Configuring An Http Parameter Map - Cisco 4700M Configuration Manual

Chapter 3 Configuring Application Protocol Inspection

Configuring an HTTP Parameter Map

OL-16202-01
For example, to associate the DNS_PARAMMAP DNS parameter map with the
L4_POLICY Layer 3 and Layer 4 policy map, enter the following commands:
host1/Admin(config)# policy-map multi-match L4_POLICY
host1/Admin(config-pmap)# class L4_CLASS
host1/Admin(config-pmap-c)# appl-parameter dns advanced-options
DNS_PARAMMAP
To disassociate the DNS parameter map from the Layer 4 policy map, enter the
following commands:
host1/Admin(config)# policy-map multi-match L4_POLICY
host1/Admin(config-pmap)# class L4_CLASS
host1/Admin(config-pmap-c)# no appl-parameter dns advanced-options
DNS_PARAMMAP
You can use a parameter map to combine related actions for use in a Layer 3 and
Layer 4 HTTP deep packet inspection policy map. You reference this parameter
map in the appl-parameter command in policy map class configuration mode.
See the "Associating an HTTP Parameter Map with a Layer 3 and Layer 4 Policy
Map" section.
You can configure advanced HTTP behavior for HTTP deep packet inspection by
using the parameter-map type http command in configuration mode. The syntax
of this command is as follows:
parameter-map type http name
The name argument is the identifier assigned to the parameter map. Enter an
unquoted text string with no spaces and a maximum of 32 alphanumeric
characters.
This section contains the following topics to define the advanced HTTP parameter
map:
Disabling Case-Sensitivity Matching
•
Setting the Maximum Number of Bytes to Parse in HTTP Headers
•
Setting the Maximum Number of Bytes to Parse in HTTP Content
•
Associating an HTTP Parameter Map with a Layer 3 and Layer 4 Policy Map
•
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Configuring an HTTP Parameter Map
3-109