Cisco Cisco ASA 5555-X Adaptive Security Appliance 安装指南
15
j.
For DVS and Bare Metal, in addition to creating an IP address filter attribute, you must also
create a MAC address filter attribute.
create a MAC address filter attribute.
For IP filter, use the IP address as the name. For MAC filter, use the IP address plus an
underscore and the last three octets of the MAC address as a name.
underscore and the last three octets of the MAC address as a name.
To find the MAC address, go to the APIC Object Store Browser by navigating to:
https://apic_IP_address/visore.html. Use the IP address of the end point to run a query
and display the MAC address, as shown below.
https://apic_IP_address/visore.html. Use the IP address of the end point to run a query
and display the MAC address, as shown below.
k.
Right-click on Domains (VMs and Bare-Metals) under the newly created uSeg EPG, and add
a domain association with the same name and Domain Type as the original EPG.
a domain association with the same name and Domain Type as the original EPG.
l.
For Bare Metal, right-click on Static Leafs, and select Statically Link With Node.
Step 3
Verify that no traffic can go into or out from this end point.
For example, after an IP address is quarantined, pinging it should fail.