Re: NBAR or ACL's?

From: Hobbs (deadheadblues@gmail.com)
Date: Sun Oct 05 2008 - 19:39:20 ART

• Next message: nouman abbasi: "BPDU"
• Previous message: nouman abbasi: "Odd / Even Vlans"
• Maybe in reply to: Dennis Worth: "NBAR or ACL's?"
• Next in thread: Dennis Worth: "Re: NBAR or ACL's?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

I try to decipher whether a direction is necessary or subnet or hosts must
be specified.

Here I would use an ACL
"http traffic from vlan 40 must be guaranteed 512k...."

Here I would use nbar
"http traffic on R4's serial link must be guaranteed 512k..."

just my 2 cents

On Fri, Oct 3, 2008 at 10:31 AM, But Nicky <lyredhair@gmail.com> wrote:

> Hi,
> I think you the equivalence between NBAR and ACL as below:
>
> NBAR
> !
> class-map match-all SMTP
> match protocol smtp
> !
> class-map match-all HTTP
> match protocol http
> !
> !
> ACL
> !
> !
> class-map match-all HTTP
> match access-group 100
> !
> class-map match-all SMTP
> match access-group 101
> !
> access-list 100 permit tcp any any eq www
> access-list 100 permit tcp any eq www any
> access-list 101 permit tcp any any eq smtp
> access-list 101 permit tcp any eq smtp any
> !
> Need more discussion.
>
> Thanks and regards
> But Nguyen.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net

• Next message: nouman abbasi: "BPDU"
• Previous message: nouman abbasi: "Odd / Even Vlans"
• Maybe in reply to: Dennis Worth: "NBAR or ACL's?"
• Next in thread: Dennis Worth: "Re: NBAR or ACL's?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:19 ARST