a Flo + a Blog = a Flog my ブログ

20Jul/100

Note for later – installing ip rules on a brocade SAN switch

After forgetting what I did previously and I eventually managed to lock myself out of the fabric.

So instead of adding a rule to disable telnet, you will prefer to clone the rule set and modify it.

#ipfilter --clone CurrentSec -from default_ipv4
#ipfilter --show (write down the rule number for Telnet 23)
#ipfilter --delrule CurrentSec -rule 2
#ipfilter --addrule CurrentSec -rule 2 -sip any -dp 23 -proto tcp -act deny
#ipfilter --save CurrentSec
#ipfilter --activate CurrentSec

Comments (0) Trackbacks (0)

No comments yet.


Leave a comment

(required)

No trackbacks yet.