Chapter 4 Configuring Class Maps and Policy Maps
Configuring Layer 3 and Layer 4 Class Maps
4-30
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
A single class map can have multiple match destination-address commands.
You may combine multiple match destination-address, match access-list,
match source-address, and match port commands in a class map.
For example, to specify that t
he ACE is to match on destination IP address
172.16.20.1 255.255.0.0, enter:
host1/Admin(config)# class-map L4_DEST_IP_CLASS
host1/Admin(config-cmap)# match d
estination-address 172.16.20.1
255.255.0.0
To clear the destination IP address and subnet mask match criteria from the class
map, enter:
host1/Admin(config-cmap)# no match destination-address 172.16.20.1
255.255.0.0
Defining TCP/UDP Port Number or Port Range Match Criteria
To specify a TCP or UDP port number or port range as the Layer 3 and Layer 4
network traffic matching criteria, use the match port command in class map
configuration mode.
The syntax of this command is:
[l
ine_number] match port {tcp | udp} {any | {eq port_number} | range
port1 port2}
The keywords, arguments, and options are:
• line_number—(Optional) Line number to identify individual match
commands. Enter an integer from 2 to 255 as the line number. You can enter
no line_number to delete long match commands instead of entering the entire
line. The line numbers do not dictate a priority or sequence for the match
statements.
• tcp | udp—Specifies the protocol, TCP or UDP.
• any—Specifies a wildcard value for the TCP or UDP port number. With any
used in place of either the eq or range values, packets from any incoming port
match.
To Next Page
Loading...
Need help?
General
