Tavve zoneranger User Manual page 321

portMap
portMap subcommand [arguments]
Manages sets of rules which determine the Port Config ruleset to use based on the source
portMap
address of the requesting client and the destination address of the target device used in Proxy Access
Control. The
different parameters and options. Most portMap subcommands provide the option to operate
directly on the active portMap table of a running Ranger Gateway in real time, or to work offline
with text files, which can be inspected and edited using a text editor, then installed on the Ranger
Gateway when required modifications have been completed.
subcommand
•
copy [–in input_file ] [-out output_file ]
•
add [–in input_file ] [-out output_file ] src-address
address port-config-name
•
remove [–in input_file ] [-out output_file ] src-address
address port-config-name
•
merge [–in input_file ] [-out output_file] merge_file
•
list [–in input_file ]
•
clear [-f]
•
config [ item [ value ]]
•
test src-address dest-address transport rg-port
portMap copy [–in input_file ] [-out output_file ]
indicates the name of the input file containing portMap information
-in
indicates the name of the output file to write portMap information
-out
portMap copy
•
To copy the content of the active portMap table to a specified text file.
•
To copy the content of a specified text file to the active portMap table.
•
To copy the content of one specified text file to another.
If no input file is specified, the active portMap table is used as the source of the copy. If no output
file is specified, the input configuration is automatically copied to the active portMap table. If an
output file is specified, the input configuration is written to the specified file and the active portMap
table is unchanged.
Note that the
a simple text format. See portMap File Formats for examples.
portMap add [-in input-file ] [-out output-file ] < src-address > < dest-
indicates the name of the input file containing portMap information
-in
indicates the name of the output file to write portMap information
-out
src-address
dest-address
port-config-name
ZoneRanger 5.5 User's Guide
command is organized as a set of subcommands, each of which supports
portMap
can be one of the following:
can be used for the following:
subcommand always outputs XML. The input format can be XML, or
portMap copy
address > < port-config-name >
indicates the source IP address of the incoming request.
indicates the destination IP address of the managed device
name of the Port Config rule
dest-
dest-
321