Cisco IOS Security Command Reference: Commands M to R
Index
Downloads: The complete bookPDF (PDF - 6.91MB) | The complete bookePub (ePub - 0.95MB) | The complete bookMobi (Mobi - 2.46MB) | Feedback

Contents

M - N - O - P - Q - R -

Index

M

mab
mac access-group
mac-address (RITE)
managed-config-flag
map type
mask (policy-map)
mask-urls
master (IKEv2 cluster)
match
match (IKEv2 policy)
match (IKEv2 profile)
match (fqdn acl)
match (gtp)
match access-group
match address (GDOI local server)
match address (IPSec)
match authentication trustpoint
match body regex
match certificate
match certificate (ISAKMP)
match certificate (ca-trustpoint)
match certificate (ca-trustpool)
match certificate override cdp
match certificate override ocsp
match certificate override sia
match class session
match class-map
match cmd
match data-length
match encrypted
match field
match file-transfer
match group-object security
match header count
match header length gt
match header regex
match identity
match invalid-command
match ipv6 access-list
match login clear-text
match message
match mime content-type regex
match mime encoding
match not
match program-number
match protocol (zone)
match protocol h323-annexe
match protocol h323-nxg
match protocol-violation
match ra prefix-list
match recipient address regex
match recipient count gt
match recipient invalid count gt
match req-resp
match req-resp body length
match req-resp header content-type
match req-resp header transfer-encoding
match req-resp protocol-violation
match request
match request length
match request method
match request not regex
match request port-misuse
match request regex
match response
match response body java-applet
match response status-line regex
match search-file-name
match security-group
match sender address regex
match server-domain urlf-glob
match server-response any
match service
match start
match text-chat
match url category
match url reputation
match url-keyword urlf-glob
match user-group
max-destination
max-header-length
max-incomplete
max-incomplete (parameter-map type)
max-incomplete aggressive-aging
max-logins
max-request
max-resp-pak
max-retry-attempts
max-uri-length
max-users
max-users (WebVPN)
message retry count
message retry interval
mime-type
mitigation
mls acl tcam consistency enable
mls acl tcam default-result
mls acl tcam override dynamic dhcp-snooping
mls acl tcam share-global
mls acl vacl apply-self
mls aclmerge algorithm
mls ip acl port expand
mls ip inspect
mls rate-limit all
mls rate-limit layer2
mls rate-limit multicast ipv4
mls rate-limit multicast ipv6
mls rate-limit unicast acl
mls rate-limit unicast cef
mls rate-limit unicast ip
mls rate-limit unicast l3-features
mls rate-limit unicast vacl-log
mode (IPSec)
mode ra
mode secure
mode sub-cs
monitor event-trace dmvpn
monitor event-trace gdoi
monitor event-trace gdoi (privileged EXEC)
monitor event-trace ipv6 spd
mtu

N

name
name (view)
named-key
nas
nasi authentication
nat (IKEv2 profile)
nbns-list
nbns-list (policy group)
nbns-server
netmask
no crypto engine software ipsec
no crypto xauth
no ip inspect
no ip ips sdf builtin
non-standard (config-radius-server)

O

object-group (Catalyst 6500 series switches)
object-group network
object-group security
object-group service
occur-at (ips-auto-update)
ocsp
ocsp url
on
one-minute
other-config-flag
out-of-band
outgoing

