Set Firewall - Fujitsu ETERNUS DX80 S2 Cli User's Manual

Chapter 4 Function/System Settings and Display
4.3 Network Management > set firewall

set firewall

This command is used to enable and disable the individual Ethernet application service ports. The settings
listed in the table below must be performed for each Ethernet port.
http
https
telnet
SSH
ETERNUS Maintenance Secure
ICMP
SNMP
RCIL
• All the service ports can be disabled by using this command, but all software, CLI, GUI, and external
software such as monitoring software will not be able to establish a connection.
- Contact your maintenance engineer when an ETERNUS DX410 S2/DX440 S2 or ETERNUS DX8100 S2/
DX8700 S2 is used.
- For the ETERNUS DX80 S2/DX90 S2, the initial "all ports open" state can be restored by pushing the IP
RESET switch of the system. However, it should be noted that this will also clear all the network
information. For further information, refer to "ETERNUS DX80 S2/DX90 S2 Disk storage system User's
Guide -Installation-".
• When any settings except for ICMP are changed, the CLI session is automatically disconnected after the
command is executed. Note that the session is disconnected even if a setting value not involved in CLI
connections is changed. For example, your system opens SSH and HTTPS ports, and closes all other ports.
At that case, if you requests to close only HTTPS port, your connection connected by SSH will be
disconnected. After disconnecting the connection, retry to log in the system.
• It can take a little time for the requested changes to be applied. For example, when GUI is used to request
the opening of the SSH port, it may take around a minute before an SSH connected CLI session can be
initiated.
■ Syntax
set firewall -port {maintenance | remote | fst} [-http {open | close}]
[-https {open | close}] [-telnet {open | close}] [-ssh {open | close}]
[-maintenance-secure {open | close}] [-icmp {open | close}]
[-snmp {open | close}] [-rcil {open | close}] [-ip-redirect-test {open | close}]
[-confirm-close-all {yes | no}]
Protocol
GUI
CLI
ETERNUS CLI User's Guide
Copyright 2015 FUJITSU LIMITED
Service type
Specify "-confirm-close-all yes" to disable all of the service ports for
the GUI and CLI connections or both of the service ports for the CLI
connection. If this parameter is not specified, the CLI command
terminates with an error message.
Secure storage platform software (such as monitoring software)
ping
SNMP protocol
RCIL
463
P2X0-1030-09ENZ0