ASA 5505- get rid of class-map
in [Cisco]
|
From: Rob on 12 Mar 2010 11:58 I have an ASA 5505 and I want to get rid of these part of commands, class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect netbios inspect rsh inspect rtsp inspect skinny inspect esmtp inspect sqlnet inspect sunrpc inspect tftp inspect sip inspect xdmcp ! service-policy global_policy globa I tried different clear, NO commands but getting different error indicating they are "in use" can someone help please. Rob
From: bod43 on 13 Mar 2010 03:49 On 12 Mar, 16:58, "Rob" <R...(a)hotmail.com> wrote: > I have an ASA 5505 and I want to get rid of these part of commands, > class-map inspection_default > match default-inspection-traffic > ! > ! > policy-map type inspect dns preset_dns_map > parameters > message-length maximum 512 > policy-map global_policy > class inspection_default > inspect dns preset_dns_map > inspect ftp > inspect h323 h225 > inspect h323 ras > inspect netbios > inspect rsh > inspect rtsp > inspect skinny > inspect esmtp > inspect sqlnet > inspect sunrpc > inspect tftp > inspect sip > inspect xdmcp > ! > service-policy global_policy globa > > I tried different clear, NO commands but getting different error indicating > they are "in use" > > can someone help please. From your config fragment it seems that it is "in use" in the policy-map. So:- policy-map global_policy no class inspection_default exit !! not sure if this is necessary on ASA no class-map inspection_default may be what you need.
From: Rob on 15 Mar 2010 11:36 Thanks. "bod43" <Bod43(a)hotmail.co.uk> wrote in message news:18e2af52-694c-4399-8200-7d4c4cc42b0c(a)o30g2000yqb.googlegroups.com... On 12 Mar, 16:58, "Rob" <R...(a)hotmail.com> wrote: > I have an ASA 5505 and I want to get rid of these part of commands, > class-map inspection_default > match default-inspection-traffic > ! > ! > policy-map type inspect dns preset_dns_map > parameters > message-length maximum 512 > policy-map global_policy > class inspection_default > inspect dns preset_dns_map > inspect ftp > inspect h323 h225 > inspect h323 ras > inspect netbios > inspect rsh > inspect rtsp > inspect skinny > inspect esmtp > inspect sqlnet > inspect sunrpc > inspect tftp > inspect sip > inspect xdmcp > ! > service-policy global_policy globa > > I tried different clear, NO commands but getting different error > indicating > they are "in use" > > can someone help please. From your config fragment it seems that it is "in use" in the policy-map. So:- policy-map global_policy no class inspection_default exit !! not sure if this is necessary on ASA no class-map inspection_default may be what you need.
|
Pages: 1 Prev: IP SLA issue Next: ASA/PIX inside SIP Phone to outside SIP provider |