end
Exits the current configuration mode and returns to the Exec mode.
Product
All
Privilege
Security Administrator, Administrator
Syntax
end
Usage Guidelines
Use this command to return to the Exec mode.
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Class-Map is used to configure a packet classifier for the flow-based Traffic Policing feature within destination context. It filters egress and/or ingress packets of a subscriber session based on rules configured in a subscriber context.
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
Important |
The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s). |
Exits the current configuration mode and returns to the Exec mode.
All
Security Administrator, Administrator
end
Use this command to return to the Exec mode.
Exits the current mode and returns to the parent configuration mode.
All
Security Administrator, Administrator
exit
Use this command to return to the parent configuration mode.
Allows all traffic types in this class map.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match any
Sets the match rule to allow all traffic flow for specific class map.
match any
Specifies a traffic classification rule based on the destination IP address of packets.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match dst-ip-address dst_ip_address / subnet_mask
Specifies the destination IP address of the packets.
dst_ip_address must be entered in IPv4 dotted-decimal or IPv6 colon-separated-hexadecimal notation.
subnet_mask is an option that is entered in CIDR notation.
Sets the match rule based on the destination IP address of packets for specific Class Map.
match dst-ip-address 10.1.2.6
Specifies a traffic classification rule based on the range of destination ports for L4 packets.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match dst-port-range initial_port_number [ to last_port_number ]
Specifies the destination port or range of ports of L4 packets.
initial_port_number is the starting port number and must be an integer 1 to 65535 but less than last_port_number , if specified.
last_port_number is the end port number and must be an integer from 1 to 65535 but more than initial_port_number .
Sets the match rule based on the destination port number or range of ports of L4 packets for specific Class Map.
match dst-port-range 23 to 88
Specifies a traffic classification rule based on the IP Type of Service value in ToS field of packet.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match ip-tos { service_value [ ip-tos-mask mask_value ] | tos-range low_value to high_value }
Specifies the IP Type-of-Service value to match inside the ToS field of packets as an integer from 0 to 255.
Specifies the IP Type-of-Service mask value to match inside the ToS field of packets as an integer from 1 to 255.
Specifies a range that a ToS value in a received packet must fall within to be considered a match. low_value and high_value must be an integer from 0 to 255.
Sets the match rule based on the IP ToS value in ToS field of packets for specific Class Map.
match ip-tos 3
Specifies a traffic classification rule based on the IPSec Security Parameter Index (SPI) value in the SPI field of packet.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match ipsec-spi index_value
Specifies the IPSec SPI value to match inside the SPI field of packets as an integer from 1 to 65535.
Sets the match rule based on the IPSec SPI value in SPI field of packets for specific Class Map.
match ipsec-spi 1234
Specifies a traffic classification rule based on the size of packet.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match packet-size [ gt | lt ] size
Specifies the packet length in bytes.
gt : indicates a packet size greater than the specified size.
lt : indicates a packet size less than the specified size.
size must be an integer from 1 to 65535.
Sets the match rule based on the size of packets for specific Class Map. This command is only applicable for static policies; it is not available for dynamic policies.
match packet-size 1024
Specifies a traffic classification rule based on the protocol used for session flow.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match protocol { gre | ip-in-ip | number | rtp | sip | tcp | udp }
Sets the match rule for session flow using Generic Routing Encapsulation (GRE) Protocol. It matches the protocol field to GRE inside the packet.
Sets the match rule for session flow using IP-in-IP encapsulation protocol. It matches the protocol field to ip-in-ip inside the packet.
Sets the match rule for a session flow using Transmission Control Protocol (TCP). It matches the specified protocol field inside the packet.
Sets the match rule for a session flow using Real Time Protocol (RTP). It matches the specified protocol field inside the packet.
Sets the match rule for a session flow using Session Initiation Protocol (SIP). It matches the specified protocol field inside the packet.
Sets the match rule for a session flow using Transmission Control Protocol (TCP). It matches the protocol field to TCP inside the packet.
Sets the match rule for a session flow having User Datagram Protocol (UDP). It matches the protocol field to UDP inside the packet.
Sets the match rule based on the protocol of packet flow for a specific Class Map.
match protocol ip-in-ip
Specifies a traffic classification rule based on the source IP address of packets.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match src-ip-address src_ip_address / subnet_mask
Specifies the destination IP address of the packets.
src_ip_address must be entered in IPv4 dotted-decimal or IPv6 colon-separated-hexadecimal notation.
subnet_mask is an option that is entered in CIDR notation.
Sets the match rule based on the source IP address of packets for specific Class Map.
match src-ip-address 10.1.2.3
Specifies a traffic classification rule based on the range of source ports of L4 packets.
PDSN
HA
ASN-GW
HSGW
P-GW
SAEGW
SCM
Security Administrator, Administrator
Exec > Global Configuration > Context Configuration > Class-Map Configuration
configure > context context_name > class-map class_map_name
Entering the above command sequence results in the following prompt:
[context_name]host_name(config-class-map)#
match src-port-range initial_port_number [ to last_port_number ]
Specifies the source port or range of ports of the L4 packets.
initial_port_number is the starting port number and must be an integer from 1 to 65535 but less than last_port_number , if specified.
last_port_number is the end port number and must be an integer from 1 to 65535 but more than initial_port_number .
Sets the match rule based on source port number or range of ports of L4 packets for specific Class Map.
match src-port-range 23 to 88