Tavve zoneranger User Manual page 320

</port-config-list>
The portConfig commands that read configurations (i.e. copy, add, remove, merge, list) are able to
read configuration input in the XML format, and also in a simplified text format. An example of this
format, corresponding to the XML example above, is as follows:
Default TCP 22 SSH
Default TCP 443 HTTPS
Default UDP 161 SNMP
Default ICMP
ZoneRangerDefault TCP 22 SSH
ZoneRangerDefault TCP 23 TELNET
ZoneRangerDefault TCP 80 HTTP
ZoneRangerDefault TCP 443 HTTPS
ZoneRangerDefault TCP 5432 SQL
ZoneRangerDefault UDP 161 SNMP
ZoneRangerDefault ICMP
portControl
portControl zoneranger [ -list | portName setting ]
zoneranger
displays the current port settings n the specified ZoneRanger
-list
portName
radius, snmpAgent, ssh, syslog, tacacs, telnet, tftp, trap
setting
for snmpAgent)
snmpAgent
portControl
ZoneRanger has numerous ports which may be configured to be accessible and to determine how
that port may be accessed. The
ZoneRanger discovery. However, to disable external access, use the Configuration > SNMP page
Agent tab on the ZoneRanger web interface and uncheck all three SNMP versions next to Agent
Responds To.
ZoneRanger 5.5 User's Guide
<rule transport="TCP" rg-port="22" protocol="SSH"/>
<rule transport="TCP" rg-port="23" protocol="TELNET"/>
<rule transport="TCP" rg-port="80" protocol="HTTP"/>
<rule transport="TCP" rg-port="443" protocol="HTTPS"/>
<rule transport="TCP" rg-port="5432" protocol="SQL"/>
<rule transport="UDP" rg-port="161" protocol="SNMP"/>
<rule transport="ICMP"/>
</port-config>
specifies the name of the ZoneRanger
specifies the port to be configured. Supported values are:
specifies the incoming value. Supported values are:
,
eth0, eth1, both, gateway
only).
enables and disables various ZoneRanger services.
snmpAgent
disabled (not applicable
(for
http, https, ssh, telnet,
(port 161) may not be disabled since it is needed for
http, https, ntp,
320