RUGGEDCOM ROX II
CLI User Guide
6.8.5.2 Adding a Private Key ........................................................................................... 176
6.8.5.3 Deleting a Private Key .......................................................................................... 176
6.8.6 Managing Public Keys ..................................................................................................... 176
6.8.6.1 Viewing a List of Public Keys ................................................................................ 177
6.8.6.2 Adding a Public Key ............................................................................................. 177
6.8.6.3 Adding an IPSec-Formatted Public Key .................................................................. 178
6.8.6.4 Deleting a Public Key ........................................................................................... 179
6.8.7 Managing Certificates ..................................................................................................... 179
6.8.7.1 Viewing a List of Certificates ................................................................................ 179
6.8.7.2 Viewing the Status of a Certificate ........................................................................ 180
6.8.7.3 Adding a Certificate ............................................................................................. 180
6.8.7.4 Deleting a Certificate ........................................................................................... 181
6.8.8 Managing Known Hosts .................................................................................................. 181
6.8.8.1 Viewing a List of Known Hosts ............................................................................. 182
6.8.8.2 Adding a Known Host .......................................................................................... 182
6.8.8.3 Deleting a Known Host ........................................................................................ 182
6.9 Managing Firewalls ................................................................................................................... 183
6.9.1 Firewall Concepts ........................................................................................................... 184
6.9.1.1 Stateless vs. Stateful Firewalls .............................................................................. 184
6.9.1.2 Linux netfilter ..................................................................................................... 184
6.9.1.3 Network Address Translation ................................................................................ 185
6.9.1.4 Port Forwarding .................................................................................................. 185
6.9.1.5 Protecting Against a SYN Flood Attack .................................................................. 186
6.9.1.6 Protecting Against IP Spoofing .............................................................................. 186
6.9.2 Viewing a List of Firewalls .............................................................................................. 186
6.9.3 Adding a Firewall ........................................................................................................... 187
6.9.4 Deleting a Firewall ......................................................................................................... 188
6.9.5 Working with Multiple Firewall Configurations .................................................................. 188
6.9.6 Configuring the Firewall for a VPN .................................................................................. 188
6.9.7 Configuring the Firewall for a VPN in a DMZ .................................................................... 189
6.9.8 Configuring Netfilter ...................................................................................................... 190
6.9.9 Managing Zones ............................................................................................................ 190
6.9.9.1 Viewing a List of Zones ........................................................................................ 191
6.9.9.2 Adding a Zone .................................................................................................... 191
6.9.9.3 Deleting a Zone .................................................................................................. 192
6.9.10 Managing Interfaces ..................................................................................................... 193
6.9.10.1 Viewing a List of Interfaces ................................................................................ 193
6.9.10.2 Adding an Interface ........................................................................................... 194
6.9.10.3 Associating an Interface with a Zone ................................................................... 195
6.9.10.4 Configuring a Broadcast Address ........................................................................ 195
Table of Contents
xiii