Tavve zoneranger User Manual page 310

Note that if NAT is in effect between the Ranger Gateway and the ZoneRanger, querying the
databases of joined ZoneRangers will not produce useful results, because the listed subnets or
addresses will reflect the ZoneRangers' perspective, as opposed to the Ranger Gateway's
perspective. The output of the
so that the resulting routes can be merged with the GVI route list using the
subcommand.
It is highly recommended that the output of the
manually inspected and verified before the resulting routes are merged with the GVI route list.
This is especially true if the
process may have discovered addresses and subnets that are beyond the scope of the network
being managed, and the creation of virtual interface routes for such addresses would interfere
with the management application's ability to communicate with devices using those addresses.
It should also be noted that the -
-address option, because the resulting list will typically be much smaller, resulting in a
corresponding decrease in the number of virtual interface routes that will need to be created.
gvi add-route < subnet> [< subnet> ...]
subnet
gvi add-route
route list
The route manager within the GVI service maintains a persistent list of subnets and individual
IP addresses that correspond to DMZ devices, and therefore, should be routed to the virtual
interface. The
individual IP addresses to this list. If the GVI service is enabled, the route manager will create a
corresponding static route for each subnet or individual IP address in the list.
Each parameter after the add-route subcommand name can either be a specific IP address, or a
subnet description. Any of the following formats can be used to describe a subnet:
•
•
•
•
gvi remove-route < subnet> [< subnet> ...]
subnet
gvi remove-route
the GVI route list
If the GVI service is enabled, the route manager will delete the corresponding static route for
each subnet or individual IP address that has been removed from the list.
gvi merge-routes < input-file >
input-file
GVI route list.
gvi merge-routes
addresses listed in the specified input file.
ZoneRanger 5.5 User's Guide
gvi generate-routes
-database
indicates the subnet or individual IP address to add to the GVI route list
subcommand adds one or more subnets or individual IP addresses to GVI
gvi add-route
10.1.10.*
10.1.10.[0-255]
10.1.10.0/255.255.255.0
10.1.10.0/24
indicates the subnet or individual IP address to remove from the GVI route list
subcommand removes one or more subnets or individual IP addresses from
specifies the file containing the list of subnets or IP addresses to add to the
subcommand adds virtual interface routes for subnets and individual IP
subcommand can be redirected to a file,
gvi generate-routes
option is used because the ZoneRanger discovery
option should, in general, be preferred over the
subnet
subcommand can be used to add one or more subnets or
gvi merge-routes
subcommand be
310