Cisco OL-15491-01 - Manual (Page 23)

A-23
Cisco Content Services Gateway - 2nd Generation Release 2.0 Installation and Configuration Guide
OL-15491-01
Appendix A CSG2 Command Reference
client-group (CSG2 content)
client-group (CSG2 content)
To reference a standard access list that is part of a CSG2 content, use the client-group command in CSG2
content configuration mode. To delete the reference, use the no form of this command.
client-group {std-access-list-number | std-access-list-name}
no client-group {std-access-list-number | std-access-list-name}
Syntax Description
Defaults All subscribers can access the content.
Command Modes CSG2 content configuration
Command History
Usage Guidelines The client-group command is used to qualify subscribers for the CSG2 content. The conditions
specified in the referenced access list must be true in order for the flows to be processed by the CSG2
content. If the conditions are not true, the CSG2 determines this to be a content mismatch, and normal
content match processing continues (that is, the CSG2 tries to match a less specific content). If no
contents are matched, the CSG2 does not process the flow (that is, the CSG2 blocks this traffic flow).
If you reference an access list that includes a deny statement, and that deny statement is matched, then
the CSG2 treats the traffic as a content mismatch and normal content processing continues, allowing the
traffic to match another less specific content. For example, in the following configuration, packets from
from IP address 1.1.1.1 do not match CONTENT1, but they do match CONTENT2:
ip csg content CONTENT1
ip any
client-group 99
inservice
!
ip csg content CONTENT2
ip any
inservice
!
std-access-list-number Standard IP access list number. The ranges are from 1 to 99 and from
1300 to 1999.
std-access-list-name Standard access list name.
Release Modification
12.4(11)MD This command was migrated from CSG1.
Changes from CSG1:
• The configuration mode for this command changed from CSG policy
configuration to CSG2 content configuration.
• The range for the std-access-list-number argument increased from 1300 to
1999.