Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 363)

100

101

21-37

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing MGCP Inspection

Step 5 Configure the gateways, as in the following example:

hostname(config-mgcp-map)# gateway 10.10.10.115 101

hostname(config-mgcp-map)# gateway 10.10.10.116 102

hostname(config-mgcp-map)# gateway 10.10.10.117 102

Step 6 (Optional) To change the maximum number of commands allowed in the MGCP command queue, enter

the following command:

hostname(config-mgcp-map)# command-queue

command_limit

hostname(config-mgcp-map)# exit

hostname(config)#

Step 7 Name the policy map by entering the following command:

hostname(config)# policy-map

policy_map_name

Replace policy_map_name with the name of the policy map, as in the following example:

hostname(config)# policy-map inbound_policy

The CLI enters the policy map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap)#

Step 8 Specify the traffic class defined in Step 2 to be included in the policy map by entering the following

command:

hostname(config-pmap)# class

class_map_name

For example, the following command assigns the mgcp_port traffic class to the current policy map.

hostname(config-pmap)# class mgcp_port

The CLI enters the policy map class configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap-c)#

Step 9 (Optional) To change the default port used by the security appliance for receiving MGCP traffic, enter

the following command:

hostname(config-pmap-c)# inspect mgcp inbound_mgcp

If you are not using an MGCP map, enter the following command:

hostname(config-pmap-c)# inspect mgcp

Step 10 Return to policy map configuration mode by entering the following command:

hostname(config-pmap-c)# exit

hostname(config-pmap)#

Step 11 Return to global configuration mode by entering the following command:

hostname(config-pmap)# exit

hostname(config)#

Step 12 Apply the policy map globally or to a specific interface by entering the following command:

hostname(config)# service-policy

policy_map_name

[global | interface

interface_ID

Replace policy_map_name with the policy map you configured in Step 5, and identify all the interfaces

with the global option or a specific interface using the name assigned with the name-if command.

For example, the following command applies the inbound_policy to the outside interface:

hostname(config)# service-policy inbound_policy interface outside

1 2 ... 358 359 360 361 362 363 364 365 366 367 368 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 363

Kommentare zu diesen Handbüchern