-
-
39About this Guide
-
47Introduction to the Security Appliance
-
-
53Chapter 2 Getting Started
-
64CHAPTER 3 Enabling Multiple Context Mode
-
-
75Configuring Switch Ports and Vlan Interfaces for the Cisco Asa 5505 Adaptive Security
-
75Appliance
-
89Configuring Ethernet Settings, Redundant Interfaces, and Subinterfaces
-
-
100CHAPTER 6 Adding and Managing Security Contexts6-1
-
- 100Resource Limits
- 101Default Class
- 102Class Members
-
-
-
-
121Chapter 7 Configuring Interface Parameters
-
129Chapter 8 Configuring Basic Settings
-
135Configuring Ip Routing
-
- 141Configuring OSPF
- 142OSPF Overview
- 142Enabling OSPF
- 152Monitoring OSPF
-
- 153Configuring RIP
- 156Monitoring RIP
-
- 164Monitoring EIGRP
-
-
- 167Backup Routes
-
-
-
169Configuring Dhcp, Ddns, and Wccp Services
-
-
181Configuring Multicast Routing
-
191Chapter 12 Configuring Ipv6
-
-
203Configuring Aaa Servers and the Local Database
- 203AAA Overview
- 204About Accounting
-
-
-
-
- 208User Profiles
- 209Fallback Support
-
-
-
-
-
-
221CHAPTER 14 Configuring Failover14-1
-
-
-
- 223Failover Link
-
-
-
- 235Regular Failover
-
-
-
-
-
- 240Prerequisites
-
-
- 247Prerequisites
-
-
-
- 269Forcing Failover
-
- 271Debug Messages
- 271Snmp
-
-
-
-
Advertisement
Quick Links
Download this manual
See also:
Manual
Cisco Security Appliance Command Line
Configuration Guide
For the Cisco ASA 5500 Series and Cisco PIX 500 Series
Software Version 8.0(1)
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Customer Order Number: N/A, Online only
Text Part Number: OL-12172-03
Advertisement
Table of Contents
-
-
39About this Guide
-
47Introduction to the Security Appliance
-
-
53Chapter 2 Getting Started
-
64CHAPTER 3 Enabling Multiple Context Mode
-
-
75Configuring Switch Ports and Vlan Interfaces for the Cisco Asa 5505 Adaptive Security
-
75Appliance
-
89Configuring Ethernet Settings, Redundant Interfaces, and Subinterfaces
-
-
100CHAPTER 6 Adding and Managing Security Contexts6-1
-
- 100Resource Limits
- 101Default Class
- 102Class Members
-
-
-
-
121Chapter 7 Configuring Interface Parameters
-
129Chapter 8 Configuring Basic Settings
-
135Configuring Ip Routing
-
- 141Configuring OSPF
- 142OSPF Overview
- 142Enabling OSPF
- 152Monitoring OSPF
-
- 153Configuring RIP
- 156Monitoring RIP
-
- 164Monitoring EIGRP
-
-
- 167Backup Routes
-
-
-
169Configuring Dhcp, Ddns, and Wccp Services
-
-
181Configuring Multicast Routing
-
191Chapter 12 Configuring Ipv6
-
-
203Configuring Aaa Servers and the Local Database
- 203AAA Overview
- 204About Accounting
-
-
-
-
- 208User Profiles
- 209Fallback Support
-
-
-
-
-
-
221CHAPTER 14 Configuring Failover14-1
-
-
-
- 223Failover Link
-
-
-
- 235Regular Failover
-
-
-
-
-
- 240Prerequisites
-
-
- 247Prerequisites
-
-
-
- 269Forcing Failover
-
- 271Debug Messages
- 271Snmp
-
-
-
-
Troubleshooting
Also See for Cisco PIX 500 Series
Cisco 500 Series Administration Manual
653 pages
Cisco 500 series Administration Manual
485 pages
Related Manuals for Cisco PIX 500 Series
-
Controller Cisco 521G - Unified IP Phone VoIP Configuration Manual
Wireless express mobility controller (144 pages)
-
Switch Cisco 500 Series Quick Start Manual
500 series stackable managed switches (72 pages)
-
Headsets Cisco Headset 500 Series User Manual
(60 pages)
-
Headsets Cisco 500 Series Administration Manual
(48 pages)
-
Headsets Cisco 521 User Manual
(46 pages)
-
Network Router Cisco 500 Series Safety Information Manual
Cisco systems router regulatory compliance and safety information (42 pages)
-
Headsets Cisco Headset 500 Series Manual
(40 pages)
-
Headsets Cisco Headset 500 Series Manual
(24 pages)
-
Switch Cisco 500 Series Quick Start Manual
Stackable managed switches (21 pages)
-
Headsets Cisco 500 Series Troubleshooting And Maintenance
(15 pages)
-
Wireless Access Point Cisco 500 Series Quick Start Quide
Cisco small business 500 series (13 pages)
-
Telephone Cisco 500 series User Manual
Hosted voip (6 pages)
-
Conference System Cisco 500 Series Datasheet
(5 pages)
Summary of Contents for Cisco PIX 500 Series
- Page 1 Cisco Security Appliance Command Line Configuration Guide For the Cisco ASA 5500 Series and Cisco PIX 500 Series Software Version 8.0(1) Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387)
- Page 2 OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCVP, the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.;...
