14-4
User
Guide

for

the

Cisco

Application

Networking

Manager

5.2
OL-26572-01
Chapter
14






Configuring

Traffic

Policies
Class
Map

and

Policy

Map

Overview
A
traffic

class

contains

the

following

components:

•
Class
map

name

•
Class
map

type

•
One
or

more

match

conditions

that

define

the

match

criteria

for

the

class

map

•
Instructions
on

how

the

ACE

evaluates

match
conditions

when

you

specify
more
than

one

match
statement
in

a

traffic

class

(match-any,

match-all)
The
individual

match

conditions

specify

the

criteria

for

classifying

Layer

3

and

Layer

4

network

traffic
as
well

as

the

Layer

7

server

load

balancing

and

application

protocol-specific

fields.

The

ACE

evaluates
the
packets

to

determine

whether

they

match

the

specified

criteria.

If

a

statement

matches,

the

ACE
considers
that

packet

to

be

a

member

of

the

class

and

forwards

the

packet

according

to

the

specifications
set
in

the

traffic

policy.

Packets

that

fail

to

meet

any

of

the

matching

criteria

are

classified

as

members
of
the

default

traffic

class

if

one

is

specified.
The
ACE

allows

you

to

configure

two

Layer

7

load-balancing

class

maps

in

a

nested

traffic

class
configuration
to

create

a

single

traffic

class.

You

can

nest

Layer

7

class

maps

to

achieve

complex

logical
expressions.
The

ACE

restricts

the

nesting

of

class

maps

to

two

levels

to

prevent

you

from

including

one
nested
class

map

under

a

different

class

map.
Related
Topics

•
Class
Map

and

Policy

Map

Overview,

page
14-2

•
Policy
Maps,

page
14-4

•
Parameter
Maps

and

Their

Use

i

n

Layer

3

and
Layer
4
Pol

icy
Maps,
page
14-5

•
Configuring
Traffic
Policies,

page
14-1

•
Configuring
Virtual

Context
Class
Maps,

page
14-6
Policy
Maps
A
policy

map

creates

the

traffic

policy.

The

purpose

of

a

traffic

policy

is

to

implement

specific

ACE
functions
associated

with

a

traffic

class.

A

traffic

policy

contains

the

following

components:

•
Policy
map

name

•
Previously
created

traffic
class
map

or,
optionally,
the
class-default

class

map

•
One
or

more

of

the

individual

Layer

3

and

Layer

4

or

Layer

7

policies

that

specify

the

actions

to
be
performed
by

the

ACE
A
Layer

7

policy

map

is

always

associated

within

a

Layer

3

and

Layer

4

policy

map

to

provide

an

entry
point
for

traffic

classification.

Layer

7

policy

maps

are

considered

to

be

child

policies

and

can

only

be
nested
under

a

Layer

3

and

Layer

4

policy

map.

Only

a

Layer

3

and

Layer

4

policy

map

can

be

activated
on
a

VLAN

interface;

a

Layer

7

policy

map

cannot

be

directly

applied

on

an

interface.

For

example,

to
associate
a

Layer

7

load-balancing

policy

map,

you

nest

the

load-balancing

policy

map

by

using

the
Layer
3

and

Layer

4

Policy

map

action

type.
If
none

of

the

classifications

specified

in

policy

maps

match,

then

the

ACE

executes

the

default

actions
specified
against

the

class

map

configured

with

the

Use

Class

Default

option

to

use

a

default

class

map
(if
specified).

All

traffic

that

fails

to

meet

the

other

matching

criteria

in

the

named

class

map

belongs

to
the
default

traffic

class.

The

Use

Class

Default

feature

has

an

implicit

match-any

match

statement

and
is
used

to

match

any

traffic

classification.