Cisco ACE-4710-K9 Administration Manual page 354

Configuring SNMP Management Traffic Services
Specifying Layer 3 and Layer 4 Policy Actions
Cisco 4700 Series Application Control Engine Appliance Administration Guide
8-44
class-default—Specifies the class-default class map for the Layer 3 and
•
Layer 4 traffic policy. This class map is a reserved class map created by the
ACE. You cannot delete or modify this class. All network traffic that fails to
meet the other matching criteria in the named class map belongs to the default
traffic class. If none of the specified classifications match, the ACE then
matches the action specified under the class class-default command. The
class-default class map has an implicit match any statement in it and is used
to match any traffic classification. The class-default class map has an
implicit match any statement that matches all traffic.
For example, to specify an existing class map within the Layer 3 and Layer 4
remote access policy map, enter:
host1/Admin(config-pmap-mgmt)# class SNMP-ALLOW_CLASS
host1/Admin(config-pmap-mgmt-c)#
To use the insert-before command to define the sequential order of two class
maps in the policy map, enter:
host1/Admin(config-pmap-mgmt)# class L4_SSH_CLASS insert-before
L4_REMOTE_ACCESS_CLASS
To specify the class-default class map for the Layer 3 and Layer 4 traffic policy,
enter:
host1/Admin(config-pmap-mgmt)# class class-default
host1/Admin(config-pmap-mgmt-c)#
To remove a class map from a Layer 3 and Layer 4 policy map, enter:
host1/Admin(config-pmap-mgmt)# no class SNMP-ALLOW_CLASS
To allow the network management traffic listed in the Layer 3 and Layer 4 class
map to be received or rejected by the ACE, specify either the permit or deny
command in policy map class configuration mode.
Use the permit command in policy map class configuration mode to allow the
•
SNMP management protocols listed in the class map to be received by the
ACE.
Use the deny command in policy map class configuration mode to refuse the
•
SNMP management protocols listed in the class map to be received by the
ACE.
Chapter 8 Configuring SNMP
OL-11157-01