CLI - e-catalog
Contents
1. dSIHS2NQNUNMLXHILTHIdSIWSHQNUNLXHITHIdSIWH8u 77 7777777770700 00 ttt t ttt ttt ieuueq urboT wo Tbeyq uUeWYOSITHy PE RA E qduoid urboT DELI Se3nurUu HSS noou AJTATIOPUI Gee sages i sa3nutu Tetzes 3nosuta AJTATIORUI Gees cien sa3nuTu q m 3noauta3 A JTATIORUI LOL 9 9 9 c9 c c9 c c9 9 e e e e 5 zequnu 310d dWNS PeTqestp tee eee Z uOTSIeA ANNS PpeTqestp cst ttt te es T UOTSISA dWNS ar dem SdLLH azequnu 310d ssa00Y gem PSTARLUS Sun ee ne as i coe d ie SdLLH Gem zed sseoov u99 8p zo G 2 60 9p 07p 89 09 PpZ 83 2 90 0vp p9u 7777777777777 77 HSS 103 qutadzebuta YSA uLl dt JD JO PJ APTO C2 DpP G G LC 80 90 2L 90u 777 7777777777777 HSS 103 JUTIAISBUTA YSA QU Fate mo RE quus fecic ce cue v zequnu 2310d sseoov HSS perqeue 9 9 9 9 9 9 c9 9 c9 9 o 0 9 c5 9 9 9 9 1 HSS iod SSoooY Siojeueaed urboT uTboT Mousg brjuoo e beu uueuuositH i Figure 13 Show login command with a line length of 80 characters 29 Release 5 0 08 2010 CLI EAGLE 20 ubXuLTIdIdSISd3NaNUNLXHLTHIdSIHg3NaNUNLXU L IJSIdSIJ4S3NUNMLXU LTd IdSliidu no Tbeq UUPUUYOSITH 499 8p 29 0 2 60 9D 09 89 09 P2 83 2 90 00 P94 ull d E 3P 30 93 Q4D 19 ZJ3 PD 6 6 2 60 90 3 904 OTJUOO e gbeu uuewyosaztyH i fai Teh M E E EE Rz UII dey ie et a ieuueq urbo BPS SSSI e A SS is eas 3duozad utbo2. OGL errr seqnutw HSS 3noeura JTATIOPUI Qi ym sa3nutTu Tetas 4noeurj A JTATIORUI Gorro seqnutw q m 3noeura AJTATIORUI TOTANA A Ecce emis ides iequnu qazod dWNS E enn nnn Z UOTSISA dWNS DOTAR Tp rr I UOTSISA dWNS pppistses swa SGLLH Zequnu 2310d sseoov qeM DeTQEUug eser see mime teres ees SdLLH Gem ted sseoov eee HSS 103 JUTIAdI1SPDUTA wsy eh ee eee ee ee ee HSS 103 aQuragdaebura YSA zz se SE S oh v ehe intus zequnu 310d ssso0y HSS DOT PR A ee a Ca HSS iod sseooy szojowezed urboT urbo Mousg brjuoo eThbeq UUPUUYOSITH i CLI EAGLE 20 Release 5 0 08 2010 Figure 14 Show login command with a line length of 132 characters 30 4 Examples 4 1 Change timeout default setting Task assignment The following example shows how you find and execute a command for changing the default setting of the timeout value for your SSH connection On delivery this value is set to 5 minutes This means that after this time has elapsed the CLI logs off the user if no keys have been pressed You can set a value for this timeout in the range from 1 to 120 minutes Login to CLI Login to CLI as described above see on page 10 Preparing the con nection Finding the command mode You are in the User Exec mode see on page 17 Mode based command hierarchy Enter a question mark to get a list of the commands available in this mode see fig 9 The corresponding command
3. NOTE Enter for Command Help Command help displays all options that are valid for the particular mode For the syntax of a particular command form please consult the documentation Hirschmann Eagle Figure 4 Start screen of CLI Your Firewall appears with the input prompt Hirschmann Eagle gt CLI EAGLE 20 Release 5 0 08 2010 13 2 3 CLI via the V 24 port A serial interface is provided on the RJ11 socket V 24 interface for the local connection of an external management station VT100 terminal or PC with corresponding terminal emulation This enables you to set up a connection to the Command Line Interface CLI and to the system monitor VT 100 terminal settings Speed 9 600 Baud Data 8 bit Stopbit 1 bit Handshake off Parity none The socket housing is electrically connected to the housing of the device RJ11 DB9 6z3 Pin 5 Pin 6 O64 Pin 8 1 o i 22 Pin 1 CTS 1 n c 200 2 TX 3 3 P 2 RX 5 5 RTS 6 Figure 5 Pin assignment of the V 24 interface and wiring to the DB9 connector You will find a description of the V 24 interface in the User Manual Installation Connect the device to a terminal via V 24 or to a COM port of your PC using terminal emulation based on VT100 and press any key After the connection has been made successfully a window for entering the user name appears on the screen CLI EAGLE 20 14 Release 5 0 08 2010 Copyright c 2007 2010 Hirschmann Automa
4. device status itself Show DHCP Relay parameters Show DHCP Server parameters Show information about Firewall Learning Mode Show interface parameters Show the LLDP information Display logging parameters Show login parameters Display the NAT settings Show network data Show the packet filter configuration Show transparent mode packet forwarding settings Show the RADIUS settings Show the redundancy settings Show the currently running configuration Display Signal Contact settings Display SNMPv3 traps Show SNTP configuration parameters and information Show system related items Show temperature limits Show the user firewall settings Display users and user accounts information Show VPN settings L Then enter login to display your current login settings CLI EAGLE 20 Release 5 0 08 2010 33 Hirschmann Eagle show login Login parameters Access per SSH lS EMI enabled SSH Access port number 22 DSA Fingerprint for SSH 0a 7f 06 05 27 35 53 dd f2 61 db fa 0f df 3b 11 RSA Fingerprint for SSH 6d 40 06 c3 8 2d cb 68 40 dc 09 7 b3 c2 d8 ee Access per Web HTTPS enabled Web Access port number HTTPS 443 SNMP version 1s ows tee ek ot Sa ee sa ee PS EROS disabled SNMP v rglOn 2 eww ewe eee E e RUE Reps disabled SNMP port number wu Y 161 Inactivity timeout Web minutes 5 Inactivi
