REVIEW DRAFT - CISCO CONFIDENTIAL
9-17
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
Chapter 9 Configuring the XML Interface
Configuring HTTP and HTTPS Management Traffic Services
• source-address—Specifies a client source host IP address and subnet mask
as the network traffic matching criteria. As part of the classification, the ACE
implicitly obtains the destination IP address from the interface on which you
apply the policy map.
• ip_address—Source IP address of the client. Enter the IP address in
dotted-decimal notation (for example, 192.168.11.1).
• mask—The subnet mask of the client in dotted-decimal notation (for
example, 255.255.255.0).
For example, to specify that the clas
s map allows HTTPS access to the ACE,
enter:
(config)# class-map type management XML-HTTPS-ALLOW_CLASS
(config-cmap-mgmt)# match protoco
l xml-https source-address
192.168.10.1 255.255.0.0
To deselect the specified network management protocol match criteria from the
class map, enter:
host1/Admin(config-cmap-mgmt)# no match protocol https source-address
192.168.10.1 255.255.0.0
Creating a Layer 3 and Layer 4 Policy Map
A Layer 3 and Layer 4 policy map defines the actions executed on HTTP or
HTTPS management traffic that matches the specified classifications. This
section contains the following topics:
• Creating a Layer 3 and Layer 4 Policy Map for Network Management Traffic
Received by the ACE
• Specifying a Layer 3 and Layer 4 Traffic Class with the Traffic Policy
• Specifying Layer 3 and Layer 4 Policy Actions
Creating a Layer 3 and Layer 4 Policy Map for Network Management Traffic
Received by the ACE
To configure a Layer 3 and Layer 4 policy map that permits the management
traffic received by the ACE use the policy-map type management command in
configuration mode. The ACE executes the action for the first matching
classification. The ACE does not execute any additional actions.
To Next Page
Loading...
