MMLAN all -- 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP)
target prot opt source destination
Chain OUTPUT (policy DROP)
target prot opt source destination
MMLAN all -- 0.0.0.0/0 0.0.0.0/0
Chain MMLAN (2 references)
target prot opt source destination
ACCEPT udp -- 192.168.0.0/24 192.168.0.1 udp dpts:7000:7100
ACCEPT udp -- 192.168.0.1 192.168.0.0/24 udp spts:7000:7100
ACCEPT udp -- 192.168.0.0/24 192.168.0.1 udp dpt:162
ACCEPT udp -- 192.168.0.1 192.168.0.0/24 udp spt:162
ACCEPT udp -- 192.168.1.5 192.168.0.1 udp dpts:7000:7100
ACCEPT udp -- 192.168.0.1 192.168.1.5 udp spts:7000:7100
ACCEPT udp -- 192.168.1.5 192.168.0.1 udp dpt:162
ACCEPT udp -- 192.168.0.1 192.168.1.5 udp spt:162
Note
After changing the IP address of the management LAN interface, delete the settings once, and set their values
again. For details on how to delete the settings, see (7) Configuration deletion procedure in 4.11 Firewall
Setting Command for the Management LAN Interface (setmlanfw.sh) in the
PRIMEQUEST 1000 Series Tool
Reference
(C122-E110EN).
[For PSA version 2.6 or later]
Add the "MMLAN" setting chain to INPUT and OUTPUT chains. At this time, take care to prevent
interruptions by an existing REJECT setting in an INPUT or OUTPUT chain or by a user definition chain.
Example: REJECT setting in INPUT and FORWARD
# iptables –L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
PRIMEQUEST 1000 Series Installation Manual
CHAPTER 6 Work after Operating System Installation (PRIMEQUEST 1800E)
137
C122-E107-09EN
Содержание PRIMEQUEST 1000 Series
Страница 1: ...C122 E107 09EN FUJITSU Server PRIMEQUEST 1000 Series Installation Manual ...
Страница 2: ......
Страница 32: ...PRIMEQUEST 1000 Series Installation Manual CHAPTER 1 Installation Overview 4 C122 E107 09EN ...
Страница 44: ...PRIMEQUEST 1000 Series Installation Manual CHAPTER 2 Preparing for Main Unit Installation 16 C122 E107 09EN ...
Страница 260: ...PRIMEQUEST 1000 Series Installation Manual APPENDIX A Lists of Settings Links 232 C122 E107 09EN ...
Страница 284: ...PRIMEQUEST 1000 Series Installation Manual APPENDIX B Manual PSA Installation and Uninstallation 256 C122 E107 09EN ...
Страница 340: ...PRIMEQUEST 1000 Series Installation Manual APPENDIX F Setting up the NTP Server Windows 312 C122 E107 09EN ...
Страница 344: ......