ADC CLI Commands

denylist-global

The following operations can be performed on “denylist-global”:

show bind stat

show denylist global

Displays denylist label configurations. When run without parameters, shows all denylist labels. Specify labeltype to display corresponding label configuration of bindings. show ns denylist show ns denylist http_request

Synopsis

show denylist global []

Arguments

type Label type of denylist.

Possible values: HTTP_REQUEST, AAA_REQUEST, AAATM_REQUEST

Output

ruleId Unique identifier for the denylist rule.

enabled Enable or disable the denylist binding.

action Actions to be performed when the rule matches for the denylist binding.

logMessage Log message to be recorded when the rule matches for the denylist binding.

numBindings Number of denylist bindings.

stateflag devno count _nextgenAPIResource

bind denylist global

Binds configuration settings to a denylist label. Allows one to override enabled status for the binding and actions for denylist binding.

Disabling the id 1000 for HTTP_REQUEST

bind denylist global -type HTTP_REQUEST -ruleId 1000 -enabled OFF

#Enabling the id 1000 for HTTP_REQUEST, this will collect the stats. bind denylist global -type HTTP_REQUEST -ruleId 2000 -enabled ON -actions NONE

Enabling the id 1000 for HTTP_REQUEST, this will collect the stats and block the traffic. But there is no log.

bind denylist global -type HTTP_REQUEST -ruleId 2000 -enabled ON -actions BLOCK 

Enabling the id 1000 for HTTP_REQUEST, this will collect the stats and LOG the traffic. But there is no block.

bind denylist global -type HTTP_REQUEST -ruleId 2000 -enabled ON -actions LOG 

Synopsis

bind denylist global -type -ruleId <positive\_integer> \(-enabled \( ON | OFF ) | -restoreDefaults) \[-action ...]

Arguments

type Label type of denylist.

Possible values: HTTP_REQUEST, AAA_REQUEST, AAATM_REQUEST

ruleId Unique identifier for the denylist rule. Minimum value: 1 Maximum value: 2147483647

enabled Enable or disable the denylist binding.

Possible values: ON, OFF

action Actions to be performed when the rule matches for the denylist binding. Default value: NS_DENYLIST_ACTION_DEFAULT

restoreDefaults Restore the all option settings of binding to default values.

stat denylist global

Displays statistics for the specified denylist label type. If no label type is provided, displays abbreviated statistics for all denylist labels.

Synopsis

stat denylist global [] \[-detail] \[-fullValues] \[-ntimes <positive\_integer>] \[-logFile <input\_filename>] \[-clearstats \( basic | full )]

Arguments

type Name of the denylist label type.

Possible values: HTTP_REQUEST, AAA_REQUEST, AAATM_REQUEST Minimum value: 1

detail Specifies detailed output (including more statistics). The output can be quite voluminous. Without this argument, the output will show only a summary.

fullValues Specifies that numbers and strings should be displayed in their full form. Without this option, long strings are shortened and large numbers are abbreviated

ntimes The number of times, in intervals of seven seconds, the statistics should be displayed. Default value: 1 Minimum value: 0

logFile The name of the log file to be used as input.

clearstats Clear the statsistics / counters

Possible values: basic, full

Output

count devno stateflag _nextgenAPIResource

Counters

LastHitTimeLocal Last time (in local timezone format) the rule matched on the denylist label

Evals Number of times the denylist label is invoked

RuleHits Number of times the rule matched on the denylist label

RuleUndefHits Number of times the rule evaluated to undef on the denylist label

Logs Number of times the log generated on the denylist label

Blocks Number of times the block generated on the denylist label

LastHitTime Last time the rule matched on the denylist label

denylist-global