Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 909 / 1026

APPENDIX B
Unmanaged ScreenOS Commands
Network and Security Manager (NSM) is designed for system-level management, enabling
multiple administrators to manage their devices from one central location using the
majority of CLI commands available in ScreenOS. However, a small number of device
commands are unmanaged from the NSM UI.
Most unmanaged commands are useful only when performing device administration on
a specific device, and do not affect management capabilities (although future versions
of NSM may support these commands). To use an unmanaged device command, you
must connect locally to the Juniper Networks security device.
Table 120 on page 859 details each unmanaged command.
Table 120: Unmanaged Commands for Firewall/VPN Devices
This command disable all internal commands. Only the
root administrator can set this command. If someone other
than the root administrator tries to set this command, the
security device displays an error message. common-criteria
These commands define environment variables. Security
devices use environment variables to make special
configurations at startup. envar
This command checks the number of gates on a security
device, how many are in use, and how many are still
available. Gates are logical access points in the firewall
for FTP and similar applications. Security devices create
the gates, then convert a gate for each new session when
data traffic occurs. gate
These commands define the Phase 1 and Phase 2
proposals and the gateway for an AutoKey IKE (Internet
Key Exchange) VPN tunnel, and specify other IKE
parameters. ike
These commands configure inter-VLAN traffic through a
security device. It is possible to configure a virtual system
(vsys) with two trusted interfaces, such that traffic can
enter the vsys through one interface and exit through the
other without undergoing any security services such as
authentication or encryption. This is known as inter-VLAN
traffic. intervlan-traffic
859 Copyright © 2010, Juniper Networks, Inc.