From: Roger RPF (rpf@bluemail.ch)
Date: Sat Jan 24 2009 - 13:33:46 ARST
Cool stuff, sure, I forgot the | option in the class map! Great, I have to
remember that!
regards
Roger
Von: Wouter Prins [mailto:wp@null0.nl]
Gesendet: Samstag, 24. Januar 2009 15:45
An: Roger RPF
Cc: Cisco certification
Betreff: Re: nbar / http classification question
I think:
class-map match-all URL
match protocol http host www.cisco.com <http://www.cisco.com/>
match protocol http url "/ccie"
match protocol http url "*.gif|*.jpg|*.jpeg"
Would also work
Wouter
2009/1/24 Roger RPF <rpf@bluemail.ch>
Hi group,
Question regarding nbar and the class-maps. If the task tells to block all
.jpeg and .gif from www.cisco.com/ccie how do you create the class map? Do
we need to include the hostname part? If I look at the following link on the
doccd, they say no:
http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/clsfy_traffic_nb
<http://www.cisco.com/en/US/docs/ios/qos/configuration/guide/clsfy_traffic_n
b%0Aar_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1051880>
ar_ps6350_TSD_Products_Configuration_Guide_Chapter.html#wp1051880
But to me, this would mean that we would also block .jpeg and .gif for the
site www.dontcheat.com/ccie or not?
My solution:
class-map match-all URL
match protocol http host www.cisco.com
match protocol http url "/ccie"
match class-map URLCHILD
class-map match-any URLCHILD
match protocol http url "*.gif*"
match protocol http url "*.jpg*"
match protocol http url "*.jpeg*"
What do you think?
thanks
Roger
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:39 ARST