Cisco Systems ASA 5510 Network Router User Manual


  Open as PDF
of 2086
 
50-12
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 50 Configuring Inspection for Management Application Protocols
RADIUS Accounting Inspection
Message ID Criterion Values—Specifies the numeric identifier for the message that you want to
match. The valid range is 1 to 255. By default, all valid message IDs are allowed.
Value—Specifies whether value is an exact match or a range.
Equals—Enter a value.
Range—Enter a range of values.
Action—Drop packet or limit rate (pps).
Log—Enable or disable.
Message Length Criterion Values—Lets you change the default for the maximum message length
for the UDP payload that is allowed.
Minimum value—Specifies the minimum number of bytes in the UDP payload. The range is
from 1 to 65536.
Maximum value—Specifies the maximum number of bytes in the UDP payload. The range is
from 1 to 65536.
Action—Drop packet.
Log—Enable or disable.
Version Criterion Values—Specifies the GTP version for messages that you want to match. The valid
range is 0-255. Use 0 to identify Version 0 and 1 to identify Version 1. Version 0 of GTP uses port
3386, while Version 1 uses port 2123. By default all GTP versions are allowed.
Value—Specifies whether value is an exact match or a range.
Equals—Enter a value.
Range—Enter a range of values.
Action—Drop packet.
Log—Enable or disable.
Modes
The following table shows the modes in which this feature is available:
RADIUS Accounting Inspection
This section describes the IM inspection engine. This section includes the following topics:
RADIUS Accounting Inspection Overview, page 50-13
Select RADIUS Accounting Map, page 50-13
Add RADIUS Accounting Policy Map, page 50-14
RADIUS Inspect Map, page 50-14
RADIUS Inspect Map Host, page 50-15
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
••••