Contents

Data analysis center commands· 1

dac email-server client-authentication enable· 1

dac email-server dns-server 1

dac email-server password· 2

dac email-server secure-authentication enable· 3

dac email-server sender 3

dac email-server server-address· 4

dac email-server username· 5

dac report 5

dac storage· 6

display dac email-server 8

display dac report 8

display dac storage· 9

Data analysis center commands

dac email-server client-authentication enable

Use dac email-server client-authentication enable to enable email client authentication.

Use undo dac email-server client-authentication enable to disable email client authentication.

Syntax

dac email-server client-authentication enable

undo dac email-server client-authentication enable

Default

Email client authentication is disabled.

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

Enable email client authentication on the device if the email server (specified by the dac email-server server-address command) requires client identity authentication.

For successful email client authentication, you must configure the correct username and password for connecting to the email server.

Examples

# Enable email client authentication.

<Sysname> system-view

[Sysname] dac email-server client-authentication enable

Related commands

dac email-server server-address

dac email-server username

dac email-server password

dac email-server dns-server

Use dac email-server dns-server to specify the DNS server address.

Use unto dac email-server dns-server to restore the default.

Syntax

dac email-server dns-server ip-address

undo dac email-server dns-server

Default

No DNS server address is specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

ip-address: Specifies the IPv4 address of the DNS server, in dotted decimal notation.

Usage guidelines

The DNS server is required if you specify the host name of the email server. The DNS server resolves the host name into the IP address before the device sends emails through the email server.

Examples

# Set the DNS server address to 192.168.0.1.

<Sysname> system-view

[Sysname] dac email-server dns-server 192.168.0.1

dac email-server password

Use dac email-server password to set the password for connecting to the email server.

Use unto dac email-server password to restore the default.

Syntax

dac email-server password { cipher | simple } string

undo dac email-server password

Default

The password for connecting to the email server is not specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 63 characters. Its encrypted form is a case-sensitive string of 1 to 117 characters.

Usage guidelines

Both the username and password for connecting to the email server are required if email client authentication is enabled.

If you configure this command multiple times, the most recent configuration takes effect.

Examples

# Specify abc123 as the password for connecting to the email server.

<Sysname> system-view

[Sysname] dac email-server password simple abc123

Related commands

dac email-server client-authentication enable

dac email-server username

dac email-server secure-authentication enable

Use dac email-server secure-authentication enable to enable secure transmission of authentication credentials.

Use undo dac email-server secure-authentication enable to disable secure transmission of authentication credentials.

Syntax

dac email-server secure-authentication enable

undo dac email-server secure-authentication enable

Default

Secure transmission of authentication credentials is disabled.

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

This command enables the device to transmit email client authentication credentials to the email server over a secure channel.

This command takes effect only after email client authentication is enabled.

Examples

# Enable secure transmission of authentication credentials.

<Sysname> system-view

[Sysname] dac email-server secure-authentication enable

Related commands

dac email-server client-authentication enable

dac email-server sender

Use dac email-server sender to specify the email sender address.

Use undo dac email-server sender to restore the default.

Syntax

dac email-server sender address-string

undo dac email-server sender

Default

The email sender address is not specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

address-string: Specifies the email sender address, as case-sensitive string of 3 to 63 characters.

Usage guidelines

The data analysis center uses the specified email sender address send emails.

Examples

# Specify mailto:abc@123.com as the email sender address.

<Sysname> system-view

[Sysname] dac email-server sender abc@123.com

Related commands

dac email-server server-address

dac email-server server-address

Use dac email-server server-address to specify the email server address for the data analysis center.

Use undo dac email-server server-address to restore the default.

Syntax

dac email-server server-address address-string

undo dac email-server server-address

Default

No email server is specified for the data analysis center.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

address-string: Specifies the IP address or host name of the email server. The host name is a case-sensitive string of 3 to 63 characters.

Usage guidelines

The data analysis center can send emails only after the both email server address and email sender address are configured.

If you configure this command multiple times, the most recent configuration takes effect.

Examples

# Specify 101.1.1.255 as email server address for the data analysis center.

<Sysname> system-view

[Sysname] dac email-server server-address 101.1.1.225

Related commands

dac email-server sender

dac email-server username

Use dac email-server username to set the username for connecting to the email server.

Use undo dac email-server username to restore the default.

Syntax

dac email-server username username

undo dac email-server username

Default

The username for connecting to the email server is not specified.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

username: Specifies the username, a case-sensitive string of 1 to 63 characters.

Usage guidelines

If you configure this command multiple times, the most recent configuration takes effect.

Examples

# Specify admin as the username for connecting to the email server.

<Sysname> system-view

[Sysname] dac email-server username admin

Related commands

dac email-server client-authentication enable

dac email-server password

dac report

Use dac report to configure a subscriber for a report type.

Use undo dac report to remove subscribers for a report type.

Syntax

dac report type { comparison | integrated | intelligent | summary } subscriber mail-address

undo dac report type { comparison | integrated | intelligent | summary } [ subscriber mail-address ]

Default

No report subscribers are configured.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

comparison: Specifies the comparison report.

integrated: Specifies the integrated report.

intelligent: Specifies the intelligent report.

summary: Specifies the summary report.

subscriber mail-address: Specifies the email address of the report subscriber, a case-sensitive string of 3 to 63 characters.

Usage guidelines

You can configure a maximum of 50 subscribers for each report type.

If you do not specify a subscriber, the undo command removes all subscribers for the specified report type.

