Creating And Configuring A Remote Management Class Map - Cisco 4700M Administration Manual

Chapter 2 Enabling Remote Access to the ACE
Telnet and SSH remote access sessions are established to the ACE on a per context basis. For details on
creating users and contexts, see the Cisco 4700 Series Application Control Engine Appliance
Virtualization Configuration Guide.
This section contains the following topics:
•
•
•
•

Creating and Configuring a Remote Management Class Map

This section describes how to create a Layer 3 and Layer 4 class map to classify the remote network
management traffic received by the ACE. The class map permits network management traffic to be
received by the ACE by identifying the incoming IP protocols that the ACE can receive as well as the
client source IP address and subnet mask as the matching criteria. You define the allowed network traffic
to manage security for protocols such as SSH, Telnet, and ICMP. You also determine how the ACE
evaluates multiple match statements operations when multiple match criteria exist in a class map.
The class map identifies the remote network access management protocols that can be received by the
ACE. You configure the associated policy map to permit access to the ACE for the specified management
protocols. As part of the network management access traffic classification, you also specify either a
client source host IP address and subnet mask as the matching criteria or instruct the ACE to allow any
client source address for the management traffic classification.
OL-20823-01
Creating and Configuring a Remote Management Class Map
Creating a Layer 3 and Layer 4 Remote Access Policy Map
Applying a Service Policy Globally to All VLAN Interfaces in the Same Context
Applying a Service Policy to a Specific VLAN Interface
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Enabling Remote Access to the ACE
2-5