Enterasys Networks X-Pedition XSR CLI - Manual (Page 663)

Firewall Feature Set Commands
XSR CLI Reference Guide 16-119
Syntax
ip firewall java {all, none, selected network_name}
ip firewall activex {all, none, selected network_name}
Syntax of the “no” Form
The no form of this command disables Java or ActiveX:
no ip firewall java/activex {all, none, selected network_name}
Default
Deny all HTML pages with Java and ActiveX applets
Mode
Global configuration: XSR(config)#
Example
The following example configures corporate‐network as a network group object listing all reachable
networks, excluding any ActiveX applets, at corporate headquarters:
XSR(config)#ip firewall java selected corporate-network
XSR(config)#ip firewall activex none
ip firewall load
This command loads current firewall settings into the router’s inspection engine. The current
configuration comprises all CLI commands that have been entered since the last load. Executing
this command clears all sessions thus requiring all TCP connections be re‐established.
Because the no version of this command is not available, in order to undo a recent firewall
configuration you must execute no versions of commands which invoke the configuration.
Optionally, you can build the configuration but not disturb the firewall engine. This is a useful
tool to configure the firewall while incrementally checking its validity. Also, you can schedule a
load although this option blocks any firewall configuration in the interim.
Syntax
ip firewall load delay [trial]{1-7 [hh:mm]|hh:mm}[enable |disable]
all Permit HTML pages with Java from all IP addresses.
none Deny HTML pages with Java from any IP address.
selected Permit HTML pages with Java from selected IP addresses.
network_name Any internal or external network or network‐group object.
trial Builds configuration but does not load it into the firewall engine.
1-7 hh: mm: Interval in the format days <1‐7> HH:MM to wait until the firewall load or
restart is performed. No object can be modified during this time except a
trial load. Logging restarts when the load runs. The days value is optional
and if entered, the hours and minutes values are also optional.