32   ESR Series Routers Operation Manual 
esr# configure 
esr(config)# object-group network clients 
esr(config-addr-set)# ip address-range 132.16.0.5-132.16.0.10 
esr(config-addr-set)# exit 
esr(config)# object-group network gateway 
esr(config-addr-set)# ip address-range 40.13.1.22 
esr(config-addr-set)# exit 
esr(config)# object-group service ssh 
esr(config-port-set)# port-range 22 
esr(config-port-set)# exit 
esr(config)# security zone-pair untrusted self 
esr(config-zone-pair)# rule 10 
esr(config-zone-rule)# action permit 
esr(config-zone-rule)# match protocol tcp 
esr(config-zone-rule)# match source-address clients 
esr(config-zone-rule)# match destination-address gateway 
esr(config-zone-rule)# match source-port any 
esr(config-zone-rule)# match destination-port ssh 
esr(config-zone-rule)# enable 
esr(config-zone-rule)# exit 
esr(config-zone-pair)# exit 
5.2.2.6 Applying basic settings 
To apply performed router configuration changes, you should enter the following commands from 
the root section of the command interface. 
esr# commit 
esr# confirm 
If  during  configuration  device  was  accessed  remotely  and  the  management  interface  network 
settings have changed, when  you  execute  commit  command the connection to the device may be lost. 
Use  new  network  settings  defined  in  configuration  to  connect  to  the  device  and  execute  confirm 
command.  
If  you  are  not  able  to  execute  confirm  command,  upon  the  expiration  of  the  confirmation  timer 
device configuration will revert to the state prior the commit command execution.