Manuals / Force10 Networks / Computer Equipment / Network Card

Force10 Networks 100-00055-01 Pnic gui, Launch the graphical user interface, Syntax pnic gui

Models: 100-00055-01

1 132

Page 90

Related
Related	pnic macrewrite-on	Enable MAC rewriting.
Commands	pnic macrewrite-on	Enable MAC rewriting.
Commands
	pnic macrewrite-off	Disable MAC rewriting.

	pnic updatemacvalue	Update the LSB value for a particular hash index value.

pnic gui

Launch the graphical user interface.

Syntax pnic gui

Command
	Version 2.0.0.1	Introduced
History

90	Appendix A

Page 90

Image 90

Force10 Networks 100-00055-01 manual Pnic gui, Launch the graphical user interface, Syntax pnic gui

Contents

Series Installation and Operation Guide Copyright 2008 Force10 Networks Contents Contents Graphical User InterfaceCommand Line Reference Glossary Conventions ObjectivesAudience Convention Description KeywordRelated Documents Information SymbolsSymbol Warning Description Additional ResourcesLabel Description This LED is blue when the hard disk is accessedThis LED is green when the power is on This LED is not usedSystem Specifications Physical ConnectionsPB-10GE-2P Step Task Once the appliance is booted BootingConfiguration Security CheckTar xvzf PTPS-PMAIN Gmake installCp -Rf /usr/local/pnic/ /home Cd SWRe-compile all rules firmware with the new compiler Cd upgradedirectory/pnic-compilerInstall pre-compiled firmware if needed Located in the directory pnic-compilerReturning to the Default Configuration Chapter Getting StartedGetting Started Chapter Introduction Hardware Architecture OverviewRx1 Tx1 Mirror Types of RulesSample Rules and Firmware IntroductionSample Rules Files Rule ManagementDeploying the P-Series Rule Set DescriptionInline Deployment Fail-safe DeploymentHighly-available Deployment Passive DeploymentCapturing Matched Traffic Series supports capturing matched traffic for analysisCapturing to a Host CPU Capturing Matched Traffic via the libpcap InterfaceMirroring to Another Device Creating an IDS Accelerator with the P-SeriesInvoke the GUI by entering the command pnic gui Graphical User InterfaceGUI Commands GUI CommandsCommand Description Managing Rules, Policies, and Firmware Rule Management GUIPolicy Capture Editing Dynamic Rules with the GUIOption Description Permit DenyManaging Capture/Forward Policies with the GUI To modify dynamic rulesSelecting Firmware with the GUI Managing Capture/Forward Policies GUIRuntime Statistics To select firmwareSelect Manage Firmware see Figure Runtime Statistics for Channel 0 and 1-FPGA Loaded Reloading Firmware Runtime Statistics DescriptionStatistic Description Graphical User Interface Web-based Management Launching the P-Series Node ManagerLauching the P-Series Node Manager Web-based Management Managing the P-Series using Node Manager Web-browser Security CertificatesSeries Node Manager has four major management capabilities Monitoring System Performance Series Node Manager Home Panel Web-based ManagementManaging Firmware Images Managing the Network Interface CardPage Managing Policies Page Network Security Monitoring Installing the Sguil System Installing the Sguil SensorInstalling the Sguil Server Source the server configuration file. The default Installing the Sguil ClientTo uninstall the server WishFile Location Sensor Installation FilesSguil Files and Directories ServerRunning the Sguil System Running the Sguil SensorRunning the Sguil Server Task ScriptRunning the Sguil Client To run the Sguil ClientSelecting the Sensor to Monitor MAC Rewriting CLI CommandsEditing Dynamic Rules with the CLI Change directories to /usr/local/pnic/0Command Line Interface Rewriting Destination MAC Addresses to Load BalanceRemoving Vlan Tags Command Line Interface Compiling Rules Creating Rules FilesRules Capacity To complile rulesCompilation Option Description Content matching PositivesEnter command gmake from pnic-compilerdirectory Pnic-Compiler Option Summary of configuration Starting and Stopping the pnic-CompilerConfiguration and Generated Files Configuration and Generated FilesFile Description Location Describes each of the elements in this format Compiler ErrorsFirmware Filenames Firmware Filename DescriptionSnort Rule Syntax Snort Rule HeadersSnort Rule Syntax Protocol Ports Snort Rule Options Series Rule SyntaxSeries Supported Snort Keywords Keyword Static DynamicSeq Yes Yes Only /8/16/24/32 masksYes Yes, no ranges Writing Stateful Rules Stateful MatchingPre-match Condition the S Value Stateful Rule Examples Support for Snorts flow Keyword Handling Segmentation EvasionSupport for Snorts within