Filter
Top Products
Chapter 38 System Remote Management
ZyWALL (ZLD) CLI Reference Guide
294
The following command sets the password (secret) for read-write (rw) access.
The following command sets the IP address of the host that receives the SNMP notifications to
172.23.15.84 and the password (sent with each trap) to qwerty.
38.9 ICMP Filter
The ip icmp-filter commands are obsolete. See Chapter 16 on page 133 to configure firewall
rules for ICMP traffic going to the ZyWALL to discard or reject ICMP packets destined for the
ZyWALL.
Configure the ICMP filter to help keep the ZyWALL hidden from probing attempts. You can specify
whether or not the ZyWALL is to respond to probing for unused ports.
You must use the
configure terminal command to enter the configuration mode before you
can use these commands.
38.10 Dial-in Management
Connect an external serial modem to the DIAL BACKUP port (or AUX port depending on your
model) to provide a remote management connection in case the ZyWALL’s other WAN connections
are down. This is like an auxiliary interface, except it is used for management connections coming
into the ZyWALL instead of as a backup WAN connection.
Router# configure terminal
Router(config)# snmp-server community secret rw
Router# configure terminal
Router(config)# snmp-server host 172.23.15.84 qwerty
Table 177 Command Summary: ICMP Filter
COMMAND DESCRIPTION
[no] ip icmp-filter activate Turns the ICMP filter on or off.
ip icmp-filter rule {<1..32>|append|insert
<1..32>} access-group {ALL|ADDRESS_OBJECT}
zone {ALL|ZONE_OBJECT} icmp-type {ALL |echo-
reply |destination-unreachable |source-
quench|redirect|echo-request| router-
advertisement|router-solicitation |time-
exceeded | parameter-problem| timestamp-
request|timestamp-reply| address-mask-request|
address-mask-reply} action {accept|deny}
Sets an ICMP filter rule.
ADDRESS_OBJECT: The name of the IP address (group) object.
You may use 1-31 alphanumeric characters, underscores(
_), or
dashes (-), but the first character cannot be a number. This value
is case-sensitive.
ZONE_OBJECT: The name of the zone. You may use 1-31
alphanumeric characters, underscores(
_), or dashes (-), but the
first character cannot be a number. This value is case-sensitive.
no ip icmp-filter rule <1..64> Deletes an ICMP filter rule.
ip icmp-filter rule move <1..64> to <1..64> Changes the index number of an ICMP filter rule.
show ip icmp-filter status Displays ICMP filter settings.