5. VPN settings Figure 11 Commands in the Global Configuration mode Note You will find information on the line feed of the help texts below see on page 28 Line length 3 2 Executing commands 3 2 1 Syntax analysis After you login to the CLI session you enter the User Exec mode The Hirschmann Eagle promptis displayed on the screen CLI EAGLE 20 Release 5 0 08 2010 21 The CLI always starts the syntax analysis when you enter a command and press the ENTER key The command tree is searched for the desired com mand If the command is not found the message displayed informs you of the error Example The user wants to execute the show system info command but enters this command with a misspelling and presses the Enter key The CLI then outputs an error message Hirschmann Eagle gt show system ino Error 1 Invalid command ino 3 2 2 Command tree The commands in CLI are organized into a tree structure The commands and the related parameters if applicable branch all the way down until you reach the end point The CLI checks every input to see whether you have en tered the command and all parameters completely Only then can you exe cute the command with the Enter key After you have entered the command and all the required parameters all the other parameters entered are treated as optional parameters If one of the parameters is unknown the CLI outputs a syntax error message The comman
6. is located in a different mode The Privileged Exec mode provides a wider range of commands L To switch to the Privileged Exec mode quickly and easily you enter en and a space The CLI completes the command to enable see on page 27 Data entry elements Execute the command with En ter The command prompt changes from Hirschmann Eagle gt to Hirschmann Eagle thus informing you that you are now in the Privileged Exec mode Hirschmann Eagle gt enable Hirschmann Eagle Enter a question mark to get a list of the commands available in this mode see fig 10 The login command is used to perform this task CLI EAGLE 20 Release 5 0 08 2010 31 Enter login lo and a space character is not sufficient here as it is not clear wheth er you want to execute the login or logout command However if you enter a space again you get a list of the commands that begin with lo Hirschmann Eagle 1lo login Set login parameters logout Exit this session Any unsaved changes are lost Finding completing and executing commands 1 After login enter a question mark to display the additional branches of the command Hirschmann Eagle login access Set login access parameters timeout Set login timeout parameters The login timeout command is used to perform this task After login enter a t and a space The CLI automatically completes the command to logi
7. local or remote connection This enables you to securely administer the firewall via V 24 or via the Secure Shell SSH protocol You can also de fine rules to secure the access and the administration The Command Line Interface provides IT specialists with a familiar environ ment for configuring IT devices As an experienced user or administrator you have knowledge about the basics and about using secure shell SSH connections The Command Line Interface reference manual gives you step by step in formation on using the Command Line Interface CLI and its commands CLI EAGLE 20 8 Release 5 0 08 2010 The commands in the Command Line Interface of the EAGLE 20 Firewall can be divided into the following areas Authentication Delete Copy Denial of Service Device Status Interface Logging NAT Network Address Translation Network Packet Filter Profiles Signal contact SNMP Trap Simple Network Management Protocol SNTP Simple Network Time Protocol Users Display CLI EAGLE 20 Release 5 0 08 2010 9 2 Access to CLI 2 1 Preparing the connection Information for assembling and starting up your EAGLE Industrial Ethernet Firewall can be found in the Installation user manual Information for configuring your EAGLE Industrial Ethernet Firewall can be found in the Configuration user manual Connect your Firewall with the network The network parameters must be set correctly for the connection
