6-6

User

Guide

for

the

Cisco

Application

Networking

Manager

5.2

OL-26572-01

Chapter

6

Configuring

Virtual

Contexts

Creating

Virtual

Contexts

Match

Conditions

Match

Conditions

table

that

appears

when

you

choose

Match

as

the

Access

Permission

selection.

To

add

or

modify

the

protocols

allowed

on

this

management

VLAN,

do

the

following:

1.

Click

Add

to

choose

a

protocol

for

the

management

interface,

or

choose

an

existing

protocol

entry

listed

in

the

Match

Conditions

table

and

click

Edit

to

modify

it.

2.

In

the

Protocol

drop-down

list,

choose

a

protocol:

–

HTTP—Specifies

the

Hypertext

Transfer

Protocol

(HTTP).

–

HTTPS—Specifies

the

secure

(SSL)

Hypertext

Transfer

Protocol

(HTTP)

for

connectivity

with

the

ANM

interface

using

port

443.

–

ICMP—

Specifies

the

Internet

Control

Message

Protocol

(ICMP)

for

Internet

Protocol

version

4

(IPv

4).

–

ICMPv6—Option

t

hat

appears

only

for

ACE

module

and

ACE

appliance

software

Version

A5(1.0)

or

later.

Specifies

the

Internet

Control

Message

Protocol

version

6

(ICMPv6)

for

Internet

Protocol

version

6

(IPv6).

–

–

KALAP-UDP—Specifies

the

Keepalive

Appliance

Protocol

over

UDP.

–

SNMP—Specifies

the

Simple

Network

Management

Protocol

(SNMP).

Note

If

SNMP

is

not

selected,

ANM

will

not

be

able

to

poll

the

context.

–

SSH—Specifies

a

Secure

Shell

(SSH)

connection

to

the

ACE.

–

TELNET—Specifies

a

Telnet

connection

to

the

ACE.

–

XML-HTTPS—Specifies

HTTPS

as

the

transfer

protocol

for

sending

and

receiving

XML

documents

between

the

ACE

appliance

and

a

Network

Management

Syst

em

(NMS)

using

por

t

10443.

Thi

s

opt

ion

is

available

for

ACE

appliances

only.

3.

In

the

Allowed

From

field,

specify

the

matching

criteria

for

the

client

source

IP

address:

–

Any—Specifies

any

client

source

address

for

the

management

traffic

classification.

–

Source

Address—Specifies

a

cl

ient

source

host

IP

address

and

subnet

mask

as

t

he

network

t

raffic

matching

cr

iteria.

An

ICMPv6

sour

ce

address

onl

y

accepts

an

IPv6

address.

IPv6

requires

ACE

module

and

ACE

appliance

software

Version

A5(1.0)

or

later.

–

Source

Netmask—Select

a

subnet

mask.

This

field

is

not

applicable

for

ICMPv6.

–

Source

Prefix

Length—(ICMPv6

only)

Enter

the

prefix

length,

a

value

from

1

to

128.

4.

Click

OK

to

accept

the

protocol

selection

(or

click

Cancel

to

exit

without

accepting

your

entries).

Note

To

remove

a

protocol

from

t

he

management

VLAN,

choose

the

entry

i

n

the

Match

Conditions

table,

and

click

Delete.

Enable

SNMP

Get

Check

box

that

you

can

check

to

add

an

SNMP

Get

community

string

to

enable

SNMP

polling

on

this

context.

Table

6-1

Virtual

Context

Configuration

Attributes

(continued)

Field

Description