USG FLEX H Series [Firewall] - Overview of CLI Commands for H Series

This is a Reference Guide for a series of products intended for people who want to configure the Zyxel
Device via Command Line Interface (CLI). You can access the CLI using a terminal emulation program on a computer connected to the console port or access the Zyxel Device using SSH (Secure SHell). Note: The Zyxel Device might force you to log out of your session if re-authentication time, lease time, or idle timeout is reached.

Note: Some commands or command options in this guide may not be available in your product. See your product's User’s Guide for a list of supported features. Do not use commands not documented in this guide. The use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable. Some commands may be renamed in a firmware upgrade. In cases where a command has multiple names, the Reference Guide lists each
variation.

Complete CLI command manual for firmware version 1.20 for USG FLEX H series

This chapter explains some commands you can use to display information about the Zyxel Device’s
current operational state.
show config  Displays the settings you configured.
show state  Displays the status of the specified settings.
show all 
Displays all settings in the specified category.
show fullpath 
Displays all settings in the specified category.
show bgp 
Displays border gateway protocol (BGP) information.
show object 
Displays the Zyxel Device zones.
show geo-ip 
Displays the Geo IP database and country list.
show cloud-helper 
Displays cloud helper firmware information and download status.
show debug myzyxelserver
status
Displays myzyxel server status.
show fast-path 
Displays fast-path memory, cpu-usage, table-usage and service statistics.
show interface 
Displays the Zyxel Device interfaces information.
show certificate 
Displays the Zyxel Device certificates information.
show filter 
Displays the protocols list.
show ntp 
Displays network time protocol (NTP) information.
show port 
Displays the Zyxel Device ports status.
show firmware 
Displays the Zyxel Device firmware and reboot options.
show gui dashboard 
boot-status
Displays when the Zyxel Device was last updated with new firmware. For example, ‘status OK.
detail “Firmware update at 2024-02-02 09:31”‘
show cert
Manager Displays the Zyxel Device SSL certificate.
show reference 
Displays which configuration settings reference a specific object.
show logging 
Displays the logs.
show summary
 Displays a summary of the Zyxel Device system status.
show conntracks 
Displays connection tracking records.
show neighbors 
Displays neighbors information.
show ipv4-routes 
Displays the IPv4 routing table.
show ospf 
Displays OSPFv2 information
show dhcp-server 
Displays the DHCP unique identifier (DUID).
show dns-server
 Displays DNS server information.


Also below are commands for individual cases that may be more useful for you.
 

  • The system uptime is an important indicator of the firewall's stability. This article will guide you on how to check the system uptime on USG Flex H series models.
show system uptime


  • CLI command "show config running all" to check the current running startup configuration, as demonstrated below:

  • CLI to add multiple IP addresses on a WAN interface, we set 61.222.75.15, 61.222.75.16, and 61.222.75.17 those three static IPs on USG Flex 200HP GE2 interface shown as below:
usgflex200hp> edit running

usgflex200hp running config# vrf main interface ethernet ge2 ipv4 address 61.222.75.15
usgflex200hp running config# vrf main interface ethernet ge2 ipv4 address 61.222.75.16
usgflex200hp running config# vrf main interface ethernet ge2 ipv4 address 61.222.75.17

usgflex200hp running config# commit
Configuration committed.
Once it is done you can use show interface to check the CLI result.

show interface.png

Articles in this section

Was this article helpful?
0 out of 0 found this helpful
Share

Comments

0 comments

Please sign in to leave a comment.