8. multiple devices simultaneously Graphical interface with network layouts Auto topology discovery Event log Event handling Client Server structure Browser interface ActiveX control for SCADA integration SNMP OPC gateway CLI EAGLE 20 Release 5 0 08 2010 5 Key The designations used in this manual have the following meanings List Ol Work step Subheading Link Indicates a cross reference with a stored link Note A note emphasizes an important fact or draws your attention to a dependency Courier ASCII representation in user interface CLI EAGLE 20 6 Release 5 0 08 2010 1 Introduction 1 1 Industrial Ethernet Firewall 1 1 1 Application areas The EAGLE industrial firewall VPN system ensures the authentication secu rity and confidentiality of communication within production networks but also beyond company boundaries The EAGLE supports the following network modes Transparent Mode Router Mode PPPoE Mode 1 1 2 Operating modes This device protects the network to be secured secure port from external influences non secure port These influences can include deliberate attacks or unauthorized access attempts as well as interfering network events such as overloads State on delivery On delivery the device works in the Transparent Mode In this mode no network settings e g for subnetworks are required for operation The firewall has been preconfigured so that all IP traffic from the secure netw
9. nnn nnn nnn nnn O to 255 decimal 192 168 11 110 MAC Address mm mm mm mm mm mm mm 00 to ff hexadecimal A7 C9 89 DD A9 B3 number pairs Table 3 Format and range of network addresses Strings A string is indicated by quotation marks For example System name with space character Space characters are not valid user defined strings You enter a space character in a parameter between quotation marks Examples of commands Example 1 clear arp table Command for deleting dynamic entries in ARP Cache clear arp table is the command name The command does not re quire any other parameters and can be executed with lt Enter gt Example 2 signal contact monitor aca removal Command for displaying the removal of the AutoConfiguration Adapter Hirschmann Eagle config signal contact monitor aca removal enable Enable the option disable default Disable the option signal contact monitor aca removal is the command name The parameter is required It can have the value enable or disable Example 3 nat 1to1 add Command for adding a 1 1 NAT rule Hirschmann Eagle config nat 1tol add 1 512 NAT rule number internal net Internal network address external net External network address netmask Network mask comment Rule comment nat 1to1 add is the command name The parameters 1 512 i e the number of the NAT rule to be added in ternal net external net netmask and comment are optional
10. CLI EAGLE 20 24 Release 5 0 08 2010 3 3 Properties of the CLI 3 3 1 Input prompt Command mode With the input prompt the CLI shows you which of the three modes you are in Hirschmann Eagle User Exec mode Hirschmann Eagle Privileged Exec mode Hirschmann Eagle config Global Configuration mode Exclamation mark and asterisk Exclamation mark An exclamation mark in the first position of the input prompt shows you that the password for the user admin is still on the default setting Hirschmann Eagle gt Asterisk An asterisk in the first or second position of the input prompt shows you that the settings in the volatile memory and the settings in the non volatile memory are different Hirschmann Eagle gt CLI EAGLE 20 Release 5 0 08 2010 25 3 3 2 Key combinations The following key combinations make it easier for you to work with the Command Line Interface Key combination Description CTRL H Delete previous character Backspace CTRL A Go to beginning of line CTRL E Go to end of line CTRL F Go forward one character CTRL B Go backward one character CTRL D Delete current character CTRL U X Delete to beginning of line CTRL K Delete to end of line CTRL W Delete previous word CTRL P Go to previous line in history buffer CTRL R Rewrite or paste the line CTRL N Go to next line in history buffer CTRL Q Enable serial flow CTRL S Disabl
11. H under Connection type After selecting and setting all the required parameters you can set up the connection via SSH Click Open to set up the connection to your device Depending on the device and the time at which SSH was configured it can take up to a min ute to set up the connection When you first login to your device towards the end of the connection setup PuTTY displays a security alert message and gives you the option of checking the fingerprint of the key CLI EAGLE 20 Release 5 0 08 2010 11 PuTTY Security Alert x A WARNING POTENTIAL SECURITY BREACH The server s host key does not match the one PuTTY has cached in the registry This means that either the server administrator has changed the host key or you have actually connected to another computer pretending to be the server The new rsa key Fingerprint is 1024 4e 62 99 32 56 07 26 1c c5 39 55 04 65 a9 f9 6e IF you were expecting this change and trust the new key hit Yes to update PuTTY s cache and continue connecting If you want to carry on connecting but without updating the cache hit No If you want to abandon the connection completely hit Cancel Hitting Cancel is the ONLY guaranteed safe choice Ja Nein E Hilfe Figure 2 Security alert prompt for the fingerprint Check the fingerprint to protect yourself from unwelcome guests If the fingerprint matches that of the device key click Yes You can read the fin
