardefine:headerIcon|spicon-utm}}

{{var | display
| CLI-Befehl: system
| CLI command: system }}
{{var | head
| Syntax des CLI-Befehls ''system''
| Syntax of the CLI command ''system'' }}
{{var | CLI Befehl
| CLI Befehl
| CLI Command }}
{{var | Beispiel
| Beispiel
| Example }}
{{var | system generate sshdkeys--desc
| Erstellt neue Schlüssel für SSH-Verbindungen zur Appliance
| Creates new keys for SSH connections to the appliance }}
{{var | system generate webservercert--desc
| Generiert neue UTM-Webserver Zertifikate
| Generates new UTM web server certificates }}
{{var | system generate dhparams--desc
| Generiert neue Diffie-Hellman Parameter Dateien
| Generates new Diffie-Hellman parameter files }}
{{var | system ciphers--desc
| Listet die Verschlüsselungen einer Cipherliste auf
| Lists the encryptions of a cipher list }}
{{var | system features--desc
| Zeigt an ob die System Features http-proxy-Statistics, wifi und umts aktiviert oder deaktiviert sind
| Shows whether the system features http-proxy-Statistics, wifi and umts are enabled or disabled }}
{{var | system sysctl new--desc
| Setzt eine neue sysctl Variable
| Set a new sysctl variable }}
{{var | system sysctl set--desc
| Ändert den Wert einer sysctl Variablen
| Changes the value of a sysctl variable }}
{{var | system sysctl delete--desc
| Löscht eine sysctl variable des Linux-Kernel
| Deletes a sysctl variable of the Linux kernel }}
{{var | system sysctl get--desc
| Listet alle sysctl Variablen auf
| Lists all sysctl variables }}
{{var | system sysctl update--desc
| Aktualisiert die sysctl Variablen
| Update the sysctl variables }}
{{var | system sysctl update--Beispiel--desc
| Es kommt immer wieder vor, dass VoIP Provider Vorgaben zum Session Timeout für die UDP Pakete machen. Dieser Wert steht in der Werkseinstellung auf 30 Sekunden und ist damit vielen Providern zu wenig. 
Damit eine Änderung auch nach einem Update oder einem Neustart noch besteht, muss hier eine Variable hinzugefügt werden die den gewünschten Wert enthält. 
In unserem Beispiel setzen wir den Session Timeout Wert für UDP Pakete auf einen Wert von 300 Sekunden. 
{{code| system sysctl new name net.netfilter.nf_conntrack_udp_timeout value 300}} 
Um sicher zu gehen, dass diese Änderung übernommen und auch in der Konfiguration gespeichert wird, müssen folgende Kommandos erfolgen: 
{{code| system update system 
system config save}}
| It happens frequently that VoIP providers specify session timeout for UDP packets. This value is set to 30 seconds in the factory default setting and is therefore too little for many providers. 
To ensure that a change still exists after an update or a restart, a variable must be added here that contains the desired value. 
In our example, we set the Session Timeout value for UDP packets to a value of 300 seconds. 
system sysctl new name net.netfilter.nf_conntrack_udp_timeout value 300 
To ensure that this change is accepted and also saved in the configuration, the following commands must be issued: 
system update system
system config save }}
{{var | system activedirectory join--desc
| Verbindet die UTM mit dem Active Directory
| Connects the UTM to the Active Directory }}
{{var | system activedirectory testjoin--desc
| Überprüft den AD Account der UTM
| Checks the AD account of the UTM }}
{{var | system activedirectory leave--desc
| Verbindung zum Active Directory lösen
| Release connection to Active Directory }}
{{var | system activedirectory lsgroups--desc
| Auflistung der Active Directory Gruppen
| Listing of the Active Directory Groups }}
{{var | system upgrade finalize--desc
| Abschließen eines vorherigen Updates oder Rollback
| Finish a previous update or rollback }}
{{var | system upgrade hint--desc
| Einen Hinweis auf die nächste Upgrade Aktion erhalten
| Get a hint for the next upgrade action }}
{{var | system upgrade info--desc
| Listed die installierten Firmware Versionen auf
| Lists the installed firmware versions }}
{{var | system upgrade update--desc
| Download eines Update (wenn vorhanden)
