Zte ZXR10 8900 Series User Manual page 88

ZXR10 8900 Series User Manual (FW Volume)
78 Confidential and Proprietary Information of ZTE CORPORATION
Parameter
<string6>
service
<string7>
schedule
<string8>
sport
<string9>
orig_dst
<string10>
permanent
on|off
log
on|off| alarm
enable
Description
This is one string, indicating preset address
name. Multiple address names can be
input and space is used between each two
address names and all address names are
quoted with single quotes, such as 'aa ll'.
This sets service resource.
This is one string. It must be one or
more names of system default services
or customized services. As for multiple
service names, space is used between
each two service names and all service
names are quoted with single quotes, such
as 'IP ICMP'. The case of names must be
identical with that defined by system, such
as 'IP'. To view service resources, execute
command ZXR10#define service show
default.
This selects time resource, which must be
defined in previous define module.
This is the object name.
This specifies service resource on source
port.
This is one string, which must be
system-predefined service resource name.
This specifies destination address before
NAT.
This is one string, which must be
system-predefined address name.
This is optional. switch of long connection.
It is disabled by default, which means
the connection is an common connection.
In usual cases, FW disconnects one
connection if communication on it is
idle for a period for improving security
and releasing communication resources.
However connection for some applications
requires long-time holding, even if the
connection is in idle state. For example,
ATM must hold connection with server at
processing center, so this connection must
be set to long connection.
On/off, indicating long connection and
common connection.
This is optional. It sets whether to record
the event in log or prompt alarm message
when a packet matches rule. It doesn't
record event into log by default.
This records the event into log/doesn't
record the event into log/generates alarm.
This is optional, indicating whether to
enable this rule. The rule is enabled by
default.