12. I via the V 24 port 3 Using the CLI 3 1 Mode based command hierarchy 3 2 Executing commands 3 2 1 Syntax analysis 3 2 2 Command tree 3 2 3 Structure of a command 3 3 Properties of the CLI 3 3 1 Input prompt 3 3 2 Key combinations 3 3 3 Data entry elements 3 3 4 Line length 4 Examples 4 1 Change timeout default setting 4 2 Login Banner A Further Support CLI EAGLE 20 Release 5 0 08 2010 o NNN N 10 10 10 14 17 17 21 21 22 22 25 25 26 27 28 31 31 34 39 CLI EAGLE 20 Release 5 0 08 2010 About this Manual The Command Line Interface Reference Manual contains detailed informa tion on using the Command Line Interface to operate the individual functions of the device The Configuration user manual contains all the information you need to start operating the Industrial Ethernet Firewall EAGLE It takes you step by step from the first startup operation through to the basic settings for operation in your environment The Web based Interface reference manual contains detailed information on using the Web interface to operate the individual functions of the device The Installation user manual contains a device description safety instruc tions a description of the display and the other information that you need to install the device The Network Management Software HiVision Industrial HiVision provides you with additional options for smooth configuration and monitoring Configuration of
13. Reference Manual 1 aye mov ri BELDEN BRAND Command Line Interface CLI Industrial Ethernet Firewall EAGLE mE Cojoyieiejloe e 2007 2010 Hirschmann Automation and Control GmbH ALL selcioes reserves EAGLE Release SDV 05 0 00 Build date 2010 08 08 08 08 System Name Netw Mode Mgmt lIP Base MAC System Time EXAMPLE EXAMPLE EXAMPLE EXAMPLE mares SU For Commisvarcl Helps EAGLE20 Name transparent Ello Elo la reso doma di ilb SUN AUG 08 08 08 08 2010 Command help displays all options laze cues welliiol tor idas pearcticulew noce For the syntax of a particular command form consult the documentation Hirschmann Eagle gt CLI EAGLE 20 Release 5 0 08 2010 please Technical Support HAC Support Belden com The naming of copyrighted trademarks in this manual even when not specially indicated should not be taken to mean that these names may be considered as free in the sense of the trademark and tradename protection law and hence that they may be freely used by anyone 2010Hirschmann Automation and Control GmbH Manuals and software are protected by copyright All rights reserved The copying reproduction translation conversion into any electronic medium or machine sc
14. al Config mode This mode allows you to perform modifications to the current configura tion In this mode general setup commands are grouped together Command prompt Hirschmann Eagle config CLI EAGLE 20 Release 5 0 08 2010 The following table shows the command modes the command prompts in put request characters visible in the corresponding mode and the option with which you quit this mode Command mode User Exec mode Privileged Exec mode Global Configura tion mode Access method First access level Perform basic tasks and list system information From the User Exec mode you enter the command enable Hirschmann Eagle gt enable Hirschmann Eagle amp From the Privileged Exec mode you enter the command configure Hirschmann Eagle config ure Hirschmann Eagle con fig From the User Exec mode you enter the command enable and then in Privileged Exec mode enter the command Configure Hirschmann Eagle enable Hirschmann Eagle config ure Hirschmann Eagle con fig Table 1 Command modes Quit or start next mode To quit you enter logout Hirschmann Eagle gt logout Are you sure Y N y To quit the Privileged Exec mode and return to the User Exec mode you enter exit Hirschmann Eagle exit Hirschmann Eagle gt To quit the Global Configuration mode and return to the Privileged Exec mode you enter exit Hirschmann Eagle con fig texit Hirs
15. annable form is not permitted either in whole or in part An exception is the preparation of a backup copy of the software for your own use For devices with embedded software the end user license agreement on the en closed CD applies The performance features described here are binding only if they have been expressly agreed when the contract was made This document was produced by Hirschmann Automation and Control GmbH according to the best of the company s knowledge Hirschmann reserves the right to change the contents of this document without prior notice Hirschmann can give no guarantee in respect of the correctness or accuracy of the information in this document Hirschmann can accept no responsibility for damages resulting from the use of the network components or the associated operating software In addition we refer to the conditions of use specified in the license contract You can get the latest version of this manual on the Internet at the Hirschmann product site www beldensolutions com Printed in Germany Hirschmann Automation and Control GmbH Stuttgarter Str 45 51 72654 Neckartenzlingen Germany Tel 49 1805 141538 039 xxx 001 03 08 2010 29 7 10 Content About this Manual Key 1 Introduction 1 1 Industrial Ethernet Firewall 1 1 1 Application areas 1 1 2 Operating modes 1 2 User interfaces 1 3 Command Line Interface 2 Access to CLI 2 1 Preparing the connection 2 2 CLI via SSH Secure Shell 2 3 CL
