Cisco PIX 525 Especificaciones descargar pdf (Pagina 371)

100

101

21-45

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing SIP Inspection

When you enter the class-map command, the CLI enters the class map configuration mode, and the

prompt changes, as in the following example:

hostname(config-cmap)#

Step 2 In the class map configuration mode, define the match command, as in the following example:

hostname(config-cmap)# match port tcp eq 5060

hostname(config-cmap)# exit

hostname(config)#

To assign a range of continuous ports, enter the range keyword, as in the following example:

hostname(config-cmap)# match port tcp range 5060-5070

To assign more than one non-contiguous port for SIP inspection, enter the access-list command and

define an access control entry to match each port. Then enter the match command to associate the access

lists with the SIP traffic class.

Step 3 Name the policy map by entering the following command:

hostname(config)# policy-map

policy_map_name

Replace policy_map_name with the name of the policy map, as in the following example:

hostname(config)# policy-map inbound_policy

The CLI enters the policy map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap)#

Step 4 Specify the traffic class defined in Step 2 to be included in the policy map by entering the following

command:

hostname(config-pmap)# class

class_map_name

For example, the following command assigns the sip_port traffic class to the current policy map.

hostname(config-pmap)# class sip_port

The CLI enters the policy map class configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap-c)#

Step 5 (Optional) To change the default port used by the security appliance for receiving SIP traffic, enter the

following command:

hostname(config-pmap-c)# inspect sip

Step 6 Return to policy map configuration mode by entering the following command:

hostname(config-pmap-c)# exit

hostname(config-pmap)#

Step 7 Return to global configuration mode by entering the following command:

hostname(config-pmap)# exit

hostname(config)#

Step 8 Apply the policy map globally or to a specific interface by entering the following command:

hostname(config)# service-policy

policy_map_name

[global | interface

interface_ID

Replace policy_map_name with the policy map you configured in Step 5, and identify all the interfaces

with the global option or a specific interface using the name assigned with the name-if command.

1 2 ... 366 367 368 369 370 371 372 373 374 375 376 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 371

Comentarios a estos manuales