Chapter 4 Configuring Class Maps and Policy Maps
Configuring Layer 3 and Layer 4 Class Maps
4-36
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
The arguments and options are:
• match-all | match-any—(Optional) Determines how the ACE evaluates
Layer 3 and Layer 4 network management traffic when multiple match
crit
eria exist in a class map. The class map is considered a match if the match
commands meet one of the following conditions:
–
match-all—(Default) All of the match criteria listed in the class map
match the network traffic class in the class map (typically, the match
commands of different types).
–
match-any—Only one of the match criteria listed in the class map
matches the network traffic class in the class map (typically, the match
commands of the same type).
• map_name—Specifies the name assigned to the class map. Enter an unquoted
text string with no spaces and a maximum of 64 alphanumeric characters.
When you use the class-map type management command, you w
ill access class
map management configuration mode.
To classify the network management traffic received by the ACE, include one or
mo
re of the following commands to configure the match criteria for the class map:
• description—See the “Defining a Class Map Description” section
• match protocol—See the “Defining Network Management Access Match
Criteria” section
You may include multiple mat
ch protocol commands in a class map.
For example, to permit ICMP packets from IP address 172.16.10.0 255.255.255.0
and a
llow global SSH access to the ACE, enter:
host1/Admin(config)# class-map type management match-any
MGMT-ACCESS_CLASS
host1/Admin(config-cmap-mgmt)# ma
tch protocol icmp source-address
172.16.10.0 255.255.255.0
host1/Admin(config-cmap-mgmt)# ma
tch protocol ssh any
To remove a Layer 3 and Layer 4 network management class map from the ACE,
enter:
host1/Admin(config)# no class-map type management match-any
MGMT-ACCESS_CLASS
To Next Page
Loading...
