1-14
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Connection Settings
Monitoring Connection Settings
Monitoring Connection Settings
This section includes the following topics:
• Monitoring TCP State Bypass, page 1-14
Monitoring TCP State Bypass
To monitor TCP state bypass, perform one of the following tasks:
Configuration Examples for Connection Settings
This section includes the following topics:
• Configuration Examples for Connection Limits and Timeouts, page 1-15
• Configuration Examples for TCP State Bypass, page 1-15
• Configuration Examples for TCP Normalization, page 1-15
set connection advanced-options
tcp-map-name
Example:
hostname(config-pmap-c)# set connection
advanced-options tcp_map1
Customizes the TCP normalizer. See the “Customizing the TCP
Normalizer with a TCP Map” section on page 1-6 to create a TCP
map.
set connection advanced-options
tcp-state-bypass
Example:
hostname(config-pmap-c)# set connection
advanced-options tcp-state-bypass
Enables TCP state bypass.
Step 6
service-policy policymap_name {global |
interface interface_name}
Example:
hostname(config)# service-policy
tcp_bypass_policy outside
Activates the policy map on one or more interfaces. global applies
the policy map to all interfaces, and interface applies the policy
to one interface. Only one global policy is allowed. You can
override the global policy on an interface by applying a service
policy to that interface. You can only apply one policy map to
each interface.
Command Purpose
Command Purpose
show conn
If you use the show conn command, the display for connections that use
TCP state bypass includes the flag “b.”
To Next Page
Loading...
Need help?
General