Examples

# Specify subscriber address mailto:admin@qq.com for the summary report.

<Sysname> system-view

[Sysname] dac report type summary subscriber admin@qq.com

# Remove subscriber address mailto:admin@qq.com for the summary report.

<Sysname> system-view

[Sysname] undo dac report type summary subscriber admin@qq.com

dac storage

Use dac storage to configure the data storage limits for a service.

Use undo dac storage to restore the default.

Syntax

dac storage service { audit | file-filter | threat | traffic | url-filter } limit { hold-time time-value | usage usage-value | action { delete | log-only } }

undo dac storage service { audit | file-filter | threat | traffic | url-filter } limit { hold-time | usage | action }

Default

The service data can be saved for a maximum of 365 days.

The data of each service can occupy up to 20% of the total storage space.

If the storage time or storage space usage limit is exceeded, the system deletes the expired or the oldest data.

Views

System view

Predefined user roles

network-admin

Parameters

audit: Specifies the audit service.

file-filter: Specifies the file filtering service.

threat: Specifies the threat service, which include IPS and anti-virus.

traffic: Specifies the traffic service.

url-filter: Specifies the URL filtering service.

limit: Configures the data storage limits for a service.

hold-time time-value: Specifies the storage time limit in days. The value range is 1 to 65535. The storage time limit should be longer than the number of days that the oldest service data has been stored for.

usage usage-value: Specifies the percentage of the total storage space the service data can occupy. The value range is 1 to 100. The storage usage limit should be higher than the current storage usage of the service.

action: Specifies the action to take when a data storage limit is exceeded.

delete: Deletes data collected on the oldest dates and generates a log message. The data of the current date cannot be deleted.

log-only: Generates a log message only. When a storage limit is exceeded, old data are not deleted and new data cannot be saved.

Usage guidelines

The data analysis center periodically checks the data of each service to determine if the storage time or storage space usage limit is exceeded.

·     If a storage limit is exceeded and the action is delete, the system deletes the expired or the oldest service data. A log will be generated to report the event.

·     If a storage limit is exceeded and the action is log-only, the system generates a log message. New data will not be saved.

If you configure this command to set the storage time limit for a service multiple times, the most recent configuration takes effect. The same is true for setting the storage space limit or storage limit-violated action for a service. You can view the storage space usage of each service on the Web interface.

This command is supported only on the default context. For more information about contexts, see context configuration in Virtual Technologies Configuration Guide.

Examples

# Set the storage time limit, storage space limit, and the action to take when the limits are exceeded for the traffic service.

<Sysname> system-view

[Sysname] dac storage service traffic limit hold-time 60

[Sysname] dac storage service traffic limit usage 30

[Sysname] dac storage service traffic limit action delete

display dac email-server

Use display dac email-server to display the email server configuration of the data analysis center.

Syntax

display dac email-server

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Examples

# Display the email server configuration of the data analysis center.

<Sysname> display dac email-server

Mail server address : 2.2.2.2

        Mail sender address : qqq@11.com

         DNS server address : 1.1.1.1

             Authentication : Enable

      secure-authentication : Enable

                   Username : lkx

                   password : ******

Table 1 Command output

Field	Description
Authentication	Enabling status of the email client authentication.
Secure-authentication	Enabling status of the secure transmission of authentication credentials.
Username	Username for connecting to the email server.
Password	Password for connecting to the email server.

 

display dac report

Use display dac report to display report subscriber information.

Syntax

display dac report [ comparison | integrated | intelligent | summary ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

comparison: Specifies the comparison report.

integrated: Specifies the integrated report.

intelligent: Specifies the intelligent report.

summary: Specifies the summary report.

Usage guidelines

If you do not specify a report type, this command displays subscriber information for all report types.

Examples

# Display subscriber information for all report types.

<Sysname> display dac report

Total subscribers:4

Summary subscribers:1

Comparison subscribers:1

Intelligent subscribers:1

Integrated subscribers:1

Report type         Subscriber email address

Summary             124@123.com

Comparison          111@123.com

Intelligent         123@123.com

Integrated          112@123.com

Table 2 Command output

Field	Description
Total subscribers	Total number of subscribers.
Summary subscribers	Number of subscribers for the summary report.
Comparison subscribers	Number of subscribers for the comparison report.
Intelligent subscribers	Number of subscribers for the intelligent report.
Integrated subscribers	Number of subscribers for the integrated report.
Subscriber email address	Email address of a report subscriber.

 

display dac storage

Use display dac storage to display the data storage limit configuration for services.

Syntax

display dac storage [ audit | file-filter | threat | traffic | url-filter ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

audit: Specifies the audit service.

file-filter: Specifies the file filtering service.

threat: Specifies the threat service, which include IPS and anti-virus.

traffic: Specifies the traffic service.

url-filter: Specifies the URL filtering service.

Usage guidelines

If you do not specify a service, this command displays the data storage limit configuration for all services.

This command is supported only on the default context. For more information about contexts, see context configuration in Virtual Technologies Configuration Guide.

Examples

# Displays the data storage limit configuration for all services.

<Sysname> display dac storage

Total services        :5

 

Service          Time limit (days)  Usage limit      Action

audit            365                70%              log-only

traffic          128                50%              delete

threat           30                 30%              delete

url-filter       7                  10%              delete

file-filter      50                 10%              delete

Table 3 Command output

Field	Description
Total services	Total number of services.
Service	Service type.
Time limit	Storage time limit in days.
Usage limit	Storage space usage limit in percentage.
Action	Action to take when the storage time limit or space limit is exceed. ·     delete—Delete the oldest data, and generates a log message. ·     log-only—Generate a log message only.