Chapter 8      Command Reference

Privilege Level 15 Commands

private

Denies no access. 

icmp

Denies Internet Control Message Protocol (ICMP) ping 

messages.

telnet

Denies incoming Telnet connections.

ssh

Denies incoming SSH connections.

snmp

Denies incoming SNMP requests.

https

Denies all connections to the ssl http port.

1741

Denies all connections to the HTTP 1741 port.

Usage Guidelines

Use the firewall command to implement port filtering on the Hosting Solution 

Engine. To configure an Ethernet port for secured public access, use the public 

option. To configure an Ethernet port for local access, via a LAN or VLAN, use 

the private option. To disable icmp, telnet, ssh, snmp, https, or to deny 

connections to the SSL HTTP port or the HTTP 1741 port, use its corresponding 

option. 

Example

The following is an example of a secure Ethernet port configuration:

The Ethernet 0 port is connected to the Internet, and is configured to be 

accessible only via HTTPS by entering the following command:

firewall eth0 public ssh 1741

The Ethernet 1 port is connected to an internal LAN or VLAN, and is 

configured to be accessible via any of the supported protocols by entering the 

following command:

firewall eth1 private

An on site user has full access to the Hosting Solution Engine, but an external 

user can only access it using a secure connection.

gethostbyname

Use the gethostbyname command to display the IP address of a known domain 

name:

gethostbyname host

User Guide for the CiscoWorks Hosting Solution Engine 1.8.1

8 20

OL 6319 01