Use the DrawBridgeOS Terminal
Applicable only to DrawBridgeOS systems. See the Platform information on your local DrawBridge System Overview page.
(Note: the System Overview link only will work on the LAN of a DrawBridge-protected network.)
About the DrawBridgeOS Terminal
Location in the DrawBridgeOS web portal: System / Configuration / DrawBridge Terminal.
This terminal gives system administrators the ability to perform the common network configuration tasks listed below.
Note: This configuration terminal is considered an "interim solution" until a more graphical configuration interfaces is designed for these networking components.
About the DrawBridgeOS Terminal Mode
& Endpoint
Mode options
- Command Builder Mode: an easier "hold-your-hand" experience: to run a command, you must first select the Section and Node you wish to act on.
- Advanced Command Mode: a free-text entry field designed for power-users who are familar with the required command syntax.
Endpoint options
"Endpoints" define the context for a command. Here's the four endpoint options, with additional information or example scenarios:
-
configure
- Used toset
ordelete
particular configuration details -
generate
- Generally used for particular PKI and VPN functions -
reset
- Generally used for cache-clearing operations -
show
- Used to display current configuration and service information
See the next section, Network Configuration Tasks, below, for additional information.
Network Configuration Tasks
Show current configuration: show config
This is generally your first step to see what the actual current configuration of the DrawBridge is:
-
Command Builder Mode:
- not available
-
Advanced Command Mode:
- Endpoint:
show
- Command:
config
- Click the
Run
button - Review the output (in the area below the command entry) as needed.
- Endpoint:
Work with Ethernet interface IP addresses
You may wish to review the output of show config
(above) first.
You'll need to know the interface name (eg eth3
) that you wish to configure.
Set a new static IP address
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
set
-
Section:
interfaces
-
Node:
ethernet
-
Command:
<interface> address <address-w-netmask>
For example:eth3 address 10.22.6.1/24
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
set interfaces ethernet <interface> address <address-w-netmask>
For example:
set interfaces ethernet eth3 address 10.22.6.1/24
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
Configuring a WAN/internet interface? you'You'll need to configure a Static Route for "all networks" 0.0.0.0/0 -- see Configure Static Routing, below.
Configuring a LAN interface? you'llSeveral things may need toupdated:
update- the firewallFirewall rules thatfor enabletransparent filtering
- Firewall zone-interface association
- DHCP server subnet settings
- DNS server allow-from
and enforcelisten
transparent filtering.addresses
Delete an existing static IP address
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
delete
-
Section:
interfaces
-
Node:
ethernet
-
Command:
<interface> address <address-w-netmask>
For example:eth3 address 10.22.6.1/24
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
delete interfaces ethernet <interface> address <address-w-netmask>
For example:
delete interfaces ethernet eth3 address 10.22.6.1/24
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
Removing a static IP address on a WAN interface? You may need to remove your "all networks" 0.0.0.0/0 Static Route. See Configure Static Routing, below.
Set an Ethernet interface to use DHCP-assigned addressing (DHCP client)
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
set
-
Section:
interfaces
-
Node:
ethernet
-
Command:
<interface> address dhcp
For example:eth3 address dhcp
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
set interfaces ethernet <interface> address dhcp
For example:
set interfaces ethernet eth3 address dhcp
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
Delete an Ethernet interface DHCP-assigned addressing configuration (DHCP Client)
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
delete
-
Section:
interfaces
-
Node:
ethernet
-
Command:
<interface> address dhcp
For example:eth3 address dhcp
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
delete interfaces ethernet <interface> address dhcp
For example:
delete interfaces ethernet eth3 address dhcp
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
Configure Static Routing
Static Routes tell DrawBridgeOS where to go to find networks. This is most commonly used/needed when you've configured a static IP address on your WAN interface (vs using DHCP, which handles the routes automatically).
Note: when configuring a route to an upstream internet gateway (such as your modem), you'll use 0.0.0.0/0
to indicate "all networks". This is what the examples below are showing, with the "modem" address being 192.168.3.1
.
For other scenarios, for example making a new remote subnet (eg. 10.44.44.0/24
) accessible over a VPN link (perhaps via router 192.168.22.2
) -- you'd specify that (10.44.44.0/24
), rather than the "all networks" 0..
mentioned above, and the ...22.2
router as your next-hop
.
You may wish to review the output of show config
(above) first.
Set a new static route
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
set
-
Section:
protocols
-
Node:
static
-
Command:
<network-w-netmask> next-hop <ip-address>
For example:0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
set protocols static route <network-w-netmask> next-hop <ip-address>
For example:
set protocls static route 0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
Delete an existing static route
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
delete
-
Section:
protocols
-
Node:
static
-
Command:
<network-w-netmask> next-hop <ip-address>
For example:0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
delete protocols static route <network-w-netmask> next-hop <ip-address>
For example:
delete protocls static route 0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
Configure Firewall Rules
Firewall rules perform several functions
You may wish to review the output of show config
(above) first.
Set a new firewall rule
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
set
-
Section:
protocols
-
Node:
static
-
Command:
<network-w-netmask> next-hop <ip-address>
For example:0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
set protocols static route <network-w-netmask> next-hop <ip-address>
For example:
set protocls static route 0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
Delete an existing firewall rule
-
Command Builder Mode:
-
Endpoint:
configure
-
Operation:
delete
-
Section:
protocols
-
Node:
static
-
Command:
<network-w-netmask> next-hop <ip-address>
For example:0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-
-
Advanced Command Mode:
-
Endpoint:
configure
-
Command:
delete protocols static route <network-w-netmask> next-hop <ip-address>
For example:
delete protocls static route 0.0.0.0/0 next-hop 192.168.3.1
-
Click the
Commit and Test
button. You should receive aSuccess!
message in the output area below. -
When finished making changes, click the
Save Config File
button to write the changes to disk.(Changes will not survive a reboot if they aren't saved!)
-