Defining Network Management Access Match Criteria - Cisco ACE-4710-K9 Administration Manual

Chapter 4 Configuring Class Maps and Policy Maps

Defining Network Management Access Match Criteria

OL-11157-01
To configure the class map to identify the network management protocols that can
be received by the ACE, use the match protocol command in class map
management configuration mode. You configure the associated policy map to
permit access to the ACE for the specified management protocols. As part of the
network management access traffic classification, you also specify either a client
source host IP address and subnet mask as the matching criteria or instruct the
ACE to allow any client source address for the management traffic classification.
The syntax of this command is:
[line_number] match protocol {http | https | icmp | snmp | ssh | telnet |
xml-https} {any | source-address ip_address mask}
line_number—(Optional) Assists you in editing or deleting individual match
•
commands. Enter an integer from 2 to 255 as the line number. You can enter
no line_number to delete long match commands instead of entering the entire
line. The line numbers do not dictate a priority or sequence for the match
statements.
http—Specifies the Hypertext Transfer Protocol (HTTP).
•
https—Specifies secure (SSL) Hypertext Transfer Protocol (HTTP) for
•
connectivity with the Device Manager GUI on the ACE.
icmp—Specifies Internet Control Message Protocol messages to the ACE.
•
• snmp—Specifies the Simple Network Management Protocol (SNMP).
ssh—Specifies a Secure Shell (SSH) remote connection to the ACE. The ACE
•
supports the SSH remote shell functionality provided in SSH Version 1 and
supports DES and 3DES ciphers.
SSH v1.x and v2 are entirely different protocols and are not
Note
compatible. Make sure that you use an SSH v1.x client when
accessing the ACE.
telnet—Specifies a Telnet remote connection to the ACE.
•
xml-https—Specifies HTTPS as transfer protocol to send and receive XML
•
documents between the ACE and a Network Management System (NMS).
any—Specifies any client source address for the management traffic
•
classification.
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Configuring Layer 3 and Layer 4 Class Maps
4-37