12.6.2. Interfaces

You apply interface settings at the network interface level.

12.6.2.1. Adapter settings

Network adapters are configured at the network interface adapter level.

You cannot create a network adapter. To update an existing adapter, use the following command:

Admin@UGOS# set network interface adapter

Provide the following network adapter parameters:

Parameter

Description

enabled

Enable/disable a network interface:

  • on.

  • off.

description

Network interface description.

iface-type

Interface type:

  • l3: interface works in Layer 3 mode (you can assign an IP address and use it in firewall, content filtering, and other rules; this is the standard interface operation mode).

  • mirror: interface works in Mirror mode (it can receive traffic from the network equipment SPAN port to analyze it).

zone

Zone to which the interface belongs.

link-info

Settings for network interface parameters:

  • bc_forwarding: control forwarding the directed broadcast packets arriving at the specified interface.

  • proxy_arp, proxy_arp_vlan: Proxy ARP mechanism. As for proxy_arp UserGate will respond to ARP requests from addresses outside the interface network; for proxy_arp_vlan UserGate will respond to ARP requests from addresses inside the interface network.

To specify them, use the following format:

Admin@UGOS# create network interface <iface-type> ... link-info [ key/value ]

where key is the parameter name. The name can consist of lowercase Latin letters (a-z) and an underscore (_).

value is the parameter value. Parameter values can only be integers.

For example, to enable the Proxy ARP mechanism, use the following key/value: proxy_arp/1; to disable: proxy_arp/0.

The link-info field is displayed only when adding parameters.

Important! You cannot delete the specified parameters.

netflow-profile

The Netflow profile to send statistical data to the Netflow collector. For more details on Netflow profile settings, see Configuring Netflow Profiles.

lldp-profile

Profile to send data using Link Layer Discovery Protocol (LLDP). For more details on configuring Netflow profiles, see Configuring LLDP Profiles.

iface-mode

IP address assignment mode:

  • dhcp: obtain a dynamic IP address via DHCP.

  • manual: no address.

Static mode is set automatically when an IP address is assigned to the interface.

ip-addresses

Assign a static IP address to the interface.

IP address should be specified in the following formats: [ <ip_address/mask> ] or [ <ip_address/mask> <ip_address/mask> ] if you want to assign several addresses (they should be listed using space); use decimal format to specify network mask.

Important! Square brackets should be separated by spaces on both sides.

mac

Interface MAC address.

mtu

Specify the MTU size.

dhcp-relay

Settings for the DHCP relay on the interface. You need to specify the following:

  • enabled: enable/disable the relay:

    • on.

    • off.

  • utm-address: IP address of the UserGate interface on which the relay function is added (possible values: <ip | none>).

  • server-address: addresses of DHCP servers where DHCP requests from clients should be redirected.

To delete an adapter or its parameters, use the following command:

Admin@UGOS# delete network interface adapter <adapter-name>

You can delete the following parameters:

Parameter

Description

ip-addresses

Specified IP address.

dhcp-relay server-address

DHCP server IP address.

To display information about all network adapters, use the following command:

Admin@UGOS# show network interface adapter

To display the adapter information, use the following command:

Admin@UGOS# show network interface adapter <adapter-name>

12.6.2.2. Configuring a VLAN

VLAN interfaces are configured at the network interface vlan level.

To add a new VLAN interface, use the following command:

Admin@UGOS# create network interface vlan

Parameters:

Parameter

Description

enabled

Enable/disable a VLAN interface:

  • on.

  • off.

description

Interface description.

iface-type

Interface type:

  • l3: Layer 3 (you can assign an IP address and use it in firewall, content filtering, and other rules; this is the standard interface operation mode).

  • mirror: interface works in Mirror mode (it can receive traffic from the network equipment SPAN port to analyze it).

tag

VLAN tag. Up to 4094 interfaces can be created.

node-name

Cluster node name where the VLAN is created.

interface

The physical interface on which the VLAN is being created.

zone

Zone to which the interface belongs.

link-info

Settings for network interface parameters:

  • bc_forwarding: control forwarding the directed broadcast packets arriving at the specified interface.

  • proxy_arp, proxy_arp_vlan: Proxy ARP mechanism. As for proxy_arp UserGate will respond to ARP requests from addresses outside the interface network; for proxy_arp_vlan UserGate will respond to ARP requests from addresses inside the interface network.

