Re: using NBAR to match web traffic

From: Stephen Fisher (stephentfisher@yahoo.com)
Date: Fri Jun 03 2005 - 19:28:25 GMT-3


On Fri, Jun 03, 2005 at 01:52:45PM -0400, ccie2be wrote:

> I want to permit users to access only a web based application which
> has a root directory of
>
> http://www.web-based-app.com/webapp/
>
> Will this work?
>
> class-map WEB-APP
> match protocol http url "http://www.web-based-app.com/webapp/"

My notes from practicing this topic say that you need to put wildcards
or else it will match only what you specify for the URL field, so
try this:

  match protocol http url "http://www.web-based-app.com/webapp/*"

Although I could be wrong?

> In the lab, if giving a similar fake url, is there any way to verify
> my config is correct?

I can't think of any other than knowing how it works before hand :(

Steve



This archive was generated by hypermail 2.1.4 : Wed Jul 06 2005 - 14:43:40 GMT-3