HP TippingPoint Next Generation Firewall Running-cluster Context Commands, NGFWrunningcluster

Example

NGFW{running-certificates-crl}help add

Valid commands are:

#Enter context addressgroups

#Other commands

add CANAME local-import(uri CRLURI)

NGFW{running-certificates-crl}cache

Enable or disable CRL cache fetched via HTTP.

Syntax

cache (enabledisable)

Example

NGFW{running-certificates-crl}cache enable

NGFW{running-certificates-crl}delete

Delete a CRL URI or file for a specified Certificate Authority.

Syntax

delete crl (allCANAME)

Valid entries:

all	Delete	all	CRL	URIs and local files
CANAME	Delete	CRL	URI	and local files for this Certificate Authority.

Example

NGFW{running-certificates-crl}delete crl all

NGFW{running-certificates-crl}mode

Set certificate revocation mode.

Syntax

mode (requiredoptional)

Valid entries:

required	Fail authentication by certificate if CRL cannot be verified
optional	Allow authentication by certificate if CRL cannot be verified

Example

NGFW{running-certificates-crl}mode required

running-cluster Context Commands

NGFW{running}cluster

NGFW{running-cluster}check

Perform consistency check.

Syntax

check CHECK_TYPE (enabledisable)

NGFW Command Line Interface Reference 121