CiscoPedia
Empowering the Internet Generation

Networking

Command:

ip inspect name


Mode:

Router(config)#

Syntax:

ip inspect name inspection-name protocol [alert {on | off}] [audit-trail {on | off}] [timeout seconds]

no ip inspect name [inspection-name protocol]


Syntax Description:

inspection-name

Name of inspection defined protocol

protocol

A protocol keyword listed in the Table A.

alert

For each inspected protocol, the generation of alert messages can be set on or off.

audit-trail

For each inspected protocol, audit trail can be set on or off.

timeout

To override the global TCP or User Datagram Protocol idle timeouts for the specified protocol, specify the number of seconds for a different idle timeout.

 

Table A: Protocol Keywords

Protocol

protocol Keyword

Transport-Layer Protocols

 

TCP

tcp

UDP

udp

Application-Layer Protocols

 

CU-SeeMe

cuseeme

FTP

ftp

Java

http

H.323

h323

Microsoft NetShow

netshow

UNIX R commands (rlogin, rexec, rsh)

rcmd

RealAudio

realaudio

RPC

rpc

SMTP

smtp

SQL*Net

sqlnet

StreamWorks

streamworks

TFTP

tftp

VDOLive

vdolive


Command Description:

To define a set of inspection rules, use the ip inspect name command in global configuration mode.


Example:

The following examples directs the router to inspect ftp traffic:

Router(config)#ip inspect name  mycbac1  ftp

© Cisco Systems, Inc. 2001, 2002, 2003
World Wide Education