Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 1298 / 2164

1-14
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Cisco Unified Presence
Monitoring Cisco Unified Presence
Monitoring Cisco Unified Presence
Debugging is similar to debugging TLS proxy for IP Telephony. You can enable TLS proxy debug flags
along with SSL syslogs to debug TLS proxy connection problems.
For example, use the following commands to enable TLS proxy-related debug and syslog output only:
hostname(config)# debug inspect tls-proxy events
hostname(config)# debug inspect tls-proxy errors
hostname(config)# logging enable
hostname(config)# logging timestamp
hostname(config)# logging list loglist message 711001
hostname(config)# logging list loglist message 725001-725014
hostname(config)# logging list loglist message 717001-717038
hostname(config)# logging buffer-size 1000000
hostname(config)# logging buffered loglist
hostname(config)# logging debug-trace
For information about TLS proxy debugging techniques and sample output, see Monitoring the TLS
Proxy, page 1-15.
Enable the debug sip command for SIP inspection engine debugging. See the command reference.
Step 4
hostname(config-cmap)# exit
Exits from Class Map configuration mode.
Step 5
hostname(config)# policy-map type inspect sip
policy_map_name
Example:
hostname(config)# policy-map type inspect sip
sip_inspect
Defines special actions for SIP inspection
application traffic.
Step 6
hostname(config-pmap)# parameters
! SIP inspection parameters
Specifies the parameters for SIP inspection.
Parameters affect the behavior of the inspection
engine.
The commands available in parameters
configuration mode depend on the application.
Step 7
hostname(config-pmap)# exit Exits from Policy Map configuration mode.
Step 8
hostname(config)# policy-map name
Example:
hostname(config)# policy-map global_policy
Configure the policy map and attach the action to the
class of traffic.
Step 9
hostname(config-pmap)# class classmap_ name
Example:
hostname(config-pmap)# class ent_x_to_y
Assigns a class map to the policy map so that you
can assign actions to the class map traffic.
Where classmap_name is the name of the SIP class
map.
Step 10
hostname(config-pmap)# inspect sip sip_map tls-proxy
proxy_name
hostname(config-pmap)# inspect sip sip_inspect
tls-proxy ent_x_to_y
Enables TLS proxy for the specified SIP inspection
session.
Step 11
hostname(config-pmap)# exit
Exits from Policy Map configuration mode.
Step 12
hostname(config)# service-policy policy_map_name
global
Example:
hostname(config)# service-policy global_policy
global
Enables the service policy for SIP inspection for all
interfaces.
Where name for the policy-map command is the
name of the global policy map.
Command Purpose