[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Table of Contents

About This Guide

Supported Routing Platforms

Document Conventions

List of Technical Publications

Documentation Feedback

Requesting Technical Support

Configuration Statements

Access Hierarchy and Statements

Access Configuration Statement Hierarchy

admin-search

authentication-order

banner (FTP, HTTP, Telnet)
banner (Web Authentication)

base-distinguished-name

client-group

client-idle-timeout

client-name-filter

client-session-timeout

configuration-file

default-profile

distinguished-name

domain-name

firewall-authentication

firewall-user

ldap-options

ldap-server

pass-through

port (LDAP)
port (RADIUS)

radius-options

radius-server

retry (LDAP)
retry (RADIUS)

revert-interval

revert-interval (LDAP)
revert-interval (RADIUS)

routing-instance

routing-instance (LDAP)
routing-instance (RADIUS)

search-filter

securid-server

session-options

source-address

source-address (LDAP)
source-address (RADIUS)

timeout (LDAP Server)
timeout (RADIUS Server)

traceoptions

web-authentication

Accounting-Options Hierarchy

Accounting-Options Configuration Statement Hierarchy

Applications Hierarchy and Statements

Applications Configuration Statement Hierarchy
alg
application-protocol
destination-port
icmp-code
icmp-type
inactivity-timeout
protocol
rpc-program-number
source-port
term
uuid

Chassis Hierarchy and Statements

Chassis Configuration Statement Hierarchy

control-ports

gratuitous-arp-count

heartbeat-interval

heartbeat-threshold

interface-monitor

node (Cluster)
node (Redundancy-Group)

redundancy-group

traceoptions

tunnel-queuing

Class-of-Service Hierarchy

Class-of-Service Configuration Statement Hierarchy

Event-Options Hierarchy

Event-Options Configuration Statement Hierarchy

Firewall Hierarchy

Firewall Configuration Statement Hierarchy

Forwarding-Options Hierarchy and Statements

Forwarding-Options Configuration Statement Hierarchy
vpn

Groups Hierarchy

Groups Configuration Statement Hierarchy

Interfaces Hierarchy and Statements

Interfaces Configuration Statement Hierarchy

client-identifier

fabric-options

flow-control

member-interfaces

next-hop-tunnel

no-flow-control

no-loopback

no-source-filtering

redundancy-group

redundant-ether-options

redundant-parent

redundant-parent (Fast Ethernet Options)
redundant-parent (Gigabit Ethernet Options)

retransmission-attempt

retransmission-interval

server-address

source-address-filter

source-filtering

update-server

web-authentication

Policy-Options Hierarchy and Statements

Policy-Options Configuration Statement Hierarchy
condition
route-active-on

Protocols Hierarchy

Protocols Configuration Statement Hierarchy

Routing-Instances Hierarchy

Routing-Instances Configuration Statement Hierarchy

Routing-Options Hierarchy

Routing-Options Configuration Statement Hierarchy

Schedulers Hierarchy and Statements

Schedulers Configuration Statement Hierarchy
all-day
daily
exclude
friday
monday
saturday
scheduler
schedulers
start-date
start-time
stop-date
stop-time
sunday
thursday
tuesday
wednesday

Security Hierarchy and Statements

Security Configuration Statement Hierarchy

access-profile

active-policy

address (ARP Proxy Services Gateway)
address (Destination NAT Services Gateway)
address (Destination NAT Services Router)
address (IKE Gateway)
address (Source NAT)
address (Zone Address Book)
address (Zone Address Set)

address-book

address-persistent

address-range

address-range (Destination NAT)
address-range (Source NAT)

address-set

administrator

alarm-threshold

alarm-without-drop

allow-dns-reply

allow-icmp-without-flow

allow-incoming

always-send

application

application (Protocol Binding Custom Attack)
application (Security Policies)

application-identification

application-screen

application-screen (H323)
application-screen (MGCP)
application-screen (SCCP)
application-screen (SIP)

application-services

application-system-cache

application-system-cache-timeout

attack-threshold

attacks (Exempt Rulebase)
attacks (IPS Rulebase)

attack-type

attack-type (Anomaly)
attack-type (Chain)
attack-type (Signature)

authentication

authentication-algorithm

authentication-method

auto-re-enrollment

bind-interface

ca-identity

ca-profile-name

certificate

certificate-id

challenge-password

clear-threshold

connection-flood

connections-limit

count (Custom Attack)
count (Security Policies)

