Cisco Cisco ASA 5555-X Adaptive Security Appliance 技术手册

Cisco

24

XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(3)

TCP Service Reset

<vnsDevParam key="failover" name="failover" value="enable"/>

<vnsDevParam key="lan_unit" name="lan_unit" value="primary"/>

<vnsDevFolder key="failover_lan_interface" name="failover_lan">

<vnsDevParam key="interface_name" name="interface_name" value="fover"/>

</vnsDevFolder>

<vnsDevFolder key="failover_ip" name="failover_ip">

<vnsDevParam key="interface_name" name="interface_name" value="fover"/>

<vnsDevParam key="active_ip" name="primary_ip" value="192.168.17.1"/>

<vnsDevParam key="netmask" name="netmask" value="255.255.255.0"/>

<vnsDevParam key="standby_ip" name="secondary_ip" value="192.168.17.2"/>

</vnsDevFolder>

</vnsDevFolder>

</vnsCDev>

</vnsLDevVip>

</fvTenant>

</polUni>

TCP Service Reset

This XML example sends a Reset Reply for Denied Inbound/Outbound TCP Packets.

ASA Configuration

service resetinbound | resetoutbount interface interface_name

XML Example

<fvTenant name="tenant1">

<vnsAbsGraph name = "WebGraph">

<vnsAbsNode name = "FW1">

<vnsAbsDevCfg>

<vnsAbsFolder key="Interface" name="externalIf">

<vnsAbsFolder name="TCPOpt" key="TCPOptions">"

<vnsAbsParam key="inbound_reset" name="reset" value="disable"/>

</vnsAbsFolder>

</vnsAbsFolder>

</vnsAbsDevCfg>

</vnsAbsNode>

</vnsAbsGraph>

</fvTenant>

</polUni>