Cisco PIX 525 Specifikace stáhnout pdf (Strana 362)

100

101

21-36

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing MGCP Inspection

Configuring and Enabling MGCP Inspection

Use the mgcp-map command to identify a specific map for defining the parameters for MGCP

inspection. When you enter this command, the system enters a configuration mode that lets you enter the

different commands used for defining the specific map. After defining the MGCP map, you enter the

inspect mgcp command to enable the map. You use Modular Policy Framework to apply the inspect

command to a defined class of traffic and to apply the policy to a specific interface.

To enable and configure MGCP application inspection, perform the following steps:

Step 1 Define access control lists to identify the two ports required for receiving MGCP traffic. For example,

the following commands identify the default ports for MGCP inspection.

hostname(config)# access-list mgcp_acl permit udp any any eq 2427

hostname(config)# access-list mgcp_acl permit udp any any eq 2727

hostname(config)# class-map mgcp-traffic

hostname(config-cmap)# match access-list mgcp_acl

Name the traffic class by entering the following command in global configuration mode:

hostname(config)# class-map

class_map_name

Replace class_map_name with the name of the traffic class, for example:

hostname(config)# class-map mgcp_port

When you enter the class-map command, the CLI enters the class map configuration mode, and the

prompt changes, as in the following example:

hostname(config-cmap)#

Step 2 In the class map configuration mode, define the match command, as in the following example:

hostname(config-cmap)# match port udp eq 2427

hostname(config-cmap)# exit

hostname(config)#

Step 3 (Optional) Create a MGCP map by entering the following command:

hostname(config)# mgcp-map

policy_map_name

Note An MGCP map is only required if the network has multiple call agents and gateways for which

the firewall has to open pinholes.

Replace mgcp_map_name with the name of the MGCP map, for example:

hostname(config)# mgcp-map inbound_mgcp

The system enters MGCP map configuration mode and the CLI prompt changes as in the following

example:

hostname(config-mgcp-map)#

Step 4 Configure the call agents, as in the following example:

hostname(config-mgcp-map)# call-agent 10.10.11.5 101

hostname(config-mgcp-map)# call-agent 10.10.11.6 101

hostname(config-mgcp-map)# call-agent 10.10.11.7 102

hostname(config-mgcp-map)# call-agent 10.10.11.8 102

1 2 ... 357 358 359 360 361 362 363 364 365 366 367 ... 603 604

Komentáře k této Příručce

Žádné komentáře

Cisco PIX 525 Specifikace Strana 362

Komentáře k této Příručce