16. chmann Eagle To then quit the Privileged Exec mode and return to the User Exec mode you enter exit again Hirschmann Eagle exit Hirschmann Eagle gt If you enter a question mark after the prompt you receive a list of the available command and a short description of the commands Hirschmann Eagle enable help history logout ping show traceroute gt Turn on privileged commands Display help for various special keys Show a list of previously run commands Exit this session Send ICMP echo packets to a specified IP address Display device options and settings Trace route to a specified host Figure 9 Commands in the User Exec mode CLI EAGLE 20 Release 5 0 08 2010 19 Hirschmann Eagle enable Hirschmann Eagle clear Clear several items configure Enter into global config mode copy Copy different kinds of items debug Service functions to find configuration errors exit Exit from current mode help Display help for various special keys history Show a list of previously run commands login Set login parameters logout Exit this session network Modify network parameters ping Send ICMP echo packets to a specified IP address profile Activate or delete configuration profiles reboot Reset the device cold start save Save configuration set Set device parameters show Display device options and settings traceroute Trace route to a specified host Figure 10 Command
17. d tree branches for the required parameters until the required parameters have reached the end point With optional parameters the command tree branches until the required pa rameters and the optional parameters have reached the end point Note The command show system commandtree lists the entire command tree for you 3 2 3 Structure of a command This section describes the syntax conventions and terminology and uses examples to represent them Format of commands Most of the commands are enhanced through parameters If the command parameter is missing CLI informs you that the syntax of the command is incorrect The commands and parameters are displayed in the Courier font in this manual and they must be used as they are shown in the manual CLI EAGLE 20 22 Release 5 0 08 2010 Parameters You must adhere to the sequence of the parameters shown Parameters can be required values optional values selections or a com bination of these things You recognize this from the way they are repre sented as follows parameter Pointed brackets indicate a required parameter parameter Square brackets indicate an optional parameter An entry can be made but it is not required Option1 Option2 The straight slash indicates that one of the options can be selected Both values cannot be selected at the same time list The curved brackets indicate that one parameter must be selected from a list of options T
18. ds are grouped in the related modes according to the type of the command Every command mode supports specific Hirschmann software commands The commands available to you as a user at a specific time depend on the mode in which you are currently working The commands of a specific mode are only available to you when you switch to this mode as a user The User Exec mode commands are an exception to this You can also exe cute these in the Privileged Exec mode The following figure shows the modes of the Command Line Interface CLI EAGLE 20 Release 5 0 08 2010 17 ROOT Login Logout Limited The User Exec functionality Commands are al available in the Privileged Exec Mode Enable Exit Basis functions basic settings Configure Exit Extended configurations Figure 8 Structure of the CLI The CLI supports the following modes Y User Exec mode When you login to CLI you first enter the User Exec mode The User Exec mode contains a limited range of commands Command prompt Hirschmann Eagle gt gt Privileged Exec mode To access the entire range of commands you enter the Privileged Exec mode In the Privileged Exec mode you can proceed as a privileged user authenticated by the login From the Privileged Exec mode you can exe cute every Exec command Command prompt Hirschmann Eagle gt Glob
19. e serial flow CTRL Z Return to root command prompt Tab lt SPACE gt Command line completion Exit Go to next lower command prompt List choices Table 4 Key combinations in the Command Line Interface CLI EAGLE 20 26 Release 5 0 08 2010 With the Help command you can display the possible key combinations in CLI on the screen Hirschmann Eagle help HELP Special keys Ctrl H BkSp delete previous character Ctrl A go to beginning of line Ctrl E go to end of line Ctrl F go forward one character Ctrl B go backward one character Ctrl D delete current character Ctrl U X delete to beginning of line Ctrl K delete to end of line Ctrl W delete previous word Ctrl P go to previous line in history buffer Ctrl R rewrites or pastes the line Ctrl N go to next line in history buffer Ctrl Q enables serial flow Ctrl S disables serial flow Ctrl Z return to root command prompt Tab SPACE command line completion Exit go to next lower command prompt list choices Hirschmann Eagle Figure 12 Listing the key combinations with the Help command 3 333 Data entry elements Command completion To facilitate making entries CLI gives you the option of command com pletion Tab Completion meaning that you can abbreviate key words Type in the beginning of a keyword If the characters entered identify a keyword CLI will complete
