Manually configuring the system time of the firewall through the CLI

4

Configure the firewall system time using the CLI as follows:
1. Run the clock datetime HH:MM:SS YYYY-MM-DD command to set the current time.
2. Run the clock timezone time-zone-name { add | minus } offset command to set the time zone.
add is used to add the time-zone offset based on the Greenwich Mean Time (UTC). That is, you can calculate the time zone time identified by time-zone-name by adding the offset based on the default UTC time.
minus is used to subtract the specified time-zone offset based on UTC. That is, you can calculate the time zone time identified by time-zone-name by subtracting the offset based on the default UTC time.
3. Optional: Run the clock daylight-saving-time time-zone-name one-year start-time start-date end-time end-date offset or clock daylight-saving-time time-zone-name repeating start-time { { first | second | third | fourth | last } weekday month | start-date } end-time { { first | second | third | fourth | last } weekday month | end-date } offset [ start-year [ end-year ] ] command to set DST.
In the configuration of the periodical DST and DST start time and end time, the four configuration modes of date+date, week+week, date+week, and week+date are supported. For the configuration method, see the clock daylight-saving-time command.
Note:
If the current time is in DST, running the clock timezone time-zone-name { add | minus } offset command to set the time zone name will succeed. However, if you run the display clock command in this case, the time zone name displayed is the DST name. After the DST ends, the time zone name set previously is displayed.
4. Optional: Run the display clock [ utc ] command to view the system clock.

Other related questions:
Configuring intrazone ASPF through the CLI on the USG6000
The USG6000 series supports configuring the intrazone ASPF function through the CLI. For example, enable the ASPF function for the FTP protocol in the Trust zone. system-view [sysname] firewall zone trust [sysname-zone-trust] detect ftp The protocol types that can be detected in the intrazone view include DNS, FTP, H.323, ILS, MGCP, MMS, MSN, NetBIOS, PPTP, QQ, RTSP, SIP, and SQL.NET.

Configuring global ASPF through the CLI on the USG6000
To simplify configurations, the USG6000 series supports configuring the global ASPF function. Enabling the global ASPF function equals to enabling the interzone and intrazone ASPF functions. The global ASPF function and interzone/intrazone ASPF function are logically ORed. Select one of them as required. For example, configure the global ASPF function to detect FTP traffic. system-view [sysname] firewall detect ftp

Configuring interzone NAT ALG through the CLI on the USG6000
The USG6000 series supports configuring interzone NAT ALG through the CLI. For example, enable the NAT ALG function for the FTP protocol in the interzone between the Trust zone and the Untrust zone. system-view [sysname] firewall interzone trust untrust [sysname-interzone-trust-untrust] detect ftp For details, see the USG6000 series product documentation.

Configuring intrazone NAT ALG through the CLI on the USG6000
The USG6000 series supports configuring intrazone NAT ALG through the CLI. For example, enable the NAT ALG function for the FTP protocol in the Trust zone. system-view [sysname] firewall zone trust [sysname-zone-trust] detect ftp For details, see the USG6000 series product documentation.

Configuring global NAT ALG through the CLI on the USG6000
To simplify configurations, the USG6000 series supports configuring the global NAT ALG function. Enabling the global ASPF function equals to enabling the interzone and intrazone NAT ALG functions. The global NAT ALG function and interzone/intrazone NAT ALG function are logically ORed. Select one of them as required. For example, configure the global NAT ALG function to detect FTP traffic. system-view [sysname] firewall detect ftp

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top