P

pac key
parameter
parameter map type
parameter-map type
parameter-map type cws
parameter-map type inspect
parameter-map type inspect-global
parameter-map type inspect-vrf
parameter-map type inspect-zone
parameter-map type mitigation
parameter-map type ooo global
parameter-map type protocol-info
parameter-map type regex
parameter-map type trend-global
parameter-map type urlf-glob
parameter-map type urlfilter
parameter-map type urlfpolicy
parser view
parser view superview
pass
passive
passthrou-domain-list name
password (ca-trustpoint)
password (config-filter)
password (dot1x credentials)
password (line configuration)
password 5
password encryption aes
password logging
pattern (pa
peer
peer (IKEv2 keyring)
peer address ipv4
peer reactivate
per-box aggressive-aging
per-box max-incomplete
per-box max-incomplete aggressive-aging
per-box tcp syn-flood limit
permit
permit (Catalyst 6500 series switches)
permit (IP)
permit (IPv6)
permit (MAC ACL)
permit (reflexive)
permit (webvpn acl)
pfs
pki trustpoint
pki-server
police (zone policy)
policy
policy dynamic identity
policy group
policy static sgt
policy-map type control mitigation
policy-map type control tms
policy-map type inspect
policy-map type inspect urlfilter
pool (isakmp-group)
port
port (IKEv2 cluster)
port (TACACS+)
port-forward
port-forward (policy group)
port-misuse
ppp accounting
ppp authentication
ppp authentication ms-chap-v2
ppp authorization
ppp chap hostname
ppp chap password
ppp chap refuse
ppp chap wait
ppp eap identity
ppp eap local
ppp eap password
ppp eap refuse
ppp eap wait
ppp link
ppp pap refuse
ppp pap sent-username
pre-shared-key
pre-shared-key (IKEv2 keyring)
preempt
prf
primary
priority (firewall)
private-hosts
private-hosts layer3
private-hosts mac-list
private-hosts mode
private-hosts promiscuous
private-hosts vlan-list
privilege
privilege level
profile (GDOI local server)
profile (profile map configuration)
propagate sgt
propagate sgt (config-if-cts-dot1x)
proposal
protection (zone)
protocol
proxy
publickey

Q

qos-group (PVS Bundle Member)
query certificate
query url
quit

R

radius attribute nas-port-type
radius ip-input-bypass
radius local-server pac-generate expiry
radius server
radius-ser
radius-server accounting system host-config
radius-server attribute 11 default direction
radius-server attribute 188 format non-standard
radius-server attribute 25
radius-server attribute 30 original-called-number
radius-server attribute 31
radius-server attribute 31 mac format
radius-server attribute 32 include-in-access-req
radius-server attribute 4
radius-server attribute 44 extend-with-addr
radius-server attribute 44 include-in-access-req
radius-server attribute 44 sync-with-client
radius-server attribute 6
radius-server attribute 60 include-in-access-req
radius-server attribute 61 extended
radius-server attribute 66 include-in-access-req
radius-server attribute 67 include-in-access-req
radius-server attribute 69 clear
radius-server attribute 77
radius-server attribute 8 include-in-access-req
radius-server attribute data-rate send 0
radius-server attribute list
radius-server attribute nas-port extended
radius-server attribute nas-port format
radius-server authorization
radius-server authorization missing Service-Type
radius-server backoff exponential
radius-server challenge-noecho
radius-server configure-nas
radius-server dead-criteria
radius-server deadtime
radius-server directed-request
radius-server domain-stripping
radius-server extended-portnames
radius-server host
radius-server host non-standard
radius-server key
radius-server load-balance
radius-server local
radius-server optional-passwords
radius-server retransmit
radius-server retry method reorder
radius-server source-ports extended
radius-server throttle
radius-server timeout
radius-server transaction max-tries
radius-server unique-ident
radius-server vsa disallow unknown
radius-server vsa send
rate-limit (firewall)
rd
reauthentication time
reconnect
redirect (identity policy)
redirect gateway
redundancy (GDOI)
redundancy (cs-server)
redundancy (firewall)
redundancy asymmetric-routing enable
redundancy group
redundancy group (interface)
redundancy inter-device
redundancy rii
redundancy stateful
regenerate
regexp (profile map configuration)
registration interface
registration periodic crl trustpoint
registration retry count
registration retry interval
registration retry-interval (TIDP)
rekey address ipv4
rekey algorithm
rekey authentication
rekey lifetime
rekey retransmit
rekey sig-hash algorithm
rekey transport unicast
remark
remark (IPv6)
replay counter window-size
replay time window-size
request-method
request-queue (GTP)
request-timeout
reset (policy-map)
reset (zone-based policy)
responder-only
retired (IPS)
retransmit (config-radius-server)
reverse-route
revocation-check
root
root CEP
root PROXY
root TFTP
route accept
route set
route set remote
router-preference maximum
rsa-pubkey
rsakeypair