Cisco Cisco ASA for Nexus 1000V Series Switch 기술 매뉴얼

다운로드
페이지 30
 
12
XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(5)
 
  Logging
XML Example (Attack)
<polUni>
    <fvTenant name="tenant1">
        <vnsLDevVip name="Firewall">
                <vnsDevFolder key="IPAudit" name="A">
                    <vnsDevParam key="IPAuditAttack" name="IPattack" value="drop"/>
                </vnsDevFolder>
        </vnsLDevVip>
    </fvTenant>
</polUni>
XML Example (Info)
This XML example also sets up the IP audit attack configuration.
ip audit attack action reset
<polUni>
    <fvTenant name="tenant1">
        <vnsLDevVip name="Firewall">
                <vnsDevFolder key="IPAudit" name="A">
                    <vnsDevParam key="IPAuditInfo" name="IPinfo" value="reset"/>
                </vnsDevFolder>
        </vnsLDevVip>
    </fvTenant>
</polUni>
Logging
This XML example sets up the logging configuration.
ASA Configuration
logging enable
logging buffer-size 8192
logging buffered critical
logging trap alerts
XML Example
<polUni>
    <fvTenant name="tenant1">
        <vnsLDevVip name="Firewall">
                <vnsDevFolder key="LoggingConfig" name="Log">
                    <vnsDevParam key="enable_logging" name="enlog" value="enable"/>
                    <vnsDevParam key="buffered_level" name="bufflev" value="critical"/>
<vnsDevParam key="buffer_size" name="buffsize" value="8192"/>
<vnsDevParam key="trap_level" name="trap" value="1"/>
</vnsDevFolder>
</vnsLDevVip>
</fvTenant>
</polUni>