Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 380 / 742

20-4
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Chapter 20 Using Modular Policy Framework
Identifying Traffic (Layer 3/4 Class Map)
Note See the “Incompatibility of Certain Feature Actions” section on page 20-17 for more information about
the special match default-inspection-traffic command used in the default class map.
Identifying Traffic (Layer 3/4 Class Map)
A Layer 3/4 class map identifies Layer 3 and 4 traffic to which you want to apply actions. You can create
multiple Layer 3/4 class maps for each Layer 3/4 policy map.
This section includes the following topics:
• Default Class Maps, page 20-4
•
Creating a Layer 3/4 Class Map for Through Traffic, page 20-5
Default Class Maps
The configuration includes many internally-created default class maps, including a default Layer 3/4
class map that the FWSM uses in the default global policy. It is called
inspection_default and matches
the default inspection traffic:
class-map inspection_default
match default-inspection-traffic
Note
See the “Incompatibility of Certain Feature Actions” section on page 20-17 for more information about
the special match default-inspection-traffic command used in the default class map.
Another class map that exists in the default configuration is called class-default, and it matches all
traffic:
class-map class-default
match any
This class map appears at the end of all Layer 3/4 policy maps and essentially tells the FWSM to not
perform any actions on all other traffic. You can use the class-default class map if desired, rather than
making your own
match any class map.
Default class maps also include inspection class maps.
To view all default class maps, as well as any user-created class maps, enter the show running-config
all class-map command.
Maximum Class Maps
The maximum number of class maps of all types is 255 in single mode or per context in multiple mode.
Class maps include the following types:
•
Layer 3/4 class maps
• Inspection class maps
•
Regular expression class maps
•
match commands used directly underneath an inspection policy map