Associating A Connection Parameter Map With A Policy Map - Cisco 4700M Configuration Manual

Configuring a Traffic Policy for TCP/IP Normalization and Termination

Associating a Connection Parameter Map with a Policy Map

Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
4-32
Chapter 4
The keywords, arguments, and options are as follows:
name1—Name of a previously defined traffic class configured with the
•
class-map command. Enter an unquoted text string with no spaces and a
maximum of 32 alphanumeric characters.
class-default—Specifies a reserved, well-known class map created by the
•
ACE. You cannot delete or modify this class. All traffic that fails to meet the
other matching criteria in the named class map belongs to the default traffic
class. If none of the specified classifications match the traffic, then the ACE
performs the action specified under the class class-default command. The
class-default class map has an implicit match any statement in it that enables
it to match all traffic.
Note When you configure a connection parameter map with a class-default
class map in a Layer 3 policy map, it is applied to all other Layer 3
class maps in the same Layer 3 policy map.
insert-before name2—(Optional) Places the current class map ahead of an
•
existing class map specified by the name2 argument in the policy-map
configuration. The ACE does not save the sequence reordering as part of the
configuration.
The following example shows how to use the insert-before command to define
the sequential order of two class maps in the policy map:
(config-pmap)# 10 class TCP_CLASS insert-before IP_CLASS
(config-pmap-c)#
To remove a class map from a Layer 4 policy map, enter:
(config-pmap)# no 10 class TCP_CLASS
You can associate a connection parameter map with a policy map by using the
connection advanced-options command in policy-map class configuration
mode. For details about configuring a connection parameter map, see the
"Configuring a Connection Parameter Map for TCP/IP Normalization and
Termination" section. The syntax of this command is as follows:
connection advanced-options name
Configuring TCP/IP Normalization and IP Reassembly Parameters
OL-16202-01