Manualsbrain.com
  1. 份说明书
  2. 个品牌
  3. Cisco
  4. Cisco ASA 5555-X Adaptive Security Appliance
  5. 产品宣传页

Cisco Cisco ASA 5555-X Adaptive Security Appliance 产品宣传页

下载
页码 共 904
 
34-9
Cisco ASA Series 
일반적인 작업 CLI 구성 가이드
 
34 
장     시스템 이벤트에 대한 응답 자동화 
  EEM
의 예
출력 형식은 다음과 같습니다.
process=[XXX] time=[XXX] context=[XXX] oper=[XXX] address=0xXXXXXXXX size=XX @ 
XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX
최대 4개의 발신자 주소가 나타납니다. 작업 유형은 예에서 표시된 출력(...의 수)에 나열되어 있
습니다.
3
단계
메모리 로깅 래핑 이벤트에 응답합니다.
event memory-logging-wrap
예:
ciscoasa(config)# event manager applet memlog
ciscoasa(config)# event memory-logging-wrap
ciscoasa(config)# action 0 cli command 
“show memory logging wrap”
ciscoasa(config)# output file append disk0:/memlog.log
이 예는 모든 메모리 할당을 기록하는 애플릿을 보여 줍니다. 메모리 로깅에 대해 래핑을 활성화한 
경우 메모리 로거가 구성된 애플릿을 트리거하기 위해 이벤트 관리자에게 이벤트를 전송합니다.
EEM
의 예 
다음 예에는 1시간마다 차단 유출 정보를 기록하고, 순환되는 로그 파일 집합에 출력을 작성하여 
그날 하루의 가치 있는 로그를 보관하는 이벤트 관리자 애플릿이 나와 있습니다. 
ciscoasa(config)# event manager applet blockcheck
ciscoasa(config-applet)# description 
“Log block usage”
ciscoasa(config-applet)# event timer watchdog time 3600
ciscoasa(config-applet)# output rotate 24
ciscoasa(config-applet)# action 1 cli command 
“show blocks old”
다음 예에는 오전 1시마다 ASA를 재부팅하여 필요한 경우 구성을 저장하는 이벤트 관리자 애플
릿이 나와 있습니다. 
ciscoasa(config)# event manager applet dailyreboot
ciscoasa(config-applet)# description 
“Reboot every night”
ciscoasa(config-applet)# event timer absolute time 1:00:00
ciscoasa(config-applet)# output none
ciscoasa(config-applet)# action 1 cli command 
“reload save-config noconfirm”
다음 예에는 자정에서 오전 3시 사이에 지정된 인터페이스를 비활성화하는 이벤트 관리자 애플릿
이 나와 있습니다. 
ciscoasa(config)# event manager applet disableintf
ciscoasa(config-applet)# description 
“Disable the interface at midnight”
ciscoasa(config-applet)# event timer absolute time 0:00:00
ciscoasa(config-applet)# output none
ciscoasa(config-applet)# action 1 cli command 
“interface GigabitEthernet 0/0”
ciscoasa(config-applet)# action 2 cli command 
“shutdown”
ciscoasa(config-applet)# action 3 cli command 
“write memory”
ciscoasa(config)# event manager applet enableintf
ciscoasa(config-applet)# description 
“Enable the interface at 3am”
ciscoasa(config-applet)# event timer absolute time 3:00:00
ciscoasa(config-applet)# output none
ciscoasa(config-applet)# action 1 cli command 
“interface GigabitEthernet 0/0”
ciscoasa(config-applet)# action 2 cli command 
“no shutdown”
ciscoasa(config-applet)# action 3 cli command 
“write memory”