Cisco Systems ASA5515K9, ASA 5500 Monitoring Modular Policy Framework, Configuration Examples for Modular Policy Framework

32-18
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter32 Configuring a Service Policy Using the Modular Polic y Framework
Monitoring Modular Policy Framework
Detailed Steps
Examples
For example, the following command enables the inbound_policy policy map on the outside interface:
hostname(config)# service-policy inbound_policy interface outside
The following commands disable the default global policy, and enables a new one called
new_global_policy on all other ASA interfaces:
hostname(config)# no service-policy global_policy global
hostname(config)# service-policy new_global_policy global
Monitoring Modular Policy Framework
To monitor Modular Policy Framework, enter the following command:
Configuration Examples for Modular Policy Framework
This section includes several Modular Policy Framework examples and includes the following topics:
•Applying Inspection and QoS Policing to HTTP Traffic, page32-19
•Applying Inspection to HTTP Traffic Globally, page32-19
•Applying Inspection and Connection Limits to HTTP Traffic to Specific Servers, page32-20
•Applying Inspection to HTTP Traffic with NAT, page32-21
Command Purpose
service-policy policy_map_name interface
interface_name
Example:
hostname(config)# service-policy
inbound_policy interface outside
Creates a service policy by associating a policy map with an interface.
service-policy policy_map_name global
Example:
hostname(config)# service-policy
inbound_policy global
Creates a service policy that applies to all interfaces that do not have a
specific policy.
Command Purpose
show service-policy Displays the service policy statistics.