
Also in the
Options
tab, we should specify the DNS address which is handed out with DHCP
leases. This could be set, for example, to be the IPv4 address object
dns1_address
.
External Syslog Server Setup
By default, only cOS Core's internal
memlog
feature will capture generated log messages. To send
logs to an external Syslog server, a log receiver object must be configured.
To send logs to Syslog server, first create an
IP4 Address
object called, for example,
syslog_ip
which is set to the IPv4 address of the server. Next, select
System > Device > Log and Event
Receivers
and choose
Add > Syslog Receiver
.
The Syslog server properties dialog will appear. Specify a name, for example
my_syslog
, and
specify the address as the
syslog_ip
object.
Tip: Address book object naming
The cOS Core address book is organized alphabetically so when choosing names for IP
address objects it is best to have the descriptive part of the name first. In this case, use
syslog_ip
as the name and not
ip_syslog
.
Allowing ICMP
Ping
Requests
As another example of setting up IP rule set entries, it can be useful to allow outgoing ICMP
ping
messages to pass through the firewall. To allow hosts on the internal network
G1_net
. to send
ping messages to any hosts on the Internet, select
Policies > Firewalling > Main IP Rules > Add
and enter the values shown below for the IP policy called
allow_ping_outbound
. This uses the
predefined service called
ping-outbound
.
Chapter 4: cOS Core Configuration
60
Содержание NetWall 6000 Series
Страница 1: ...Clavister NetWall 6000 Series Getting Started Guide...
Страница 15: ...Chapter 1 NetWall 6000 Series Overview 15...
Страница 37: ...Chapter 3 Installation 37...
Страница 78: ...Chapter 4 cOS Core Configuration 78...