Chapter 38 System Remote Management

The following command sets the password (secret) for read-write (rw) access.

Router# configure terminal

Router(config)# snmp-server community secret rw

The following command sets the IP address of the host that receives the SNMP notifications to 172.23.15.84 and the password (sent with each trap) to qwerty.

Router# configure terminal

Router(config)# snmp-server host 172.23.15.84 qwerty

38.9 ICMP Filter

The ip icmp-filtercommands are obsolete. See Chapter 16 on page 133 to configure firewall rules for ICMP traffic going to the ZyWALL to discard or reject ICMP packets destined for the ZyWALL.

Configure the ICMP filter to help keep the ZyWALL hidden from probing attempts. You can specify whether or not the ZyWALL is to respond to probing for unused ports.

You must use the configure terminal command to enter the configuration mode before you can use these commands.

Table 177 Command Summary: ICMP Filter

COMMAND

DESCRIPTION

[no] ip icmp-filter activate

Turns the ICMP filter on or off.

ip icmp-filter rule {<1..32>appendinsert

Sets an ICMP filter rule.

<1..32>} access-group {ALLADDRESS_OBJECT}

ADDRESS_OBJECT: The name of the IP address (group) object.

zone {ALLZONE_OBJECT} icmp-type {ALL echo-

You may use 1-31 alphanumeric characters, underscores(_), or

reply destination-unreachable source-

quenchredirectecho-request router-

dashes (-), but the first character cannot be a number. This value

is case-sensitive.

advertisementrouter-solicitation time-

 

exceeded parameter-problem timestamp-

ZONE_OBJECT: The name of the zone. You may use 1-31

requesttimestamp-reply address-mask-request

alphanumeric characters, underscores(_), or dashes (-), but the

address-mask-reply} action {acceptdeny}

first character cannot be a number. This value is case-sensitive.

no ip icmp-filter rule <1..64>

Deletes an ICMP filter rule.

ip icmp-filter rule move <1..64> to <1..64>

Changes the index number of an ICMP filter rule.

show ip icmp-filter status

Displays ICMP filter settings.

38.10 Dial-in Management

Connect an external serial modem to the DIAL BACKUP port (or AUX port depending on your model) to provide a remote management connection in case the ZyWALL’s other WAN connections are down. This is like an auxiliary interface, except it is used for management connections coming into the ZyWALL instead of as a backup WAN connection.

294

 

ZyWALL (ZLD) CLI Reference Guide