Tavve zoneranger, Руководство пользователя

Страница: 249 / 389

Once you are have entered a destination group name, the destination group submode al-
lows you to enter destination group entries. Once you are in the destination group sub-
mode, the following configuration commands are available:
•
cancel - Exit this mode without saving any changes
•
clear-group-entries – Clear all destination group entries
•
exit – exit destination group mode (saving changes)
•
group-entry – Destination group entry
•
list – List the current set of destination group entriest.
•
no – remove or use default settings
group-entry [ gateway_name hosts | dest-group group_name | data-diode ]
no group-entry [ gateway_name hosts | dest-group group_name | data-diod e ]
group-entry Adds a destination group rule to the group.
gateway_name Hostname or IP address of a joined Ranger Gateway.
hosts Comma separated list of destination IP addresses or host-
names
dest-group Adds an already defined destination group as a rule
group_name Destination group name to add as a rule
data-diode Adds Data Diode as the destination rule
no Removes a destination group entry
forward log-level [ none | short | full ]
no forward log-level [ none | short | full ]
log-level Configure logging level for forwarding
none No logging (default)
short Message header or length is logged
full Entire message is logged
no Delete forwarding log level
forward netflow local_port [ ranger_gateway destination_host | dest-group group-name |
data-diode ] destination_host_port [ source_addresses | enable | disable ]
no forward netflow local_port [ ranger_gateway destination_host | dest-group group-name |
data-diode ] destination_host_port [ source_addresses | enable | disable ]
local_port ZoneRanger port to receive NetFlow packets.
ranger_gateway Hostname or IP address of a joined Ranger Gateway.
destination_host Hostname or IP address to which ZoneRanger should
forward NetFlow packets
dest-group Forward to destination group
ZoneRanger 5.5 User's Guide 249