Home » Lantronix Manuals » Electronics Accessories » Lantronix SLM » Manual Viewer

Lantronix SLM Lantronix SLM - User Guide - Page 76

IPv4 Filter Commands, Syntax, Example, Description

Get Lantronix SLM PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 76 highlights

7: Network and Modem Settings IPv4 Filter Setting Description Filter Test Period (minutes) Note: There may be times when a complex IPv4 filter set may accidentally lock all users out of the SLM. To allow testing of new filter sets, the administrator can enable and test the filter sets for a specified period. Before enabling an untested complex filter, enter the number of minutes you would like filters to be active before being automatically disabled.  A zero (0) in this field indicates that filtering will not be automatically disabled, and the Enable IPv4 Filters state you specified will take place immediately.  A non-zero value is the number of minutes until IPv4 filters are disabled, whether or not a lockout condition occurs.  Example:  You set this value to 5 and enable IPv4 filters. If your system locks up because of a bad filter set definition, then in five minutes, filtering will automatically be disabled. Note that even if there are no problems with the filter set, IPv4 filtering will still be disabled in 5 minutes. Once you are satisfied with the IPv4 filter definitions, return to this page and set the Filter Test Period to 0 and resubmit to enable IPv4 filtering permanently. Note: If you submit a new Filter Test Period (larger than 0) when the IP filter is already in test mode, the test timer resets to the new test period and starts test mode again. If you submit a zero Filter Test Period when the IP filter is in test mode, the test mode stops, and the specified Enable IPv4 Filters state takes effect immediately. If you have physical access to the SLM, you can always disable IPv4 from the console using the CLI. 4. To save, click the Submit button. 5. In response to the confirmation request, click OK. A confirmation message displays in the message area. Note: To determine whether the IPv4 filter is still in test mode, when the test mode was started, and how long until the test mode ends, click the Show tab on the IPv4 Filters page or on an individual IPv4 Filter Set page. IPv4 Filter Commands set ipfilter delete Syntax set ipfilter delete Example: set ipfilter delete MyFilter Description Deletes IPv4 filter set by specified name. set ipfilter delete all Syntax set ipfilter delete all SLM User Guide 76

