Cisco PIX 525 Specifikace

Procházejte online nebo si stáhněte Specifikace pro Bezpečnostní systémy pro řízení přístupu Cisco PIX 525. Cisco PIX 525 Specifications Uživatelská příručka

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 604
  • Tabulka s obsahem
  • ŘEŠENÍ PROBLÉMŮ
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 0
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Cisco Security Appliance Command Line
Configuration Guide
For the Cisco PIX 500 Series
Software Version 7.0
Customer Order Number: N/A, Online only
Text Part Number: OL-6721-01
Zobrazit stránku 0
1 2 3 4 5 6 ... 603 604

Shrnutí obsahu

Strany 1 - Configuration Guide

Corporate HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706 USAhttp://www.cisco.comTel: 408 526-4000800 553-NETS (6387)Fax:

Strany 2

ContentsviiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Access List Guidelines 13-6Access Control Entry Order 13-6Access Contro

Strany 3 - CONTENTS

8-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

Strany 4 - 2 Getting Started 2-1

8-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

Strany 5

8-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

Strany 6 - 9 Configuring IPv6 9-1

8-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

Strany 7 - 11 Configuring Failover 11-1

8-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

Strany 8

8-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

Strany 9 - 2 Configuring the Firewall

8-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPFor Mo

Strany 10 - 14 Applying NAT 14-1

8-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPYou ca

Strany 11 - OL-6721-01

8-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPFor ex

Strany 12

8-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPCisco

Strany 13 - 20 Applying QoS Policies 20-1

ContentsixCisco Security Appliance Command Line Configuration GuideOL-6721-01Mapped Address Guidelines 14-13DNS and NAT 14-14Configuring NAT Control 1

Strany 14

8-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring DHCPTo ena

Strany 15

CHAPTER9-1Cisco Security Appliance Command Line Configuration GuideOL-6721-019Configuring IPv6This chapter describes how to enable and configure IPv6

Strany 16 - 3 Configuring VPN

9-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring IPv6 on an Interface• telnet• tftp-

Strany 17

9-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring IPv6 Default and Static RoutesThere

Strany 18

9-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring IPv6 Access ListsStep 1 To add the

Strany 19 - 4 System Administration

9-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Verifying the IPv6 Configuration• src_port and

Strany 20

9-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 Configuring a Dual IP Stack on an Interface IC

Strany 21 - B Sample Configurations B-1

9-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 IPv6 Configuration ExampleIPv6 Configuration Ex

Strany 22

9-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 9 Configuring IPv6 IPv6 Configuration Examplesnmp-server enable tr

Strany 23 - About This Guide

CHAPTER10-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0110Configuring AAA Servers and the Local DatabaseThis chapter describes s

Strany 24 - Document Organization

ContentsxCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 17 Applying Filtering Services 17-1Filtering Overview 17-1Filterin

Strany 25 - Part 3: Configuring VPN

10-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA OverviewAbo

Strany 26 - Document Conventions

10-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

Strany 27 - Documentation Feedback

10-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

Strany 28 - Submitting a Service Request

10-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

Strany 29

10-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

Strany 30

10-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

Strany 31

10-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database AAA Server and

Strany 32

10-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Configuring the

Strany 33 - Firewall Functional Overview

10-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Configuring th

Strany 34 - Security Policy Overview

10-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

Strany 35

ContentsxiCisco Security Appliance Command Line Configuration GuideOL-6721-01Classification Policy within a Policy Map 18-7Multi-match Classification

Strany 36 - Stateful Inspection Overview

10-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

Strany 37 - Security Context Overview

10-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

Strany 38 - Security Context Overview

10-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 10 Configuring AAA Servers and the Local Database Identifying AA

Strany 39 - Getting Started

CHAPTER11-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0111Configuring FailoverThis chapter describes the security appliance fail

Strany 40

11-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverFailover System Req

Strany 41 - Viewing the Configuration

11-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverThe Failover and St

Strany 42

11-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverOn systems running

Strany 43 - Interface.”

11-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverCaution Sharing the

Strany 44

11-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverActive/Standby Fail

Strany 45

11-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding Failoverunit may be overwri

Strany 46 - Context Configuration Files

ContentsxiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Applying Low Latency Queueing 20-9Configuring Priority Queuing 20-10Sizi

Strany 47

11-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverFailover TriggersTh

Strany 48

11-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverActive/Active Failo

Strany 49

11-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverEach failover grou

Strany 50

11-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverYou can use the wr

Strany 51 - Shared Interface Guidelines

11-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverTable 11-2 shows t

Strany 52

11-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding FailoverTable 11-3 provide

Strany 53 - Cascading Security Contexts

11-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Understanding Failover• The user authent

Strany 54

11-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverWhen a unit does not

Strany 55 - Restoring Single Context Mode

11-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failover• Configuring LAN-Ba

Strany 56

11-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThe if_name argument

Strany 57 - Configuring Ethernet Settings

ContentsxiiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Verifying and Monitoring H.323 Inspection 21-28Monitoring H.225 Session

Strany 58 - Configuring Subinterfaces

11-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring the Prim

Strany 59

11-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStep 5 (Optional) To

Strany 60 - Configuring Subinterfaces

11-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverTo configure the sec

Strany 61

11-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThis section include

Strany 62

11-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring Interfac

Strany 63

11-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring Active/A

Strany 64

11-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverNote In multiple con

Strany 65 - Changing the Admin Context

11-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStep 7 Enable failov

Strany 66

11-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failoverd. Specify the failo

Strany 67 - Reloading a Security Context

11-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThe following exampl

Strany 68 - Monitoring Security Contexts

ContentsxivCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 22 Configuring ARP Inspection and Bridging Parameters 22-1Config

