Cisco Firepower 4100 Series Installationshandbuch

Cisco Firepower 4100/9300 FXOS Command Reference

First Published: 2017-08-28

Last Modified: 2019-01-15

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com

go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any

other company. (1721R)

About the FXOS CLI Command Reference Guide

This guide represents an on-going effort to document the many CLI commands in FXOS, and as such, should

be viewed as a work-in-progress. The guide will be republished periodically as new command descriptions

are added and existing descriptions updated or corrected.

Cisco Firepower 4100/9300 FXOS Command Reference

About the FXOS CLI Command Reference Guide

CLI Overview

•Managed Objects, on page 4

•Command Modes, on page 5

•Object Commands, on page 7

•Complete a Command, on page 8

•Command History, on page 9

•Commit, Discard, and View Pending Commands, on page 10

•Inline Help for the CLI, on page 11

•CLI Session Limits, on page 12

Cisco Firepower 4100/9300 FXOS Command Reference

Managed Objects

The Firepower eXtensible Operating System (FXOS) uses a managed object model, where managed objects

are abstract representations of physical or logical entities that can be managed. For example, chassis, security

modules, network modules, ports, and processors are physical entities represented as managed objects, and

licenses, user roles, and platform policies are logical entities represented as managed objects.

Managed objects may have one or more associated properties that can be configured.

Cisco Firepower 4100/9300 FXOS Command Reference

CLI Overview

Managed Objects

Command Modes

The CLI is organized into a hierarchy of command modes, with EXEC mode being the highest-level mode

of the hierarchy. Higher-level modes branch into lower-level modes. You use create,enter, and scope

commands to move from higher-level modes to modes in the next lower level, and you use the up command

to move up one level in the mode hierarchy. You can also use the top command to move to the top level in

the mode hierarchy.

Most command modes are associated with managed objects, so you must create an object before you can

access the mode associated with that object. You use create and enter commands to create managed objects

for the modes being accessed. The scope commands do not create managed objects and can only access modes

for which managed objects already exist.

Note

Each mode contains a set of commands that can be entered in that mode. Most of the commands available in

each mode pertain to the associated managed object.

The CLI prompt for each mode shows the full path down the mode hierarchy to the current mode. This helps

you to determine where you are in the command mode hierarchy, and it can be an invaluable tool when you

need to navigate through the hierarchy.

The following table lists the main command modes, the commands used to access each mode, and the CLI

prompt associated with each mode.

Table 1: Main Command Modes and Prompts

Mode PromptCommands Used to AccessMode Name

#top command from any modeEXEC

/adapter #scope adapter command from EXEC modeAdapter

/cabling #scope cabling command from EXEC modeCabling

/chassis #scope chassis command from EXEC modeChassis

/eth-server #scope eth-server command from EXEC

mode; this command and all subcommands

are currently not supported

Ethernet server domain

/eth-uplink #scope eth-uplink command from EXEC

mode

Ethernet uplink

/fabric-interconnect #scope fabric-interconnect command from

EXEC mode

Fabric interconnect

/firmware #scope firmware command from EXEC

mode

Firmware

Cisco Firepower 4100/9300 FXOS Command Reference

CLI Overview

Command Modes

Mode PromptCommands Used to AccessMode Name

/host-eth-if #scope host-eth-if command from EXEC

mode

This command and all

subcommands are not supported

at this level; the Host Ethernet

interface commands are available

in /adapter # mode.

Note

Host Ethernet interface

/license #scope license command from EXEC modeLicense

/monitoring #scope monitoring command from EXEC

mode

Monitoring

/org #scope org command from EXEC modeOrganization

/packet-capture #scope packet-capture command from

EXEC mode

Packet capture

/security #scope security command from EXEC modeSecurity

/server #scope server command from EXEC modeServer

/service-profile #scope service-profile command from EXEC

mode

Do not alter or configure service

profiles; that is, do not use the

create,set, or delete

subcommand sets.

Note

Service profile

/ssa #scope ssa command from EXEC modeSSA

/system #scope system command from EXEC modeSystem

/vhba #scope vhba command from EXEC mode

This command and all

subcommands are currently not

supported.