-
Page 3: Table Of Contents
Sending Traffic to the Content Security and Control Security Services Module Applying QoS Policies Applying Connection Limits and TCP Normalization Enabling Threat Detection Firewall Mode Overview Stateful Inspection Overview VPN Functional Overview Intrusion Prevention Services Functional Overview Security Context Overview Cisco Security Appliance Command Line Configuration Guide OL-12172-03... - Page 4 Management Access to Security Contexts System Administrator Access Context Administrator Access 3-10 Enabling or Disabling Multiple Context Mode 3-10 Backing Up the Single Mode Configuration 3-10 Enabling Multiple Context Mode 3-10 Restoring Single Context Mode 3-11 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 5 Contents Configuring Switch Ports and VLAN Interfaces for the Cisco ASA 5505 Adaptive Security C H A P T E R Appliance Interface Overview Understanding ASA 5505 Ports and Interfaces Maximum Active VLAN Interfaces for Your License Default Interface Configuration...
- Page 6 Allowing Communication Between Interfaces on the Same Security Level Configuring Basic Settings C H A P T E R Changing the Login Password Changing the Enable Password Setting the Hostname Setting the Domain Name Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 7 9-21 Enabling RIP Authentication 9-22 Monitoring RIP 9-22 Configuring EIGRP 9-23 EIGRP Routing Overview 9-23 Enabling and Configuring EIGRP Routing 9-24 Enabling and Configuring EIGRP Stub Routing 9-25 Enabling EIGRP Authentication 9-26 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 8 Configuring a DHCP Server 10-1 Enabling the DHCP Server 10-2 Configuring DHCP Options 10-3 Using Cisco IP Phones with a DHCP Server 10-4 Configuring DHCP Relay Services 10-5 Configuring Dynamic DNS 10-6 Example 1: Client Updates Both A and PTR RRs for Static IP Addresses 10-7 Example 2: Client Updates Both A and PTR RRs;...
- Page 9 Configuring IPv6 Default and Static Routes 12-5 Configuring IPv6 Access Lists 12-6 Configuring IPv6 Neighbor Discovery 12-7 Configuring Neighbor Solicitation Messages 12-7 Configuring Router Advertisement Messages 12-9 Configuring a Static IPv6 Neighbor 12-11 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 10 Using Certificates and User Login Credentials 13-16 Using User Login Credentials 13-16 Using certificates 13-16 Supporting a Zone Labs Integrity Server 13-17 Overview of Integrity Server and Security Appliance Interaction 13-17 Configuring Integrity Server Support 13-18 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 11 14-18 Configuring Failover 14-19 Failover Configuration Limitations 14-19 Configuring Active/Standby Failover 14-19 Prerequisites 14-20 Configuring Cable-Based Active/Standby Failover (PIX 500 Series Security Appliance Only) 14-20 Configuring LAN-Based Active/Standby Failover 14-21 Configuring Optional Active/Standby Failover Settings 14-25 Configuring Active/Active Failover 14-27...
- Page 12 Passing Traffic Not Allowed in Routed Mode 15-7 MAC Address vs. Route Lookups 15-8 Using the Transparent Firewall in Your Network 15-9 Transparent Firewall Guidelines 15-9 Unsupported Features in Transparent Mode 15-10 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 13 Adding an ICMP Type Object Group 16-14 Nesting Object Groups 16-15 Using Object Groups with an Access List 16-16 Displaying Object Groups 16-17 Removing Object Groups 16-17 Adding Remarks to Access Lists 16-17 Cisco Security Appliance Command Line Configuration Guide xiii OL-12172-03...
- Page 14 Using Static NAT 17-26 Using Static PAT 17-27 Bypassing NAT 17-30 Configuring Identity NAT 17-30 Configuring Static Identity NAT 17-31 Configuring NAT Exemption 17-33 NAT Examples 17-34 Overlapping Networks 17-34 Redirecting Ports 17-36 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 15 Filtering URLs and FTP Requests with an External Server 20-4 URL Filtering Overview 20-4 Identifying the Filtering Server 20-4 Buffering the Content Server Response 20-6 Caching Server Addresses 20-6 Filtering HTTP URLs 20-7 Configuring HTTP Filtering 20-7 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 16 Applying Inspection and QoS Policing to HTTP Traffic 21-19 Applying Inspection to HTTP Traffic Globally 21-20 Applying Inspection and Connection Limits to HTTP Traffic to Specific Servers 21-21 Applying Inspection to HTTP Traffic with NAT 21-22 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...
- Page 17 Configuring TCP Normalization 23-11 Configuring Connection Limits and Timeouts 23-14 Connection Limit Overview 23-14 TCP Intercept Overview 23-14 Disabling TCP Intercept for Management Packets for WebVPN Compatibility 23-14 Dead Connection Detection Overview 23-15 Cisco Security Appliance Command Line Configuration Guide xvii OL-12172-03...
- Page 18 C H A P T E R Inspection Engine Overview 25-2 When to Use Application Protocol Inspection 25-2 Inspection Limitations 25-3 Default Inspection Policy 25-3 Configuring Application Inspection 25-5 CTIQBE Inspection 25-10 CTIQBE Inspection Overview 25-10 Cisco Security Appliance Command Line Configuration Guide xviii OL-12172-03...
- Page 19 Configuring H.323 and H.225 Timeout Values 25-42 Verifying and Monitoring H.323 Inspection 25-42 Monitoring H.225 Sessions 25-42 Monitoring H.245 Sessions 25-43 Monitoring H.323 RAS Sessions 25-44 HTTP Inspection 25-44 HTTP Inspection Overview 25-44 Cisco Security Appliance Command Line Configuration Guide OL-12172-03...