登录查看更多内容

点击“继续加入或登录”，即表示您同意遵守领英的《用户协议》、《隐私政策》及《Cookie 政策》。

How can you configure firewalls with CLI?

由人工智能和领英社区提供技术支持

Firewalls are essential devices for protecting networks from unauthorized access and malicious attacks. They filter traffic based on predefined rules and policies, and can also perform other functions such as logging, encryption, and authentication. However, configuring firewalls can be a complex and tedious task, especially if you have to deal with multiple devices, vendors, and interfaces. That's why learning how to configure firewalls with command-line interface (CLI) can be a valuable skill for network engineers. CLI allows you to access and manipulate firewalls directly, without relying on graphical user interfaces (GUIs) or web-based tools. CLI also offers more flexibility, control, and automation than GUIs, as well as faster and easier troubleshooting. In this article, we will show you how to configure firewalls with CLI, using some common examples and scenarios.

此文章中的业界达人

由社区从 12 条内容中精选。了解更多

[ oh-liv-ee-ey ] ?? Zheng

Staff Technical Support Engineer at Palo Alto Networks
KumaraDev Adikesavelu

Cybersecurity Technical Lead | 11+ years of Exp in Routing-Switching-Security | Palo Alto - NGFW, VM-series, Prisma…
Rodrigo Moreira

Teacher | Researcher | Developer

1 What is CLI?

CLI is a text-based interface that allows you to interact with firewalls using commands, parameters, and options. CLI commands are usually entered in a terminal or console window, and can be executed by pressing the Enter key. CLI commands can also be stored in scripts or files, and run automatically or on demand. CLI commands vary depending on the firewall vendor, model, and operating system, but they usually follow a similar syntax and structure. For example, a typical CLI command consists of a keyword, followed by one or more arguments or modifiers, separated by spaces or symbols. Here is an example of a CLI command for a Cisco firewall: show running-config This command displays the current configuration of the firewall.

添加您的观点

KumaraDev Adikesavelu

Cybersecurity Technical Lead | 11+ years of Exp in Routing-Switching-Security | Palo Alto - NGFW, VM-series, Prisma SASE | SD-WAN | Professional Service, TAC | Cisco, HP, Aruba, Checkpoint | Professional Trainer
举报内容
This is a command line user interface where we can configure, operate and troubleshoot via commands. Most of the advanced user interface preferred to use CLI for focused and non distortion operation.

已翻译

赞
Kalisa Ivan

Lead Network Engineer
举报内容
It’s a command line interface that gives u leverage to do configuration using commands also can help in the invent you want to automate

已翻译

赞
Balachandar Kamaraj

Network design and implementation/ Service integration/ Routers and switches management / Cisco, Juniper, Aruba.(Immediate joiner)
举报内容
Yes it is valuable skill to know how to use cli prompt in any network devices to configure and troubleshooting skills.Anybody can do in gui ..

已翻译

赞

2 How to access CLI?

To access CLI, you need to consider the type of firewall, its location, and connection method. The most common ways are through a console port, Telnet or SSH, or a web browser. Connecting a console cable from your computer to the firewall is one option, but you will need terminal emulation software such as PuTTY or HyperTerminal to open a console session and enter CLI commands. Alternatively, you can remotely access the firewall over a network using Telnet or SSH protocols with a client software such as PuTTY or SecureCRT. Lastly, some firewalls have a web-based interface that allows you to access CLI through a web browser with a username and password; simply enter the firewall's IP address or hostname in the browser's address bar and select the CLI option from the web interface.

添加您的观点

Rodrigo Moreira

Teacher | Researcher | Developer
举报内容
I've used SuperPutty before. It enables to save and manage different sessions on the same time and the customization of terminal specs such as fonts and colors.

已翻译

赞

3 How to configure firewalls with CLI?

Configuring firewalls with CLI involves entering and applying CLI commands that define the firewall's settings, rules, and policies. The exact commands and steps depend on the vendor, model, and operating system, but they usually follow a similar process. To enter privileged mode, you need to enter the enable command, followed by the enable password if required. To enter configuration mode, you need to enter the configure terminal command or conf t for short. Then, you need to enter the appropriate commands for your firewall followed by the end or exit command to exit configuration mode. These commands set the hostname, IP addresses, names, and security levels of the interfaces, and create and apply an access list that allows all traffic from the outside to the inside. Finally, you need to save your changes by entering the copy running-config startup-config command or copy run start for short. This copies the current configuration from the running-config file to the startup-config file which is used when the firewall boots up.

