Nice Article ...
Very nice if you don't want to use NBAR ... or can not use NBAR.
But I find the NBAR config a little bit easier ;-)
class-map match-any p2p
match protocol skype
!
policy-map block-p2p
class p2p
drop
!
int FastEthernet0
description PIX-facing interface
service-policy input block-p2p
!
So I am trying to find reasons here not to use NBAR exept that the
IOS/router platform is not supporting it...
-- Regards, Iwan Hoogendoorn CCIE #13084 (R&S / Security / SP) Sr. Support Engineer - IPexpert, Inc. URL: http://www.IPexpert.com On Wed, Sep 9, 2009 at 8:00 PM, Nicholas Davitashvili <nickda_at_gmail.com> wrote: > Hi guys, > Here's an article we wrote about how to block Skype using IOS. > http://www.4shared.com/file/129849696/4cd4ff14/Blocking_Skype_Using_IOS.html > > Please comment. > > Nick > GREENNET > Lat: 41043'25.46"N > Long: 44045'45.60"E > > > Blogs and organic groups at http://www.ccie.net > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html Blogs and organic groups at http://www.ccie.netReceived on Thu Sep 10 2009 - 13:26:52 ART
This archive was generated by hypermail 2.2.0 : Sun Oct 04 2009 - 07:42:03 ART