beautypg.com

Unblocking telnet, Listener applications – Brocade Fabric OS Administrators Guide (Supporting Fabric OS v7.3.0) User Manual

Page 205

background image

7. Verify the new policy is correct by typing the ipFilter --show command.
8. Activate the new IP filter policy by typing the ipfilter --activate command.

switch:admin> ipfilter --activate BlockTelnet

9. Verify the new policy is active (the default_ipv4 policy should be displayed as defined ).

switch:admin> ipfilter --show

Name: default_ipv4, Type: ipv4, State: defined

Rule Source IP Protocol Dest Port Action

1 any tcp 22 permit

2 any tcp 23 permit

3 any tcp 80 permit

4 any tcp 443 permit

5 any udp 161 permit

6 any udp 123 permit

7 any tcp 600 - 1023 permit

8 any udp 600 - 1023 permit

Name: default_ipv6, Type: ipv6, State: defined

Rule Source IP Protocol Dest Port Action

1 any tcp 22 permit

2 any tcp 23 permit

3 any tcp 80 permit

4 any tcp 443 permit

5 any udp 161 permit

6 any udp 123 permit

7 any tcp 600 - 1023 permit

8 any udp 600 - 1023 permit

Unblocking Telnet

Use the following procedure to unblock Telnet access.

1. Connect to the switch through a serial port or SSH and log in as admin.
2. Enter the ipfilter --delete command.

Refer to

Deleting a rule from an IP Filter policy

on page 237 for more information on deleting IP filter

rules.

3. To permanently delete the policy, type the ipfilter --save command.

ATTENTION

If you deleted the rule to permit Telnet, you must add a rule to permit Telnet.

Listener applications

Brocade switches block Linux subsystem listener applications that are not used to implement supported
features and capabilities.

The following table lists the listener applications that Brocade switches either block or do not start. Note
that RPC ports are blocked.

Blocked listener applications

TABLE 36

Listener application

Brocade DCX and DCX 8510 Backbone families

Brocade switches

chargen

Disabled

Disabled

Unblocking Telnet

Fabric OS Administrators Guide

205

53-1003130-01