Cisco Security Cloud Control: Secure Firewall Management

PDF

Cisco Security Cloud Control: Secure Firewall Management

Run a CLI macro

Updated: September 24, 2026

Want to summarize with AI?

Log in

Learn how to create and run CLI macros in Security Cloud Control to reuse prepared commands, define parameters, apply them to matching devices, and save configuration changes.

A CLI macro is a fully-formed CLI command ready to use on one or more devices of the matching type.

For some device types, Security Cloud Control provides system-defined macros. System-defined macros cannot be edited or deleted.

Procedure

  1. In the left pane, click Security Devices

  2. Click the Devices tab.

  3. Select one or more devices of the same type, and in the Device Actions pane on the right, click >_Command Line Interface.

    You cannot create macros without first choosing a device.

  4. Create a macro for this device type if one does not already exist.

    1. Add a macro in one of the following ways:

      • New macro—On the Macros tab (), create a new macro by clicking the Create Macro () button.

        Figure 1. Create New Macro
        Create New Macro

      • From an existing macro—On the Macros tab (), create a macro starting with the same commands by selecting a macro and then clicking the Create Macro () button.

        Figure 2. Create Macro from Existing
        Create Macro from Existing

      • From history—On the History tab (), select a command you already ran, and then click Create Macro () button.

        Figure 3. Create Macro from History
        Create Macro from History
    2. Give the macro a unique name and provide an optional description and notes.
      Figure 4. Create Macro
      Create Macro
    3. Enter the commands in the Command field. For variables, enter the parameter surrounded by double curly brackets: {{parameter}} .

      You will define the parameter before you run the macro.

      You can name your parameters anything you want.

    4. Click Create.

  5. Click the star to open the Macros tab, and select a macro from the list.

    You can edit or delete a macro using the icons next to the macro name.

  6. Run the macro one of two ways:

    • If the macro has no parameters to define, click Send. The response to the command appears in the response pane. You're done.

    • If the macro contains parameters, such as the Configure DNS macro below, click >_ View Parameters.

    1. In the Parameters pane, fill in the values for the parameters in the Parameters fields.
    2. Click Send.

  7. Save configuration changes if you made any.

    After you send the command you may see the message, "Some commands may have made changes to the running config" along with two links.

    • Clicking Write to Disk saves the changes made by this command, and any other change that in the running config, to the device's startup config.

    • Clicking Dismiss, dismisses the message and does not save the configuration. You may lose the configuration changes if you reboot the device.