Cisco Systems ASA 5580 Manual De Usuario

Descargar
Página de 712
 
1-18
Cisco ASA Series Firewall CLI Configuration Guide
 
Chapter 1      Configuring a Service Policy Using the Modular Policy Framework
  Monitoring Modular Policy Framework
Detailed Steps
Examples
For example, the following command enables the inbound_policy policy map on the outside interface:
ciscoasa(config)# service-policy inbound_policy interface outside
The following commands disable the default global policy, and enables a new one called 
new_global_policy on all other ASA interfaces:
ciscoasa(config)# no service-policy global_policy global
ciscoasa(config)# service-policy new_global_policy global
Monitoring Modular Policy Framework
To monitor Modular Policy Framework, enter the following command:
Configuration Examples for Modular Policy Framework
This section includes several Modular Policy Framework examples and includes the following topics:
Command
Purpose
service-policy 
policy_map_name interface 
interface_name [fail-close]
Example:
ciscoasa(config)# service-policy 
inbound_policy interface outside
Creates a service policy by associating a policy map with an interface. 
Specify the fail-close option to generate a syslog (767001) for IPv6 traffic 
that is dropped by application inspections that do not support IPv6 traffic. 
By default, syslogs are not generated. For a list of inspections that support 
IPv6, see the 
service-policy 
policy_map_name global 
[fail-close]
Example:
ciscoasa(config)# service-policy 
inbound_policy global
Creates a service policy that applies to all interfaces that do not have a 
specific policy. Specify the fail-close option to generate a syslog (767001) 
for IPv6 traffic that is dropped by application inspections that do not 
support IPv6 traffic. By default, syslogs are not generated. For a list of 
inspections that support IPv6, see the 
.
Command
Purpose
show service-policy
Displays the service policy statistics.