Managing the Internet Border Firewall

Scenario

On the CFW, you can view EIP protection information and export EIP information on the Assets > EIPs page. This section describes how to perform the following operations:

• Checking the EIP Protection Status
• One-click Kill Switch and One-click Restoration
• Exporting the EIP List

Checking the EIP Protection Status

1. Log in to the CFW console.
2. Click in the upper left corner of the management console and select a region or project.
3. (Optional) Switch to another firewall instance. If there are multiple firewall instances, you can select a desired instance from the drop-down list in the upper left corner of the page.
4. In the navigation pane on the left, choose Assets > EIPs. The EIPs page is displayed.
5. Check EIP information and protection status.
   Figure 1 EIP management
   
   • Resource Overview:
     • You can view the total, protected, and unprotected EIP counts under the current account.
     • You can click the number of each category to filter and check the corresponding EIP information. For example, to view information about unprotected EIPs, click the number next to Unprotected. The unprotected EIPs will be displayed in the list below.
   • Firewall Information: Here you can check the number of protected EIPs and the total protection capacity under the current account.

     For details about how to change the number of protected EIPs, see Modifying CFW Extended Packages.

     For details about how to enable automatic protection for new EIPs, see Auto-protecting New EIPs.

   • Resource list:
     • In the EIP list, you can view the IP address, ID, protection status, and firewall name of each EIP.
     • In the EIP list, you can search for or filter EIPs.

       After the filtering is successful, you can click the save icon next to the filter box. In the dialog box that is displayed, enter a filter set name and click OK to save the current filter criteria as a quick filter set. This set will be displayed in the drop-down list for quick reuse.

     • You can click the setting button in the upper right corner of the list to configure the columns to be displayed.

One-click Kill Switch and One-click Restoration

1. Log in to the CFW console.
2. Click in the upper left corner of the management console and select a region or project.
3. (Optional) Switch to another firewall instance. If there are multiple firewall instances, you can select a desired instance from the drop-down list in the upper left corner of the page.
4. In the navigation pane on the left, choose Assets > EIPs. The EIPs page is displayed.
5. To use the kill switch to disable or restore EIP protection under a firewall:
   • To disable firewall protection for EIPs, click CFW Kill Switch in the upper right corner of the list. In the dialog box that is displayed, enter ACCEPT, and click OK.
   • To restore firewall protection for these EIPs, click One-Click Restore in the upper part of the page.

   When a kill switch operation or restoration is in progress, other EIP enabling or disabling operations cannot be performed.

Exporting the EIP List

You can download the EIP list as a spreadsheet to your local PC.

1. Log in to the CFW console.
2. Click in the upper left corner of the management console and select a region or project.
3. (Optional) Switch to another firewall instance. If there are multiple firewall instances, you can select a desired instance from the drop-down list in the upper left corner of the page.
4. In the navigation pane on the left, choose Assets > EIPs. The EIPs page is displayed.
5. Above the EIP list, click Export and select an export scope.

   The EIP list will be downloaded to the local PC.