MMLAN all -- 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP)
target prot opt source destination
Chain OUTPUT (policy DROP)
target prot opt source destination
MMLAN all -- 0.0.0.0/0 0.0.0.0/0
Chain MMLAN (2 references)
target prot opt source destination
ACCEPT udp -- 192.168.0.0/24 192.168.0.1 udp dpts:7000:7100
ACCEPT udp -- 192.168.0.1 192.168.0.0/24 udp spts:7000:7100
ACCEPT udp -- 192.168.0.0/24 192.168.0.1 udp dpt:162
ACCEPT udp -- 192.168.0.1 192.168.0.0/24 udp spt:162
ACCEPT udp -- 192.168.1.5 192.168.0.1 udp dpts:7000:7100
ACCEPT udp -- 192.168.0.1 192.168.1.5 udp spts:7000:7100
ACCEPT udp -- 192.168.1.5 192.168.0.1 udp dpt:162
ACCEPT udp -- 192.168.0.1 192.168.1.5 udp spt:162
Note
After changing the IP address of the management LAN interface, delete the settings once, and set their values
again. For details on how to delete the settings, see (7) Configuration deletion procedure in 4.11 Firewall
Setting Command for the Management LAN Interface (setmlanfw.sh) in the
PRIMEQUEST 1000 Series Tool
Reference
(C122-E110EN).
[For PSA version 2.6 or later]
Add the "MMLAN" setting chain to INPUT and OUTPUT chains. At this time, take care to prevent
interruptions by an existing REJECT setting in an INPUT or OUTPUT chain or by a user definition chain.
Example: REJECT setting in INPUT and FORWARD
# iptables –L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
PRIMEQUEST 1000 Series Installation Manual
CHAPTER 6 Work after Operating System Installation (PRIMEQUEST 1800E)
137
C122-E107-09EN