security blacklist-publisher profile
security blacklist-publisher profile(1) BIG-IP TMSH Manual security blacklist-publisher profile(1)
NAME
profile - Configures a publisher profile for use by firewall. A profile specifies the network path and method
(how and where) the IP-Intelligence Blacklist data will be advertised.
MODULE
security blacklist-publisher
SYNTAX
Configure the profile component within the security blacklist-publisher module using the syntax in the
following sections.
CREATE/MODIFY
create profile [name]
modify profile [name | all]
options:
bgp-flowspec-advertisement-action [drop | rate-limit | qos]
bgp-flowspec-dscp-value [integer]
bgp-flowspec-rate-limit [integer]
description [string]
route-domain [name]
traffic-group [name]
route-advertisement-nexthop [IP address]
route-advertisement-nexthop-v6 [IP address]
edit profile [[name] | all]
options:
all-properties
non-default-properties
list profile [[name] | all | [property]]
show running-config profile [[name] | all | [property]]
options:
all-properties
non-default-properties
one-line
DELETE
delete profile [[name] | all | recursive]
Note: If the profile is referenced in a category the delete will fail.
DESCRIPTION
You can use the profile component to create, modify, display, or delete a blacklist-publisher profile.
EXAMPLES
create profile botnets-profile { route-domain 0 route-advertisement-nexthop 10.10.10.1 }
Creates the above profile with the specified route-domain, and route-advertisement-nexthop.
modify profile botnets-profile description "this profile is used for botnets category"
Modifies the above profile with a description.
delete profile botnets-profile
Deletes the above profile.
list profile botnets-profile
Displays the properties of the above profile.
OPTIONS
bgp-flowspec-advertisement-action
Specifies the BGP FlowSpec Advertisement Action to be used for Blackholing. The default is drop.
bgp-flowspec-dscp-value
Specifies the BGP FlowSpec DSCP value for advertisement qos action.
bgp-flowspec-rate-limit
Specifies the BGP FlowSpec rate limit (bytes/sec) for advertisement rate limiting action.
description
User defined description.
route-advertisement-nexthop
Specifies the next-hop v4 address which will be utilized in route advertisement in blackhole routes.
route-advertisement-nexthop-v6
Specifies the next-hop v6 address which will be utilized in route advertisement in blackhole routes.
route-domain
Specifies the route-domain in the route advertisement.
traffic-group
Deprecated since v13.1.0. Specifies the traffic group which will be utilized in route injection fault
tolerance.
SEE ALSO
create, delete, edit, list, modify, category, security, security blacklist-publisher, tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2009-2015. All rights reserved.
BIG-IP 2018-06-08 security blacklist-publisher profile(1)