ZyXEL Communications Broadband Security Gateway P-312, Руководство пользователя, Страница: 234 / 254

P312 Broadband Security Gateway
CLI Commands M
Function CLI Syntax Description
config edit firewall set <set #>
default-permit <forward | block> Edits whether a packet is dropped or allowed through, when
it does not meet a rule within the set
config edit firewall set <set #>
icmp-timeout <seconds> Edits the time limit, in seconds, for an idle ICMP session,
before it is terminated
config edit firewall set <set #>
udp-idle-timeout <seconds> Edits the time limit, in seconds, for an idle UDP session,
before it is terminated
config edit firewall set <set #>
connection-timeout <seconds>
Edits the wait time, in seconds, for the SYN traffic in initiating
a TCP session, before it is terminated
config edit firewall set <set #>
fin-wait-timeout <seconds>
Edits the wait time, in seconds, for the FIN traffic in
concluding a TCP session, before it is terminated
config edit firewall set <set #>
tcp-idle-timeout <seconds>
Edits the time limit, in seconds, for an idle TCP session,
before it is terminated
config edit firewall set <set #>
log <yes | no> Switches on/off the logs for matching default permit
R R u u l l e e s s
config edit firewall set <set #>
rule
<rule #> permit <forward | block>
Edits whether a packet is dropped or allowed through, when
it meets this rule
config edit firewall set <set #>
rule
<rule #> active <yes | no> Edits whether a rule is enabled or not
config edit firewall set <set #>
rule
<rule #> protocol <integer
protocol value >
Edits the protocol specification number made in this rule for
ICMP currently
config edit firewall set <set #>
rule
<rule #> log <none | match | not-
match | both> Edits whether traffic that does match the rule, doesn't match,
both or neither is logged.
config edit firewall set <set #>
rule
<rule #> alert <yes | no>
Activates or deactivates the notification function, for when a
DOS attack occurs or there is a violation of any alert settings.
In case of such instances, the function will send an e-mail to
the SMTP destination address and log an alert.
config edit firewall set <set #>
rule
<rule #> srcaddr-single <ip
address> Selects and edits a source address of the traffic which
comply to this rule