Cisco ACE-4710-K9 Administration Manual page 76

Configuring Remote Network Management Traffic Services
•
•
•
•
•
•
For example, to specify that the class map allows SSH access to the ACE, enter:
host1/Admin(config)# class-map type management SSH-ALLOW_CLASS
host1/Admin(config-cmap-mgmt)# match protocol ssh source-address
172.16.10.0 255.255.255.254
To deselect the specified network management protocol match criteria from the
class map, enter:
host1/Admin(config-cmap-mgmt)# no match protocol ssh source-address
172.16.10.0 255.255.255.254
Cisco 4700 Series Application Control Engine Appliance Administration Guide
2-8
SSH v1.x and v2 are entirely different protocols and are not
Note
compatible. Make sure that you use an SSH v1.x client when
accessing the ACE.
telnet—Specifies a Telnet remote connection to the ACE. The configuration
of Telnet sessions is described in the
Sessions" section.
xml-https—Specifies HTTPS as transfer protocol to send and receive XML
documents between the ACE and a Network Management System (NMS).
The use of the HTTPS management protocol for XML usage is described in
Chapter 9, Configuring the XML
any—Specifies any client source address for the management traffic
classification.
source-address—Specifies a client source host IP address and subnet mask
as the network traffic matching criteria. As part of the classification, the ACE
implicitly obtains the destination IP address from the interface on which you
apply the policy map.
ip_address—Source IP address of the client. Enter the IP address in
dotted-decimal notation (for example, 192.168.11.1).
mask—The subnet mask of the client in dotted-decimal notation (for example,
255.255.255.0).
Chapter 2 Enabling Remote Access to the ACE
"Configuring Telnet Management
Interface.
OL-11157-01