User Manual

IP IP Routing
6-15
Note: If the user making the connection is the privileged user (see the Set Privileged/
Noprivileged command), the connection will be allowed regardless of the entries
in the table.
A trailing zero in any address segment is shorthand for “all addresses in this range, both incoming and
outgoing disabled, for all ports.” For example, the following two commands are equal.
Figure 6-36: Set/Define IP Security Commands
Finally, port zero corresponds to the virtual ports (that is, users who log into the server from the network).
If no ports are specified on the command line, the command will affect all local and virtual ports.
Note: For a description of virtual ports, see Virtual Ports on page 8-23.
6.6.2 Clearing Table Entries
Individual entries can be cleared by entering Clear (or Purge) IP Security with no parameters other than
the address.
Figure 6-37: Clear IP Security Command
The entire security table can be cleared with the following command.
Figure 6-38: Clearing the Security Table
6.7 IP Routing
TCP/IP internets are usually broken down into networks. Each host on a particular network can only see
hosts on its network; to transfer network traffic to other networks, routers (also called gateways) are
required. Routers are typically connected to two or more networks.
The SCS serves as a router for the networks that it is directly connected to. To determine the path to other
routers on the network, the SCS will listen to network broadcast packets (for example, RIP packets); routers
will advertise themselves in these packets.
Local>> DEFINE IP SECURITY 192.0.1.0
Local>> DEFINE IP SECURITY 192.0.1.255 OUTGOING DISABLED INCOMING DISABLED
Local>> CLEAR IP SECURITY 192.0.1.102
Local>> CLEAR IP SECURITY ALL