Enabling Remote Access To The Ace; Task Flow For Enabling Remote Access To The Ace - Cisco 4700M Administration Manual

Chapter 2

Enabling Remote Access to the ACE

Enabling Remote Access to the ACE
This section describes the tasks associated with enabling remote access to the ACE and includes the
following topics:
•
•
•
•
•
•
•

Task Flow for Enabling Remote Access to the ACE

Follow these steps to enable remote access to the ACE:
If you are operating in multiple contexts, observe the CLI prompt to verify that you are operating in the
Step 1
desired context. If necessary, log directly in to, or change to, the correct context.
host1/Admin# changeto C1
host1/C1#
The rest of the examples in this table use the Admin context, unless otherwise specified. For details on
creating contexts, see the Cisco 4700 Series Application Control Engine Appliance Virtualization
Configuration Guide.
Enter configuration mode.
Step 2
host1/Admin# config
Enter configuration commands, one per line. End with CNTL/Z
host1/Admin(config)#
Create a class map that permits network management traffic to be received by the ACE based on the
Step 3
network management protocol (SSH or Telnet) and client source IP address.
host1/Admin(config)# class-map type management match-all SSH-ALLOW_CLASS
host1/Admin(config-cmap-mgmt)# match protocol ssh source-address 172.16.10.0
255.255.255.254
host1/Admin(config-cmap-mgmt)# exit
host1/Admin(config)#
host1/Admin(config)# class-map type management match-all TELNET-ALLOW_CLASS
host1/Admin(config-cmap-mgmt)# match protocol telnet source-address 172.16.10.0
255.255.255.254
host1/Admin(config-cmap-mgmt)# exit
host1/Admin(config)#
Configure a policy map that activates the SSH and Telnet management protocol classifications.
Step 4
host1/Admin(config)# policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
host1/Admin(config-pmap-mgmt)# class SSH-ALLOW_CLASS
host1/Admin(config-pmap-mgmt-c)# permit
host1/Admin(config-pmap-mgmt-c)# exit
host1/Admin(config-pmap-mgmt)# class TELNET-ALLOW_CLASS
host1/Admin(config-pmap-mgmt-c)# permit
host1/Admin(config-pmap-mgmt-c)# exit
OL-20823-01
Task Flow for Enabling Remote Access to the ACE
Configuring Remote Network Management Traffic Services
Configuring the Maximum Number of Telnet Management Sessions
Configuring SSH Management Session Parameters
Terminating an Active User Session
Enabling ICMP Messages to the ACE
Directly Accessing a User Context Through SSH
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Enabling Remote Access to the ACE
2-3