Chapter 2 Enabling Remote Access to the ACE
Configuring Remote Network Management Traffic Services
2-4
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
Configuring Remote Network Management Traffic
Services
You configure rules for remote access to the ACE through the use of class maps,
policy maps, and service policies. The following items summarize the role of each
function in configuring remote network management access to the ACE:
•
Class map—Provides the remote network traffic match criteria to permit
traffic based on:
–
Remote access network management protocols (SSH, Telnet, or ICMP)
–
Client source IP address
•
Policy map—Enables remote network management access for a traffic
classification that matches the criteria listed in the class map.
•
Service policy—Activates the policy map and attaches the traffic policy to an
interface or globally on all interfaces.
This section provides an overview on creating a class map, policy map, and
service policy for remote network access. For detailed information on creating
class maps, policy maps, and service policies, see
Chapter 4, Configuring Class
Maps and Policy Maps
.
8.
If you have global administrator privileges, use the
ssh key
command to
generate the SSH private key and the corresponding public key for use by
the SSH server. There is only one host-key pair. For example, to generate an
RSA1 key pair in the Admin context, enter:
host1/Admin(config)#
ssh key rsa1 1024
generating rsa1 key
.....
generated rsa1 key
9.
(Optional) Save your configuration changes to Flash memory.
host1/Admin(config)#
exit
host1/Admin#
copy running-config startup-config
Table 2-1
Remote Network Management Configuration
Quick Start (continued)
Task and Command Example
