Tavve zoneranger User Manual page 316

portConfig
portConfig subcommand [arguments]
portConfig
translations used in Proxy Access Control. The portConfig command is organized as a set of
subcommands, each of which supports different parameters and options. Most portConfig
subcommands provide the option to operate directly on the active portConfig table of a running
Ranger Gateway in real time, or to work offline with text files, which can be inspected and edited
using a text editor, then installed on the Ranger Gateway when required modifications have been
completed.
subcommand
•
copy [–in input_file ] [-out output_file ]
•
add [–in input_file ] [-out output_file ] port-config-name transport
rg-port protocol [ zr-port ]
•
remove [–in input_file ] [-out output_file ] port-config-name
[ transport ] [ rg-port ] [ protocol ] [ zr-port ]
•
merge [–in input_file ] [-out output_file ] merge_file
•
list [–in input_file ] [ port-config-name [ transport [ rg-port ] ]
•
clear [-f]
•
config [ item [ value ]]
•
test port-config-name transport rg-port
portConfig copy [–in input_file ] [-out output_file ]
indicates the name of the input file containing portConfig information
-in
indicates the name of the output file to write portConfig information
-out
portConfig copy
•
•
•
If no input file is specified, the active portConfig table is used as the source of the copy. If no
output file is specified, the input configuration is automatically copied to the active portConfig
table. If an output file is specified, the input configuration is written to the specified file and the
active portConfig table is unchanged.
Note that the
XML, or a simple text format. See PortConfig File Formats for more details.
portConfig add [-in input-file ] [-out output-file ] < port-config-name >
indicates the name of the input file containing portConfig information
-in
indicates the name of the output file to write portConfig information
-out
port-config-name
transport
ZoneRanger 5.5 User's Guide
manages named sets of rules which describe allowable ports, protocols, and port
can be one of the following:
can be used for the following:
To copy the content of the active portConfig table to a specified text file.
To copy the content of a specified text file to the active portConfig table.
To copy the content of one specified text file to another.
subcommand always outputs XML. The input format can be
portConfig copy
< transport > < rg-port > < protocol > [< zr-port >]
specifies the name of the port config ruleset
specifies the protocol of ICMP, UDP or TCP
316