Cisco Network Module Enhanced Application Performance Assurance User Guide, Rel 2.0.0 - Interoperability Examples [Cisco Application Networking Services Modules]

Table Of Contents

Interoperability Examples

Configuring Zone Based Firewall with Inline Traffic Management

Examples

Configuring Inline Traffic Management with NME-WAE

Examples

Configuring Jumbo Frame Support on Application Performance Assurance

Interoperability Examples

There are a number of features on the integrated services router (ISR) that the user can run along with the NME-APA module. If you choose to run these features on the ISR, you must also configure the ISR in a specific way. This appendix describes the configuration that you must perform.

•Configuring Zone Based Firewall with Inline Traffic Management

•Configuring Inline Traffic Management with NME-WAE

•Configuring Jumbo Frame Support on Application Performance Assurance

Configuring Zone Based Firewall with Inline Traffic Management

To configure zone-based firewall and inline traffic management on the router, add the service module interface to a zone. The example shows the service module interface included in a zone.

Examples
class-map type inspect match-any private-allowed-class
    match protocol tcp
    match protocol udp
    match protocol icmp
!
policy-map type inspect private-allowed-policy
class type inspect private-allowed-class
inspect
!
zone security private
zone security public
zone-pair security priv-pub source private destination public
service-policy type inspect private-allowed-policy
!
interface GigabitEthernet0/0
zone-member security private
!
interface GigabitEthernet0/1
zone-member security public
service-module apa traffic-management inline
!
interface Integrated-Service-Engine1/0
zone-member security private 
Configuring Inline Traffic Management with NME-WAE

To configure inline traffic management with NME-WAE, you need to avoid traffic loops. The example shows the configuration for inline traffic management on NME-WAE.

Examples
ip source-route
ip wccp 61
ip wccp 62
!
interface GigabitEthernet0/1
    ip wccp 61 redirect in
    ip wccp 62 redirect out
service-module apa traffic-management inline
!
interface Integrated-Service-Engine1/0 <-- NME-APA
!
interface Integrated-Service-Engine2/0 <-- NME-WAE
service-module apa traffic-management inline
ip wccp redirect exclude in
Configuring Jumbo Frame Support on Application Performance Assurance

When jumbo frames is configured on the router interface, in addition to APA; the service module interface must also have jumbo frames configured. The example shows jumbo frames configured on the service module interface.
interface GigabitEthernet0/0
    mtu 9000
!
interface GigabitEthernet0/1
    mtu 9000
!
interface Integrated-Service-Engine1/0 <-- NME-APA
    mtu 9000

	Cisco Network Module Enhanced Application Performance Assurance User Guide, Rel 2.0.0
	Interoperability Examples
Cisco Network Module Enhanced Application Performance Assurance User Guide, Rel 2.0.0 About this Guide Cisco Application Performance Assurance Overview Getting Started with Application Performance Assurance Command Line Interface Operations Utility Commands Configuring Security Configuring the Line Interface Failure Recovery Raw Data Formatting: The RDR Formatter Managing Users Monitoring NME-APA Module Utilization MIB Reference NetFlow Records: Formats and Field Contents Interoperability Examples	Download this chapter Interoperability Examples Download the complete book Cisco Network Module Enhanced Application Performance Assurance User Guide (PDF - 2 MB) Table Of Contents Interoperability Examples Configuring Zone Based Firewall with Inline Traffic Management Examples Configuring Inline Traffic Management with NME-WAE Examples Configuring Jumbo Frame Support on Application Performance Assurance Interoperability Examples There are a number of features on the integrated services router (ISR) that the user can run along with the NME-APA module. If you choose to run these features on the ISR, you must also configure the ISR in a specific way. This appendix describes the configuration that you must perform. •Configuring Zone Based Firewall with Inline Traffic Management •Configuring Inline Traffic Management with NME-WAE •Configuring Jumbo Frame Support on Application Performance Assurance Configuring Zone Based Firewall with Inline Traffic Management To configure zone-based firewall and inline traffic management on the router, add the service module interface to a zone. The example shows the service module interface included in a zone. Examples class-map type inspect match-any private-allowed-class match protocol tcp match protocol udp match protocol icmp ! policy-map type inspect private-allowed-policy class type inspect private-allowed-class inspect ! zone security private zone security public zone-pair security priv-pub source private destination public service-policy type inspect private-allowed-policy ! interface GigabitEthernet0/0 zone-member security private ! interface GigabitEthernet0/1 zone-member security public service-module apa traffic-management inline ! interface Integrated-Service-Engine1/0 zone-member security private Configuring Inline Traffic Management with NME-WAE To configure inline traffic management with NME-WAE, you need to avoid traffic loops. The example shows the configuration for inline traffic management on NME-WAE. Examples ip source-route ip wccp 61 ip wccp 62 ! interface GigabitEthernet0/1 ip wccp 61 redirect in ip wccp 62 redirect out service-module apa traffic-management inline ! interface Integrated-Service-Engine1/0 <-- NME-APA ! interface Integrated-Service-Engine2/0 <-- NME-WAE service-module apa traffic-management inline ip wccp redirect exclude in Configuring Jumbo Frame Support on Application Performance Assurance When jumbo frames is configured on the router interface, in addition to APA; the service module interface must also have jumbo frames configured. The example shows jumbo frames configured on the service module interface. interface GigabitEthernet0/0 mtu 9000 ! interface GigabitEthernet0/1 mtu 9000 ! interface Integrated-Service-Engine1/0 <-- NME-APA mtu 9000
	© 1992-2009 Cisco Systems, Inc. All rights reserved. Terms & Conditions \| Privacy Statement \| Cookie Policy \| Trademarks of Cisco Systems, Inc.