12-01-2011
01:08 PM
- last edited on
08-10-2023
10:52 PM
by
Translator
Hello,
I am trying to remove a
class map
off of a router, when I do it tells me the
class map
is being used.
So I go to the
policy map
where it is applied and type
no class class-name
it accepts the command but i try to remove the
class map
again and it is still being used.
I check the
policy map
and the
class map
still shows only it is shows as a blank entry with no precedence or access group applied to it.
Any idea how I can remove this
class map
from the
policy map
so i can remove the
class map
from the router?
Solved! Go to Solution.
12-01-2011
01:48 PM
- last edited on
08-10-2023
10:56 PM
by
Translator
Hi,
i believe the
policy map
is applied on any one of the interfaces and acl is matching some traffic and that is the reason why you are not able to remove the
class map from policy map
Here are the steps to remove a
class map from a policy map
Switch#conf t
switch(config)# class-map
switch(config-cmap)# no match access-list
switch(config-cmap)# policy-map
switch(config-pmap)# no class
switch(config-pmap)#exit
switch(config)# no access-list
Hope this answers your question.
Cheers
Somu
Rate helpful posts
12-01-2011
02:06 PM
- last edited on
08-10-2023
11:00 PM
by
Translator
Hi,
remove the
policy-map
from the interface with the interface command
no service-policy in|out
then you can remove the
class-map
Regards.
Alain
12-01-2011
01:48 PM
- last edited on
08-10-2023
10:56 PM
by
Translator
Hi,
i believe the
policy map
is applied on any one of the interfaces and acl is matching some traffic and that is the reason why you are not able to remove the
class map from policy map
Here are the steps to remove a
class map from a policy map
Switch#conf t
switch(config)# class-map
switch(config-cmap)# no match access-list
switch(config-cmap)# policy-map
switch(config-pmap)# no class
switch(config-pmap)#exit
switch(config)# no access-list
Hope this answers your question.
Cheers
Somu
Rate helpful posts
05-05-2016
09:59 PM
- last edited on
08-10-2023
10:59 PM
by
Translator
Hi,
I try the command to clear all
policy-map and class-map
clear configure policy-map
clear configure class-map
hope be helpful
12-01-2011
02:06 PM
- last edited on
08-10-2023
11:00 PM
by
Translator
Hi,
remove the
policy-map
from the interface with the interface command
no service-policy in|out
then you can remove the
class-map
Regards.
Alain
06-23-2020
08:27 AM
- last edited on
08-10-2023
11:01 PM
by
Translator
I do not want to remove
class-map
as we have a few ACL listed and nating.
I just want to make sure that the following is removed
policy-map type inspect dns migrated_dns_map_1
i. parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
b. policy-map global_policy
i. inspect dns migrated_dns_map_1
inspect ftp
inspect tftp
6. following lines were entered by asa
a. policy-map type inspedct dns migrated_dns_map_2
i. parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
12-02-2011
06:30 AM
- last edited on
08-10-2023
11:03 PM
by
Translator
Thank you, you were both right. The policy was still applied to the interface.
Wish I read your responses before I forged ahead because I ended up removing and re-adding the
policy-map
just to delete my unwanted
class-maps
Either way the QOS configuration has been corrected. Thanks for your help...
06-22-2020
03:53 AM
- last edited on
08-10-2023
11:07 PM
by
Translator
Good Morning.
I would like to thank everyone that has replied and forgive me maybe I am not explaining what I am seeing correctly or I do not understand what I think I understand :). Here is what is going on in a nutshell. I have a
ASA 5516
with no config. I create a config with no
policy-map
type. It does only included a
Policy-map
global policy with a few entries to inspect. I have created a config template, We have a script that sees that template and changes IP's then pushes out configs accordingly. The configs that are generated are good. However once loaded and the ASA reloads I then have entries that were not added in the config see below.
Policy-map type inspect dns migrated_dns_map_1
parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
Policy-map type inspect dns migrated_dns_map_2
parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
I also have extra entries within the
Policy-map
global policy that I have not added ( why and how did they get there)
for example the items that I did not add to the config that appear in the
policy-map global_policy
are below.
inspect dns migrated_dns_map_1
inspect ftp
inspect tftp
I guess what I do not understand is why they are automatically show up on my ASA config when they are not included on my config that I have built for these ASA's . One reason that I am not understanding what is going on , Is that the items that are appearing within my config after reload should not be there as they were not part of the config.
Thank you again for all help
06-22-2020
09:39 AM
- last edited on
08-10-2023
11:07 PM
by
Translator
Resolved (removed match
default-inspection-traffic
)
06-23-2020
08:23 AM
- last edited on
08-10-2023
11:10 PM
by
Translator
Sorry jumped the gun, My solution worked for one day then after another reload the Default Policies took back over ..... UGG!!
At first removing match
default-inspection-traffic
seemed to work but the below
policy maps
came back > I need to removing them completely so that they do not return. When I try I get Error:
policy-map migrated_dns_map_1
is being used and hence cannot be removed
expletives here
We do not have DNS hence we want this removed from the Config ....
Please help
policy-map type inspect dns migrated_dns_map_1
i. parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
b. policy-map global_policy
i. inspect dns migrated_dns_map_1
inspect ftp
inspect tftp
6. following lines were entered by asa
a. policy-map type inspedct dns migrated_dns_map_2
i. parameters
message-length maximum client auto
message-length maximum 512
no tcp-inspection
Thank you
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide