Cisco PIX 525 Especificaciones

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

ContentsviiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Access List Guidelines 13-6Access Control Entry Order 13-6Access Contro

8-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

8-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

8-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

8-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

8-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

8-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

8-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPFor Mo

8-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPYou ca

8-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPFor ex

8-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPCisco

ContentsixCisco Security Appliance Command Line Configuration GuideOL-6721-01Mapped Address Guidelines 14-13DNS and NAT 14-14Configuring NAT Control 1

8-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPTo ena

CHAPTER9-1Cisco Security Appliance Command Line Configuration GuideOL-6721-019Configuring IPv6This chapter describes how to enable and configure IPv6

9-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring IPv6 on an Interface• telnet• tftp-

9-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring IPv6 Default and Static RoutesThere

9-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring IPv6 Access ListsStep 1 To add the

9-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Verifying the IPv6 Configuration• src_port and

9-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring a Dual IP Stack on an Interface IC

9-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 IPv6 Configuration ExampleIPv6 Configuration Ex

9-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 IPv6 Configuration Examplesnmp-server enable tr

CHAPTER10-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0110Configuring AAA Servers and the Local DatabaseThis chapter describes s

ContentsxCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 17 Applying Filtering Services 17-1Filtering Overview 17-1Filterin

10-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA OverviewAbo

10-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

10-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

10-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

10-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

10-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

10-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

10-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Configuring the

10-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Configuring th

10-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

ContentsxiCisco Security Appliance Command Line Configuration GuideOL-6721-01Classification Policy within a Policy Map 18-7Multi-match Classification

10-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

10-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

10-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

CHAPTER11-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0111Configuring FailoverThis chapter describes the security appliance fail

11-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverFailover System Req

11-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverThe Failover and St

11-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverOn systems running

11-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverCaution Sharing the

11-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverActive/Standby Fail

11-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding Failoverunit may be overwri

ContentsxiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Applying Low Latency Queueing 20-9Configuring Priority Queuing 20-10Sizi

11-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverFailover TriggersTh

11-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverActive/Active Failo

11-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverEach failover grou

11-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverYou can use the wr

11-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverTable 11-2 shows t

11-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverTable 11-3 provide

11-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding Failover• The user authent

11-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverWhen a unit does not

11-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failover• Configuring LAN-Ba

11-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThe if_name argument

ContentsxiiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Verifying and Monitoring H.323 Inspection 21-28Monitoring H.225 Session

11-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring the Prim

11-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStep 5 (Optional) To

11-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverTo configure the sec

11-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThis section include

11-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring Interfac

11-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring Active/A

11-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverNote In multiple con

11-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStep 7 Enable failov

11-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failoverd. Specify the failo

11-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThe following exampl

ContentsxivCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 22 Configuring ARP Inspection and Bridging Parameters 22-1Config

11-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failoverc. Enable the interf

11-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring Failover

11-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThe unit poll time s

11-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverYou can prevent the

11-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failoverunit looks at the se

11-33Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverUsing the show failo

11-34Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverIn multiple context

11-35Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverMonitored Interfaces

11-36Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStateful Obj For ea

11-37Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverShow Failover—Active

ContentsxvCisco Security Appliance Command Line Configuration GuideOL-6721-01Using Dynamic Crypto Maps 23-18Providing Site-to-Site Redundancy 23-20Vie

11-38Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failover Logical Upda

11-39Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverMonitored Interfaces

11-40Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStateful Obj For ea

11-41Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverViewing Monitored In

11-42Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Controlling and Monitoring FailoverStep

11-43Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Controlling and Monitoring FailoverDisab

11-44Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesDebug Mes

11-45Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesCable-Bas

11-46Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examplespasswd iy

11-47Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesExample 1

ContentsxviCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 26 Configuring IP Addresses for VPNs 26-1Configuring an IP Addre

11-48Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesLAN-Based

11-49Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examplesenable pa

11-50Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examples security

11-51Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examplesmonitor-i

11-52Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examples

PART 2Configuring the Firewall

CHAPTER12-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0112Firewall Mode OverviewThis chapter describes how the firewall works in

12-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode OverviewIP Routing SupportT

12-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode OverviewFigure 12-1 NAT Exa