Section	Page
Secure Lantronix Management (SLM) Virtual Secure Lantronix Management (vSLM) Appliance User Guide	1
Copyright & Trademark	2
Open Source Software	2
Warranty	2
Contacts	2
Disclaimer	3
Revision History	3
Table of Contents	5
List of Figures	14
List of Tables	19
1: About This Guide	23
Purpose and Audience	23
Chapter Summaries	23
Additional Documentation	24
Terminology	25
2: Introduction	27
Benefits	27
IT Management Application	28
Firmware	29
Protocols Supported	29
SLM Hardware	30
Product Information Label	30
SLM-01 and SLM-02 Package Contents	31
3: Quick Setup	32
Installing the SLM	32
Connecting a Terminal to the Console Port	32
Connecting to a Network Port	33
Connecting to the Power Supply	33
Monitoring the LEDs	33
Quick Network Setup	34
Required Information	34
Using Detector	34
Using Quick Setup on the Command Line Interface	37
Using the Web Interface	39
Quick Setup Command	44
Syntax	44
Description	44
Next Steps	44
4: Virtual SLM Deployment	45
Minimum Hardware Requirements	45
Deployment Instructions	45
30-Day Trial License	46
5: Web and Command Line Interfaces	48
Web Interface	48
Logging in	48
Typical SLM Web Page	49
Notes	50
Web Page Help	51
Logging Out of the Web Interface	52
Command Line Interface (CLI)	52
Logging into the CLI	52
Commands	53
Command Help	54
Tips	54
Logging Out of the CLI	54
CLI Commands	55
Session Commands	55
Syntax	55
6: Configuration and Operation Overview	57
Step 1: Configure Network Settings	57
Step 2: Define Authentication Methods	57
Step 3: Set Up User Account Groups and Accounts	57
Step 4: Auto-Detect Devices	58
Step 5: Associate Account Groups with Ethernet and Managed Devices	58
Step 6: Manage Devices	58
Step 7: Maintain the SLM	58
7: Network and Modem Settings	60
IP Address and Other Required Information	60
Using the Web Interface	61
Network Port(s)	62
Network Gateways	65
Keep Alive	66
Viewing Network Statistics	67
Changing the Current User's Password	67
Network Commands	68
IPv4 Filters	70
Viewing a List of IPv4 Filters	70
Adding an IPv4 Filter	70
Updating or Deleting an IPv4 Filter	72
Viewing the System IPv4 Filter Sets	74
Setting Properties of an IPv4 Filter	75
IPv4 Filter Commands	76
IPsec Management	78
Internet Key Exchange (IKE) Policies	78
Viewing a List of IKE Policies	78
Adding an IKE Policy:	80
Updating or Deleting an IKE Policy	82
VPN Connections	83
Viewing a List of VPNs	83
Adding a VPN	84
Updating or Deleting a VPN	85
Connecting a VPN	86
Modem Management	86
Viewing a List of Modems	86
Configuring a Modem	87
Enabling or Disabling Dial-in Connections	89
Viewing a List of Profiles	89
Adding a Profile	90
Updating and Deleting a Profile	93
Discovering a USB Modem	93
Modem Commands	94
Dial Account Commands	95
8: User Management	99
User Authentication Methods	99
NIS	101
LDAP	103
RADIUS	105
Kerberos	106
TACACS+	108
SecurID	109
SSH Keys	110
Copy Keys	114
Authentication Commands	114
Account Groups	117
Account Group Types	117
Viewing Account Groups	118
Adding an Account Group	118
Updating or Deleting an Account Group	119
Setting Password Requirements for User Accounts	119
Assigning Account Group Device Rights	121
Viewing Currently Logged-In Accounts	123
Account Group Commands	124
Accounts	125
Viewing Accounts	126
Adding an Account to the Administrators Account Group	127
Adding an Account to an Ethernet or Managed Device Account Group	129
Updating or Deleting an Account	131
Account Commands	132
9: Ethernet Device Management	135
Auto-Detecting Devices	135
Auto-Detect Commands	137
Ethernet Devices	139
Listing Devices	139
Adding a Device Manually	141
Updating or Deleting Ethernet Device Settings	145
Device Locator	147
Configuring Device Racks	148
Assigning Devices to Racks	149
Viewing Ethernet Device and Rack Locations	150
Persistent Connections	150
Polling	156
SLC/SLB Local Connections	157
Device Modem	158
Viewing Session & Audit Log Files, Ping and SNMP Walk	159
Traps	160
Properties (Ethernet Device Menu Tree)	162
Port Access	163
Updating Passwords in Bulk	167
Changing SNMP Settings for SLC, SLB and SLPs in Bulk	169
SLM Proxy	170
Ethernet Device Commands	171
Persistent Connection Commands	174
Trap Commands	176
Ports	178
Viewing a List of Ports	179
Adding a Port	180
Updating or Deleting a Port	183
Connecting Directly to the Port of an SLC or SLB	185
Statistics	186
Applying Power to SLP Ports on a Single Device	186
Viewing Port Logs	187
Port Commands	188
10: Managed Devices	190
Managed Device Groups	191
Viewing All Managed Devices	191
Viewing Managed Device Groups	192
Adding a Managed Device Group	193
Updating or Deleting a Managed Device Group	193
Configuring Polling Settings	194
Managed Device Group Commands	195
Connecting to a Managed Device	195
Creating Individual Managed Devices	197
From a Port	198
From a Ports List	199
From an Ethernet Device	201
Fusing Managed Devices	202
Methods of Fusing	202
Guidelines	202
Fusing a Port with an Existing Managed Device	202
Fusing an Ethernet Device with an Existing Managed Device	203
Continuing the One-at-a-Time Fusion Process	204
Fusing Managed Devices on the Managed Device Group Page	204
Configuring a Modem Connection to a Managed Device	206
Configuring a Managed Device	207
Updating or Deleting a Managed Device	208
Managed Device Commands	208
Administrators, Ethernet Account Users and Menu Only Users	208
Managed Device Users	212
11: Operation and Maintenance	214
Searching for Ethernet Devices, Ports, Persistent Connections, Managed Devices, and Users	214
Search for an Ethernet Device	215
Search for Ports	217
Search for Persistent Connections	219
Search for Managed Devices	219
Search for Users	220
Using Wildcards	222
Search Commands	222
Connecting to Ethernet and Managed Devices	224
Connections Overview	224
Ethernet Devices - Connection Methods	224
Managed Devices - Connection Methods	225
Browsing to an Ethernet or Managed Device's Web Page	225
Making a Secure Channel Connection to an SLC, SLM, or SLB	226
Making an SSH Connection to an Ethernet or Managed Device	227
Making a Web Channel Connection to an SLC	228
Making a Telnet Connection to an Ethernet device	229
Connection Commands	230
Administrators, Ethernet Users and Menu Only Users	230
Managed Device Users	231
Services	232
Banners	234
SSL	235
Status	236
Services Commands	239
Maintenance	240
Maintenance Commands	243
Date and Time	245
Date and Time Commands	246
SNMP & Syslog	247
Device Firmware Updates	249
SLM Firmware	249
SLC/SLB Firmware	251
SLP Firmware	253
Spider Firmware	254
WiBox Firmware	255
UDS/SDS Firmware Updates	257
Managing Alternate SLMs	258
Managing Devices Through the Actions Tab	259
Using the Actions Tab	259
Rebooting or Shutting Down	260
Getting a Log File	260
Getting or Restoring a Configuration File	261
Getting a Sysconfig File	261
Getting or Pushing SSH Keys	261
Reading Information	262
Add Applet	262
Issuing a CLI Command	263
Viewing Progress of Update FW and CLI Commands	263
Events	265
Event Management	265
Updating and Deleting Events	270
Viewing the Event Log	271
Clearing the Event Log	271
Files	271
File Types	271
File Format	273
Viewing, Deleting, and Renaming Files	273
Exporting, Uploading, and Downloading Files	275
Copying Files	277
Setting up NFS	278
Setting up CIFS	279
Setting up Log Properties	281
Logging Commands	283
12: Using SLM on a Mobile Browser	288
Requirements	288
Using the SLM Mobile Browser	288
Logging in to the SLM	288
Using Links to Select Options	289
Using the Keypad to Select Options	289
Obtaining More Data	289
Logging Out	290
Main Menu	291
Status Menu	292
System Information	292
Connections	293
Route Information	294
Device Menu	294
Ethernet Devices	295
Ethernet Unreachable Devices	296
Managed Devices	297
Log Menu	298
Filtering Logs	298
View Logs	299
Appendix A: Command Reference	301
Introduction to Commands	301
Command Syntax	301
Command Help	302
Tips	302
Authentication Commands	303
Account Commands	306
Account Group Commands	308
Administrative Commands	309
All Devices Commands	313
Auto-Detect Commands	314
CLI Commands	316
Connection Commands	316
Administrators, Ethernet Users and Menu Only Users	316
Managed Device Users	318
Date and Time Commands	320
Diagnostic Commands	320
Dial Account Commands	322
Ethernet Device Commands	324
IPv4 Filter Commands	328
Logging Commands	330
Audit Log	330
Event Log	332
Port Log	332
Session Log	334
System Log	335
Trap Log	337
Maintenance Commands	339
Managed Devices	341
Administrators, Ethernet Account Users and Menu Only Users	341
Managed Device Users	345
Menu Commands	346
Modem Commands	347
Network Commands	349
Persistent Connection Commands	351
Port Commands	353
Search Commands	355
Services Commands	356
Session Commands	357
SSH Key Commands	358
Task Progress Command	358
Appendix B: Security Considerations	360
Security Practice	360
Factors Affecting Security	360
Available Services and Port Numbers	360
Appendix C: Safety Information	362
Safety Precautions	362
Cover	362
Power Plug	362
Input Supply	362
Grounding	362
Rack	362
Port Connections	363
Appendix D: Technical Specifications	364
Appendix E: Compliance	365
SLM-01	365
SLM-02	366

