Chapter 4 Configuring Class Maps and Policy Maps
Configuring Layer 3 and Layer 4 Class Maps
4-36
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
The arguments and options are:
•
match-all | match-any
—(Optional) Determines how the ACE evaluates
Layer 3 and Layer 4 network management traffic when multiple match
criteria exist in a class map. The class map is considered a match if the
match
commands meet one of the following conditions:
–
match-all
—(Default) All of the match criteria listed in the class map
match the network traffic class in the class map (typically, the
match
commands of different types).
–
match-any
—Only one of the match criteria listed in the class map
matches the network traffic class in the class map (typically, the
match
commands of the same type).
•
map_name
—Specifies the name assigned to the class map. Enter an unquoted
text string with no spaces and a maximum of 64 alphanumeric characters.
When you use the
class-map type management
command, you will access class
map management configuration mode.
To classify the network management traffic received by the ACE, include one or
more of the following commands to configure the match criteria for the class map:
•
description
—See the
“Defining a Class Map Description”
section
•
match protocol
—See the
“Defining Network Management Access Match
Criteria”
section
You may include multiple
match protocol
commands in a class map.
For example, to permit ICMP packets from IP address 172.16.10.0 255.255.255.0
and allow global SSH access to the ACE, enter:
host1/Admin(config)#
class-map type management match-any
MGMT-ACCESS_CLASS
host1/Admin(config-cmap-mgmt)#
match protocol icmp source-address
172.16.10.0 255.255.255.0
host1/Admin(config-cmap-mgmt)#
match protocol ssh any
To remove a Layer 3 and Layer 4 network management class map from the ACE,
enter:
host1/Admin(config)#
no class-map type management match-any
MGMT-ACCESS_CLASS
