Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

1-94

Cisco ASA Series 명령 참조 , S 명령

1장 same-security-traffic through shape 명령

set connection advanced-options tcp-state-bypass

예

다음은 TCP 상태 우회에 대한 컨피그레이션 예입니다.

ciscoasa(config)# access-list tcp_bypass extended permit tcp 10.1.1.0 255.255.255.224 any

ciscoasa(config)# class-map tcp_bypass

ciscoasa(config-cmap)# description "TCP traffic that bypasses stateful firewall"

ciscoasa(config-cmap)# match access-list tcp_bypass

ciscoasa(config-cmap)# policy-map tcp_bypass_policy

ciscoasa(config-pmap)# class tcp_bypass

ciscoasa(config-pmap-c)# set connection advanced-options tcp-state-bypass

ciscoasa(config-pmap-c)# service-policy tcp_bypass_policy outside