policy-map multi-match

[ajay chauhan]

Hi Guys,

I need explanation on multi-match policy on ACE. How does it work ?

Lets take this example-

policy-map multi-match CLIENT-VIPS

  class VIP1-80

    loadbalance vip inservice

    loadbalance policy VIP1-POLICY

policy-map type loadbalance first-match VIP1-POLICY

  class class-default

    serverfarm SERVERFARM1

class-map match-all VIP1-80

  2 match virtual-address 192.168.1.200 tcp eq http

This will work for sure looking for functional diffrence if I make POLICY CLIENT_VIPS to frist match,what difrence will come in this case. will it not just match class VIP1-80 and redirect request to serverfarm.

Or this is something where multiple class can be called under CLIENT_VIPS like Inspection ?

Thanks

Ajay

[sivaksiv]

Hi Ajay,

For policy-map commands that contain the  multi-match keyword, these commands specify that multiple sets of classes exist in the policy map and allow a multi-feature policy map. The ACE applies a first-match execution process to  each class set in which a packet can match multiple classes within the  policy map, but the ACE executes the action for only one matching class  within each of the class sets.

Regards,

Siva

[ajay chauhan]

Hi Siva,

Can you please post any example where multiple actions are performed under multi-match policy ?

Thanks

Ajay

[sivaksiv]

HI Ajay,

Say if you have 2 class-maps on different ports 80 & 443

policy-map multi-match CLIENT-VIPS

  class VIP1-80

    loadbalance vip inservice

    loadbalance policy VIP1-POLICY1

  class VIP1-443

    loadbalance vip inservice

    loadbalance policy VIP1-POLICY2

class-map match-all VIP1-80

  2 match virtual-address 192.168.1.200 tcp eq http

class-map match-all VIP1-443

  2 match virtual-address 192.168.1.200 tcp eq https

Regards,

Siva

[ajay chauhan]

Hi Siva,

I think this can be done like-

class-map match-any VIP1-80

  2 match virtual-address 192.168.1.200 tcp eq http

  3 match virtual-address 192.168.1.200 tcp eq https

I am looking for example with match-all /multiple actions.

Thanks

Ajay

[sivaksiv · Accepted solution]

No its not..

I have 2 different policies VIP1-POLICY1 & VIP1-POLICY2 attached to each class. So you need separate class map to map it to different policies or different servers.

Regards,
Siva