From: jackyliu@cyberport.com.hk
Date: Sun Sep 11 2005 - 05:38:10 GMT-3
Hi guys,
A book's question request me to limit the incoming traffic
with ip precedence marking 1, 5, 7 at 2mb or below from the
LAN side and drop the exceeding packets. It also request me
to create only a single access-list to finish the task.
My approach:
policy-map in-traffic
police 2000000 5000 10000 conform-action transmit
exceed-action drop violate-action drop
!
class-map match-all 1-5-7
match ip precedence 1 5 7
match access-group 10
!
access-list 10 permit 10.1.1.0 0.0.0.255
!
interface e0
service-policy input in-traffic
The book's approach
interface e0
ip address 10.1.1.254 255.255.255.0
rate-limit 2000000 5000 10000 access-group 20 confrom-action
transmit exceed-action drop
!
access-list 20 rate-limit mask A2
Is my approach also can achieve the task? Just want to know
the different there =)
Cheers!
Jacky
This archive was generated by hypermail 2.1.4 : Sun Oct 02 2005 - 14:40:14 GMT-3