20. gerprints of the device key with the CLI command show login or in the Web interface in the SSH access dialog Note The OpenSSH Suite offers experienced network administrators a further op tion to access your device via SSH To set up the connection enter the fol lowing command ssh admine10 149 112 53 admin represents the user name 10 149 112 53 is the IP address of your device CLI appears on the screen with a window for entering the user name Up to five users can access the Command Line Interface at the same time login as admin admin a b c d s password Figure 3 Login window in CLI CLI EAGLE 20 12 Release 5 0 08 2010 a b c d is the IP address of your device Enterauser name The default setting for the user name is admin Press the Enter key Enter the password The default setting for the password is private Press the Enter key You can change the user name and the password later in the Command Line Interface Please note that these entries are case sensitive The start screen appears Note This device is a security relevant product For your own security change the password during the first startup procedure Copyright c 2007 2010 Hirschmann Automation and Control GmbH All rights reserved EAGLE Release SDV 05 0 00 Build date 2010 08 08 08 08 System Name EAGLE20 Name Netw Mode transparent Mgmt IP i dbecd Base MAC 00 11 22 33 44 55 System Time SUN AUG 08 08 08 08 2010
21. he following list shows the possible parameter values within the Com mand Line Interface Value Description IpAddress This parameter represents a valid IP address The address consists of 4 decimal numbers with values from 0 to 255 The 4 decimal num bers are separated by a decimal point The IP address 0 0 0 0 is a valid entry MacAddress This parameter represents a valid MAC address The address con sists of 6 hexadecimal numbers with values from 0 to FF The num bers are separated by a colon for example 00 F6 29 B2 81 40 String User defined text with a length in the specified range e g a maxi mum of 32 characters Character string Use double quotation marks to indicate a character string e g Sys tem name with space character Number Whole integer in the specified range e g 0 999999 Table 2 Parameter values in the Command Line Interface Network addresses Network addresses are required for the connection to a remote work sta tion a server or another network You distinguish between IP addresses and MAC addresses The IP address is an address allocated by the network administrator Here it is important not to have duplicate addresses in one network area The MAC addresses are assigned by the hardware manufacturer They are unique worldwide CLI EAGLE 20 Release 5 0 08 2010 23 The following table shows the representation and the range of the ad dress types Address Type Format Range Example IP Address nnn
22. lt the documentation Hirschmann Eagle gt enable CLI EAGLE 20 Release 5 0 08 2010 35 36 CLI EAGLE 20 Release 5 0 08 2010 Index C Command tree F FAQ G Global Config mode H HiVision L Login banner Network Management Software O OpenSSH Suite p Password PPPoE Mode Privileged Exec mode PuTTY R Router Mode Secure Shell SSH State on delivery T Tab Completion Technical questions Training courses Transparent Mode User Exec mode User name V V 24 VT100 CLI EAGLE 20 Release 5 0 08 2010 22 39 18 34 12 13 15 18 10 0 ok oo C2 Ne 18 13 15 8 14 14 37 38 CLI EAGLE 20 Release 5 0 08 2010 A Further Support Technical Questions and Training Courses In the event of technical queries please contact your local Hirschmann distributor or Hirschmann office You can find the addresses of our distributors on the Internet www beldensolutions com Our support line is also at your disposal Tel 49 1805 14 1538 Fax 449 7127 14 1551 Answers to Frequently Asked Questions can be found on the Hirschmann internet site www beldensolutions com at the end of the product sites in the FAQ category The current training courses to technology and products can be found under http www hicomcenter com Hirschmann Competence Center In the long term excellent products alone do not guarantee a successful customer relationship Only com