custom-attack

custom-attack-group

custom-attacks

data-length

dead-peer-detection

default-policy

deny (Policy)
deny (SIP)

description

description (IDP Policy)
description (Security Policies)

destination

destination (Destination NAT Services Gateway)
destination (IP Headers in Signature Attack)

destination-address

destination-address (Destination NAT Services Gateway)
destination-address (IDP Policy)
destination-address (Security Policies)
destination-address (Source NAT Services Gateway)
destination-address (Static NAT Services Gateway)
destination-address (Traffic Policy Services Gateway)

destination-except

destination-ip

destination-ip-based

destination-nat

destination-nat (Destination NAT Services Gateway)
destination-nat (Destination NAT Services Router)
destination-nat (Security Policies)

destination-port

destination-port (Destination NAT Services Gateway)
destination-port (Signature Attack)

destination-threshold

detect-shellcode

direction (Custom Attack)
direction (Dynamic Attack Group)

disable-call-id-hiding

distinguished-name

dynamic-attack-group

early-ageout

enable-all-qmodules

enable-packet-pool

encryption-algorithm

endpoint-registration-timeout

establish-tunnels

external-interface

external-interface (IKE Gateway)
external-interface (Manual Security Association)

false-positives

firewall-authentication

firewall-authentication (Policies)
firewall-authentication (Security)

flood (ICMP)
flood (UDP)

flow (IDP)
flow (Security Flow)

forwarding-options

from-zone (IDP Policy)
from-zone (Security Policies)

functional-zone

gateway (IKE)
gateway (IPsec)
gateway (Manual Security Association)

group-members

header-length

high-watermark

host-address-base

host-address-low

host-inbound-traffic

icmp (Protocol Binding Custom Attack)
icmp (Security Screen)
icmp (Signature Attack)

identification

identification (ICMP Headers in Signature Attack)
identification (IP Headers in Signature Attack)

ignore-mem-overflow

ignore-regular-expression

ike (IPsec VPN)
ike (Security)

ike-user-type

inactive-media-timeout

inactive-media-timeout (MGCP)
inactive-media-timeout (SCCP)
inactive-media-timeout (SIP)

include-destination-address

install-interval

interface (ARP Proxy Services Gateway)
interface (NAT Services Router)

interval (IDP)
interval (IKE)

ip (Protocol Binding Custom Attack)
ip (Security Screen)
ip (Signature Attack)

ipsec-policy

ipsec-vpn (Flow)
ipsec-vpn (Policies)

lifetime-kilobytes

limit-session

local-certificate

local-identity

log (IDP)
log (IDP Policy)
log (Security Policies)

log-attacks

log-supercede-min

low-watermark

match (Destination NAT Services Gateway)
match (IDP Policy)
match (Security Policies)
match (Source NAT Services Gateway)
match (Static NAT Services Gateway)

max-flow-mem

max-logs-operate

max-packet-mem

max-packet-memory

max-sessions

max-tcp-session-packet-memory

max-time-report

max-timers-poll-ticks

max-udp-session-packet-memory

maximum-call-duration

media-source-port-any

message-flood

message-flood (H323)
message-flood (MGCP)

mode (Forwarding-Options)
mode (Policy)

nat (Services Gateway Configuration)
nat (Services Router Configuration)

nat-keepalive

no-allow-icmp-without-flow

no-anti-replay

no-enable-all-qmodules

no-enable-packet-pool

no-log-errors

no-nat-traversal

no-policy-lookup-cache

no-port-translation

no-reset-on-policy

no-sequence-check

no-syn-check

no-syn-check-in-tunnel

notification

overflow-pool

overflow-pool (Source NAT Services Gateway)
overflow-pool (Source NAT Services Router)

pair-policy

pass-through

peer-certificate-type

perfect-forward-secrecy

performance

policy (IKE)
policy (IPsec)
policy (Security)

policy-lookup-cache

policy-rematch

pool (Destination NAT Services Gateway)
pool (Pool Set)
pool (Source NAT)
pool (Source NAT Services Gateway)

pool-utilization-alarm

pre-filter-shellcode

predefined-attack-groups

predefined-attacks

pre-shared-key

process-ignore-s2c

process-override

process-port

proposal-set

proposal-set (IKE)
proposal-set (IPsec)

protocol (IPsec)
protocol (Manual Security Association)
protocol (IP Headers in Signature Attack)
protocol (Signature Attack)

