Tony , telnetting at port 80 , will not classify packets as web , when you are using NBAR , as it goes beyond the layer 3/4 and looks at the format also..
it does work with " ip access-list 100 tcp permit any any eq 80 " command , because here classifier only looks at port 80.. only On Sun, May 26, 2013 at 4:35 AM, max kamali <[email protected]> wrote: > thank you gents. > > -max > > On 5/25/2013 12:09 PM, Tony Singh wrote: > >> >> yes, though you'd need a policy-map & service policy to apply it, I'm >> sure you know >> >> to test enable http server on IOS and then telnet to either port 80/443 >> from the 10.x source then check the hits, I know this worked with port 80 >> >> -- >> BR >> >> Tony >> >> Sent from my iPad >> >> On 25 May 2013, at 18:58, max kamali <[email protected]> wrote: >> >> Morning, hope everyone is enjoying their weekend. >>> >>> Is it correct to assume that the class-map client will match: >>> 10.0.0.0/24 to port 80 or 10.0.0.0/24 to port 443 ? >>> >>> class-map match-all client >>> match access-group 1 >>> match class-map web >>> >>> >>> class-map match-any web >>> match protocol http >>> match protocol secure-http >>> >>> access-list 1 permit 10.0.0.0 0.0.0.255 >>> >>> >>> thanks >>> max >>> ______________________________**_________________ >>> For more information regarding industry leading CCIE Lab training, >>> please visit www.ipexpert.com >>> >>> Are you a CCNP or CCIE and looking for a job? Check out >>> www.PlatinumPlacement.com >>> >>> http://onlinestudylist.com/**mailman/listinfo/ccie_rs<http://onlinestudylist.com/mailman/listinfo/ccie_rs> >>> >> > ______________________________**_________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > http://onlinestudylist.com/**mailman/listinfo/ccie_rs<http://onlinestudylist.com/mailman/listinfo/ccie_rs> > _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com http://onlinestudylist.com/mailman/listinfo/ccie_rs
