Cisco 4700M Configuration Manual page 225

Chapter 3 Configuring Application Protocol Inspection
host1/Admin(config-pmap)# no class HTTP_INSPECT_L4CLASS
To manually insert a class map ahead of a previously specified class map, use the
insert-before command. The ACE does not save sequence reordering through the
insert-before command as part of the configuration.
The syntax of this command is as follows:
The keywords and arguments are as follows:
•
•
For example, to use the insert-before command to define the sequential order of
two class maps in the policy map, enter:
host1/Admin(config-pmap-c)# 5 class FTP_INSPECT_L4CLASS insert-before
HTTP_INSPECT_L4CLASS
To specify the class-default class map for the Layer 3 and Layer 4 traffic policy,
use the class class-default command. All network traffic that fails to meet the
other matching criteria in the named class map belongs to the default traffic class.
If none of the specified classifications match, the ACE then matches the action
specified under the class class-default command. The class-default class map
has an implicit match any statement in it so that it matches all traffic.
For example, to use the class class-default command, enter:
host1/Admin(config-pmap)# class class-default
host1/Admin(config-pmap-c)#
The CLI displays the policy map class configuration mode.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
OL-16202-01
Configuring a Layer 3 and Layer 4 Application Protocol Inspection Traffic Policy
class map_name1 insert-before map_name2
class map_name1—Specifies the name of a previously defined traffic class
configured with the class-map command. Enter an unquoted text string with
no spaces and a maximum of 64 alphanumeric characters.
insert-before map_name2—Places the current class map ahead of an existing
class map as specified by the map_name2 argument. Enter an unquoted text
string with no spaces and a maximum of 64 alphanumeric characters.
3-101