Command Reference vA5(1.0) and earlier, Cisco ACE Application Control Engine
Domain Configuration Mode Commands
Downloads: This chapterpdf (PDF - 55.0KB) The complete bookPDF (PDF - 28.65MB) | Feedback

Domain Configuration Mode Commands

Table Of Contents

Domain Configuration Mode Commands

(config-domain) add-object


Domain Configuration Mode Commands

Domain configuration mode commands allow you to determine a user's domain (namespace in which the user operates). To create a domain and access domain configuration mode, use the domain command in configuration mode. The CLI prompt changes to (config-domain). For information about the commands in domain configuration mode, see the commands in this section.

Use the no form of this command to remove a domain from the configuration.

domain name

no domain name

Syntax Description

name

Unique identifier of a domain in a context. Enter an unquoted text string with no spaces and a maximum of 64 alphanumeric characters.


Command Modes

Configuration mode

Admin and user contexts

Command History

ACE Module Release
Modification

3.0(0)A1(2)

This command was introduced.


ACE Appliance Release
Modification

A1(7)

This command was introduced.


Usage Guidelines

All commands in this mode require the context Admin user role. For details about role-based access control (RBAC) and user roles, see the Virtualization Guide, Cisco ACE Application Control Engine.

A domain does not restrict the context configuration that you can display using the show running-config command. You can still display the running configuration for the entire context. However, you can restrict your access to the configurable objects within a context by adding to the domain only a limited subset of all the objects available to a context. To limit a user's ability to manipulate the objects in a domain, you can assign a role to that user. For more information about domains and user roles, see the Virtualization Guide, Cisco ACE Application Control Engine.

You can configure KAL-AP TAGs as domains. For the domain load calculation, the ACE considers the Layer 3 class map, server farm, and real server objects. All other objects under the domain are ignored during the calculation.

Examples

To create a domain named D1 and access domain configuration mode, enter:

host1/Admin(config)# domain D1
host1/Admin(config-domain)#
 
   

To delete the D1 domain, enter:

host1/Admin(config)# no domain D1

Related Commands

show domain
show running-config

(config-domain) add-object

To associate a configuration object with a domain, use the add-object command. Use the no form of this command to remove an object added to the domain.

add-object {access-list {ethertype | extended} name | action-list name | all | class-map name | interface {bvi number | vlan number} | object-group name | parameter-map name | policy-map name | probe name | rserver name | script name | serverfarm name | sticky name}

no add-object {access-list {ethertype | extended} name | action-list name | all | class-map name | interface {bvi number | vlan number} | object-group name | parameter-map name | policy-map name | probe name | rserver name | script name | serverfarm name | sticky name}

Syntax Description

access-list

Specifies an existing access control list that you want to associate with the domain.

ethertype

Specifies an existing EtherType access control list that you want to associate with the domain.

extended

Specifies an existing extended access control list that you want to associate with the domain.

name

Name of the access control list.

action-list name

Specifies an existing action list that you want to associate with the domain.

all

Specifies that all configuration objects in the context are added to the domain.

class-map name

Specifies an existing class map for flow classification that you want to associate with the domain.

interface

Specifies an existing interface—either a Bridge Group Virtual Interface or a VLAN—that you want to associate with the domain.

bvi number

Specifies the existing Bridge Group Virtual Interface that you want to associate with the domain. Enter an integer from 1 to 4094.

vlan number

Specifies the existing VLAN that you want to associate with the domain. Enter an integer from 2 to 4094.

object-group name

Specifies an existing object group that you want to associate with the domain.

parameter-map name

Specifies an existing parameter map that you want to associate with the domain.

policy-map name

Specifies an existing policy map that you want to associate with the domain.

probe name

Specifies an existing real server probe (keepalive) that you want to associate with the domain.

rserver name

Specifies an existing real server that you want to associate with the domain.

script name

Specifies an existing script file (created with the ACE TCL scripting language) that you want to associate with the domain.

serverfarm name

Specifies an existing server farm that you want to associate with the domain.

sticky name

Specifies an existing sticky group that you want to associate with the domain to maintain persistence with a server.


Command Modes

Domain configuration mode

Admin and user contexts

Command History

ACE Module Release
Modification

3.0(0)A1(2)

This command was introduced.


ACE Appliance Release
Modification

A1(7)

This command was introduced.


Usage Guidelines

This command has no usage guidelines.

Examples

To associate an interface called VLAN 10 with a domain, enter:

host1/Admin(config-domain)# add-object interface vlan 10

Related Commands

show domain