User guide

IP TCP/IP command reference
iMG/RG Software Reference Manual (IPNetwork Functions)
4-38
Description A number of system processes use the IP stack to provide services, such as SNMP agent
and TFTP server. These services are called AppServices. This command allows you to set
the security class(es) associated with an AppService. A security class is synonymous with
a security interface type. It is assumed that you have already assigned security interfaces
to your IP interfaces, using the command security show alg.
Setting the security class(es) for an AppService defines the interface(s) through which
the AppService will be provided.
Options The following table gives the range of values for each option that can be specified with
this command and a Default Value (if applicable).
Example --> ip set appservice tftp secclasses external,dmz
Example --> ip set appservice http secclasses none
Option Description Default Value
name A name that identifies an existing AppService. To display
AppService names, use the ip list appservices command.
N/A
number A number that identifies an existing AppService. To display
AppService numbers, use the ip list appservices command.
The number appears in the first column under the heading
ID.
N/A
secClasses Supported secClasses values are as follows:
all - allows access to the AppService via all existing security
interfaces
none - prevents access to the AppService via any existing
security interface
internal - allows access to the AppService via existing inter-
nal security interfaces
external - allows access to the AppService via existing exter-
nal security interfaces
dmz - allows access to the AppService via existing dmz secu-
rity interfaces
To allow access to an AppService via two security interface
types, type the secClass values separated by a comma (for
example, internal,external) or separated by a space and
enclosed in double-quotation marks (for example, “internal
external”).
To specify all three internal, external and dmz secClasses, use
the all value.
0.0.0.0