Pnic web-gui-stop | Force10 Networks 100-00055-01 instruction

Example Figure 85 pnic web-gui-start Command Example

[root@localhost pnic]# pnic web-gui-start

INFO: Generating SSL certificate for the web-gui application.

Generating a 1024 bit RSA private key

.........++++++

......++++++

writing new private key to '/usr/local/pnic-mgmt-lib/sslcert/rootkey.pem'

-----

You are about to be asked to enter information that will be incorporated into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank

For some fields there will be a default value, If you enter '.', the field will be left blank.

-----

Common Name (FQDN or IP address of the P-Series box using which you access the web-gui application) [192.168.1.1]:10.11.194.184

Organization Name (company) [Force10 Networks Inc]:

Organizational Unit Name (department, division) [P-Series Security]: Locality Name (city, district) [350 Holger way, San Jose]:

State or Province Name (full name) [California]: Country Name (2 letter code) [US]:

Email Address [support@force10networks.com]:

INFO: SSL certificate generation for the web-gui application successful.

Web-gui application has started successfully!

[root@localhost pnic]#

Related	pnic web-gui-stop	Stop the web server.
Commands

pnic web-gui-stop

Stop the web server.

	Syntax	pnic web-gui-stop [-f]
		Enable the web server using the command pnic web-gui-start.
	Parameters
		-f	Stop the Web-gui server without a confirmation prompt.

