McAfee M4050 Troubleshooting Guide - Page 35

Sensor CLI Guide, Available parameters - ids

Page 35 highlights

McAfee® Network Security Platform 6.0 Troubleshooting Network Security Platform Debug command name/Parameter(s) set l3 Description Enables or disables the layer 3 packet processing on datapaths. Note: This setting should be reconfigured if the Sensor is rebooted. show l3 status set l7 Available parameters: on/off show l7 status set ipfrag Available parameters: on/off show ipfragstatus Displays the layer 3 packet processing status on datapaths. Enables or disables layer 7 packet processing and attack detection on datapaths. Note: This setting should be reconfigured if the Sensor is rebooted. Displays the layer 7 protocol parsing and attack detection status on datapaths. Enables or disables IP fragment reassembly processing on datapaths. Displays the IP fragment reassembly processing status. set recon Available parameters: on/off show recon status show startup stats Enables or disables reconnaissance attacks detection. Note: This setting should be reconfigured if the Sensor is rebooted. Displays reconnaissance attack detection status. Note: This setting should be reconfigured if the Sensor is rebooted. Displays the startup initialization information. set intfportid Sets the adminstatus, operatingmode, flowcontrol, speed and Available parameters: duplex on the specified gigabit ethernet monitoring port.  1A-6B (a valid ethernet monito It is not mandatory to use all the parameters for this command. port on the Sensor)  adminstatus up/down Example 1  ifo/ifc/tap/span(changesYou can execute this command with only one parameter (auto) the operating mode in-line fail to set the port to auto-negotiate. open line fail-close, tap or spa  gig/auto (sets intfport speed set intfport id 4B auto Gbps or auto negotiate) Example 2 You can also execute this command with multiple parameters. set intfport id 3A adminstatus up operatingmode span For more information on this command, see Sensor CLI Guide. show sensor health Displays the Sensor health information. 26

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95

McAfee® Network Security Platform 6.0
Troubleshooting Network Security Platform
26
Debug command
name/Parameter(s)
Description
set l3
Enables or disables the layer 3 packet processing on datapaths.
Note:
This setting should be reconfigured if the Sensor is rebooted.
show l3 status
set l7
Available parameters:
on/off
Displays the layer 3 packet processing status on datapaths.
Enables or disables layer 7 packet processing and attack detection
on datapaths.
Note:
This setting should be reconfigured if the Sensor is rebooted.
show l7 status
Displays the layer 7 protocol parsing and attack detection
status on datapaths.
set ipfrag
Available parameters:
on/off
Enables or disables IP fragment reassembly processing on
datapaths.
show ipfragstatus
Displays the IP fragment reassembly processing status.
set recon
Available parameters:
on/off
Enables or disables reconnaissance attacks detection.
Note:
This setting should be reconfigured if the Sensor is rebooted.
show recon status
Displays reconnaissance attack detection status.
Note:
This setting should be reconfigured if the Sensor is rebooted.
show startup stats
Displays the startup initialization information.
set intfportid
Available parameters:
1A-6B (a valid ethernet monito
port on the Sensor)
adminstatus up/down
ifo/ifc/tap/span
(changes
the operating mode in-line fail
open line fail-close, tap or spa
gig/auto
(sets intfport speed
Gbps or auto negotiate)
Sets the adminstatus, operatingmode, flowcontrol, speed and
duplex on the specified gigabit ethernet monitoring port.
It is not mandatory to use all the parameters for this command.
Example 1
You can execute this command with only one parameter (auto)
to set the port to auto-negotiate.
set intfport id 4B auto
Example 2
You can also execute this command with multiple parameters.
set intfport id 3A adminstatus up operatingmode
span
For more information on this command, see
Sensor CLI Guide
.
show sensor health
Displays the Sensor health information.