Cisco ACE-4710-K9 Administration Guide - Page 159

Chapter 4 Configuring Class Maps and Policy Maps Configuring a Layer 3 and Layer 4 Policy Map Creating a Layer 3 and Layer 4 Policy Map for Network Traffic Passing Through the ACE To configure a Layer 3 and Layer 4 policy map that defines the different actions applied to traffic that passes through the ACE, use the policy-map multi-match configuration command. The ACE attempts to match multiple classes within the Layer 3 and Layer 4 policy map to allow for multi-feature policies. The ACE executes the action for only one matching class within each of the class sets. The definition of which classes are in the same class set depends on the actions applied to the classes; the ACE associates each policy map action with a specific set of classes. The syntax of this command is: policy-map multi-match map_name The map_name argument specifies the name assigned to the policy map. Enter an unquoted text string with no spaces and a maximum of 64 alphanumeric characters. When you use this command, you will access policy map configuration mode. For example, to create a Layer 3 and Layer 4 application protocol inspection policy map, enter: host1/Admin(config)# policy-map multi-match L4_HTTP_APP_INSPECTION_POLICY host1/Admin(config-pmap)# To remove a policy map from the ACE, enter: host1/Admin(config)# no policy-map multi-match L4_HTTP_APP_INSPECTION_POLICY Defining a Layer 3 and Layer 4 Policy Map Description To provide a brief summary about the Layer 3 and Layer 4 policy map, use the description command in policy map configuration mode. The syntax of this command is: description text OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 4-45