Re: NBAR or ACL's?

From: But Nicky (lyredhair@gmail.com)
Date: Fri Oct 03 2008 - 13:31:36 ART

• Next message: Joseph Brunner: "RE: When do we use "Router-generated traffic" with CBAC"
• Previous message: Paul Alexander: "Re: Booking a Lab"
• Maybe in reply to: Dennis Worth: "NBAR or ACL's?"
• Next in thread: Hobbs: "Re: NBAR or ACL's?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi,
I think you the equivalence between NBAR and ACL as below:

NBAR
!
class-map match-all SMTP
match protocol smtp
!
class-map match-all HTTP
match protocol http
!
!
ACL
!
!
class-map match-all HTTP
match access-group 100
!
class-map match-all SMTP
match access-group 101
!
access-list 100 permit tcp any any eq www
access-list 100 permit tcp any eq www any
access-list 101 permit tcp any any eq smtp
access-list 101 permit tcp any eq smtp any
!
Need more discussion.

Thanks and regards
But Nguyen.

Blogs and organic groups at http://www.ccie.net

• Next message: Joseph Brunner: "RE: When do we use "Router-generated traffic" with CBAC"
• Previous message: Paul Alexander: "Re: Booking a Lab"
• Maybe in reply to: Dennis Worth: "NBAR or ACL's?"
• Next in thread: Hobbs: "Re: NBAR or ACL's?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:19 ARST