ContentsxviiCisco Security Appliance Command Line Configuration GuideOL-6721-01Certificate Configuration 30-4Preparing for Certificates 30-4Configurin

12-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode OverviewAn Inside User Visi

12-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode Overview5. When www.example

12-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode Overview4. The security app

12-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode Overview3. The security app

12-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewA DMZ User Att

12-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewTransparent Fi

12-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewUsing the Tra

12-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode Overview• Each direct

12-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewHow Data Move

12-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewAn Inside Use

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMM

ContentsxviiiCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 31 Managing Software, Licenses, and Configurations 32-1Managin

12-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewAn Outside Us

12-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewAn Outside Us

12-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode Overview

CHAPTER13-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0113Identifying Traffic with Access ListsThis chapter describes how to ide

13-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewAcce

13-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewFor

13-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List Overviewb. A

13-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewTo u

13-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewCont

13-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewAcce

ContentsxixCisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIX A Feature Licenses and Specifications A-1Supported Platforms A-

13-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewFigu

13-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an Extended Acces

13-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an Extended Acce

13-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an EtherType Acc

13-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an EtherType Acc

13-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding a Standard Acces

13-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

13-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

13-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

13-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

ContentsxxCisco Security Appliance Command Line Configuration GuideOL-6721-01Command Output Paging C-5Adding Comments C-5Text Configuration Files C-6H

13-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

13-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

13-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding Remarks to Acces

13-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

13-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

13-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

13-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

CHAPTER14-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0114Applying NATThis chapter describes Network Address Translation (NAT).

14-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewIntroduction to NATAddress translatio

14-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-1 NAT ExampleSee the follow

xxiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This GuideThis preface introduce the Cisco Security Appliance Command Line

14-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewInterfaces at the same security level

14-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewNAT TypesThis section describes the a

14-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-6 shows a remote host attem

14-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewAfter the connection expires, the por

14-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFor example, if you want to provide a

14-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewBypassing NAT when NAT Control is Ena

14-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-8 shows a host on the 10.1

14-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-9 shows the use of source

14-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-10 shows a remote host con

14-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewNote The security appliance does not

xxiiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Document ObjectivesRelated Documentation For more information

14-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewDNS and NATYou might need to configu

14-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Configuring NAT ControlFigure 14-12 shows a web

14-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATUsing Dynamic NAT and P

14-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATYou can enter a nat com

14-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATYou can also enter a gl

14-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATFigure 14-16 Different

14-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATFigure 14-17 NAT and PA

14-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATFigure 14-18 Outside NA

14-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATConfiguring Dynamic NAT

14-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATTo configure dynamic NA

xxiiiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Document ObjectivesPart 2: Configuring the FirewallChapter 1

14-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATStep 2 To identify the

14-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static NATUsing Static NATThis section des

14-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static PAT• To configure regular static NA

14-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static PATFor example, configure the follo

14-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static PATFor example, for Telnet traffic

14-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Bypassing NATBypassing NATThis section describes

14-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Bypassing NATConfiguring Static Identity NATStat

14-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Bypassing NATFor example, the following command

14-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesCreate the access list using the acc

14-33Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesOverlapping NetworksIn Figure 14-26,

xxivCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Document ObjectivesDocument ConventionsCommand descriptions u

14-34Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesThe security appliance already has a

14-35Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesTo implement this scenario, perform

14-36Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT Examples

CHAPTER15-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0115Permitting or Denying Network AccessThis chapter describes how to cont

15-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Inbound and Outbound Acce

15-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Inbound and Outbound Acce

15-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Applying an Access List t

15-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Applying an Access List t

15-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Applying an Access List t

CHAPTER16-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0116Applying AAA for Network AccessThis chapter describes how to enable AA

xxvCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining DocumentationObtaining DocumentationCisco documentat

16-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

16-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

16-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

16-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

16-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

16-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

16-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

16-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

16-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Accounting for Ne

16-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Using MAC Addresses to Exempt

xxviCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining Technical AssistanceObtaining Technical AssistanceF

16-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Using MAC Addresses to Exempt

