Cisco Secure Firewall ASA シリーズ コマンド リファレンス、A ～ H コマンド

Contents

A - B - C - D - E - F - G - H - W - ブ

Index

A

aaa accoungting command

aaa accounting console

aaa accounting include、exclude

aaa accounting match

aaa authentication console

aaa authentication include、exclude

aaa authentication listener

aaa authentication listener no-logout-button

aaa authentication login-history

aaa authentication match

aaa authentication secure-http-client

aaa authorization command

aaa authorization exec

aaa authorization http

aaa authorization include、exclude

aaa authorization match

aaa kerberos import-keytab

aaa local authentication attempts max-fail

aaa mac-exempt

aaa proxy-limit

aaa sdi import-node-secret

aaa-server

aaa-server active、fail

aaa-server host

absolute

accept-subordina

access-group

access-list alert-interval

access-list deny-flow-max

access-list ethertype

access-list extended

access-list remark

access-list rename

access-list standard

access-list webtype

accounting-mode

accounting-port

accounting-server-group

acl-netmask-convert

action

action cli command

action-uri

activate-tunnel-group-script

activation-key

activex-relay

ad-agent-mode

address-family ipv4

address-family ipv6

address-pool

address-pools

address（media-termination）（廃止）

address（ダイナミック フィルタ ブラックリスト、ホワイトリスト）

admin-context

advertise passive-only

aggregate-address

alarm contact description

alarm contact severity

alarm contact trigger

alarm facility input-alarm

alarm facility power-supply rps

alarm facility temperature（アクション）

alarm facility temperature（上限および下

allocate-interface

allocate-ips

allow-ssc-mgmt

allow-tls

allowed-eid

always-on-vpn

anti-replay

anyconnect ask

anyconnect df-bit-ignore

anyconnect dpd-interval

anyconnect dtls compression

anyconnect enable

anyconnect external-browser-pkg

anyconnect firewall-rule

anyconnect image

anyconnect keep-installer

anyconnect modules

anyconnect mtu

anyconnect profiles（webvpn）

anyconnect profiles（グループ ポリシー属性 webvpn、ユーザー名属性 webvpn）

anyconnect ssl compression

anyconnect ssl df-bit-ignore

anyconnect ssl dtls enable

anyconnect ssl keepalive

anyconnect ssl rekey

anyconnect-custom-attr（バージョン 9.0 から 9.2 まで）

anyconnect-custom-attr（バージョン 9.3 以降）

anyconnect-custom-data

anyconnect-custom（バージョン 9.0 から 9.2 まで）

anyconnect-custom（バージョン 9.3 以降）

anyconnect-essentials

apcf（廃止）

app-agent heartbeat

app-id

appl-acl

application-access

application-access hide-details

area

area authentication

area default-cost

area filter-list prefix

area nssa

area range（IPv6 ルータ OSPF）

area range（ルータ OSPF）

area stub

area virtual-link（IPv6 ルータ OSPF）

area virtual-link（ルータ OSPF）

area-password

arp

arp permit-nonconnected

arp rate-limit

arp timeout

arp-inspection

as-path access-list

asdm disconnect

asdm disconnect log_session

asdm history enable

asdm image

asdm location

asp load-balance per-packet

asp rule-engine compile-offload

asp rule-engine transactional-commit

asr-group

assertion-consumer-url（廃止）

attribute bind

attribute source-group

attribute source-group host

attribute source-group keepalive

attributes

auth-cookie-name

auth-prompt

authenticated-session-username

authentication

authentication eap-proxy

authentication key

authentication key eigrp

authentication mode

authentication ms-chap-v1

authentication ms-chap-v2

authentication pap

authentication send-only

authentication-attr-from-server

authentication-certificate

authentication-exclude

authentication-port

authentication-server-group（imap4s、pop3s、smtps）（廃止）

authentication-server-group（トンネル グループ一般属性）

authentication（bfd-template）

authorization-required