Strany 69 - Viewing Resource Usage

11-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failoverc. Enable the interf

Strany 70

11-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverConfiguring Failover

Strany 71 - Security Level Overview

11-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverThe unit poll time s

Strany 72 - Configuring the Interface

11-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverYou can prevent the

Strany 73

11-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failoverunit looks at the se

Strany 74 - Security Level

11-33Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverUsing the show failo

Strany 75

11-34Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverIn multiple context

Strany 76

11-35Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverMonitored Interfaces

Strany 77 - Configuring Basic Settings

11-36Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStateful Obj For ea

Strany 78 - Setting the Date and Time

11-37Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverShow Failover—Active

Strany 79

ContentsxvCisco Security Appliance Command Line Configuration GuideOL-6721-01Using Dynamic Crypto Maps 23-18Providing Site-to-Site Redundancy 23-20Vie

Strany 80

11-38Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring Failover Logical Upda

Strany 81

11-39Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverMonitored Interfaces

Strany 82

11-40Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverStateful Obj For ea

Strany 83

11-41Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Configuring FailoverViewing Monitored In

Strany 84 - Configuring a Static Route

11-42Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Controlling and Monitoring FailoverStep

Strany 85 - Configuring OSPF

11-43Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Controlling and Monitoring FailoverDisab

Strany 86 - OSPF Overview

11-44Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesDebug Mes

Strany 87 - Enabling OSPF

11-45Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesCable-Bas

Strany 88 - Adding a Route Map

11-46Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examplespasswd iy

Strany 89

11-47Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesExample 1

Strany 90

ContentsxviCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 26 Configuring IP Addresses for VPNs 26-1Configuring an IP Addre

Strany 91

11-48Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration ExamplesLAN-Based

Strany 92

11-49Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examplesenable pa

Strany 93 - Configuring OSPF NSSA

11-50Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examples security

Strany 94

11-51Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examplesmonitor-i

Strany 95 - Generating a Default Route

11-52Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 11 Configuring Failover Failover Configuration Examples

Strany 96

PART 2Configuring the Firewall

Strany 98 - Configuring RIP

CHAPTER12-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0112Firewall Mode OverviewThis chapter describes how the firewall works in

Strany 99 - Configuring Multicast Routing

12-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode OverviewIP Routing SupportT

Strany 100 - Configuring IGMP Features

12-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode OverviewFigure 12-1 NAT Exa

Strany 101 - Configuring Group Membership

ContentsxviiCisco Security Appliance Command Line Configuration GuideOL-6721-01Certificate Configuration 30-4Preparing for Certificates 30-4Configurin

Strany 102

12-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode OverviewAn Inside User Visi

Strany 103 - Changing the IGMP Version

12-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode Overview5. When www.example

Strany 104 - Configuring PIM Features

12-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode Overview4. The security app

Strany 105

12-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Routed Mode Overview3. The security app

Strany 106 - Configuring DHCP

12-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewA DMZ User Att

Strany 107

12-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewTransparent Fi

Strany 108 - Configuring DHCP Options

12-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewUsing the Tra

Strany 109

12-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode Overview• Each direct

Strany 110 - Configuring the DHCP Client

12-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewHow Data Move

Strany 111 - Configuring IPv6

12-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewAn Inside Use

Strany 112

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMM

Strany 113

ContentsxviiiCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 31 Managing Software, Licenses, and Configurations 32-1Managin

Strany 114 - Configuring IPv6 Access Lists

12-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewAn Outside Us

Strany 115

12-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode OverviewAn Outside Us

Strany 116 - The show ipv6 route Command

12-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 12 Firewall Mode Overview Transparent Mode Overview

Strany 117 - IPv6 Configuration Example

CHAPTER13-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0113Identifying Traffic with Access ListsThis chapter describes how to ide

Strany 118

13-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewAcce

Strany 119 - AAA Overview

13-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewFor

Strany 120 - About Accounting

13-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List Overviewb. A

Strany 121 - Summary of Support

13-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewTo u

Strany 122 - RADIUS Server Support

13-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewCont

Strany 123 - TACACS+ Server Support

13-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewAcce

Strany 124 - SDI Server Support

ContentsxixCisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIX A Feature Licenses and Specifications A-1Supported Platforms A-

Strany 125 - Kerberos Server Support

13-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Access List OverviewFigu

Strany 126 - Local Database Support

13-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an Extended Acces

Strany 127 - Fallback Support

13-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an Extended Acce

Strany 128

13-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an EtherType Acc

Strany 129

13-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding an EtherType Acc

Strany 130

13-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding a Standard Acces

Strany 131

13-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

Strany 132

13-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

Strany 133 - Configuring Failover

13-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

Strany 134 - Failover System Requirements

13-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

Strany 135 - The Failover and State Links

ContentsxxCisco Security Appliance Command Line Configuration GuideOL-6721-01Command Output Paging C-5Adding Comments C-5Text Configuration Files C-6H

Strany 136 - State Link

13-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

Strany 137 - Active/Standby Failover

13-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Simplifying Access List

Strany 138 - Understanding Failover

13-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Adding Remarks to Acces

Strany 139 - Command Replication

13-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

Strany 140 - Failover Actions

13-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

Strany 141 - Active/Active Failover

13-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

Strany 142

13-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 13 Identifying Traffic with Access Lists Logging Access List Act

Strany 143

CHAPTER14-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0114Applying NATThis chapter describes Network Address Translation (NAT).

Strany 144

14-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewIntroduction to NATAddress translatio

Strany 145 - Regular and Stateful Failover

14-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-1 NAT ExampleSee the follow

Strany 146 - Failover Health Monitoring

xxiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This GuideThis preface introduce the Cisco Security Appliance Command Line

Strany 147

14-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewInterfaces at the same security level

Strany 148 - Prerequisites

14-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewNAT TypesThis section describes the a

Strany 149

14-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-6 shows a remote host attem

Strany 150 - Configuring the Primary Unit

14-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewAfter the connection expires, the por

Strany 151

14-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFor example, if you want to provide a

Strany 152

14-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewBypassing NAT when NAT Control is Ena

Strany 153

14-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-8 shows a host on the 10.1

Strany 154 - Configuring Failover Criteria

14-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-9 shows the use of source

Strany 155

14-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewFigure 14-10 shows a remote host con

Strany 156

14-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewNote The security appliance does not

Strany 157 - Configure the Primary Unit

xxiiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Document ObjectivesRelated Documentation For more information

Strany 158

14-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT OverviewDNS and NATYou might need to configu

Strany 159 - Configure the Secondary Unit

14-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Configuring NAT ControlFigure 14-12 shows a web

Strany 160

14-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATUsing Dynamic NAT and P

Strany 161

14-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATYou can enter a nat com

Strany 162

14-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATYou can also enter a gl

Strany 163 - Figure 11-1 ASR Example

14-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATFigure 14-16 Different

Strany 164 - Configuring Failover

14-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATFigure 14-17 NAT and PA

Strany 165

14-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATFigure 14-18 Outside NA

Strany 166

14-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATConfiguring Dynamic NAT

Strany 167

14-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATTo configure dynamic NA

Strany 168

xxiiiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Document ObjectivesPart 2: Configuring the FirewallChapter 1

Strany 169 - Show Failover—Active/Active

14-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Dynamic NAT and PATStep 2 To identify the

Strany 170

14-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static NATUsing Static NATThis section des

Strany 171

14-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static PAT• To configure regular static NA

Strany 172

14-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static PATFor example, configure the follo

Strany 173 - Viewing Monitored Interfaces

14-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Using Static PATFor example, for Telnet traffic

Strany 174 - Forcing Failover

14-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Bypassing NATBypassing NATThis section describes

Strany 175 - Monitoring Failover

14-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Bypassing NATConfiguring Static Identity NATStat

Strany 176 - Debug Messages

14-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT Bypassing NATFor example, the following command

Strany 177

14-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesCreate the access list using the acc

Strany 178

14-33Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesOverlapping NetworksIn Figure 14-26,

Strany 179

xxivCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Document ObjectivesDocument ConventionsCommand descriptions u

Strany 180

14-34Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesThe security appliance already has a

Strany 181

14-35Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT ExamplesTo implement this scenario, perform

Strany 182

14-36Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 14 Applying NAT NAT Examples

Strany 183

CHAPTER15-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0115Permitting or Denying Network AccessThis chapter describes how to cont

Strany 184

15-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Inbound and Outbound Acce

Strany 185 - Configuring the Firewall

15-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Inbound and Outbound Acce

Strany 186

15-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Applying an Access List t

Strany 187 - Firewall Mode Overview

15-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Applying an Access List t

Strany 188 - Network Address Translation

15-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 15 Permitting or Denying Network Access Applying an Access List t

Strany 189 - Routed Mode Overview

CHAPTER16-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0116Applying AAA for Network AccessThis chapter describes how to enable AA

Strany 190 - Figure 12-2 Inside to Outside

xxvCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining DocumentationObtaining DocumentationCisco documentat

Strany 191

16-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

Strany 192

16-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

Strany 193

16-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

Strany 194 - Transparent Mode Overview

16-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authentication for

Strany 195 - Transparent Firewall Features

16-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

Strany 196 - Transparent Mode Overview

16-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

Strany 197

16-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

Strany 198

16-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Authorization for

Strany 199

16-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Configuring Accounting for Ne

Strany 200

16-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Using MAC Addresses to Exempt

Strany 201

xxviCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining Technical AssistanceObtaining Technical AssistanceF

Strany 202

16-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 16 Applying AAA for Network Access Using MAC Addresses to Exempt

Strany 203 - Access List Overview

CHAPTER17-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0117Applying Filtering ServicesThis chapter describes ways to filter web t

Strany 204 - Access List Types and Uses

17-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering ActiveX ObjectsFiltering

Strany 205

17-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering Java AppletsThis command

Strany 206 - Access List Overview

17-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering with an External ServerT

Strany 207 - VPN Access (Extended)

17-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering with an External ServerG

Strany 208 - Access List Guidelines

17-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering with an External ServerR

Strany 209 - Access Control Implicit Deny

17-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering HTTP URLsCaching Server

Strany 210

17-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering HTTPS URLsThe allow opti

Strany 211

17-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Filtering FTP RequestsBecause HTTP

Strany 212

xxviiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining Additional Publications and InformationDefinitions

Strany 213

17-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Viewing Filtering Statistics and

Strany 214

17-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Viewing Filtering Statistics and

Strany 215 - Adding a Standard Access List

17-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 17 Applying Filtering Services Viewing Filtering Statistics and

Strany 216 - Adding Object Groups

CHAPTER18-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0118Using Modular Policy FrameworkThis chapter describes how to use Modula

Strany 217 - Adding a Service Object Group

18-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Identifying Traffic Using a Cla

Strany 218

18-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Identifying Traffic Using a Cla

Strany 219 - Nesting Object Groups

18-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

Strany 220

18-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

Strany 221 - Removing Object Groups

18-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

Strany 222 - Logging Access List Activity

18-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

Strany 223 - Access List Logging Overview

iCisco Security Appliance Command Line Configuration GuideOL-6721-01CONTENTSAbout This Guide xxiDocument Objectives xxiAudience xxiRelated Documentati

