Netopia CLI 874, Справочное руководство CLI

Страница: 45 / 207

Motorola Netopia® Router CLI Commands 2-33
Note:
The commands in this section are suppor ted beginning with firmware version 8.2.
interface ethernet id ip state-insp enable { yes | no | on | off }
no interface ethernet id ip state-insp
show interface ethernet id ip state-insp enable
These commands allow you to set, disable, or show the status of stateful inspection for the specified inter face.
This option is disabled by default. Stateful inspection prevents unsolicited inbound access when NAT is
disabled.
interface ethernet id ip state-insp router-access { yes | no | on | off }
no interface ethernet id ip state-insp router-access
show interface ethernet id ip state-insp router-access
These commands allow you to set, disable, or show the status of default mapping to router for the specified
inter face.
interface ethernet id ip state-insp tcp-seq-diff diff
show interface ethernet id ip state-insp tcp-seq-diff
These commands allow you to set or show TCP sequence difference acceptable for the specified inter face. The
TCP sequence number difference maximum allowed value is 65535. If the value of
tcp-seq-diff is 0, it means
that this check is disabled.
interface ethernet id ip state-insp deny-frag { yes | no | on | off }
no interface ethernet id ip state-insp deny-frag
show interface ethernet id ip state-insp deny-frag
These commands allow you to set, disable, or show whether fragmented packets are received for the specified
inter face.
interface ethernet id ip state-insp xposed-list xposed-list_name
no interface ethernet id ip state-insp xposed-list
show interface ethernet id ip state-insp xposed-list
These commands allow you to set, disable, or show the status of a stateful inspection exposed address list for
the specified inter face. Exposed address lists are similar to NAT ser ver lists. Exposed addresses in the list will
not be subject to stateful inspection and hence unsolicited inbound traffic will be allowed to these addresses.
These are active only if NAT is disabled on the profile.