authorization-server-group（imap4s、pop3s、smtps）（廃止）

authorization-server-group（トンネル グループ一般属性）

authorize-only

auto-signon

auto-summary

auto-update device-id

auto-update poll-at

auto-update poll-period

auto-update server

auto-update timeout

B

backup

backup interface

backup-package auto

backup-package location

backup-servers

banner（グループ ポリシー）

banner（グローバル）

base-url

basic-mapping-rule

basic-security

bfd echo

bfd interval

bfd map

bfd slow-timers

bfd-template

bgp aggregate-timer

bgp always-compare-med

bgp asnotation dot

bgp bestpath compare-routerid

bgp bestpath med missing-as-worst

bgp default local-preference

bgp deterministic-med

bgp enforce-first-as

bgp fast-external-fallover

bgp graceful-restart

bgp inject-map

bgp log-neighbor-changes

bgp maxas-limit

bgp nexthop

bgp redistribute-internal

bgp router-id

bgp scan-time

bgp suppress-inactive

bgp transport

bgp-community new-format

blocks

boot

border style

bridge-group

browse-networks

C

ca-check

cache

cache-static-content

cache-time

call-agent

call-duration-limit

call-home

call-home send

call-home send alert-group

call-home test

call-party-numbers

capability lls

capability opaque

captive-portal

capture

cd

cdp-url

certificate

certificate-group-map

chain

change-password

changeto

channel-group

character-encoding

check-retransmission

checkheaps

checksum-verification

cipc security-mode authenticated（廃止）

clacp static-port-priority

clacp system-mac

class-map

class-map type inspect

class-map type management

class-map type regex

class（

class（グローバル）

clear aaa kerberos

clear aaa local user

clear aaa sdi node-secret

clear aaa-server statistics

clear access-list

clear arp

clear asp

clear bfd counters

clear bgp

clear blocks

clear capture

clear clns cache

clear clns is-neighbors

clear clns neighbors

clear clns route

clear cluster info

clear compression

clear configuration session

clear configure

clear conn

clear console-output

clear coredump

clear counters

clear cpu profile

clear crashinfo

clear crypto accelerator statistics

clear crypto ca crls

clear crypto ca trustpool

clear crypto ikev1

clear crypto ikev2

clear crypto ipsec sa

clear crypto ipsec stats

clear crypto isakmp

clear crypto protocol statistics

clear crypto ssl

clear cts

clear dhcpd

clear dhcprelay statistics

clear dns

clear dns-hosts cache

clear dynamic-filter dns-snoop

clear dynamic-filter reports

clear dynamic-filter statistics

clear eigrp events

clear eigrp neighbors

clear eigrp topology

clear facility-alarm output

clear failover statistics

clear flow-export counters

clear flow-offload

clear flow-offload-ipsec

clear fragment

clear gc

clear igmp counters

clear igmp group

clear igmp traffic

clear ikev1

clear ikev2

clear interface

clear ip audit count

clear ip verify statistics

clear ipsec sa

clear ipsec stats

clear ipv6 access-list counters（廃止）

clear ipv6 dhcp statistics

clear ipv6 dhcprelay

clear ipv6 mld traffic

clear ipv6 neighbors

clear ipv6 ospf

clear ipv6 prefix-list

clear ipv6 route

clear ipv6 traffic

clear isakmp sa

clear isis

clear lisp eid

clear local-host

clear logging asdm

clear logging buffer

clear logging counter

clear logging queue bufferwrap

clear mac-address-table

clear memory appcache-threshold

clear memory delayed-free-poisoner

clear memory profile

clear mfib counters

clear module

clear nac-policy

clear nat counters

clear nve

clear object

clear object-group

clear ospf

clear path-monitoring

clear pclu

clear phone-proxy secure-phones

clear pim c

clear pim group-map

clear pim reset

clear pim topology

