Chapter 4 Function/System Settings and Display
4.3 Network Management > set firewall
ETERNUS CLI User’s Guide
Copyright 2015 FUJITSU LIMITED
P2X0-1030-09ENZ0
465
■
Example(s)
-snmp
Optional. This parameter specifies if the "SNMP" application port is opened or closed. If
omitted, the existing setting is not changed. This parameter cannot be specified when "-port
fst" is specified. The initial state is "open".
open
Application port "SNMP" is opened.
close
Application port "SNMP" is closed.
-rcil
Optional. This parameter specifies if the "RCIL" application port is opened or closed. If omitted,
the existing setting is not changed. This parameter cannot be specified when "-port remote" or
"-port fst" is specified. The initial state is "open".
open
Application port "RCIL" is opened.
close
Application port "RCIL" is closed.
-ip-redirect-test
Optional. This parameter specifies whether to enable the IP forwarding. If omitted, the existing
setting is not changed. This parameter cannot be specified when "-port remote" or "-port fst" is
specified. The initial state is "close".
When IP forwarding cannot be set (this parameter is unavailable), the initial state is "open".
open
The IP forwarding is enabled.
close
The IP forwarding is disabled.
-confirm-close-all
Optional. Specify "-confirm-close-all yes" to disable all of the service ports for both GUI and CLI
connections.
This parameter must be specified in either of the following cases:
•
When disabling all of the service ports for both GUI and CLI connections (HTTP, HTTPS, telnet, and
SSH)
•
When disabling both of the service ports for CLI connections (telnet and SSH)
In all other cases, this parameter is ignored. For example, if a command such as "set firewall -
port remote -icmp close -confirm-close-all no" is entered, the command is executed with
exactly the same result as if the ICMP service protocol was disabled normally.
yes
Only required when all of the GUI and CLI related service ports are disabled.
no
Handled as "no operation".
The following example closes all the service ports, except the SSH service for CLI:
CLI> set firewall -port remote -http close -https close -telnet close -maintenance-secure close -icmp close -snmp close
CLI> set firewall -port maintenance -http close -https close -telnet close -maintenance-secure close -icmp close -snmp close
CLI> set firewall -port fst -http close -https close -telnet close -maintenance-secure close -icmp close -rcil close -ip-redi-
rect-test close
The following example closes all the service ports involved in both GUI and CLI connections:
CLI> set firewall -port remote -http close -https close -telnet close -ssh close -confirm-close-all yes
CLI> set firewall -port maintenance -http close -https close -telnet close -ssh close -confirm-close-all yes
CLI> set firewall -port fst -http close -https close -telnet close -ssh close -confirm-close-all yes
Summary of Contents for Eternus DX410 S2
Page 2: ...This page is intentionally left blank ...
Page 756: ......