Strany 224 - access_list_name

xxviiiCisco Security Appliance Command Line Configuration GuideOL-6721-01About This Guide Obtaining Additional Publications and Information• Internet

Strany 225 - Managing Deny Flows

18-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

Strany 226

18-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Defining Actions Using a Policy

Strany 227 - Applying NAT

18-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Applying a Policy to an Interf

Strany 228 - Introduction to NAT

18-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

Strany 229 - NAT Control

18-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

Strany 230 - NAT Overview

18-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

Strany 231 - NAT Types

18-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

Strany 232

18-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

Strany 233 - Static PAT

18-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 18 Using Modular Policy Framework Direction Policies When Applyi

Strany 234 - Figure 14-7 Static PAT

CHAPTER19-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0119Intercepting and Responding to Network AttacksThis chapter describes h

Strany 235 - Policy NAT

PART 1Getting Started and General Information

Strany 236

19-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Configuring TCP

Strany 237

19-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

Strany 238

19-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

Strany 239 - Mapped Address Guidelines

19-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

Strany 240 - DNS and NAT

19-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 19 Intercepting and Responding to Network Attacks Protecting Your

Strany 241 - Configuring NAT Control

CHAPTER20-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0120Applying QoS PoliciesThis chapter describes how to apply QoS policies,

Strany 242 - Using Dynamic NAT and PAT

20-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies QoS ConceptsNote A flow can be defined i

Strany 243

20-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Identifying Traffic for QoSIdentifying T

Strany 244

20-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Classifying Traffic for QoSThe following

Strany 245 - NAT 2: 192.168.1.0/24

20-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Classifying Traffic for QoShostname(conf

Strany 247

20-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Defining a QoS Policy MapDefining a QoS

Strany 248 - Figure 14-20 Dynamic PAT

20-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Applying Rate LimitingNote Policing is a

Strany 249

20-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Applying Rate LimitingVerifying the Traf

Strany 250

20-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Activating the Service PolicyViewing QoS

Strany 251 - Using Static NAT

20-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Applying Low Latency QueueingNote The u

Strany 252 - Using Static PAT

20-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Viewing QoS StatisticsThe following exa

Strany 253

20-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 20 Applying QoS Policies Viewing the Priority-Queue Configuratio

Strany 254

CHAPTER21-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0121Applying Application Layer Protocol Inspection This chapter describes

Strany 255 - Bypassing NAT

21-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Application Ins

Strany 256 - Appliance

21-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Application Ins

Strany 257 - Configuring NAT Exemption

CHAPTER1-1Cisco Security Appliance Command Line Configuration GuideOL-6721-011Introduction to the Security ApplianceThe security appliance combines ad

Strany 258 - NAT Examples

21-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Application Ins

Strany 259 - Overlapping Networks

21-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

Strany 260 - Redirecting Ports

21-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

Strany 261

21-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

Strany 262 - NAT Examples

21-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

Strany 263

21-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Applying Applic

Strany 264

21-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

Strany 265

21-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

Strany 266

21-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

Strany 267

21-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing CTIQB

Strany 268

1-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Firewall Functional Overv

Strany 269 - AAA Performance

21-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

Strany 270 - Authentication Overview

21-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

Strany 271

21-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

Strany 272

21-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

Strany 273

21-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing FTP I

Strany 274

21-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

Strany 275

21-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

Strany 276

21-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

Strany 277

21-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

Strany 278

21-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing GTP I

Strany 279

1-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Firewall Functional Overv

Strany 280

21-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

Strany 281 - Applying Filtering Services

21-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

Strany 282 - Filtering ActiveX Objects

21-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

Strany 283 - Filtering Java Applets

21-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

Strany 284 - Filtering Overview

21-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

Strany 285 - General Procedure

21-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing H.323

Strany 286

21-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing HTTP

Strany 287 - Filtering HTTP URLs

21-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing HTTP

Strany 288 - Filtering HTTPS URLs

21-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing HTTP

Strany 289 - Filtering FTP Requests

21-33Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

Strany 290

1-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Firewall Functional Overv

Strany 291 - Viewing Caching Statistics

21-34Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

Strany 292

21-35Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

Strany 293 - Overview

21-36Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

Strany 294

21-37Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

Strany 295

21-38Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing MGCP

Strany 296 - Class Map Example

21-39Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

Strany 297 - Policy Map Procedure

21-40Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

Strany 298 - Policy Map Examples

21-41Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

Strany 299 - Restrictions

21-42Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing RTSP

Strany 300

21-43Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

Strany 301 - Action Order

1-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance VPN Functional OverviewVP

Strany 302 - Advanced Options

21-44Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

Strany 303 - Examples

21-45Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

Strany 304

21-46Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SIP I

Strany 305

21-47Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing Skinn

Strany 306 - Service Policy and NAT

21-48Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing Skinn

Strany 307

21-49Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing Skinn

Strany 308

21-50Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SMTP

Strany 309

21-51Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SMTP

Strany 310 - Configuring TCP Normalization

21-52Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SMTP

Strany 311 - Preventing IP Spoofing

21-53Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

Strany 312

1-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 1 Introduction to the Security Appliance Security Context Overview

Strany 313 - Blocking Unwanted Connections

21-54Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

Strany 314

21-55Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

Strany 315 - Applying QoS Policies

21-56Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 21 Applying Application Layer Protocol Inspection Managing SNMP

Strany 316 - QoS Concepts

CHAPTER22-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0122Configuring ARP Inspection and Bridging ParametersTransparent Firewall

Strany 317 - Identifying Traffic for QoS

22-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 22 Configuring ARP Inspection and Bridging Parameters Configuring