protocol-binding

protocol-name

protocols (Interface Host-Inbound Traffic)
protocols (Zone Host-Inbound Traffic)

proxy-arp (Services Gateway Configuration)
proxy-arp (Services Router Configuration)

proxy-identity

raise-threshold

re-assembler

re-enroll-trigger-time-percentage

recommended

recommended-action

reject-timeout

reset-on-policy

respond-bad-spi

retain-hold-resource

revocation-check

route-change-timeout

routing-instance

routing-instance (Destination NAT Services Gateway)
routing-instance (Source NAT Services Gateway)

rst-invalidate-session

rst-sequence-check

rule (Destination NAT)
rule (Exempt Rulebase)
rule (IPS Rulebase)
rule (Source NAT)
rule (Static NAT)

rule-set (Destination NAT Services Gateway)
rule-set (Source NAT Services Gateway)
rule-set (Static NAT Services Gateway)

rulebase-exempt

rulebase-ips

scheduler-name

scope (Chain Attack)
scope (Custom Attack)

screen (Security)
screen (Zones)

security-package

security-zone

sensor-configuration

session-close

session-init

sequence-number

sequence-number (ICMP Headers in Signature Attack)
sequence-number (TCP Headers in Signature Attack)

service (Anomaly Attack)
service (Dynamic Attack Group)
service (Security IPsec)

severity (Custom Attack)
severity (Dynamic Attack Group)
severity (IPS Rulebase)

source (IP Headers in Signature Attack)
source (Source NAT Services Gateway)

source-address

source-address (Destination NAT Services Gateway)
source-address (IDP Policy)
source-address (Security Policies)
source-address (Source NAT Services Gateway)

source-except

source-interface

source-ip-based

source-nat (NAT)
source-nat (NAT Interface)
source-nat (Security Policies)
source-nat (Source NAT Services Gateway)

source-port

source-threshold

ssh-known-hosts

ssl-inspection

static-nat (Static NAT Services Router)
static-nat (Static NAT Services Gateway)

suppression

syn-ack-ack-proxy

syn-flood-protection-mode

system-services

system-services (Interface Host-Inbound Traffic)
system-services (Zone Host-Inbound Traffic)

t1-interval

t4-interval

tcp (Protocol Binding Custom Attack)
tcp (Security Screen)
tcp (Signature Attack)

tcp-initial-timeout

tcp-no-flag

tcp-session

then (Destination NAT Services Gateway)
then (IDP Policy)
then (Security Policies)
then (Source NAT Services Gateway)
then (Static NAT Services Gateway)

time-binding

timeout (IDP Policy)
timeout (Security Screen)

total-length

traceoptions

traceoptions (firewall-authentication)
traceoptions (H.323 ALG)
traceoptions (Flow)
traceoptions (IDP)
traceoptions (IKE)
traceoptions (IPsec)
traceoptions (MGCP ALG)
traceoptions (NAT Services Gateway)
traceoptions (NAT Services Router)
traceoptions (PKI)
traceoptions (Policies)
traceoptions (SCCP ALG)
traceoptions (Screen)
traceoptions (Security)
traceoptions (SIP ALG)

transaction-timeout

tunable-name

tunable-value

type (ICMP Headers in Signature Attack)
type (Dynamic Attack Group)

udp (Protocol Binding Custom Attack)
udp (Security Screen)
udp (Signature Attack)

unknown-message

unknown-message (H.323 ALG)
unknown-message (MGCP ALG)
unknown-message (SCCP ALG)
unknown-message (SIP ALG)

urgent-pointer

user-at-hostname

vpn-monitor

vpn-monitor-options

web-authentication

web-redirect

window-scale

window-size

Services Hierarchy

Services Configuration Statement Hierarchy

SNMP Hierarchy and Statements

SNMP Configuration Statement Hierarchy
authorization
client-list-name

System Hierarchy and Statements

System Configuration Statement Hierarchy

domain-name

dynamic-dns

firewall-authentication-service

general-authentication-service

name-server

network-security

pki-local-certificate

propagate-settings

server-select

system-generated-certificate

traceoptions

traceoptions (DNS Proxy)
traceoptions (General Authentication Service)
traceoptions (WAN Acceleration)

