Creating A Layer 3 And Layer 4 Policy Map; Creating A Layer 3 And Layer 4 Policy Map For Network Management Traffic Received By The Ace; Specifying A Layer 3 And Layer 4 Traffic Class With The Traffic Policy; Specifying Layer 3 And Layer 4 Policy Actions - Cisco ACE-4710-K9 Administration Manual

Chapter 9 Configuring the XML Interface
R E V I E W D R A F T - C I S C O C O N F I D E N T I A L

Creating a Layer 3 and Layer 4 Policy Map

Creating a Layer 3 and Layer 4 Policy Map for Network Management Traffic
Received by the ACE
OL-11157-01
source-address—Specifies a client source host IP address and subnet mask
•
as the network traffic matching criteria. As part of the classification, the ACE
implicitly obtains the destination IP address from the interface on which you
apply the policy map.
ip_address—Source IP address of the client. Enter the IP address in
•
dotted-decimal notation (for example, 192.168.11.1).
mask—The subnet mask of the client in dotted-decimal notation (for
•
example, 255.255.255.0).
For example, to specify that the class map allows HTTPS access to the ACE,
enter:
(config)# class-map type management XML-HTTPS-ALLOW_CLASS
(config-cmap-mgmt)# match protocol xml-https source-address
192.168.10.1 255.255.0.0
To deselect the specified network management protocol match criteria from the
class map, enter:
host1/Admin(config-cmap-mgmt)# no match protocol https source-address
192.168.10.1 255.255.0.0
A Layer 3 and Layer 4 policy map defines the actions executed on HTTP or
HTTPS management traffic that matches the specified classifications. This
section contains the following topics:
Creating a Layer 3 and Layer 4 Policy Map for Network Management Traffic
•
Received by the ACE

Specifying a Layer 3 and Layer 4 Traffic Class with the Traffic Policy

•

Specifying Layer 3 and Layer 4 Policy Actions

•
To configure a Layer 3 and Layer 4 policy map that permits the management
traffic received by the ACE use the policy-map type management command in
configuration mode. The ACE executes the action for the first matching
classification. The ACE does not execute any additional actions.
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Configuring HTTP and HTTPS Management Traffic Services
9-17