Alcatel-Lucent OmniAccess 700, Руководство по настройке CLI

Страница: 747 / 1193

Customized-service Rule Based ALG Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
721
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
T
O
C
REATE A
C
USTOMIZED
S
ERVICE
ALG R
ULE
E
XAMPLE
The following example shows that if the packet is intended for the server with
address 20.1.1.1 comes to port 100, then the service is recognized as FTP and
the ALG is invoked accordingly. The standard port invocation of ALG is also active
here.
ALU(config)# match-list m1
ALU(config-match-list-m1)# tcp any host 20.1.1.1 to 100
ALU(config-customized-service)# match all m1 service ftp
T
O
M
ODIFY
P
RIORITY OF AN
E
XISTING
ALG R
ULE
E
XAMPLE
The following example shows how to change the priority of a rule;
ALU(config-customized-service)# change 10 1
Command (in Customized Service
Mode)
Description
[< 1-65535> ] match [ any | all ]
<match-list name>... service
{< service-name> | alcatel-
tftp | dns | ftp | none | rpc |
rtsp | sip | tftp }
This command creates a rule for
mapping ALG action for a well known
service to a non-standard port or disable
a well known service on its well known
port.
The range for the rule number is 1-
65535. This rule number signifies the
priority of a rule. By default, the
numbering pattern for rule number is the
next multiple of ten to the highest existing
rule number.
Command (in Customized Service
Mode)
Description
change {< 1-65535 > < 1-65535> }
Use this command to change the priority
of a specific ALG rule configured.