Cisco ACE-4710-K9

REVIEW DRAFT - CISCO CONFIDENTIAL
Chapter 9 Configuring the XML Interface
Configuring HTTP and HTTPS Management Traffic Services
9-14
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
Creating and Configuring a Class Map
To create a Layer 3 and Layer 4 class map to classify the HTTP or HTTPS
management traffic that can be received by the ACE, use the class-map type
management configuration command. This command allows network
management traffic by identifying the incoming IP protocols that the ACE can
receive and the client source host IP address and subnet mask as the matching
criteria. A class map of type management defines the allowed network traffic as
a form of management security for protocols such as HTTP and HTTPS.
A class map can have multiple mat
ch commands in a class map. You can
configure class maps to define multiple HTTP or HTTPS management protocol or
source IP address match commands in a group that you then associate with a
traffic policy. The match-all and match-any keywords determine how the ACE
evaluates multiple match statements operations when multiple match criteria exist
in a class map.
The syntax of this command is:
class-map type management [mat
ch-all | match-any] map_name
The keywords, arguments, and options are:
• match-all | match-any—(Optional) Determines how the ACE evaluates
Layer 3 and Layer 4 network traffic when mul
tiple match criteria exist in a
class map. The class map is considered a match if the match commands meet
one of the following conditions:
– match-all —All of the match criteria listed in the class map match the
network traffic class in the class map.
– match-any—Only one of the match criteria listed in the class map
matches the network traffic class in the class map.
The default setting is to meet all of the match criteria (match-all)
in a class
map.
• map_name—Name assigned to the class map. Enter an unquoted text string
with no spaces and a maximum of 64 alphanumeric characters. The class
name is used for both the class map and to configure a policy for the class in
the policy map.