Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 297)

100

101

18-5

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 18 Using Modular Policy Framework

Defining Actions Using a Policy Map

Policy Map Procedure

To define a policy map, assign a name to the policy with the policy-map command and then list one or

more class maps and one or more actions that should be taken on packets that belong to the given traffic

class.

To create a policy map by associating an action with a traffic class, complete the following steps:

Step 1 Name the policy map by entering the following command:

hostname(config)# policy-map

policy_map_name

The CLI enters the policy map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap)#

Step 2 (Optional) Specify a description for the policy map:

hostname(config-pmap)# description

text

Step 3 Specify one or more previously configured traffic classes to be included in the traffic policy, as in the

following example:

hostname(config-pmap)# class

class_map_name

The CLI enters the class map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap-c)#

Step 4 Specify one or more of the following class configuration mode commands to define an action for a

feature. Table 18-2 lists the class configuration mode commands:

Table 18-2 Class Configuration Mode Commands

Feature Command Description

Connection Settings set connection Specifies the maximum number of simultaneous TCP

and/or UDP connections, enables or disables TCP

sequence number randomization, or allows unlimited

connections.

set connection timeout Specifies the timeout period after which an idle TCP

connection is disconnected.

set connection

advanced-options

Specifies advanced TCP connection options.

Inspection inspect Specifies a protocol inspection to enable.

IPS ips Specifies the intrusion-prevention action.

QoS police Specifies the rate-limiting requirement.

priority Specifies strict scheduling priority.

1 2 ... 292 293 294 295 296 297 298 299 300 301 302 ... 603 604

Komentarze do niniejszej Instrukcji

Brak uwag

Cisco PIX 525 Dokumentacja Strona 297

Komentarze do niniejszej Instrukcji