RE: IEWB lab 15 - QoS [bcc][faked-from]

From: marvin greenlee (marvin@ccbootcamp.com)
Date: Wed Jan 12 2005 - 21:41:14 GMT-3


** FTP shows as TCP 21, FTP-data shows as TCP 20.

R13(config)#access-list 101 permit tcp any any eq ?
  <0-65535> Port number
  bgp Border Gateway Protocol (179)
  chargen Character generator (19)
  cmd Remote commands (rcmd, 514)
  daytime Daytime (13)
  discard Discard (9)
  domain Domain Name Service (53)
  echo Echo (7)
  exec Exec (rsh, 512)
  finger Finger (79)
  ftp File Transfer Protocol (21)
  ftp-data FTP data connections (20)

** NBAR for FTP (by default) shows TCP 21

R13#show ip nbar port-map ftp
port-map ftp tcp 21

I had a student recently who was trying to remember what protocol used udp
port 53, and I showed him how to do a quick lookup with NBAR.

R13#show ip nbar port-map | include udp 53
port-map dns udp 53

- Marvin Greenlee, CCIE#12237, CCSI# 30483
Network Learning Inc
marvin@ccbootcamp.com
www.ccbootcamp.com (Cisco Training)

-----Original Message-----
From: ccie2be [mailto:ccie2be@nyc.rr.com]
Sent: Wednesday, January 12, 2005 4:15 PM
To: marvin greenlee
Subject: Re: IEWB lab 15 - QoS [bcc][faked-from]

Hi Marvin,

I just worked out the numbers from my original solution

and found that I was wrong. I also just sent another post that explains in
detail

how to figure out what values to use.

Re: FTP-data, I thought (assumed) that the statement, match protocol ftp,

matches, by default, both the control and data channel. If that's not the
case,

how would I know that?

I check the command reference and it didn't say one way or another.

Is this one of those things that the only way to know is to test it?

----- Original Message -----
From: "marvin greenlee" <marvin@ccbootcamp.com>
To: "'ccie2be'" <ccie2be@nyc.rr.com>; <ccielab@groupstudy.com>
Sent: Wednesday, January 12, 2005 6:31 PM
Subject: RE: IEWB lab 15 - QoS [bcc][faked-from]

> Your policy appears to be missing the FTP data, unless you also configured
a
> port map for that. 'ip nbar port-map ftp tcp 20 21'



This archive was generated by hypermail 2.1.4 : Wed Feb 02 2005 - 22:10:22 GMT-3