P-660H/HW/W-T Series User’ Guide

Table 138 Firewall Commands (continued)

FUNCTION

COMMAND

DESCRIPTION

 

 

 

 

Config edit firewall set <set

This command sets whether or not the

 

#> log <yes no>

Prestige creates logs for packets that match

 

 

the firewall’s default rule set.

 

 

 

Rules

Config edit firewall set <set

This command sets whether packets that

 

#> rule <rule #> permit

match this rule are dropped or allowed

 

<forward block>

through.

 

 

 

 

Config edit firewall set <set

This command sets whether a rule is enabled

 

#> rule <rule #> active <yes

or not.

 

no>

 

 

 

 

 

Config edit firewall set <set

This command sets the protocol specification

 

#> rule <rule #> protocol

number made in this rule for ICMP.

 

<integer protocol value >

 

 

 

 

 

Config edit firewall set <set

This command sets the Prestige to log traffic

 

#> rule <rule #> log <none

that matches the rule, doesn't match, both or

 

match not-match both>

neither.

 

 

 

 

Config edit firewall set <set

This command sets whether or not the

 

#> rule <rule #> alert <yes

Prestige sends an alert e-mail when a DOS

 

no>

attack or a violation of a particular rule occurs.

 

 

 

 

config edit firewall set <set

This command sets the rule to have the

 

#> rule <rule #> srcaddr-

Prestige check for traffic with this individual

 

single <ip address>

source address.

 

 

 

 

config edit firewall set <set

This command sets a rule to have the Prestige

 

#> rule <rule #> srcaddr-

check for traffic from a particular subnet

 

subnet <ip address> <subnet

(defined by IP address and subnet mask).

 

mask>

 

 

 

 

 

config edit firewall set <set

This command sets a rule to have the Prestige

 

#> rule <rule #> srcaddr-range

check for traffic from this range of addresses.

 

<start ip address> <end ip

 

 

address>

 

 

 

 

 

config edit firewall set <set

This command sets the rule to have the

 

#> rule <rule #> destaddr-

Prestige check for traffic with this individual

 

single <ip address>

destination address.

 

 

 

 

config edit firewall set <set

This command sets a rule to have the Prestige

 

#> rule <rule #> destaddr-

check for traffic with a particular subnet

 

subnet <ip address> <subnet

destination (defined by IP address and subnet

 

mask>

mask).

 

 

391

Appendix G