
Chapter 4: Administration Introduction 55
Any of the options in Table 4.19 can be given the inverted flag, so that the target action is
performed on packets that do not match any of the specified criteria. For example, if only the two
following criteria are specified - DROP is the target action, and Inverted is specified for a specific
source IP address - any packets arriving from any other IP address will be dropped.
Tasks for administering packet filtering
Administrators can specify packet filtering by adding new rules for existing chains and editing or
deleting administrator
-added rules. See Chapter 4 for how to use the Web Manager to add or
modify rules and Chapter 6 for how to use the cli iptables command to configure rules for
built
-in chains.
How Configuration Changes Are Handled
The following bulleted items give an overview of how the MergePoint 5224/5240 SP manager
handles configuration file changes:
• When an administrator performs configuration tasks, changes are stored in RAM memory until
the administrator takes a specific action to save the changes in configuration files.
• Unless changes are saved in configuration files, they do not persist after a reboot.
• The administrator can back up changed configuration files at any time.
• The SP manager maintains a backed up copy of the factory
-default configuration files.
• The administrator can restore the factory default configuration files or restore any backed
-up
copies of the configuration files.
• The current state of the configuration files is maintained after a software upgrade. This allows
you to upgrade software on the SP manager without losing all user and target device
configurations. After software upgrade, the administrator can optionally perform the
following tasks:
• Return from the current state to the last backed
-up copy of the configuration files.
• Return to the factory default configuration files.
• When an administrator adds a new application, script or configuration file to the system, the
root user must add the pathname to the file to the list of files to be backed up and restored.
Kommentare zu diesen Handbüchern