To specify them, use the following format:

Admin@UGOS# create network interface <iface-type> ... link-info [ key/value ]

where key is the parameter name. The name can consist of lowercase Latin letters (a-z) and an underscore (_).

value is the parameter value. Parameter values can only be integers.

For example, to enable the Proxy ARP mechanism, use the following key/value: proxy_arp/1; to disable: proxy_arp/0.

The link-info field is displayed only when adding parameters.

Important! You cannot delete the specified parameters.

netflow-profile

The Netflow profile to send statistical data to the Netflow collector. For more details on Netflow profile settings, see Configuring Netflow Profiles.

iface-mode

IP address assignment mode:

  • dhcp: obtain a dynamic IP address via DHCP.

  • manual: no address.

Static mode is set automatically when an IP address is assigned to the interface.

ip-addresses

Assign a static IP address to the interface.

IP address should be specified in the following formats: [ <ip_address/mask> ] or [ <ip_address/mask> <ip_address/mask> ] if you want to assign several addresses (they should be listed using space); use decimal format to specify network mask.

Important! Square brackets should be separated by spaces on both sides.

mac

Interface MAC address.

mtu

Specify the MTU size.

dhcp-relay

Settings for the DHCP relay on the interface. You need to specify the following:

  • enabled: enable/disable the relay:

    • on.

    • off.

  • utm-address: IP address of the UserGate interface on which the relay function is added.

  • server-address: addresses of DHCP servers where DHCP requests from clients should be redirected.

To update an existing VLAN, use the following command:

Admin@UGOS# set network interface vlan <vlan-name>

The parameters available to update are the same as those for creating a VLAN, except for tag, node-name, and interface (you cannot change these parameter values).

To delete a VLAN interface or its parameters, use the following command:

Admin@UGOS# delete network interface vlan <vlan-name>

You can delete the following parameters:

Parameter

Description

ip-addresses

Specified IP address.

dhcp-relay server-address

DHCP server IP address.

To display information about all VLAN interfaces, use the following command:

Admin@UGOS# show network interface vlan

To display information about a single interface, use the following command:

Admin@UGOS# show network interface vlan <vlan-name>

12.6.2.3. Properties of bond interfaces

You configure bond interface properties at the network interface bond level.

To create a bond interface, use the following command:

Admin@UGOS# create network interface bond

You need to specify the following parameters:

Parameter

Description

enabled

Enable/disable the interface:

  • on.

  • off.

description

Interface description.

node-name

Cluster node where the bond interface is created.

zone

Zone to which the bond belongs.

link-info

Settings for network interface parameters:

  • bc_forwarding: control forwarding the directed broadcast packets arriving at the specified interface.

  • proxy_arp, proxy_arp_vlan: Proxy ARP mechanism. As for proxy_arp UserGate will respond to ARP requests from addresses outside the interface network; for proxy_arp_vlan UserGate will respond to ARP requests from addresses inside the interface network.

To specify them, use the following format:

Admin@UGOS# create network interface <iface-type> ... link-info [ key/value ]

where key is the parameter name. The name can consist of lowercase Latin letters (a-z) and an underscore (_).

value is the parameter value. Parameter values can only be integers.

For example, to enable the Proxy ARP mechanism, use the following key/value: proxy_arp/1; to disable: proxy_arp/0.

The link-info field is displayed only when adding parameters.

Important! You cannot delete the specified parameters.

netflow-profile

The Netflow profile to send statistical data to the Netflow collector. For more details on Netflow profile settings, see Configuring Netflow Profiles.

interface-name

Enter a number to include in the interface name (for example, if you enter 1 the interface name will be bond1).

bonding

Additional bond interface parameters:

  • aggr-mode: bond operation mode:

    • round-robin: Round robin mode (packets are sent sequentially starting with the first available interface and ending with the last one. This policy is used to provide load balancing and high availability.)

    • active-backup: Active backup mode (only one network interface out of the bond will be active. Another slave interface can become active only if the currently active interface fails. With this policy, the MAC address of the bond interface is only visible externally through one network port to avoid problems with the switch. This policy is used to provide high availability).

  • xor: XOR mode (the transmission is allocated among the NICs using the following formula: [(<Source MAC address> XOR <Destination MAC address>) MOD <Interface count>]. This means that the same NIC sends packets to the same recipients. Optionally, the transmission allocation can also be based on the xmit_hash policy. The XOR policy is used for load balancing and high availability).

