Chapter 4 Function/System Settings and Display
4.3 Network Management > set firewall
ETERNUS CLI User’s Guide
Copyright 2015 FUJITSU LIMITED P2X0-1030-09ENZ0
465
■ Example(s)
-snmp Optional. This parameter specifies if the "SNMP" application port is opened or closed. If
omitted, the existing setting is not changed. This parameter cannot be specified when "-port
fst" is specified. The initial state is "open".
open Application port "SNMP" is opened.
close Application port "SNMP" is closed.
-rcil Optional. This parameter specifies if the "RCIL" application port is opened or closed. If omitted,
the existing setting is not changed. This parameter cannot be specified when "-port remote" or
"-port fst" is specified. The initial state is "open".
open Application port "RCIL" is opened.
close Application port "RCIL" is closed.
-ip-redirect-test
Optional. This parameter specifies whether to enable the IP forwarding. If omitted, the existing
setting is not changed. This parameter cannot be specified when "-port remote" or "-port fst" is
specified. The initial state is "close".
When IP forwarding cannot be set (this parameter is unavailable), the initial state is "open".
open The IP forwarding is enabled.
close The IP forwarding is disabled.
-confirm-close-all
Optional. Specify "-confirm-close-all yes" to disable all of the service ports for both GUI and CLI
connections.
This parameter must be specified in either of the following cases:
•
When disabling all of the service ports for both GUI and CLI connections (HTTP, HTTPS, telnet, and
SSH)
• When disabling both of the service ports for CLI connections (telnet and SSH)
In all other cases, this parameter is ignored. For example, if a command such as "set firewall -
port remote -icmp close -confirm-close-all no" is entered, the command is executed with
exactly the same result as if the ICMP service protocol was disabled normally.
yes Only required when all of the GUI and CLI related service ports are disabled.
no Handled as "no operation".
The following example closes all the service ports, except the SSH service for CLI:
CLI> set firewall -port remote -http close -https close -telnet close -maintenance-secure close -icmp close -snmp close
CLI> set firewall -port maintenance -http close -https close -telnet close -maintenance-secure close -icmp close -snmp close
CLI> set firewall -port fst -http close -https close -telnet close -maintenance-secure close -icmp close -rcil close -ip-redi-
rect-test close
The following example closes all the service ports involved in both GUI and CLI connections:
CLI> set firewall -port remote -http close -https close -telnet close -ssh close -confirm-close-all yes
CLI> set firewall -port maintenance -http close -https close -telnet close -ssh close -confirm-close-all yes
CLI> set firewall -port fst -http close -https close -telnet close -ssh close -confirm-close-all yes
To Next Page
Loading...