CHAPTER17-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0117Applying Filtering ServicesThis chapter describes ways to filter web t

17-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering ActiveX ObjectsFiltering

17-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering Java AppletsThis command

17-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering with an External ServerT

17-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering with an External ServerG

17-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering with an External ServerR

17-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering HTTP URLsCaching Server

17-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering HTTPS URLsThe allow opti

17-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering FTP RequestsBecause HTTP

xxviiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining Additional Publications and InformationDefinitions

17-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Viewing Filtering Statistics and

17-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Viewing Filtering Statistics and

17-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Viewing Filtering Statistics and

CHAPTER18-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0118Using Modular Policy FrameworkThis chapter describes how to use Modula

18-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Identifying Traffic Using a Cla

18-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Identifying Traffic Using a Cla

18-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

18-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

18-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

18-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

iCisco Security Appliance Command Line Configuration GuideOL-6721-01CONTENTSAbout This Guide xxiDocument Objectives xxiAudience xxiRelated Documentati

xxviiiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining Additional Publications and Information• Internet

18-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

18-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

18-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Applying a Policy to an Interf

18-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

18-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

18-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

18-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

18-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

18-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

CHAPTER19-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0119Intercepting and Responding to Network AttacksThis chapter describes h

PART 1Getting Started and General Information

19-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Configuring TCP

19-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

19-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

19-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

19-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

CHAPTER20-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0120Applying QoS PoliciesThis chapter describes how to apply QoS policies,

20-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies QoS ConceptsNote A flow can be defined i

20-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Identifying Traffic for QoSIdentifying T

20-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Classifying Traffic for QoSThe following

20-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Classifying Traffic for QoShostname(conf

20-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Defining a QoS Policy MapDefining a QoS

20-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Applying Rate LimitingNote Policing is a

20-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Applying Rate LimitingVerifying the Traf

20-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Activating the Service PolicyViewing QoS

20-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Applying Low Latency QueueingNote The u

20-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Viewing QoS StatisticsThe following exa

20-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Viewing the Priority-Queue Configuratio

CHAPTER21-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0121Applying Application Layer Protocol Inspection This chapter describes

21-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Application Ins

21-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Application Ins

CHAPTER1-1Cisco Security Appliance Command Line Configuration GuideOL-6721-011Introduction to the Security ApplianceThe security appliance combines ad

21-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Application Ins

21-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

21-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

21-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

21-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

21-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

21-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

21-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

21-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

21-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

1-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Firewall Functional Overv

21-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

21-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

21-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

21-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

21-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

21-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

21-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

21-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

21-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

21-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

1-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Firewall Functional Overv

21-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

21-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

21-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

21-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

21-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

21-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

21-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing HTTP

21-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing HTTP

21-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing HTTP

21-33Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

1-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Firewall Functional Overv

21-34Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

21-35Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

21-36Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

21-37Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

21-38Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

21-39Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

21-40Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

21-41Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

21-42Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

21-43Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

1-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance VPN Functional OverviewVP

21-44Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

21-45Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

21-46Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

21-47Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing Skinn

21-48Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing Skinn

21-49Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing Skinn

21-50Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SMTP

21-51Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SMTP

21-52Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SMTP

21-53Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

1-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Security Context Overview

21-54Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

21-55Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

21-56Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

CHAPTER22-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0122Configuring ARP Inspection and Bridging ParametersTransparent Firewall

22-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 22 Configuring ARP Inspection and Bridging Parameters Configuring

22-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 22 Configuring ARP Inspection and Bridging Parameters Customizing

22-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 22 Configuring ARP Inspection and Bridging Parameters Customizing

PART 3Configuring VPN

CHAPTER23-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0123Configuring IPSec and ISAKMPThis chapter describes how to configure th

CHAPTER2-1Cisco Security Appliance Command Line Configuration GuideOL-6721-012Getting StartedThis chapter describes how to access the command-line int

23-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP IPSec OverviewIPSec OverviewIPSec

23-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPISAKMP Overview

23-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPYou can have a

23-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPTo enable and c

23-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPDisabling ISAKM

23-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPEnabling IPSec

23-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPIPSec over TCP

23-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring Certificate Group Mat

23-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring Certificate Group Ma

