Appendix A: CLI Guide
1474
SonicOS Enhanced 5.6 Administrator’s Guide
Configuring Site-to-Site VPN Using CLI
This section describes how to create a VPN policy using the Command Line Interface. You can
configure all of the parameters using the CLI, and enable the VPN without using the Web
management interface.
Note In this example, the VPN policy on the other end has already been created.
CLI Access
1. Use a DB9 to RJ45 connector to connect the serial port of your PC to the console port of
your firewall.
2. Using a terminal emulator program, such as TerraTerm, use the following parameters:
• 115,200 baud
• 8 bits
• No parity
• 1 stop bit
• No flow control
3. You may need to hit return two to three times to get to a command prompt, which will look
similar to the following:
TZ200>
If you have used any other CLI, such as Unix sh
ell or Cisco IOS, this process should be
relatively easy and similar. It has auto-complete so you do not have to type in the entire
command.
4. When a you need to make a configuration change, you should be in configure mode. To
enter configure mode, type configure.
TZ200 > configure
(config[TZ200])>
The command prompt changes and adds the word con
fig to distinguish it from the normal
mode. Now you can configure all the settings, enable and disable the VPNs, and configure
the firewall.