Note

Virtual HBA

/vnic #scope vnic command from EXEC modeVirtual NIC

Cisco Firepower 4100/9300 FXOS Command Reference

CLI Overview

Command Modes

Object Commands

Four general commands are available for object management:

•create object

•delete object

•enter object

•scope object

You can use the scope command with any managed object, whether a permanent object or a user-instantiated

object. The other commands allow you to create and manage user-instantiated objects. For every create object

command, a corresponding delete object and enter object command exists.

In the management of user-instantiated objects, the behavior of these commands depends on whether the

object exists, as described in the following tables:

Table 2: Command Behavior If The Object Does Not Exist

BehaviorCommand

The object is created and its configuration mode, if applicable, is entered.

create object

An error message is generated.

delete object

The object is created and its configuration mode, if applicable, is entered.

enter object

An error message is generated.

scope object

Table 3: Command Behavior If The Object Exists

BehaviorCommand

An error message is generated.

create object

The object is deleted.

delete object

The configuration mode, if applicable, of the object is entered.

enter object

The configuration mode of the object is entered.

scope object

Cisco Firepower 4100/9300 FXOS Command Reference

CLI Overview

Object Commands

Complete a Command

You can use the Tab key in any mode to complete a command. Partially typing a command name and pressing

Tab causes the command to be displayed in full or to the point where you must enter another keyword or an

argument value.

Cisco Firepower 4100/9300 FXOS Command Reference

CLI Overview

Complete a Command

Andere Handbücher für Firepower 4100 Series

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere Cisco Firewall Handbücher

Cisco

Cisco RV110W Bedienungsanleitung

Cisco

Cisco 5580-40 - ASA Firewall Edition Handbuch

Cisco

Cisco Firepower 1100 Series Handbuch

Cisco

Cisco Small Business RV220W Bedienungsanleitung

Cisco

Cisco 380 Series Handbuch

Cisco

Cisco ASA 5506-X Montageanleitung

Cisco

Cisco ASA 5506-X Kurzanleitung

Cisco

Cisco PIX 506E - Security Appliance Bedienungsanleitung

Cisco

Cisco Cisco ASA 5500 Series Bedienungsanleitung

Cisco

Cisco amp threat grid Bedienungsanleitung

Cisco

Cisco Meraki MX100 Bedienungsanleitung

Cisco

Cisco Small Business RV220W Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Cisco

Cisco PIX 501 - Security Appliance Bedienungsanleitung

Cisco

Cisco FMC 1600 Handbuch

Cisco

Cisco ASA 5512-X Handbuch

Cisco

Cisco ASA 5506-X Bedienungsanleitung

Cisco

Cisco IronPort M1070 Bedienungsanleitung

Cisco

Cisco Spam Bedienungsanleitung

Cisco

Cisco ASA 5506-X Bedienungsanleitung

Cisco

Cisco Small Business Pro SA 520W Bedienungsanleitung

Cisco

Cisco ASA 5512-X Bedienungsanleitung

Cisco

Cisco ASA 5585-X Bedienungsanleitung

Cisco

Cisco 5505 - ASA Firewall Edition Bundle Bedienungsanleitung

Beliebte Firewall Handbücher anderer Marken

Fortinet

Fortinet FortiGate Voice Series Bedienungsanleitung

ADTRAN

ADTRAN NetVanta 2300 Bedienungsanleitung

SecureLogix

SecureLogix ETM System Bedienungsanleitung

NETGEAR

NETGEAR ProSafe FVX538 Bedienungsanleitung

Lanner

Lanner FW-8877 Bedienungsanleitung

Huawei

Huawei USG6000 Series Installations- und Betriebshandbuch

H3C

H3C SecPath F5000-AI-15 Bedienungsanleitung

Nexcom

Nexcom DNA 1150 Bedienungsanleitung

Fortinet

Fortinet FortiGate-60 series Bedienungsanleitung

Draytek

Draytek Vigor2860 Series Bedienungsanleitung

Lanner electronics

Lanner electronics FW-7650 Series Bedienungsanleitung

Swisscom

Swisscom Internet Backup Bedienungsanleitung

SonicWALL

SonicWALL NSa 5700 Bedienungsanleitung

DPtech

DPtech FW1000 SERIES Bedienungsanleitung

FEITIAN

FEITIAN MultiPass FIDO Bedienungsanleitung

EBLOCKER

EBLOCKER PRO Bedienungsanleitung

GTA

GTA GB-200 Bedienungsanleitung

Trend Micro

Trend Micro Deep Edge Bedienungsanleitung