Cisco 安全防火墙 ASA 系列命令参考，I - R 命令

Contents

I - J - K - L - M - N - O - P - Q - R - 内 - 前 - 匹 - 密 - 徽 - 最 - 检 - 端 - 策 - 管 - 许 - 路 - 迁 - 邻

Index

I

icmp

icmp unreachable

icmp-object

id-cert-issuer

id-mi

id-randomization

id-usage

igmp

igmp access-group

igmp forward interface

igmp join-group

igmp limit

igmp query-interval

igmp query-max-response-time

igmp query-timeout

igmp static-group

igmp 版本

ignore lsa mospf

ignore-ipsec-keyusage (已弃用)

ignore-lsp-errors

ignore-ssl-keyusage (已弃用)

ike-retry-count

ikev1 pre-shared-key

ikev1 trust-point

ikev1 user-authentication

ikev2 local-authentication

ikev2 mobike-rrc

ikev2 remote-authentication

ikev2 rsa-sig-hash

im

imap4s (已弃用)

imi-traffic-descriptor

import

import webvpn AnyConnect-customization

import webvpn customization

import webvpn mst-translation

import webvpn plug-in protocol

import webvpn translation-table

import webvpn url-list

import webvpn webcontent

inspect ctiqbe

inspect dcerpc

inspect diameter

inspect dn

inspect esmtp

inspect ftp

inspect gtp

inspect h323

inspect http

inspect icmp

inspect icmp error

inspect ils

inspect im

inspect ip-options

inspect ipsec-pass-thru

inspect ipv6

inspect lisp

inspect m3ua

inspect mgcp

inspect mmp

inspect netbios

inspect pptp

inspect radius-accounting

inspect rsh

inspect rtsp

inspect scansafe

inspect sip

inspect skinny

inspect snmp

inspect sqlnet

inspect stun

inspect sunrpc

inspect tftp

inspect vxlan

inspect waas

inspect xdmcp

integrity

intercept-dhcp

interface (vpn load-balancing)

interface bvi

interface loopback

interface port-channel

interface redundant

interface tunnel

interface vlan

interface vni

interface （全局）

interface-policy

interim-accounting-update

internal-password

internal-port

internal-segment-id

interval maximum

invalid-ack

ip address

ip address dhcp

ip address pppoe

ip audit attack

ip audit info

ip audit interface

ip audit name

ip audit signature

ip local pool

ip unnumbered

ip verify reverse-path

ip-address-privacy

ip-client

ip-comp

ip-phone-bypass

ips

ipsec-udp

ipsec-udp-port

ipv4-prefix

ipv6 address

ipv6 dhcp client pd

ipv6 dhcp client pd hint

ipv6 dhcp pool

ipv6 dhcp server

ipv6 dhcprelay enable

ipv6 dhcprelay timeout

IPv6 dhcprelay 服务器

ipv6 enable

ipv6 enforce-eui64

ipv6 icmp

ipv6 local pool

ipv6 nd dad attempts

ipv6 nd managed-config-flag

ipv6 nd ns-interval

ipv6 nd other-config-flag

ipv6 nd prefix

ipv6 nd ra-interval

ipv6 nd ra-lifetime

ipv6 nd reachable-time

ipv6 nd suppress-ra

ipv6 neighbor

ipv6 ospf

ipv6 ospf area

ipv6 ospf cost

ipv6 ospf database-filter all out

ipv6 ospf dead-interval

ipv6 ospf encryption

ipv6 ospf flood-reduction

ipv6 ospf hello-interval

ipv6 ospf mtu-ignore

ipv6 ospf neighbor

ipv6 ospf network

ipv6 ospf priority

ipv6 ospf retransmit-interval

ipv6 ospf transmit-delay

ipv6 prefix-list

ipv6 route

ipv6 router ospf

ipv6 未编号

ipv6-address-pool

ipv6-address-pools

ipv6-prefix

ipv6-split-tunnel-policy

ipv6-vpn-address-assign

ipv6-vpn-filter

is-type

isakmp am-disable（已弃用）

isakmp disconnect-notify (已弃用)

isakmp enable（已弃用）

isakmp identity (已弃用)

isakmp ipsec-over-tcp (已弃用)

isakmp keepalive

isakmp nat-traversal（已弃用）

isakmp policy authentication

isakmp policy encryption（已弃用）

isakmp policy group（已弃用）

isakmp policy hash（已弃用）

isakmp policy lifetime（已弃用）

isakmp reload-wait (已弃用)

isis priority

isis protocol shutdown

isis retransmit-interval

isis retransmit-throttle-interval

isis tag

issuer (Deprecated)

issuer-name

J

java-trustpoint（已弃用）

join-failover-group

jumbo-frame reservation

K

kcd-server

keepout

kerberos-realm

key (aaa-server host)

key (cluster group)

