Tavve zoneranger User Manual page 318

indicates the name of the input file containing device group information
-in
indicates the name of the output file to write device group information
-out
merge-file specifies the name of a file that contains a set of entries to be merged to the input
configuration.
portConfig merge
•
To add new portConfig table rules.
•
To modify existing portConfig table rules.
The logic for merging is similar to the logic for adding a single rule. If the input configuration
already contains a rule with the matching
to one of the rules to be merged, the existing rule will be replaced. Otherwise the new
protocol
rule is added. One way in which the
subcommand is that when the merge subcommand replaces an existing rule, the existing rule is
removed, and the rule that replaces it is added to the end of the configuration. As a result, the
portConfig
configuration. If a file containing a set of rules is merged onto a portConfig table configuration, the
merged rules will appear in the resulting configuration in the same order they appear in the merge
file.
The
portConfig merge
specified text file. If no input file is specified, the active portConfig table is used. If no output file is
specified, the resulting configuration is automatically copied to the active portConfig table. If the
output file is specified, the resulting configuration is written to the specified file and the active
portConfig table is unchanged.
portConfig list [–in input_file ] [< port-config-name > [< transport >
indicates the name of the input file containing port information
-in
port-config-name
transport
rg-port
Ranger Gateway
The portConfig list subcommand can be used for the following purposes:
•
To list all rules in a configuration.
•
To list the rules in a configuration that match a given
•
To list the rules in a configuration that match a given
transport .
•
To list the rules in a configuration that match a given
and
If no
port-config-name , transport ,
configuration will be listed. Otherwise, only those rules that match specified
transport ,
The
portConfig list
specified text file. If no input file is specified, the active portConfig table is used.
portConfig clear [-f]
ZoneRanger 5.5 User's Guide
can be used for the following:
subcommand can be used to rearrange the order of rules within a
merge
subcommand can read input from the active portConfig table, or from a
[< rg-port >]]]
specifies the name of the port config ruleset
specifies the protocol of ICMP, UDP or TCP
specifies the destination port associated with the incoming request as received by the
rg-port .
and values will be listed.
rg-port
subcommand can read input from the active portConfig table, or from a
portconfig-name , transport , rg-port ,
subcommand differs from the add
portConfig merge
port-config-name .
port-config-name , transport ,
or value is specified, all of the rules in the input
rg-port
and
and
port-config-name
port-config-name ,
318