Configuring Remote Network Management Traffic Services - Cisco ACE-4710-K9 Administration Manual

Configuring Remote Network Management Traffic Services

Configuring Remote Network Management Traffic
Services
Cisco 4700 Series Application Control Engine Appliance Administration Guide
2-4
Table 2-1 Remote Network Management Configuration
Quick Start (continued)
Task and Command Example
If you have global administrator privileges, use the ssh key command to
8.
generate the SSH private key and the corresponding public key for use by
the SSH server. There is only one host-key pair. For example, to generate an
RSA1 key pair in the Admin context, enter:
host1/Admin(config)# ssh key rsa1 1024
generating rsa1 key
.....
generated rsa1 key
(Optional) Save your configuration changes to Flash memory.
9.
host1/Admin(config)# exit
host1/Admin# copy running-config startup-config
You configure rules for remote access to the ACE through the use of class maps,
policy maps, and service policies. The following items summarize the role of each
function in configuring remote network management access to the ACE:
Class map—Provides the remote network traffic match criteria to permit
•
traffic based on:
Remote access network management protocols (SSH, Telnet, or ICMP)
–
– Client source IP address
Policy map—Enables remote network management access for a traffic
•
classification that matches the criteria listed in the class map.
Service policy—Activates the policy map and attaches the traffic policy to an
•
interface or globally on all interfaces.
This section provides an overview on creating a class map, policy map, and
service policy for remote network access. For detailed information on creating
class maps, policy maps, and service policies, see
Maps and Policy Maps.
Chapter 2 Enabling Remote Access to the ACE
Chapter 4, Configuring Class
OL-11157-01