Defining Tcp/Udp Port Number Or Port Range Match Criteria - Cisco ACE-4710-K9 Administration Manual

Configuring Layer 3 and Layer 4 Class Maps

Defining TCP/UDP Port Number or Port Range Match Criteria

Cisco 4700 Series Application Control Engine Appliance Administration Guide
4-30
A single class map can have multiple match destination-address commands.
You may combine multiple match destination-address, match access-list,
match source-address, and match port commands in a class map.
For example, to specify that the ACE is to match on destination IP address
172.16.20.1 255.255.0.0, enter:
host1/Admin(config)# class-map L4_DEST_IP_CLASS
host1/Admin(config-cmap)# match destination-address 172.16.20.1
255.255.0.0
To clear the destination IP address and subnet mask match criteria from the class
map, enter:
host1/Admin(config-cmap)# no match destination-address 172.16.20.1
255.255.0.0
To specify a TCP or UDP port number or port range as the Layer 3 and Layer 4
network traffic matching criteria, use the match port command in class map
configuration mode.
The syntax of this command is:
[line_number] match port {tcp | udp} {any | {eq port_number} | range
port1 port2}
The keywords, arguments, and options are:
line_number—(Optional) Line number to identify individual match
•
commands. Enter an integer from 2 to 255 as the line number. You can enter
no line_number to delete long match commands instead of entering the entire
line. The line numbers do not dictate a priority or sequence for the match
statements.
tcp | udp—Specifies the protocol, TCP or UDP.
•
any—Specifies a wildcard value for the TCP or UDP port number. With any
•
used in place of either the eq or range values, packets from any incoming port
match.
Chapter 4 Configuring Class Maps and Policy Maps
OL-11157-01