TMS zl Management and Configuration Guide ST.1.1.100226

A-100
Command-Line Reference
Global Configuration Context
Table A-29. Services Available
For example, to add a port map for HTTP over TCP through port 9000, enter
the following command:
ProCurve(tms-module-<slot ID>)# port-map http tcp 9000
port-trigger
Use this command to create policies that enable the module’s firewall to
monitor dynamically negotiated ports.
To create a port trigger policy, type the following command:
Syntax: port-trigger <policy name> <target address> <protocol>
< inbound | outbound > < tcp | udp > < port | range <start port> <end port> > [enable
| disable | allow-any-inbound]
Replace <policy name> with the name you want to assign to the policy. It is
good practice to specify a policy name that reflects the services involved in
the trigger.
Replace <target address> with one of the following options:
•any
• <IP address>
• address <address object>
Replace <protocol> with one of the following options:
• < tcp | udp > < port | range <start port> <end port> >
• service <service object>
See Table A-30 for available services.
Replace <port> with the ports allowed for dynamic negotiation.
Replace <start port> and <end port> with the port range allowed for dynamic
negotiation.
To delete a port trigger policy, type the following command:
Syntax: no port-trigger <policy name>
FTP HTTP IMAP NNTP
POP3 RSTP SMTP TCPDNS
TCPRPC TCPSIP TELNET UDPDNS
UDPRPC UDPSIP