ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 200 / 426

Chapter 29 SSL VPN
ZyWALL / USG (ZLD) CLI Reference Guide
200
The following sections list the SSL VPN commands.
29.2.1 SSL VPN Commands
This table lists the commands for SSL VPN. You must use the
configure terminal
command to
enter the configuration mode before you can use these commands.
Table 112
SSL VPN Commands
COMMAND DESCRIPTION
show sslvpn policy [ profile_name ]
Displays the settings of the specified SSL VPN access policy.
show ssl-vpn network-extension local-ip
Displays the IP address that the ZyWALL / USG uses in setting up the SSL
VPN.
show sslvpn monitor
Displays a list of the users who are currently logged into the VPN SSL client
portal.
sslvpn network-extension local-ip ip
Sets the IP address that the ZyWALL / USG uses in setting up the SSL VPN.
sslvpn policy { profile_name |
profile_name append | profile_name
insert <1..16>}
Enters the SSL VPN sub-command mode to add or edit an SSL VPN access
policy.
[no] activate
Turns the SSL VPN access policy on or off.
[no] application
application_object
Adds the SSL application object to the SSL VPN access policy.
[no] description description
Adds information about the SSL VPN access policy. Use up to 60 characters
(“0-9”, “a-z”, “A-Z”, “-” and “_”).
[no] network-extension {activate |
ip-pool address_object | 1st-dns
{ address_object | ip } | 2nd-dns
{ address_object | ip } | 1st-wins
{ address_object | ip } | 2nd-wins
{ address_object | ip } | network
address_object }
Use this to configure for a VPN tunnel between the authenticated users and
the internal network. This allows the users to access the resources on the
network as if they were on the same local network.
ip-pool
: specify the name of the pool of IP addresses to assign to the
user computers for the VPN connection.
Specify the names of the DNS or WINS servers to assign to the remote
users. This allows them to access devices on the local network using
domain names instead of IP addresses.
network
: specify a network users can access.
[no] network-extension traffic-
enforcement
Forces all SSL VPN client traffic to be sent through the SSL VPN tunnel. The
no
command disables this setting.
[no] network-extension netbios-
broadcast
Allows netbios broadcast packets to pass through the SSL VPN tunnel.
[no] user user_name
Specifies the user or user group that can use the SSL VPN access policy.
sslvpn policy move <1..16> to <1..16>
Moves the specified SSL VPN access policy to the number that you
specified.
sslvpn no connection username user_name
Terminates the user’s SSL VPN connection and deletes corresponding
session information from the ZyWALL / USG.
no sslvpn policy profile_name
Deletes the specified SSL VPN access policy.
sslvpn policy rename profile_name
profile_name
Renames the specified SSL VPN access policy.
show workspace application
Displays the SSLVPN resources available to each user when logged into
SSLVPN.
show workspace cifs
Displays the shared folders available to each user when logged into
SSLVPN.