72 Edit Running Configuration Commands
Syntax
ip access-list NAME (permit|deny) A.B.C.D/M
ip as-path access-list NAME (permit|deny) ASN_FILTER
delete ip as-path access-list NAME (permit|deny) ASN_FILTER
ip community-list NAME (permit|deny)
((AA:NN)|internet|local-as|no-advertise|no-export)
delete ip community-list NAME (permit|deny)
((AA:NN)|internet|local-as|no-advertise|no-export)
ip prefix-list NAME (permit|deny) A.B.C.D/M [ge GE-VALUE] [le LE-VALUE]
ip route A.B.C.D/M A.B.C.D|INTERFACE [DISTANCE]
ipv6 route X:X::X:X/M (X:X::X:X[%INTERFACE])|INTERFACE [DISTANCE]
display ip route
Valid entries:
access-list Access list
as-path AS Path access list
community-list Community list
prefix-list Prefix list
route Add an IPv4 static route
Example
NGFW{running}ip access-list myaccesslist permit 0.0.0.0/0
NGFW{running}ip as-path access-list myasnaccesslist permit ^64496$
NGFW{running}delete ip as-path access-list myasnaccesslist permit ^64496$
NGFW{running}ip community-list mycommunitylist permit 64496:100
NGFW{running}ip community-list mycommunitylist permit internet
NGFW{running}delete ip community-list mycommunitylist permit 64496:100
NGFW{running}ip prefix-list myprefixlist permit 192.168.0.0/16 ge 24 le 24
NGFW{running}ip route 192.168.1.0/24 192.0.2.1 1
NGFW{running}ip route 192.168.1.0/24 ethernet5 1
NGFW{running}display ip route
# IPV4 ROUTES
ip route 192.168.1.0/24 192.0.2.1 1
ip route 192.168.1.0/24 ethernet5
ips
Enters IPS profile context mode.
Syntax
ips
Example
NGFW{running}ips
Entering Immediate Commit Feature. Changes take effect immediately.
NGFW{running-ips}help
Valid commands are:
# Enter context
display-categoryrules
# Other commands
afc-mode AFCMODE
afc-severity SEVERITY
connection-table TIMEOUTTYPE SECONDS
delete profile XPROFILENAME
deployment-choices
display
gzip-decompression enable|disable
help [full|COMMAND]
Komentarze do niniejszej Instrukcji