From: Joe Yohannan (joe1265@hotmail.com)
Date: Thu Feb 15 2007 - 07:13:07 ART
If it's an older IOS you may need "ip nbar protocol-discovery" on the
interface.
>From: "Allan " <mincisco@gmail.com>
>Reply-To: "Allan " <mincisco@gmail.com>
>To: ccielab@groupstudy.com
>Subject: NBAR on Fastethernet
>Date: Thu, 15 Feb 2007 19:02:12 +1100
>
>Hi
>
>If NBAR does not work on the fast ethernet, I did the same policy apply to
>fa0/0 and s0/0 on a same router, fastethernet can' t policy the traffic.
>any idea ?
>
>
>ip cef
>
>class-map match-all HTTP
> match protocol http
>class-map match-any FTP
> match protocol ftp
>
>policy-map QoS_OUT_F0/0
>
>class FTP
> police 10000 conform-action transmit exceed-action drop
> class HTTP
> police 20000 conform-action transmit exceed-action drop
>
>
> policy-map QoS_OUT_S0/0
>
>class FTP
> police 10000 conform-action transmit exceed-action drop
> class HTTP
> police 20000 conform-action transmit exceed-action drop
>
>------------------------------------------>> apply to S0/0
>
>R3#copy ftp: null:
>Address or name of remote host [1.1.5.5]?
>Source filename [P00307020400.bin]?
>Accessing ftp://1.1.5.5/P00307020400.bin...
>Loading P00307020400.bin !!!!!!!!!!!!!!!!!!!!!!!!!!
>[OK - 129476/4096 bytes]
>
>
>sh policy-map interface
>
>Serial0/0
>
>Service-policy output: QoS_OUT_S0/0
>Class-map: FTP (match-any)
> 712 packets, 32040 bytes
> 5 minute offered rate 0 bps, drop rate 0 bps
> Match: protocol ftp
> 712 packets, 32040 bytes
> 5 minute rate 0 bps
> police:
> cir 10000 bps, bc 1500 bytes
> conformed 712 packets, 32040 bytes; actions:
> transmit
> exceeded 0 packets, 0 bytes; actions:
> drop
> conformed 0 bps, exceed 0 bps
>
>------------------------------------->>> apply to F0/0
>sh policy-map interface
>
>FastEthernet0/0
>
> Service-policy output: QoS_OUT_F0/0
>
> Class-map: FTP (match-any)
> 0 packets, 0 bytes
> 5 minute offered rate 0 bps, drop rate 0 bps
> Match: protocol ftp
> 0 packets, 0 bytes
> 5 minute rate 0 bps
> police:
> cir 10000 bps, bc 1500 bytes
> conformed 0 packets, 0 bytes; actions:
> transmit
> exceeded 0 packets, 0 bytes; actions:
> drop
> conformed 0 bps, exceed 0 bps
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:46 ART