12-13
Device Manager Guide, Cisco ACE 4700 Series Application Control Engine Appliance
OL-26645-02
Chapter 12 Configuring Traffic Policies
Setting Match Conditions for Class Maps
Source Address Indicates that a source IP address is the match type for this match condition.
1. For the IP Address Type, select either IPv4 or IPv6 for the address type.
2. In the Source IP Address field, enter the source IP address for this match condition in the
format based on the address type (IPv4 or IPv6).
3. For an IPv4 source address, in the Source Netmask field, select the subnet mask of the IP
address.
For an IPv6 source address, in the Source Prefix-length field, enter the prefix length for the
address.
Virtual Address Indicates that a virtual IP address is the match type for this match condition.
1. For the IP Address Type, select either IPv4 or IPv6 for the address type.
2. In the Virtual Address field, enter the virtual IP address for this match condition in the format
based on the address type (IPv4 or IPv6).
3. For an IPv4 virtual address, in the Virtual Netmask field, select the subnet mask of the IP
address.
For an IPv6 virtual address, in the Virtual Prefix-length field, enter the prefix length for the
address.
4. In the Virtual Address Protocol field, select the protocol to be used for this match condition.
For a list of protocols and their respective numbers, see Table 4-18.
Depending on the protocol that you select, additional fields appear. If they appear, enter the
information described in the following steps.
5. In the Port Operator field, select the match criteria for the port:
–
Any—Indicates that any port using the selected protocol meets the match condition.
–
Equal To—Indicates that a specific port using the protocol meets the match condition.
In the Port Number field, enter the port to be matched. Valid entries are integers from 0 to
65535. A value of 0 indicates that the ACE appliance is to include all ports.
–
Range—Indicates that the port must be one of a range of ports to meet the match condition.
Valid entries are integers from 0 to 65535. A value of 0 indicates that the ACE appliance
is to include all ports.
a. In the Lower Port Number field, enter the first port number in the port range for the
match condition.
b. In the Upper Port Number field, enter the last port number in the port range for the
match condition.
Table 12-5 Layer 3/Layer 4 Network Traffic Class Map Match Condition Attributes (continued)
Match Condition Type Description
Comments to this Manuals