Cisco Explorer 4700 Installation Guide Page 464
- Page / 648
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
12-44
Device Manager Guide, Cisco ACE 4700 Series Application Control Engine Appliance
OL-26645-02
Chapter 12 Configuring Traffic Policies
Configuring Rules and Actions for Policy Maps
Step 11 Do the following:
• Click Deploy Now to deploy this configuration on the ACE appliance.
• Click Cancel to exit this procedure without saving your entries and to return to the Action table.
• Click Next to save your entries and to configure another Action.
ICMP Indicates that Internet Control Message Protocol (ICMP) payload inspection is to be performed. ICMP
inspection allows ICMP traffic to have a “session” so it can be inspected similarly to TCP and UDP
traffic.
In the ICMP Error field, indicate whether the ACE appliance is to perform name address translation
on ICMP error messages:
• N/A—Indicates that this attribute is not set.
• False—Indicates that the ACE appliance is not to perform NAT on ICMP error messages.
• True—Indicates that the ACE appliance is to perform NAT on ICMP error messages. When
enabled, the ACE appliance creates translation sessions for intermediate or endpoint nodes that
send ICMP error messages based on the NAT configuration. The ACE appliance overwrites the
packet with the translated IP addresses.
ILS Internet Locator Service (ILS) protocol inspection is to be implemented.
RTSP Indicates that Real Time Streaming Protocol (RTSP) packet inspection is to be implemented. RTSP is
used by RealAudio, RealNetworks, Apple QuickTime 4, RealPlayer, and Cisco IP/TV connections.
The ACE appliance monitors Setup and Response (200 OK) messages in the control channel
established using TCP port 554 (no UDP support).
SIP SIP protocol inspection is implemented. SIP is used for call handling sessions and instant messaging.
The ACE inspects signaling messages for media connection addresses, media ports, and embryonic
connections. The ACE also uses NAT to translate IP addresses that are embedded in the user-data
portion of the packet.
1. In the Parameter Map field, specify a previously created parameter map used to define parameters
for SIP inspection.
2. In the SIP Inspect Policy field, select a previously created Layer 7 SIP inspection policy map to
implement packet inspection of Layer 7 SIP application traffic.
If you do not specify a Layer 7 policy map, the ACE performs a general set of Layer 3 and Layer
4 HTTP fixup actions and internal RFC compliance checks.
Skinny Cisco Skinny Client Control Protocol (SCCP) protocol inspection is implemented. The SCCP is a
Cisco proprietary protocol that is used between Cisco CallManager and Cisco VOiP phones. The ACE
uses NAT to translate embedded IP addresses and port numbers in SCCP packet data.
1. In the Parameter Map field, specify a previously created connection parameter map used to define
parameters for Skinny inspection.
2. In the Skinny Inspect Policy field, select a previously created Layer 7 Skinny inspection policy
map to implement packet inspection of Layer 7 Skinny application traffic.
If you do not specify a Layer 7 policy map, the ACE performs a general set of Layer 3 and Layer
4 HTTP fixup actions and internal RFC compliance checks.
Table 12-18 Policy Map Application Inspection Options (continued)
Inspection Option Description
- Audience 1
- Organization 1
- OL-26645-01 2
- Related Documentation 3
- Conventions 5
- Guidelines 5
- Control Engine 6
- Original SSLeay License: 7
- Overview 9
- Software Version 10
- First Time Login 12
- Logging In as a User 13
- • The Logout button 15
- Chapter 1 Overview 18
- Understanding Table Buttons 19
- Conventions in Tables 20
- Filtering Entries 21
- Viewing Monitoring Results 24
- Configuration Overview 26
- Understanding ACE Features 27
- IPv6 Considerations 28
- Terminology 30
- Using Homepage 33
- Figure 2-1 Homepage Window 34
- Table 2-1 Homepage Links 34
- Chapter 2 Using Homepage 35
- Using DM Guided Setup 37
- Using ACE Hardware Setup 39
- Using Virtual Context Setup 43
- Using Application Setup 45
- Configuring Virtual Contexts 51
- Using Virtual Contexts 52
- Creating Virtual Contexts 52
- Configuring Syslog Log Hosts 66
- Managing Resource Classes 85
- Adding Resource Classes 88
- Modifying Resource Classes 90
- Deleting Resource Classes 91
- Notifications 92
- Prerequisite 97
- Archive Naming Conventions 100
- Guidelines and Limitations 101
- Defaults 102
- Procedure 102
- OL-26645-02 103
- Related Topics 105
- Prerequisites 106
- Creating ACLs 109
- Resequencing Extended ACLs 116
- Viewing All ACLs by Context 118
- Editing or Deleting ACLs 119
- Configuring Object Groups 120
- Managing Virtual Contexts 129
