TippingPoint N-Series Command Line Interface Reference

1 TippingPoint Command line Interface ReferenceV. 3 . 1 Part Number: TECHD-0000000291 Publication Control Number: 112009:0439 Copyright 2008 TippingPoint Technologies, Inc. TippingPoint , the TippingPoint logo, and Digital Vaccine are registered trademarks of TippingPoint Technologies, Inc. All other company and product names may be trademarks of their respective holders. All rights reserved. This document contains confidential information, trade secrets or both, which are the property of TippingPoint Technologies, Inc. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from TippingPoint Technologies, Inc. or one of its Technologies, Inc. reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of TippingPoint Technologies, Inc.

2 To provide notification of such revision or change. TippingPoint Technologies, Inc. provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms, or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. TippingPoint Technologies, Inc. may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate STATES GOVERNMENT LEGENDS:If you are a United States government agency, then this documentation and the software described herein are provided to you subject to the following: United States Government Legend: All technical data and computer software is commercial in nature and developed solely at private expense.

3 Software is delivered as Commercial Computer Software as defined in DFARS (June 1995) or as a commercial item as defined in FAR (a) and as such is provided with only such rights as are provided in TippingPoint s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR (Nov 1995) or FAR (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with otherwise indicated, TippingPoint registered trademarks are registered in the United States and may or may not be registered in other and Windows are registered trademarks or trademarks of Microsoft Corporation in the United States and/or other brand and product names may be registered trademarks or trademarks of their respective Command line Interface Reference V.

4 Of ContentsAbout This Guide viiOverview viiTarget Audience viiConventions viiiHeadings viiiTypeface viiiCross References viiiMessages viiiProduct Documentation ixCustomer Support xContact Information x System Overview 1 Overview 1 TippingPoint Architecture 2 Security Management System (SMS) 2 SMS Server 3 SMS Client 3 Intrusion Prevention System Devices (IPS) 4 IPS Local Clients 5 Core Controller 5 High Availability 6 Threat Suppression Engine 6 Threat Management Center 7 Initial Configuration 9 Overview 9 CLI Setup 10 Account Security Level 10 Super-User Data 11 Host Management Port Options 11 Default Gateway Options 12 DNS Configuration 13 Timekeeping Options 14 After the Setup Wizard 15 TippingPoint Command line Interface Reference V. Configuration 15 Web, CLI, and SNMP Server Options 15 Restricted SMS Access 16 Ethernet Port Settings 17 Management Port Routing Options 17 Default Alert Information 19 Navigation 21 Accessing the CLI 21 Navigation 22 Command Types 22 Using Hierarchical Commands 22 Command line Editing 23 Session Settings 24 TippingPoint IPS Commands 25 Conventions 26 Global Commands 26alias 27clear 28cls 29exit 29help

5 29history 30logout 30ping 30quit 30tree 30who 31whoami 31 TippingPoint Operating System Commands 31boot 2bugreport 2compact-flash 33configure terminal 33conf t action-set 35conf t autodv 37conf t category-settings 37conf t clock 38conf t compact-flash 39conf t default-alert-sink 39conf t default-gateway 40conf t email-rate-limit 40conf t filter 41conf t high-availability 42 TippingPoint Command line Interface Reference V.

6 T host 43conf t inspection-bypass 44conf t inspection-bypass add 45conf t Interface ethernet 47conf t Interface mgmtEthernet 48conf t Interface settings 49conf t lcd-keypad 50conf t log audit 50conf t monitor 51conf t named-ip 52conf t nms 53conf t notify-contact 53conf t port 54conf t profile 55conf t protection-settings 56conf t ramdisk 57conf t remote-syslog 58conf t reputation 59conf t reputation group 61conf t segment 62conf t server 63conf t service-access 64conf t session 64conf t sms 65conf t sntp 66conf t traffic-mgmt 67conf t tse 70conf t user 72conf t user options 73conf t virtual-port 74conf t virtual-segment 75conf t vlan-translation 75debug 75debug best-effort-mode 76debug traffic-capture 77halt 79high-availability 79quarantine 81setup 82show 83show configuration 87snapshot 90 Index 91 TippingPoint Command line Interface Reference V.

7 Of TablesTippingPoint Command line Interface Reference V. and Password Name Examples 11 CLI Edit commands 23 Default Console Settings 24 Alias Definition Examples 27clear subcommands 28boot subcommands 32compact-flash subcommands 33conf t action-set subcommands 35conf t category-settings subcommands 38conf t clock subcommands 38conf t compact-flash subcommands 39conf t default-alert-sink parameters 39conf t filter subcommands 41conf t high-availability subcommands 42conf t host subcommands 43conf t inspection-bypass parameters 44conf t inspection-bypass add parameters 45conf t Interface ethernet subcommands 47conf t Interface mgmtEthernet subcommands 48conf t Interface subcommands 49conf t lcd-keypad subcommands 50conf t monitor subcommands 51conf t named-ip subcommands 52conf t nms subcommands 53conf t port subcommands 54conf t profile subcommands 55conf t protection-settings

8 Subcommands 56conf t ramdisk subcommands 57conf t remote-syslog subcommands 58conf t reputation subcommands 60 List of TablesTippingPoint Command line Interface Reference V. viconf t reputation subcommands 61conf t segment subcommands 62conf t server subcommands 63conf t session subcommands 64conf t sms subcommands 65conf t sntp subcommands 66conf t traffic-mgmt subcommands 67conf t traffic-mgmt subcommands 68conf t tse subcommands 70conf t user subcommands 72conf t user options subcommands 73conf t virtual-port subcommands 74debug best-effort-mode subcommands 76debug best-effort-mode parameters 76debug traffic-capture subcommands 77debug traffic-capture parameters 77high-availability subcommands 79quarantine subcommands 81setup subcommands 82show subcommands 83show configuration subcommands 87snapshot subcommands 90 TippingPoint Command line Interface ReferenceV.

9 This GuideExplains intended audience, where related information is located, and how to obtain customer l c o m e t o t h e TippingPoint Command line Interface Reference . This section includes the following items: Target Audience on page vii Conventions on page viii Product Documentation on page ix Customer Support on page xTarget AudienceThe intended audience includes technicians and maintenance personnel responsible for installing, configuring, and maintaining TippingPoint security systems and associated devices. Users should be familiar with networking concepts and the following standards and protocols: TCP/IP UDP ICMP Ethernet Simple Network Time Protocol (SNTP) Simple Mail Transport Protocol (SNMP) Simple Network management Protocol (SNMP) TippingPoint Command line Interface Reference V. TippingPoint documentation uses the following conventions for structuring information.

10 HeadingsEach main section starts with a brief description of the information you can find in that section, which correlates with the major headings in that section. Each major heading corresponds to a task or concept that is important for you to understand. Headings are of a different size and type to make them easy to skim, whether you are viewing an online or print copy of this document. TypefaceThis document uses the following typeface conventions:BoldUsed for the names of screen elements like buttons, drop-down lists, or fields. For example, when you are done with a dialog, you would click the OK for text a user must type to use the for book titles, variables, and important terms. Hy perlinkUsed for Web site and cross Reference links. Cross ReferencesWhen a topic is covered in depth elsewhere in this document, or in another document in this series, a cross Reference to the other information is provided as follows: MessagesMessages are emphasized by font, format, and icons.