| Download an update (if available) }}
{{var | system upgrade forceupdate--desc
| Lädt ein Update und entfernt Überreste vorheriger Updates
| Loads an update and removes remnants of previous updates }}
{{var | system upgrade dryrun--desc
| Rebootet das System in das upgedatete Firmware Image
| Reboots the system into the updated firmware image }}
{{var | system upgrade rollback--desc
| Rebootet das System in das vorherige Firmware Image
| Reboots the system to the previous firmware image }}
{{var | system tools ping--desc
| Sendet ICMP ECHO_REQUEST zu Network Hosts
| Sends ICMP ECHO_REQUEST to Network Hosts }}
{{var | system tools traceroute--desc
| Misst Verzögerungen von Netzwerk-Paketen auf dem Weg zum Zielhost
| Measures delays of network packets on their way to the target host }}
{{var | system tools route--desc
| Ausgabe des Routing-Table
| Output of the Routing Table }}
{{var | system tools host--desc
| Ausführen von DNS lookups
| Running DNS lookups }}
{{var | system tools wake--desc
| Sendet Wake-on-Lan Magic Packets an eine MAC-Adresse ''%MAC@schnittstelle'' {{Hinweis|!|g}}Buchstaben der Hexadezimal-Ziffern müssen in Großbuchstaben angegeben werden)
| Sends Wake-on-Lan Magic packets to a MAC address ''%MAC@interface'' {{Hinweis|!|g}}Letters of the hexadecimal digits must be given in capital letters) }}
{{var | system cloudbackup get--desc
| Listed verfügbare Backups auf
| Listed available backups }}
{{var | system cloudbackup store--desc
| Speichert ein Backup der aktiven Konfiguration
| Saves a backup of the active configuration }}
{{var | system cloudbackup set--desc
| Setzen eines Passwort
| setting a password }}
{{var | system cloudbackup delete--desc
| Löscht ein Backup in der Cloud
| Deletes a backup in the cloud }}
{{var | system cloudbackup restore--desc
| Wiederherstellen eines Backup
| Restore a backup }}
{{var | system info--desc
| Zeigt System Informationen an
| Displays system information }}
{{var | system reboot--desc
| Rebootet das System
| Reboots the system }}
{{var | system poweroff--desc
| Fährt das System herunter
| Shutting down the system }}
{{var | system config load--desc
| Lädt eine Konfiguration
| Loads a configuration }}
{{var | system config save--desc
| Speichert eine Konfiguration
| Saves a configuration }}
{{var | system config new--desc
| Erstellt eine neue Konfiguration
| Creates a new configuration }}
{{var | system config delete--desc
| Löscht eine Konfiguration
| Deletes a configuration }}
{{var | system config set--desc
| Ändert die Boot Konfiguration
| Changes the boot configuration }}
{{var | system config setup--desc
| Nicht benutzen, internes Kommando
| Don't use, internal command }}
{{var | system config get--desc
| Auflistung der vorhandenen Konfigurationen
| Listing of the existing configurations }}
{{var | system config export--desc
| Exportiert eine Konfiguration in Form eines Downloadschlüssels Nach Bildschirmausgabe kopieren sie diesen in eine Textdatei
| Exports a configuration in form of a download key After screen output copy this key into a text file }}
{{var | system config xmlreport--desc
| Ausgabe der aktuellen Konfiguration im XML-Format
| Output of the current configuration in XML format }}
{{var | system config import--desc
| Importiert eine Konfiguration--desc
| Funktioniert derzeit in der CLI nicht, bitte über das Webinterface importieren
| Currently not working in the CLI, please import via the web interface }}
{{var | system config factorysettings--desc
| Setzt eine Konfiguration auf Werkseinstellung
| Sets a configuration to factory setting }}
{{var | system config report--desc
| Generiert einen System Report im pdf Format Abgelegt unter /var/www/admin/private
| Generates a system report in pdf format Saved at /var/www/admin/private }}
{{var | system config otpexport--desc
| Generiert eine Liste der OTP Secrets im pdf Format Abgelegt unter /var/www/admin/private
| Generates a list of OTP Secrets in pdf format Saved under /var/www/admin/private }}
{{var | system config synchronize--desc