    • broadcast: Broadcast mode (broadcasts everything to all network interfaces. This policy is used for high availability).

    • 802.3ad: IEEE 802.3ad mode (the default mode supported by most network switches. Creates aggregated groups of NICs with identical speed and duplex settings. When combined like this, all links in the active aggregation participate in transmission as per IEEE 802.3ad. The choice of interface for packet transmission is determined by the policy. By default, the XOR policy is used, with the xmit_hash policy as a possible alternative).

    • transmit: Adaptive transmit load balancing mode (outgoing traffic is distributed depending on the loading of each NIC (determined by the load speed). No additional configuration on the switch is required. The incoming traffic is received by the current network card. If this card fails, another card assumes the MAC address of the failed one).

    • load: Adaptive load balancing mode. Includes the previous policy plus incoming traffic balancing. No additional configuration on the switch is required. The incoming traffic is balanced through ARP negotiation. The driver intercepts ARP responses sent from the local NICs to the outside and overwrites the source MAC address with one of the unique MAC addresses of the NIC in the bond. Thus, different peers use different server MAC addresses. The incoming traffic is balanced sequentially (round-robin) among the interfaces.

  • mii-monitoring: MII monitoring period in milliseconds. Determines how often the link state will be checked for failures.

  • down-delay: delay time (in milliseconds) before an interface is disabled if a connection failure occurs. This option is only valid for MII monitoring (miimon). The parameter value must be a multiple of miimon.

  • up-delay: delay time in milliseconds before deploying the channel if it is detected to be restored. This parameter is only valid with MII monitoring (miimon). The parameter value must be a multiple of miimon.

  • lacp-rate: interval with which the partner transmits LACPDU packets in 802.3ad mode. Enumerated options:

    • slow: request the partner to transmit LACPDU packets once every 30 seconds.

    • fast: request the partner to transmit LACPDU packets once per second.

  • failover-mac: define the assignment type of MAC addresses to bond interfaces in Active backup mode when switching interfaces. Enumerated options:

    • disabled: the same MAC address is set on all interfaces during switching.

    • active: MAC address on the bond interface is always the same as on the currently active interface. The MAC addresses on the backup interfaces are not changed. The MAC address on the bond interface changes during the failover processing.

    • follow: MAC address on the bond interface is the same as the one on the first interface added to the bond. This MAC is not set on the second and subsequent interfaces while they are in backup mode. That MAC address gets assigned during a failover: when a backup slave interface becomes active, it assumes a new MAC (the one on the bond interface), and the formerly active slave is assigned the MAC that the currently active one used to have.

  • xmit-hash: define a hash policy for sending packets over bond interfaces in XOR or IEEE 802.3ad mode. Enumerated options:

    • l2: use only MAC addresses to generate the hash. With this algorithm, the traffic for a particular network host is always sent over the same interface. This algorithm is compatible with IEEE 802.3ad.

    • l2-3: use both MAC and IP addresses to generate the hash. This algorithm is compatible with IEEE 802.3ad.

    • l3-4: uses IP addresses and transport layer protocols (TCP or UDP) to generate the hash. This algorithm is not universally compatible with IEEE 802.3ad, as both fragmented and non-fragmented packets can be transmitted within a single TCP or UDP interaction. Fragmented packets lack the source and destination ports. As a result, packets from the same session can reach the recipient in an order other than the intended one because they are sent via different slaves.

  • interface: interfaces to be bonded.

iface-mode

IP address assignment mode:

  • dhcp: obtain a dynamic IP address via DHCP.

  • manual: no address.

Static mode is set automatically when an IP address is assigned to the interface.

ip-addresses

Assign a static IP address to the interface.

IP address should be specified in the following formats: [ <ip_address/mask> ] or [ <ip_address/mask> <ip_address/mask> ] if you want to assign several addresses (they should be listed using space); use decimal format to specify network mask.

Important! Square brackets should be separated by spaces on both sides.

mac

Interface MAC address.

mtu

Specify the MTU size.

dhcp-relay

Settings for the DHCP relay on the interface. You need to specify the following:

  • enabled: enable/disable the relay:

    • on.

    • off.

  • utm-address: IP address of the UserGate interface on which the relay function is added.

  • server-address: addresses of DHCP servers where DHCP requests from clients should be redirected.

To update an existing bond interface, use the following command:

Admin@UGOS# set network interface bond <bond-name>

The parameters available to update are the same as those for creating a bond interface, except for interface-name, and node-name (you cannot change the values of these parameters).

