|
Command or Action |
Purpose |
|
enable
Example:
Router> enable
|
Enables privileged EXEC mode.
- Enter your password if prompted.
|
|
configure terminal
Example:
Router# configure terminal
|
Enters global configuration mode. |
|
class-map type control [match-all|match-any|match-none] class-map-name
Example:
Router(config)# class-map type control match-all class1
|
Creates or modifies a control class map, which defines the conditions under which the actions of a control policy map will be executed, and enters control class map mode. |
|
available {authen-status | authenticated-domain | authenticated-username | dnis | media | mlp-negotiated | nas-port | no-username | protocol | service-name | source-ip-address | timer | tunnel-name | unauthenticated-domain | unauthenticated-username}
Example:
Router(config-control-classmap)# available nas-port
|
(Optional) Creates a condition that evaluates true if the specified subscriber identifier is locally available. |
|
greater-than [not] nas-port {adapter adapter-number | channel channel-number | ipaddr ip-address | port port-number | shelf shelf-number | slot slot-number | sub-interface sub-interface-number | type interface-type | vci vci-number | vlan vlan-id | vpi vpi-number}
Example:
Router(config-control-classmap)# greater-than nas-port type atm vpi 200 vci 100
|
(Optional) Creates a condition that evaluates true if the subscriber network access server (NAS) port identifier is greater than the specified value. |
|
greater-than-or-equal [not]nas-port {adapter adapter-number | channel channel-number | ipaddr ip-address | port port-number | shelf shelf-number | slot slot-number | sub-interface sub-interface-number | type interface-type | vci vci-number | vlan vlan-id | vpi vpi-number}
Example:
Router(config-control-classmap)# greater-than-or-equal nas-port vlan 10
|
(Optional) Creates a condition that evaluates true if the specified subscriber NAS port identifier is greater than or equal to the specified value. |
|
less-than [not] nas-port {adapter adapter-number | channel channel-number | ipaddr ip-address | port port-number | shelf shelf-number | slot slot-number | sub-interface sub-interface-number | type interface-type | vci vci-number | vlan vlan-id | vpi vpi-number}
Example:
Router(config-control-classmap)# less-than nas-port type atm vpi 200 vci 105
|
(Optional) Creates a condition that evaluates true if the specified subscriber NAS port identifier is less than the specified value. |
|
less-than-or-equal [not] nas-port {adapter adapter-number | channel channel-number | ipaddr ip-address | port port-number | shelf shelf-number | slot slot-number | sub-interface sub-interface-number | type interface-type | vci vci-number | vlan vlan-id | vpi vpi-number}
Example:
Router(config-control-classmap)# less-than-or-equal nas-port ipaddr 10.10.10.10
|
(Optional) Creates a condition that evaluates true if the specified subscriber NAS port identifier is less than or equal to the specified value. |
|
match authen-status {authenticated | unauthenticated}
Example:
Router(config-control-classmap)# match authen-status authenticated
|
(Optional) Creates a condition that evaluates true if a subscriber's authentication status matches the specified authentication status. |
|
match authenticated-domain {domain-name | regexp regular-expression}
Example:
Router(config-control-classmap)# match authenticated-domain cisco.com
|
(Optional) Creates a condition that evaluates true if a subscriber's authenticated domain matches the specified domain. |
|
match authenticated-username {username | regexp regular-expression}
Example:
Router(config-control-classmap)# match authenticated-username regexp "admin@.*com"
|
(Optional) Creates a condition that evaluates true if a subscriber's authenticated username matches the specified username. |
|
match dnis {dnis | regexp regular-expression}
Example:
Router(config-control-classmap)# match dnis reg-exp 5551212
|
(Optional) Creates a condition that evaluates true if a subscriber's Dialed Number Identification Service number (DNIS number, also referred to as called-party number) matches the specified DNIS number. |
|
match media {async | atm | ether | ip | isdn | mpls | serial}
Example:
Router(config-control-classmap)# match media atm
|
(Optional) Creates a condition that evaluates true if a subscriber's access media type matches the specified media type. |
|
match mlp-negotiated {no | yes}
Example:
Router(config-control-classmap)# match mlp-negotiated yes
|
(Optional) Creates a condition that evaluates true or false depending on whether the subscriber's session was established using multilink PPP negotiation.
- If the yes keyword is used, the condition evaluates true if the subscriber's session was established using multilink PPP negotiation.
|
|
match nas-port {adapter adapter-number | channel channel-number | circuit-id name | ipaddr ip-address | port port-number | remote-id name | shelf shelf-number | slot slot-number | sub-interface sub-interface-number | type {async | atm | basic-rate| enm | ether | fxo | fxs | none | primary-rate | synch | vlan | vty} | vci vci-number | vlan vlan-id | vpi vpi-number}
Example:
Router(config-control-classmap)# match nas-port type ether slot 3
|
(Optional) Creates a condition that evaluates true if a subscriber's NAS port identifier matches the specified value. |
|
match no-username {no | yes}
Example:
Router(config-control-classmap)# match no-username yes
|
(Optional) Creates a condition that evaluates true or false depending on whether or not a subscriber's username is available.
- If the yes keyword is used, the condition evaluates true if the subscriber's username is not available.
|
|
match protocol {atom | ip | pdsn | ppp | vpdn}
Example:
Router(config-control-classmap)# match protocol ip
|
(Optional) Creates a condition that evaluates true if a subscriber's access protocol type matches the specified protocol type. |
|
match service-name {service-name | regexp regular-expression}
Example:
Router(config-control-classmap)# match service-name service1
|
(Optional) Creates a condition that evaluates true if the service name associated with a subscriber matches the specified service name. |
|
match source-ip-address ip-address subnet-mask
Example:
Router(config-control-classmap)# match source-ip-address 10.10.10.10 255.255.255.255
|
(Optional) Creates a condition that evaluates true if a subscriber's source IP address matches the specified IP address. |
|
match timer {timer-name | regexp regular-expression}
Example:
Router(config-control-classmap)# match timer TIMERA
|
(Optional) Creates a condition that evaluates true upon expiry of a specified policy timer. |
|
match tunnel-name {tunnel-name | regexp regular-expression}
Example:
Router(config-control-classmap)# match tunnel-name regexp L.*
|
(Optional) Creates a condition that evaluates true if a subscriber's virtual private dialup network (VPDN) tunnel name matches the specified tunnel name. |
|
match unauthenticated-domain {domain-name | regexp regular-expression}
Example:
Router(config-control-classmap)# match unauthenticated-domain example.com
|
(Optional) Creates a condition that evaluates true if a subscriber's unauthenticated domain name matches the specified domain name. |
|
match unauthenticated-username {username | regexp regular-expression}
Example:
Router(config-control-classmap)# match unauthenticated-username regexp examplename1
|
(Optional) Creates a condition that evaluates true if a subscriber's unauthenticated username matches the specified username. |
|
match vrf {vrf-name | regexp regular-expression}
Example:
Router(config-control-classmap)# match vrf regexp examplename2
|
(Optional) Creates a condition that evaluates true if a subscriber's VPN routing and forwarding (VRF) matches the specified VRF. |