Cisco Cisco Firepower Management Center 4000
D-1
FireSIGHT System User Guide
A P P E N D I X
D
Command Line Reference
This reference explains the command line interface (CLI) for FirePOWER appliances, virtual devices,
and the ASA FirePOWER modules of ASA FirePOWER devices. You can use the CLI to view,
configure, and troubleshoot your FireSIGHT Systems.
and the ASA FirePOWER modules of ASA FirePOWER devices. You can use the CLI to view,
configure, and troubleshoot your FireSIGHT Systems.
Note
The command line interface is not supported on Defense Centers, Series 2 appliances, Sourcefire
Software for X-Series, or the ASA module of ASA FirePOWER devices.
Software for X-Series, or the ASA module of ASA FirePOWER devices.
There are numerous CLI modes, such as
show
and
configure
, that contain sets of commands beginning
with the mode name. You may enter a mode and then enter valid commands within that mode, or you
may enter an entire full command from any mode. For example, to display information about a user
account called Analyst1, you can enter the following at the CLI prompt:
may enter an entire full command from any mode. For example, to display information about a user
account called Analyst1, you can enter the following at the CLI prompt:
show user Analyst1
If you have previously entered
show
mode, enter the following at the CLI prompt:
user Analyst1
Within each mode, the commands available to a user depend on the user’s CLI access. When you create
a user account, you can assign it one of the following CLI access levels:
a user account, you can assign it one of the following CLI access levels:
•
Basic
The user has read-only access and cannot run commands that impact system performance.
•
Configuration
The user has read-write access and can run commands that impact system performance.
•
None
The user is unable to log in to the shell.
On Series 3 devices, you can assign command line permissions on the User Management page in the web
interface; see
interface; see
for more information. On virtual devices and
ASA FirePOWER devices, you assign command line permissions through the CLI itself.
Note
If you reboot a Series 3 device and then log in to the CLI as soon as you are able, any commands you
execute are not recorded in the audit log until the web interface is available.
execute are not recorded in the audit log until the web interface is available.
Note that CLI commands are case-insensitive with the exception of parameters whose text is not part of
the CLI framework, such as user names and search filters.
the CLI framework, such as user names and search filters.
For information about logging into the command line, see
The following sections describe the CLI commands: