Contents
xxiii
Cisco ASA 5500 Series Configuration Guide using the CLI
Configuration Examples for Twice NAT 31-24
Different Translation Depending on the Destination (Dynamic PAT) 31-24
Different Translation Depending on the Destination Address and Port (Dynamic PAT) 31-26
Feature History for Twice NAT 31-28
PART
8Configuring Service Policies Using the Modular Policy Framework
CHAPTER
32 Configuring a Service Policy Using the Modular Policy Framework 32-1
Information About Service Policies 32-1
Supported Features for Through Traffic 32-2
Supported Features for Management Traffic 32-2
Feature Directionality 32-2
Feature Matching Within a Service Policy 32-3
Order in Which Multiple Feature Actions are Applied 32-4
Incompatibility of Certain Feature Actions 32-5
Feature Matching for Multiple Service Policies 32-6
Licensing Requirements for Service Policies 32-6
Guidelines and Limitations 32-6
Default Settings 32-7
Default Configuration 32-7
Default Class Maps 32-8
Task Flows for Configuring Service Policies 32-9
Task Flow for Using the Modular Policy Framework 32-9
Task Flow for Configuring Hierarchical Policy Maps for QoS Traffic Shaping 32-11
Identifying Traffic (Layer 3/4 Class Maps) 32-12
Creating a Layer 3/4 Class Map for Through Traffic 32-12
Creating a Layer 3/4 Class Map for Management Traffic 32-14
Defining Actions (Layer 3/4 Policy Map) 32-15
Applying Actions to an Interface (Service Policy) 32-17
Monitoring Modular Policy Framework 32-18
Configuration Examples for Modular Policy Framework 32-18
Applying Inspection and QoS Policing to HTTP Traffic 32-19
Applying Inspection to HTTP Traffic Globally 32-19
Applying Inspection and Connection Limits to HTTP Traffic to Specific Servers 32-20
Applying Inspection to HTTP Traffic with NAT 32-21
Feature History for Service Policies 32-21