CH
A

P

T

E

R
14-1
User
Guide

for

the

Cisco

Application

Networking

Manager

5.2
OL-26572-01
14
Configuring
Traffic

Policies
Date:
3/

28/12
Cisco
Application

Networking

Manager

helps

you

configure

class

maps

and

policy

maps

t

o

provide

a
global
level

of

classification

for

filtering

traffic

received

by

or

passing

through

the

ACE.
Note
When
naming

ACE

objects

(such

as

a

real

server,

virtual

server,

parameter

map,

class

map,

health

probe,
and
so

on),

enter

an

alphanumeric

string

of

1

to

64

characters,

which

can

include

the

following

special
characters:
underscore

(_),

hyphen

(-),

dot

(.),

and

asterisk

(*)

.

Spaces

ar

e

not


al

lowed.


If
you

are

using

ANM

with

an

ACE

module

or

ACE

appliance

and

you

configure

a

named

object

at

the
ACE
CLI,

keep

in

mind

that

ANM

does

not

support

all

of

the

special

characters

that

the

ACE

CLI

allows
you
to

use

when

configuring

a

named

object.

If

you

use

special

characters

that

ANM

does

not

support,
you
may

not

be

able

to

import

or

manage

the

ACE

using

ANM.
This
chapter

includes

the

following

sections:


Traffic
Policy

Overview,

page
14-1


Class
Map

and

Policy

Map

Overview,

page
14-2


Configuring
Virtual

Context
Class
Maps,

page
14-6


Setting
Match

Conditions

for

Class

Maps,

page
14-8


Configuring
Virtual

Context
Policy
Maps,

page
14-32


Configuring
Rules

and

Actions

for

Policy

Maps,

page
14-34


Configuring
Actions

Lists,
page
14-85
Traffic
Policy

Overview
Cisco
Application

Networking

Manager

helps

you

configure

class

maps

and

policy

maps

t

o

provide

a
global
level

of

classification

for

filtering

traffic

received

by

or

passing

through

the

ACE.

You

create
traffic
policies

and

attach

these

policies

to

one

or

more

VLAN

interfaces

associated

with

the

ACE

to
apply
feature-specific

actions

to

the

matching

traffic.

The

ACE

uses

the

individual

traffic

policies

to
implement
functions

such

as:


FTP
command
inspection


IP
normalization

and

fragment
reassembly


Network
Address

Translation

(NAT)