Cisco Secure Firewall ASA Series Command Reference, I - R Commands

Contents

I - J - K - L - M - N - O - P - Q - R

Index

I

icmp

icmp unreachable

icmp-object

id-cert-issuer

id-mismatch

id-randomization

id-usage

igmp

igmp access-group

igmp forward interface

igmp join-group

igmp limit

igmp query-interval

igmp query-max-response-time

igmp query-timeout

igmp static-group

igmp version

ignore lsa mospf

ignore-ipsec-keyusage (Deprecated)

ignore-lsp-errors

ignore-ssl-keyusage (Deprecated)

ike

ike-retry-count

ikev1 pre-shared-key

ikev1 user-authentication

ikev2 local-authentication

ikev2 mobike-rrc

ikev2 remote-authentication

ikev2 rsa-sig-hash

im

imap4s (Deprecated)

imi-traffic-descriptor

import

import webvpn AnyConnect-customization

import webvpn customization

import webvpn mst-translation

import webvpn plug-in protocol

import webvpn translation-table

import webvpn url-list

import webvpn webcontent

inspect ctiqbe

inspect dcerpc

inspect diameter

inspect dns

inspect esmtp

inspect ftp

inspect gtp

inspect h323

inspect http

inspect icmp

inspect icmp error

inspect ils

inspect im

inspect ip-options

inspect ipsec-pass-thru

inspect ipv6

inspect lisp

inspect m3ua

inspect mgcp

inspect mmp

inspect netbios

inspect pptp

inspect radius-accounting

inspect rsh

inspect rtsp

inspect scansafe

inspect sctp

inspect sip

inspect skinny

inspect snmp

inspect sqlnet

inspect stun

inspect sunrpc

inspect tftp

inspect vxlan

inspect waas

inspect xdmcp

integrity

intercept-dhcp

interface (global)

interface (vpn load-balancing)

interface bvi

interface loopback

interface port-channel

interface redundant

interface tunnel

interface vlan

interface vni

interface-policy

interim-accounting-update

internal-password

internal-port

internal-segment-id

interval maximum

invalid-ack

ip address

ip address dhcp

ip address pppoe

ip audit attack

ip audit info

ip audit interface

ip audit name

ip audit signature

ip local pool

ip unnumbered

ip verify reverse-path

ip-address-privacy

ip-client

ip-comp

ip-phone-bypass

ips

ipsec-udp

ipsec-udp-port

ipv4-prefix

ipv6 address

ipv6 dhcp client pd

ipv6 dhcp client pd hint

ipv6 dhcp pool

ipv6 dhcp server

ipv6 dhcprelay enable

ipv6 dhcprelay server

ipv6 dhcprelay timeout

ipv6 enable

ipv6 enforce-eui64

ipv6 icmp

ipv6 local pool

ipv6 nd dad attempts

ipv6 nd managed-config-flag

ipv6 nd ns-interval

ipv6 nd other-config-flag

ipv6 nd prefix

ipv6 nd ra-interval

ipv6 nd ra-lifetime

ipv6 nd reachable-time

ipv6 nd suppress-ra

ipv6 neighbor

ipv6 ospf

ipv6 ospf area

ipv6 ospf cost

ipv6 ospf database-filter all out

ipv6 ospf dead-interval

ipv6 ospf encryption

ipv6 ospf flood-reduction

ipv6 ospf hello-interval

ipv6 ospf mtu-ignore

ipv6 ospf neighbor

ipv6 ospf network

ipv6 ospf priority

ipv6 ospf retransmit-interval

ipv6 ospf transmit-delay

ipv6 prefix-list

ipv6 route

ipv6 router ospf

ipv6 unnumbered

ipv6-address-pool

ipv6-address-pools

ipv6-prefix

ipv6-split-tunnel-policy

ipv6-vpn-address-assign

ipv6-vpn-filter

is-type

isakmp am-disable (Deprecated)

isakmp disconnect-notify (Deprecated)

isakmp enable (Deprec

isakmp identity (Deprecated)

isakmp ipsec-over-tcp (Deprecated)

isakmp keepalive

isakmp nat-traversal (Deprecated)

isakmp policy authentication

isakmp policy encryption (Deprecated)

isakmp policy group (Deprecated)

isakmp policy hash (Deprecated)

isakmp policy lifetime (Deprecated)

isakmp reload-wait (Deprecated)

isis priority

isis protocol shutdown

isis retransmit-interval

isis retransmit-throttle-interval

isis tag

issuer (Deprecated)

issuer-name

J

java-trustpoint(Deprecated)

join-failover-group

jumbo-frame reservation

K

kcd-server

keepout

kerberos-realm

key (aaa-server host)

key (cluster group)

