Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 368)

100

101

21-42

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing RTSP Inspection

The CLI enters the policy map configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap)#

Step 5 Specify the traffic class defined in Step 2 to be included in the policy map by entering the following

command:

hostname(config-pmap)# class

class_map_name

For example, the following command assigns the rtsp_port traffic class to the current policy map.

hostname(config-pmap)# class rtsp_port

The CLI enters the policy map class configuration mode and the prompt changes accordingly, as follows:

hostname(config-pmap-c)#

Step 6 (Optional) To change the default port used by the security appliance for receiving RTSP traffic, enter the

following command:

hostname(config-pmap-c)# inspect rtsp

Step 7 Return to policy map configuration mode by entering the following command:

hostname(config-pmap-c)# exit

hostname(config-pmap)#

Step 8 Return to global configuration mode by entering the following command:

hostname(config-pmap)# exit

hostname(config)#

Step 9 Apply the policy map globally or to a specific interface by entering the following command:

hostname(config)# service-policy

policy_map_name

[global | interface

interface_ID

Replace policy_map_name with the policy map you configured in Step 5, and identify all the interfaces

with the global option or a specific interface using the name assigned with the name-if command.

For example, the following command applies the inbound_policy to the outside interface:

hostname(config)# service-policy inbound_policy interface outside

The following command applies the inbound_policy to all the security appliance interfaces:

hostname(config)# service-policy inbound_policy global

Example 21-7 Enabling and Configuring RTSP Inspection

You enable the RTSP inspection engine as shown in the following example, which creates a class map

to match RTSP traffic on the default ports (554 and 8554). The service policy is then applied to the

outside interface.

hostname(config)# access-list rtsp_acl permit tcp any any eq 554

hostname(config)# access-list rtsp_acl permit tcp any any eq 8554

hostname(config)# class-map rtsp-traffic

hostname(config-cmap)# match access-list rtsp_acl

hostname(config-cmap)# exit

hostname(config)# policy-map inbound_policy

hostname(config-pmap)# class rtsp_port

hostname(config-pmap-c)# inspect rtsp 554

1 2 ... 363 364 365 366 367 368 369 370 371 372 373 ... 603 604

Komentarze do niniejszej Instrukcji

Brak uwag

Cisco PIX 525 Dokumentacja Strona 368

Komentarze do niniejszej Instrukcji