To delete a bond interface or its parameters, use the following command:

Admin@UGOS# delete network interface bond <bond-name>

You can delete the following parameters:

Parameter

Description

ip-addresses

Specified IP address.

dhcp-relay server-address

DHCP server IP address.

bonding interface

Bonded interfaces.

To display information about all bond interfaces, use the following command:

Admin@UGOS# show network interface bond

To display information about a single interface, use the following command:

Admin@UGOS# show network interface bond <bond-name>

12.6.2.4. Bridge Interface Settings

You configure a bridge at the network interface bridge level.

To add a new bridge interface:

Admin@UGOS# create network interface bridge

You need to specify the following parameters:

Parameter

Description

enabled

Enable/disable a bridge:

  • on.

  • off.

interface-name

Enter a number to include in the interface name (for example, if you enter 1 the interface name will be bridge1).

description

Bridge interface description.

node-name

Node name of the cluster where the bridge is created.

zone

Zone to which the bridge belongs.

link-info

Settings for network interface parameters:

  • bc_forwarding: control forwarding the directed broadcast packets arriving at the specified interface.

  • proxy_arp, proxy_arp_vlan: Proxy ARP mechanism. As for proxy_arp UserGate will respond to ARP requests from addresses outside the interface network; for proxy_arp_vlan UserGate will respond to ARP requests from addresses inside the interface network.

To specify them, use the following format:

Admin@UGOS# create network interface <iface-type> ... link-info [ key/value ]

where key is the parameter name. The name can consist of lowercase Latin letters (a-z) and an underscore (_).

value is the parameter value. Parameter values can only be integers.

For example, to enable the Proxy ARP mechanism, use the following key/value: proxy_arp/1; to disable: proxy_arp/0.

The link-info field is displayed only when adding parameters.

Important! You cannot delete the specified parameters.

netflow-profile

The Netflow profile to send statistical data to the Netflow collector. For more details on Netflow profile settings, see Configuring Netflow Profiles.

bridging

Additional bridge parameters:

  • iface-type: interface mode:

    • l2: Layer 2 (you do not need to assign an IP address or specify routes and gateways for the bridge to work correctly. In this mode, the bridge works at the MAC address level by forwarding packets from one network segment to another. Mail security rules cannot be used in this case; content filtering is available in this mode).

    • l3: Layer 3 (you can assign an IP address and use it in firewall, content filtering, and other rules; this is the standard interface operation mode).

  • interface: interfaces to use to create the bridge.

  • stp: enable/disable STP (Spanning Tree Protocol) for protection against network loops:

    • on.

    • off.

  • forward-delay: delay before the bridge switches to the active mode (Forwarding) if the STP is enabled (in seconds).

  • max-age: time after which the STP connection is considered lost (in seconds).

  • bypass-pair: interface pair to use to build the bypass bridge. UserGate HSC support is required.

iface-mode

IP address assignment mode:

  • dhcp: obtain a dynamic IP address via DHCP.

  • manual: no address.

Static mode is set automatically when an IP address is assigned to the interface.

ip-addresses

Assign a static IP address to the interface.

IP address should be specified in the following formats: [ <ip_address/mask> ] or [ <ip_address/mask> <ip_address/mask> ] if you want to assign several addresses (they should be listed using space); use decimal format to specify network mask.

Important! Square brackets should be separated by spaces on both sides.

mac

Interface MAC address.

mtu

Specify the MTU size.

dhcp-relay

Settings for the DHCP relay on the interface. You need to specify the following:

  • enabled: enable/disable the relay:

    • on.

    • off.

  • utm-address: IP address of the UserGate interface on which the relay function is added.

  • server-address: addresses of DHCP servers where DHCP requests from clients should be redirected.

To update an existing bridge interface, use the following command:

Admin@UGOS# set network interface bridge <bridge-name>

The parameters available to update are the same as those for creating a bridge, except for interface-name, and** node-name** (you cannot change the values of these parameters).

To delete a bridge interface or its parameters, use the following command:

Admin@UGOS# delete network interface bridge <bridge-name>

You can delete the following parameters:

Parameter

Description

ip-addresses

Specified IP address.

dhcp-relay server-address

DHCP server IP address.

To display information about all bridge interfaces, use the following command:

Admin@UGOS# show network interface bridge

To display information about a single interface, use the following command:

Admin@UGOS# show network interface bridge <bridge-name>

12.6.2.5. PPPoE configuration

PPPoE is configured at the network interface PPPoE level.