| Synchronisiert die Konfigurationen zwischen den im Cluster Betriebenen Geräten
| Synchronizes the configurations between the devices operating in the cluster }}
{{var | system update system--desc
| Aktualisiert System Einstellungen
| Update System Settings }}
{{var | system update interface--desc
| Aktualisiert Netzwerkschnittstellen
| Updates network interfaces }}
{{var | system update rule--desc
| Aktualisiert Regeln
| Updates rules }}
{{var | system update route--desc
| Aktualisiert Routen
| Updates routes }}
{{var | system update qos--desc
| Aktualisiert QoS
| Update QoS }}
{{var | system lsrrd--desc
| Auflistung der RRD-Dateien
| Listing of the RRD files }}
{{var | system contentfilter categorize--desc
| Ausgabe der Kategorie einer Url für den Contentfilter
| Output of the category of a url for the content filter }}
{{var | system contentfilter get--desc
| Auflistung ID/Namen der Kategorien
| Listing ID/Names of the categories }}
{{var | system date get--desc
| Anzeige der Aktuellen System-Uhrzeit
| Display the current system time }}
{{var | system date set--desc
| Ändern der System-Zeit und des Datums
| Change system time and date }}
{{var | system remote upgrade cur--desc
| Überträgt die installierte Firmware auf die Gegenstelle
| Transfers the installed firmware to the remote terminal }}
{{var | system remote upgrade new--desc
| Überträgt die Firmware im Ordner 'new' auf die Gegenstelle
| Transfers the firmware in the folder 'new' to the remote terminal }}
{{var | system remote get new--desc
| Zeigt die Firmware-Versionen der Gegenstelle an {{Hinweis-box||r}} Die Fehlermeldung {{code|connection error}} erscheint, wenn die Gegenstelle nicht erreichbar ist.
| Displays the firmware versions of the remote terminal {{Hinweis-box||r}} The error message {{code|connection error}} appears if the remote terminal is not reachable. }}
{{var | system remote sync ipdeny--desc
| Übertragung der ipdeny-list auf die Gegenstelle
| Transferring the ipdeny list to the remote terminal }}
{{var | system remote sync status--desc
| Übertragung des Status auf die Gegenstelle
| Transferring the status to the remote terminal }}
{{var | system remote sync virus_pattern--desc
| Übertragung der Virus-pattern auf die Gegenstelle
| Transferring the virus pattern to the remote terminal }}
{{var | system register--desc
| Registriert eine neue Lizenz auf der UTM {{Hinweis-box}} Nach Ausführen des Befehls muss der Lizenzschlüssel, der aus der .pem-Datei kopiert werden kann, in das CLI kopiert werden. Anschließend wird die Eingabe mit ''STRG'' + ''D'' beendet. }}
{{var | Lizenz einfügen
| Lizenz einfügen
| Insert license }}
{{var | Enter
| Enter
| Return }}
{{var | Strg
| Strg
| Ctrl }}
{{var | Remote-Cluster
| Für Cluster Installationen
| For cluster installations}}

----
{{var |
|
| }}

{{var | neu--System register
| Neu im Wiki: [[#remote| ''system remote sync'']]
| New in Wiki: [[#remote| ''system remote sync'']] }}

</div>{{TOC2}}{{Select_lang}}
{{Header|02.2024|
* {{#var:neu--System register}}
|[[UTM/CLI/System_cli_v11 | v11]]
| {{Menu-UTM|Extras|CLI}}
}}
----

 
{{h1|System}}

{| class="sptable2 pd5 zh1 Einrücken"
|- class="Leerzeile"
| colspan="3" | 
=== ssh ===
|-
! {{#var:CLI Befehl}} !! {{#var:desc}} !! {{#var:Beispiel}}
|-
| {{code|system generate sshdkeys}} || {{#var:system generate sshdkeys--desc}} || system generate sshdkeys
|- class="Leerzeile"
| colspan="3" | 
=== generate ===
|-
| {{code|system generate webservercert}} || {{#var:system generate webservercert--desc}} || system generate webservercert
|-
| {{code|system generate dhparams}} || {{#var:system generate dhparams--desc}} || system generate dhparams
|- class="Leerzeile"
| colspan="3" | 
=== cyphers ===
|-
| {{code|system ciphers}} || {{#var:system ciphers--desc}} || system ciphers value ''MEDIUM''
|- class="Leerzeile"
| colspan="3" | 
=== features ===
|-
| {{code|system features}} || {{#var:system features--desc}} || system features
|- class="Leerzeile"
| colspan="3" | 
=== sysctl ===
|-
