Security CLI Commands
2/1553-ZAT 759 94 Uen B – December 2005
557
19.16
security add trigger tcp|udp
19.16.1 Syntax
security add trigger <name> {tcp|udp} <startport>
<endport> <maxactinterval>
19.16.2 Description
This command adds a trigger to the Security module. A trigger allows an
application to open a secondary port in order to transport packets.
Some applications, such as FTP, need to open secondary ports – they have a
control session port (21 for FTP) but also need to use a second port in order to
transport data. Adding a trigger means that you do not have to define static
portfilters to open ports for each potential use (or misuse, see the command
security set IDS SCANattackblock
) until the portfilters were deleted.
A trigger opens a secondary port dynamically, and allows you to specify the
length of time that it can remain inactive before it is closed.
19.16.3 Options
The following table gives the range of values for each option which can be
specified with this command and a default value (if applicable).
Option Description
Default
value
name
An arbitrary name that identifies the
trigger. It can be made u p of one or
more letters or a combination of letters
and digits, but it cannot start with a
digit.
N/A
tcp
Adds a trigger for a TCP application to
the security package.
N/A
udp
Adds a trigger to a UDP application to
the security package.
N/A
startport
Sets the start of the trigger port range
for the control session.
N/A
endport
Sets the end of the trigger port range
for the control session.
N/A
