Tavve zoneranger User Manual page 319

portConfig clear
portConfig clear
should be cleared. If the response is "y" or "yes" (case is ignored), the active portConfig table will
be cleared. Otherwise the active portConfig table will be unchanged. If the -f option is specified,
the user will not be prompted.
portConfig config [ item [ value ]]
The configuration items associated with the portConfig table are:
Item
port_config_cache_size
portConfig config
portConfig table.
If no item or value is specified, the values of all configuration items are listed. If an item is specified
with no value, the current value of the specified configuration item is displayed. If an item and a
value are specified, the value of the specific configuration item is set to the specified value.
portConfig test < port-config-name > < transport > < rg-port >
port-config-name
transport
rg-port
Ranger Gateway
portConfig
presented with the specified information.
Unlike the
portConfig test
configuration for a given
subcommand performs an ordered search for the first matching rule in the active portConfig
test
table, similar to the approach that the Ranger Gateway will use to process specific proxy requests.
portConfig File Formats
The various portConfig subcommands that generate configurations (i.e. generate, copy, add,
remove, merge) all generate configuration information in an XML format. An example of this
format, corresponding to the default Ranger Gateway configuration is as follows:
<port-config-list>
ZoneRanger 5.5 User's Guide
can be used to remove all rules from the active portConfig table.
is executed, the user is prompted to confirm that the active portConfig table
Value
Determines the maximum number of entries
in the cache. Valid values are positive
integers in the range 0-10000. The
default value is 100.
can be used to display or modify configuration items associated with the
specifies the name of the port config ruleset
specifies the protocol of ICMP, UDP or TCP
specifies the destination port associated with the incoming request as received by the
test can be used to display the rule which will be used on the Ranger Gateway when
subcommand, which will list all matching rules in a portConfig table
port-config-name , transport ,
<port-config name="Default">
<rule transport="TCP" rg-port="22" protocol="SSH"/>
<rule transport="TCP" rg-port="443" protocol="HTTPS"/>
<rule transport="UDP" rg-port="161" protocol="SNMP"/>
<rule transport="ICMP"/>
</port-config>
<port-config name="ZoneRangerDefault">
and the
rg-port ,
portConfig
When
319