インスペクションルールの作成と適用

1812j#config t
Enter configuration commands, one per line.  End with CNTL/Z.

■ルールを作成
1812j(config)#ip inspect log drop-pkt
1812j(config)#ip inspect name FIREWALL tcp alert on audit-trail off router-traffic
1812j(config)#ip inspect name FIREWALL udp alert on audit-trail off router-traffic
1812j(config)#ip inspect name FIREWALL smtp alert on audit-trail on
1812j(config)#ip inspect name FIREWALL ssh alert on audit-trail on
1812j(config)#ip inspect name FIREWALL http alert on audit-trail on
1812j(config)#ip inspect name FIREWALL dns alert on audit-trail on
1812j(config)#ip inspect name FIREWALL pop3s audit-trail on
1812j(config)#ip inspect name FIREWALL syslog alert on audit-trail on
1812j(config)#ip inspect name FIREWALL ntp alert on audit-trail on
1812j(config)#ip inspect name FIREWALL snmp alert on audit-trail on
1812j(config)#ip inspect name FIREWALL snmptrap alert on audit-trail on

■f0に適用
1812j(config)#int f0
1812j(config-if)#ip inspect FIREWALL in
1812j(config)#end
1812j#
*Feb  5 00:32:48.768: %SYS-5-CONFIG_I: Configured from console by console
1812j#copy run start
Destination filename [startup-config]?
Building configuration...
[OK]
1812j#