- Editing Virtual Contexts 134
- Deleting Virtual Contexts 134
- Viewing All Virtual Contexts 134
- Related Topic 136
- Configuring Virtual Servers 137
- Assumptions 143
- Configuring Shared Objects 146
- Assumption 155
- Consideration 194
- Managing Virtual Servers 199
- Activating Virtual Servers 200
- Suspending Virtual Servers 201
- Viewing All Virtual Servers 201
- Load-Balancing Predictors 204
- Real Servers 205
- Configuring Real Servers 207
- Managing Real Servers 211
- Activating Real Servers 212
- Suspending Real Servers 212
- Modifying Real Servers 213
- Viewing All Real Servers 214
- Guidelines and Restrictions 217
- Configuring Server Farms 220
- Viewing All Server Farms 240
- Configuring Health Monitoring 241
- TCL Scripts 242
- Table 6-9 Probe Types 244
- Probe Attribute Tables 249
- DNS Probe Attributes 250
- Echo-TCP Probe Attributes 250
- Echo-UDP Probe Attributes 251
- Finger Probe Attributes 251
- FTP Probe Attributes 252
- HTTP Probe Attributes 252
- HTTPS Probe Attributes 254
- IMAP Probe Attributes 256
- POP Probe Attributes 257
- RADIUS Probe Attributes 258
- RTSP Probe Attributes 258
- Scripted Probe Attributes 259
- SIP-TCP Probe Attributes 261
- SIP-UDP Probe Attributes 261
- SMTP Probe Attributes 262
- SNMP Probe Attributes 262
- TCP Probe Attributes 263
- Telnet Probe Attributes 264
- UDP Probe Attributes 265
- VM Probe Attributes 267
- Configuring Secure KAL-AP 272
- Configuring Stickiness 275
- Sticky Types 276
- HTTP Content Stickiness 277
- HTTP Cookie Stickiness 277
- HTTP Header Stickiness 278
- Layer 4 Payload Stickiness 278
- RADIUS Stickiness 279
- RTSP Header Stickiness 279
- SIP Header Stickiness 279
- SSL Stickiness 279
- Sticky Groups 280
- Buddy Sticky Groups 280
- Stickiness Overview 282
- Configuring Sticky Groups 285
- Sticky Group Attribute Tables 290
- Configuring Sticky Statics 295
- Table 7-10 Sticky Group Types 296
- Configuring Parameter Maps 299
- Step 5 Do the following: 302
- Supported MIME Types 323
- Configuring SSL 327
- SSL Overview 328
- SSL Setup Sequence 331
- Using SSL Certificates 332
- Importing SSL Certificates 334
- Using SSL Keys 337
- Importing SSL Key Pairs 338
- Generating SSL Key Pairs 341
- Exporting SSL Certificates 342
- Exporting SSL Key Pairs 344
- Generating CSRs 353
- Configuring SSL Proxy Service 354
- Configuring SSL OCSP Service 356
- Configuring Network Access 361
- Why Use Port Channels? 362
- Viewing All VLAN Interfaces 382
- NAT Utilization 392
- Configuring Global IP DHCP 395
- Configuring High Availability 397
- Understanding ACE Redundancy 398
- Redundancy Protocol 399
- Stateful Failover 400
- Fault-Tolerant VLAN 401
- Configuration Synchronization 401
- Device Manager 402
- Deleting Host Tracking Probes 418
- Configuring Traffic Policies 421
- Table 12-1 Traffic Policies 422
- Class Maps 423
- Policy Maps 424
- Deleting Class Maps 430
- Inspection 493
- Configuring Actions Lists 510
- Configuring SSL URL Rewrite 514
- Optimization 521
- Optimization Overview 522
- OL-26645-2 528
- Monitoring Your Network 531
- Contexts 532
- ACE System Dashboard 533
- Device Information Table 534
- License Status Table 534
- High Availability Table 535
- Device Resource Usage Graph 537
- ACE Virtual Context Dashboard 541
- Context Resource Usage Graph 544
- Error Monitoring 545
- Monitoring Resource Usage 547
- Monitoring Traffic 551
- Monitoring Load Balancing 553
- Virtual Contexts 561
- Testing Ping 566
- Managing the ACE Appliance 569
- Types of Users 573
- Understanding Roles 573
- Managing Users 575
- Guidelines for Managing Users 576
- Displaying a List of Users 576
- Creating User Accounts 576
- Modifying User Accounts 578
- Deleting User Accounts 578
- Deleting Active Users 580
- Ending Active User Sessions 580
- Changing User Passwords 581
- Changing the Admin Password 581
- Managing User Roles 582
- Admin Predefined Role 588
- Network-Admin Predefined Role 590
- SLB-Admin Predefined Role 593
- Displaying User Roles 596
- Creating User Roles 596
- Modifying User Roles 598
- Deleting User Roles 598
- Managing Domains 599
- Displaying Network Domains 600
- Creating Domains 601
- Modifying Domains 602
- Deleting Domains 602
- Using Admin Tools 605
- Troubleshooting Tools 607
- Guidelines for Using Lifeline 608
- Deleting a Lifeline Package 610
- About File Browser 612
- Downloading Files 613
- Uploading Files 613
- Renaming Files 614
- Deleting Files 615
- Viewing Files 615
- GLOSSARY 617
- Glossary 618
- VTP domain 623
- Web server 623
Related products and manuals for Digital Video Recorders (DVR) Cisco Explorer 4700
(32 pages)© 2020, manymanuals.com. All rights reserved. | 0.024 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals