RE: Class map match all match any [bcc][faked-from]

From: marvin greenlee (marvin@ccbootcamp.com)
Date: Wed Mar 16 2005 - 15:47:40 GMT-3


You can also mix and match with nested class maps. In this case, a group of
protocols is matched with a match any for the class 'work-related'. The
class 'work' matches the class 'work-related', and a class 'days' which
specifies a time-range.

***********

time-range TEST
 periodic weekdays 8:00 to 16:59

access-list 101 permit ip any any time-range TEST

 class-map match-all days
  match access-group 101

 class-map match-any work-related
  match protocol citrix
  match protocol sqlserver
  match protocol exchange
  match protocol ipsec

 class-map match-all work
  match class-map days
  match class-map work-related

 policy-map office
  class work
   bandwidth 5000

***********

Marvin Greenlee, CCIE#12237, CCSI# 30483
Network Learning Inc
marvin@ccbootcamp.com
www.ccbootcamp.com (Cisco Training)

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Georg Pauwen
Sent: Wednesday, March 16, 2005 2:37 AM
To: ccielab@groupstudy.com
Subject: Class map match all match any [bcc][faked-from]
Importance: Low

Hello group,

this might be a stupid question, but I am just trying to clear some things
up: it was my understanding that the difference between a match-all and a
match-any in a class-map was that match-all has to match every single
condition, like the logical AND, and that match-any has to match either one
of the conditions, like the logical OR.
So in this example:

access-list 101 permit tcp any any eq www
access-list 102 permit tcp any any eq bgp

a class-map match-all:

class-map match-all WWW_AND_BGP
match ip address 101
match ip address 102

would never work, because the traffic types www and bgp will never be the
same.

A class-map match-any:

class-map match-any WWW_OR_BGP
match ip address 101
match ip address 102

would work, since either one of the access lists have to apply, and not
both.

Is this the right reasoning ? I am just asking because I have seen a sample
configs where the match-all statement was used like in the example above...

Thanks for your input in advance.

Regards,

Georg



This archive was generated by hypermail 2.1.4 : Sun Apr 03 2005 - 17:56:46 GMT-3