configure

all reset

removes all user changes to all filters’ configuration and resets all filters to the default values.

conf t firewall alg sip

The configure terminal firewall alg sip command configures an application layer gateway (ALG) to permit Session Initiation Protocol (SIP) sessions.

sdp-port-range [any port-range]

configures the range of port numbers that SIP sessions can use. You can enter up to 20 separate port ranges, separated by commas, such as:

8000-8500, 10000-12000, 50000-51000

The any parameter enables all ports to accommodate SIP sessions.

services [any service-name service-group]

configures the service name or service group that permits SIP operations. The any parameter enables the use of any service for the sessions.

conf t firewall monitor < clients services website >

The configure terminal firewall monitor command controls the collection of statistics related to firewall sessions. Data is gathered about each session when the session closes down. By default, monitors are enabled when the device starts up. Data is lost if the device is rebooted.

reset

immediately resets counters.

conf t firewall rule

The configure terminal firewall rule command creates and edits firewalls on the device. The firewalls control traffic passing between security zones.

add [id] < permit block web-filter src-zonedst-zone service >

adds a firewall rule. If no ID is specified, the system assigns one and displays it.

counters-clear

clears counters for all firewall rules.

disable id

disables a firewall rule.

enable id

enables a firewall rule.

move id < after id before id to position-number>

moves a firewall rule within the firewall table.

X Family CLI Reference V 2.5.1

45