Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 440 / 2354

ip service IP Commands
page 10-22 OmniSwitch CLI Reference Guide March 2011
ip service
Enables (opens) or disables (closes) well-known or user-defined TCP/UDP service ports. Selectively
enabling or disabling these types of ports provides an additional method for protecting against unautho-
rized switch access or Denial of Service (DoS) attacks.
ip service {all | service_name | port service_port} admin-state {enable | disable}
Syntax Definitions
all Configures access to all TCP/UDP ports.
service_name The name of the TCP/UDP service to enable or disable. (Refer to the
table in the “Usage Guidelines” section below for a list of supported
service names.)
service_port A TCP/UDP service port number. Configures access by port number
rather than by service name. (Refer to the table in the “Usage Guide-
lines” section below for a list of well-known port numbers.) If a user-
defined port number is specified, the valid range is 20000–20999.
enable Enables access to the service.
disable Disables access to the service.
Defaults
All TCP/UDP ports are open by default.
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
This command only applies to TCP/UDP service ports opened by default. It does not affect ports that
are opened by applications, such as RIP, BGP, etc.
•
Use the all option with this command to configure access to all well-known TCP/UDP service ports.
•
To designate which port to enable or disable, specify either the name of a service or the well-known
port number associated with that service. Note that specifying a name and a port number in a single
command line is not supported.
•
When using service names, it is possible to specify more than one service in a single command line by
entering each service name separated by a space. See the examples below.
•
When specifying a service port number, note that the port keyword is required and that only one port
number is allowed in a single command.