clear priority-queue statistics

clear process

clear resource usage

clear route

clear service-policy

clear service-policy inspect gtp

clear service-policy inspect m3ua

clear service-policy inspect radius-accounting

clear session

clear shared license

clear shun

clear snmp-server statistics

clear ssl

clear startup-config errors

clear sunrpc-server active

clear terminal

clear threat-detection rate

clear threat-detection scanning-threat

clear threat-detection service

clear threat-detection shun

clear threat-detection statistics

clear traffic

clear uauth

clear uc-ime

clear url-block block statistics

clear url-cache statistics

clear url-server

clear user-identity active-user-database

clear user-identity ad-agent statistics

clear user-identity statistics

clear user-identity user no-policy-activated

clear user-identity user-not-found

clear vpn cluster stats internal

clear vpn-sessiondb statistics

clear wccp

clear webvpn sso-server statistics

clear xlate

clear-button

client-access-rule

client-bypass-protocol

client-firewall

client-types（クリプト CA トラストポイント）

client-update

client（CTL プロバイダー）

client（TLS プロキシ）

clock set

clock summer-time

clock timezone

clu-keepalive-interval

cluster

cluster encryption

cluster exec

cluster flow-mobility lisp

cluster group

cluster interface-mode

cluster ip address

cluster key

cluster port

cluster redistribute vpn-sessiondb

cluster remove unit

cluster replication delay

cluster-ctl-file（廃止）

cluster-interface

cluster-member-limit

cluster-mode（廃止）

cn-id

command-alias

command-queue

commercial-security

community-list

compatible rfc1583

compression

config-register

config-replicate-parallel

config-url

configure factory-default

configure http

configure memory

configure net

configure session

configure terminal

conn data-rate

conn-rebalance

connect fxos

console tim

console-replicate

content-length

context

copy

coredump enable

cpu hog granular-detection

cpu profile activate

crashinfo console disable

crashinfo force

crashinfo save disable

crashinfo test

crl cache-time

crl configure

crl enforcenextupdate

crl（廃止）

crypto am-disable

crypto ca alerts expiration

crypto ca aunticate

crypto ca certificate chain

crypto ca certificate map

crypto ca crl request

crypto ca enroll

crypto ca export

crypto ca import

crypto ca permit-weak-crypto

crypto ca reference-identity

crypto ca server crl issue

crypto ca server revoke

crypto ca server unrevoke

crypto ca server user-db add

crypto ca server user-db allow

crypto ca server user-db email-otp

crypto ca server user-db remove

crypto ca server user-db show-otp

crypto ca server user-db write

crypto ca server（廃止）

crypto ca trustpoint

crypto ca trustpool export

crypto ca trustpool import

crypto ca trustpool policy

crypto ca trustpool remove

crypto dynamic-map match address

crypto dynamic-map set df-bit

crypto dynamic-map set ikev1 transform-set

crypto dynamic-map set ikev2 ipsec-proposal

crypto dynamic-map set nat-t-disable

crypto dynamic-map set peer

crypto dynamic-map set pfs

crypto dynamic-map set reverse route

crypto dynamic-map set security-association lifetime

crypto dynamic-map set tfc-packets

crypto dynamic-map set validate-icmp-errors

crypto engine accelerator-bias

crypto engine large-mod-accel

crypto ikev1 enable

crypto ikev1 ipsec-over-tcp

crypto ikev1 limit max-in-negotiation-sa

crypto ikev1 policy

crypto ikev2 cookie-challenge

crypto ikev2 enable

crypto ikev2 fragmentation

crypto ikev2 limit max-in-negotiation-sa

crypto ikev2 limit max-sa

crypto ikev2 limit queue sa_init

crypto ikev2 notify

crypto ikev2 policy

