R E V I E W D R A F T - C I S C O C O N F I D E N T I A L
Chapter 9 Configuring the XML Interface
Configuring HTTP and HTTPS Management Traffic Services
9-14
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
Creating and Configuring a Class Map
To create a Layer 3 and Layer 4 class map to classify the HTTP or HTTPS
management traffic that can be received by the ACE, use the
class-map type
management
configuration command. This command allows network
management traffic by identifying the incoming IP protocols that the ACE can
receive and the client source host IP address and subnet mask as the matching
criteria. A class map of
type management
defines the allowed network traffic as
a form of management security for protocols such as HTTP and HTTPS.
A class map can have multiple
match
commands in a class map. You can
configure class maps to define multiple HTTP or HTTPS management protocol or
source IP address
match
commands in a group that you then associate with a
traffic policy. The
match-all
and
match-any
keywords determine how the ACE
evaluates multiple match statements operations when multiple match criteria exist
in a class map.
The syntax of this command is:
class-map type management
[
match-all
|
match-any
]
map_name
The keywords, arguments, and options are:
•
match-all | match-any
—(Optional) Determines how the ACE evaluates
Layer 3 and Layer 4 network traffic when multiple match criteria exist in a
class map. The class map is considered a match if the
match
commands meet
one of the following conditions:
–
match-all
—All of the match criteria listed in the class map match the
network traffic class in the class map.
–
match-any
—Only one of the match criteria listed in the class map
matches the network traffic class in the class map.
The default setting is to meet all of the match criteria (
match-all
) in a class
map.
•
map_name
—Name assigned to the class map. Enter an unquoted text string
with no spaces and a maximum of 64 alphanumeric characters. The class
name is used for both the class map and to configure a policy for the class in
the policy map.