Cisco ACE-4710-K9 Administration Manual page 127

Chapter 4 Configuring Class Maps and Policy Maps
Table 4-2
Task and Command Example
3.
4.
5.
OL-11157-01
Layer 3 and Layer 4 Network Management Traffic Class
Configuration Quick Start (continued)
Create one or more class maps that permit network management traffic to
be received by the ACE based on a network management protocol (HTTP,
HTTPS, ICMP, SNMP, SSH, or Telnet) and source IP address. If you do not
specify the match-all or match-any keyword, the traffic must match all the
match criteria in the class map to be classified as part of the traffic class.
host1/Admin(config)# class-map type management match-any
L4_MGMT_CLASS
host1/Admin(config-cmap-mgmt)#
After you create a class map, you will enter class map management
configuration mode.
(Optional) Specify a description about the network management traffic class
map.
host1/Admin(config-cmap)# description enable SSH and Telnet
protocols
(Optional) Configure the class map to identify the IP network management
traffic received by the ACE.
host1/Admin(config-cmap-mgmt)# match protocol ssh source-address
192.168.10.1 255.255.255.0
host1/Admin(config-cmap-mgmt)# match protocol telnet
source-address 192.168.10.1 255.255.255.0
host1/Admin(config-cmap-mgmt)# match protocol icmp source-address
192.168.10.1 255.255.255.0
host1/Admin(config-cmap-mgmt)# exit
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Class Map and Policy Map Configuration Quick Start
4-13