ADC CLI Commands

contentinspection-policylabel

The following operations can be performed on “contentinspection-policylabel”:

unbind stat rm show bind add rename

unbind contentinspection policylabel

Unbinds the specified contentInspection policy from the specified policy label. See the bind contentInspection policylabel command for a description of the parameters.

Synopsis

unbind contentinspection policylabel -policyName [-priority ]

Arguments

labelName Name for the contentInspection policy label. Must begin with a letter, number, or the underscore character (_), and must contain only letters, numbers, and the hyphen (-), period (.) hash (#), space ( ), at (@), equals (=), colon (:), and underscore characters. Cannot be changed after the contentInspection policy label is added.

The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, “my contentInspection policy label” or ‘my contentInspection policy label’).

policyName Name of the contentInspection policy to bind to the policy label.

priority Priority of the NOPOLICY to be unbound. Minimum value: 1 Maximum value: 2147483647

Example

unbind contentInspection policylabel trans_http_url pol_1

stat contentinspection policylabel

Displays statistics for the specified contentInspection policy label. If no policy label name is provided, displays abbreviated statistics for all contentInspection policy labels currently configured on the Citrix ADC.

Synopsis

stat contentinspection policylabel [] \[-detail] \[-fullValues] \[-ntimes <positive\_integer>] \[-logFile <input\_filename>] \[-clearstats \( basic | full )]

Arguments

labelName Name of the contentInspection policy label.

detail Specifies detailed output (including more statistics). The output can be quite voluminous. Without this argument, the output will show only a summary.

fullValues Specifies that numbers and strings should be displayed in their full form. Without this option, long strings are shortened and large numbers are abbreviated

ntimes The number of times, in intervals of seven seconds, the statistics should be displayed. Default value: 1 Minimum value: 0

logFile The name of the log file to be used as input.

clearstats Clear the statsistics / counters

Possible values: basic, full

Output

count devno stateflag

Counters

Policy Label Hits (Hits) Number of times policy label was invoked.

rm contentinspection policylabel

Removes the specified contentInspection policy label.

Synopsis

rm contentinspection policylabel

Arguments

labelName Name of the contentInspection policy label to remove.

Example

rm contentInspection policylabel trans_http_url

show contentinspection policylabel

Displays the current settings for the specified contentInspection policy label. If no policy label is specified, displays a list of all contentInspection policy labels currently configured on the Citrix ADC.

Synopsis

show contentinspection policylabel []

Arguments

labelName Name of the contentInspection policy label.

Output

stateflag type Type of packets (request or response packets) against which to match the policies bound to this policy label.

numpol Number of polices bound to label.

hits Number of times policy label was invoked.

policyName Name of the contentInspection policy to bind to the policy label.

priority Specifies the priority of the policy.

gotoPriorityExpression Expression specifying the priority of the next policy which will get evaluated if the current policy rule evaluates to TRUE.

invoke Suspend evaluation of policies bound to the current policy label, and then forward the request to the specified virtual server or evaluate the specified policy label.

labelType Type of invocation. Available settings function as follows:

  • reqvserver - Forward the request to the specified request virtual server.
  • resvserver - Forward the response to the specified response virtual server.
  • policylabel - Invoke the specified policy label.

labelName

  • If labelType is policylabel, name of the policy label to invoke.
  • If labelType is reqvserver or resvserver, name of the virtual server to which to forward the request or response.

flowType Flowtype of the bound contentInspection policy.

isDefault A value of true is returned if it is a default cipolicylabel.

flags comment Any comments to preserve information about this contentInspection policy label.

devno count

Example

i)show contentInspection policylabel trans_http_url ii)show contentInspection policylabel

bind contentinspection policylabel

Binds the specified contentInspection policy to the specified policy label.

Synopsis

bind contentinspection policylabel -policyName -priority [-gotoPriorityExpression ] [-invoke (-labelType -labelName ) ]

Arguments

labelName Name of the contentInspection policy label to which to bind the policy.

policyName Name of the contentInspection policy to bind to the policy label.

priority Positive integer specifying the priority of the policy. A lower number specifies a higher priority. Must be unique within the label. Policies are evaluated in the order of their priorities, and the first policy that matches the request or response is applied. Minimum value: 1 Maximum value: 2147483647

gotoPriorityExpression Expression or other value specifying the next policy to evaluate if the current policy evaluates to TRUE. Specify one of the following values:

  • NEXT - Evaluate the policy with the next higher priority number.
  • END - End policy evaluation.
  • USE_INVOCATION_RESULT - Applicable if this policy invokes another policy label. If the final goto in the invoked policy label has a value of END, the evaluation stops. If the final goto is anything other than END, the current policy label performs a NEXT.
  • An expression that evaluates to a number. If you specify an expression, the number to which it evaluates determines the next policy to evaluate, as follows:
  • If the expression evaluates to a higher numbered priority, the policy with that priority is evaluated next.
  • If the expression evaluates to the priority of the current policy, the policy with the next higher numbered priority is evaluated next.
  • If the expression evaluates to a number that is larger than the largest numbered priority, policy evaluation ends.

An UNDEF event is triggered if:

  • The expression is invalid.
  • The expression evaluates to a priority number that is smaller than the current policyÂ’s priority number.
  • The expression evaluates to a priority number that is between the current policyÂ’s priority number (say, 30) and the highest priority number (say, 100), but does not match any configured priority number (for example, the expression evaluates to the number 85). This example assumes that the priority number increments by 10 for every successive policy, and therefore a priority number of 85 does not exist in the policy label.

invoke Suspend evaluation of policies bound to the current policy label, and then forward the request to the specified virtual server or evaluate the specified policy label.

labelType Type of invocation. Available settings function as follows:

  • reqvserver - Forward the request to the specified request virtual server.
  • resvserver - Forward the response to the specified response virtual server.
  • policylabel - Invoke the specified policy label.

Possible values: reqvserver, resvserver, policylabel

labelName

  • If labelType is policylabel, name of the policy label to invoke.
  • If labelType is reqvserver or resvserver, name of the virtual server to which to forward the request or response.

Example

i) bind contentInspection policylabel trans_http_url -policyName cipol2 -priority 1 -labelType reqvserver ii)bind contentInspection policylabel trans_http_url pol_2 2

add contentinspection policylabel

Creates a user-defined contentInspection policy label.

Synopsis

add contentinspection policylabel -type \( REQ | RES ) \[-comment ]

Arguments

labelName Name for the contentInspection policy label. Must begin with a letter, number, or the underscore character (_), and must contain only letters, numbers, and the hyphen (-), period (.) hash (#), space ( ), at (@), equals (=), colon (:), and underscore characters. Cannot be changed after the contentInspection policy label is added.

The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, “my contentInspection policy label” or ‘my contentInspection policy label’).

type Type of packets (request or response packets) against which to match the policies bound to this policy label.

Possible values: REQ, RES

comment Any comments to preserve information about this contentInspection policy label.

Example

add contentInspection policylabel trans_http_url -type req

rename contentinspection policylabel

Renames a contentInspection policy label.

Synopsis

rename contentinspection policylabel @ @

Arguments

labelName Current name of the policy label.

newName New name for the contentInspection policy label. Must begin with a letter, number, or the underscore character (_), and must contain only letters, numbers, and the hyphen (-), period (.) hash (#), space ( ), at (@), equals (=), colon (:), and underscore characters.

The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, “my policy label” or ‘my policy label’).

Example

rename contentInspection policylabel oldname newname

contentinspection-policylabel