Cisco IOS Security Command Reference: Commands M to R

Contents

M - N - O - P - Q - R

Index

M

ma

mab

mac access-group

mac-address (RITE)

managed-config-flag

map type

mask (policy-map)

mask-urls

master (IKEv2 cluster)

match (fqdn acl)

match (gtp)

match (IKEv2 policy)

match (IKEv2 profile)

match access-group

match address (GDOI local server)

match address (IPSec)

match authentication trustpoint

match body regex

match certificate

match certificate (ca-trustpoint)

match certificate (ca-trustpool)

match certificate (ISAKMP)

match certificate overri

match certificate override cdp

match certificate override sia

match class session

match class-map

match cmd

match data-length

match eku

match encrypted

match field

match file-transfer

match group-object security

match header count

match header length gt

match header regex

match identity

match invalid-command

match ipv6 access-list

match login clear-text

match message

match mime content-type regex

match mime encoding

match not

match program-number

match protocol (zone)

match protocol h323-annexe

match protocol-violation

match ra prefix-list

match recipient address regex

match recipient count gt

match recipient invalid count gt

match reply ehlo

match req-resp

match req-resp body length

match req-resp header content-type

match req-resp header transfer-encoding

match req-resp protocol-violation

match request

match request length

match request method

match request not regex

match request port-misuse

match request regex

match response

match response body java-applet

match response status-line regex

match search-file-name

match security-group

match sender address regex

match server-domain urlf-glob

match server-response any

match service

match start

match text-chat

match url category

match url reputation

match url-keyword urlf-glob

match user-group

max-destination

max-header-length

max-incomplete

max-incomplete (parameter-map type)

max-incomplete aggressive-aging

max-logins

max-request

max-resp-pak

max-retry-attempts

max-uri-length

max-users

max-users (WebVPN)

message retry count

message retry interval

mime-type

mitigation

mls acl tcam consistency enable

mls acl tcam default-result

mls acl tcam override dynamic dhcp-snooping

mls acl tcam share-global

mls acl vacl apply-self

mls aclmerge algorithm

mls ip acl port expand

mls ip inspect

mls rate-limit all

mls rate-limit layer2

mls rate-limit multicast ipv4

mls rate-limit multicast ipv6

mls rate-limit unicast acl

mls rate-limit unicast cef

mls rate-limit unicast ip

mls rate-limit unicast l3-features

mls rate-limit unicast vacl-log

mode (IPSec)

mode ra

mode secure

mode sub-cs

monitor event-trace crypto pki event internal enable

monitor event-trace dmvpn

monitor event-trace gdoi

monitor event-trace gdoi (privileged EXEC)

monitor event-trace ipv6 spd

mtu

N

name

name (view)

named-key

nas

nasi authentication

nat (IKEv2 profile)

nbns-list

nbns-list (policy group)

nbns-server

netmask

no crypto engine software ipsec

no crypto xauth

no ip inspect

no ip ips sdf builtin

non-standard (config-radius-server)

O

object-group (Catalyst 6500 series switches)

object-group network

object-group security

object-group service

occur-at (ips-auto-update)

ocsp

ocsp url

on

one-minute

other-config-flag

out-of-band

outgoing

P

pac key

parameter

parameter map type

parameter-map type

parameter-map type cws

parameter-map type ins

parameter-map type inspect

parameter-map type inspect-global

parameter-map type inspect-vrf

parameter-map type mitigation

parameter-map type ooo global

parameter-map type protocol-info

parameter-map type regex

parameter-map type trend-global

parameter-map type urlf-glob

parameter-map type urlfilter

parameter-map type urlfpolicy

parser view

parser view superview

pass

passive

passthrou-domain-list name

passwd encryption

passwd key

password (ca-trustpoint)

password (config-filter)

password (dot1x credentials)

password (line configuration)

password 5

password encryption aes

password logging

pattern (parameter-map)

peer

peer (IKEv2 keyring)

peer address ipv4

peer reactivate

per-box aggressive-aging

per-box max-incomplete

per-box max-incomplete aggressive-aging

per-box tcp syn-flood limit

permit

permit (Catalyst 6500 series switches)

