Policing, time-range.

Assume the task:

Make sure that http and ftp traffic on int f0/0 is policed to 10 Mbps on weekdays from 9am to 5 pm. Conforming traffic should be transmitted and exceeding dropped.

I need your comment if my solution is OK? If both are OK is one preferred?

========== WORKBOOK SOLUTION: ==========
 
time-range WEEKDAYS
 periodic weekdays 9:00 to 17:00

access-list 100 permit tcp any any eq www time-range WEEKDAYS
access-list 100 permit tcp any any eq ftp time-range WEEKDAYS

class-map match-all CLASS
 match access-group 100

policy-map POLICY
 class CLASS
    police 10000000 conform-action transmit exceed-action drop

interface FastEthernet0/0
 service-policy output POLICY

========== MY SOLUTION: ==========
 
ip cef

time-range WEEKDAYS
 periodic weekdays 9:00 to 17:00

access-list 100 permit ip any any time-range WEEKDAYS

class-map match-any PROTOCOLS
 match protocol http
 match protocol ftp

class-map match-all QOS
 match access-group 100
 match class-map PROTOCOLS

policy-map POLICY
 class QOS
    police 10000000 conform-action transmit exceed-action drop

interface FastEthernet0/0
 service-policy output POLICY

Blogs and organic groups at http://www.ccie.net
Received on Fri Apr 30 2010 - 13:23:06 ART