$ sccfm-cli inventory devices asa shun add --help
Usage: sccfm-cli inventory devices asa shun add [OPTIONS]
Shun (block) one or more source IP addresses on ASA devices. Each --source-ip
can carry an inline connection tuple as: '<src_ip> [<dst_ip> [<src_port>
[<dst_port> [<protocol>]]]]'. For a single entry, the tuple fields can also be
passed as separate --dest-ip / --source-port / --dest-port / --protocol flags.
Options:
-n, --device-name TEXT Device name to search for (supports wildcards like
'branch-*').
-q, --query TEXT Filter devices by a Lucene query.
-l, --limit INTEGER RANGE Maximum records to return [default: 50;
1<=x<=200]
-o, --offset INTEGER RANGE Pagination offset [default: 0; x>=0]
-u, --device-uids TEXT List of device UIDs to add the shun on.
--source-ip TEXT Source IP to block. Repeat to shun multiple IPs in
one transaction. Each value may embed a full
connection tuple: '<src_ip> [<dst_ip> [<src_port>
[<dst_port> [<protocol>]]]]'. [required]
--dest-ip TEXT Destination IP of a specific connection to drop
immediately. Only valid when a single --source-ip
is given without an inline tuple.
--source-port INTEGER Source port of the connection to drop (requires
--dest-ip).
--dest-port INTEGER Destination port of the connection to drop
(requires --dest-ip).
--protocol [tcp|udp] Protocol of the connection to drop (requires
--dest-ip).
--check Run a preflight check without performing the
operation.
--wait / --no-wait Wait for the transaction to finish before
returning. [default: no-wait]
--format [table|json] Output format [default: table]
--config-path PATH Path to the configuration file (defaults to
~/.sccfm-cli/config.json).
--help Show this message and exit.