Chapter 4 Configuring Class Maps and Policy Maps
Class Map and Policy Map Configuration Quick Start
4-22
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
5. (Optional) Create and configure a Layer 7 application inspection policy map
that enables the deep packet inspection of the HTTP protocol.
host1/Admin(config)# policy-map type inspect http all-match
HTTP_INSPECT_L7_POLICY
host1/Admin(config-pmap-ins-http)# description HTTP protocol
deep
inspection of incoming traffic
host1/Admin(config-pmap-ins-http)# class H
TTP_INSPECT_L7_CLASS
host1/Admin(config-pmap-ins-http-c)# permi
t log
6. (Optional) Create and configure a Layer 7 policy map that enables FTP
command inspection.
host1/Admin(config) # policy-map type inspect ftp first-match
FTP_INSPECTION_L7_POLICY
host1/Admin(config-pmap-ftp-ins)# descript
ion FTP command
inspection of incoming traffic
host1/Admin(config-pmap-ftp-ins)# class FT
P_INSPECT_L7_CLASS
host1/Admin(config-pmap-ftp-ins-c)# match request-method
stou
host1/Admin(config-pmap-ftp-ins-c)# deny
Table 4-6 Layer 7 Policy Map Configuration Quick Start (continued)
Task and Command Example
To Next Page
Loading...