Strany 318 - Classifying Traffic for QoS

22-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 22 Configuring ARP Inspection and Bridging Parameters Customizing

Strany 319

22-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 22 Configuring ARP Inspection and Bridging Parameters Customizing

Strany 322 - Verifying QoS Statistics

CHAPTER23-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0123Configuring IPSec and ISAKMPThis chapter describes how to configure th

Strany 323 - Applying Low Latency Queueing

CHAPTER2-1Cisco Security Appliance Command Line Configuration GuideOL-6721-012Getting StartedThis chapter describes how to access the command-line int

Strany 324 - Reducing Queue Latency

23-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP IPSec OverviewIPSec OverviewIPSec

Strany 325 - Viewing QoS Statistics

23-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPISAKMP Overview

Strany 326

23-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPYou can have a

Strany 327

23-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPTo enable and c

Strany 328 - How Inspection Engines Work

23-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPDisabling ISAKM

Strany 329 - Supported Protocols

23-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPEnabling IPSec

Strany 330

23-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring ISAKMPIPSec over TCP

Strany 331

23-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring Certificate Group Mat

Strany 332

23-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring Certificate Group Ma

Strany 333

23-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecUsing the Tunne

Strany 334

ContentsiiCisco Security Appliance Command Line Configuration GuideOL-6721-01CHAPTER 2 Getting Started 2-1Accessing the Command-Line Interface 2-1Sett

Strany 335

2-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Setting Transparent or Routed Firewall ModeStep

Strany 336 - Managing CTIQBE Inspection

23-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecUnderstanding T

Strany 337

23-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecCreate multiple

Strany 338

23-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSec• Determine whe

Strany 339

23-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecIf you configur

Strany 340 - Managing FTP Inspection

23-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecAssuming that t

Strany 341 - Configuring FTP Inspection

23-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecFor example:cry

Strany 342

23-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecUsing Dynamic C

Strany 343

23-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Configuring IPSecCreate a crypto

Strany 344

23-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Clearing Security AssociationsPr

Strany 345 - Managing GTP Inspection

23-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Clearing Crypto Map Configuratio

Strany 346

2-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the ConfigurationWorking with the C

Strany 347

23-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 23 Configuring IPSec and ISAKMP Clearing Crypto Map Configuratio

Strany 348

CHAPTER24-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0124Setting General VPN ParametersThe security appliance implementation of

Strany 349

24-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 24 Setting General VPN Parameters Permitting Intra-Interface Traf

Strany 350 - Managing H.323 Inspection

24-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 24 Setting General VPN Parameters Configuring Client UpdateThe co

Strany 351 - Limitations and Restrictions

24-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 24 Setting General VPN Parameters Configuring Client Update

Strany 352

CHAPTER25-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0125Configuring Tunnel Groups, Group Policies, and UsersThis chapter descr

Strany 353

25-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Overview

Strany 354 - Monitoring H.225 Sessions

25-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Overview

Strany 355 - Monitoring H.323 RAS Sessions

25-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

Strany 356 - Managing HTTP Inspection

25-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

Strany 357

2-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the ConfigurationClearing and Remov

Strany 358

25-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

Strany 359 - Managing MGCP Inspection

25-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

Strany 360 - MGCP Inspection Overview

25-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

Strany 361 - Managing MGCP Inspection

25-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configuri

Strany 362

25-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 363

25-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 364

25-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 365 - Managing RTSP Inspection

25-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 366 - Using RealPlayer

25-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 367 - Restrictions and Limitations

25-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 368

2-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the ConfigurationIn the text config

Strany 369 - Managing SIP Inspection

25-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 370

25-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 371

25-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 372

25-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 373 - SCCP Inspection Overview

25-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 374 - Supporting Cisco IP Phones

25-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 375

25-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 376

25-23Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 377

25-24Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 378

25-25Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Group Po

Strany 379 - Managing SNMP Inspection

2-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 2 Getting Started Working with the Configuration

Strany 380 - SNMP Inspection Overview

25-26Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

Strany 381

25-27Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

Strany 382

25-28Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

Strany 383 - Parameters

25-29Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

Strany 384 - Enabling ARP Inspection

25-30Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

Strany 385 - Adding a Static MAC Address

25-31Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

Strany 386 - Viewing the MAC Address Table

25-32Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 25 Configuring Tunnel Groups, Group Policies, and Users Configur

Strany 387 - Configuring VPN

CHAPTER26-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0126Configuring IP Addresses for VPNsThis chapter describes IP address ass

Strany 388

26-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 26 Configuring IP Addresses for VPNs Configuring an IP Address As

Strany 389 - Configuring IPSec and ISAKMP

26-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 26 Configuring IP Addresses for VPNs Configuring an IP Address As

Strany 390 - Configuring ISAKMP

CHAPTER3-1Cisco Security Appliance Command Line Configuration GuideOL-6721-013Enabling Multiple Context ModeThis chapter describes how to use security

Strany 391 - ISAKMP Overview

26-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 26 Configuring IP Addresses for VPNs Configuring an IP Address As

Strany 392 - Configuring ISAKMP Policies

CHAPTER27-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0127Configuring Remote Access VPNsRemote access VPNs let single users conn

Strany 393

27-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Configuring Interfaceshostname(

Strany 394

27-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Configuring ISAKMP Policy and E

Strany 395 - Enabling IPSec over TCP

27-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Configuring an Address PoolStep

Strany 396

27-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Defining a Tunnel GroupStep 1 T

Strany 397

27-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Creating a Dynamic Crypto MapSt

Strany 398

27-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs Creating a Crypto Map Entry to

Strany 399 - Configuring IPSec

27-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 27 Configuring Remote Access VPNs

