From: anthony.sequeira@thomson.com
Date: Thu Nov 23 2006 - 10:41:41 ART
It looks like Cisco is going to start expanding the use of MQC to more
than just Quality of Service. Their idea is that many other features
need to understand types of traffic - such as Security, Broadband,
NetFlow, Routing, and more. Instead of having each feature identify and
act on traffic with independent syntax - why not expand the capabilities
of the MQC in order to accommodate these other features.
As a result of this initiative - we should start to see further
modifications to the class-map, policy-map, and service-policy syntax in
future IOS releases. It does not yet appear they have fully documented
these changes anywhere....but according to a 12.4T Command Reference,
the type access-control syntax determines the exact pattern to look for
in the protocol stack of interest.
Here is an example I found from Cisco that demonstrates how these
powerful new MQC structures could be used in a Cisco Security
environment:
class-map type stack IP-UDP
match field ip protocol eq 17 next udp
class-map access-control SLAMMER
match class-map stack IP-UDP
match field udp dport eq 1434
match start ip version offset 224 size 4 eq 0x04011010
policy-map type access-control POLICY-SLAMMER
class SLAMMER
drop
interface ethernet 1/0 service-policy type access-control input
POLICY-SLAMMER
I certainly hope this helps - and thanks for prompting this
investigation!
Anthony J. Sequeira
#15626
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
haducbinh
Sent: Thursday, November 23, 2006 1:35 AM
To: ccielab@groupstudy.com
Subject: QoS Question
Hi GS!
I configure QoS and see this strange command: "service-policy type",
please
anyone explain what does it mean?
R1(config)#int fas0/0
R1(config-if)#ser
R1(config-if)#service-policy ?
history Keep history of QoS metrics
input Assign policy-map to the input of an interface
output Assign policy-map to the output of an interface
type type of the policy-map
R1(config-if)#service-policy ty
R1(config-if)#service-policy type ?
access-control access-control specific policy-map
test Configure Test Policy Map
IOS version is: Version 12.4(9)T1
Thanks!
HaDucBinh
Mail: <mailto:haducbinh@vnpro.org> haducbinh@vnpro.org or
haducbinh@gmail.com
Phone: +84 908 191 322
------------------------------------------------------------------------
--- Vietnamese Professionals (VnPro) Cisco Authorised Training 149/1D Ung Van Khiem Street, Ward 25, Binh Thanh District, Ho Chi Minh City Tel: (08) 5124257 - (08) 5125314 Fax: (08) 5124314 Website: <http://vnpro.vn> http://vnpro.vn Support Forum: <http://vnpro.org> http://vnpro.org
This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:48 ART