asc firewall
Use this command to manage firewall services.
Syntax
asc firewall [options]
Option |
Description |
-a, --add <IP_address> |
Add the specified protected host to the firewall. |
-c, --class [x] |
The type of host to be protected. This option defines the default proxy and forward settings for the specified class type. The |
--cleanRSAkeys true |
Removes the SSH RSA key fingerprints from |
-cp, --closeport <port> |
Block access to the specified local TCP and UDP ports on the appliance. |
-h, --help |
Display usage text. |
-l, --list |
Lists all protected hosts, proxy redirects, and port forwards. This can be combined with the |
-m, --message <message> |
Specify the message to use in log files and configuration file change journals for firewall related activities. |
-op, --openport <port> |
Open access to the specified local TCP and UDP ports on the appliance. |
-r, --remove <IP_address> |
Remove the specified protected host from the firewall. |
Examples
Add an IP address proxy exception. The IP address will not be proxied.
asc firewall -a 1.2.3.4 -c x
List all firewall exception IP addresses:
asc firewall -l -c x
Remove a firewall exception by IP address:
asc firewall -r 1.2.3.4
Disable access to port 8091:
asc firewall -cp 8091
Enable access to port 8091:
asc firewall -op 8091
Remove the SSH RSA key fingerprints for all protected ESXi hosts.
asc firewall --cleanRSAkeys true