ADC CLI Commands

contentinspection-action

The following operations can be performed on “contentinspection-action”:

rm add unset set show

rm contentinspection action

Removes a contentinspection action.

Synopsis

rm contentinspection action

Arguments

name Name of the RemoteService action to remove.

Example

rm contentinspection action act_before

add contentinspection action

Creates a RemoteService action.

Synopsis

add contentinspection action -type \(-serverName | \(-serverip <ip\_addr|ipv6\_addr> \[-serverport <positive\_integer>])) \[-icapProfileName ] \[-ifserverdown ]

Arguments

name Name of the remote service action. Must begin with an ASCII alphabetic or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters.

type Type of operation this action is going to perform. following actions are available to configure:

  • ICAP - forward the incoming request or response to an ICAP server for modification.
  • INLINEINSPECTION - forward the incoming or outgoing packets to IPS server for Intrusion Prevention.
  • MIRROR - Forwards cloned packets for Intrusion Detection.
  • NOINSPECTION - This does not forward incoming and outgoing packets to the Inspection device.
  • NSTRACE - capture current and further incoming packets on this transaction.

Possible values: ICAP, INLINEINSPECTION, MIRROR, NOINSPECTION

serverName Name of the LB vserver or service

serverip IP address of remoteService

serverport Port of remoteService Default value: 1344 Minimum value: 1 Maximum value: 65535

icapProfileName Name of the ICAP profile to be attached to the contentInspection action.

ifserverdown Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. The Supported actions are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
  • DROP - Drop the request without sending a response to the user.
  • CONTINUE - It bypasses the ContentIsnpection and Continues/resumes the Traffic-Flow to Client/Server.

Possible values: CONTINUE, DROP, RESET Default value: RESET

unset contentinspection action

Use this command to remove contentinspection action settings.Refer to the set contentinspection action command for meanings of the arguments.

Synopsis

unset contentinspection action [-serverport] [-ifserverdown]

set contentinspection action

Modifies the specified parameters of a RemoteService action.

Synopsis

set contentinspection action \[-serverName ] \[-serverip <ip\_addr|ipv6\_addr>] \[-serverport <positive\_integer>] \[-icapProfileName ] \[-ifserverdown ]

Arguments

name Name of the RemoteService policy to modify.

serverName Name of the LB vserver or service

serverip IP address of remoteService

serverport Port of remoteService Default value: 1344 Minimum value: 1 Maximum value: 65535

icapProfileName Name of the ICAP profile to be attached to the contentInspection action.

ifserverdown Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. The Supported actions are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
  • DROP - Drop the request without sending a response to the user.
  • CONTINUE - It bypasses the ContentIsnpection and Continues/resumes the Traffic-Flow to Client/Server.

Possible values: CONTINUE, DROP, RESET Default value: RESET

Example

set contentinspection action caact1 -type IPS”

show contentinspection action

Displays information about a RemoteService action. If no name is specified, this command displays information of all available RemoteService actions.

Synopsis

show contentinspection action []

Arguments

name Name of the RemoteService action.

Output

type Type of RemoteService action.

serverName Lb vserver or service name.

serverip IP address of remoteService

serverport Port of remoteService

icapProfileName Name of the ICAP profile to be attached to the contentInspection action.

ifserverdown Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. The Supported actions are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
  • DROP - Drop the request without sending a response to the user.
  • CONTINUE - It bypasses the ContentIsnpection and Continues/resumes the Traffic-Flow to Client/Server.

reqTimeout Time, in seconds, within which the remote service request must complete. This is not supported for NOINSPECTION action type. If the request does not complete within this time, the specified request timeout action is executed. Zero disables the timeout.

reqTimeoutAction Name of the action to perform if the Vserver representing the remote service does not respond. This is not supported for NOINSPECTION action type. There are also some built-in actions which can be used. These are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
  • DROP - Drop the request without sending a response to the user.

hits The number of times the action has been taken.

referenceCount The number of references to the action.

undefHits The number of times the action resulted in UNDEF.

stateflag builtin Flag to determine whether contentinspection action is built-in or not

feature The feature to be checked while applying this config

devno count

Example

  1. show contentinspection action
  2. show contentinspection action act_icap
contentinspection-action