For more information on using the CGI interfaces, see mGuard Application Notes (UM EN MGUARD APPNOTES), available at phoenixcontact.net/products or help.mguard.com.
19Appendix
The additional HTTPS interfaces nph-vpn.cgi, nph-diag.cgi, nph-status.cgi and nph-action.cgi are implemented as CGI (Common Gateway Interface) scripts.
For more information on using the CGI interfaces, see mGuard Application Notes (UM EN MGUARD APPNOTES), available at phoenixcontact.net/products or help.mguard.com. |
When executing the CGI scrips nph-vpn.cgi, nph-diag.cgi, nph-status.cgi and nph-action.cgi, only the following characters may be used in user names, passwords, and other user-defined names (for example, the name of a VPN connection): –Letters: A - Z, a - z –Digits: 0 - 9 –Special characters: - . _ ~
If other special characters, such as "space" or the "question mark", are used, they must be encoded accordingly (URL encoding). |
Using the command line tool wget only functions in combination with mGuard firmware versions < 8.4.0. From mGuard firmware Version 8.4.0, the command line tool curl can be used (parameters and options differ!). Example: wget --no-check-certificate "https://admin:mGuard@192.168.1.1/nph-vpn.cgi?name=Athen&cmd=up" curl --insecure "https://admin:mGuard@192.168.1.1/nph-vpn.cgi?name=Athen&cmd=up" The option --no-check-certificate (wget) or --insecure (curl) ensures that the HTTPS certificate on the mGuard does not undergo any further checking. |
(Space) |
! |
" |
# |
$ |
% |
& |
' |
( |
) |
* |
+ |
|---|---|---|---|---|---|---|---|---|---|---|---|
%20 |
%21 |
%22 |
%23 |
%24 |
%25 |
%26 |
%27 |
%28 |
%29 |
%2A |
%2B |
, |
/ |
: |
; |
= |
? |
@ |
[ |
\ |
] |
{ |
| |
} |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
%2C |
%2F |
%3A |
%3B |
%3D |
%3F |
%40 |
%5B |
%5C |
%5D |
%7B |
%7C |
%7D |
The following commands can be executed on the command line of the mGuard by the users root and admin.
Command |
Parameter |
Description |
|---|---|---|
mg update |
patches |
An automatic online update will be started. The required package set will be determined automatically by the mGuard (see“Automatic Update” on page 91). Patch-Releases resolve errors in previous versions and have a version number which only changes in the third digit position. |
minor |
Minor- und major releases supplement the mGuard with new properties or contain changes that affect the behavior of the mGuard . Their version number changes in the first or second digit position. |
|
major |
||
mg status |
/network/dns-servers |
Used DNS server Names of the DNS servers used by the mGuard for name resolution. |
/network/if-state/ext1/gw |
Current default route The IP address that the mGuard uses to try to reach unknown networks. |
|
/network/if-state/ext1/ip |
External IP address The addresses via which the mGuard can be accessed by devices from the external network. In Stealth mode, the mGuard adopts the address of the locally connected computer as its external IP. |
|
/network/if-state/ext1/netmask |
Net mask of the external |
19.3LED status indicator and blinking behavior
With the help of built-in LED diodes, mGuard devices indicate different system states. This can be status, alarm or error messages.
The states are indicated by permanent or temporary lighting or blinking of the LEDs. The displayed LED pattern can also represent a combination of different system states.
NOTE: Since several system states are indicated by the LEDs not clearly, only temporarily or in combination with other system states, the log files of the mGuard device must also be checked! |
LED diodes of FL/TC MGUARD (RS200x/RS400x) devices:
P1 |
Stat |
Mod |
Info2 (Sig) |
|
|
|
|
|
|
|
|
P2 |
Err |
Fault |
Info1 |
P1 / P2
LEDs P1 and P2 indicate which of the two power supplies is connected (devices of the FL/TC MGUARD RS2000 series: only P1 is available).
Info 2 / Info 1 (the LED Sig is not in use)
Active VPN connections or (as of Version 8.1) active firewall rule records can be indicated via the LEDs Info2 and Info1. The activation of the LEDs by a certain VPN connection or a certain firewall rule record is configured on the mGuard interface in the menu item Management >> Service Contacts.
The following states will be indicated:
ON |
The VPN connection is established / the firewall rule record is set. |
Blink |
The VPN connection will be established or released or has been stopped/disabled by the remote peer. |
OFF |
The VPN connection is stopped/disabled on both peers. |
Stat / Mod / Err / Fault
The LEDs Stat, Mod, Err and Fault indicate system states (status, alarm or error messages) (see Table 19-5).
In addition to the alarm messages, an illuminated Fault LED generally also indicates that the device is currently not in operation mode.
LAN / WAN
The LAN/WAN LEDs are located in the LAN/WAN sockets (10/100 and duplex LED).
The LEDs Indicate the ethernet status of the LAN or WAN port. As soon as the device is connected to the relevant network, a continuous light indicates that there is a connection to the network partner in the LAN or WAN. When data packets are transmitted, the LED goes out briefly.
If all LAN/WAN LEDs are illuminated, the system is booting.
Bar graph and SIM1/2 (Mobile)
19.3.2LED lighting and blinking behavior
19.3.3Representation of system states
The system states (status, alarm or error messages), which are displayed by the LED's lighting and blinking behavior, are shown in Table 19-5.
