Zone Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
703
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
(vii) Managing the box
ALU(config)# match-list trust-manage
ALU(config-match-list-trust-manage)# 1 tcp list trust list
SG8 service ssh
ALU(config-match-list-trust-manage)# 2 tcp list trust list
SG8 service telnet
(viii) DMZ
ALU(config)# match-list DMZ-Trust
ALU(config-match-list-DMZ-Trust)# ip any any
5. RFC 1918 Compliance Rules.
ALU(config)# list 1918 prefix 10.0.0.0/8 prefix 172.16.0.0/
12 prefix 192.168.0.0/16 prefix 0.0.0.0/8 prefix 14.0.0.0/8
prefix 127.0.0.0/8
ALU(config)# match-list RFC-1918
ALU(config-match-list-RFC-1918)# 1 ip list 1918 list Trust
ALU(config-match-list-RFC-1918)# 2 ip list 1918 list DMZ
6. Rules for Managing the Box from Untrust, DMZ and Trust Zone Through
SSH and Telnet.
ALU(config)# list untrust-manage host 202.24.45.100
ALU(config)# list dmz-manage host 172.16.0.132
ALU(config)# list trust-mange host 10.0.0.1 host
192.168.1.1 host 172.16.0.1/25
7. Configuring the Match-lists For Inband Management Through SSH and
Telnet.
ALU(config)# match-list manage-untrust
ALU(config-match-list-manage-untrust)# tcp any list untrust-
manage service telnet
ALU(config-match-list-manage-untrust)# tcp any list untrust-
manage service ssh
8. Configuring Rules for DoS Protection.
ALU(config)# match-list DoS
ALU(config-match-list-DoS)# 1 ip any list trust
ALU(config-match-list-DoS)# 2 ip any list DMZ
9. Configuring Rule for SNATing the Trusted and DMZ Network.
ALU(config)# match-list source-nat
ALU(config-match-list-source-nat)# 1 ip list Trust any
ALU(config-match-list-source-nat)# 2 ip list DMZ any
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...