![background image](http://html.mh-extra.com/html/cisco/ios-xe/ios-xe_configuration-manual_64936054.webp)
Configuring ISG Control Policies
How to Configure an ISG Control Policy
8
Configuring a Control Policy Map
A control policy map contains one or more control policy rules that associate a control class with one or
more actions. Perform this task to configure a control policy map.
Note
The actions that can be configured in a policy rule depend on the type of event that is specified by the
class type control command. For example, if the account-logoff event is specified, the only action that
can be configured in that policy rule is service. The procedure in this section shows all actions that can
be configured in a policy map.
Step 19
match source-ip-address ip-address subnet-mask
Example:
Router(config-control-classmap)# match
source-ip-address 10.10.10.10 255.255.255.255
(Optional) Creates a condition that evaluates true if a
subscriber’s source IP address matches the specified IP
address.
Step 20
match timer {timer-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match timer
TIMERA
(Optional) Creates a condition that evaluates true upon
expiry of a specified policy timer.
Step 21
match tunnel-name {tunnel-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match
tunnel-name regexp L.*
(Optional) Creates a condition that evaluates true if a
subscriber’s virtual private dialup network (VPDN) tunnel
name matches the specified tunnel name.
Step 22
match unauthenticated-domain {domain-name |
regexp regular-expression}
Example:
Router(config-control-classmap)# match
unauthenticated-domain example.com
(Optional) Creates a condition that evaluates true if a
subscriber’s unauthenticated domain name matches the
specified domain name.
Step 23
match unauthenticated-username {username |
regexp regular-expression}
Example:
Router(config-control-classmap)# match
unauthenticated-username regexp examplename1
(Optional) Creates a condition that evaluates true if a
subscriber’s unauthenticated username matches the
specified username.
Step 24
match vrf {vrf-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match vrf
regexp examplename2
(Optional) Creates a condition that evaluates true if a
subscriber’s VPN routing and forwarding (VRF) matches
the specified VRF.
Command or Action
Purpose
Summary of Contents for IOS XE
Page 14: ...About Cisco IOS XE Software Documentation Additional Resources and Documentation Feedback xii ...
Page 28: ...Using the Command Line Interface in Cisco IOS XE Software Additional Information xiv ...
Page 36: ...Intelligent Services Gateway Features Roadmap 8 ...
Page 46: ...Overview of ISG Feature Information for the Overview of ISG 10 ...
Page 70: ...Configuring ISG Control Policies Feature Information for ISG Control Policies 24 ...
Page 136: ...Configuring MQC Support for IP Sessions Feature Information for MQC Support for IP Sessions 8 ...
Page 224: ...Configuring ISG Subscriber Services Feature Information for ISG Subscriber Services 20 ...
Page 344: ...Service Gateway Interface Feature Information for Service Gateway Interface 8 ...