|
|
|
Step 1
|
Router> enable
|
Enables privileged EXEC mode.
|
Step 2
|
Router # configure terminal
|
Enters global configuration mode.
|
Step 3
|
Router(config)# class-map [match-all
| match-any] class-name
|
Creates a class to be used with a class map, and enters
class-map configuration mode. The class map is used for matching
packets to the specified class.
Note : The match-all
keyword specifies that all match criteria must be met. The match-any
keyword specifies that one of the match criterion must be met.
|
|
Use one or more of the following match
commands, as applicable.
|
Step 4
|
Router(config-cmap)# match access-group
{access-group | name access-group-name
|
(Optional) Configures the match criteria for a class map
on the basis of the specified access control list (ACL).
Note: Access lists configured with the
optional log keyword of the access-list
command are not supported when configuring a traffic class.
|
Step 5
|
Router(config-cmap)# match any
|
(Optional) Configures the match criteria for a class map
to be successful match criteria for all packets.
|
Step 6
|
Router config-cmap)# match class-map class-name
|
(Optional) Specifies the name of a traffic class to be
used as a matching criterion (for nesting traffic class [nested class
maps] within one another).
|
Step 7
|
Router(config-cmap)# match cos
cos-number
|
(Optional) Matches a packet based on a Layer 2 class of
service (CoS) marking.
|
Step 8
|
Router(config-cmap)# match destination-address
mac address
|
(Optional) Uses the destination Media Access Control
(MAC) address as a match criterion.
|
Step 9
|
Router(config-cmap)# match discard-class class-number
|
(Optional) Matches packets of a certain discard class.
|
Step 10
|
Router(config-cmap)# match [ip]
dscp
dscp-value [dscp-value dscp-value
dscp-value
dscp-value dscp-value dscp-value dscp-value]
|
(Optional) Identifies a specific IP differentiated
service code point (DSCP) value as a match criterion. Up to eight DSCP
values can be included in one match statement.
|
Step 11
|
Router(config-cmap)# match field protocol
protocol-field {eq [mask]
| neq [mask] |
gt | lt | range
range | regex string}
value [next next-protocol]
|
(Optional) Configures the match criteria for a class map
on the basis of the fields defined in the protocol header description
files (PHDFs).
|
Step 12
|
Router(config-cmap)# match fr-dlci dlci-number
|
(Optional) Specifies the Frame Relay data-link
connection identifier (DLCI) number as a match criterion in a class map.
|
Step 13
|
Router(config-cmap)# match input-interface interface-name
|
(Optional) Configures a class map to use the specified
input interface as a match criterion.
|
Step 14
|
Router(config-cmap)# match ip rtp starting-port-number
port-range
|
(Optional) Configures a class map to use the Real-Time
Protocol (RTP) protocol port as the match criterion.
|
Step 15
|
Router(config-cmap)# match mpls experimental mpls-values
|
(Optional) Configure a class map to use the specified
value of the Multiprotocol Label Switching (MPLS) experimental (EXP)
field as a match criterion.
|
Step 16
|
Router(config-cmap)# match mpls experimental topmost values
|
(Optional) Matches the MPLS EXP value in the topmost
label.
|
Step 17
|
Router(config-cmap)# match not match-criteria
|
(Optional) Specifies the single match criterion value to
use as an unsuccessful match criterion.
|
Step 18
|
Router(config-cmap)# match packet length
{max maximum-length-value
[min minimum-length-value]
| min minimum-length-value
[max maximum-length-value]}
|
Optional) Specifies the Layer 3 packet length in the IP
header as a match criterion in a class map.
|
Step 19
|
Router(config-cmap)# match port-type {routed |
switched}
|
{routed | switched} (Optional) Matches traffic on the
basis of the port type for a class map.
|
Step 20
|
Router(config-cmap)# match [ip] precedence precedence-value
[precedence-value precedence-value precedence-value]
|
(Optional) Identifies IP precedence values as match
criteria.
|
Step 21
|
Router(config-cmap)# match protocol protocol-name
|
(Optional) Configures the match criteria for a class map
on the basis of the specified protocol.
Note: There is a separate match protocol (NBAR)
command used to configure network-based application recognition (NBAR)
to match traffic by a protocol type known to NBAR.
|
Step 22
|
Router(config-cmap)# match protocol citrix [app
application-name-string] [ica-tag
ica-tag-value]
|
(Optional) Configures NBAR to match Citrix traffic
|
Step 23
|
Router(config-cmap)# match protocol
fasttrack file-transfer "regular-expression"
|
(Optional) Configures NBAR to match FastTrack
peer-to-peer traffic.
|
Step 24
|
Router(config-cmap)# match protocol gnutella
file-transfer "regular-expression"
|
(Optional) Configures NBAR to match Gnutella
peer-to-peer traffic.
|
Step 25
|
Router(config-cmap)# match protocol http [url
url-string | host hostname-string
| mime MIME-type | c-header-field
c-header-field-string | s-header-field
s-header-field-string]
|
(Optional) Configures NBAR to match Hypertext Transfer
Protocol (HTTP) traffic by URL, host, Multipurpose Internet Mail
Extension (MIME) type, or fields in HTTP packet headers.
|
Step 26
|
Router(config-cmap)# match protocol rtp
[audio | video | payload-type
payload-string]
|
(Optional) Configures NBAR to match Real-Time Transfer
Protocol (RTP) traffic.
|
Step 27
|
Router(config-cmap)# match qos-groupqos-group-value
|
qos-group-value (Optional) Identifies a specific QoS
group value as a match criterion.
|
Step 28
|
Router(config-cmap)# match source-address mac address-destination
|
(Optional) Uses the source MAC address as a match
criterion.
|
Step 29
|
Router(config-cmap)# match start {l2-start
| l3-start} offset
number size number {eq | neq
| gt | lt
| range range
| regex string}
{value [value2]
| [string]}
|
(Optional) Configures the match criteria for a class map
on the basis of the datagram header (Layer 2) or the network header
(Layer 3).
|
Step 30
|
Router(config-cmap)# match tag {tag-name}
|
(Optional) Specifies tag type as a match criterion.
|
Step 31
|
Route(config-cmap)# exit
|
(Optional) Exits class-map configuration mode.
|