key chain

key config-key password-encryption

key-hash

key-string

keypair

keysize

keysize server

kill

L

l2tp tunnel hello

lacp max-bundle

lacp port-priority

lacp rate

lacp system-priority

ldap-attribute-map

ldap-base-dn

ldap-defaults

ldap-dn

ldap-group-base-dn

ldap-login-dn

ldap-login-password

ldap-naming-attribute

ldap-over-ssl

ldap-scope

leap-bypass

license

license smart

license smart deregister

license smart register

license smart renew

license smart reservation

license smart reservation cancel

license smart reservation install

license smart reservation return

license smart reservation universal

license-server address

license-server backup address

license-server backup backup-id

license-server backup enable

license-server enable

license-server port

license-server refresh-interval

license-server secret

lifetime (ca server mode)

lifetime (ikev2 policy mode)

limit-resource

lmfactor

load-monitor

local-base-url

local-domain-bypass

local-unit

location-logging

log

log-adj-changes

log-adjacency-changes

logging asdm

logging asdm-buffer-size

logging buffer-size

logging buffered

logging class

logging console

logging debug-trace

logging debug-trace persistent

logging device-id

logging emblem

logging enable

logging facility

logging flash-bufferwrap

logging flash-maximum-allocation

logging flash-minimum-free

logging flow-export-syslogs

logging from-address

logging ftp-bufferwrap

logging ftp-server

logging hide username

logging history

logging host

logging list

logging mail

logging message

logging message standby

logging monitor

logging permit-hostdown

logging queue

logging rate-limit

logging recipient-address

logging savelog

logging standby

logging timestamp

logging trap

login

login-button

login-message

login-title

logo

logout

logout-message

lsp-full suppress

lsp-gen-interval

lsp-refresh-interval

M

mac address

mac-address

mac-address auto

mac-address pool

mac-address-table aging-time

mac-address-table static

mac-learn disable

mac-learn flood

mac-list

mail-relay

management-access

management-only

map-domain

map-name

map-value

mapping-service (Deprecated)

mask

mask-banner

mask-syst-reply

match access-list

match any

match apn

match application-id

match as-path

match avp

match body

match called-party

match calling-party

match certificate

match certificate allow expired-certificate (deprecated)

match certificate skip revocation-check

match cmd

match command-code

match community

match default-inspection-traffic

match dns-class

match dns-type

match domain-name

match dpc

match dscp

match ehlo-reply-parameter

match filename

match filetype

match flow ip destination-address

match header (policy-map type inspect esmtp)

match header (policy-map type inspect ipv6)

match header-flag

match im-subscriber

match interface

match invalid-recipients

match ip address

match ip next-hop

match ip route-source

match ipv6 address

match login-name

match media-type

match message class

match message id

match message length

match message-path

match metric

match mime

match msisdn

match opc

match peer-ip-address

match peer-login-name

match port

match ppid

match precedence

match protocol

match question

match regex

match req-resp

match request method

match request-command

match request-method

match route-type

match rtp

match selection-mode

match sender-address

match server

match service

match service-indicator

match third-party-registration

match tunnel-group

match uri

match url-filter

match user group

match username

match uuid

match version

max-area-addresses

max-failed-attempts

max-forwards-validation

max-header-length

max-lsp-lifetime

max-object-size

max-retry-attempts (Deprecated)

max-uri-length

maximum-paths (BGP)

maximum-paths (IS-IS)

mcast-group

mcc

media-termination (Deprecated)

media-type

member

member-interface

memberof

memory appcache-threshold enable

memory caller-address

memory delayed-free-poisoner enable

memory delayed-free-poisoner validate

memory logging

memory profile enable

memory profile text

memory tracking enable

memory-size

memory-utilization

merge-dacl

message-length

message-tag-validation

metric

metric-style

mfib forwarding

migrate

min-object-size

mkdir

mobile-device portal

mode

monitor-interface

more

mount type cifs

mount type ftp

mroute

mschapv2-capable

msie-proxy except-list

msie-proxy local-bypass

msie-proxy lockdown

msie-proxy method

msie-proxy pac-url

msie-proxy server

mtu

mtu cluster

multicast boundary

multicast-routing

mus

mus host

mus password

mus server

N

nac-authentication-server-group (Deprecated)

nac-policy (Deprecated)

nac-settings (Deprecated)

name (dynamic-filter blacklist or whitelist)

name (global)

name-separator (pop3s, imap4s, smtps) (Deprecated)

name-server

nameif

names

nat (global)

nat (object)

nat (vpn load-balancing)

nat-assigned-to-public-ip

nat-rewrite

nbns-server

neighbor (router eigrp)

neighbor (router ospf)

neighbor activate

neighbor advertise-map

neighbor advertisement-interval

neighbor default-originate

neighbor description

neighbor disable-connected-check

neighbor distribute-list

neighbor ebgp-multihop

neighbor fall-over bfd (router bgp)

