ZyXEL Communications Security Camera 3.1 ユーザーズマニュアル

ページ / 386
 Chapter 22 IDP Commands
ZyWALL (ZLD) CLI Reference Guide
183
22.3.1.1  Example of Global Profile Commands
In this example we rename an IDP signature profile from “old_profile” to “new_profile”, delete the 
“bye_profile” and show all base profiles available.
22.3.2  IDP Zone to Zone Rules
Use the following rules to apply IDP profiles to specific directions of packet travel. 
Router# configure terminal
Router(config)# idp rename signature
 
old_profile new_profile
Router(config)# no idp signature bye_profile
Router(config)# show idp signature base profile
No.  Base Profile Name
==============================================================
1    none
2    all
3    wan
4    lan
5    dmz
Router(config)#
Table 101   
IDP Zone to Zone Rule Commands
COMMAND
DESCRIPTION
idp {signature| anomaly } rule { append | 
<1..32> | insert <1..32> }
Create an IDP signature or anomaly rule and enter the sub-command 
mode.
bind profile
Binds the IDP profile to the entry’s traffic direction.
no bind
Removes the IDP profile’s binding.
[no] from-zone zone_profile
Specifies the zone the traffic is coming from. The no command removes 
the zone specification.
[no] to-zone zone_profile
Specifies the zone the traffic is going to. The no command removes the 
zone specification.
[no] activate
Turns on the IDP profile to traffic direction binding. The no command 
turns it off.
idp {signature| anomaly } rule { delete 
<1..32> | move <1..32> to <1..32> }
Remove or move an IDP profile to traffic direction entry.
no idp {signature| anomaly } rule <1..32>
Removes an IDP profile to traffic direction entry.
show idp {signature| anomaly } rules
Displays the IDP zone to zone rules.