Cisco Cisco ASA 5555-X Adaptive Security Appliance 技术手册

Cisco

12

XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(7)

IP Audit

<vnsAbsCfgRel name="name" key="inbound_access_list_name"

targetName="EPG_ACL"/>

</vnsAbsFolder>

</vnsAbsFolder>

</vnsAbsDevCfg>

</vnsAbsNode>

</vnsAbsGraph>

</fvTenant>

</polUni>

IP Audit

This XML example sets up the IP audit attack configuration.

ASA Configuration

ip audit attack action drop

XML Example (Attack)

<polUni>

<fvTenant name="tenant1">

<vnsLDevVip name="Firewall">

<vnsDevFolder key="IPAudit" name="A">

<vnsDevParam key="IPAuditAttack" name="IPattack" value="drop"/>

</vnsDevFolder>

</vnsLDevVip>

</fvTenant>

</polUni>

XML Example (Info)

This XML example also sets up the IP audit attack configuration.

ip audit attack action reset

<polUni>

<fvTenant name="tenant1">

<vnsLDevVip name="Firewall">

<vnsDevFolder key="IPAudit" name="A">

<vnsDevParam key="IPAuditInfo" name="IPinfo" value="reset"/>

</vnsDevFolder>

</vnsLDevVip>

</fvTenant>

</polUni>