23-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecUsing the Tunne

ContentsiiCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 2 Getting Started 2-1Accessing the Command-Line Interface 2-1Sett

2-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Setting Transparent or Routed Firewall ModeStep

23-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecUnderstanding T

23-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecCreate multiple

23-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSec• Determine whe

23-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecIf you configur

23-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecAssuming that t

23-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecFor example:cry

23-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecUsing Dynamic C

23-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecCreate a crypto

23-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Clearing Security AssociationsPr

23-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Clearing Crypto Map Configuratio

2-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the ConfigurationWorking with the C

23-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Clearing Crypto Map Configuratio

CHAPTER24-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0124Setting General VPN ParametersThe security appliance implementation of

24-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 24 Setting General VPN Parameters Permitting Intra-Interface Traf

24-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 24 Setting General VPN Parameters Configuring Client UpdateThe co

24-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 24 Setting General VPN Parameters Configuring Client Update

CHAPTER25-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0125Configuring Tunnel Groups, Group Policies, and UsersThis chapter descr

25-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Overview

25-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Overview

25-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

25-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

2-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the ConfigurationClearing and Remov

25-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

25-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

25-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

25-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

25-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

2-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the ConfigurationIn the text config

25-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

25-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

2-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the Configuration

25-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

25-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

25-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

25-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

25-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

25-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

25-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

CHAPTER26-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0126Configuring IP Addresses for VPNsThis chapter describes IP address ass

26-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 26 Configuring IP Addresses for VPNs Configuring an IP Address As

26-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 26 Configuring IP Addresses for VPNs Configuring an IP Address As

CHAPTER3-1Cisco Security Appliance Command Line Configuration GuideOL-6721-013Enabling Multiple Context ModeThis chapter describes how to use security

26-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 26 Configuring IP Addresses for VPNs Configuring an IP Address As

CHAPTER27-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0127Configuring Remote Access VPNsRemote access VPNs let single users conn

27-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Configuring Interfaceshostname(

27-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Configuring ISAKMP Policy and E

27-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Configuring an Address PoolStep

27-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Defining a Tunnel GroupStep 1 T

27-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Creating a Dynamic Crypto MapSt

27-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Creating a Crypto Map Entry to

27-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs

CHAPTER28-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0128Configuring LAN-to-LAN VPNsLAN-to-LAN VPN configurations are between t

3-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewCommon U

28-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Configuring InterfacesConfiguring

28-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Configuring ISAKMP Policy and Enab

28-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Transform SetCreating a

28-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Defining a Tunnel GroupTo configur

28-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Crypto Map and Applying

28-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Crypto Map and Applying

28-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Crypto Map and Applying

CHAPTER29-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0129Configuring CertificatesThis chapter describes how to configure certif

29-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Public Key CryptographyObtaining the

29-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Public Key CryptographySeparate signi

3-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewHow the

29-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationThe security

29-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationTo prepare a

29-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote When ge

29-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationStep 2 Speci

29-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate Configuration• serial-num

29-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote Whether

29-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote The pa

29-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationINFO: Certi

29-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationThe followi

29-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationStep 4 Conf

3-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewFigure 3

29-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote If you

29-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationThe key pai

29-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationFor more in

PART 4System Administration

CHAPTER30-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0130Managing System AccessThis chapter describes how to access the securit

30-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Allowing SSH AccessSet the timeout from

30-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Allowing SSH AccessThe security applian

30-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Allowing HTTPS Access for ASDMThe passw

30-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

3-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewNote tha

30-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

30-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

30-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

30-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

30-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

30-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

30-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

30-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

30-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

30-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

ContentsiiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Monitoring Security Contexts 5-8Viewing Context Information 5-8Viewing R

3-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewFor tran

30-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Configuring a Login BannerConfiguring

CHAPTER31-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0131Managing Software, Licenses, and ConfigurationsManaging LicensesWhen y

31-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Installing App

31-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Installing App

31-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

31-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

31-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

31-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

31-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

CHAPTER32-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0132Monitoring and TroubleshootingThis chapter describes how to monitor an

3-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewShared I

32-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Monitoring the Security Applian

32-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Monitoring the Security Applian

