D-Link 800 - DFL 800 - Security Appliance, User Manual

Page: 35 / 469

2. Enter a Name for the SSH remote management policy, for example ssh_policy
3. Select the following from the dropdown lists:
• User Database: AdminUsers
• Interface: lan
• Network: lannet
4. Click OK
Logging on to the CLI
When access to the CLI has been established to NetDefendOS through the serial console or an SSH
client, the administrator will need to logon to the system before being able to execute any CLI
command. This authentication step is needed to ensure that only trusted users can access the system,
as well as providing user information for auditing.
When accessing the CLI, the system will respond with a login prompt. Enter your username and
press Enter, followed by your password and then Enter again.
After a successful logon the command prompt will appear:
gw-world:/>
If a welcome message has been set then it will be displayed directly after the logon. For security
reasons, it is advisable to disable or anonymize the CLI welcome message.
Changing the admin User Password
It is recommended to change the default password of the admin account from admin to something
else as soon as possible after initial startup. To change it to, for example, my-password the following
CLI commands are used. First we must change the current category to be the LocalUserDatabase
called AdminUsers (which exists by default):
gw-world:/> cc LocalUserDatabase AdminUsers
We are now in AdminUsers and can change the password of the admin user:
gw-world:/AdminUsers> set User admin Password="my-password"
Finally, we return the current category to the top level:
gw-world:/AdminUsers> cc ..
Changing the CLI Prompt
The default CLI prompt is:
gw-world:/>
where Device is the model number of the D-Link Firewall. This can be customized, for example, to
my-prompt:/>, by using the CLI command:
gw-world:/> set device name="my-prompt"
2.1.4. The CLI Chapter 2. Management and Maintenance
35