Re: NBAR or ACL's?

From: Dennis Worth (dennis.worth@gmail.com)
Date: Mon Oct 06 2008 - 12:38:29 ART

This is excellent feedaback guys. Those single words are the ones that can
cost you dearly.

Thanks,

On Sun, Oct 5, 2008 at 3:39 PM, Hobbs <deadheadblues@gmail.com> wrote:

> I try to decipher whether a direction is necessary or subnet or hosts must
> be specified.
>
> Here I would use an ACL
> "http traffic from vlan 40 must be guaranteed 512k...."
>
>
> Here I would use nbar
> "http traffic on R4's serial link must be guaranteed 512k..."
>
> just my 2 cents
>
> On Fri, Oct 3, 2008 at 10:31 AM, But Nicky <lyredhair@gmail.com> wrote:
>
>> Hi,
>> I think you the equivalence between NBAR and ACL as below:
>>
>> NBAR
>> !
>> class-map match-all SMTP
>> match protocol smtp
>> !
>> class-map match-all HTTP
>> match protocol http
>> !
>> !
>> ACL
>> !
>> !
>> class-map match-all HTTP
>> match access-group 100
>> !
>> class-map match-all SMTP
>> match access-group 101
>> !
>> access-list 100 permit tcp any any eq www
>> access-list 100 permit tcp any eq www any
>> access-list 101 permit tcp any any eq smtp
>> access-list 101 permit tcp any eq smtp any
>> !
>> Need more discussion.
>>
>> Thanks and regards
>> But Nguyen.
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
> 

-- 
Dennis Worth

Blogs and organic groups at http://www.ccie.net

This archive was generated by hypermail 2.1.4 : Sat Nov 01 2008 - 15:35:19 ARST