Creating a regular expression class map – Cisco ASA 5505 User Manual

Page 377

Advertising
background image

13-15

Cisco ASA 5500 Series Configuration Guide using the CLI

Chapter 13 Configuring Objects

Configuring Regular Expressions

hostname(config)# regex url_example2 example2\.com

Creating a Regular Expression Class Map

A regular expression class map identifies one or more regular expressions. You can use a regular
expression class map to match the content of certain traffic; for example, you can match URL strings
inside HTTP packets.

Detailed Steps

Step 1

Create one or more regular expressions according to the

“Configuring Regular Expressions”

section.

Step 2

Create a class map by entering the following command:

hostname(config)# class-map type regex match-any class_map_name

hostname(config-cmap)#

Where class_map_name is a string up to 40 characters in length. The name “class-default” is reserved.
All types of class maps use the same name space, so you cannot reuse a name already used by another
type of class map.

The match-any keyword specifies that the traffic matches the class map if it matches at least one of the
regular expressions.

The CLI enters class-map configuration mode.

Step 3

(Optional) Add a description to the class map by entering the following command:

hostname(config-cmap)# description string

Step 4

Identify the regular expressions you want to include by entering the following command for each regular
expression:

hostname(config-cmap)# match regex regex_name

Examples

The following example creates two regular expressions, and adds them to a regular expression class map.
Traffic matches the class map if it includes the string “example.com” or “example2.com.”

hostname(config)# regex url_example example\.com

hostname(config)# regex url_example2 example2\.com

hostname(config)# class-map type regex match-any URLs

hostname(config-cmap)# match regex url_example

hostname(config-cmap)# match regex url_example2

Advertising