Cisco ASA Series Cli Configuration Manual page 1080

Monitoring Modular Policy Framework
Detailed Steps
Command
service-policy policy_map_name interface
interface_name [fail-close]
Example:
hostname(config)# service-policy
inbound_policy interface outside
service-policy policy_map_name global
[fail-close]
Example:
hostname(config)# service-policy
inbound_policy global
Examples
For example, the following command enables the inbound_policy policy map on the outside interface:
hostname(config)# service-policy inbound_policy interface outside
The following commands disable the default global policy, and enables a new one called
new_global_policy on all other ASA interfaces:
hostname(config)# no service-policy global_policy global
hostname(config)# service-policy new_global_policy global
Monitoring Modular Policy Framework
To monitor Modular Policy Framework, enter the following command:
Command
show service-policy
Configuration Examples for Modular Policy Framework
This section includes several Modular Policy Framework examples and includes the following topics:
•
•
•
•
Cisco ASA Series CLI Configuration Guide
1-18
Purpose
Creates a service policy by associating a policy map with an interface.
Specify the fail-close option to generate a syslog (767001) for IPv6 traffic
that is dropped by application inspections that do not support IPv6 traffic.
By default, syslogs are not generated. For a list of inspections that support
IPv6, see the
Creates a service policy that applies to all interfaces that do not have a
specific policy. Specify the fail-close option to generate a syslog (767001)
for IPv6 traffic that is dropped by application inspections that do not
support IPv6 traffic. By default, syslogs are not generated. For a list of
inspections that support IPv6, see the
page
Purpose
Displays the service policy statistics.
Applying Inspection and QoS Policing to HTTP Traffic, page 1-19
Applying Inspection to HTTP Traffic Globally, page 1-19
Applying Inspection and Connection Limits to HTTP Traffic to Specific Servers, page 1-20
Applying Inspection to HTTP Traffic with NAT, page 1-21
Chapter 1 Configuring a Service Policy Using the Modular Policy Framework
"IPv6 Guidelines" section on page
1-6.
1-6.
"IPv6 Guidelines" section on