Cisco ACE-4710-K9 Administration Manual page 150

Configuring Layer 3 and Layer 4 Class Maps
The arguments and options are:
•
•
When you use the class-map type management command, you will access class
map management configuration mode.
To classify the network management traffic received by the ACE, include one or
more of the following commands to configure the match criteria for the class map:
•
•
You may include multiple match protocol commands in a class map.
For example, to permit ICMP packets from IP address 172.16.10.0 255.255.255.0
and allow global SSH access to the ACE, enter:
host1/Admin(config)# class-map type management match-any
MGMT-ACCESS_CLASS
host1/Admin(config-cmap-mgmt)# match protocol icmp source-address
172.16.10.0 255.255.255.0
host1/Admin(config-cmap-mgmt)# match protocol ssh any
To remove a Layer 3 and Layer 4 network management class map from the ACE,
enter:
host1/Admin(config)# no class-map type management match-any
MGMT-ACCESS_CLASS
Cisco 4700 Series Application Control Engine Appliance Administration Guide
4-36
match-all | match-any—(Optional) Determines how the ACE evaluates
Layer 3 and Layer 4 network management traffic when multiple match
criteria exist in a class map. The class map is considered a match if the match
commands meet one of the following conditions:
match-all—(Default) All of the match criteria listed in the class map
–
match the network traffic class in the class map (typically, the match
commands of different types).
match-any—Only one of the match criteria listed in the class map
–
matches the network traffic class in the class map (typically, the match
commands of the same type).
map_name—Specifies the name assigned to the class map. Enter an unquoted
text string with no spaces and a maximum of 64 alphanumeric characters.
description—See the
match protocol—See the
Criteria" section
Chapter 4 Configuring Class Maps and Policy Maps
"Defining a Class Map Description"
"Defining Network Management Access Match
section
OL-11157-01