Cisco IOS XE, Руководство по настройке

Страница: 54 / 358

Configuring ISG Control Policies
How to Configure an ISG Control Policy
8
Configuring a Control Policy Map
A control policy map contains one or more control policy rules that associate a control class with one or
more actions. Perform this task to configure a control policy map.
Note The actions that can be configured in a policy rule depend on the type of event that is specified by the
class type control command. For example, if the account-logoff event is specified, the only action that
can be configured in that policy rule is service. The procedure in this section shows all actions that can
be configured in a policy map.
Step 19
match source-ip-address ip-address subnet-mask
Example:
Router(config-control-classmap)# match
source-ip-address 10.10.10.10 255.255.255.255
(Optional) Creates a condition that evaluates true if a
subscriber’s source IP address matches the specified IP
address.
Step 20
match timer {timer-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match timer
TIMERA
(Optional) Creates a condition that evaluates true upon
expiry of a specified policy timer.
Step 21
match tunnel-name {tunnel-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match
tunnel-name regexp L.*
(Optional) Creates a condition that evaluates true if a
subscriber’s virtual private dialup network (VPDN) tunnel
name matches the specified tunnel name.
Step 22
match unauthenticated-domain {domain-name |
regexp regular-expression}
Example:
Router(config-control-classmap)# match
unauthenticated-domain example.com
(Optional) Creates a condition that evaluates true if a
subscriber’s unauthenticated domain name matches the
specified domain name.
Step 23
match unauthenticated-username {username |
regexp regular-expression}
Example:
Router(config-control-classmap)# match
unauthenticated-username regexp examplename1
(Optional) Creates a condition that evaluates true if a
subscriber’s unauthenticated username matches the
specified username.
Step 24
match vrf {vrf-name | regexp
regular-expression}
Example:
Router(config-control-classmap)# match vrf
regexp examplename2
(Optional) Creates a condition that evaluates true if a
subscriber’s VPN routing and forwarding (VRF) matches
the specified VRF.
Command or Action Purpose