Chapter 4 Configuring Class Maps and Policy Maps
Configuring Layer 3 and Layer 4 Class Maps
4-26
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
When you create a class map, you will enter class map configuration mode. To
classify network traffic passing through the ACE, include one or more of the
following commands to configure the match criteria for the class map:
•
description
—See the
“Defining a Class Map Description”
section
•
match access-list
—See the
“Defining Access-List Match Criteria”
section
•
match any—
See the
“Defining Match Any Criteria”
•
match destination-address
—See the
“Defining Destination IP Address and
Subnet Mask Match Criteria”
section
•
match port
—See the
“Defining TCP/UDP Port Number or Port Range
Match Criteria”
section
•
match source-address
—See the
“Defining the Source IP Address and
Subnet Mask Match Criteria”
section
•
match virtual-address
—See the
“Defining the VIP Address Match Criteria”
section
Following these guidelines when creating a class map to define a Layer 3 and
Layer 4 match classification:
•
You can include only one
match any
command within a class map and you
cannot combine the
match any
command with other types of
match
commands in a class map since the other match criteria will be ignored.
•
You may combine multiple
match access-list
,
match source-address
,
match destination-address
, and
match port
commands in a class map.
•
You can include multiple
match virtual-address
commands within a class
map. The
match virtual-address
command, however, cannot be combined
with the other types of
match
commands in a class map. This command is
intended to define a 3-tuple flow of VIP address, protocol, and port as
matching criteria for server load balancing.
