Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

3-113

Cisco ASA Series 명령 참조, S 명령

3장 show as-path-access-list through show auto-update 명령

show asp table filter

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=0.0.0.0, mask=0.0.0.0, port=0

out id=0xd616f6d0, priority=11, domain=vpn-user, deny=true

hits=0, user_data=0xd6161638, filter_id=0x0(-implicit deny-), protocol=0

src ip=::/0, port=0

dst ip=::/0, port=0

다음은 user1이 연결한 후 show asp table filter 명령의 샘플 출력입니다. VPN 필터 ACL은 인바운
드 방향에 따라 정의됩니다. 소스는 피어를 나타내고 대상은 내부 리소스를 나타냅니다. 아웃바운
드 규칙은 인바운드 규칙의 소스와 대상을 서로 바꾸는 방식으로 파생됩니다.

ciscoasa# show asp table filter

Global Filter Table:

in id=0xd682f4a0, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd682f460, filter_id=0x2(vpnfilter), protocol=6

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=95.1.224.100, mask=255.255.255.255, port=21

in id=0xd68366a0, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd6d89050, filter_id=0x2(vpnfilter), protocol=6

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=95.1.224.100, mask=255.255.255.255, port=5001

in id=0xd45d5b08, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd45d5ac8, filter_id=0x2(vpnfilter), protocol=17

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=95.1.224.100, mask=255.255.255.255, port=5002

in id=0xd6244f30, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd6244ef0, filter_id=0x2(vpnfilter), protocol=1

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=95.1.224.100, mask=255.255.255.255, port=0

in id=0xd64edca8, priority=12, domain=vpn-user, deny=true

hits=0, user_data=0xd64edc68, filter_id=0x2(vpnfilter), protocol=1

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=0.0.0.0, mask=0.0.0.0, port=0

in id=0xd616f018, priority=11, domain=vpn-user, deny=true

hits=43, user_data=0xd613eb58, filter_id=0x0(-implicit deny-), protocol=0

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=0.0.0.0, mask=0.0.0.0, port=0

in id=0xd616f518, priority=11, domain=vpn-user, deny=true

hits=0, user_data=0xd615f068, filter_id=0x0(-implicit deny-), protocol=0

src ip=::/0, port=0

dst ip=::/0, port=0

out id=0xd7395650, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd7395610, filter_id=0x2(vpnfilter), protocol=6

src ip=95.1.224.100, mask=255.255.255.255, port=21

dst ip=0.0.0.0, mask=0.0.0.0, port=0

out id=0xd45d49b8, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd45d4978, filter_id=0x2(vpnfilter), protocol=6

src ip=95.1.224.100, mask=255.255.255.255, port=5001

dst ip=0.0.0.0, mask=0.0.0.0, port=0

out id=0xd45d5cf0, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd45d5cb0, filter_id=0x2(vpnfilter), protocol=17

src ip=95.1.224.100, mask=255.255.255.255, port=5002

dst ip=0.0.0.0, mask=0.0.0.0, port=0

out id=0xd6245118, priority=12, domain=vpn-user, deny=false

hits=0, user_data=0xd62450d8, filter_id=0x2(vpnfilter), protocol=1

src ip=95.1.224.100, mask=255.255.255.255, port=0

dst ip=0.0.0.0, mask=0.0.0.0, port=0

out id=0xd64ede90, priority=12, domain=vpn-user, deny=true

hits=0, user_data=0xd64ede50, filter_id=0x2(vpnfilter), protocol=1

src ip=0.0.0.0, mask=0.0.0.0, port=0

dst ip=0.0.0.0, mask=0.0.0.0, port=0

out id=0xd616f298, priority=11, domain=vpn-user, deny=true

hits=0, user_data=0xd614d9f8, filter_id=0x0(-implicit deny-), protocol=0