Policy - Cisco 4700M Configuration Manual

Chapter 5 Configuring Network Address Translation
Applying the Layer 3 and Layer 4 Policy Map to an Interface Using
a Service Policy
Note
Note
OL-16202-01
You can activate the server farm-based dynamic NAT policy and assign it to an
interface by using the service-policy command in interface configuration mode.
For details about the service-policy command, see the Cisco 4700 Series
Application Control Engine Appliance Administration Guide.
You can configure dynamic NAT as an input service policy only, not as an output
service policy. You cannot apply the same NAT policy both locally and globally.
The syntax of this command is as follows:
service-policy input policy_name
The keywords and arguments are as follows:
• input—Specifies that the traffic policy is to be attached to the input direction
of a VLAN interface. The traffic policy evaluates all traffic received by that
interface.
policy_name—Name of a previously defined policy map. The name can have
•
a maximum of 64 alphanumeric characters.
For example, enter:
host1/C1(config)# interface vlan 100
host1/C1(config-if)# mtu 1700
host1/C1(config-if)# ip address 192.168.12.100 255.255.255.0
host1/C1(config-if)# service-policy input NAT_POLICY
To remove a service policy from an interface, enter:
host1/C1(config-if)# no service-policy input NAT_POLICY
When you remove a traffic policy from the last VLAN interface on which you
applied the service policy, the ACE automatically resets the associated
service-policy statistics. The ACE performs this action to provide a new starting
point for the service-policy statistics the next time that you attach a traffic policy
to a specific VLAN interface.
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
Configuring Server Farm-Based Dynamic NAT
5-31