Filter
Top Products
47-51
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 47 Configuring Inspection of Basic Internet Protocols
NetBIOS Inspection
By default, the Enforcement tab is selected and the following options are selected:
• Permit only known extension headers
• Enforce extension header order
When Permit only known extension headers is selected, the ASA verifies the IPv6 extension header.
When Enforce extension header order is selected, the order of IPv6 extension headers as defined in the
RFC 2460 Specification is enforced.
When these options are specified and an error is detected, the ASA drops the packet and logs the action.
Step 4 To configuring matching in the extension header, click the Header Matches tab.
Step 5 Click Add to add a match. The Add IPv6 Inspect dialog box appears.
Step 6 Select a criterion for the match.
When you select any of the following criteria, you can configure to the ASA to drop or log when an IPv6
packet arrives mathcing the criterion:
• Authentication (AH) header
• Destination Options header
• Encapsulating Security Payload (ESP) header
• Fragment header
• Hop-by-Hop Options header
When Routing header is selected and an IPv6 routing extension header is detected, the ASA takes the
specified action when the routing type is matched or a number when the specified routing type range is
matched.
When Header count is selected and an IPv6 routing extension header is detected, the ASA takes the
specified action when number of IPv6 extension headers in the packet is more than the specified value.
When Routing header address count is selected, and an IPv6 routing extension header is detected, the
ASA takes the specified action when the number of addresses in the type 0 routing header is more than
the value you configure.
Step 7 Click OK to save the match criterion.
Step 8 Click OK to save the IPv6 inspect map.
NetBIOS Inspection
This section describes the IM inspection engine. This section includes the following topics:
• NetBIOS Inspection Overview, page 47-52
• Select NETBIOS Map, page 47-52
• “NetBIOS Inspect Map” section on page 47-52
• “Add/Edit NetBIOS Policy Map” section on page 47-53