Cisco 2800 Series, Руководство пользователя

Страница: 70 / 266

Secured Branch Router Configuration Example
Verify
6
OL-6329-01
!---Specify the Cisco Secure ACS, in this case a server.
!---Set the authentication encryption key used for all communications
!---between the access server and the daemon. This key must match the key
!---used on the daemon.
tacacs-server host 192.168.101.119
tacacs-server directed-request
tacacs-server key cisco
!
.
.
.
end
Verify
This section provides information you can use to confirm your configuration is working properly:
• Commands for Verifying Firewall Websense URL Filtering, page 6
•
Commands for Verifying Cisco IOS Firewall Authentication Proxy, page 7
• Commands for Verifying Context-Based Access Control, page 7
•
Commands for Verifying Cisco IOS Intrusion Prevention System, page 8
Tip Certain show commands are supported by the Output Interpreter Tool , which allows you to view an
analysis of show command output. You must have an account on Cisco.com. If you do not have an
account or have forgotten your username or password, click Cancel at the login dialog box and follow
the instructions that appear.
Commands for Verifying Firewall Websense URL Filtering
•
show ip urlfilter cache —Displays the maximum number of entries that can be cached into the cache
table and the number of entries and the destination IP addresses that are cached into the cache table.
Router# show ip urlfilter cache
Maximum number of cache entries: 0
Number of entries cached: 0
--------------------------------------------------------
IP address Age Time since last hit
(In seconds) (In seconds)
--------------------------------------------------------
•
show ip urlfilter config —Displays the configured vendor servers, including the size of the cache,
the maximum number of outstanding requests, and the allow mode state.
Router# show ip urlfilter config
Websense URL Filtering is ENABLED
Primary Websense server configurations
=========================================
Websense server IP address Or Host Name: 192.168.1.116
Websense server port: 15868
Websense retransmission time out: 6 (in seconds)
Websense number of retransmission: 2