key chain

key config-key password-encryption

key-hash

key-string

keypair

keysize server

kill

L

l2tp tunnel hello

lacp max-bundle

lacp port-priority

lacp rate

lacp system-priority

ldap-attribute-map

ldap-base-dn

ldap-defaults

ldap-dn

ldap-group-base-dn

ldap-login-dn

ldap-login-password

ldap-naming-attribute

ldap-over-ssl

ldap-scope

leap-bypass

license smart

license smart deregister

license smart plr set

license smart register

license smart renew

license smart reservation

license smart reservation cancel

license smart reservation install

license-server address

license-server backup address

license-server backup backup-id

license-server backup enable

license-server enable

license-server port

license-server refresh-interval

license-server secret

lifetime (ca server mode)

lifetime (ikev2 policy mode)

limit-resource

lmfactor

load-monitor

local-base-url

local-domain-bypass

local-unit

location-logging

log

log-adj-changes

log-adjacency-changes

logging asdm

logging asdm-buffer-size

logging buffer-size

logging buffered

logging class

logging console

logging debug-trace

logging debug-trace persistent

logging device-id

logging emblem

logging enable

logging facility

logging flash-bufferwrap

logging flash-maximum-allocation

logging flash-minimum-free

logging flow-export-syslogs

logging from-address

logging ftp-bufferwrap

logging ftp-server

logging hide username

logging history

logging host

logging list

logging mail

logging message

logging message standby

logging monitor

logging permit-hostdown

logging queue

logging rate-limit

logging recipient-address

logging savelog

logging standby

logging timestamp

logging trap

login

login-button

login-message

login-title

logout

logout-message

lsp-full suppress

lsp-gen-interval

lsp-refresh-interval

M

mac address

mac-address

mac-address auto

mac-address pool

mac-address-table aging-time

mac-address-table static

mac-learn disable

mac-learn 泛洪

mac-list

mail-relay

management-access

management-only

map-domain

map-name

map-value

mapping-service (已弃用)

mask

mask-banner

mask-syst-reply

match access-list

match any

match apn

match application-id

match as-path

match avp

match body

match called-party

match calling-party

match certificate

match certificate skip revocation-check

match cmd

match command-code

match community

match default-inspection-traffic

match dns-class

match dns-type

match do

match dpc

match dscp

match ehlo-reply-parameter

match filename

match filetype

match flow ip destination-address

match header (policy-map type inspect esmtp)

match header (policy-map type inspect ipv6)

match header-flag

match im-subscriber

match interface

match invalid-recipients

match ip address

match ip next-hop

match ip route-source

match ipv6 address

match login-name

match media-type

match message class

match message id

match message length

match message-path

match metric

match mime

match msisdn

match opc

match peer-ip-address

match peer-login-name

match port

match ppid

match protocol

match question

match regex

match req-resp

match request method

match request-command

match request-method

match route-type

match rtp

match selection-mode

match sender-address

match server

match service

match service-indicator

match third-party-registration

match tunnel-group

match uri

match url-filter

match user group

match username

match uuid

match version

max-area-addresses

max-failed-attempts

max-forwards-validation

max-header-length

max-lsp-lifetime

max-object-size

max-uri-length

maximum-paths (BGP)

maximum-paths (IS-IS)

mcast-group

mcc

media-termination (已弃用)

media-type

member

member-interface

memberof

memory appcache-threshold enable

memory caller-address

memory delayed-free-poisoner enable

memory delayed-free-poisoner validate

memory logging

memory profile enable

memory profile text

memory tracking enable

memory-size

memory-utilization

merge-dacl

message-authenticator-required

message-length

message-tag-validation

metric

metric-style

mfib forwarding

min-obje

mkdir

mobile-device portal

mode

monitor-interface

more

mount type cifs

mount type ftp

mroute

mschapv2-capable

msie-proxy except-list

msie-proxy local-bypass

msie-proxy lockdown

msie-proxy method

msie-proxy pac-url

msie-proxy server

mtu

mtu cluster

multicast boundary

multicast-routing

mus

mus host

mus password

mus server

N

nac-authentication-server-group (已弃用)

nac-poli

nac-settings (已弃用)

name (dynamic-filter blacklist 或 whitelist)

name-separator (pop3s, imap4s, smtps) (已弃用)

name-server

nameif

names

name（全局）

nat (global)

nat (object)

nat (vpn load-balancing)

nat-assigned-to-public-ip

nat-rewrite

nbns-server

neighbor (router eigrp)

neighbor (router ospf)

neighbor activate

neighbor advertise-map

neighbor advertisement-interval

neighbor default-originate

neighbor disable-connected-check

neighbor distribute-list

neighbor ebgp-multihop

neighbor fall-over bfd (router bgp)

neighbor filter-list

neighbor ha-mode graceful-restart

neighbor local-as

neighbor maximum-prefix

neighbor next-hop-self

neighbor password

neighbor prefix-list

neighbor remote-as

neighbor remove-private-as

neighbor route-map

neighbor send-community

neighbor shutdown

neighbor timers

neighbor transport

neighbor ttl-security

neighbor update-source

neighbor version

neighbor weight

nem

netmod

network (address-family)

