Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 347)

100

101

21-21

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing GTP Inspection

The system enters GTP map configuration mode and the CLI prompt changes as in the following

example:

hostname(config-gtp-map)#

hostname(config-gtp-)# exit

hostname(config)#

Step 5 (Optional) Change the default configuration as required by entering any of the supported GTP map

configuration commands, summarized in Table 21-3.

The default GTP map is used when you enable GTP without specifying a GTP map. This default GTP

map is preconfigured with the following default values:

• timeout tunnel 0:01:00

• request-queue 200

• timeout gsn 0:30:00

• timeout pdp-context 0:30:00

• timeout request 0:01:00

• timeout signaling 0:30:00

• tunnel-limit 500

Step 6 Name the policy map by entering the following command:

hostname(config-gtp-)# exit

hostname(config)# policy-map

policy_map_name

Replace policy_map_name with the name of the policy map, as in the following example:

hostname(config)# policy-map inbound_policy

The CLI enters the policy map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap)#

Step 7 Specify the traffic class defined in Step 2 to be included in the policy may by entering the following

command:

hostname(config-pmap)# class

class_map_name

For example, the following command assigns the gtp_port traffic class to the current policy map:

hostname(config-pmap)# class gtp_port

The CLI enters the policy map class configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap-c)#

Step 8 To enable GTP application inspection using a GTP map, enter the following command:

hostname(config-pmap-c)# inspect gtp [

gtp_map_name

]

The default GTP map is used when you enable GTP without specifying a GTP map. To use a different

GTP map, replace gtp_map_name with the GTP map that you want to use. For example, the following

command causes the security appliance to use the GTP map created in the previous steps.

hostname(config-pmap-c)# inspect gtp inbound_gtp

Step 9 Return to policy map configuration mode by entering the following command:

hostname(config-pmap-c)# exit

hostname(config-pmap)#

1 2 ... 342 343 344 345 346 347 348 349 350 351 352 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 347

Kommentare zu diesen Handbüchern