Go CCIE Go!! - A Cisco Certified Internetwork Expert

Thanks alot for this extensive explanation.
You said we cannot apply mode than one policy per interface per direction but cant we use nested policies? As I know with sub interfaces we must use nested policies when we have any queing mechanism…correct me if am wrong
Regards Ali
On Sat, Sep 13, 2008 at 2:32 AM, sirus MOGHADASIAN wrote:
> Hi Ali, > > First off, your class map is “match-all” so u match only if u have gif and > jpg and jpeg at a same time!! > > So u need to do it in “OR” base, u could change either class-map type to > “match-any” or your matching strategy.(yours not gonna work) > > Second , you need to match base on “URL” not mime, since if u would match > “JPEG” mime ,your configuration would be > > ” match protocol http mime image/Jpeg” and this would match all > jpeg,jpg,jpe,jfif,pjpeg, and pjp types. > > Also u could not say ” match protocol http mime image/Jpg” , Jpg is not a > mime type. > > So u need to have statement like this ” match protocol http url > “*JPG|*GIF|*JPEG” . > or if u want to match them separately u have to use “match-any” class-map > type. > > Third, u can only apply “ONE” policy map per direction to intrface, so you > should do it this way: > > Class-map IMAGE match-all > match protocol http url “*JPG|*GIF|JPEG” > match protocol url “www.youtube.com” > > Class-map URL match-all > match protocol url “www.youtube.com” > > > Policy-map RESTRICT > class URL > police 115000 > class IMAGE > drop > > your current configuration means you police class URL and class IMAGE > which was already dropped by 115000!!! > Although it may work but I prefer to separate class maps. > > Forth, u should apply it inbound. > > HTH, > > > On Sat, Sep 13, 2008 at 6:25 AM, Ali Mousawi wrote: > >> Hello, >> >> Task: Police Traffic from www.youtube.com to 512000kbp and drop all >> images >> (jpeg,jpg or gif) from this website. >> >> My Solution is: >> >> ########################### >> class-map URL >> match protocol http url www.youtube.com >> >> class-map IMAGES >> match protocol http mime “*jpg” >> match protocol http mime “*jpeg” >> match protocol http mime “*gif” >> >> policy-map DROP_IMAGES >> class IMAGES >> drop >> >> policy-map POLICE >> class URL >> police 512000 >> service-policy DROP_IMAGES >> ############################### >> >> Any comments on the above solution? >> How can I test if this solution is working? >> >> Regards >> Ali >> >> >> Blogs and organic groups at http://www.ccie.net >> >> _______________________________________________________________________ >> Subscription information may be found at: >> http://www.groupstudy.com/list/CCIELab.html >> >> >> >> >> >> >> >> > > > — > Sirus Moghadasian > CCIE #21862 (R&S)
Blogs and organic groups at http://www.ccie.net