portConfig
portConfig subcommand [arguments]
portConfig
manages named sets of rules which describe allowable ports, protocols, and port
translations used in Proxy Access Control. The portConfig command is organized as a set of
subcommands, each of which supports different parameters and options. Most portConfig
subcommands provide the option to operate directly on the active portConfig table of a running
Ranger Gateway in real time, or to work offline with text files, which can be inspected and edited
using a text editor, then installed on the Ranger Gateway when required modifications have been
completed.
subcommand
can be one of the following:
•
copy [–in
input_file] [-out output_file]
•
add [–in
input_file] [-out output_file] port-config-name transport
rg-port protocol [zr-port]
•
remove [–in
input_file] [-out output_file] port-config-name
[
transport] [rg-port] [protocol] [zr-port]
•
merge [–in
input_file] [-out output_file] merge_file
•
list [–in
input_file] [port-config-name [transport [rg-port] ]
•
clear [-f]
•
config [
item [value]]
•
test
port-config-name transport rg-port
portConfig copy
[–in
input_file] [-out output_file]
-in
indicates the name of the input file containing portConfig information
-out
indicates the name of the output file to write portConfig information
portConfig copy
can be used for the following:
•
To copy the content of the active portConfig table to a specified text file.
•
To copy the content of a specified text file to the active portConfig table.
•
To copy the content of one specified text file to another.
If no input file is specified, the active portConfig table is used as the source of the copy. If no
output file is specified, the input configuration is automatically copied to the active portConfig
table. If an output file is specified, the input configuration is written to the specified file and the
active portConfig table is unchanged.
Note that the
portConfig copy
subcommand always outputs XML. The input format can be
XML, or a simple text format. See
PortConfig File Formats
for more details.
portConfig add [-in
input-file] [-out output-file] <port-config-name>
<
transport> <rg-port> <protocol> [<zr-port>]
-in
indicates the name of the input file containing portConfig information
-out
indicates the name of the output file to write portConfig information
port-config-name
specifies the name of the port config ruleset
transport
specifies the protocol of ICMP, UDP or TCP
ZoneRanger 5.5 User's Guide
316