wan-acceleration

Operational Commands

Clear Commands

clear chassis cluster control-plane statistics
clear chassis cluster data-plane statistics
clear chassis cluster failover-count
clear chassis cluster statistics
clear network-access requests pending
clear network-access requests statistics
clear network-access securid-node-secret-file
clear security alg h323 counters
clear security alg mgcp calls
clear security alg mgcp counters
clear security alg msrpc portmap
clear security alg sccp calls
clear security alg sccp counters
clear security alg sip calls
clear security alg sip counters
clear security alg sunrpc portmap
clear security firewall-authentication history
clear security firewall-authentication history address
clear security firewall-authentication history identifier
clear security firewall-authentication users
clear security firewall-authentication users address
clear security firewall-authentication users identifier
clear security flow session all
clear security flow session application
clear security flow session destination-port
clear security flow session destination-prefix
clear security flow session interface
clear security flow session protocol
clear security flow session resource-manager
clear security flow session session-identifier
clear security flow session source-port
clear security flow session source-prefix
clear security idp application-identification application-system-cache
clear security idp attack table
clear security idp counters application-identification
clear security idp counters dfa
clear security idp counters flow
clear security idp counters ips
clear security idp counters log
clear security idp counters packet
clear security idp counters policy-manager
clear security idp counters tcp-reassembler
clear security idp ssl-inspection session-id-cache
clear security ike respond-bad-spi-count
clear security ike security-associations
clear security ipsec security-associations
clear security ipsec statistics
clear security nat incoming-table
clear security pki key-pair
clear security pki local-certificate
clear security policies statistics
clear security screen statistics
clear security screen statistics interface
clear security screen statistics zone
clear system services dns-proxy cache
clear system services dns-proxy statistics

Request Commands

request chassis cluster failover node
request chassis cluster failover reset
request security idp security-package download
request security idp security-package install
request security idp ssl-inspection key add
request security idp ssl-inspection key delete
request security pki ca-certificate verify
request security pki local-certificate generate-self-signed
request security pki local-certificate verify
request system partition compact-flash
request system services dhcp
request wan-acceleration login

Restart Commands

restart wan-acceleration

Show Commands

show bgp neighbor
show chassis cluster control-plane statistics
show chassis cluster data-plane statistics
show chassis cluster interfaces
show chassis cluster statistics
show chassis cluster status
show chassis fpc
show chassis hardware
show interfaces
show interfaces flow-statistics
show network-access requests pending
show network-access requests statistics
show network-access securid-node-secret-file
show schedulers
show security alg h323 counters
show security alg mgcp calls
show security alg mgcp counters
show security alg mgcp endpoints
show security alg msrpc
show security alg sccp calls
show security alg sccp counters
show security alg sip calls
show security alg sip counters
show security alg sip rate
show security alg sip transactions
show security alg sunrpc portmap
show security firewall-authentication history
show security firewall-authentication history address
show security firewall-authentication history identifier
show security firewall-authentication users
show security firewall-authentication users address
show security firewall-authentication users identifier
show security flow gate
show security flow session
show security flow session application
show security flow session destination-port
show security flow session destination-prefix
show security flow session interface
show security flow session protocol
show security flow session resource-manager
show security flow session session-identifier
show security flow session source-port
show security flow session source-prefix
show security flow session summary
show security flow session tunnel
show security idp active-policy
show security idp application-identification application-system-cache
show security idp attack table
show security idp counters application-identification
show security idp counters dfa
show security idp counters flow
show security idp counters ips
show security idp counters log
show security idp counters packet
show security idp counters policy-manager
show security idp counters tcp-reassembler
show security idp memory
show security idp security-package-version
show security idp ssl-inspection key
show security idp ssl-inspection session-id-cache
show security idp status
show security ike pre-shared-key
show security ike security-associations
show security ipsec next-hop-tunnels
show security ipsec security-associations
show security ipsec statistics
show security monitoring fpc fpc-number
show security nat destination pool
show security nat destination rule
show security nat destination summary
show security nat destination-nat summary
show security nat incoming-table
show security nat interface-nat-ports
show security nat source pool
show security nat source rule
show security nat source summary
show security nat source-nat pool
show security nat source-nat summary
show security nat static rule
show security nat static-nat summary
show security pki ca-certificate
show security pki certificate-request
show security pki crl
show security pki local-certificate
show security policies
show security resource-manager group active
show security resource-manager resource active
show security resource-manager settings
show security screen ids-option
show security screen statistics
show security zones
show security zones type
show system services dhcp client
show system services dhcp relay-statistics
show system services dns-proxy
show system services dynamic-dns client
show wan-acceleration status

Index

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]