Comments on: Cisco: How to selective drop packets without using an access-list http://www.firstdigest.com/2009/03/cisco-how-to-selective-drop-packets-without-using-an-access-list/?utm_source=rss&utm_medium=rss&utm_campaign=cisco-how-to-selective-drop-packets-without-using-an-access-list Technical blog Tue, 24 Apr 2012 11:23:00 +0000 hourly 1 http://wordpress.org/?v= By: Calin http://www.firstdigest.com/2009/03/cisco-how-to-selective-drop-packets-without-using-an-access-list/comment-page-1/#comment-950 Calin Tue, 01 Dec 2009 08:25:19 +0000 http://www.firstdigest.com/?p=802#comment-950 <p>Hi Jim!</p> <p>You're right, I could have used NBAR, or as well there are other methods to drop packets. The one above is just an example. The same is telnet in the example.</p> <p>I used ACL to show that you can match other packets than telnet, and which NBAR is not able to identify (based on DSCP, IP precedence...) and let those packets pass by.</p> <p>You're comment is correct, but in the example was just a matter of choice.</p> <p>Thanks for reading!</p> Hi Jim!

You’re right, I could have used NBAR, or as well there are other methods to drop packets. The one above is just an example. The same is telnet in the example.

I used ACL to show that you can match other packets than telnet, and which NBAR is not able to identify (based on DSCP, IP precedence…) and let those packets pass by.

You’re comment is correct, but in the example was just a matter of choice.

Thanks for reading!

]]> By: Jim Leach http://www.firstdigest.com/2009/03/cisco-how-to-selective-drop-packets-without-using-an-access-list/comment-page-1/#comment-949 Jim Leach Tue, 01 Dec 2009 08:09:55 +0000 http://www.firstdigest.com/?p=802#comment-949 You used an ACL in the class-map, this could have been replaced with an NBAR protocol match for telnet.. You used an ACL in the class-map, this could have been replaced with an NBAR protocol match for telnet..

]]>