Quick Start - HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual

ProCurve Secure Router OS Firewall—Protecting the Internal, Trusted Network

Quick Start

This section provides the commands you must enter to quickly:
enable the firewall
check for optional attacks
enable and disable ALGs
set policy timeouts
configure log forwarding
Only a minimal explanation is provided. If you need additional information
about any of these options, see "Contents" on page 4-1 to locate the section
and page number that contains the explanation you need.
1. Enable the firewall:
ProCurve(config)# ip firewall
2. If so desired, enable the firewall to check for WinNuke attacks:
ProCurve(config)# ip firewall check winnuke
3. Enable any necessary ALGs and disable ALGs for applications that your
organization does not want hosts to use. FTP, SIP, and PPTP are enabled
by default. H.323 is disabled by default:
Syntax: [no] ip firewall alg [ftp | h323 | sip | pptp]
4. Set the priority level for events logged to the router's event history.
Syntax: event-history priority [info | notice | warning | error | fatal]
For example:
ProCurve(config)# event-history priority info
5. If so desired, change the timeouts for TCP and UDP and ICMP sessions:
Syntax: ip policy-timeout [tcp | udp] all-ports <seconds>
Syntax: ip firewall policy-timeout icmp <seconds>
Quick Start
4-31