| {{code|system sysctl new}} || {{#var:system sysctl new--desc}} || system sysctl new name ''net.ipv4.neigh.default.gc_thresh1'' value ''512''
|-
| {{code|system sysctl set}} || {{#var:system sysctl set--desc}} || system sysctl set name ''net.ipv4.neigh.default.gc_thresh1'' value ''128''
|-
| {{code|system sysctl delete}} || {{#var:system sysctl delete--desc}} || system sysctl delete name net.ipv4.neigh.default.gc_thresh1
|-
| {{code|system sysctl get}} || {{#var:system sysctl get--desc}} || system sysctl get
|-
| rowspan="2" | {{code|system sysctl update}} || {{#var:system sysctl update--desc}} || system sysctl update
|-
| colspan="2" | {{#var:system sysctl update--Beispiel--desc}}
|- class="Leerzeile"
| colspan="3" | 
=== activedirectory ===
|-
| {{code|system activedirectory join}} || {{#var:system activedirectory join--desc}} || system activedirectory join password "geheim"
|-
| {{code|system activedirectory testjoin}} || {{#var:system activedirectory testjoin--desc}} || system activedirectory testjoin
|-
| {{code|system activedirectory leave}} || {{#var:system activedirectory leave--desc}} || system activedirectory leave password "geheim"
|-
| {{code|system activedirectory lsgroups}} || {{#var:system activedirectory lsgroups--desc}} || system activedirectory lsgroups
|- class="Leerzeile"
| colspan="3" | 
=== upgrade ===
|-
| {{code|system upgrade finalize}} || {{#var:system upgrade finalize--desc}} || system upgrade finalize
|-
| {{code|system upgrade hint}} || {{#var:system upgrade hint--desc}} || system upgrade hint
|-
| {{code|system upgrade info}} || {{#var:system upgrade info--desc}} || system upgrade info
|-
| {{code|system upgrade update}} || {{#var:system upgrade update--desc}} || system upgrade update
|-
| {{code|system upgrade forceupdate}} || {{#var:system upgrade forceupdate--desc}} || system upgrade forceupdate
|-
| {{code|system upgrade dryrun}} || {{#var:system upgrade dryrun--desc}} || system upgrade dryrun
|-
| {{code|system upgrade rollback}} || {{#var:system upgrade rollback--desc}} || system upgrade rollback
|- class="Leerzeile"
| colspan="3" | 
=== tools ===
|-
| {{code|system tools ping}} || {{#var:system tools ping--desc}} || system tools ping host "8.8.8.8" '''oder''' system tools ping family "4" source "192.168.175.1" resolve "on" count "10" host "www.securepoint.de"
|-
| {{code|system tools traceroute}} || {{#var:system tools traceroute--desc}} ||system tools traceroute host "8.8.8.8" '''oder''' system tools traceroute family "4" source "192.168.175.1" resolve "on" host "www.securepoint.de"
|-
| {{code|system tools route}} || {{#var:system tools route--desc}} || system tools route family "4"
|-
| {{code|system tools host}} || {{#var:system tools host--desc}} || system tools host type "A" server "8.8.8.8" host "www.securepoint.de"
|-
| {{code|system tools wake}} || {{#var:system tools wake--desc}} || system tools wake host 00:1A:2B:3C:4E:5F@eth1
|- class="Leerzeile"
| colspan="3" | 
=== cloudbackup ===
|-
| {{code|system cloudbackup get}} || {{#var:system cloudbackup get--desc}} || system cloudbackup get
|-
| {{code|system cloudbackup store}} || {{#var:system cloudbackup store--desc}} || system cloudbackup store
|-
| {{code|system cloudbackup set}} || {{#var:system cloudbackup set--desc}} || system cloudbackup set password "geheim"
|-
| {{code|system cloudbackup delete}} || {{#var:system cloudbackup delete--desc}} || system cloudbackup delete id "5264f921f3819be23e000001"
|-
| {{code|system cloudbackup restore}} || {{#var:system cloudbackup restore--desc}} || system cloudbackup restore id "5264f921f3819be23e000001" ctime "1382349089" password "geheim"
|- class="Leerzeile"
| colspan="3" | 
=== info ===
|-
| {{code|system info}} || {{#var:system info--desc}} || system info
|- class="Leerzeile"
| colspan="3" | 
=== reboot ===
|-
| {{code|system reboot}} || {{#var:system reboot--desc}} || system reboot
|- class="Leerzeile"
| colspan="3" | 
=== poweroff ===
|-
| {{code|system poweroff}} || {{#var:system poweroff--desc}} || system poweroff
|- class="Leerzeile"
| colspan="3" | 
