Specifying Layer 3 And Layer 4 Policy Actions; Applying A Service Policy - Cisco ACE-4710-K9 Administration Manual

Configuring HTTP and HTTPS Management Traffic Services
R E V I E W D R A F T - C I S C O C O N F I D E N T I A L

Specifying Layer 3 and Layer 4 Policy Actions

Applying a Service Policy

Cisco 4700 Series Application Control Engine Appliance Administration Guide
9-20
To allow the network management traffic listed in the Layer 3 and Layer 4 class
map to be received or rejected by the ACE, specify either the permit or deny
command in policy map class configuration mode.
Use the permit command in policy map class configuration mode to allow the
•
HTTP or HTTPS management traffic listed in the class map to be received by
the ACE.
Use the deny command in policy map class configuration mode to refuse the
•
HTTP or HTTPS management traffic listed in the class map to be received by
the ACE.
For example, to specify the permit action for the Layer 3 and Layer 4 policy map,
enter:
host1/Admin(config-pmap-mgmt-c)# permit
host1/Admin(config-pmap-mgmt-c)# exit
Use the service-policy command to do the following:
• Apply a previously created policy map.
Attach the traffic policy to a specific VLAN interface or globally to all VLAN
•
interfaces in the same context.
Specify that the traffic policy is to be attached to the input direction of an
•
interface.
The service-policy command is available at both the VLAN interface
configuration mode and at the configuration mode. Specifying a policy map in the
interface configuration mode applies the policy map to a specific VLAN interface.
Specifying a policy map in the configuration mode applies the policy to all of the
VLAN interfaces associated with a context.
Chapter 9 Configuring the XML Interface
OL-11157-01