Associating A Layer 7 Ftp Command Inspection Traffic Class With The Traffic Policy - Cisco 4700M Configuration Manual

Configuring a Layer 7 FTP Command Inspection Policy
Associating a Layer 7 FTP Command Inspection Traffic Class with the Traffic
Policy
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
3-36
insert-before map_name—(Optional) Places the inline match command
•
ahead of an existing class map in the policy map configuration.
The syntax for the Layer 7 FTP inspection policy map inline match commands is
as follows:
match name request-method {appe | cd | cdup | dele | get | help | mkd | put
| rmd | rnfr | rnto | site | stou | syst}
See the "Defining FTP Match Request Methods"
inline match command.
For example, to add an inline match command to a Layer 7 FTP command policy
map, enter:
host/Admin(config-pmap-ftp-ins)# match FTP_REQUEST_MATCH
request-method mkdir
host/Admin(config-pmap-ftp-ins-m)#
To remove the inline match command from the Layer 7 FTP command policy
map, enter:
host/Admin(config-pmap-ftp-ins)# no match FTP_REQUEST_MATCH
You can associate a traffic class created with the class-map command to associate
network traffic with the traffic policy by using the class command.
The syntax of this command is as follows:
class map_name
The map_name argument is the name of a previously defined traffic class,
configured with the class-map command, to associate traffic to the traffic policy.
Enter an unquoted text string with no spaces and a maximum of 64 alphanumeric
characters.
The CLI displays the policy map class configuration mode.
For example, to specify an existing class map in the Layer 7 policy map, enter:
host1/Admin(config-pmap-ftp-ins)# class FTP_INSPECT_L7CLASS
host1/Admin(config-pmap-ftp-ins-c)#
Chapter 3 Configuring Application Protocol Inspection
section for details about the
OL-16202-01