To create a PPPoE interface, use the following command:

Admin@UGOS# network interface PPPoE

Parameters:

Parameter

Description

enabled

Enable/disable a PPPoE interface:

  • on.

  • off.

interface-name

Enter a number to include in the interface name (for example, if you enter 1 the interface name will be ppp1).

description

PPPoE interface description.

node-name

Cluster node name where the interface is created.

zone

Zone to which the interface belongs.

link-info

Settings for network interface parameters:

  • bc_forwarding: control forwarding the directed broadcast packets arriving at the specified interface.

  • proxy_arp, proxy_arp_vlan: Proxy ARP mechanism. As for proxy_arp UserGate will respond to ARP requests from addresses outside the interface network; for proxy_arp_vlan UserGate will respond to ARP requests from addresses inside the interface network.

To specify them, use the following format:

Admin@UGOS# create network interface <iface-type> ... link-info [ key/value ]

where key is the parameter name. The name can consist of lowercase Latin letters (a-z) and an underscore (_).

value is the parameter value. Parameter values can only be integers.

For example, to enable the Proxy ARP mechanism, use the following key/value: proxy_arp/1; to disable: proxy_arp/0.

The link-info field is displayed only when adding parameters.

Important! You cannot delete the specified parameters.

netflow-profile

The Netflow profile to send statistical data to the Netflow collector. For more details on Netflow profile settings, see Configuring Netflow Profiles.

pppoe-config

Additional PPPoE interface parameters:

  • interface: interface where the PPPoE interface is created.

  • login: login name for PPPoE connection.

  • password: password for PPPoE connection.

  • persist-connection: automatic reconnection in case of connection failure:

    • on.

    • off.

  • auth-type: authentication type:

    • CHAP.

    • PAP.

  • holdoff: time period (in seconds) to restart the connection after it was broken.

  • default-route: use the PPPoE interface as the default route:

    • on.

    • off.

  • lcp-echo-interval: interval to check the connection.

  • lcp-echo-failure: number of LCP echo failures after which UserGate assumes there is no connection and drops it.

  • providers-dns: use DNS servers provided by the ISP:

    • on.

    • off.

  • connection-attempts: number of unsuccessful connection attempts, after which auto-connection attempts will stop.

  • service-name: specify the service name if provided by the ISP.

mtu

Specify the MTU size. Set by default to a value of 1492 bytes compatible with the standard Ethernet frame size.

To update an existing PPPoE interface, use the following command:

Admin@UGOS# set network interface PPPoE <PPPoE-name>

The parameters available for updating are the same as those for creating an interface, except for interface-name (you cannot change this parameter value).

To delete a PPPoE interface, use the following command:

Admin@UGOS# delete network interface PPPoE <PPPoE-name>

To display information about all PPPoE interfaces, use the following command:

Admin@UGOS# show network interface PPPoE

To display information about a single interface, use the following command:

Admin@UGOS# show network interface PPPoE <PPPoE-name>

12.6.2.6. Configuring a VPN device

You configure VPN devices at the network interface vpn level.

To create a VPN device, use the following command:

Admin@UGOS# network interface vpn

Parameters:

Parameter

Description

enabled

Enable/disable a VPN interface:

  • on.

  • off.

interface-name

Enter a number to include in the interface name (for example, if you enter 1 the interface name will be tunnel1).

description

VPN interface description.

zone

Zone to which the interface belongs.

link-info

Settings for network interface parameters:

  • bc_forwarding: control forwarding the directed broadcast packets arriving at the specified interface.

  • proxy_arp, proxy_arp_vlan: Proxy ARP mechanism. As for proxy_arp UserGate will respond to ARP requests from addresses outside the interface network; for proxy_arp_vlan UserGate will respond to ARP requests from addresses inside the interface network.

To specify them, use the following format:

Admin@UGOS# create network interface <iface-type> ... link-info [ key/value ]

where key is the parameter name. The name can consist of lowercase Latin letters (a-z) and an underscore (_).

value is the parameter value. Parameter values can only be integers.

For example, to enable the Proxy ARP mechanism, use the following key/value: proxy_arp/1; to disable: proxy_arp/0.

The link-info field is displayed only when adding parameters.

