Cisco 4700M Administration Manual page 61

Chapter 2 Enabling Remote Access to the ACE
Command
Step 3
[line_number] match protocol {http | https
| icmp | kalap-udp | snmp | ssh | telnet |
xml-https} {any | source-address
ip_address mask }
Example:
ACE_1/Admin(config-cmap-mgmt)# match
protocol ssh source-address 172.16.10.0
255.255.255.254
ACE_1/Admin(config-cmap-mgmt)# match
protocol telnet source-address 172.16.10.0
255.255.255.254
OL-20823-01
Purpose
Classifies the remote network management traffic received by
the ACE. Include one or more of the match protocol commands
to configure the match criteria for the class map.
The keywords and arguments are as follows:
line_number—(Optional) Assists you in editing or deleting
•
individual match commands. Enter an integer from 2 to 255
as the line number. You can enter no line_number to delete
long match commands instead of entering the entire line.
The line numbers do not dictate a priority or sequence for
the match statements.
http—Specifies the Hypertext Transfer Protocol (HTTP).
•
The configuration of the HTTP management protocol is
described in
https—Specifies secure (SSL) Hypertext Transfer Protocol
•
(HTTP) for connectivity with the Device Manager GUI on
the ACE using port 443.
icmp—Specifies Internet Control Message Protocol
•
messages to the ACE. The configuration of the ICMP
management protocol is described in the
Messages to the ACE"
kalap-udp—Specifies management access using KAL-AP
•
over UDP. The configuration of the KAL-AP management
access is described in the "Configuring Health Monitoring"
chapter of the Cisco 4700 Series Application Control Engine
Appliance Server Load-Balancing Configuration Guide.
snmp—Specifies the Simple Network Management
•
Protocol (SNMP). The configuration of the SNMP
management protocol is described in
Configuring
ssh—Specifies a Secure Shell (SSH) remote connection to
•
the ACE. The ACE supports the SSH remote shell
functionality provided in SSH Version 1 and supports DES
and 3DES ciphers. The configuration of the SSH
management protocol is described in the
Management Session Parameters"
SSH v1.x and v2 are entirely different protocols and
Note
are not compatible. Make sure that you use an SSH
v1.x client when accessing the ACE.
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Enabling Remote Access to the ACE
Chapter 8, Configuring the XML
section.
Chapter 7,
SNMP.
section.
Interface.
"Enabling ICMP
"Configuring SSH
2-7