Defining Http And Https Protocol Match Criteria - Cisco ACE-4710-K9 Administration Manual

Configuring HTTP and HTTPS Management Traffic Services
R E V I E W D R A F T - C I S C O C O N F I D E N T I A L

Defining HTTP and HTTPS Protocol Match Criteria

Cisco 4700 Series Application Control Engine Appliance Administration Guide
9-16
To remove the description from the class map, enter:
host1/Admin(config-cmap-mgmt)# no description
Use the match protocol command to configure the class map to specify that the
HTTP or HTTPS remote network management protocol can be received by the
ACE. You configure the associated policy map to permit access to ACE for the
specified management protocol. For XML support, a class map of type
management allows IP protocols such as HTTP and HTTPS. As part of the
network management access traffic classification, you also specify either a client
source host IP address and subnet mask as the matching criteria or instruct the
ACE to allow any client source address for the management traffic classification.
You must access the class map configuration mode to specify the match protocol
command.
The syntax of this command is:
[line_number] match protocol {http | xml-https} {any | source-address
ip_address mask}
The keywords, arguments, and options are:
line_number—(Optional) Allows you to edit or delete individual match
•
commands. Enter an integer from 2 to 255 as the line number. For example,
you can enter no line_number to delete long match commands instead of
entering the entire line.
http—Specifies Hypertext Transfer Protocol (HTTP) as transfer protocol to
•
send and receive XML documents between the ACE and an NMS.
xml-https—Specifies secure (SSL) Hypertext Transfer Protocol (HTTP) as
•
transfer protocol to send and receive XML documents between the ACE and
an NMS.
The https keyword specifies secure (SSL) Hypertext Transfer Protocol
Note
(HTTP) for connectivity with the Device Manager GUI on the ACE
any—Specifies any client source address for the management traffic
•
classification.
Chapter 9 Configuring the XML Interface
OL-11157-01