Cisco Explorer 4700 Installationsanleitung PDF herunterladen (Seite 500)

100

101

12-80

Device Manager Guide, Cisco ACE 4700 Series Application Control Engine Appliance

OL-26645-02

Chapter 12 Configuring Traffic Policies

Configuring Rules and Actions for Policy Maps

Use this procedure to add rules and actions for Layer 7 FTP command inspection policy maps.

Procedure

Step 1 Choose Config > Virtual Contexts > context > Expert > Policy Maps. The Policy Maps table appears.

Step 2 In the Policy Maps table, select the Layer 7 FTP command inspection policy map you want to set rules

and actions for, and then select the Rule tab. You can select multiple policy maps (hold down the Shift

key while selecting entries) and apply common rules and actions to them.

Step 3 In the Rule table, click Add to add a new rule, or select an existing rule, and then Edit to modify it. The

Rule configuration screen appears.

Step 4 In the Type field, select the type of rule to be used:

• Class Map—Indicates that the ACE appliance is to use an existing class map that identifies the rules

and corresponding actions.

• Match Condition—Indicates that the ACE appliance is to use a set of conditions to identify the rules

and corresponding actions.

Step 5 For class maps, check the Use Class Default check box to use the class-default class map, or clear the

check box to use a previously created class map.

Step 6 If you clear the Use Class Default check box:

a. In the Class Map Name field, select the class map to be used.

b. In the Insert Before field, indicate whether this rule is to precede another rule in this policy map.

–

N/A—Indicates that this option is not configured.

–

False—Indicates that this rule is not to precede another rule in this policy map.

–

True—Indicates that this rule is to precede another rule in this policy map.

c. If you select True, the Insert Before Policy Rule field appears. Select the rule that you want the

current rule to precede.

Step 7 For match conditions:

a. In the Match Condition Name field enter a name for the match condition for this rule. Valid entries

are unquoted text strings with no spaces and a maximum of 64 alphanumeric characters.

b. In the Match Condition Type field, select Request Method Name as the match condition type for this

rule.

c. In the Request Method Name field, select the FTP command to be inspected for this rule.

Table 12-13 describes the FTP commands that can be inspected.

Step 8 In the Insert Before field, specify whether this rule is to precede another rule in this policy map:

• N/A—Indicates that this attribute is not set.

• False—Indicates that this rule is not to precede another rule in the policy map.

• True—Indicates that this rule is to precede another rule in the policy map.

Step 9 If you set Insert Before to True, the Insert Before Policy Rule field appears. Select the rule that you want

the current rule to precede.

1 2 ... 495 496 497 498 499 500 501 502 503 504 505 ... 647 648

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco Explorer 4700 Installationsanleitung Seite 500

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Digitale Videorecorder (DVR) Cisco Explorer 4700