HP TippingPoint Next Generation Firewall Series User's Guide

HP TippingPointSecurity Management SystemCLI ReferenceVersion 4.0AbstractThis information describes HP TippingPoint Security Management System (SMS) h

viiiCustomer SupportHP TippingPoint is committed to providing quality customer support to all customers. Each customer receives a customized support a

Security Management System CLI Reference 11 Using the Command Line InterfaceThe command line interface (CLI) can be used to configure many aspects of

2 Using the Command Line InterfaceInteractive Mode SyntaxYou can use any of the following syntax options to initiate an interactive CLI command:•comma

Security Management System CLI Reference 3HTTP and HTTPSYou can use the following format for the HTTP and HTTPS protocols:• Complete specification: ht

4 Using the Command Line InterfaceObjects and AttributesThe following objects and attributes can be used with the help command:ExampleTo see documenta

Security Management System CLI Reference 52 SMS Command ReferenceThis chapter describes the SMS commands and the options available for each command.NO

6 SMS Command ReferenceUsagediags [--force] dirReturns a listing of files contained in the user directory. UsagedirRelated Commandsdelete, view, vidns

Security Management System CLI Reference 7• Full – When placed into this mode, the SMS functions in a manner compliant with the FIPS 140-2 publication

8 SMS Command ReferenceifconfigDisplays the network settings for the box. ifconfig is an alias for the command get net, which displays the values of t

Security Management System CLI Reference 9keyThe key command is used to update the license key for the server.UsagekeyAliaseslicenseRelated Objectslic

Legal and notice information© Copyright 2011–2013 Hewlett-Packard Development Company, L.P.Hewlett-Packard Company makes no warranty of any kind with

10 SMS Command ReferenceUsagenicRelated Commandsdns, ntpnicsettingsInteractive command that prompts you for the SMS NIC configuration settings and is

Security Management System CLI Reference 11The security level and restrictions for entering user names and passwords. The default setting is 2 from th

12 SMS Command Referenceping6Checks network connectivity by sending a ICMP request to the specified IPv6 destination, and then checking on an echoed r

Security Management System CLI Reference 13See AlsoreverserestartRestarts the network stack. The --force option restarts the network stack without a c

14 SMS Command ReferenceSee Alsopwd (object)setAssigns values to one or more attribs or to a list of attribs contained within an object. The list may

Security Management System CLI Reference 15snmp-requestThe snmp-request command is used to manage the SNMP (Simple Network Management Protocol) reques

16 SMS Command ReferenceSee Alsosnmp, snmp-requestsnmpgetsnmpget will request a single OID from the specified agent.Usagesnmpget hostNameOrAddress com

Security Management System CLI Reference 17touchCreates user files, which are archived files generated from database content.Usagetouch file [...]See

18 SMS Command ReferenceupdateThis command leads you through upgrading SMS server software:1. Acquire the latest upgrade package from the TMC website.

Security Management System CLI Reference 19Related ObjectpwdversionDisplays the system and component versions.UsageversionRelated Objectsswvivi is a t

Security Management System CLI Reference iTable of ContentsAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

20 SMS Command ReferenceSee Alsoftp, dir, delete, viewviewCommand to view the contents of the directory. Internal help is available by typing a questi

Security Management System CLI Reference 213 SMS Attributes and ObjectsThis chapter describes each object and attribute used by the SMS CLI. For more

22 SMS Attributes and ObjectsctlCollection of system control operations. The attribs contained in ctl can be used to reboot or shutdown the system, or

Security Management System CLI Reference 23dbCollection of database control operations. The attribs contained in db can be used to backup, restore or

24 SMS Attributes and ObjectsdnsThe dns object contains default domain name, DNS search list and DNS server information.Related Objectsnic, ntpdb.expo

Security Management System CLI Reference 25high availabilityCollection of system High Availability (HA) attribs. The attribs are used to retrieve HA i

26 SMS Attributes and ObjectshealthCollection of system health-related attribs. The attribs are used to retrieve system health information, including

Security Management System CLI Reference 27health.port-healthAttribute returning Port Statistics of the SMS. This information corresponds to the Ports

28 SMS Attributes and ObjectskbdKeyboard related attribute.WARNING! Do not use this option if you are using a standard QWERTY keyboard. Setting your k

Security Management System CLI Reference 29The following console keyboard layouts are available:licenseLicense information for the SMS server. The lic

iireverse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

30 SMS Attributes and Objectslogs Collection of log-related attribs. The attribs are used to manage log files that are used for troubleshooting.The lo

Security Management System CLI Reference 31NOTE: You must issue the set net.restart=yes command when you modify the IP address or gateway using the se

32 SMS Attributes and ObjectsntpCollection of NTP (Network Time Protocol) settings used to synchronize the system time with a remote time server. NTP

Security Management System CLI Reference 33 pkgCollection of attribs used to control package management.Related Objecttmc (object)Table 3-12 ntp Attri

34 SMS Attributes and ObjectsTable 3-13 pkg AttributesAttribute Description Type Access Rangeauto-downloadAttrib used to control whether new packages

Security Management System CLI Reference 35pwdCollection of password-related attribs. The attribs are used to confirm the SuperUser password and enabl

36 SMS Attributes and ObjectsradiusCollection of radius-related attribs. The attribs are used to enable and configure RADIUS for the SMS. For more inf

Security Management System CLI Reference 37routeCollection of network-related attribs. The attribs are used to configure the Ethernet 10/100/1000 inte

38 SMS Attributes and Objectsroute6Collection of attribs used to add, delete and display IPv6 static routes for the management interfaceUsageroute6.ad

Security Management System CLI Reference 39Table 3-19 snmp-request AttributesAttribute Description Type Access Rangesnmp.request-auth-keyAttrib used t

Security Management System CLI Reference iiiAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

40 SMS Attributes and Objectssnmp.request-priv-protoAttrib used to specify the privacy protocol for the SNMP request agent. When enabled, the SMS resp

Security Management System CLI Reference 41snmp.trap-auth-protoAttrib used to specifiy the authentication key for an SNMP trap destination. The IP add

42 SMS Attributes and Objectssnmp.trap-portAttrib used to specify the port for an SNMP trap destination. The IP address must be specified. The SNMP ve

Security Management System CLI Reference 43snmp.trap-userAttrib used to specify the user name for an SNMP trap destination. The IP address must be spe

44 SMS Attributes and ObjectssvcCollection of attribs used to enable various services that execute within the system. While the system implements an i

Security Management System CLI Reference 45svc.ntp-enableAttrib used to enable/disable the NTP (Network Time Protocol) client. The NTP client can be u

46 SMS Attributes and ObjectsswCollection of software versioning attribs. The attribs are used to report the system software version, and to list the

Security Management System CLI Reference 47 Table 3-24 time AttributesAttribute Description Type Access Rangetime.dateTimeDisplays the current system

48 SMS Attributes and Objects

iv

Security Management System CLI Reference vAbout This GuideThe Security Management System CLI Reference provides information about using the SMS comman

viDocument ConventionsThis guide uses the following document conventions.• Typefaces, page vi• Document Messages, page viiTypefacesHP TippingPoint pub

Security Management System CLI Reference viiDocument MessagesDocument messages are special text that is emphasized by format and typeface. This guide