8-16
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 8 Inspection for Voice and Video Protocols
MGCP Inspection
hostname(config-pmap)# class inspection_default
To edit the default policy, or to use the special inspection_default class map in a new policy, specify
inspection_default
for the
name
. Otherwise, you are specifying the class you created earlier in this
procedure.
Step 4
Configure MGCP inspection.
inspect mgcp
[
mgcp_policy_map
]
Where
mgcp_policy_map
is the optional MGCP inspection policy map. For information on creating the
MGCP inspection policy map, see
Configuring an MGCP Inspection Policy Map for Additional
.
Example:
hostname(config-class)# no inspect mgcp
hostname(config-class)# inspect mgcp mgcp-map
Note
If you are editing the default global policy (or any in-use policy) to use a different MGCP
inspection policy map, you must remove the MGCP inspection with the
no inspect mgcp
command, and then re-add it with the new MGCP inspection policy map name.
Step 5
If you are editing an existing service policy (such as the default global policy called global_policy), you
are done. Otherwise, activate the policy map on one or more interfaces.
service-policy
policymap_name
{
global
|
interface
interface_name
}
Example:
hostname(config)# service-policy global_policy global
The
global
keyword applies the policy map to all interfaces, and
interface
applies the policy to one
interface. Only one global policy is allowed. You can override the global policy on an interface by
applying a service policy to that interface. You can only apply one policy map to each interface.
Configuring MGCP Timeout Values
You can configure several MGCP global timeout values on the
Configuration > Firewall > Advanced
> Global Timeouts
page. You can set the interval for inactivity after which an MGCP media connection
is closed (default is 5 minutes). You can also set the timeout for PAT xlates (30 seconds).
The
timeout mgcp command
lets you set the interval for inactivity
after which an MGCP media
connection is closed. The default is 5 minutes.
The
timeout mgcp-pat
command lets you set the timeout for PAT xlates. Because MGCP does not have
a keepalive mechanism, if you use non-Cisco MGCP gateways (call agents), the PAT xlates are torn
down after the default timeout interval, which is 30 seconds.
Содержание ASA 5512-X
Страница 5: ...P A R T 1 Service Policies and Access Control ...
Страница 6: ......
Страница 50: ...3 14 Cisco ASA Series Firewall CLI Configuration Guide Chapter 3 Access Rules History for Access Rules ...
Страница 51: ...P A R T 2 Network Address Translation ...
Страница 52: ......
Страница 126: ...5 28 Cisco ASA Series Firewall CLI Configuration Guide Chapter 5 NAT Examples and Reference DNS and NAT ...
Страница 127: ...P A R T 3 Application Inspection ...
Страница 128: ......
Страница 255: ...P A R T 4 Connection Settings and Quality of Service ...
Страница 256: ......
Страница 288: ...12 14 Cisco ASA Series Firewall CLI Configuration Guide Chapter 12 Quality of Service History for QoS ...
Страница 303: ...P A R T 5 Advanced Network Protection ...
Страница 304: ......
Страница 339: ...P A R T 6 ASA Modules ...
Страница 340: ......
Страница 398: ...17 28 Cisco ASA Series Firewall CLI Configuration Guide Chapter 17 ASA CX Module History for the ASA CX Module ...