contentInspection action¶
The following operations can be performed on "contentInspection action":
add contentInspection action¶
p{white-space: pre-wrap;}
Creates a RemoteService action.
Synopsys¶
add contentInspection action <name> -type <type> (-serverName <string> | (-serverip <ip_addr|ipv6_addr> [-serverport <positive_integer>])) [-icapProfileName <string>] [-ifserverdown <ifserverdown>] [-reqTimeout <positive_integer>] [-reqTimeoutAction <reqTimeoutAction>]
Arguments¶
name
Name of the remote service action. Must begin with an ASCII alphabetic or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters.
type
Type of operation this action is going to perform. following actions are available to configure:
-
ICAP - forward the incoming request or response to an ICAP server for modification.
-
INLINEINSPECTION - forward the incoming or outgoing packets to IPS server for Intrusion Prevention.
-
MIRROR - Forwards cloned packets for Intrusion Detection.
-
NOINSPECTION - This does not forward incoming and outgoing packets to the Inspection device.
-
NSTRACE - capture current and further incoming packets on this transaction.
Possible values: ICAP, INLINEINSPECTION, MIRROR, NOINSPECTION
serverName
Name of the LB vserver or service
serverip
IP address of remoteService
serverport
Port of remoteService
Default value: 1344
Minimum value: 1
Maximum value: 65535
icapProfileName
Name of the ICAP profile to be attached to the contentInspection action.
ifserverdown
Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. There are also some built-in actions which can be used. These are:
-
RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
-
DROP - Drop the request without sending a response to the user.
Possible values: CONTINUE, DROP, RESET
Default value: CONTINUE
reqTimeout
Time, in seconds, within which the remote service request must complete. This is not supported for NOINSPECTION action type. If the request does not complete within this time, the specified request timeout action is executed. Zero disables the timeout.
Default value: 0
Minimum value: 0
Maximum value: 86400
reqTimeoutAction
Name of the action to perform if the Vserver representing the remote service does not respond. This is not supported for NOINSPECTION action type. There are also some built-in actions which can be used. These are:
-
RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
-
DROP - Drop the request without sending a response to the user.
Possible values: BYPASS, DROP, RESET
Default value: BYPASS
show contentInspection action¶
p{white-space: pre-wrap;}
Displays information about a RemoteService action. If no name is specified, this command displays information of all available RemoteService actions.
Synopsys¶
show contentInspection action [<name>]
Arguments¶
name
Name of the RemoteService action.
Outputs¶
type
Type of RemoteService action.
serverName
Lb vserver or service name.
serverip
IP address of remoteService
serverport
Port of remoteService
icapProfileName
Name of the ICAP profile to be attached to the contentInspection action.
ifserverdown
Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. There are also some built-in actions which can be used. These are:
-
RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
-
DROP - Drop the request without sending a response to the user.
reqTimeout
Time, in seconds, within which the remote service request must complete. This is not supported for NOINSPECTION action type. If the request does not complete within this time, the specified request timeout action is executed. Zero disables the timeout.
reqTimeoutAction
Name of the action to perform if the Vserver representing the remote service does not respond. This is not supported for NOINSPECTION action type. There are also some built-in actions which can be used. These are:
-
RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
-
DROP - Drop the request without sending a response to the user.
hits
The number of times the action has been taken.
referenceCount
The number of references to the action.
undefHits
The number of times the action resulted in UNDEF.
stateflag
builtin
Flag to determine whether contentinspection action is built-in or not
feature
The feature to be checked while applying this config
devno
count
Example¶
- show contentinspection action
- show contentinspection action act_icap
set contentInspection action¶
p{white-space: pre-wrap;}
Modifies the specified parameters of a RemoteService action.
Synopsys¶
set contentInspection action <name> [-serverName <string>] [-serverip <ip_addr|ipv6_addr>] [-serverport <positive_integer>] [-icapProfileName <string>] [-ifserverdown <ifserverdown>] [-reqTimeout <positive_integer>] [-reqTimeoutAction <reqTimeoutAction>]
Arguments¶
name
Name of the RemoteService policy to modify.
serverName
Name of the LB vserver or service
serverip
IP address of remoteService
serverport
Port of remoteService
Default value: 1344
Minimum value: 1
Maximum value: 65535
icapProfileName
Name of the ICAP profile to be attached to the contentInspection action.
ifserverdown
Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. There are also some built-in actions which can be used. These are:
-
RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
-
DROP - Drop the request without sending a response to the user.
Possible values: CONTINUE, DROP, RESET
Default value: CONTINUE
reqTimeout
Request time out value
Default value: 0
Minimum value: 0
Maximum value: 86400
reqTimeoutAction
Action to be taken in case request time out is met
Possible values: BYPASS, DROP, RESET
Default value: BYPASS
Example¶
set contentinspection action caact1 -type IPS"
unset contentInspection action¶
p{white-space: pre-wrap;}
Use this command to remove contentInspection action settings.Refer to the set contentInspection action command for meanings of the arguments.
Synopsys¶
unset contentInspection action <name> [-serverport] [-ifserverdown] [-reqTimeout]
rm contentInspection action¶
p{white-space: pre-wrap;}
Removes a contentinspection action.
Synopsys¶
rm contentInspection action <name>
Arguments¶
name
Name of the RemoteService action to remove.
Example¶
rm contentinspection action act_before