network (router eigrp)

network (router rip)

network area

network-acl

network-object

network-service-member

nis address

nis domain-name

nisp address

nisp domain-name

nop

nsf cisco

nsf cisco helper

nsf ietf

nsf ietf helper

nt-auth-domain-controller

ntp authenticate

ntp authentication-key

ntp server

ntp trusted-key

num-packets

nve

nve-only

O

object network

object network-service

object service

object-group

object-group-search

ocsp disable-nonce

ocsp interface

ocsp url

on屏幕键盘（已弃用）

ospf authentication

ospf authentication-key

ospf cost

ospf database-filter

ospf dead-interval

ospf hello-interval

ospf message-digest-key

ospf mtu-ignore

ospf network point-to-point non-broadcast

ospf priority

ospf retransmit-interval

ospf transmit-delay

otp expiration

output console

output file

output none

outstanding（已弃用）

override-account-disable (已弃用)

override-svc-download

P

packet-tracer

page style

pager

parameters

participate

passive-interface (ipv6 router ospf)

passive-interface (isis)

passive-interface (router eigrp)

passive-interface (router rip)

passwd

password (crypto ca trustpoint)

password encryption aes

password-history

password-management

password-parameter

password-policy authenticate enable

password-policy lifetime

password-policy minimum-changes

password-policy minimum-length

password-policy minimum-lowercase

password-policy minimum-numeric

password-policy minimum-special

password-policy minimum-uppercase

password-policy reuse-interval

password-storage

peer ip

peer-group

peer-id-validate

perfmon

periodic

periodic-authentication certificate

permit-errors

permit-response

pfs

phone-proxy (已弃用)

pim

pim accept-register

pim bidir-neighbor-filter

pim bsr-border

pim bsr-candidate

pim dr-priority

pim hello-interval

pim join-prune-interval

pim neighbor-filter

pim old-register-checksum

pim rp-address

pim spt-threshold infinity

ping

policy static sgt

policy-list

policy-map

policy-map type inspect

policy-route

policy-server-secret (已弃用)

poll-timer

polltime interface

pop3s (已弃用)

port (已弃用)

port-channel load-balance

port-channel min-bundle

port-channel span-cluster

port-forward-name（已弃用）

port-forward（已弃用）

portal-access-rule（已弃用）

post-max-size

power-supply

pppoe client route distance

pppoe client route track

pppoe client secondary

prc-interval

pre-fill-username

preempt

prefix-list

prf

primary

priority-queue

priority（VPN负载均衡）

priority（类别）

priority（集群组）

privilege

profile

prompt

propagate sgt

protocol

protocol http

protocol ldap

protocol scep

protocol shutdown

protocol-enforcement

protocol-object

protocol-violation

proxy paired

proxy single-arm

proxy-auth

proxy-auth_map sdi

proxy-bypass

proxy-ldc-issuer

proxy-server (已弃用)

ptp domain

ptp enable

ptp 模式

public-key

publish-crl

pwd

Q

queue-limit (priority-queue)

queue-limit (tcp-map)

quick-start

quit

quota management-session

R

ra

radius-common-pw

radius-reject-message

raid

range

ras-rcf-pinholes

rate-limit

re-xauth

reactivation-mode

record-entry

record-route

redirect-fqdn

redistribute (ipv6 router ospf)

redistribute (router eigrp)

redistribute (router ospf)

redistribute (router rip)

redistribute isis

redundant-interface

regex

reload

remote-access threshold session-threshold-exceeded

rename (class-map)

rename (EXEC 特权)

renewal-reminder

replication http

request-command deny

request-data-size

request-queue

request-timeout (已弃用)

reserve-port-protect

reserved-bits

reset

resolver

responder-only

rest-api（已弃用）

restore

retries

retry-count

retry-interval

reval-period

revert webvpn all

revert webvpn AnyConnect-customization

revert webvpn customization

revert webvpn plug-in protocol

revert webvpn translation-table

revert webvpn url-list

revert webvpn webcontent

revocation-check

rewrite（已弃用）

rip authentication key

rip authentication mode

rip receive version

rip send version

rmdir

route priority high

route-map

router bgp

router eigrp

router isis

router ospf

router rip

router-alert

router-id

router-id cluster-pool

rtp-conformance

rtp-min-port rtp-max-port（已弃用）

内

内嵌式电源

前

前缀列表序列号

前缀列表说明

匹

匹配优先级

匹配证书允许过期证书（已弃用）

密

密码策略用户名检查

密钥大小

徽

徽标

最

最大重试次数（已弃用）

检

检查 SCTP

端

端口对象

策

策略

管

管制

许

许可证

许可证智能预留返还

许可证智能预订通用

路

路由

迁

迁移

邻

邻居描述