Cisco PIX 525 Especificaciones descargar pdf (Pagina 302)

100

101

18-10

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 18 Using Modular Policy Framework

Applying a Policy to an Interface Using a Service Policy

Note If there are multiple instances of the same type configured in a policy map, only the first matched

instance of that action will be performed.

Advanced Options

Advanced options vary from protocol to protocol, and are configured using the xxx-map commands

when applicable, where xxx stands for the name of the protocol. For example, FTP parameters are

configured using the ftp-map command and then attached to the inspect ftp, GTP parameters are

configured using the gtp-map command and then attached to the inspect gtp, and so on.

Applying a Policy to an Interface Using a Service Policy

After defining the policy map, apply the policy map to one or more interfaces on the security appliance

using the service-policy command in global configuration mode. You can use the service-policy

command to activate a policy map globally on all the security appliance interfaces or on a specific

interface.

To create a service policy by associating a policy map with an interface (or all interfaces), enter the

following command:

hostname(config)# service-policy

policy_map_name

[global | interface

interface_name

]

For example, the following command enables the inbound_policy service policy on the outside interface:

hostname(config)# service-policy inbound_policy interface outside

To enable the inbound_policy service policy on all the security appliance interfaces, enter the following

command:

hostname(config)# service-policy inbound_policy global

Note If an action is specified in both a service policy applied to an interface, and in a global service policy,

the action specified in the interface service policy takes precedence. A global service policy action

applies to an interface service policy as long as there is no conflict in actions between the two.

Direction Policies When Applying a Service Policy

This section describes the rules for classifying traffic, when a service policy is applied globally or to an

interface, and how they are applied to different actions in the service policy. There are certain rules

governing the traffic direction based on the classification that is performed.

This section includes the following topics:

• Types of Direction Policies, page 18-11

• Implicit Direction Policies, page 18-11

• Examples, page 18-11

• Service Policy and NAT, page 18-14

1 2 ... 297 298 299 300 301 302 303 304 305 306 307 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 302

Comentarios a estos manuales