Including An Inline Match Statement In A Layer 7 Sccp Inspection Policy Map - Cisco 4700M Configuration Manual

Configuring a Layer 7 SCCP Inspection Policy
Including an Inline Match Statement in a Layer 7 SCCP Inspection
Policy Map
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
3-72
You can include a single inline match criteria in the policy map without specifying
a traffic class by using the match message-id command in policy map inspection
Skinny configuration mode. When you use an inline match command, you can
specify an action for only a single match statement in the Layer 7 policy map.
The syntax of this command is as follows:
match name message-id {number1 {insert-before map_name} | range
{number2 number3}}
The keywords and arguments are as follows:
name—Name assigned to the inline match command. Enter an unquoted text
•
string with no spaces. The length of the inline match statement name plus the
length of the policy map name with which it is associated cannot exceed a
total maximum of 64 alphanumeric characters. For example, if the policy map
name is L7_POLICY (nine characters), an inline match statement name under
this policy cannot exceed 55 alphanumeric characters (64
message-id—Specifies an SCCP StationMessageID.
•
• number1—Numerical identifier of the SCCP message. Enter an integer from
0 to 65535.
insert-before map_name—(Optional) Places the inline match command
•
ahead of an existing class map in the policy map configuration.
range {number2 number3}—Specifies a range of SCCP message IDs. Enter
•
an integer from 0 to 65535 for the lower and the upper limits of the range. The
upper limit must be greater than or equal to the lower limit.
For example, to specify an inline match command for a Layer 7 SCCP inspection
policy map, enter:
host1/Admin(config-pmap-ins-skinny)# match SCCP_MATCH message-id range
100 500
host1/Admin(config-pmap-ins-skinny-m)#
To remove the inline match statement from the policy map, enter:
host1/Admin(config-pmap-ins-skinny)# no match SCCP_MATCH message-id
range 100 500
Chapter 3 Configuring Application Protocol Inspection
-
9 = 55).
OL-16202-01