ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Podręcznik Użytkownika Pobierz pdf (Strona 305)

Chapter 36 System Remote Management

ZyWALL (ZLD) CLI Reference Guide

305

36.9 ICMP Filter

The ip icmp-filter commands are obsolete. See Chapter 15 on page 125 to configure

firewall rules for ICMP traffic going to the ZyWALL to discard or reject ICMP packets

destined for the ZyWALL.

Configure the ICMP filter to help keep the ZyWALL hidden from probing attempts. You can

specify whether or not the ZyWALL is to respond to probing for unused ports.

You must use the

configure terminal command to enter the configuration mode before

you can use these commands.

36.10 Dial-in Management

Connect an external serial modem to the DIAL BACKUP port (or AUX port depending on

your model) to provide a remote management connection in case the ZyWALL’s other WAN

connections are down. This is like an auxiliary interface, except it is used for management

connections coming into the ZyWALL instead of as a backup WAN connection.

36.10.1 AT Command Strings

For regular telephone lines, the default Dial string tells the modem that the line uses tone

dialing. ATDT is the command for a switch that requires tone dialing. If your switch requires

pulse dialing, change the string to ATDP.

36.10.2 DTR Signal

The majority of WAN devices default to hanging up the current call when the DTR (Data

Terminal Ready) signal is dropped by the DTE. When the Drop DTR When Hang Up check

box is selected, the ZyWALL uses this hardware signal to force the WAN device to hang up, in

addition to issuing the drop command ATH.

Table 172 Command Summary: ICMP Filter

COMMAND DESCRIPTION

[no] ip icmp-filter activate Turns the ICMP filter on or off.

ip icmp-filter rule {<1..32>|append|insert

<1..32>} access-group {ALL|ADDRESS_OBJECT}

zone {ALL|ZONE_OBJECT} icmp-type {ALL

|echo-reply |destination-unreachable

|source-quench|redirect|echo-request|

router-advertisement|router-solicitation

|time-exceeded | parameter-problem|

timestamp-request|timestamp-reply|

address-mask-request| address-mask-reply}

action {accept|deny}

Sets an ICMP filter rule.

ADDRESS_OBJECT: The name of the IP address

(group) object. You may use 1-31 alphanumeric

characters, underscores(

_), or dashes (-), but the first

character cannot be a number. This value is case-

sensitive.

ZONE_OBJECT: The name of the zone. You may use 1-

31 alphanumeric characters, underscores(

_), or dashes

(-), but the first character cannot be a number. This value

is case-sensitive.

no ip icmp-filter rule <1..64> Deletes an ICMP filter rule.

ip icmp-filter rule move <1..64> to

<1..64>

Changes the index number of an ICMP filter rule.

show ip icmp-filter status Displays ICMP filter settings.

1 2 ... 300 301 302 303 304 305 306 307 308 309 310 ... 385 386

Komentarze do niniejszej Instrukcji

Brak uwag

ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 Podręcznik Użytkownika Strona 305

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Bramy / kontrolery ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1