From: Mohamed Saeed (mohamed_saeed2@rayacorp.com)
Date: Wed Dec 27 2006 - 05:08:32 ART
Hi Brian,
I have looked into the "ip telnet tos" command. It is used to mark the
telnet packets generated by the router with a certain TOS value in the
IP header.
I have trying to do the same using MQC (by setting appropriate value of
DSCP and assuming that the last two bits of the TOS is always 00). That
is why I am asking whether an outbound service policy would affect
traffic generated by the router.
I think that traffic generated by the router resides in the
class-default. But if I matched a certain type of this traffic using
another class-map and applied my policy would it work? How could I test
it? Is there a command that shows the TOS of the packets? debug ip
packet detail does not.
Kind Regards
-----Original Message-----
From: Brian Dennis [mailto:bdennis@internetworkexpert.com]
Sent: Wednesday, December 27, 2006 3:06 AM
To: Mohamed Saeed; ccielab@groupstudy.com
Subject: RE: MQC - Traffic Generated by the router?
Did you look into using the "ip telnet tos" command? Also as far as
matching TCP port numbers go, telnet to another router and do a "show
tcp brief" on each side to see what port numbers you should be matching.
HTH,
Brian Dennis, CCIE4 #2210 (R&S/ISP-Dial/Security/SP)
bdennis@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 775-745-6404 (Outside the US and Canada)
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Mohamed Saeed
Sent: Tuesday, December 26, 2006 2:50 PM
To: ccielab@groupstudy.com
Subject: MQC - Traffic Generated by the router?
Hi All,
Will the following affects traffic locally generated by the router that
matches the class TEST?
Class-map TEST
Match access-group 101
Policy-map POLICY
Class TEST
Set dscp 10
Int f0/0
Service-policy output POLICY
A related question, if I need to match the telnet traffic locally
generated by the router, should I use telnet port in the source or the
destination of the access-list statement? What is the rule here?
access-list 101 permit tcp any any eq telnet
OR
access-list 101 permit tcp any eq telnet any
Kind Regards
This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:39 ART