Strany 400 - Defining Crypto Maps

CHAPTER28-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0128Configuring LAN-to-LAN VPNsLAN-to-LAN VPN configurations are between t

Strany 401 - Using Interface Access Lists

3-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewCommon U

Strany 402 - Configuring IPSec

28-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Configuring InterfacesConfiguring

Strany 403 - Changing IPSec SA Lifetimes

28-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Configuring ISAKMP Policy and Enab

Strany 404

28-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Transform SetCreating a

Strany 405

28-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Defining a Tunnel GroupTo configur

Strany 406 - Using Dynamic Crypto Maps

28-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Crypto Map and Applying

Strany 407

28-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Crypto Map and Applying

Strany 408

28-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 28 Configuring LAN-to-LAN VPNs Creating a Crypto Map and Applying

Strany 409

CHAPTER29-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0129Configuring CertificatesThis chapter describes how to configure certif

Strany 410

29-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Public Key CryptographyObtaining the

Strany 411

29-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Public Key CryptographySeparate signi

Strany 412 - Configuring Client Update

3-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewHow the

Strany 413

29-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationThe security

Strany 414 - Configuring Client Update

29-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationTo prepare a

Strany 415 - • Group Policies, page 25-10

29-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote When ge

Strany 416 - Tunnel Groups

29-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationStep 2 Speci

Strany 417 - IPSec Connection Parameters

29-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate Configuration• serial-num

Strany 418 - Configuring Tunnel Groups

29-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote Whether

Strany 419

29-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote The pa

Strany 420

29-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationINFO: Certi

Strany 421

29-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationThe followi

Strany 422

29-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationStep 4 Conf

Strany 423

3-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewFigure 3

Strany 424 - Group Policies

29-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationNote If you

Strany 425 - Default Group Policy

29-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationThe key pai

Strany 426 - Configuring Group Policies

29-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 29 Configuring Certificates Certificate ConfigurationFor more in

Strany 427

PART 4System Administration

Strany 429

CHAPTER30-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0130Managing System AccessThis chapter describes how to access the securit

Strany 430

30-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Allowing SSH AccessSet the timeout from

Strany 431

30-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Allowing SSH AccessThe security applian

Strany 432

30-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Allowing HTTPS Access for ASDMThe passw

Strany 433

30-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

Strany 434

3-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewNote tha

Strany 435

30-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

Strany 436

30-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

Strany 437

30-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

Strany 438

30-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System A

Strany 439

30-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

Strany 440 - Configuring Users

30-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

Strany 441 - Configuring Specific Users

30-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

Strany 442 - Configuring User Attributes

30-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

Strany 443

30-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

Strany 444

30-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Authenticating and Authorizing System

Strany 445

ContentsiiiCisco Security Appliance Command Line Configuration GuideOL-6721-01Monitoring Security Contexts 5-8Viewing Context Information 5-8Viewing R

Strany 446 - Configuring Users

3-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewFor tran

Strany 447

30-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 30 Managing System Access Configuring a Login BannerConfiguring

Strany 448 - Configuring AAA Addressing

CHAPTER31-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0131Managing Software, Licenses, and ConfigurationsManaging LicensesWhen y

Strany 449 - Configuring DHCP Addressing

31-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Installing App

Strany 450

31-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Installing App

Strany 451 - Summary of the Configuration

31-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

Strany 452 - Configuring Interfaces

31-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

Strany 453 - Outside Interface

31-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

Strany 454 - Creating a Transform Set

31-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

Strany 455 - Defining a Tunnel Group

31-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 31 Managing Software, Licenses, and Configurations Downloading an

Strany 456 - Step 3 Save your changes

CHAPTER32-1Cisco Security Appliance Command Line Configuration GuideOL-6721-0132Monitoring and TroubleshootingThis chapter describes how to monitor an

Strany 457

3-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewShared I

Strany 458

32-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Monitoring the Security Applian

Strany 459 - Configuring LAN-to-LAN VPNs

32-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Monitoring the Security Applian

Strany 460

32-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

Strany 461

32-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

Strany 462 - Configuring an ACL

32-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

Strany 463

32-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

Strany 464

32-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

Strany 465 - Step 2 Save your changes

32-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security Ap

Strany 466

32-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

Strany 467 - Configuring Certificates

32-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

Strany 468 - About Key Pairs

3-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewFigure 3

Strany 469 - About CRLs

32-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

Strany 470 - Certificate Configuration

32-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

Strany 471 - Configuring Key Pairs

32-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 32 Monitoring and Troubleshooting Troubleshooting the Security A

Strany 472 - Configuring Trustpoints

A-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXAFeature Licenses and SpecificationsThis appendix describes the feature

Strany 473

A-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications Platform Feature LicensesTa

Strany 474 - Obtaining Certificates

A-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications Platform Feature LicensesMa

Strany 475

A-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications VPN SpecificationsVPN Speci

Strany 476 - [ certificate data omitted ]

A-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications VPN SpecificationsCryptogra

Strany 477

A-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix A Feature Licenses and Specifications VPN Specifications

Strany 478

B-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXBSample ConfigurationsThis appendix illustrates and describes a number o

Strany 479

3-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Security Context OverviewCascadin

Strany 480 - [ PKCS12 data omitted ]

B-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 1: Multiple Mode Firewall With Ou

Strany 481

B-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 1: Multiple Mode Firewall With Ou

Strany 482

B-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 1: Multiple Mode Firewall With Ou

Strany 483 - System Administration

B-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 2: Single Mode Firewall Using Sam

Strany 484

B-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 2: Single Mode Firewall Using Sam

Strany 485 - Managing System Access

B-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

Strany 486 - Allowing SSH Access

B-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

Strany 487 - Changing the Login Password

B-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

Strany 488

B-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 3: Shared Resources for Multiple