添加您的观点

Mihai T?lm?cel

Information Security Manager la Bitdefender
举报内容
Web interface? Good if you only have one with rules not changing as much. CLI directly on the device? Much better and faster, but you have to learn the syntax. Not complicated, all firewalls have a manual explaining this, maybe you have to enable the CLI in the web interface 1st, with SSH. Don't use passwords but key authentication. Want to take it to the next level and manage multiple firewalls centralized, at once? Use a tool like Ansible to issue your CLI commands at once and without even typing. Many vendors might have their own solutions, but doing it with Ansible or a similar configuration management tool is vendor agnostic, learn it once and do it with all vendors. Good luck!

已翻译

赞
Gautham Borra

Network/Security Engineer
举报内容
I agree, most of the firewall vendors these days are using single pane glass to monitor and configure the firewalls through management console/management centers (through cloud or on premises appliances). However, CLI is required during staging and setting up the firewalls with initial configuration, troubleshooting, testing, pulling the system diagnostics e.t.c.

已翻译

赞

4 How to verify firewalls with CLI?

Verifying firewalls with CLI involves entering and checking CLI commands that display the firewall's status, configuration, and statistics. The exact commands and steps depend on the firewall vendor, model, and operating system. Generally, you need to enter privileged mode by using the enable command, followed by the enable password if required. Then, you can enter verification commands that show the firewall's version, hostname, interfaces, IP addresses, access lists, and logging information. For example: show version , show hostname , show interface , show ip , show access-list , and show logging . Entering these commands will give you full access and control over the firewall's configuration as well as provide valuable insights into its status and performance.

添加您的观点

Mark Lindsey
举报内容
The key to verification is testing. You need to generate traffic that flows through the firewall and confirm that the proper policies are blocking or allowing it. The CLI will give you visibility to counters or logs showing when your policy entries are used. It varies by model — Palo Alto Networks, Cisco, and Juniper all do it different ways.

已翻译

赞
Victor Saxon

FinOps Engineer
举报内容
1. You need to understand what do you want to get. 2. Read a documentation. “It looks similar to …” is not for this case. 3. Do a backup.

已翻译

赞

5 How to troubleshoot firewalls with CLI?

Troubleshooting firewalls with CLI involves entering and analyzing commands that test, diagnose, and resolve firewall issues. The exact commands and steps depend on the firewall vendor, model, and operating system. Generally, you need to enter privileged mode by using the enable command and the password (if required). After that, you can enter the appropriate troubleshooting commands for your firewall. These commands can test the connectivity, trace the route, show the ARP table, show the routing table, show the connections, and debug the packets of the firewall. This process helps you identify and resolve firewall issues quickly and effectively.

添加您的观点

加载更多内容

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

[ oh-liv-ee-ey ] ?? Zheng

Staff Technical Support Engineer at Palo Alto Networks
举报内容
With the current trend, CLI will be less and less used. Except for troubleshooting. Spend more time on understanding the technology than to learn a command (which may changed over time, and/or may different for different vendors).

已翻译

赞
Akhil S Nath

Technical Manager @ VIGYANLABS | Infrastructure Security, IT Security, CISM
(已编辑)
举报内容
It all depends on what device you are using and how comfortable your team is with using CLI. I would suggest it is better to use CLI than GUI as it involves engineer learning more. Also provide adequate training on the same for engineers.

已翻译

赞
Gautham Borra

Network/Security Engineer
举报内容
Though, most of the vendors have GUI friendly firewalls, not all the configuration is supported via GUI. CLI is required to configure certain commands that is not supported in GUI. I have seen this in Fortigates and Paloalto Firewalls. I do agree CLI is required for testing, verification, diagnosis, troubleshooting, also required for Configuration and automation.

已翻译

赞

Network Engineering

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you configure firewalls with CLI?

1

2

3

4

5

6

1 What is CLI?

2 How to access CLI?

3 How to configure firewalls with CLI?

4 How to verify firewalls with CLI?

5 How to troubleshoot firewalls with CLI?

6 Here’s what else to consider

Network Engineering

给文章评分

感谢您的反馈

更多Network Engineering相关文章

更多相关阅读内容

How can you configure firewalls with CLI?

1

2

3

4

5

6

1 What is CLI?

2 How to access CLI?

3 How to configure firewalls with CLI?

4 How to verify firewalls with CLI?

5 How to troubleshoot firewalls with CLI?

6 Here’s what else to consider

Network Engineering

给文章评分

感谢您的反馈

查看其他技能