Cisco Systems CL-28826-01 Security Camera User Manual


  Open as PDF
of 2616
 
7-28
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 7 Managing FlexConfigs
Configuring FlexConfig Policies and Policy Objects
Before You Begin
Ensure that your commands do not conflict in any way with the VPN or firewall configuration on the
devices.
Keep the following in mind:
Security Manager does not manipulate or validate your commands; it simply deploys them to the
devices.
If there is more than one set of commands for an interface, only the last set of commands is
deployed. Therefore, we recommend you not use beginning and ending commands to configure
interfaces.
When editing FlexConfig objects that involve route-maps (for example, OSPF or multicast
route-maps), you must define the corresponding access control lists (ACLs) before the route-maps.
This is a device requirement. If you do not define ACLs before route-maps, you will get a
deployment error.
Related Topics
A FlexConfig Creation Scenario, page 7-24
Working with Policy Objects—Basic Procedures, page 6-9
Creating Policy Objects, page 6-9
Chapter 5, “Managing Policies”
Step 1 Select Manage > Policy Objects to open the Policy Object Manager window (see Policy Object
Manager, page 6-4).
Step 2 Select FlexConfigs from the Policy Object Type selector.
Step 3 Right-click inside the work area and select New Object.
The Add FlexConfig Object dialog box appears (see Add or Edit FlexConfig Dialog Box, page 7-29).
Step 4 Enter a name for the object and optionally a description. Other optional informational fields include:
Group—Select an existing group name or type in a new one. These names can help you identify the
use of an object.
Negate For—If this FlexConfig object is designed to negate another, enter the name of the
FlexConfig object whose commands are undone by this object.
Step 5 In the Type field, select whether commands in the object are to be prepended (put at the beginning) or
appended (put at the end) of the configurations generated from Security Manager policies.
Step 6 In the object body area, enter the commands and instructions to produce the desired configuration file
output. You can type in the following types of data:
Scripting commands to control processing. For more information, see Using Scripting Language
Instructions, page 7-3.
CLI commands that are supported by the operating system running on the devices to which you will
deploy the FlexConfig policy object. For more information, see Using CLI Commands in
FlexConfig Policy Objects, page 7-2.
Variables. You can insert variables using the right-click menu, which allows you to create simple
single-value text variables (Create Text Object), select variables from existing policy objects
(Insert Policy Object), or select system variables (Insert System Variable). For more information,
see Understanding FlexConfig Object Variables, page 7-5.