Cisco IOS XE Intelligent Services User Manual

Configuring ISG Control Policies
How to Configure an ISG Control Policy
8
Configuring a Control Policy Map
A control policy map contains one or more control policy rules that associate a control class with one or
more actions. Perform this task to configure a control policy map.
Note The actions that can be configured in a policy rule depend on the type of event that is specified by the
class type control command. For example, if the account-logoff event is specified, the only action that
can be configured in that policy rule is service. The procedure in this section shows all actions that can
be configured in a policy map.
Step 19
match source-ip-address ip-address subnet-mask
Example:
Router(config-control-classmap)# match
source-ip-address 10.10.10.10 255.255.255.255
(Optional) Creates a condition that evaluates true if a
subscriber’s source IP address matches the specified IP
address.
Step 20
match timer {timer-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match timer
TIMERA
(Optional) Creates a condition that evaluates true upon
expiry of a specified policy timer.
Step 21
match tunnel-name {tunnel-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match
tunnel-name regexp L.*
(Optional) Creates a condition that evaluates true if a
subscriber’s virtual private dialup network (VPDN) tunnel
name matches the specified tunnel name.
Step 22
match unauthenticated-domain {domain-name |
regexp regular-expression}
Example:
Router(config-control-classmap)# match
unauthenticated-domain example.com
(Optional) Creates a condition that evaluates true if a
subscriber’s unauthenticated domain name matches the
specified domain name.
Step 23
match unauthenticated-username {username |
regexp regular-expression}
Example:
Router(config-control-classmap)# match
unauthenticated-username regexp examplename1
(Optional) Creates a condition that evaluates true if a
subscriber’s unauthenticated username matches the
specified username.
Step 24
match vrf {vrf-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match vrf
regexp examplename2
(Optional) Creates a condition that evaluates true if a
subscriber’s VPN routing and forwarding (VRF) matches
the specified VRF.
Command or Action Purpose

Cisco IOS XE Intelligent Services Specifications

General

Brand	Cisco
Model	IOS XE Intelligent Services
Category	Gateway
Language	English