Adding remarks to the PIX

Hi,

Am working with a 525 Pix. Is there any way to add remarks to the config file (besides the ACL's) and it will show up doing a show run command ? Would like to add remarks to some of the nat lines.

Thank you
mdelaineAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lrmooreCommented:
That depends.. what version PIX OS?
6.x gives you much more flexibility to add remarks in many places throughout the config using the PDM GUI
0
mdelaineAuthor Commented:
Am using version 6.3. Remarks can only be done thru GUI ?  Not CLI ?
0
lrmooreCommented:
Yes, you can use CLI:
  access-list <acl> remark <text whatever>

It appears that acls are about the only place after all where you can add remarks.

You can always save the config as a text file and edit the text to add comments for record and reference.
You can even use this "edited" file as a backup config as long as you put a "!" or "#" in front of each line of inserted text so that the pix will ignore it, but it still won't show up in the "show config"

In addition to the acl remarks, PIX 7.0 adds text Descriptions for interfaces, service groups, names, and some NAT rules
i.e.
 name <ip address> <NAME> description <text string>
interface Ethernet0
 nameif outside
 description <text string>
 object-group service <tag> tcp
  description <text>

 
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mdelaineAuthor Commented:
Thank you. I had done a little research on this, but had no success.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.