Introduction

Sample CLI session

Sample CLI session

This sample CLI session shows you how to set the WAN port to use a static IP address, disable NAT, and add an alternate IP address. (The CLI prompt is shown in bold.)

CLI> enable

CLI# config

CLI(config)# interface ip wan

CLI(config-if-ip)#ip address 192.168.66.1/24

CLI(config-if-ip)#ip address mode static

CLI(config-if-ip)# no ip nat

CLI(config-if-ip)#ip address alternate 192.168.23.56

CLI(config-if-ip)# end

CLI(config)# end

CLI# quit

Note

File transfer

In some cases you may need to transfer files (certificates or configuration) to the service controller. Commands that have this capability typically include <uri> or <url> in their parameter list.

When you enter the commands discussed here, the files are transferred immediately.

File transfer can be performed in two ways.

A. The service controller gets the file using a URL

Transfer a certificate file using ftp. For example:

certificate ipsec ca ftp://ftp.example.com/certificate/my-root-certificate.pem

B. Send a file to the service controller

Using SFTP (available with OpenSSH or SSH), authenticate with the CLI credentials. Then send the file to the service controller. For example:

sftp msm710.mycompany.com >login: admin >password: ****

>put my-root-certificate.pem file transferred (1k)

>quit

In the CLI, use the local://<filename> parameter in the URL. Replace <filename> with the filename you used to transfer using SFTP. For example:

CLI(config)# certificate ipsec ca local://my-root-certificate.pem

1-8