ZyXEL Communications ZyWALL USG Series, Справочное руководство

Страница: 332 / 426

Chapter 52 System Remote Management
ZyWALL / USG (ZLD) CLI Reference Guide
332
52.5 Telnet
You can configure your ZyWALL / USG for remote Telnet access.
52.6 Telnet Commands
The following table describes the commands available for Telnet. You must use the
configure
terminal
command to enter the configuration mode before you can use these commands.
52.6.1 Telnet Commands Examples
This command sets a service control rule that allowed the computers with the IP addresses
matching the specified address object to access the specified zone using Telnet service.
This command displays Telnet settings.
Table 203
Command Summary: Telnet
COMMAND DESCRIPTION
[no] ip telnet server
Allows Telnet access to the ZyWALL / USG CLI. The
no
command disables
Telnet access to the ZyWALL / USG CLI.
[no] ip telnet server port <1..65535>
Sets the Telnet service port number. The
no
command resets the Telnet
service port number back to the factory default (23).
ip telnet server rule
{ rule_number |append|insert
rule_number } access-group
{ALL| address_object } zone
{ALL| zone_object } action
{accept|deny}
Sets a service control rule for Telnet service.
address_object
: The name of the IP address (group) object. You may use 1-
31 alphanumeric characters, underscores(
_
), or dashes (-), but the first
character cannot be a number. This value is case-sensitive.
zone_object
: The name of the zone. For some ZyWALL / USG models, use up
to 31 characters (a-zA-Z0-9_-). The name cannot start with a number. This
value is case-sensitive.
For other ZyWALL / USG models, use pre-defined zone names like DMZ,
LAN1, SSL VPN, IPSec VPN, OPT, and WAN.
ip telnet server rule move
rule_number to rule_number
Changes the index number of a service control rule.
no ip telnet server rule rule_number
Deletes a service control rule for Telnet service.
show ip telnet server status
Displays Telnet settings.
Router# configure terminal
Router(config)# ip telnet server rule 11 access-group RD zone LAN action accept
Router# configure terminal
Router(config)# show ip telnet server status
active : yes
port : 23
service control:
No. Zone Address Action
========================================================================
Router(config)#