Cisco ACE-4710-K9

REVIEW DRAFT - CISCO CONFIDENTIAL
Chapter 9 Configuring the XML Interface
Configuring HTTP and HTTPS Management Traffic Services
9-16
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
To remove the description from the class map, enter:
host1/Admin(config-cmap-mgmt)# no description
Defining HTTP and HTTPS Protocol Match Criteria
Use the match protocol command to configure the class map to specify that the
HTTP or HTTPS remote network management protocol can be received by the
ACE. You configure the associated policy map to permit access to ACE for the
specified management protocol. For XML support, a class map of type
management allows IP protocols such as HTTP and HTTPS. As part of the
network management access traffic classification, you also specify either a client
source host IP address and subnet mask as the matching criteria or instruct the
ACE to allow any client source address for the management traffic classification.
You must access the class map configuration mode to specify the match pr
otocol
command.
The syntax of this command is:
[l
ine_number] match protocol {http | xml-https} {any | source-address
ip_address mask}
The keywords, arguments, and options are:
• line_number—(Optional) Allows you to edit or delete individual match
commands. Enter an integer from 2 to 255 as the line number. For example,
you can enter no line_number to delete long match commands instead of
entering the entire line.
• http—Specifies Hypertext Transfer Protocol (HTTP) as transfer protocol to
send and receive XML documents between the ACE and an NMS.
• xml-https—Specifies secure (SSL) Hypertext Transfer Protocol (HTTP) as
transfer protocol to send and receive XML documents between the ACE and
an NMS.
Note The https keyword specifies secure (SSL) Hypertext Transfer Protocol
(HTTP) for connectivity with the Device Manager GUI on the ACE
• any—Specifies any client source address for the management traffic
classification.