• NetExtender for Secure Mobile Access 10.2
• NetExtender Overview
  • What is NetExtender
  • NetExtender Concepts
    • Stand-Alone Client
    • NetExtender Supports Network logon (PreLogon)
    • NetExtender Supports Always On VPN (AOV)
    • Multiple Ranges and Routes
    • IP Address User Segmentation
    • Client Routes
    • Tunnel All Mode
    • Proxy Configuration
  • Supported Platforms
    • NetExtender Client Versions
    • Supported Clients
    • Supported SonicWall Appliances
  • What's New in NetExtender
  • Feature Support in NetExtender
  • Deprecated Feature
• Configuring NetExtender for Windows Client
  • Prerequisites
  • Support Enhancement
  • Installing NetExtender on Windows
  • Enabling Network Logon (PreLogon) Feature on NetExtender
  • Enabling Always-On VPN Connection
  • Installing NetExtender through Microsoft Installer
  • Auto-Run NetExtender
• Configuring NetExtender for Linux Client
  • Prerequisites
  • Installing NetExtender on Linux
• Using NetExtender
  • Adding Connection Profile Management
  • Editing Connection Profile Management
  • Connect with Connection Profile
  • Connect with Specific Protocol
  • Multiple Factor Authentication
    • TOTP Authentication
    • Client Certificate Authentication
    • Smart Card Authentication
    • DUO Security Authentication Support for NetExtender
      • DUO Security Authentication with NetExtender Windows
      • DUO Security Authentication with NetExtender Linux
  • Configuring NetExtender Properties
    • NetExtender Properties for Windows Client
      • Configuring Settings
      • Configuring Connection Settings
      • Configuring Connection Script
      • Configuring Proxy
      • Configuring Packet Capture
    • NetExtender Properties for Linux Client
      • Configuring Proxy
      • Configuring Certificate Settings
      • Configuring Settings
  • Viewing the NetExtender Log
  • Disconnecting NetExtender
  • Upgrading NetExtender
  • Uninstalling NetExtender
• Using the NetExtender Command Line Interface
  • Launching the NetExtender CLI for Windows
  • Launching the NetExtender CLI for Linux
• NetExtender Troubleshooting
• NetExtender FAQ
• Use Case
  • Adding Connection Profile
  • Editing Connection Profile
  • OTP Authentication
  • Certificate Authentication
  • Authentication with Smart Card
• SonicWall Support
  • About This Document

Launching the NetExtender CLI for Windows

To launch the NetExtender CLI for Windows

1. Type 'CLI' in the search box, click NetExtender CLI Client(for exe) or Sonicwall NetExtender CLI(for msi).

2. Change directory to where NetExtender is installed. Type cd Program Files\SonicWall\SSL-VPN\NetExtender.

   The specific command directory could be different on your computer. Use Windows Explorer to find the directory path where NetExtender is located.

   NetExtender CLI commands and options

   Usage	Available Commands	Option	Description
   nxcli [OPTIONS]	connect		Connect to VPN server
   	disconnect		Disconnect current VPN server
   	connection		Create, delete or list connections
   	cancel		Cancel current connect
   	status		Check the VPN connection status
   	proxy		VPN proxy operations
   	log		Exports logs
   	nxcli [OPTIONS]	-h	To view submenu
   nxcli connect [OPTIONS]	connection name (Optional when user has default connection profile)		To connect to the default connection
   nxcli disconnect			To disconnect connected connection
   nxcli connection [OPTIONS]	add [OPTIONS]	connection name	To add the connection you should input connection name
   		-s host name [:port] (default port is 443)	To add the connection you should input connection name and host name.
   		-d domain name	To add the connection, input connection name, host name and domain name.
   		-u user name (optional)	To add the connection, input connection name, username, password and protocol
   		-p password (optional)
   		-v vpn protocol (optional)
   	list [OPTIONS]		To list all connections saved in the file
   	list [OPTIONS]	connection name (optional)	To list the specific connection
   	delete [OPTIONS]	connection name	To delete the connection by providing the connection name.
   	find [OPTIONS]	connection name (optional)	To find all the connections
   		-s host name [:port] (optional)	To find all the connections, including host name.
   	nxcli connection [OPTIONS]	-h	To show help
   nxcli cancel			To cancel the connection
   nxcli status			To make sure of connected status
   nxcli proxy [OPTIONS]	view		To view proxy configuration
   nxcli proxy [OPTIONS]	set [OPTIONS]		To set proxy configuration
   		-t proxy type [0 |1 |2 |3]	To set the proxy type, should input 0 - disable proxy 1 - Automatic detect settings 2 - Configuration script 3 - proxy server.
   		-s proxy address (optional)
   		-o port (optional)
   		-u user name (optional)
   		-p password (optional)
   		-b bypass proxy (optional)
   nxcli log [OPTIONS]	export		To export log
   	debug [OPTIONS]
   		on	To enable debug log
   		off	To disable the debug log
   	nxcli log [OPTIONS]	-h	To shows help
   If the user enables OTP authentication, the CLI gives a menu for the user to select the method.
   nxcli connect [OPTIONS]			If user want to change OTP method.
   	1. Select OTP method
   		0 email
   		1 app
   		2 backup code
   	2. Input OTP code		To input your code If the user input the wrong code, the server message appears as "Invalid password, please try again".
   	3. Cancel
   If the user enables PDA authentication, the CLI ask your confirmation to proceed.
   nxcli connect [OPTIONS]			If the user wants to change the OTP method.
   	d. Do you want to proceed?
   		A: Accept
   		D: Decline
   If the user enables DUO or SAML authentication, the CLI open browser to do authenticate.
   If user use Certificate, CLI show the list of certificate to select the certificate to login.
   nxcli connect [OPTIONS]
   	Please select your connect certificate	Please input your select: 0 or 1 or 2
   If the user uses Smart Card, the CLI ask the user to input a PIN after the user selects the certificate.
   NetExtender will do an EPC check automatically
   If a user needs to change their password, the CLI asks them to input their old password and new password. The CLI will auto-reconnect after the password change is successful.