permit (IP)

permit (IPv6)

permit (MAC ACL)

permit (reflexive)

permit (webvpn acl)

pfs

pki trustpoint

pki-server

platform ipsec control-plane

platform macsec logging replay-protection

police (zone policy)

policy

policy dynamic identity

policy group

policy static sgt

policy-map type control mitigation

policy-map type control tms

policy-map type inspect

policy-map type inspect urlfilter

pool (isakmp-group)

port

port (IKEv2 cluster)

port (TACACS+)

port-forward

port-forward (policy group)

port-misuse

ppp accounting

ppp authentication

ppp authentication ms-chap-v2

ppp authorization

ppp chap hostname

ppp chap password

ppp chap refuse

ppp chap wait

ppp eap identity

ppp eap local

ppp eap password

ppp eap refuse

ppp eap wait

ppp link

ppp pap refuse

ppp pap sent-username

pre-shared-key

pre-shared-key (IKEv2 keyring)

preempt

prf

primary

priority (firewall)

private-hosts

private-hosts layer3

private-hosts mac-list

private-hosts mode

private-hosts promiscuous

private-hosts vlan-list

privilege

privilege level

profile (GDOI local server)

profile (profile map configuration)

propagate sgt

propagate sgt (config-if-cts-dot1x)

proposal

protection (zone)

protocol

proxy

publickey

Q

qos-group (PVS Bundle Member)

query certificate

query url

quit

R

radius attribute nas-port-type

radius ip-input-bypass

radius local-server pac-generate expiry

radius server

radius-server accounting system host-config

radius-server attribute 11 default direction

radius-server attribute 188 format non-standard

radius-server attribute 25

radius-server attribute 30 original-called-number

radius-server attribute 31

radius-server attribute 31 mac format

radius-server attribute 32 include-in-access-req

radius-server attribute 4

radius-server attribute 44 extend-with-addr

radius-server attribute 44 include-in-access-req

radius-server attribute 44 sync-with-client

radius-server attribute 55 include-in-acct-req

radius-server attribute 6

radius-server attribute 60 include-in-access-req

radius-server attribute 61 extended

radius-server attribute 66 include-in-access-req

radius-server attribute 67 include-in-access-req

radius-server attribute 69 clear

radius-server attribute 77

radius-server attribute 8 include-in-access-req

radius-server attribute data-rate send 0

radius-server attribute list

radius-server attribute nas-port extended

radius-server attribute nas-port format

radius-server authorization

radius-server authorization missing Service-Type

radius-server backoff exponential

radius-server challenge-noecho

radius-server configure-nas

radius-server dead-criteria

radius-server deadtime

radius-server directed-request

radius-server domain-stripping

radius-server extended-portnames

radius-server host

radius-server host non-standard

radius-server key

radius-server load-balance

radius-server local

radius-server optional-passwords

radius-server retransmit

radius-server retry method reorder

radius-server source-ports extended

radius-server throttle

radius-server timeout

radius-server transaction max-tries

radius-server unique-ident

radius-server vsa disallow unknown

radius-server vsa send

range

rate-limit (firewall)

rd

reauthentication time

reconnect

redirect (identity policy)

redirect gateway

redundancy

redundancy (cs-server)

redundancy (firewall)

redundancy (GDOI)

redundancy asymmetric-routing enable

redundancy group

redundancy group (interface)

redundancy rii

redundancy stateful

regenerate

regexp (profile map configuration)

registration interface

registration periodic crl trustpoint

registration retry count

registration retry interval

registration retry-interval (TIDP)

rekey address ipv4

rekey algorithm

rekey authentication

rekey lifetime

rekey retransmit

rekey sig-hash algorithm

rekey transport unicast

remark

remark (IPv6)

replay counter window-size

replay time window-size

request-method

request-queue (GTP)

request-timeout

reset (policy-map)

reset (zone-based policy)

responder-only

retired (IPS)

retransmit (config-radius-server)

reverse-route

revocation-check

root

root CEP

root PROXY

root TFTP

route accept

route set

route set remote

router-preference maximum

rsa-pubkey

rsakeypair