From: Ali.Huang (zero5291@gmail.com)
Date: Wed Oct 19 2005 - 21:11:56 GMT-3
Hi,group,
I meet some strange issues.Hope someone can help me.
I use ACL for FTP traffic in class-map clause,I check the the packets
quantities increased.But when I use protocol to class for ftp
traffic,it cannot work,and other clauses not changed.Why?
access-list 101 permit tcp any any eq ftp
access-list 101 permit permit tcp any any eq ftp-data
class-map match-all ftp-data
match access-group 101
It works well when applied policy-map.When I verify if it can work by
the command show polic int int-type-number,the packets for ftp traffic
were increased.
If I use the clause match protocol ftp instead of match access-group
101,only changed this,and when I do sh poli int int-type-number to
confirm,the quantities of packets increased in class-default,not in
ftp class.
I wonder why it cannot work by NBAR.I also add the ip cef and
nbar-discovery,no change.
-- THX. Ali.huang
This archive was generated by hypermail 2.1.4 : Sun Nov 06 2005 - 22:00:51 GMT-3