Install guide

Software Version 2.7.5 69
Software Version 2.7.5
C613-10454-00 REV A
enable firewall policy debug
Syntax ENAble FIREwall POLIcy[=policy-name]
DEBug={ALL|ARP|HTTP|PACKET|PKT|PROCESS|PROXY|SMTP|
RADius|TCP|UPNP|SIPAlg}
[DEBUGMode={ALL|ERRORcode|MESSage|PARSing|TRAce}]
[IP=ipadd[-ipadd]]
where:
■ ipadd is an IP address in dotted decimal notation
Description The new sipalg option on the debug parameter displays information about the
SIP application layer gateway and packets it processes.
The new debugmode parameter specifies the types of debugging information
to be enabled (Ta ble 19). You can specify a single mode or a comma-separated
list of modes. This parameter is only valid when debug=sipalg. The default is
errorcode + message + parsing.
Table 19: SIP ALG debugging mode options
The ip parameter specifies an IP address or a range of addresses, and is valid
when debug=sipalg. If you specify ip, the firewall only displays debugging
messages for packets whose IP address matches the specified address. The
firewall matches the specified IP address against the source and destination
addresses of packets on both the private and public interfaces. By default, the
firewall displays debugging messages for all IP addresses.
Examples To see how the firewall modifies SIP messages processed by the voip policy, use
the command:
ena fire poli=voip deb=sipa debugm=pars
Option Result
ALL Enables all SIP ALG debugging mode options.
ERRORcode Translates internal SIP ALG error codes into meaningful messages,
displaying any errors encountered during processing.
MESSage Translates each SIP message that is passed to the SIP ALG and displays
its contents line by line. The contents of a SIP message include a SIP
header and may include a Session Description Protocol (SDP) message
body. Each message is displayed first in its unmodified state as it arrives
for processing by the SIP ALG, then in its modified state after processing.
PARSing Displays the steps the firewall takes during the parsing of a SIP message
(header and body) while they are occurring. This includes showing how
the message is modified to facilitate communication across the firewall.
TRAce Displays the names of all the functions that the SIP ALG calls when it
processes a SIP message.