CLI - Configuration Mode

Revision as of 21:04, 20 April 2021 by Shin (talk | contribs)

You can add, change, or delete configuration variables in the Configuration Mode. You can enter the configuration mode using the configure command. To exit from the configuration mode, enter the exit command.
If you enter the help command in the configuration mode, you can see all commands of the mode.

LYSH@MyHostName# configure
configure# help

database

Please refer to the CLI - Database section.

dhcpv4, dhcpv6

Please refer to the CLI - Services(daemons) section.

fail2ban

Fail2Ban is an intrusion prevention software framework that protects devices from brute-force attacks. Fail2Ban is typically set up to unban a blocked host within a certain period, so as to not "lock out" any genuine connections that may have been temporarily misconfigured. However, an unban time of several minutes is usually enough to stop a network connection being flooded by malicious connections, as well as reducing the likelihood of a successful dictionary attack.[1]

LYSH@MyHostName# configure
configure# fail2ban -h
positional arguments:
    bantime		the number of seconds that a host is banned 
    maxretry		the number of failures before a host get banned 
    disable		disable fail2ban service
    enable		enable fail2ban service

If you want to verify the current configuration, enter the show system fail2ban after exit from the configuration mode.

failover

Please refer to the CLI - System Failover section.

history

hostname

Please refer to the CLI - Hostname section.

ip

Please refer to the CLI - Networking section.

log

logexp

Please refer to the CLI - Services(daemons) section.

loghost

It is the configuration for syslog to log remotely.

LYSH@MyHostName# configure
configure# loghost add -h
usage: loghost add [-h] <A.B.C.D|WORD> [<[1-65535]>] [<[WORD]>]

To send all logs to the remote server whose address is 192.168.0.100 and port is the default Syslog port(514).

configure# loghost add 192.168.0.100

To send all logs to the remote server whose address is 192.168.0.100 and port is 1000.

configure# loghost add 192.168.0.100 1000	

To send logs whose level is greater than or equal to "notice" to the remote server whose address is 192.168.0.100 and port is 1000.

configure# loghost add 192.168.0.100 1000 notice

nameserver

You can add or delete a nameserver of a network interface.

LYSH@MyHostName# configure
configure# nameserver add eth0 8.8.8.8		// add a nameserver, 8.8.8.8, into the eth0 interface.
configure# nameserver delete eth0 8.8.4.4	// delete a nameserver, 8.8.8.8, from the eth0 interface.

netplan

You can apply the network configuration immediately.

LYSH@MyHostName# configure
configure# netplan apply

ntp

You can configure the Network Time Protocol (NTP) server.

LYSH@MyHostName# configure
configure# ntp add ntp.ubuntu.com

rtlog

Please refer to the CLI - Services(daemons) section.

system

timezone

You can configure the timezone of the device.

LYSH@MyHostName# configure
configure# tiemzone

References