23. n timeout After login timeout enter a question mark to display the additional branches of the command Hirschmann Eagle login timeout serial Set login timeout for serial line connections ssh Set login timeout for SSH connections web Set login timeout for web connections The login timeout ssh command is used to perform this task After login timeout ssh enter a question mark to display the possible parameters for the command Hirschmann Eagle login timeout ssh lt 1 120 gt Enter a number in the given range 1 After login timeout ssh enter the value desired in this case 120 to set the timeout to 120 minutes CLI EAGLE 20 32 Release 5 0 08 2010 Hirschmann Eagle login timeout ssh 120 Execute the command by pressing the Enter key Checking the execution with the Show command Enter show to display all the possible show commands Hirschmann Eagle authentication config config watchdog denial of service device status dhcp relay dhcp server flm interfaces lldp logging login nat network packet filter packet forwarding radius redundancy running config signal contact snmptraps sntp system temperature user firewall users vpn config show Display ordered methods for authentication lists Show configuration Configure the Auto Configuration Undo settings Show denial of service parameters Show the device status settings and the current
24. ork is possible however traffic from the insecure network to the se cure one is not possible Thus already in the delivery state external at tacks on the secure network are not possible Modes Transparent Mode In transparent mode the Firewall transmits on level 2 of the ISO OSI layer model The IP address ranges before and after the Firewall are located in the same subnetwork In the state on delivery you can access the device via address 192 168 1 1 24 without configuring the IP address CLI EAGLE 20 Release 5 0 08 2010 7 Router Mode In router mode the Firewall transmits on level 3 of the ISO OSI layer model The IP address ranges before and after the Firewall are located in different subnetworks You will find a detailed description of the IP configuration in the Basic Configuration user manual of the EAGLE PPPoE Mode In PPPoE Mode the EAGLE works like in the router mode with the dif ference that the PPPoE protocol is used at the external port This en ables Internet connections via a DSL modem for example 1 2 User interfaces The device has three user interfaces which you can access via different interfaces System monitor via the V 24 interface out of band Command Line Interface CLI via the V 24 connection out of band or via SSH in band Web based interface via Ethernet in band RS Command Line Interface The Command Line Interface enables you to use all the functions of the de vice via a
25. prehensive service makes a difference worldwide In the current global competition scenario the Hirschmann Competence Center is ahead of its competitors on three counts with its complete range of innovative services Consulting incorporates comprehensive technical advice from system evaluation through network planning to project planing Training offers you an introduction to the basics product briefing and user training with certification Support ranges from the first installation through the standby service to maintenance concepts With the Hirschmann Competence Center you have decided against making any compromises Our client customized package leaves you free to choose the service components you want to use Internet http www hicomcenter com CLI EAGLE 20 Release 5 0 08 2010 39 fy HIRSCHMANN A BELDEN BRAND
26. s in the Privileged Exec mode CLI EAGLE 20 20 Release 5 0 08 2010 Hirschmann Eagle Hirschmann Eagle authentication config watchdog denial of service device status dhcp relay dhcp server exit flm help history interface lldp logging nat packet filter packet forwarding ping radius redundancy save show signal contact snmptrap sntp temperature traceroute user firewall users vpn configure config Configure an authentication list Configure the Auto Configuration Undo settings Configure Denial of Service flood protection parameters Configure the device status settings Modify DHCP Relay parameters Modify DHCP Server parameters Exit from current mode Control the Firewall Learning Mode Display help for various special keys Show a list of previously run commands Configure the interface parameters Configure the LLDP settings Logging configuration Configure the NAT settings Configure the packet filter Configure transparent mode packet forwarding settings Send ICMP echo packets to a specified IP address Configure the RADIUS settings Configure the redundancy settings Save configuration Display device options and settings Configure the Signal Contact settings Configure SNMPv3 traps Configure SNTP settings Configure the temperature limits Trace route to a specified host Configure the user firewall settings Manage Users and User Accounts Configure
