wasiimcisco Tue, 09/02/2008 - 05:45
User Badges:

you can do this by enabling the Nbar on interface and then make class-map test do match protocol http url "*hotmail*"


then make policy-map test

class test

drop


apply the service on interface.



if helpful please rate

ror.sanjeev Tue, 09/02/2008 - 06:56
User Badges:

I have done same thing as:


class-map match-all test

match protocol http url "youtube"

!

!

policy-map test

class test

set ip dscp default


enable ip nbar protocol-discovery on Fa5/1/1


following are access-list applied on fa5/1/1

40 deny ip any any dscp default (105222matches)

50 permit ip any any log (868 matches)


But it blocks all the site not even youtube.I am unable to open any site like yahoo,google,rediff etc.


Please tell me..

Collin Clark Tue, 09/02/2008 - 07:08
User Badges:
  • Purple, 4500 points or more

You're denying all IP traffic with a DSCP of 0, which is what most traffic is by default.


Try something like this-


class-map match-all test

match protocol http host *youtube.com*


policy-map test

class test

drop


You can remove the the ACL line 40 & 50.


Hope that helps.


ror.sanjeev Tue, 09/02/2008 - 19:59
User Badges:

hi..there is no command like drop..


(config-pmap-c)#?

QoS policy-map class configuration commands:

bandwidth Bandwidth

exit Exit from QoS class action configuration mode

fair-queue Flow-based Fair Queueing

netflow-sampler NetFlow action

no Negate or set default values of a command

police Police

priority Low Latency Queueing

queue-limit Queue Max Threshold for Tail Drop

random-detect Weighted Random Early Detect (Precedence based

service-policy Configure Flow Next

set Set QoS values

shape Traffic Shaping


on this link,http://www.cisco.com/en/US/products/hw/routers/ps359/products_tech_note09186a00800fc176.shtml


it is written there,u can do with set dscp 1 but i m not able to do.


please tell,

thanks.


Collin Clark Wed, 09/03/2008 - 05:07
User Badges:
  • Purple, 4500 points or more

Take a look at Method 3 on the link you provided, that would be a way to do it as well.

Collin Clark Thu, 09/04/2008 - 05:15
User Badges:
  • Purple, 4500 points or more

class-map match-all YOUTUBE

match protocol http host "*youtube.com*"

!

policy-map DROP_YOUTUBE

class YOUTUBE

drop

!

interface FastEthernet0/0

description TO INTERNET

service-policy output DROP_YOUTUBE


Hope that helps.

Actions

This Discussion