Cisco Cisco ACE Application Control Engine Module

ページ / 130
 
10
Release Note for the Cisco Application Control Engine Module
OL-22471-01
New Software Features in Version A2(2.0)
Configuring the VIP Address Match Statement
Before you configure the VIP KAL-AP tag, configure a Layer 3 class map that contains a VIP address 
match statement. You can define a 3-tuple flow of VIP address, protocol, and port as matching criteria 
by using the match virtual-address command in class map configuration mode. You can configure 
multiple match criteria statements to define the VIP for server load balancing. The syntax of this 
command is as follows:
[line_number] match virtual-address vip_address {[mask] | any | {tcp udp {any | eq 
port_number range port1 port2}} | protocol_number}
For detailed information on the keywords and arguments for this command, see the Cisco Application 
Control Engine Module Server Load-Balancing Guide
Note
For KAL-AP, the ACE verifies whether the VIP addresses are active in all Layer 3 class maps that are 
configured with the addresses. It ignores all other protocol-specific information for the VIP addresses. 
For example, to create a class map VIP-20 that matches traffic destined to VIP address 10.10.10.10 with 
a wildcard value for the IP protocol value (TCP or UDP), enter the following command:
host1/Admin(config)# class-map VIP-20
host1/Admin(config-cmap)# match virtual-address 10.10.10.10 any
Associating a KAL-AP Tag to a VIP Class Map
After you configure a Layer 3 class map that contains a KAL-AP VIP address match statement, you can 
associate a KAL-AP tag with the address in the class map by using the kal-ap-tag command in policy 
map class configuration mode. The syntax for this command is as follows:
kal-ap-tag tag_name
The tag_name is the name of the KAL-AP tag. Enter the name as an unquoted text string with no spaces 
and a maximum of 76 alphanumeric characters.
Note the following restrictions:
You cannot associate the same tag name to more than one Layer 3 class map. 
You cannot associate the same tag name to a domain and a Layer 3 class map. 
You cannot configure a tag name for a Layer 3 class map that already has a tag configuration as part 
of a different Layer 3 policy map configuration, even if it is the same tag name.
For example, to associate the VIP-20 class map with the l3_policy20 policy map by using the class 
command in policy map configuration mode and access policy class configuration mode, enter the 
following command:
host1/Admin(config)# policy-map multi-match l3_policy20
host1/Admin(config-pmap)# class VIP-20
host1/Admin(config-pmap-c)#
To associate the KAL-AP-TAG2 tag with the class map, enter the following command:
host1/Admin(config-pmap-c)# kal-ap-tag KAL-AP-TAG2
To remove the KAL-AP-TAG2 tag from the class map, enter the following command:
host1/Admin(config-pmap-c)# no kal-ap-tag