Cisco ACE-4710-K9 Administration Manual page 133

Chapter 4 Configuring Class Maps and Policy Maps
Table 4-5
Task and Command Example
1.
2.
3.
4.
5.
OL-11157-01
Layer 3 and Layer 4 Network Management Policy Map
Configuration Quick Start
If you are operating in multiple contexts, observe the CLI prompt to verify
that you are operating in the desired context. If necessary, log directly in to,
or change to, the correct context.
host1/Admin# changeto C1
host1/C1#
The rest of the examples in this table use the Admin context, unless
otherwise specified. For details on creating contexts, see the Cisco 4700
Series Application Control Engine Appliance Virtualization Configuration
Guide.
Enter configuration mode.
host1/Admin# config
Enter configuration commands, one per line. End with CNTL/Z
host1/Admin(config)#
Configure a Layer 3 and Layer 4 policy map that permits specified IP
management traffic to be received by the ACE.
After you configure a policy map, you will enter policy map management
configuration mode.
host1/Admin(config)# policy-map type management first-match
L4_MGMT_POLICY
host1/Admin(config-pmap-mgmt)#
(Optional) Specify a description about the network management traffic
policy map.
host1/Admin(config-pmap-mgmt)# description enable SSH and Telnet
protocols
Allow the IP network management traffic listed in the Layer 3 and Layer 4
class map to be received by the ACE by specifying the permit command in
policy map class configuration mode.
host1/Admin(config-pmap-mgmt)# class TELNET_CLASS
host1/Admin(config-pmap-mgmt-c)# permit
host1/Admin(config-pmap-mgmt-c)# exit
host1/Admin(config-pmap-mgmt)# class SSH_CLASS
host1/Admin(config-pmap-mgmt-c)# permit
host1/Admin(config-pmap-mgmt-c)# exit
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Class Map and Policy Map Configuration Quick Start
4-19