Cisco Cisco ASA 5555-X Adaptive Security Appliance 技术手册

Cisco

10

XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(7)

Access Lists and Associated Access Groups

Access Lists and Associated Access Groups

This XML example creates an access list and assigns it to an access group associated with an existing
interface.

ASA Configuration

access-list ACL2 extended deny ip any any

access-list ACL2 extended permit icmp any any

access-list ACL1 extended permit tcp any any eq ssh

access-list ACL1 extended permit tcp any any eq https

access-group ACL2 in interface externalIf

access-group ACL1 out interface internalIf

XML Example

<polUni>

<fvTenant name="tenant1">

<vnsAbsGraph name = "WebGraph">

<vnsAbsNode name = "FW1">

<vnsAbsDevCfg>

<vnsAbsFolder key="AccessList" name="ACL1">

<vnsAbsFolder key="AccessControlEntry" name="ACE1">

<vnsAbsParam key="action" name="action1" value="permit"/>

<vnsAbsParam key="order" name="order1" value="1"/>

<vnsAbsFolder key="protocol" name="protocol1">

<vnsAbsParam key="name_number" name="pNN1" value="tcp"/>

</vnsAbsFolder>

<vnsAbsFolder key="destination_service" name="d1">

<vnsAbsParam key="operator" name="dop1" value="eq"/>

<vnsAbsParam key="low_port" name="dlp1" value="ssh"/>

</vnsAbsFolder>

</vnsAbsFolder>

<vnsAbsFolder key="AccessControlEntry" name="ACE2">

<vnsAbsParam key="action" name="action2" value="permit"/>

<vnsAbsParam key="order" name="order2" value="2"/>

<vnsAbsFolder key="protocol" name="protocol2">

<vnsAbsParam key="name_number" name="pNN2" value="tcp"/>

</vnsAbsFolder>

<vnsAbsFolder key="destination_service" name="d2">

<vnsAbsParam key="operator" name="dop2" value="eq"/>

<vnsAbsParam key="low_port" name="dlp2" value="https"/>

</vnsAbsFolder>

</vnsAbsFolder>

</vnsAbsFolder>

<vnsAbsFolder key="AccessList" name="ACL2">

<vnsAbsFolder key="AccessControlEntry" name="ACE1">

<vnsAbsParam key="action" name="action1" value="deny"/>

<vnsAbsParam key="order" name="order1" value="1"/>

</vnsAbsFolder>

<vnsAbsFolder key="AccessControlEntry" name="ACE2">

<vnsAbsParam key="action" name="action2" value="permit"/>

<vnsAbsParam key="order" name="order2" value="2"/>

<vnsAbsFolder key="protocol" name="protocol2">

<vnsAbsParam key="name_number" name="pNN2" value="icmp"/>

</vnsAbsFolder>

</vnsAbsFolder>