Cisco ASA 5506-X Configuration Manual page 212

RTSP Inspection
Where class_map_name is the name of the class map. The match-all keyword is the default, and
specifies that traffic must match all criteria to match the class map. The match-any keyword
specifies that the traffic matches the class map if it matches at least one of the criteria. The CLI
enters class-map configuration mode, where you can enter one or more match commands.
(Optional) To add a description to the class map, enter the following command:
b.
hostname(config-cmap)# description string
Specify the traffic on which you want to perform actions using one of the following match
c.
commands. If you use a match not command, then any traffic that does not match the criterion in
the match not command has the action applied.
•
•
Step 2 To create an RTSP inspection policy map, enter the following command:
hostname(config)# policy-map type inspect rtsp policy_map_name
hostname(config-pmap)#
Where the policy_map_name is the name of the policy map. The CLI enters policy-map configuration
mode.
(Optional) To add a description to the policy map, enter the following command:
Step 3
hostname(config-pmap)# description string
To apply actions to matching traffic, perform the following steps.
Step 4
Specify the traffic on which you want to perform actions using one of the following methods:
a.
•
•
Specify the action you want to perform on the matching traffic by entering the following command:
b.
hostname(config-pmap-c)# {drop-connection [log] | log | rate-limit message_rate}
The drop-connection keyword drops the packet and closes the connection. This option is available
for URL matching.
The log keyword, which you can use alone or with drop-connection, sends a system log message.
The rate-limit message_rate argument limits the rate of messages per second. This option is
available for request method matching.
You can specify multiple class or match commands in the policy map. For information about the order
of class and match commands, see
Step 5 To configure parameters that affect the inspection engine, perform the following steps:
a. To enter parameters configuration mode, enter the following command:
hostname(config-pmap)# parameters
hostname(config-pmap-p)#
Cisco ASA Series Firewall CLI Configuration Guide
8-20
match [not] request-method method—Matches an RTSP request method. The methods are:
announce, describe, get_parameter, options, pause, play, record, redirect, setup, set_parameter,
teardown.
match [not] url-filter regex {regex_name | class class_name}—Matches the URL against the
specified regular expression or regular expression class.
If you created an RTSP class map, specify it by entering the following command:
hostname(config-pmap)# class class_map_name
hostname(config-pmap-c)#
Specify traffic directly in the policy map using one of the match commands described for RTSP
class maps. If you use a match not command, then any traffic that does not match the criterion
in the match not command has the action applied.
Chapter 8
Defining Actions in an Inspection Policy Map, page
Inspection for Voice and Video Protocols
2-4.