Interface
| get counter statistics |
Show interface statistics (CRC errors etc) |
| get interface trust port phy |
Show physical ports for a certain zone |
| get driver phy |
Show all link states of interfaces |
| get counter statistics interface ethernet3 |
Show hardware stats on interface |
| set interface [interface] no-subnet-conflict-check |
Allows you to configure multiple interfaces in the same IP broadcast domain. |
Current Settings / Values
| get envar |
get environment variable |
| get config |
get device configuration |
| get system |
get system information |
| get arp |
get arp cache |
| get route |
get routing table |
| get system | i Box |
get port-mode |
| get alg h323 counters |
get the ALG counters |
| get alg |
get status of ALGs (disabled or enabled) |
| get sys-cfg |
get default settings for the device |
| get sys scale |
get basic system limits |
| get debug |
get currently enabled debug level |
| get tcp |
get system socket information |
NAT
| get mip |
get mip (nat) |
| get vip |
get vip (nat) |
| get nat cookie |
get show nat cookies |
Statistics / Performance
| get perf cpu detail |
get cpu performance |
| get session info |
get load on firewall |
| get counter flow |
Show flow stats (fragmentation etc) |
| get counter screen |
Show screen stats (SYN Floods etc) |
VPN
| clear ike-cookie [gateway ip] |
clear ike cookies |
| clear sa [id] |
clear sa |
| get vpn |
show vpns |
NSRP
| get nsrp cluster |
Show cluster info |
| get nsrp monitor |
Show list of monitored interfaces |
| get nsrp vsd id 0 |
Show VSD id 0 |
| get counters ha |
Show HA interface hardware counters |
| exec nsrp sync global-config check-sum |
Allows you to see if the cluster configs are syncronised |
| exec nsrp sync global save |
Sync’s the nodes.A reboot is required to complete the update. |
| exec nsrp vsd-group 0 mode |
Fails over the cluster. Run this command on the Master node. |
IGMP
| set interface ethernet0/1 igmp router |
enable IGMP on interface eth0/1 |
| get vrouter trust-vr protocol pim |
get the multicast sources visible to your ScreenOS device |
Misc
| set exec port-mode |
set the port mode |
| set flow tcp-mss 1460 |
sets the MSS |
Rick Donato is a Network Automation Architect/Evangelist and the founder of
Packet Coders.
Latest posts by Rick Donato
(see all)Want to become an IT Security expert ?
Here is our hand-picked selection of the best courses you can find online:
Internet Security Deep Dive course
Complete Cyber Security Course – Hackers Exposed
CompTIA Security+ (SY0-601) Certification Complete course
and our recommended certification practice exams:
AlphaPrep Practice Tests - Free Trial
