For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jason0's avatar
Jason0
Icon for Nimbostratus rankNimbostratus
Feb 13, 2017

Packet Filter Rule Comments

Does anyone know if it's possible to add comments to packet filter rules?

 

LTM
security

2 Replies

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Feb 13, 2017

    I don't think it is possible in 10.x and 11.x code version. The name that you give to the packet filter can serve as the description.

     

  • LoyalSoldier's avatar
    LoyalSoldier
    Icon for Altostratus rankAltostratus
    Jun 02, 2017

    Not sure about versions prior to 12.1.2, but you can added a description to each packet filter rule this way:

    In TMSH: 
    list net packet-filter all-properties

    You will see a description field under each rule. To add a description/comment...

    edit net packet-filter  all-properties

    Using Vi interface commands...

    • Insert key = Insert/Replace mode
    • If you make a mistake: hit Escape key, type ":u", and press Enter. Repeat if needed.
    • Do NOT use the numeric keypad
    • When done hit the Escape key, type ":wq!", press Enter, Y to save.

    Edit your description field...

    description "This is my comment"

    Exit and save as described above.

    The rest of the modifying abilities is recommended to use the Configuration Utility GUI. The descriptions will NOT show in the GUI when done.