	Command
		Version 2.3.0.0	Introduced
	History

116	Appendix A

Image 116

Force10 Networks 100-00055-01 manual Stop the web server, Pnic web-gui-stop -f

Contents

Series Installation and Operation Guide Copyright 2008 Force10 Networks Contents Contents Graphical User Interface Command Line Reference Glossary Objectives AudienceConventions Convention Description Keyword Information Symbols Symbol Warning DescriptionRelated Documents Additional Resources This LED is blue when the hard disk is accessed This LED is green when the power is onLabel Description This LED is not used PB-10GE-2P System SpecificationsPhysical Connections Step Task Booting ConfigurationOnce the appliance is booted Security Check Gmake install Cp -Rf /usr/local/pnic/ /homeTar xvzf PTPS-PMAIN Cd SW Cd upgradedirectory/pnic-compiler Install pre-compiled firmware if neededRe-compile all rules firmware with the new compiler Located in the directory pnic-compiler Returning to the Default Configuration Chapter Getting Started Getting Started Chapter Introduction Hardware Architecture Overview Types of Rules Sample Rules and FirmwareRx1 Tx1 Mirror Introduction Rule Management Deploying the P-SeriesSample Rules Files Rule Set Description Inline Deployment Fail-safe Deployment Highly-available Deployment Passive Deployment Capturing Matched Traffic Series supports capturing matched traffic for analysis Capturing to a Host CPU Capturing Matched Traffic via the libpcap Interface Mirroring to Another Device Creating an IDS Accelerator with the P-Series Invoke the GUI by entering the command pnic gui Graphical User Interface Command Description GUI CommandsGUI Commands Managing Rules, Policies, and Firmware Rule Management GUI Editing Dynamic Rules with the GUI Option DescriptionPolicy Capture Permit Deny Managing Capture/Forward Policies with the GUI To modify dynamic rules Selecting Firmware with the GUI Managing Capture/Forward Policies GUI Select Manage Firmware see Figure Runtime StatisticsTo select firmware Runtime Statistics for Channel 0 and 1-FPGA Loaded Statistic Description Reloading FirmwareRuntime Statistics Description Graphical User Interface Web-based Management Launching the P-Series Node Manager Lauching the P-Series Node Manager Web-based Management Series Node Manager has four major management capabilities Managing the P-Series using Node ManagerWeb-browser Security Certificates Monitoring System Performance Series Node Manager Home Panel Web-based Management Managing Firmware Images Managing the Network Interface CardPage Managing Policies Page Network Security Monitoring Installing the Sguil Server Installing the Sguil SystemInstalling the Sguil Sensor Installing the Sguil Client To uninstall the serverSource the server configuration file. The default Wish Installation Files Sguil Files and DirectoriesFile Location Sensor Server Running the Sguil System Running the Sguil Sensor Running the Sguil Server Task Script Running the Sguil Client To run the Sguil Client Selecting the Sensor to Monitor CLI Commands Editing Dynamic Rules with the CLIMAC Rewriting Change directories to /usr/local/pnic/0 Command Line Interface Rewriting Destination MAC Addresses to Load Balance Removing Vlan Tags Command Line Interface Creating Rules Files Rules CapacityCompiling Rules To complile rules Compilation Option Description Content matching Positives Enter command gmake from pnic-compilerdirectory Pnic-Compiler Option Summary of configuration Starting and Stopping the pnic-Compiler File Description Location Configuration and Generated FilesConfiguration and Generated Files Compiler Errors Firmware FilenamesDescribes each of the elements in this format Firmware Filename Description Snort Rule Syntax Snort Rule SyntaxSnort Rule Headers Protocol Ports Series Rule Syntax Series Supported Snort KeywordsSnort Rule Options Keyword Static Dynamic Yes Yes, no ranges Seq YesYes Only /8/16/24/32 masks Writing Stateful Rules Stateful Matching Pre-match Condition the S Value Stateful Rule Examples Support for Snorts flow Keyword Handling Segmentation Evasion Support for Snorts within Keyword Anomalous TCP Flags Writing Rules Chapter Firewall Deploying the P-Series as a Firewall Enabling the Firewall Firewall Allowing Traffic through the Firewall Writing Rules for a Firewall Deployment Sample Firewall Rules Appendix a Command Line Reference Appendix a Pnic aggregate-mode-disablePnic aggregate-mode-disable number Pnic aggregate-mode-enable Pnic aggregate-mode-enable numberDifferent ports. This is the default behavior Pnic apply-firmware Pnic apply-firmware Command Example Display the available firmware Pnic capture-off Pnic capture-onPnic capture-off Syntax pnic capture-on Display the configuration parameters of the system Pnic cardstatusPnic cardstatus number Display the driver version Pnic default-drop-disable Pnic default-drop-disable numberPnic compilerules Pnic compilerules number Pnic default-drop-enable Enable firewall functionalityRun diagnostic tests on the card Pnic diag Pnic diag Command Example Example pnic diag Command Example Pnic flow-teardown-disable Pnic flow-teardown-enablePnic flow-teardown-disable Pnic flow-teardown-enable Pnic getmachashindex number Example pnic flow-teardown-enable Command ExamplePnic getmachashindex Syntax pnic gui Pnic guiLaunch the graphical user interface Pnic gui Command Example Pnic help Pnic help Pnic linkdown Pnic linkup Pnic loadconf Pnic loadconf number Pnic loadconf Address Mapping Address Corresponding Parameter Pnic loadeproms Pnic loadparams deprecatedLoad the PCI-X and front-end EEPROMs Pnic loadeproms number Pnic loadparams Command Example Loadparams Address Mapping Pnic loadrules Pnic loadrules channel Disable MAC rewriting. This is the default behavior Enable MAC rewriting using the command pnic macrewrite-onDisable MAC rewriting using the command pnic macrewrite-off Pnic macrewrite-off 100 Appendix a Pnic off deprecatedSyntax pnic off Example pnic off Command Example Enable the capturing of packets via direct memory accessPnic on deprecated Pnic on Pnic passive-mode-disable Syntax pnic passive-mode-disable numberPnic params Pnic params number Pnic passive-mode-enable Configure the ports to only receive trafficExample pnic passive-mode-disable Command Example Configure the ports to only receive traffic Pnic resetconf Pnic resetconf numberPnic restart Stop capturing and matching Series Installation and Operation Guide, version 105 Pnic sguil-sensor-startStart the Sguil sensor Pnic restart Pnic sguil-sensor-start -f Series Installation and Operation Guide, version 107 Pnic sguil-sensor-stopStop the Sguil sensor Pnic sguil-sensor-stop -f Display configuration parameters of the card Pnic showconfPnic show-firmwares List the available firmware images Series Installation and Operation Guide, version 109 Pnic showtechApply a specific firmware to the card Pnic showtech number filename.dat Disable the network interface using the command pnic stop Example pnic showtech Command ExamplePnic start Pnic start number Turn off capture and disable the network interface Enable the network interface using the command pnic startDisable the network interface Pnic stop Pnic temp-mem-disable Pnic temp-mem-enableDisable temporary memory Enable temporary memory. This is the default behavior Pnic updatemacvalue Disable temporary memoryPnic updatemacvalue number Specifies an LSB value for a particular hash index Pnic vlan-remove-disable Pnic vlan-remove-enableDisable the Vlan Tag Remove feature Vlan Tag Remove feature is disabled by default Disable the web server using the command pnic web-gui-stop Pnic versionPnic web-gui-start Display the driver version Pnic web-gui-stop Stop the web serverStop the web server Pnic web-gui-stop -f Series Installation and Operation Guide, version 117 Start the web server 118 Appendix a Description of P-Series Snort Keywords Keyword Description Rule SyntaxAck Checks for a specific TCP acknowledgment number Flags!*+ FSRPAU120 Flow establishedstateless Icmp idnumberIcmp seq number Ipproto ! name number Uricontent ! datastring Ttl This keyword checks for the specified IP time-to-live 122 Appendix B Evasion Rules Meta Rules for Channel 0 and ChannelMeta Rules 124 Appendix C Unix Commands LogoutPasswd Pwd Vi Commands ? textSet number no Number Dynamic Rules FlowGarbage Collection Snort Span PortState Static Rules Accessing iSupport Services Series Installation and Operation Guide, version 129Manual Pages ISupport Website Contacting the Technical Assistance Center Locating P-Series Serial Numbers Requesting a Hardware Replacement To request replacement hardware, follow these steps 132 Technical Support