东软防火墙配置
- 格式：pdf
- 大小：113.36 KB
- 文档页数：11
附录命令速查命令页码Aapplication_filter anti dcom-lssass { enable | disable} 2-32application_filter netmeeting { enable | disable} 2-32 application_filter oracle { enable | disable} 2-33 application_filter rtsp { enable | disable} 2-33 application_filter tftp { enable | disable} 2-33 application_filter tuxedo { enable | disable} port number 2-33auth-management local-domain domain-name 2-5auth-management local-user domain-name username rolename 2-5auth-management password domain-name username 2-5BNetEye 防火墙3.2.2命令手册backup ipaddress config-filename2-6Cclear line vty number2-30connection timeout { icmp | udp | syn | fin | est | close | auth } number2-24console timeout number2-29Ddns ipaddress [ primary ]2-12Hhost { group groupname | id number } 2-16hostname hostname 2-16 Iinterface id number zone-name 2-8 interface zone-name { enable | disable } 2-8interface zone-name ipaddress netmask 2-8L附录命令速查license { generate | upload | download } ipaddress filename 2-2Mmode { route | switch } [ anti-attack ] 2-9Nno auth-management domain-name 2-5no auth-management local-user domain-name username 2-5no dns ipaddress 2-12 no host { id | group } 2-16no interface zone-name ipaddress netmask 2-8no proxy address ipaddress 2-12no proxy route ipaddress netmask [ gateway ] 2-11no proxy vlanpass number 2-12no radius-server1-1no route dst-ipaddress netmask zone-name [ ipaddress [ metric number] ] |[metric number [ ipaddress ] ] ] 2-10NetEye 防火墙3.2.2命令手册no route dst-ipaddress netmask ipaddress [ zone-name [ metric number ] ] |[ metric number [ zone-name ] ] 2-10no route dst-ipaddress netmask metric number [ zone-name [ ipaddress ] ] |2-11[ ipaddress [ zone-name ] ]no rule nat number 2-14 no rule nip number 2-20 no rule ip-mac number 2-21no rule local-access number 2-23no rule multicast number 2-22no rule packet-filter number 2-20no system time ntp 2-3no user username 1-2 Ppassword2-5password [ username ] 1-2 ping { ipaddress | hostname | domain } 2-3附录命令速查proxy address ipaddress netmask mac zone-list [ vlan number type 802.1q ] 2-11proxy route dst-ipaddress netmask gateway 2-11proxy vlanpass number 2-12 Rradius-server host ipaddress [ port number ]1-1radius-server port number 1-1 radius-server secret 1-1reboot 2-3reset 2-3restore ipaddress config-filename 2-6route dst-ipaddress netmask ipaddress[ zone-name [ metric number ] ]|[ metric number [ zone-name ] ] 2-10route dst-ipaddress netmask zone-name [ ipaddress [ metric numbe r ] ] |2-10[ metric number [ ipaddress ] ]rule ip-mac move srcnumber dstnumber 2-21rule ip-mac otherip { permit | deny } 2-21NetEye 防火墙3.2.2命令手册rule ip-mac sequence number { enable | disable } 2-21rule ip-mac zone { ipaddress-list | any} macaddress｛enable | disable ｝[ sequence number ] 2-21rule local-access { ip-range | any } [ mac ] zone ipaddress service { ping |authentication | management | auth-pwd } { permit | deny } { enable | disable }2-23[ sequence number ]rule local-access { ip-range | any }[ mac ] zone ipaddress service { tcp | udp }{ port-range | any } { permit | deny } ｛ enable | disable ｝ [ sequence2-23number ]rule local-access move srcnumber dstnumber 2-23rule local-access sequence number advanced worktime { { on week timelist }2-23| off }rule local-access sequence number { enable | disable } 2-23rule multicast move srcnumber dstnumber 2-22 rule multicast sequence number advanced audit { on | off } 2-22rule multicast sequence number advanced worktime { { on week timelist } |2-22off }rule multicast sequence number { enable | disable } 2-22rule multicast source client { iplist | any } { permit | deny }｛enable | disable ｝2-22[ sequence number ]附录命令速查rule nat move srcnumber dstnumber 2-14rule nat non-single src-zone { sip-list | any } dst-zone { dip | dip-range }2-14{service { { { tcp | udp } sip { { sport dip dport } | { { sport-range | any } dip } }[ domain ] } | { icmp sip dip } } enable | disable } [ sequence number ]rule nat sequence number { enable | disable } 2-14rule nat single src-zone sip dst-zone dip { enable | disable } [ sequence2-14number ]rule nip move srcnumber dstnumber 2-21 rule nip sequence number advanced worktime { { on week timelist } | off } 2-20rule nip sequence number { enable | disable } 2-21rule nip src-zone { smac-list | any } dst-zone { dmac-list | any } protocol name{ protocolnumber | any} { permit | deny } ｛enable | disable ｝ [ sequence2-20number ]rule packet-filter move srcnumber dstnumber 2-20rule packet-filter sequence number advanced audit { on | off } 2-19rule packet-filter sequence number advanced authentication { { on2-19auth-domain } | off }rule packet-filter sequence number advanced syncheck { on | off } 2-19rule packet-filter sequence number advanced worktime { { on week timelist } |2-19off }rule packet-filter sequence number { enable | disable } 2-20NetEye 防火墙3.2.2命令手册rule packet-filter src-zone { sip-list | any } dst-zone { dip-list | any } protocolname icmp { echoreply | echo | info_request | info_reply | timestamptimestampreply | address | addressreply | dest_unreach | source_quench |2-18 redirect | time_exceeded | parameterprob | all } { permit | deny } ｛ enable |disable ｝ [ sequence number ]rule packet-filter src-zone { sip-list | any } dst-zone { dip-list | any } protocolname other { protocolnumber | any }{ permit | deny } ｛ enable | disable ｝2-19 [ sequence number ]rule packet-filter src-zone { sip-list | any } dst-zone { dip-list | any } protocolname tcp { srcport | any } { dstport | any } { permit | deny } ｛ enable |disable ｝ [ sequence number ] 2-18rule packet-filter src-zone { sip-list | any } dst-zone { dip-list | any } protocolname udp { srcport | any } { dstport | any } { permit | deny } ｛ enable |2-18 disable ｝ [ sequence number ]Sservice audit { enable | disable } { local | network ipaddress | syslog3-1 ipaddress port }service ids { enable | disable } 2-28 service telnet { enable vty number [ timeout time ] | disable } 2-29 show connection status2-24附录命令速查show connection timeout { icmp | udp | syn | fin | est | close | auth | all } 2-24show dns 2-13show host 2-16show interface [ zone-name ] 2-8 show line 2-30show mode 2-9show proxy address 2-12show proxy route 2-11show proxy vlanpass 2-12show radius-server 1-2show route 2-11show rule ip-mac [ number ] 2-22show rule local-access [ number ] 2-24show rule multicast [ number ] 2-23show rule nat [ number ] 2-14NetEye 防火墙3.2.2命令手册show rule nip [ number ] 2-21 show rule packet-filter [ number ] 2-20show service audit 3-1show service ids 2-28show service telnet 2-30show system info 2-2show system time 2-3show user [ username ] 1-2shutdown 2-3sync { info-down | info-up } ipaddress filename 2-16system time ntp { ipaddress | domain-name | update | { week <1-7>2-2hh:mm:ss } }system time date time 2-2 system update ipaddress filename 2-3Tterminal language 2-30附录命令速查Uuser username{ local | radius } { security [ audit ] | audit [ security ] }1-1附录-11。
