Cisco Firepower 4100 Series, Справочник по командам

Страница: 62 / 420

create ip-block
To add a new block of IPv4 addresses for service access, use the
create ip-block
command. If an address
block with the specified properties already exists, the command will fail.
To add or edit a block of IPv4 addresses, use the
enter ip-block
command. If the specified address block does
not exist, it is created and entered; if the address block exists, it is entered.
You also can use the scope form of this command to enter an existing address block to assign or change
properties.
To delete an existing address block, use the delete form of this command.
create ip-block ip_address prefix_length
{
https
|
snmp
|
ssh
}
delete ip-block ip_address prefix_length
{
https
|
snmp
|
ssh
}
enter ip-block ip_address prefix_length
{
https
|
snmp
|
ssh
}
scope ip-block ip_address prefix_length
{
https
|
snmp
|
ssh
}
Syntax Description
The starting address for the IPv4 address block. ip_address
The prefix length; determines the number of addresses in the block. Value can
be 0 to 32. prefix_length
The service (HTTPS, SNMP, or SSH) to which the address block is assigned. https
|
snmp
|
ssh
Command Modes
scope system/scope services/
Command History
Modification Release
Command added. 1.1(1)
Usage Guidelines
Use this command to assign a block of IPv4 addresses to provide access to a specified service (HTTPS, SNMP,
or SSH).
When you create a new IP block, you are automatically entered into ip-block mode (system/services/ip-block)
with an asterisk indicating the new block assignment is not yet committed.
Up to 25 different blocks can be configured for each service. A address of 0.0.0.0 and a prefix of 0 allows
unrestricted access to a service. Each block of addresses is identified by its starting IPv4 addresss.
Example
This example shows how to create, enter and verify an IPv4 address block to provide SSH access:
firepower #
scope system
firepower /system # scope services
firepower /system/services # enter ip-block 192.168.200.101 24 ssh
firepower /system/services/ip-block* # commit-buffer
firepower /system/services/ip-block # up
firepower /system/services # show ip-block
Permitted IP Block:
IP Address Prefix Length Protocol
Cisco Firepower 4100/9300 FXOS Command Reference
60
A – R Commands
create ip-block