Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

Cisco ASA Series 명령 참조, S 명령      

2장      show aaa kerberos through show asdm sessions 명령

다음은 SSH 트래픽 전달되는 경우 show access-list brief 명령의 샘플 출력입니다.

ciscoasa (config)# sh access-list test brief

access-list test; 3 elements; name hash: 0xcb4257a3

ca10ca21 44ae5901 00000001 4a68aa7e

 44ae5901 00000001 4a68aaa9

다음은 show access-list 명령의 샘플 출력이며, ACL 최적화가 활성화된 경우 “IN” 방향의 외부 인
터페이스에 적용되는 “test”라는 액세스 목록을 보여 줍니다.

ciscoasa# show access-list test

access-list test; 3 elements; name hash: 0xcb4257a3

access-list test line 1 extended permit icmp any any (hitcnt=0) 0xb422e9c2

access-list test line 2 extended permit object-group TELNET-SSH object-group S1 

object-group D1 0x44ae5901

  access-list test line 2 extended permit tcp object-group S1(1) object-group D1(2) eq 

telnet (hitcnt=1) 0x7b1c1660

  access-list test line 2 extended permit tcp object-group S1(1) object-group D1(2) eq ssh 

(hitcnt=1) 0x3666f922

다음은 텔넷 트래픽 전달되는 경우 show access-list brief 명령의 샘플 출력입니다.

ciscoasa (config)# sh access-list test brief

access-list test; 3 elements; name hash: 0xcb4257a3

 44ae5901 00000001 4a68ab51

다음은 SSH 트래픽 전달되는 경우 show access-list brief 명령의 샘플 출력입니다.

ciscoasa (config)# sh access-list test brief

access-list test; 3 elements; name hash: 0xcb4257a3

7b1c1660 44ae5901 00000001 4a68ab51

 44ae5901 00000001 4a68ab66

관련 명령

명령

설명

해당 EtherType에 따라 트래픽을 제어하는 액세스 목록을 구성합니다.

액세스 목록을 컨피그레이션에 추가하고, 방화벽을 통과하는 IP 트래픽
에 대한 정책을 구성합니다.

액세스 목록 카운터를 지웁니다.

실행 중인 컨피그레이션에서 액세스 목록을 지웁니다.

현재 실행 중인 access-list 컨피그레이션을 표시합니다.