HP TippingPoint Next Generation Firewall Series Guía de usuario Pagina 155

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 252
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 154
NGFW Command Line Interface Reference 147
Syntax
schedule (include|exclude) SCHEDULENAME
Example
NGFW{running-firewall-rule-myrule1}schedule include myhours1
NGFW{running-firewall-rule-myrule1}schedule exclude myhours1
NGFW{running-firewall-rule-myrule1}services
Apply IP Services.
Syntax
services (include|exclude) (service SERVICENAME)
services (include|exclude) (protocol PROTONUM)
services (include|exclude) (port tcp PORT [to PORT])
services (include|exclude) (port udp PORT [to PORT])
services (include|exclude) (icmp ICMP-CODENAMES|(TYPE [CODE]))
services (include|exclude) (icmpv6 ICMP6-CODENAMES|(TYPE [CODE]))
Example
NGFW{running-firewall-rule-myrule1}services include protocol 6
NGFW{running-firewall-rule-myrule1}services include port tcp 443
NGFW{running-firewall-rule-myrule1}services include service http
NGFW{running-firewall-rule-myrule1}services exclude icmpv6 any
NGFW{running-firewall-rule-myrule1}src-address
Apply source addresses.
Syntax
src-address include (any4|any6)
src-address include group ADDRESSGROUP
src-address include ipaddress (A.B.C.D|X:X::X:X)
src-address include ipaddress (A.B.C.D/M|X:X::X:X/M)
src-address include range ((A.B.C.D A.B.C.D)|(X:X::X:X X:X::X:X))
src-address exclude (any4|any6)
src-address exclude group ADDRESSGROUP
src-address exclude ipaddress (A.B.C.D|X:X::X:X)
src-address exclude ipaddress (A.B.C.D/M|X:X::X:X/M)
src-address exclude range ((A.B.C.D A.B.C.D)|(X:X::X:X X:X::X:X))
Example
NGFW{running-firewall-rule-myrule1}src-address exclude ipaddress 192.168.1.1
NGFW{running-firewall-rule-myrule1}src-address include ipaddress 192.168.1.0/24
NGFW{running-firewall-rule-myrule1}src-address include range 192.168.1.100
192.168.1.200
NGFW{running-firewall-rule-myrule1}src-address include group mygroup1
NGFW{running-firewall-rule-myrule1}src-zone
Apply source security zone.
Syntax
src-zone (include|exclude) ZONENAME
Example
NGFW{running-firewall-rule-myrule1}src-zone include myzone1
NGFW{running-firewall-rule-myrule1}src-zone exclude myzone1
Vista de pagina 154
1 2 ... 150 151 152 153 154 155 156 157 158 159 160 ... 251 252

Comentarios a estos manuales

Sin comentarios