Match case Limit results 1 per page

7: Network and Modem Settings

SLM User Guide

To save, click the

Submit

button.

In response to the confirmation request, click

. A confirmation message displays in the

message area.

Note:

To determine whether the IPv4 filter is still in test mode, when the test mode was

started, and how long until the test mode ends, click the Show tab on the IPv4 Filters page

or on an individual IPv4 Filter Set page.

IPv4 Filter Commands

set ipfilter delete

Syntax

set ipfilter delete <Name>

Example:

set ipfilter delete MyFilter

Description

Deletes IPv4 filter set by specified name.

set ipfilter delete all

Syntax

set ipfilter delete all

Filter Test Period (minutes)

Note:

There may be times when a complex IPv4 filter set may accidentally

lock all users out of the SLM. To allow testing of new filter sets, the

administrator can enable and test the filter sets for a specified period.

Before enabling an untested complex filter, enter the number of minutes you

would like filters to be active before being automatically disabled.



A zero (0) in this field indicates that filtering will not be automatically

disabled, and the Enable IPv4 Filters state you specified will take place

immediately.



A non-zero value is the number of minutes until IPv4 filters are disabled,

whether or not a lockout condition occurs.



Example:

You set this value to 5 and enable IPv4 filters. If your system locks up

because of a bad filter set definition, then in five minutes, filtering will

automatically be disabled. Note that even if there are no problems with

the filter set, IPv4 filtering will still be disabled in 5 minutes. Once you

are satisfied with the IPv4 filter definitions, return to this page and set

the Filter Test Period to 0 and resubmit to enable IPv4 filtering

permanently.

Note:

If you submit a new Filter Test Period (larger than 0) when the IP filter

is already in test mode, the test timer resets to the new test period and starts

test mode again. If you submit a zero Filter Test Period when the IP filter is

in test mode, the test mode stops, and the specified Enable IPv4 Filters

state takes effect immediately. If you have physical access to the SLM, you

can always disable IPv4 from the console using the CLI.

IPv4 Filter

Setting

Description