config
- system
- security
- [no] profile user-profile-name
- default-action {deny-all | permit-all | none}
- [no] entry entry-id
- action {deny | permit}
- description description-string
- no description
- match command-string
- no match
- renum old-entry-number new-entry-number