Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 426 / 742

22-10
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Chapter 22 Applying Application Layer Protocol Inspection
CTIQBE Inspection
Step 6
To activate the policy map on one or more interfaces, enter the following command:
hostname(config)# service-policy policymap_name { global | interface interface_name }
Where global applies the policy map to all interfaces, and interface applies the policy to one interface.
By default, the default policy map, “global_policy,” is applied globally. Only one global policy is
allowed. You can override the global policy on an interface by applying a service policy to that interface.
You can only apply one policy map to each interface.
CTIQBE Inspection
This section describes how to enable CTIQBE application inspection and change the default port
configuration. This section includes the following topics:
•
CTIQBE Inspection Overview, page 22-10
•
Limitations and Restrictions, page 22-10
•
Enabling and Configuring CTIQBE Inspection, page 22-11
•
Verifying and Monitoring CTIQBE Inspection, page 22-12
•
CTIQBE Sample Configurations, page 22-13
CTIQBE Inspection Overview
The inspect ctiqbe command enables CTIQBE protocol inspection, which supports NAT, PAT, and
bidirectional NAT. This enables Cisco IP SoftPhone and other Cisco TAPI/JTAPI applications to work
successfully with Cisco CallManager for call setup across the FWSM.
TAPI and JTAPI are used by many Cisco VoIP applications. CTIQBE is used by Cisco TSP to
communicate with Cisco CallManager.
Limitations and Restrictions
The following summarizes limitations that apply when using CTIQBE application inspection:
•
CTIQBE application inspection does not support configurations with the alias command.
sunrpc The default class map includes UDP port 111; if you want to
enable Sun RPC inspection for TCP port 111, you need to
create a new class map that matches TCP port 111, add the
class to the policy, and then apply the
inspect sunrpc
command to that class.
tftp —
waas —
xdmcp —
Table 22-2 Protocol Keywords (continued)
Keywords Notes