Re: question on limiting

From: Sadiq Yakasai (sadiqtanko@gmail.com)
Date: Thu Jan 29 2009 - 15:34:40 ARST


ip access-list ext name FAKE_NAME
   per ip host 1.1.1.1 any

class-map STOP_FAKE_NAME
   match ip access-group

class-map ALLOW_REAL_NAMES
   match any

policy-map STOP_FAKE_AND_ALLOW_REAL
   class STOP_FAKE_NAME
      shape or police 1K
   class ALLOW_REAL_NAMES
      dont do anything

int f1/1
service-policy input STOP_FAKE_AND_ALLOW_REAL

HTH,
Sadiq :-)

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:40 ARST