Strany 489

B-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

Strany 490

3-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Enabling or Disabling Multiple C

Strany 491

B-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

Strany 492

B-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

Strany 493

B-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

Strany 494

B-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

Strany 495

B-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix B Sample Configurations Example 4: Multiple Mode, Transparent Fi

Strany 496

C-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXCUsing the Command-Line InterfaceThis appendix describes how to use the

Strany 497

C-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Command Modes and PromptsComma

Strany 498

C-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Syntax FormattingSyntax Format

Strany 499 - Recovering from a Lockout

C-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Command HelpCommand HelpHelp i

Strany 500 - Configuring a Login Banner

C-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Command Output PagingTo use th

Strany 501 - Configurations

3-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Enabling or Disabling Multiple C

Strany 502 - Viewing Files in Flash Memory

C-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Text Configuration FilesText C

Strany 503

C-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Text Configuration FilesLine O

Strany 504

C-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix C Using the Command-Line Interface Text Configuration Files

Strany 505

D-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01APPENDIXDAddresses, Protocols, and PortsThis appendix provides a quick reference

Strany 506 - Backing Up the Configuration

D-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv4 Addresses and Subnet Masks

Strany 507

D-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv4 Addresses and Subnet Masks

Strany 508

D-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv4 Addresses and Subnet Masks

Strany 509 - Using SNMP

D-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesIPv6 AddressesIPv

Strany 510

D-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesNote Two colons (

Strany 511 - Enabling SNMP

D-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesGlobal AddressThe

Strany 512 - Testing Your Configuration

3-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 3 Enabling Multiple Context Mode Enabling or Disabling Multiple C

Strany 513

D-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesUnspecified Addre

Strany 514

D-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesFigure D-1 IPv6 M

Strany 515

D-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports IPv6 AddressesThe following re

Strany 516

D-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports Protocols and ApplicationsProt

Strany 517 - Performing Password Recovery

D-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports TCP and UDP PortsTCP and UDP P

Strany 518

D-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports TCP and UDP Portsh323 TCP 172

Strany 519 - Other Troubleshooting Tools

D-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports Local Ports and ProtocolsLocal

Strany 520 - Common Problems

D-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports ICMP TypesICMP TypesTable D-7

Strany 521

D-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Appendix D Addresses, Protocols, and Ports ICMP Types13 timestamp-request

Strany 522

GL-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01GLOSSARY Numerics3DESSee DES.AAAAAuthentication, authorization, and accounting.

Strany 523 - Platform Feature Licenses

CHAPTER4-1Cisco Security Appliance Command Line Configuration GuideOL-6721-014Configuring Ethernet Settings and SubinterfacesThis chapter describes ho

Strany 524 - Platform Feature Licenses

GlossaryGL-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01ARPAddress Resolution Protocol. A low-level TCP/IP protocol that maps a

Strany 525

GlossaryGL-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01certificateA signed cryptographic object that contains the identity of

Strany 526 - VPN Specifications

GlossaryGL-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01CTIQBEComputer Telephony Interface Quick Buffer Encoding. A protocol us

Strany 527 - Cryptographic Standards

GlossaryGL-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01DNDistinguished Name. Global, authoritative name of an entry in the OSI

Strany 528 - VPN Specifications

GlossaryGL-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Ffailover, failover modeFailover lets you configure two security applia

Strany 529 - Sample Configurations

GlossaryGL-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01GSMGlobal System for Mobile Communication. A digital, mobile, radio sta

Strany 530

GlossaryGL-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01IIANAInternet Assigned Number Authority. Assigns all port and protocol

Strany 531

GlossaryGL-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01inspection engineThe security appliance inspects certain application-le

Strany 532

GlossaryGL-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01IPSecIP Security. A framework of open standards that provides data con

Strany 533

GlossaryGL-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01MmaskA 32-bit mask that shows how an Internet address is divided into

Strany 534 - Figure B-2 Example 2

4-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 4 Configuring Ethernet Settings and Subinterfaces Configuring Subi

Strany 535

GlossaryGL-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01NN2H2A third-party, policy-oriented filtering application that works w

Strany 536 - Figure B-3 Example 3

GlossaryGL-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01OSPFOpen Shortest Path First. OSPF is a routing protocol for IP networ

Strany 537

GlossaryGL-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01PKCS12A standard for the transfer of PKI-related data, such as private

Strany 538

GlossaryGL-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01protocol, protocol literalsA standard that defines the exchange of pac

Strany 539

GlossaryGL-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01RLLAReserved Link Local Address. Multicast addresses range from 224.0.

Strany 540

GlossaryGL-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01SSAsecurity association. An instance of security policy and keying mat

Strany 541

GlossaryGL-18Cisco Security Appliance Command Line Configuration GuideOL-6721-01SIPSession Initiation Protocol. Enables call handling sessions, partic

Strany 542

GlossaryGL-19Cisco Security Appliance Command Line Configuration GuideOL-6721-01Static PATStatic Port Address Translation. Static PAT is a static addr

Strany 543

GlossaryGL-20Cisco Security Appliance Command Line Configuration GuideOL-6721-01transparent firewall mode A mode in which the security appliance is no

Strany 544

GlossaryGL-21Cisco Security Appliance Command Line Configuration GuideOL-6721-01VVLANVirtual LAN. A group of devices on one or more LANs that are conf

Strany 545 - APPENDIX

4-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 4 Configuring Ethernet Settings and Subinterfaces Configuring Subi

Strany 546 - Command Modes and Prompts

GlossaryGL-22Cisco Security Appliance Command Line Configuration GuideOL-6721-01XX.509A widely used standard for defining digital certificates. X.509

