Cisco 4700M Configuration Manual page 286

Configuring a Traffic Policy for TCP/IP Normalization and Termination
Specifying IP Address Match Criteria
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
4-28
Chapter 4
You can specify a source address, destination address, or VIP address as the
Layer 3 network traffic match criteria by using the match command in class-map
configuration mode. The syntax of this command is as follows:
[line_number] match {source-address | destination-address |
virtual-address} ip_address netmask
The keywords, arguments, and options are as follows:
line_number—(Optional) Argument that assists you in editing or deleting
•
individual match commands. For example, you can enter no line_number to
delete long match commands instead of entering the entire line.
source-address—Specifies the source IP address as the match criteria.
•
destination-address—Specifies the destination IP address as the match
•
criteria.
virtual-address—Specifies the virtual IP (VIP) address as the match criteria.
•
ip_address—IP address of the source, destination, or VIP. Enter an IP address
•
in dotted-decimal notation (for example, 192.168.12.15). You can also
specify 0.0.0.0 as a wildcard that will match any IP address.
• netmask—(Optional) Subnet mask for the IP address. Enter a subnet mask in
dotted-decimal notation (for example, 255.255.255.0). The default subnet
mask is 255.255.255.255. You can also specify 0.0.0.0 as a wildcard that will
match any netmask.
There can be multiple match address commands within a single class map. Also,
you can combine other match commands in the same class map.
The following example specifies that the network traffic must match destination
IP address 172.27.16.7:
host1/C1(config)# class-map match-any IP_CLASS
host1/C1(config-cmap)# match destination-address 172.27.16.7
To remove the destination IP address match criteria from the class map, enter:
host1/C1(config-cmap)# no match destination-address 172.27.16.7
Configuring TCP/IP Normalization and IP Reassembly Parameters
OL-16202-01