Cisco Cisco Packet Data Interworking Function (PDIF) Guía Para Resolver Problemas
Crypto Group Configuration Mode Commands
▀ match address
▄ Cisco ASR 5000 Series Command Line Interface Reference
OL-22948-01
match address
Associates an access control list (ACL) to the crypto group.
Product
PDSN, HA, GGSN
Privilege
Security Administrator, Administrator
Syntax
Deletes a previously configured ACL association.
The name of the ACL being matched to the crypto group.
The priority of the ACL.
The ACL preference is factored when a single packet matches the criteria of more than one ACL.
The ACL preference is factored when a single packet matches the criteria of more than one ACL.
can be configured to any integer value from 0 to 4294967295. "0" is the highest priority.
If multiple ACLs are assigned the same priority, the last one entered will be used first.
Important:
The priorities are only compared for ACLs matched to other groups or to policy ACLs (those applied
to the entire context).
Usage
IP ACLs are associated with crypto groups using this command. Both the crypto group and the ACLs must be
configured in the same context.
ISAKMP crypto maps can then be associated with the crypto group. This allows user traffic matching the
rules of the ACL to be handled according to the policies configured as part of the crypto map.
configured in the same context.
ISAKMP crypto maps can then be associated with the crypto group. This allows user traffic matching the
rules of the ACL to be handled according to the policies configured as part of the crypto map.
Example
The following command associates an ACL called
The following command associates an ACL called
to the crypto group: