Re: Limit incomming traffic

From: Ed Lui (edwlui@gmail.com)
Date: Fri Mar 07 2008 - 04:59:23 ARST


I am trying my best to help. It may not be the correct or best answer to
your question. What is MQC? Seriously, I only remember that mean Modular QoS
something. But after I looked it up. The answer is
Modular QoS CLI (MQC)
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ft3level.html

class-map match-all BAD_IN
  match access-group 160
 class-map match-all BAD_OUT
  match access-group 161
!
!
 policy-map BAD_IN
  class BAD_IN
   drop
 policy-map LIMIT
  class LIMIT
   drop
 policy-map BAD_OUT
  class BAD_OUT
   drop
!
interface Serial0
 ip address 121.1.1.6 255.255.255.0
 service-policy input BAD_IN
 service-policy output BAD_OUT
 encapsulation frame-relay
 clockrate 128000
 cdp enable
!
!
access-list 160 permit tcp any any eq smtp
access-list 160 permit tcp any any eq www
access-list 161 permit tcp any eq smtp any
access-list 161 permit tcp any eq www any

HTH,
Lui

On Thu, Mar 6, 2008 at 10:31 PM, Chamara Peris <dimsyboy@gmail.com> wrote:

> Hi,
>
> What's MQC?. Can anyone give me example using ACL?
>
> On Fri, Mar 7, 2008 at 5:06 PM, Ed Lui <edwlui@gmail.com> wrote:
>
> > Dimsy,
> >
> > I would use the MQC. Match the protocols and drop them.
> >
> > HTH,
> > Lui
> >
> > On Thu, Mar 6, 2008 at 9:41 PM, Chamara Peris <dimsyboy@gmail.com>
> > wrote:
> >
> > > Hi Guys,
> > >
> > > What's the best way to limit incomming traffic to a certian port
> > > (HTTP,SMTP). Is it using policy shaping?
> > >
> > >
> > >
> > > Internet -----><--------> FA0/0 101.10.10.10 [Router] FA0/1
> > > 66.11.11.11------> Web/Email server
> > > 66.11.11.12
> > >
> > > Regards
> > > Dimsy
> > >
> > >
> > > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Tue Apr 01 2008 - 07:53:52 ART