O'Reilly logo

CCSP SNPA Quick Reference by Brandon James Carroll

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 6. Protocol Inspections

Understanding Modular Policy Framework

If you have ever configured Cisco quality of service (QoS) using the Modular QoS command-line interface (CLI), the Modular Policy Framework (MPF) is going to make a lot of sense. This is because it is deployed using the same thought process: Class Map > Policy Map > Service Policy. With the MPF, you will

  1. Define the traffic in question using a class map.

  2. Define an action to take on the matching traffic using a policy map.

  3. Apply the policy either globally or to an interface using a service policy.

With the MPF, you can do the following:

  • Perform TCP normalization

  • Apply TCP and UDP connection limits and timeouts and TCP sequence number randomization

  • Forward traffic to the CSC (not with ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required