iii
Cisco ASA Series Firewall CLI Configuration Guide
CONTENTS
About This Guide xxv
Document Objectives xxv
Related Documentation xxv
Conventions xxv
Obtaining Documentation and Submitting a Service Request xxvi
PART
1 Configuring Service Policies Using the Modular Policy Framework
CHAPTER
1 Configuring a Service Policy Using the Modular Policy Framework 1-1
Information About Service Policies 1-1
Supported Features 1-2
Feature Directionality 1-2
Feature Matching Within a Service Policy 1-3
Order in Which Multiple Feature Actions are Applied 1-4
Incompatibility of Certain Feature Actions 1-5
Feature Matching for Multiple Service Policies 1-6
Licensing Requirements for Service Policies 1-6
Guidelines and Limitations 1-6
Default Settings 1-8
Default Configuration 1-8
Default Class Maps 1-9
Task Flows for Configuring Service Policies 1-9
Task Flow for Using the Modular Policy Framework 1-9
Task Flow for Configuring Hierarchical Policy Maps for QoS Traffic Shaping 1-11
Identifying Traffic (Layer 3/4 Class Maps) 1-12
Creating a Layer 3/4 Class Map for Through Traffic 1-12
Creating a Layer 3/4 Class Map for Management Traffic 1-14
Defining Actions (Layer 3/4 Policy Map) 1-15
Applying Actions to an Interface (Service Policy) 1-17
Monitoring Modular Policy Framework 1-18
Configuration Examples for Modular Policy Framework 1-18
Applying Inspection and QoS Policing to HTTP Traffic 1-19
Applying Inspection to HTTP Traffic Globally 1-19