32-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

32-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

32-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

32-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

32-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

32-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

32-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

32-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

3-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewFigure 3

32-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

32-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

32-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

A-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXAFeature Licenses and SpecificationsThis appendix describes the feature

A-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications Platform Feature LicensesTa

A-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications Platform Feature LicensesMa

A-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications VPN SpecificationsVPN Speci

A-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications VPN SpecificationsCryptogra

A-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications VPN Specifications

B-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXBSample ConfigurationsThis appendix illustrates and describes a number o

3-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewCascadin

B-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 1: Multiple Mode Firewall With Ou

B-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 1: Multiple Mode Firewall With Ou

B-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 1: Multiple Mode Firewall With Ou

B-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 2: Single Mode Firewall Using Sam

B-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 2: Single Mode Firewall Using Sam

B-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

B-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

B-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

B-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

B-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

3-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Enabling or Disabling Multiple C

B-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

B-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

B-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

B-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

B-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

C-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXCUsing the Command-Line InterfaceThis appendix describes how to use the

C-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Command Modes and PromptsComma

C-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Syntax FormattingSyntax Format

C-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Command HelpCommand HelpHelp i

C-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Command Output PagingTo use th

3-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Enabling or Disabling Multiple C

C-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Text Configuration FilesText C

C-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Text Configuration FilesLine O

C-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Text Configuration Files

D-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXDAddresses, Protocols, and PortsThis appendix provides a quick reference

D-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv4 Addresses and Subnet Masks

D-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv4 Addresses and Subnet Masks

D-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv4 Addresses and Subnet Masks

D-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesIPv6 AddressesIPv

D-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesNote Two colons (

D-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesGlobal AddressThe

3-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Enabling or Disabling Multiple C

D-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesUnspecified Addre

D-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesFigure D-1 IPv6 M

D-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesThe following re

D-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports Protocols and ApplicationsProt

D-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports TCP and UDP PortsTCP and UDP P

D-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports TCP and UDP Portsh323 TCP 172

D-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports Local Ports and ProtocolsLocal

D-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports ICMP TypesICMP TypesTable D-7

D-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports ICMP Types13 timestamp-request

GL-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01GLOSSARY Numerics3DESSee DES.AAAAAuthentication, authorization, and accounting.

CHAPTER4-1Cisco Security Appliance Command Line Configuration GuideOL-6721-014Configuring Ethernet Settings and SubinterfacesThis chapter describes ho

GlossaryGL-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01ARPAddress Resolution Protocol. A low-level TCP/IP protocol that maps a

GlossaryGL-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01certificateA signed cryptographic object that contains the identity of

GlossaryGL-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01CTIQBEComputer Telephony Interface Quick Buffer Encoding. A protocol us

GlossaryGL-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01DNDistinguished Name. Global, authoritative name of an entry in the OSI

GlossaryGL-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Ffailover, failover modeFailover lets you configure two security applia

GlossaryGL-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01GSMGlobal System for Mobile Communication. A digital, mobile, radio sta

GlossaryGL-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01IIANAInternet Assigned Number Authority. Assigns all port and protocol

GlossaryGL-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01inspection engineThe security appliance inspects certain application-le

GlossaryGL-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01IPSecIP Security. A framework of open standards that provides data con

GlossaryGL-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01MmaskA 32-bit mask that shows how an Internet address is divided into

4-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 4 Configuring Ethernet Settings and Subinterfaces Configuring Subi

GlossaryGL-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01NN2H2A third-party, policy-oriented filtering application that works w

GlossaryGL-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01OSPFOpen Shortest Path First. OSPF is a routing protocol for IP networ

GlossaryGL-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01PKCS12A standard for the transfer of PKI-related data, such as private

GlossaryGL-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01protocol, protocol literalsA standard that defines the exchange of pac

GlossaryGL-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01RLLAReserved Link Local Address. Multicast addresses range from 224.0.

GlossaryGL-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01SSAsecurity association. An instance of security policy and keying mat

GlossaryGL-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01SIPSession Initiation Protocol. Enables call handling sessions, partic

GlossaryGL-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Static PATStatic Port Address Translation. Static PAT is a static addr

GlossaryGL-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01transparent firewall mode A mode in which the security appliance is no

GlossaryGL-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01VVLANVirtual LAN. A group of devices on one or more LANs that are conf

4-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 4 Configuring Ethernet Settings and Subinterfaces Configuring Subi

GlossaryGL-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01XX.509A widely used standard for defining digital certificates. X.509

IN-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01INDEXSymbols/bits subnet masks D-3?command stringC-4help C-4AAAAaccounting16-10

IndexIN-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01authenticationFTP16-2HTTP 16-2network access 16-1overview 10-2Telnet 16-2w

IndexIN-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01configuration modeaccessing2-2prompt C-2contextsresource usage5-9See secur

IndexIN-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01enableaccessing2-2EntrustCA server support30-4ESP security protocol 23-2es

IndexIN-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01H.323troubleshooting21-28, 21-29help, command line C-4HMAC hashing method

IndexIN-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01overview 23-3policies, configuring 23-4See also IKEJJava appletsfiltering1

IndexIN-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01MPLSLDP13-12router-id 13-12TDP 13-12multicast traffic 12-9multiple mode, e

IndexIN-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01dead interval 8-8default route 8-13displaying update packet pacing 8-14ena

IndexIN-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01privileged modeaccessing2-2prompt C-2privilege leveluser, setting25-27prom

ContentsivCisco Security Appliance Command Line Configuration GuideOL-6721-01Monitoring OSPF 8-15Restarting the OSPF Process 8-15Configuring RIP 8-16R

4-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 4 Configuring Ethernet Settings and Subinterfaces Configuring Subi

IndexIN-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01routingOSPF8-16other protocols 13-3RIP 8-17RS-232 cableSee failover11-4RS

IndexIN-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01SSHauthentication31-5concurrent connections 31-2login 31-3RSA key 31-2use

IndexIN-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01overview 22-1static entry 22-2data flow 12-12DHCP packets, allowing 13-3g

IndexIN-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01VoIPproxy servers21-43troubleshooting 21-28VPNClient, IPSec attributes23-

IndexIN-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01

CHAPTER5-1Cisco Security Appliance Command Line Configuration GuideOL-6721-015Adding and Managing Security ContextsThis chapter describes how to confi

5-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Configuring a Security Con

5-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Configuring a Security Con

5-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Configuring a Security Con

5-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Removing a Security Contex

5-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Changing the Security Cont

5-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Reloading a Security Conte

5-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Monitoring Security Contex

5-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Monitoring Security Contex

ContentsvCisco Security Appliance Command Line Configuration GuideOL-6721-01Verifying the IPv6 Configuration 9-5The show ipv6 interface Command 9-5The

5-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Monitoring Security Conte

CHAPTER6-1Cisco Security Appliance Command Line Configuration GuideOL-6721-016Configuring Interface ParametersThis chapter describes how to configure

6-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Configuring the Interface• NAT

6-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Configuring the InterfaceThe ph

6-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Allowing Communication Between

6-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Allowing Communication Between

6-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Allowing Communication Between

CHAPTER7-1Cisco Security Appliance Command Line Configuration GuideOL-6721-017Configuring Basic SettingsThis chapter describes how to configure basic

7-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the HostnameSetting the Hostn

7-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Date and TimeSetting the

ContentsviCisco Security Appliance Command Line Configuration GuideOL-6721-01The Failover and State Links 11-3Failover Link 11-3State Link 11-4Active/

7-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Date and TimeThe offset v

7-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Management IP Address for

7-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Management IP Address for

CHAPTER8-1Cisco Security Appliance Command Line Configuration GuideOL-6721-018Configuring IP Routing and DHCP ServicesThis chapter describes how to co

8-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Static and

8-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfigu

8-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPF• Confi

8-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFEnablin

8-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFAdding

8-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFThe fol

ContentsviiCisco Security Appliance Command Line Configuration GuideOL-6721-01Failover Configuration Examples 11-44Cable-Based Active/Standby Failover

8-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfigu

8-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFUsually

8-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPF

8-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfig

8-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfig

8-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFGenera

8-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFLoggin

8-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFMonito

8-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring RIPConfigu

8-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast