axgate-ngfw-nf-add-blacklist
Add a blacklist entry by source/destination IP, protocol and ports.
Syntax
axgate-ngfw-nf-add-blacklist profile=STRING [src-ip=STRING] [dst-ip=STRING] [protocol=STRING] [src-port=INT] [dst-port=INT] [label=STRING] [expiry=STRING]
Options
- profile=STRING
- Required. AXGATE NGFW (NF) profile code.
- src-ip=STRING
- Optional. Source IP address to block.
- dst-ip=STRING
- Optional. Destination IP address to block.
- protocol=STRING
- Optional. tcp, udp, icmp, or a protocol number (1-254).
- src-port=INT
- Optional. Source port to block (1-65535, requires tcp/udp protocol).
- dst-port=INT
- Optional. Destination port to block (1-65535, requires tcp/udp protocol).
- label=STRING
- Optional. Label to tag the entries. No label is set if omitted.
- expiry=STRING
- Optional. Expiration period from now: <number><unit> with s/m/h/d/w/mon (e.g. 30d, 12h, 1mon). The device expiry is date-only, so units under a day (s/m/h) are truncated to the resulting date. No expiration if omitted.
Note
At least one of src-ip and dst-ip is required. When both are given, they must be the same IP version.
Output fields
| Field | Type | Name | Description |
|---|---|---|---|
| command | String | Command | Executed command name |
| method | String | Method | API request method (add/mod/del/exe) |
| result | String | Result | Execution result (success) |
| profile | String | Connect profile | AXGATE NGFW (NF) connect profile |