class-map & class-map type inpect

[paulekhla]

Hello,

I am confused with the difference between these two commands and their different use.

1: Difference between CLASS-MAP and CLASS-MAP TYPE INSPECTED.

2: Difference between POLICY-MAP and POLICY-MAP TYPE INSPECTED.

Best regards,

[Cristian Matei]

Hi,

     Everything is under the umbrella of "Cisco Common Classification Policy Language" or "C3PL", as a common language to achieve different functionalities using the same blocks of class-maps and policy-maps. Regular class-maps and policy-maps are used for QoS, while inspect class-maps and policy-maps are used for zone-based firewall function. Here's some guides:

Spoiler

https://www.cisco.com/c/en/us/td/docs/routers/access/cisco_router_and_security_device_manager/24/software/user/guide/C3PL.html#wp998975
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/quality-of-service-qos/white_paper_c11-481499.html
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/98628-zone-design-guide.html

Regards,

Cristian Matei.