2-7
Cisco 4700 Series Application Control Engine Appliance Administration Guide
OL-11157-01
Chapter 2 Enabling Remote Access to the ACE
Configuring Remote Network Management Traffic Services
To remove the description from the class map, enter:
host1/Admin(config-cmap-mgmt)#
no description
Defining Remote Network Management Protocol Match Criteria
To configure the class map to identify the remote network access management
protocols that can be received by the ACE, use the
match protocol
command in
class map configuration mode. You configure the associated policy map to permit
access to the ACE for the specified management protocols. As part of the network
management access traffic classification, you also specify either a client source
host IP address and subnet mask as the matching criteria or instruct the ACE to
allow any client source address for the management traffic classification.
The syntax of this command is:
[
line_number
]
match protocol
{
http
|
https
|
icmp
|
snmp
|
ssh
|
telnet |
xml-https
} {
any
|
source-address
ip_address mask
}
•
line_number
—(Optional) Assists you in editing or deleting individual
match
commands. Enter an integer from 2 to 255 as the line number. You can enter
no
line_number
to delete long
match
commands instead of entering the entire
line. The line numbers do not dictate a priority or sequence for the
match
statements.
•
http
—Specifies the Hypertext Transfer Protocol (HTTP). The use of the
HTTP management protocol for XML usage is described in
Chapter 9,
Configuring the XML Interface
.
•
https
—Specifies secure (SSL) Hypertext Transfer Protocol (HTTP) for
connectivity with the Device Manager GUI on the ACE.
•
icmp
—Specifies Internet Control Message Protocol messages to the ACE.
The configuration of the ICMP management protocol is described in the
“Enabling ICMP Messages to the ACE”
section.
•
snmp
—Specifies the Simple Network Management Protocol (SNMP). The
use of the SNMP management protocol is described in
Chapter 8,
Configuring SNMP
.
•
ssh
—Specifies a Secure Shell (SSH) remote connection to the ACE. The ACE
supports the SSH remote shell functionality provided in SSH Version 1 and
supports DES and 3DES ciphers. The configuration of SSH sessions is
described in the
“Configuring SSH Management Sessions”
section.
