HP VCX Software manual CLI command examples, Add and change firewall rules, Windownumber

Chapter 15. Command Line Reference

Selection Explanation

monday Monday

tuesday Tuesday

wednesday Wednesday

thursday Thursday

friday Friday

saturday Saturday

sunday Sunday

window_number

A positive integer with standard value 60.

CLI command examples

In this section, you can find some examples of how to use the CLI commands to create and change your configuration.

The CLI commands can be entered directly via the serial console or an ssh connection to the Telecommuting Module configuration interface. You can also enter all commands in a text file and upload it via the Telecommuting Module web GUI.

Add and change firewall rules

To add new firewall rules, you first need network definitions for the networks that will send and receive the traffic. These are made in the firewall.netdefs table.

If you just want to add rows to an existing configuration, use the add-row. If you want to remove old configuration in this table first, use the clear-table command before you start adding rows. This example will remove old networks and then add two new network rows:

clear-table firewall.netdefs

add-row firewall.netdefs interface=eth3 lower_ip=10.5.1.0 name=LAN subgroup=- up- per_ip=10.5.1.255

add-row firewall.netdefs interface=eth0 lower_ip=0.0.0.0 name=internet subgroup=- up- per_ip=255.255.255.255

After that, the firewall rule can be added to the firewall.forwarding_rules table. Here too, the clear-table command can be used to remove all old rules.

The commands below clears the table and adds two firewall rules for traffic from the LAN to the Internet.

clear-table firewall.forwarding_rules

add-row firewall.forwarding_rules (id 4) client=LAN comment="" enabled=on fromtunnel=- function=accept logclass=Local number=3 server=internet service=tcp timeclass=24/7 totunnel=-

317