Cisco ASA 5505 - Manual (Page 639)

C H A P T E R
32-1
Cisco ASA 5500 Series Configuration Guide using the CLI
32
Configuring a Service Policy Using the Modular
Policy Framework
Service policies using Modular Policy Framework provide a consistent and flexible way to configure
ASA features. For example, you can use a service policy to create a timeout configuration that is specific
to a particular TCP application, as opposed to one that applies to all TCP applications. A service policy
consists of multiple actionsapplied to an interface or applied globally.
This chapter includes the following sections:
• Information About Service Policies, page 32-1
• Licensing Requirements for Service Policies, page 32-6
• Guidelines and Limitations, page 32-6
• Default Settings, page 32-7
• Task Flows for Configuring Service Policies, page 32-9
• Identifying Traffic (Layer 3/4 Class Maps), page 32-12
• Defining Actions (Layer 3/4 Policy Map), page 32-15
• Applying Actions to an Interface (Service Policy), page 32-17
• Monitoring Modular Policy Framework, page 32-18
• Configuration Examples for Modular Policy Framework, page 32-18
• Feature History for Service Policies, page 32-21
Information About Service Policies
This section describes how service policies work and includes the following topics:
• Supported Features for Through Traffic, page 32-2
• Supported Features for Management Traffic, page 32-2
• Feature Directionality, page 32-2
• Feature Matching Within a Service Policy, page 32-3
• Order in Which Multiple Feature Actions are Applied, page 32-4
• Incompatibility of Certain Feature Actions, page 32-5
• Feature Matching for Multiple Service Policies, page 32-6