Important! You cannot delete the specified parameters.

netflow-profile

The Netflow profile to send statistical data to the Netflow collector. For more details on Netflow profile settings, see Configuring Netflow Profiles.

iface-mode

IP address assignment mode:

  • dhcp: obtain a dynamic IP address via DHCP.

  • manual: no address.

Static mode is set automatically when an IP address is assigned to the interface.

If the interface is to be used for accepting VPN connections (Site-2-Site VPN or Remote access VPN), a static IP address must be used. To use an interface as a client, select the dynamic mode.

ip-addresses

Assign a static IP address to the interface.

IP address should be specified in the following formats: [ <ip_address/mask> ] or [ <ip_address/mask> <ip_address/mask> ] if you want to assign several addresses (they should be listed using space); use decimal format to specify network mask.

Important! Square brackets should be separated by spaces on both sides.

mtu

Specify the MTU size for the selected interface.

To update an existing VPN interface, use the following command:

Admin@UGOS# set network interface vpn <vpn-name>

The parameters available for updating are the same as those for creating an interface, except for interface-name (you cannot change this parameter value).

To delete a VPN interface or its parameters, use the following command:

Admin@UGOS# delete network interface vpn <vpn-name>

You can delete the following parameters: ip-addresses.

To display information about all VPN interfaces, use the following command:

Admin@UGOS# show network interface vpn

To display information about a single interface, use the following command:

Admin@UGOS# show network interface vpn <vpn-name>

12.6.2.7. Configuring tunnels

You create and configure tunnels at the network interface tunnel level.

To create a tunnel, use the following command:

Admin@UGOS# network interface tunnel

Parameters:

Parameter

Description

enabled

Enable/disable the tunnel:

  • on.

  • off.

interface-name

Enter a number to include in the tunnel name (for example, if you enter 1 the interface name will be gre1).

description

Tunnel description.

node-name

Cluster node where the tunnel is created.

zone

Zone to which the interface belongs.

link-info

Settings for network interface parameters:

  • bc_forwarding: control forwarding the directed broadcast packets arriving at the specified interface.

  • proxy_arp, proxy_arp_vlan: Proxy ARP mechanism. As for proxy_arp UserGate will respond to ARP requests from addresses outside the interface network; for proxy_arp_vlan UserGate will respond to ARP requests from addresses inside the interface network.

To specify them, use the following format:

Admin@UGOS# create network interface <iface-type> ... link-info [ key/value ]

where key is the parameter name. The name can consist of lowercase Latin letters (a-z) and an underscore (_).

value is the parameter value. Parameter values can only be integers.

For example, to enable the Proxy ARP mechanism, use the following key/value: proxy_arp/1; to disable: proxy_arp/0.

The link-info field is displayed only when adding parameters.

Important! You cannot delete the specified parameters.

mtu

The MTU size for the selected interface.

tunnel-config

Additional interface parameters:

  • local-ip: Point-to-Point interface local address.

  • remote ip: Point-to-Point interface remote address.

  • iface-mode: tunnel mode:

    • gre: GRE (a network packet tunneling protocol developed by Cisco Systems. Its main purpose is to encapsulate network layer packets into IP packets. The IP protocol number is 47).

    • ipip: IPIP (an IP tunneling protocol that encapsulates one IP packet in another IP packet. Encapsulating one IP packet in another IP packet adds an external header with Source IP which is the entry point into the tunnel, and Destination which is the exit point out of the tunnel).

    • vxlan: VXLAN (tunneling protocol from Layer 2 Ethernet frames to UDP packets, port 4789).

  • vni: VXLAN ID. Relevant only for a VXLAN tunnel.

ip-addresses

The IP address assigned to the tunnel interface.

IP address should be specified in the following formats: [ <ip_address/mask> ] or [ <ip_address/mask> <ip_address/mask> ] if you want to assign several addresses (they should be listed using space); use decimal format to specify network mask.

Important! Square brackets should be separated by spaces on both sides.

To update an existing tunnel, use the following command:

Admin@UGOS# set network interface tunnel <tunnel-name>

The parameters available for update are the same as those for creating a tunnel, except for interface-name, and node-name (you cannot change these parameter values).

To delete a tunnel interface or its parameters, use the following command:

Admin@UGOS# delete network interface tunnel <tunnel-name>

You can delete the following parameters: ip-addresses.

To display information about all tunnels, use the following command:

Admin@UGOS# show network interface tunnel

To display information about a single interface, use the following command:

Admin@UGOS# show network interface tunnel <tunnel-name>