27. the keyword when you press the tab key or the space key After the first letters are entered the Command Line Interface adds the rest of the possible command or parameter when you press the Tab or Space keys If there is more than one option for completion the system does not perform any completion Only after one or more letters have been entered which uniquely identify the command or parameter does the system complete the command or parameter when Tab or Space is pressed again If you make a non unique entry and press Tab or Space twice the CLI provides you with a list of options CLI EAGLE 20 Release 5 0 08 2010 27 Possible commands parameters You can obtain a list of the commands or the possible parameters by entering help or for example by entering Hirschmann Eagle show When you enter the command displayed you get a list of the parameters available for the command show 3 3 4 Line length If you are using a terminal with a line length of 80 characters the help texts are split up as shown in the following screenshot see fig 13 For example for the help text for DSA Fingerprint for SSH the remainder df 3b 11 ap pears on the next line You can avoid this effect by using a terminal with a line length of 132 charac ters see fig 14 CLI EAGLE 20 28 Release 5 0 08 2010 brguoo eibeu UUPUyYosaTH i aLXulLIdIdSISgd3N3NUNLXUL ISI
28. tion and Control GmbH All rights reserved Eagle Release SDV 05 0 00 Build date 2010 08 08 08 08 System Name EAGLE 000000 Netw Mode transparent Mgmt IP a b c d Base MAC 00 11 22 33 44 55 System Time SUN AUG 08 08 08 08 2010 Hirschmann Eagle User Figure 6 Logging in to the Command Line Interface program Enterauser name The default setting for the user name is admin Press the Enter key Enter the password The default setting for the password is private Press the Enter key You can change the user name and the password later in the Command Line Interface Please note that these entries are case sensitive The start screen appears CLI EAGLE 20 Release 5 0 08 2010 15 NOTE Enter for Command Help Command help displays all options that are valid for the particular mode For the syntax of a particular command form please consult the documentation Hirschmann Eagle gt Figure 7 CLI screen after login Note You can configure the V 24 interface either as a modem interface or a terminal CLI interface However to be able have at least limited access to the CLI interface in modem mode you connect your terminal setting on terminal 9 600 baud to the V 24 interface Press any key on your terminal keyboard a number of times until the login screen indicates the CLI mode CLI EAGLE 20 16 Release 5 0 08 2010 3 Using the CLI 3 1 Mode based command hierarchy In the CLI the comman
29. to be successful You can access the user interface of the Command Line Interface with the freeware program PuTTY This program is located on the product CD L Make sure that PuTTY is installed on your computer If the required programs are not already installed on your PC please in stall them 2 2 CLI via SSH Secure Shell Start the PuTTY program on your computer PuTTY appears with the login screen see fig 1 CLI EAGLE 20 10 Release 5 0 08 2010 i amp PuTTY Configuration 2 x Category Session Basic options for your PuTTY session ed M Specify the destination you want to connect to Keyboard Host Name or IP address Port Bell scd 22 Features Connection type Window C Raw C Telnet Rlogin SSH C Serial Appearance u N Behaviour Load save or delete a stored session Translation Saved Sessions Selection Colours Default Settings Load Connection Data Save Proxy Telnet Delete Rloain 55H Serial Close window on exit C Always Never Only on clean exit About Help Cancel Figure 1 PuTTY input screen Inthe Host Name or IP address input field you enter the IP address of your device The IP address a b c d consists of four decimal numbers with values from 0 to 255 The four decimal numbers are separated by a point To select a connection type click on SS
30. ty timeout serial minutes 5 Inactivity timeout SSH minutes 120 Logzm promptum el hoes See sue egy Hirschmann Eagle Hirschmann Eagle amp 4 2 Login Banner This dialog allows you to enter a login banner The device outputs the login banner when a user wants to login to the user interface Web based interface or CLI The login banner can be up to 255 characters long All the characters in the range ASCII code 0x20 space character to ASCII code 0x7E til de are allowed except the percent sign 9e ASCII code 0x25 You can add a fixed line break to the banner with n and a tab with t These sequences count as 2 characters Hirschmann Eagle login banner string Enter a user defined text max 255 characters Hirschmann Eagle login banner EXAMPLE n tEXAMPLE n t tEXAM PLE n t tEXAMPLE Hirschmann Eagle CLI EAGLE 20 34 Release 5 0 08 2010 login as admin a b c d s password Copyright c 2007 2010 Hirschmann Automation and Control GmbH All rights reserved EAGLE Release SDV 05 0 00 Build date 2010 08 08 08 08 System Name EAGLE 000000 Netw Mode transparent Mgmt IP a b c d Base MAC 00 11 22 33 44 55 System Time SUN AUG 08 08 08 08 2010 EXAMPLE EXAMPLE EXAMPLE EXAMPLE NOTE Enter for Command Help Command help displays all options that are valid for the particular mode For the syntax of a particular command form please consu
Download Pdf Manuals
Related Search