crypto ikev2 redirect

crypto ikev2 remote-access trust-point

crypto ipsec df-bit

crypto ipsec fragmentation

crypto ipsec ikev1 transform-set

crypto ipsec ikev1 transform-set mode transport

crypto ipsec ikev2 ipsec-proposal

crypto ipsec ikev2 sa-strength-enforcement

crypto ipsec inner-routing-lookup

crypto ipsec profile

crypto ipsec security-association lifetime

crypto ipsec security-association pmtu-aging

crypto ipsec security-association replay

crypto isakmp disconnect-n

crypto isakmp identity

crypto isakmp nat-traversal

crypto isakmp policy authentication

crypto isakmp policy encryption

crypto isakmp policy group

crypto isakmp policy hash

crypto isakmp policy lifetime

crypto isakmp reload-wait

crypto key generate

crypto key zeroize

crypto large-cert-acceleration enable（廃止）

crypto map interface

crypto map ipsec-isakmp dynamic

crypto map match address

crypto map set connection-type

crypto map set df-bit

crypto map set ikev1 phase1-mode

crypto map set ikev2 ipsec-proposal

crypto map set ikev2 mode

crypto map set ikev2 phase1-mode

crypto map set ikev2 pre-shared-key

crypto map set inheritance

crypto map set nat-t-disable

crypto map set peer

crypto map set pfs

crypto map set reverse-route

crypto map set security-association lifetime

crypto map set tfc-packets

crypto map set transform-set

crypto map set trustpoint

crypto map set validate-icmp-errors

csc

csd enable（廃止）

csd hostscan image（廃止）

csd image（廃止）

ctl

ctl-file（廃止）

ctl-provider

cts import-pac

cts manual

cts refresh environment-data

cts role-based sgt-map

cts server-group

cts sxp connection peer

cts sxp default password

cts sxp default source-ip

cts sxp delete-hold-down period

cts sxp enable

cts sxp mapping network-map

cts sxp reconciliation period

cts sxp retry period

customization

cxsc

cxsc auth-proxy port

D

data-plane quick-reload

database path

ddns

ddns update

ddns update method

debug

default enrollment

default user group

default-acl

default-domain

default-group-policy（imap4s、pop3s、smtps）（廃止）

default-group-policy（トンネル グループ一般属性）

default-idle-timeout

default-information

default-information originate

default-information originate（IPv6 ルータ OSPF、ルータ OSPF）

default-information originate（アドレス ファミリ）

default-information originate（ルータ RIP）

default-language

default-mapping-rule

default-mcast-group

default-metric

default（crl 設定）

default（IPv6 ルータ OSPF）

default（インターフェイス）

default（パラメータ）

default（時間範囲）

delay

delete

deny version

deny-message

description

dhcp client

dhcp client route distance

dhcp-client broadcast-flag

dhcp-client client-id

dhcp-client update dns

dhcp-network-scope

dhcp-server

dhcpd address

dhcpd auto_config

dhcpd dns

dhcpd domain

dhcpd enable

dhcpd lease

dhcpd option

dhcpd ping_timeout

dhcpd reserve-address

dhcpd update dns

dhcpd wins

dhcprelay enable

dhcprelay information trust-all

dhcprelay information trusted

dhcprelay server (vti tunnel)

dhcprelay server（インターフェイス）

dhcprelay server（グローバル）

dhcprelay setroute

dhcprelay timeout

dialog

diameter

dir

director-localization

disable service-settings（廃止）

disable（キャッシュ）

disable（特権 EXEC）

display

dista

distance

distance bgp

distance eigrp

distance ospf（IPv6 ルータ OSPF）

distribute-list

distribute-list in（アドレス ファミリ）

distribute-list in（ルータ）

distribute-list out（アドレス ファミリ）

distribute-list out（ルータ）

dns domain-lookup

dns expire-entry-timer

dns name-server

dns poll-timer

dns server-group

dns trusted-source

dns update

dns-group

dns-group-map

dns-guard

dns-id

dns-server（IPv6 DHCP プール）

dns-server（グループ ポリシー）

dns-to-domain

dnscrypt

domain

domain-name (dns server-group)

