Jump to:navigation, search
Wiki






























De.png
En.png
Fr.png






Syntax of the CLI command system
Last adaption: 02.2024
New:
notempty
This article refers to a Resellerpreview

v11

Access: UTM-IP:Port or UTM-URL:Port
Port as configured at Network / Appliance Settings / Webserver
Default-Port: 11115
i.e.: https://utm.ttt-point.de:11115
Default: https://192.168.175.1:11115
Extras CLI


system


ssh

CLI Command Description Example
system generate sshdkeys Creates new keys for SSH connections to the appliance system generate sshdkeys

generate

system generate webservercert Generates new UTM web server certificates system generate webservercert
system generate dhparams Generates new Diffie-Hellman parameter files system generate dhparams

cyphers

system ciphers Lists the encryptions of a cipher list system ciphers value MEDIUM

features

system features Shows whether the system features http-proxy-Statistics, wifi and umts are enabled or disabled system features

sysctl

system sysctl new Set a new sysctl variable system sysctl new name net.ipv4.neigh.default.gc_thresh1 value 512
system sysctl set Changes the value of a sysctl variable system sysctl set name net.ipv4.neigh.default.gc_thresh1 value 128
system sysctl delete Deletes a sysctl variable of the Linux kernel system sysctl delete name net.ipv4.neigh.default.gc_thresh1
system sysctl get Lists all sysctl variables system sysctl get
system sysctl update Update the sysctl variables system sysctl update
It happens frequently that VoIP providers specify session timeout for UDP packets. This value is set to 30 seconds in the factory default setting and is therefore too little for many providers.

To ensure that a change still exists after an update or a restart, a variable must be added here that contains the desired value.
In our example, we set the Session Timeout value for UDP packets to a value of 300 seconds.
system sysctl new name net.netfilter.nf_conntrack_udp_timeout value 300
To ensure that this change is accepted and also saved in the configuration, the following commands must be issued:
system update system system config save


activedirectory

system activedirectory join Connects the UTM to the Active Directory system activedirectory join password "geheim"
system activedirectory testjoin Checks the AD account of the UTM system activedirectory testjoin
system activedirectory leave Release connection to Active Directory system activedirectory leave password "geheim"
system activedirectory lsgroups Listing of the Active Directory Groups system activedirectory lsgroups

upgrade

system upgrade finalize Finish a previous update or rollback system upgrade finalize
system upgrade hint Get a hint for the next upgrade action system upgrade hint
system upgrade info Lists the installed firmware versions system upgrade info
system upgrade update Download an update (if available) system upgrade update
system upgrade forceupdate Loads an update and removes remnants of previous updates system upgrade forceupdate
system upgrade dryrun Reboots the system into the updated firmware image system upgrade dryrun
system upgrade rollback Reboots the system to the previous firmware image system upgrade rollback

tools

system tools ping Sends ICMP ECHO_REQUEST to Network Hosts system tools ping host "8.8.8.8"
oder
system tools ping family "4" source "192.168.175.1" resolve "on" count "10" host "www.securepoint.de"
system tools traceroute Measures delays of network packets on their way to the target host system tools traceroute host "8.8.8.8"
oder
system tools traceroute family "4" source "192.168.175.1" resolve "on" host "www.securepoint.de"
system tools route Output of the Routing Table system tools route family "4"
system tools host Running DNS lookups system tools host type "A" server "8.8.8.8" host "www.securepoint.de"
system tools wake Sends Wake-on-Lan Magic packets to a MAC address %MAC@interface
Letters of the hexadecimal digits must be given in capital letters)
system tools wake host 00:1A:2B:3C:4E:5F@eth1

cloudbackup

system cloudbackup get Listed available backups system cloudbackup get
system cloudbackup store Saves a backup of the active configuration system cloudbackup store
system cloudbackup set setting a password system cloudbackup set password "geheim"
system cloudbackup delete Deletes a backup in the cloud system cloudbackup delete id "5264f921f3819be23e000001"
system cloudbackup restore Restore a backup system cloudbackup restore id "5264f921f3819be23e000001" ctime "1382349089" password "geheim"

info

system info Displays system information system info

reboot

system reboot Reboots the system system reboot

poweroff

system poweroff Shutting down the system system poweroff

config

system config load Loads a configuration system config load name "configname"
system config save Saves a configuration system config save name "configname"
system config new Creates a new configuration system config new name "neue_config"
system config delete Deletes a configuration system config delete name "configname"
system config set Changes the boot configuration system config set name "configname"
system config setup Don't use, internal command
system config get Listing of the existing configurations system config get
system config export Exports a configuration in form of a download key
After screen output copy this key into a text file
system config export name "configname"
system config xmlreport Output of the current configuration in XML format system config xmlreport
system config import Funktioniert derzeit in der CLI nicht, bitte über das Webinterface importieren Funktioniert derzeit in der CLI nicht, bitte über das Webinterface importieren
system config factorysettings Sets a configuration to factory setting system config factorysettings
system config report Generates a system report in pdf format
Saved at /var/www/admin/private
system config report
system config otpexport Generates a list of OTP Secrets in pdf format
Saved under /var/www/admin/private
system config otpexport
system config synchronize Synchronizes the configurations between the devices operating in the cluster system config synchronize

update

system update system Update System Settings system update system
system update interface Updates network interfaces system update interface
system update rule Updates rules system update rule
system update route Updates routes system update route
system update qos Update QoS system update qos

lsrdd

system lsrrd Listing of the RRD files system lsrrd

contentfilter

system contentfilter categorize Output of the category of a url for the content filter system contentfilter categorize url www.clamav.com
system contentfilter get Listing ID/Names of the categories system contentfilter get

date

system date get Display the current system time system date get
system date set Change system time and date system date set date "2013-10-21 15:48:52"

remote

For cluster installations

system remote upgrade cur Transfers the installed firmware to the remote terminal system remote upgrade cur
system remote upgrade new Transfers the firmware in the folder 'new' to the remote terminal system remote upgrade new
system remote get new
system remote get old
system remote cur old
Displays the firmware versions of the remote terminal
The error message connection error appears if the remote terminal is not reachable.
system remote get new
system remote sync ipdeny notempty
v12.6.1
Transferring the ipdeny list to the remote terminal system remote sync ipdeny
system remote sync status notempty
v12.6.1
Transferring the status to the remote terminal system remote sync status
system remote sync virus_pattern notempty
v12.6.1
Transferring the virus pattern to the remote terminal system remote sync virus_pattern

register

system register Registriert eine neue Lizenz auf der UTM
Nach Ausführen des Befehls muss der Lizenzschlüssel, der aus der .pem-Datei kopiert werden kann, in das CLI kopiert werden. Anschließend wird die Eingabe mit STRG + D beendet.
system register Return

Insert license Return
Ctrl + D