Keyword Anomalous TCP Flags Writing Rules Chapter Firewall Deploying the P-Series as a FirewallEnabling the Firewall FirewallAllowing Traffic through the Firewall Writing Rules for a Firewall DeploymentSample Firewall Rules Appendix a Command Line Reference Pnic aggregate-mode-disable Pnic aggregate-mode-disable numberAppendix a Different ports. This is the default behavior Pnic aggregate-mode-enablePnic aggregate-mode-enable number Pnic apply-firmwarePnic apply-firmware Command Example Display the available firmwarePnic capture-off Pnic capture-offPnic capture-on Syntax pnic capture-onPnic cardstatus number Display the configuration parameters of the systemPnic cardstatus Display the driver versionPnic compilerules Pnic default-drop-disablePnic default-drop-disable number Pnic compilerules numberRun diagnostic tests on the card Pnic default-drop-enableEnable firewall functionality Pnic diagPnic diag Command Example Example pnic diag Command ExamplePnic flow-teardown-disable Pnic flow-teardown-disablePnic flow-teardown-enable Pnic flow-teardown-enableExample pnic flow-teardown-enable Command Example Pnic getmachashindexPnic getmachashindex number Pnic gui Launch the graphical user interfaceSyntax pnic gui Pnic gui Command Example Pnic help Pnic helpPnic linkdown Pnic linkupPnic loadconf Pnic loadconf numberPnic loadconf Address Mapping Address Corresponding ParameterLoad the PCI-X and front-end EEPROMs Pnic loadepromsPnic loadparams deprecated Pnic loadeproms numberPnic loadparams Command Example Loadparams Address MappingPnic loadrules Pnic loadrules channelDisable MAC rewriting using the command pnic macrewrite-off Disable MAC rewriting. This is the default behaviorEnable MAC rewriting using the command pnic macrewrite-on Pnic macrewrite-offPnic off deprecated Syntax pnic off100 Appendix a Pnic on deprecated Example pnic off Command ExampleEnable the capturing of packets via direct memory access Pnic onPnic params Pnic passive-mode-disableSyntax pnic passive-mode-disable number Pnic params numberExample pnic passive-mode-disable Command Example Pnic passive-mode-enableConfigure the ports to only receive traffic Configure the ports to only receive trafficPnic restart Pnic resetconfPnic resetconf number Stop capturing and matchingStart the Sguil sensor Series Installation and Operation Guide, version 105Pnic sguil-sensor-start Pnic restartPnic sguil-sensor-start -f Stop the Sguil sensor Series Installation and Operation Guide, version 107Pnic sguil-sensor-stop Pnic sguil-sensor-stop -fPnic show-firmwares Display configuration parameters of the cardPnic showconf List the available firmware imagesApply a specific firmware to the card Series Installation and Operation Guide, version 109Pnic showtech Pnic showtech number filename.datPnic start Disable the network interface using the command pnic stopExample pnic showtech Command Example Pnic start numberDisable the network interface Turn off capture and disable the network interfaceEnable the network interface using the command pnic start Pnic stopDisable temporary memory Pnic temp-mem-disablePnic temp-mem-enable Enable temporary memory. This is the default behaviorPnic updatemacvalue number Pnic updatemacvalueDisable temporary memory Specifies an LSB value for a particular hash indexDisable the Vlan Tag Remove feature Pnic vlan-remove-disablePnic vlan-remove-enable Vlan Tag Remove feature is disabled by defaultPnic web-gui-start Disable the web server using the command pnic web-gui-stopPnic version Display the driver versionStop the web server Pnic web-gui-stopStop the web server Pnic web-gui-stop -fSeries Installation and Operation Guide, version 117 Start the web server118 Appendix a Ack Checks for a specific TCP acknowledgment number Description of P-Series Snort KeywordsKeyword Description Rule Syntax Flags!*+ FSRPAU120Icmp seq number Flow establishedstatelessIcmp idnumber Ipproto ! name numberUricontent ! datastring Ttl This keyword checks for the specified IP time-to-live122 Appendix B Meta Rules for Channel 0 and Channel Meta RulesEvasion Rules 124 Appendix C Passwd Unix CommandsLogout PwdSet number no Vi Commands? text NumberGarbage Dynamic RulesFlow CollectionState SnortSpan Port Static RulesManual Pages Accessing iSupport ServicesSeries Installation and Operation Guide, version 129 ISupport WebsiteContacting the Technical Assistance Center Locating P-Series Serial NumbersRequesting a Hardware Replacement To request replacement hardware, follow these steps132 Technical Support

pnic gui

Launch the graphical user interface.

Syntax pnic gui

Appendix A