14-32
User
Guide

for

the

Cisco

Application

Networking

Manager

5.2
OL-26572-01
Chapter
14






Configuring

Traffic

Policies
Configuring
Virtual

Context

Policy

Maps

•
Click
Next
to

configure

another
match
condition

for
this
class

map.
Related
Topics

•
Configuring
Virtual

Context
Class
Maps,

page
14-6

•
Configuring
Virtual

Context
Policy
Maps,

page
14-32
Configuring
Virtual

Context

Policy

Maps
You
can

create

policy

maps

for

a

context

that

establish

traffic

policy

for

the

ACE.

The

purpose

of

a

traffic
policy
is

to

implement

specific

ACE

functions

associated

with

a

traffic

class.
A
traffic

policy

contains

the

following:

•
A
policy

map

name.

•
A
previously
created
traffic

class

map

or,

optionally,

the
class-default
class
map.

•
One
or

more

of

the

individual
Layer
3/Layer

4

or

Layer

7

policies

that

specify

the

actions

to
be
performed
by

the

ACE.
The
ACE

executes

actions

specified

in

a

policy

map

on

a

first-match,

multi-match,

or

all-match

basis

as
follows:

•
First-match—With
a

first-match

policy
map,
the
ACE
executes

only

the
action
specified
against

the
first
classification

t

hat

i

t

matches.

Layer

3/

Layer

4

Ma

nagement

Traffic,

Layer

7

Ser

ver

Load
Balancing,
Layer

7

Command

Inspection

-

FTP,

and

Layer

7

HTTP

Optimization

policy

maps

are
first-match
policy

maps.

•
Multi-match—With
a

multi-match
policy
map,
the
ACE

executes

all

possible

actions

applicable

for
a
specific

classification.

Layer

3/Layer

4

Network

Traffic

policy

maps

are

multi-match

policy

maps.

•
All-match—With
an

all-match

policy
map,

the

ACE

attempts

to

match

all

specified

conditions
against
the

matching

classification

and

executes

the

actions

of

all

matching

classes

until

it
encounters
a

de

ny

for


a

match

request.
You
can

di

splay

a

context’s

pol

icy

maps

and

t

heir

types

i

n

the

Pol

icy

Maps

table

(Config

>

Virtual
Contexts
>

context

>

Expert

>

Policy

Maps.)
The
t

ypes

of

pol

icy

maps

that

you

can

configure

depend

on

t

he

ACE

device

type.

Ta

b

l

e


14-14

lists

the
types
of

policy

maps

with

brief

descriptions

and

the

ACE

devices

that

support

them.
Ta
b

l

e


14-14
Policy
Maps

and

ACE

Device

Support
Policy
Map

Type
Description
ACE
Device
ACE
Module
ACE
Appliance
Layer
3/4

Management

Traffic

(First-Match)
Layer
3

and

Layer

4

policy

map

for

network
management
traffic

received

by

the

ACE
X
X
Layer
3/4

Network

Traffic

(First-Match)
Layer
3

and

Layer

4

policy

map

for

traffic
passing
through

the

ACE
X
X
Layer
7

Command

Inspection

-

FTP
(First-Match)
Layer
7

policy

map

for

inspection

of

FTP
commands
X
X