=== config ===
|-
| {{code|system config load}} || {{#var:system config load--desc}} || system config load name "configname"
|-
| {{code|system config save}} || {{#var:system config save--desc}} || system config save name "configname"
|-
| {{code|system config new}} || {{#var:system config new--desc}} || system config new name "neue_config"
|-
| {{code|system config delete}} || {{#var:system config delete--desc}} || system config delete name "configname"
|-
| {{code|system config set}} || {{#var:system config set--desc}} || system config set name "configname"
|-
| {{code|system config setup}} || {{#var:system config setup--desc}} ||
|-
| {{code|system config get}} || {{#var:system config get--desc}} || system config get
|-
| {{code|system config export}} || {{#var:system config export--desc}} || system config export name "configname"
|-
| {{code|system config xmlreport}} || {{#var:system config xmlreport--desc}} || system config xmlreport
|-
| {{code|system config import}} || {{#var:system config import--desc}} || Funktioniert derzeit in der CLI nicht, bitte über das Webinterface importieren
|-
| {{code|system config factorysettings}} || {{#var:system config factorysettings--desc}} || system config factorysettings
|-
| {{code|system config report}} || {{#var:system config report--desc}} || system config report
|-
| {{code|system config otpexport}} || {{#var:system config otpexport--desc}} || system config otpexport
|-
| {{code|system config synchronize}} || {{#var:system config synchronize--desc}} || system config synchronize
|- class="Leerzeile"
| colspan="3" | 
=== update ===
|-
| {{code|system update system}} || {{#var:system update system--desc}} || system update system
|-
| {{code|system update interface}} || {{#var:system update interface--desc}} || system update interface
|-
| {{code|system update rule}} || {{#var:system update rule--desc}} || system update rule
|-
| {{code|system update route}} || {{#var:system update route--desc}} || system update route
|-
| {{code|system update qos}} || {{#var:system update qos--desc}} || system update qos
|- class="Leerzeile"
| colspan="3" | 
=== lsrdd ===
|-
| {{code|system lsrrd}} || {{#var:system lsrrd--desc}} || system lsrrd
|- class="Leerzeile"
| colspan="3" | 
=== contentfilter ===
|-
| {{code|system contentfilter categorize}} || {{#var:system contentfilter categorize--desc}} || system contentfilter categorize url www.clamav.com
|-
| {{code|system contentfilter get}} || {{#var:system contentfilter get--desc}} || system contentfilter get
|- class="Leerzeile"
| colspan="3" | 
=== date ===
|-
| {{code|system date get}} || {{#var:system date get--desc}} || system date get
|-
| {{code|system date set}} || {{#var:system date set--desc}} || system date set date "2013-10-21 15:48:52"
|- class="Leerzeile"
| colspan="3" | 
=== remote ===
{{#var:Remote-Cluster}}
|-
| {{code|system remote upgrade cur}} || {{#var:system remote upgrade cur--desc}} || system remote upgrade cur
|-
| {{code|system remote upgrade new}} || {{#var:system remote upgrade new--desc}} || system remote upgrade new
|-
| {{code|system remote get new}} {{code|system remote get old}} {{code|system remote cur old}} || {{#var:system remote get new--desc}} || system remote get new
|-
| {{code|system remote sync ipdeny}} {{Hinweis-box|v12.6.1|gr|12.6.1|status=neu}} || {{#var:system remote sync ipdeny--desc}} || system remote sync ipdeny
|-
| {{code|system remote sync status}} {{Hinweis-box|v12.6.1|gr|12.6.1|status=neu}} || {{#var:system remote sync status--desc}} || system remote sync status
|-
| class=mw20 | {{code|system remote sync virus_pattern}} {{Hinweis-box|v12.6.1|gr|12.6.1|status=neu}} || {{#var:system remote sync virus_pattern--desc}} || system remote sync virus_pattern
|-
|- class="Leerzeile"
| colspan="3" | 
=== register ===
|-
| {{code|system register}} || {{#var:system register--desc}}|| system register {{#var:Enter}} 
''{{#var:Lizenz einfügen}}'' {{#var:Enter}} 
{{#var:Strg}} + D
|- class="Leerzeile"
|}

UTM/CLI/System 02.2024 - Versionsgeschichte