Set Firewall - Fujitsu Eternus DX100 S3 User Manual

Chapter 5 System Settings and Display
5.2 Network Management > set firewall

set firewall

This command is used to enable and disable the individual Ethernet application service ports. The settings
listed in the table below must be performed for each Ethernet port.
http
https
telnet
SSH
ETERNUS Maintenance Secure
ICMP
SNMP
RCIL
ETERNUS DX Discovery
• All the service ports can be disabled by using this command, but all software, CLI, GUI, and external
software such as monitoring software will not be able to establish a connection.
- Contact your maintenance engineer when an ETERNUS DX500 S3/DX600 S3 is used.
- For the ETERNUS DX100 S3/DX200 S3 and the ETERNUS DX200F, the initial state can be restored by
pushing the FUNCTION button that is on the front operation panel of the controller enclosure.
However, it should be noted that this will also clear all the network information. For further
information, refer to "FUJITSU Storage ETERNUS DX100 S3/DX200 S3 Disk storage system Operation
Guide (Basic)" or to "FUJITSU Storage ETERNUS DX200F All Flash Array Operation Guide (Basic).
• When any settings except for ICMP are changed, the CLI session is automatically disconnected after the
command is executed. Note that the session is disconnected even if a setting value not involved in CLI
connections is changed. For example, your system opens SSH and HTTPS ports, and closes all other ports.
At that case, if you requests to close only HTTPS port, your connection connected by SSH will be
disconnected. After disconnecting the connection, retry to log in the system.
• It can take a little time for the requested changes to be applied. For example, when GUI is used to request
the opening of the SSH port, it may take around a minute before an SSH connected CLI session can be
initiated.
■ Syntax
set firewall -port {maintenance | remote | fst} [-http {open | close}]
[-https {open | close}] [-telnet {open | close}] [-ssh {open | close}]
[-maintenance-secure {open | close}] [-icmp {open | close}]
[-snmp {open | close}] [-rcil {open | close}] [-confirm-close-all {yes | no}]
[-eternus-dx-discovery {open | close}]
Protocol
GUI
CLI
ETERNUS CLI User's Guide
Copyright 2014 FUJITSU LIMITED
Service type
Specify "-confirm-close-all yes" to disable all of the service ports for
the GUI and CLI connections or both of the service ports for the CLI
connection. If this parameter is not specified, the CLI command
terminates with an error message.
Secure storage platform software (such as monitoring software)
ping
SNMP protocol
RCIL
ETERNUS DX Discovery
504
P2X0-1210-05ENZ0