Strany 547 - Command Completion

IN-1Cisco Security Appliance Command Line Configuration GuideOL-6721-01INDEXSymbols/bits subnet masks D-3?command stringC-4help C-4AAAAaccounting16-10

Strany 548 - Filtering show Command Output

IndexIN-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01authenticationFTP16-2HTTP 16-2network access 16-1overview 10-2Telnet 16-2w

Strany 549 - Adding Comments

IndexIN-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01configuration modeaccessing2-2prompt C-2contextsresource usage5-9See secur

Strany 550 - Text Configuration Files

IndexIN-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01enableaccessing2-2EntrustCA server support30-4ESP security protocol 23-2es

Strany 551 - Passwords

IndexIN-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01H.323troubleshooting21-28, 21-29help, command line C-4HMAC hashing method

Strany 552 - Text Configuration Files

IndexIN-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01overview 23-3policies, configuring 23-4See also IKEJJava appletsfiltering1

Strany 553

IndexIN-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01MPLSLDP13-12router-id 13-12TDP 13-12multicast traffic 12-9multiple mode, e

Strany 554 - Subnet Masks

IndexIN-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01dead interval 8-8default route 8-13displaying update packet pacing 8-14ena

Strany 555 - Determining the Subnet Mask

IndexIN-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01privileged modeaccessing2-2prompt C-2privilege leveluser, setting25-27prom

Strany 556 - Class B-Size Network Address

ContentsivCisco Security Appliance Command Line Configuration GuideOL-6721-01Monitoring OSPF 8-15Restarting the OSPF Process 8-15Configuring RIP 8-16R

Strany 557 - IPv6 Addresses

4-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 4 Configuring Ethernet Settings and Subinterfaces Configuring Subi

Strany 558 - IPv6 Address Types

IndexIN-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01routingOSPF8-16other protocols 13-3RIP 8-17RS-232 cableSee failover11-4RS

Strany 559 - Link-Local Address

IndexIN-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01SSHauthentication31-5concurrent connections 31-2login 31-3RSA key 31-2use

Strany 560 - Multicast Address

IndexIN-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01overview 22-1static entry 22-2data flow 12-12DHCP packets, allowing 13-3g

Strany 561 - Anycast Address

IndexIN-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01VoIPproxy servers21-43troubleshooting 21-28VPNClient, IPSec attributes23-

Strany 562 - IPv6 Address Prefixes

IndexIN-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01

Strany 563 - Protocols and Applications

CHAPTER5-1Cisco Security Appliance Command Line Configuration GuideOL-6721-015Adding and Managing Security ContextsThis chapter describes how to confi

Strany 564 - TCP and UDP Ports

5-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Configuring a Security Con

Strany 565 - TCP and UDP Ports

5-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Configuring a Security Con

Strany 566 - Local Ports and Protocols

5-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Configuring a Security Con

Strany 567 - ICMP Types

5-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Removing a Security Contex

Strany 568 - ICMP Types

5-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Changing the Security Cont

Strany 569 - Numerics

5-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Reloading a Security Conte

Strany 570 - Glossary

5-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Monitoring Security Contex

Strany 571

5-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Monitoring Security Contex

Strany 572

ContentsvCisco Security Appliance Command Line Configuration GuideOL-6721-01Verifying the IPv6 Configuration 9-5The show ipv6 interface Command 9-5The

Strany 573

5-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 5 Adding and Managing Security Contexts Monitoring Security Conte

Strany 574

CHAPTER6-1Cisco Security Appliance Command Line Configuration GuideOL-6721-016Configuring Interface ParametersThis chapter describes how to configure

Strany 575

6-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Configuring the Interface• NAT

Strany 576

6-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Configuring the InterfaceThe ph

Strany 577

6-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Allowing Communication Between

Strany 578

6-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Allowing Communication Between

Strany 579

6-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 6 Configuring Interface Parameters Allowing Communication Between

Strany 580

CHAPTER7-1Cisco Security Appliance Command Line Configuration GuideOL-6721-017Configuring Basic SettingsThis chapter describes how to configure basic

Strany 581

7-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the HostnameSetting the Hostn

Strany 582

7-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Date and TimeSetting the

Strany 583

ContentsviCisco Security Appliance Command Line Configuration GuideOL-6721-01The Failover and State Links 11-3Failover Link 11-3State Link 11-4Active/

Strany 584

7-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Date and TimeThe offset v

Strany 585

7-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Management IP Address for

Strany 586

7-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 7 Configuring Basic Settings Setting the Management IP Address for

Strany 587

CHAPTER8-1Cisco Security Appliance Command Line Configuration GuideOL-6721-018Configuring IP Routing and DHCP ServicesThis chapter describes how to co

Strany 588

8-2Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Static and

Strany 589

8-3Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfigu

Strany 590

8-4Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPF• Confi

Strany 591

8-5Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFEnablin

Strany 592

8-6Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFAdding

Strany 593

8-7Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFThe fol

Strany 594

ContentsviiCisco Security Appliance Command Line Configuration GuideOL-6721-01Failover Configuration Examples 11-44Cable-Based Active/Standby Failover

Strany 595

8-8Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfigu

Strany 596

8-9Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFUsually

Strany 597

8-10Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPF

Strany 598

8-11Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfig

Strany 599

8-12Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFConfig

Strany 600

8-13Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFGenera

Strany 601

8-14Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFLoggin

Strany 602

8-15Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring OSPFMonito

Strany 603

8-16Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring RIPConfigu

Strany 604

8-17Cisco Security Appliance Command Line Configuration GuideOL-6721-01Chapter 8 Configuring IP Routing and DHCP Services Configuring Multicast

Komentáře k této Příručce

Žádné komentáře