NBAR question

From: Jo Johnson (groupstudyjo@gmail.com)
Date: Sat Feb 17 2007 - 18:00:08 ART


Hi all,

Here is another NBAR question. In general, I have a hard time understanding
the definition of the "match protocol http (host, url, and mime) command,
but I have some examples of my interpretation below:

I want to police response traffic from www.acmecomputers.com/files except
images--that I want to drop.

Question-Is it possible to combine the host www.acmecomputers.com and the
url /files into one match statement. Also, what are your thoughts on my
solution below?

Thanks

class-map IMAGES
match protocol http url *.jpeg
 match protocol http url *.jpg
 match protocol http url *.gif

class-map match-all ACME_TRAFFIC
match protocol http host www.acmecomputers.com
match protocol http url /directory*

policy-map DROPIT
class IMAGES
drop

policy-map POLICE
class ACME_TRAFFIC
service-policy input DROPIT
police 640000 conform transmit exceed drop

interface fa0/0
service-policy input POLICE



This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:47 ART