cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
339
Views
0
Helpful
2
Replies
Highlighted
Beginner

source ip filtering with class map on cisco ace30

Hello ,

I would like to know if it is  possible to filter source ips connecting to a virtual ip  within a class map configuration ( or something else  ) ?

access-list S_IP_FILTERING line 8 extended permit ip host 1.1.1.1 any

 

class-map match-all S_IP_FILTERING_XVIP

2 match access-list S_IP_FILTERING

3 match virtual-address 2.2.2.2 any

Error: Only one match access-list is allowed in a match-all class-map and it cannot mix with any other match type

 

thanks for your support

 

Case,

 

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Beginner

Hi,

 

Yes, it is possible to do this. Use the ACL filter for the source IP address under the policy-map type loadbalance. Then you would call that load balance policy in your multi-match policy under the appropriate class.

for example:

class-map type http loadbalance match-any LOADBALANCE-FILTER

  2 match source-address X.X.X.X 255.255.255.255

 

class-map match-any TEST-CLASSMAP

  2 match virtual-address Y.Y.Y.Y tcp eq www

 

policy-map type loadbalance first-match LOADBALANCE

  class LOADBALANCE-FILTER

    serverfarm TEST-SERVERFARM

 

 

policy-map multi-match UTC-PM

  class TEST-CLASSMAP

    loadbalance policy LOADBALANCE

    loadbalance vip inservice

 

 

-Alex

 

 

View solution in original post

2 REPLIES 2
Highlighted
Beginner

Hi,

 

Yes, it is possible to do this. Use the ACL filter for the source IP address under the policy-map type loadbalance. Then you would call that load balance policy in your multi-match policy under the appropriate class.

for example:

class-map type http loadbalance match-any LOADBALANCE-FILTER

  2 match source-address X.X.X.X 255.255.255.255

 

class-map match-any TEST-CLASSMAP

  2 match virtual-address Y.Y.Y.Y tcp eq www

 

policy-map type loadbalance first-match LOADBALANCE

  class LOADBALANCE-FILTER

    serverfarm TEST-SERVERFARM

 

 

policy-map multi-match UTC-PM

  class TEST-CLASSMAP

    loadbalance policy LOADBALANCE

    loadbalance vip inservice

 

 

-Alex

 

 

View solution in original post

Highlighted

Hi Alex,

Thanks, it works

 

FD.

 

This widget could not be displayed.