Cisco PIX 525 Specifikace stáhnout pdf (Strana 382)

100

101

21-56

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 21 Applying Application Layer Protocol Inspection

Managing SNMP Inspection

The following command applies the inbound_policy to the all the security appliance interfaces:

hostname(config)# service-policy inbound_policy global

The following example identifies SNMP traffic, defines an SNMP map, defines a policy, enables SNMP

inspection, and applies the policy to the outside interface:

Example 21-11 Configuring SNMP Application Inspection

hostname(config)# access-list snmp_acl permit tcp any any eq 161

hostname(config)# access-list snmp_acl permit tcp any any eq 162

hostname(config)# class-map snmp-port

hostname(config-cmap)# match access-list snmp_acl

hostname(config-cmap)# exit

hostname(config)# snmp-map inbound_snmp

hostname(config-snmp-map)# deny version 1

hostname(config-snmp-map)# exit

hostname(config)# policy-map inbound_policy

hostname(config-pmap)# class snmp-port

hostname(config-pmap-c)# inspect snmp inbound_snmp

hostname(config-pmap-c)# exit

To enable strict SNMP application inspection for all interfaces, enter the global parameter in place of

interface outside.

1 2 ... 377 378 379 380 381 382 383 384 385 386 387 ... 603 604

Komentáře k této Příručce

Žádné komentáře

Cisco PIX 525 Specifikace Strana 382

Komentáře k této Příručce