HP TippingPoint Next Generation Firewall manual NGFWrunning-mgmtipaddress

ip-filter (allowdeny) ip (A.B.C.D/MX:X::X:X/MA.B.C.DX:X::X:X)

Valid entries:

allow	Allow IPv4/IPv6 rule
deny	Deny IPv4/IPv6 rule
default	Default rule
Possible values for service are:
https	allow/deny HTTPS. This will affect SMS which uses HTTPS
ssh	allow/deny SSH
icmp	allow/deny ICMP/ICMPv6
snmp	allow/deny SNMP
ip	IP address
A.B.C.D/M	IPv4 address with netmask
X:X::X:X/M	IPv6 address with prefix length
A.B.C.D	IPv4 address
X:X::X:X	IPv6 address

Example

NGFW{running-mgmt}ip-filter allow default NGFW{running-mgmt}ip-filter allow https ip 192.168.1.0/24 NGFW{running-mgmt}ip-filter deny ip 192.168.1.1 NGFW{running-mgmt}ip-filter deny https ip 2001:2:0:0:0:0:0:1

NGFW{running-mgmt}ipaddress

Configure IP address.

Syntax

ipaddress (A.B.C.D/MX:X::X:X/M)

Example

NGFW{running-mgmt}ipaddress 192.168.1.1/24

NGFW{running-mgmt}ipaddress 100:0:0:0:0:0:0:1/64

NGFW{running-mgmt}physical-media

Configure physical-media settings.

Syntax

physical-media (auto-neg)(10half10full100half100full1000full)

Valid entries:
auto-neg	Enable auto-negotiation (default is on)
SPEED-MODE	Set the port speed
Possible values for SPEED-MODE are:
10half	Supported port speed and mode
10full	Supported port speed and mode
100half	Supported port speed and mode
100full	Supported port speed and mode
1000full	Supported port speed and mode

Example

NGFW{running-mgmt}physical-media auto-neg

NGFW{running-mgmt}physical-media 1000full

NGFW Command Line Interface Reference 185