Ericsson HM4x0, Справочное руководство

Страница: 539 / 702

Security CLI Commands
2/1553-ZAT 759 94 Uen B – December 2005
539
19 Security CLI Commands
This chapter describes the Security CLI commands. The Security module is
the parent module in the Security package.
19.1 Summary
The Security package contains three modules comprising of one parent
module and two child modules:
•
The Security module is the parent module in the Security package. The
Security commands allow you to:
−
enable/disable all modules in the Security package (including the child
modules NAT and Firewall).
−
add IP interfaces to the Security package to create security interfaces
that are used to configure the NAT and Firewall child modules.
−
set triggers to allow applications to open secondary port sessions.
−
set IDSs (Intrusion Detection Settings)
−
configure security applications.
•
The NAT module is a child module in the Security Package. The NAT
commands allow you to:
−
implement NAT based on the security interfaces added to the Security
package by the parent Security module.
−
enable NAT between an interface and an interface type.
−
create global address pools
−
map global IP addresses to individual hosts on the inside network.
•
The stateful Firewall module is a child module in the Security package.
The Firewall commands allow you to:
−
implement stateful Firewall features based on the security interfaces
added in the parent Security module.