neighbor filter-list

neighbor ha-mode graceful-restart

neighbor local-as

neighbor maximum-prefix

neighbor next-hop-self

neighbor password

neighbor prefix-list

neighbor remote-as

neighbor remove-private-as

neighbor route-map

neighbor send-community

neighbor shutdown

neighbor timers

neighbor transport

neighbor ttl-security

neighbor update-source

neighbor version

neighbor weight

nem

netmod

network (address-family)

network (router eigrp)

network (router rip)

network area

network-acl

network-object

network-service-member

nis address

nis domain-name

nisp address

nisp domain-name

nop

nsf cisco

nsf cisco helper

nsf ietf

nsf ietf helper

nt-auth-domain-controller

ntp authenticate

ntp authentication-key

ntp server

ntp trusted-key

num-packets

nve

nve-only

O

object network

object network-service

object service

object-group

object-group-search

ocsp disable-nonce

ocsp interface

ocsp url

onscreen-keyboard(Deprecated)

ospf authentication

ospf authentication-key

ospf cost

ospf database-filter

ospf dead-interval

ospf hello-interval

ospf message-digest-key

ospf mtu-ignore

ospf network point-to-point non-broadcast

ospf priority

ospf retransmit-interval

ospf transmit-delay

otp expiration

output console

output file

output none

outstanding (Deprecated)

override-account-disable (Deprecated)

override-svc-download

P

packet-tracer

page style

pager

parameters

participate

passive-interface (ipv6 router ospf)

passive-interface (isis)

passive-interface (router eigrp)

passive-interface (router rip)

passwd

password (crypto ca trustpoint)

password encryption aes

password-history

password-management

password-parameter

password-policy authenticate enable

password-policy lifetime

password-policy minimum-changes

password-policy minimum-length

password-policy minimum-lowercase

password-policy minimum-numeric

password-policy minimum-special

password-policy minimum-uppercase

password-policy reuse-interval

password-policy username-check

password-storage

peer ip

peer-group

peer-id-validate

perfmon

periodic

periodic-authentication certificate

permit-errors

permit-response

pfs

phone-proxy (Deprecated)

pim

pim accept-register

pim bidir-neighbor-filter

pim bsr-border

pim bsr-candidate

pim dr-priority

pim hello-interval

pim join-prune-interval

pim neighbor-filter

pim old-register-checksum

pim rp-address

pim spt-threshold infinity

ping

police

policy

policy static sgt

policy-list

policy-map

policy-map type inspect

policy-route

policy-server-secret (Deprecated)

poll-timer

polltime interface

pop3s (Deprecated)

port (Deprecated)

port-channel load-balance

port-channel min-bundle

port-channel span-cluster

port-forward(Deprecated)

port-forward-name(Deprecated)

port-object

portal-access-rule(Deprecated)

post-max-size

power inline

power-supply

pppoe client route distance

pppoe client route track

pppoe client secondary

prc-interval

pre-fill-username

preempt

prefix-list

prefix-list description

prefix-list sequence-number

prf

primary

priority (clas

priority (cluster group)

priority (vpn load balancing)

priority-queue

privilege

profile

prompt

propagate sgt

protocol

protocol http

protocol ldap

protocol scep

protocol shutdown

protocol-enforcement

protocol-object

protocol-violation

proxy paired

proxy single-arm

proxy-auth

proxy-auth_map sdi

proxy-bypass

proxy-ldc-issuer

proxy-server (Deprecated)

ptp domain

ptp enable

ptp mode

public-key

publish-crl

pwd

Q

queue-limit (priority-queue)

queue-limit (tcp-map)

quick-start

quit

quota management-session

R

radius-common-pw

radius-reject-message

radius-with-expiry (Deprecated)

raid

range

ras-rcf-pinholes

rate-limit

re-xauth

reactivation-mode

record-entry

record-route

redirect-fqdn

redistribute (ipv6 router ospf)

redistribute (router eigrp)

redistribute (router ospf)

redistribute (router rip)

redistribute isis

redundant-interface

regex

reload

remote-access threshold session-threshold-exceeded

rename (class-map)

rename (privileged EXEC)

renewal-reminder

replication http

request-command deny

request-data-size

request-queue

request-timeout (Deprecated)

reserve-port-protect

reserved-bits

reset

resolver

responder-only

rest-api (Deprecated)

restore

retries

retry-count

retry-interval

reval-period

revert webvpn all

revert webvpn AnyConnect-customization

revert webvpn customization

revert webvpn plug-in protocol

revert webvpn translation-table

revert webvpn url-list

revert webvpn webcontent

revocation-check

rewrite(Deprecated)

rip authentication key

rip authentication mode

rip receive version

rip send version

rmdir

route

route priority high

route-map

router bgp

router eigrp

router isis

router ospf

router rip

router-alert

router-id

router-id cluster-pool

rtp-conformance

rtp-min-port rtp-max-port (Deprecated)