Cisco ACE-4710-K9 User Manual

Chapter 4 Configuring Class Maps and Policy Maps
Configuring Layer 7 Class Maps
4-38
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
• source-address—Specifies a client source host IP address and subnet mask
as the network traffic matching criteria. As part of the classification, the ACE
implicitly obtains the destination IP address from the interface on which you
apply the policy map.
• ip_address—Source IP address of the client. Enter the IP address in
dotted-decimal notation (for example, 192.168.11.1).
• mask—The subnet mask of the client in dotted-decimal notation (for example,
255.255.255.0).
For example, to specify that the clas
s map allows SSH access to the ACE from
source IP address 192.168.10.1 255.255.255.0, enter:
host1/Admin(config)# class-map type management SSH-ALLOW_CLASS
host1/Admin(config-cmap-mgmt)# ma
tch protocol ssh source-address
192.168.10.1 255.255.255.0
To deselect the specified network management protocol match criteria from the
class map, enter:
host1/Admin(config-cmap-mgmt)# no match protocol ssh source-address
192.168.10.1 255.255.255.0
Configuring Layer 7 Class Maps
A Layer 7 class map contains match criteria that classifies specific Layer 7
protocol information. The match criteria enables the ACE to:
• Perform server load balancing based on an HTTP cookie, an HTTP header, an
HTTP URL, protocol header fields, or source IP addresses
• Perform deep packet inspection of the HTTP protocol
• Perform FTP request command filtering
For more information about the role of clas
s maps in the ACE, see the “Class Map
and Policy Map Overview” section.
This section contains the following topics:
• Defining Layer 7 Classifications for HTTP Server Load Balancing
• Defining Layer 7 Classifications for HTTP Deep Packet Inspection
• Defining Layer 7 Classifications for FTP Command Inspection

Cisco ACE-4710-K9 Specifications

General

Brand	Cisco
Model	ACE-4710-K9
Category	Network Router
Language	English