Cisco 4700M Configuration Manual page 200

Configuring a Layer 7 SIP Inspection Policy
•
The CLI displays the class map SIP inspection configuration mode. To classify
the SIP application inspection of traffic for evaluation by the ACE, include one or
more of the following commands to configure the match criteria for the Layer 7
class map:
•
•
•
•
•
•
•
•
You may include multiple match commands in the class map.
For example, to specify SIP_INSPECT_L7CLASS as the name of a class map and
identify that all commands in the Layer 7 SIP application inspection class map
must be satisfied for the ACE to indicate a match, enter:
host1/Admin(config)# class-map type sip inspect match-all
SIP_INSPECT_L7CLASS
host1/Admin(config-cmap-sip-insp)# match calling-id .*ABC123
host1/Admin(config-cmap-sip-insp)# match im-subscriber JOHN_Q_PUBLIC
host1/Admin(config-cmap-sip-insp)# match content type sdp
To remove the SIP inspection class map from the ACE, enter:
host1/Admin(config)# no class-map type sip inspect match-any
SIP_INSPECT_L7CLASS
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
3-76
map_name—Name assigned to the class map. Enter an unquoted text string
with no spaces and a maximum of 64 alphanumeric characters.
match called-party—See the
Header" section.
match calling-party—See the
Header" section.
match content—See the
match im-subscriber—See the
Subscriber" section.
match message-path—See the
Messages" section.
match request-method—See the
section.
match third-party-registration—See the
Registration Entities"
match uri—See the "Defining SIP URI Checks"
Chapter 3 Configuring Application Protocol Inspection
"Defining the Called Party in the SIP To
"Defining the Calling Party in the SIP From
"Defining SIP Content Checks"
"Defining the SIP Instant Messaging
"Defining the Message Path Taken by SIP
"Defining the SIP Request Methods"
"Defining the SIP Party
section.
section.
section.
OL-16202-01