Cisco ACE-4710-K9 Administration Guide - Page 146
Defining the VIP Address Match Criteria, match source-address, match access-list, match
View all Cisco ACE-4710-K9 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 146 highlights
Configuring Layer 3 and Layer 4 Class Maps Chapter 4 Configuring Class Maps and Policy Maps • mask-Subnet mask of the client entry in dotted-decimal notation (for example, 255.255.255.0). A single class map can have multiple match source-address commands. You may combine multiple match source-address, match access-list, match destination-address, and match port commands in a class map. For example, to specify that the class map is to match on source IP address 172.16.20.1 255.255.0.0, enter: host1/Admin(config)# class-map L4_SOURCE_IP_CLASS host1/Admin(config-cmap)# match source-address 192.168.10.1 255.255.255.0 To clear the source IP address and subnet mask match criteria from the class map, enter: host1/Admin(config-cmap)# no match source-address 192.168.10.1 255.255.255.0 Defining the VIP Address Match Criteria To define a 3-tuple flow of VIP address, protocol, and port as matching criteria for server load balancing, use the match virtual-address command in class map configuration mode.You can configure multiple match criteria statements to define the VIPs for server load balancing. See the Cisco 4700 Series Application Control Engine Appliance Server Load-Balancing Configuration Guide for details about configuring the ACE to perform server load balancing. The syntax of this command is: [line_number] match virtual-address vip_address {[netmask] protocol_number | any | {tcp | udp} {any | eq port_number | range port1 port2}} The keywords, arguments, and options are: • line_number-(Optional) Line number to identify individual match commands. Enter an integer from 2 to 255 as the line number. You can enter no line_number to delete long match commands instead of entering the entire line. The line numbers do not dictate a priority or sequence for the match statements. • vip_address-VIP server IP address of the ACE, specified in dotted decimal format (for example, 192.168.1.2). 4-32 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01