From: Ahmed Mustafa (ahmed.mustafa@sbcglobal.net)
Date: Mon May 17 2004 - 14:39:50 GMT-3
Thanks Brian ! I completely agree with you that why service-policy was
applied inbound. However the reason I was asking the question that I have
noticed that sometimes the command "Service-policy input" will be accepted
by the interface, but in "Show Run" it will not appear. That is why I was
trying to draw a line that is there any rule of thumb when applying the
command input vs output.
Regards,
Ahmed
----- Original Message -----
From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
To: "Ahmed Mustafa" <ahmed.mustafa@sbcglobal.net>; <ccielab@groupstudy.com>
Sent: Monday, May 17, 2004 6:48 AM
Subject: RE: IE Lab 15 Task 9.1
Ahmed,
I'm asking these questions because I'm trying to lead you to the
reasoning behind the answer. Review what you just told me and this
should explain why the policy is applied in the direction that it is.
HTH,
Brian McGahan, CCIE #8593
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987 x 705
Outside US: 775-826-4344 x 705
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> Ahmed Mustafa
> Sent: Sunday, May 16, 2004 11:21 PM
> To: Brian McGahan; ccielab@groupstudy.com
> Subject: Re: IE Lab 15 Task 9.1
>
> Router 5 and policy is applied on Ethernet 0/0
> ----- Original Message -----
> From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
> To: "Ahmed Mustafa" <ahmed.mustafa@sbcglobal.net>; "Brian McGahan"
> <bmcgahan@internetworkexpert.com>; <ccielab@groupstudy.com>
> Sent: Sunday, May 16, 2004 8:20 PM
> Subject: RE: IE Lab 15 Task 9.1
>
>
> Which router is VLAN 5 attached to and which router is the policy
> applied on?
>
> Brian McGahan, CCIE #8593
> bmcgahan@internetworkexpert.com
>
> Internetwork Expert, Inc.
> http://www.InternetworkExpert.com
> Toll Free: 877-224-8987 x 705
> Outside US: 775-826-4344 x 705
>
>
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
> Of
> > Ahmed Mustafa
> > Sent: Sunday, May 16, 2004 9:36 PM
> > To: Brian McGahan; ccielab@groupstudy.com
> > Subject: Re: IE Lab 15 Task 9.1
> >
> > Brian,
> >
> >
> > The hosts are located on VLAN 5 are sending out 404 byte packets
> destined
> > for UDP port 1434.
> >
> >
> > ----- Original Message -----
> > From: "Brian McGahan" <bmcgahan@internetworkexpert.com>
> > To: "Ahmed Mustafa" <ahmed.mustafa@sbcglobal.net>;
> > <ccielab@groupstudy.com>
> > Sent: Sunday, May 16, 2004 6:13 PM
> > Subject: RE: IE Lab 15 Task 9.1
> >
> >
> > Ahmed,
> >
> > Where are the hosts located? When they send traffic, what
> > direction is the traffic flow from the router's perspective?
> >
> > Brian McGahan, CCIE #8593
> > bmcgahan@internetworkexpert.com
> >
> > Internetwork Expert, Inc.
> > http://www.InternetworkExpert.com
> > Toll Free: 877-224-8987 x 705
> > Outside US: 775-826-4344 x 705
> >
> >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
Behalf
> > Of
> > > Ahmed Mustafa
> > > Sent: Saturday, May 15, 2004 2:24 PM
> > > To: ccielab@groupstudy.com
> > > Subject: IE Lab 15 Task 9.1
> > >
> > > Regarding Service-Policy commands is it true that the rule of
thumb
> > is:
> > >
> > > Service-policy output should be used to avoid congestion, and
> > > Service-policy input should be used to block traffic.
> > >
> > >
> > > I was doing task 9.1 of lab 15, and even the task states, "Hosts
> > infected
> > > with this worm are sending out 404 byte packets destined for UDP
> port
> > > 1434" I
> > > configured the service-policy with output keyword, however the
> > solution
> > > guides
> > > showed "Service-policy input"
> > >
> > > Can some shed light on this?
> > >
> > > Regards,
> > >
> > > Ahmed
> > >
> > >
> >
>
This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:13 GMT-3