domain-name（IPv6 DHCP プール）

domain-name（グローバル）

domain-password

downgrade

download-max-size

drop

drop-connection

dtls port

duplex

dynamic-access-policy-config

dynamic-access-policy-record

dynamic-authorization

dynamic-filter ambiguous-is-black

dynamic-filter blacklist

dynamic-filter database fetch

dynamic-filter database find

dynamic-filter database purge

dynamic-filter drop blacklist

dynamic-filter enable

dynamic-filter updater-client enable

dynamic-filter use-database

dynamic-filter whitelist

E

early-message

echo

eigrp log-neighbor-changes

eigrp log-neighbor-warnings

eigrp router-id

eigrp stub

eject

email

enable e-mail proxy（廃止）

enable gprs

enable password

enable(ユーザー EXEC）

enable（クラスタ グループ）

encapsulation

encryption

endpoint

endpoint-mapper

enforcenextupdate

enrollment protocol scep cmp

enrollment retry count

enrollment retry period

enrollment terminal

enrollment url（廃止）

enrollment-retrieval

eool

eou allow（廃止）

eou clientless（廃止）

eou initialize（廃止）

eou max-retry（廃止）

eou port（廃止）

eou revalidate（廃止）

eou timeout（廃止）

erase

esp

established

event crashinfo

event manager applet

event memory-logging-wrap

event none

event syslog id

event timer

exceed-mss

exempt-list

exit

exp-flow-control

exp-measure

expire-entry-timer

expiry-time

export

export webvpn AnyConnect-customization

export webvpn customization

export webvpn mst-tra

export webvpn plug-in

export webvpn translation-table

export webvpn url-list

export webvpn webcontent

extended-security

external-browser

external-port

external-segme

F

failover

failover active

failover cloud authentication

failover cloud peer

failover cloud polltime

failover cloud port

failover cloud route-table

failover cloud route-table rg

failover cloud route-table route

failover cloud subscription-id

failover cloud unit

failover exec

failover group

failover health-check bfd

failover interface ip

failover interface-policy

failover ipsec pre-shared-key

failover key

failover lan interface

failover lan unit

failover link

failover mac address

failover poll-time link-state

failover polltime

failover polltime interface

failover reload-standby

failover replication http

failover replication rate

failover reset

failover standby config-lock

failover timeout

failover wait-dis

fallback（廃止）

fast-flood

feature

fec

file-bookmarks

file-browsing

file-e

file-encoding

filter

filter activex

filter ftp

filter https

filter java

filter url

fips enable

fips self-test poweron

firewall transparent

flow-export active refresh-interval

flow-export delay flow-create

flow-export destination

flow-export event-type destination

flow-export template timeout-rate

flow-mobility lisp

flow-offload enable

flow-offload-dtls

flow-offload-ipsec

flowcontrol

format

forward interface

forward-reference

fqdn（クリプト CA トラストポイント）

fqdn（ネットワーク オブジェクト）

fragment

frequency

fsck

ftp mode passive

functions（廃止）

fxos mode appliance

fxos permit

fxos port

G

gateway

gateway-fqdn

graceful-restart

graceful-restart helper

group

group-alias

group-delimiter

group-lock

group-object

group-policy

group-policy attributes

group-prompt

group-search-timeout

group-url

gtp-u-header-check

H

h245-tunnel-block

hardware-bypass

hardware-bypass boot-delay

hardware-bypass manual

health-check

health-check application

health-check auto-rejoin

health-check chassis-heartbeat-delay-rejoin

health-check monitor-interface

hello padding multi-point

hello-interval

help

hidden-parameter

hidden-shares

hold-time

homepage

homepage use-smart-tunnel

hostname

hostname dynamic

hostscan enable

hostscan image

host（ネットワーク オブジェクト）

host（パラメータ）

hpm topn enable

hsi

hsi-group

hsts enable

hsts max-age

html-content-filter

htt

http authentication-certificate

http connection idle-timeout

http redirect

http server basic-auth-client

http server enable

http server idle-timeout

http username-from-certificate

http-comp

http-only-cookie

http-proxy（call-home）

http-proxy（dap）

http-proxy（webvpn）

https-proxy

http[s

http（グローバル）

hw-module module allow-ip

hw-module module ip

hw-module module password-reset

hw-module module recover

hw-module module recover（ASA 5506W-X）

hw-module module reload

hw-module module reset

hw-module module shutdown

W

webvpn の有効化

ブ

ブレイクアウト