blocking sites with class-map

Answered Question
Oct 2nd, 2007

i have 3750 as DG for my station, connected to 3845 which is connected to ADSL.

i want to block a site, so i wrote in the 3845:

class-map match-any scum

match protocol http url "*microsoft*"

!

policy-map block

class scum

drop

!

interface GigabitEthernet0/0

service-policy input block

it doesn't work. why?

I have this problem too.
0 votes
Correct Answer by Edison Ortiz about 9 years 2 months ago

You should match a host instead of an url, try this syntax:

class-map match-any scum

match protocol http host "www.microsoft*"

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.

Actions

This Discussion