test security-policy-match command

mali77palo — Tue, 01 Nov 2016 16:07:02 GMT

Trying to utilize the "test security-policy-match" command to accomplish what I normally accomplish on the Cisco ASA using the packet tracer.

On the firewall
1- I have multiple interfaces configured with multiple zones/VR's

2- I need to test access to couple of destinations on a specific port

3- I am trying to use the any command in there but it returns an error

test security-policy-match protocol 6 from any to any destination 172.21.10.183 destination-port 8443

Is there a way for me to test that access outbound to the destination from all the zones or will I need to do them all one by one specifying the zone and then source IP?

I'm guessing I'll need to do it like this to get precise results

test security-policy-match protocol 6 from zone source #.#.#.# to zone destination 172.21.10.183 destination-port 8443

topic test security-policy-match command in Automation/API Discussions

test security-policy-match command