R E V I E W D R A F T - C I S C O C O N F I D E N T I A L
9-17
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
Chapter 9 Configuring the XML Interface
Configuring HTTP and HTTPS Management Traffic Services
•
source-address—
Specifies a client source host IP address and subnet mask
as the network traffic matching criteria. As part of the classification, the ACE
implicitly obtains the destination IP address from the interface on which you
apply the policy map.
•
ip_address
—Source IP address of the client. Enter the IP address in
dotted-decimal notation (for example, 192.168.11.1).
•
mask
—The subnet mask of the client in dotted-decimal notation (for
example, 255.255.255.0).
For example, to specify that the class map allows HTTPS access to the ACE,
enter:
(config)#
class-map type management XML-HTTPS-ALLOW_CLASS
(config-cmap-mgmt)#
match protocol xml-https source-address
192.168.10.1 255.255.0.0
To deselect the specified network management protocol match criteria from the
class map, enter:
host1/Admin(config-cmap-mgmt)#
no match protocol https source-address
192.168.10.1 255.255.0.0
Creating a Layer 3 and Layer 4 Policy Map
A Layer 3 and Layer 4 policy map defines the actions executed on HTTP or
HTTPS management traffic that matches the specified classifications. This
section contains the following topics:
•
Creating a Layer 3 and Layer 4 Policy Map for Network Management Traffic
Received by the ACE
•
Specifying a Layer 3 and Layer 4 Traffic Class with the Traffic Policy
•
Specifying Layer 3 and Layer 4 Policy Actions
Creating a Layer 3 and Layer 4 Policy Map for Network Management Traffic
Received by the ACE
To configure a Layer 3 and Layer 4 policy map that permits the management
traffic received by the ACE use the
policy-map type management
command in
configuration mode. The ACE executes the action for the first matching
classification. The ACE does not execute any additional actions.
