Support User Manuals

Enterasys Networks XSR CLI Router User Manual

Open as PDF

of 684

Firewall Feature Set Commands

XSR CLI Reference Guide 16-119

Syntax

ip firewall java {all, none, selected network_name}

ip firewall activex {all, none, selected network_name}

Syntax of the “no” Form

ThenoformofthiscommanddisablesJavaorActiveX:

no ip firewall java/activex {all, none, selected network_name}

Default

DenyallHTMLpageswithJavaandActiveXapplets

Mode

Globalconfiguration:XSR(config)#

Example

Thefollowingexampleconfigurescorporate‐networkasanetworkgroupobjectlistingallreachable

networks,excludinganyActiveXapplets,atcorporateheadquarters:

XSR(config)#ip firewall java selected corporate-network

XSR(config)#ip firewall activex none

ip firewall load

Thiscommandloadscurrentfirewallsettingsintotherouter’sinspectionengine.Thecurrent

configurationcomprisesallCLIcommandsthathavebeenenteredsincethelastload.Executing

thiscommandclearsallsessionsthusrequiringallTCPconnectionsbere‐established.

Becausethenoversionofthiscommandisnotavailable,in

ordertoundoarecentfirewall

configurationyoumustexecutenoversionsofcommandswhichinvoketheconfiguration.

Optionally,youcanbuildtheconfigurationbutnotdisturbthefirewallengine.Thisisauseful

tooltoconfigurethefirewallwhileincrementallycheckingitsvalidity.Also,youcanschedulea

loadalthough

thisoptionblocksanyfirewallconfigurationintheinterim.

Syntax

ip firewall load delay [trial]{1-7 [hh:mm]|hh:mm}[enable |disable]

all

PermitHTMLpageswithJavafromallIPaddresses.

none

DenyHTMLpageswithJavafromanyIPaddress.

selected

PermitHTMLpageswithJavafromselectedIPaddresses.

network_name

Anyinternalorexternalnetworkornetwork‐groupobject.

trial

Buildsconfigurationbutdoesnotloaditintothefirewallengine.

1-7 hh: mm:

Intervalintheformatdays<1‐7>HH:MMtowaituntilthefirewallloador

restartisperformed.Noobjectcanbemodifiedduringthistimeexcepta

trialload.Loggingrestartswhentheloadruns.Thedaysvalueisoptional

andifentered,thehoursandminutesvaluesarealso

optional.

previous next