cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1591
Views
0
Helpful
4
Replies

CSM Service Policy

nbean
Level 1
Level 1

I am and novice with CSM and have been trying to figure this out for a week now and can't seem to do it with the documentation.  I am working with CSM 3.2 and am trying to configure a new policy map for an ASA and then apply that policy map to a new service policy.  I have been able to put my class maps under the global policy, but cannot see a way to create a new map.  I am trying to disable inspects for SIP and H.323 for a particular device based on an access list and this is what I have:

class-map CSM_CLASS_MAP_no_sip_1

match access-list CSM_CMAP_ACL_2

class-map CSM_CLASS_MAP_no_h323_ras_1

match access-list CSM_CMAP_ACL_2

class-map CSM_CLASS_MAP_no_h323_h225_1

match access-list CSM_CMAP_ACL_2

policy-map global_policy

class CSM_CLASS_MAP_no_h323_h225_1

inspect h323 h225

class CSM_CLASS_MAP_no_h323_ras_1

inspect h323 ras

class CSM_CLASS_MAP_no_sip_1

inspect sip

This is what I need:

class-map no_h323_h225

match access-list no_inspect

class-map no_sip

match access-list no_inspect

class-map no_h323_ras

match access-list no_inspect

policy-map no_inspect

class no_h323_h225

inspect h323 h225

class no_sip

inspect sip

class no_h323_ras

inspect h323 ras

service-policy no_inspect interface inside

Can anyone provide me with instructions on how to finish this? 

4 Replies 4

nbean
Level 1
Level 1

Can no one help me figure this out?

Hi

Creating a class-map via csm 4.3 is not possible I think.

I have the same problem also and opened a TAC case .

I will inform you

sincerely

Michel Pedersen
Level 1
Level 1

I haven't tested it myself but it looks like you should be able to do this with CSM 4.4sp1 under the Firewall -> Inspection Rules

regards

Michel

Hi Michel

I installed 4.4 sp1 but I did not find any way to create a new map .

this commands worked  at command line:

class-map dynamic-filter_snoop_class or match port udp eq domain.

I thought creating a new map works at this point of CSM , but it didn´t  work

Policy Object Manager --> Maps --> Calls Maps  ( I excepted such a buttom : create new map )

regards Alfred

Review Cisco Networking for a $25 gift card