NBAR/Traffic Classification and PBR

Unanswered Question
Aug 6th, 2010
User Badges:


I was wondering if any  one could help me with this one. I have a perimeter router which has 2 Internet connections attached.

I am trying to classify some traffic based on URL/media type and route this non essential traffic out the secondary link.

I have tried a couple of things but they do not seem to work. Here is one of the approximate configs.. Can any one one suggest why this wouldnt work? and if not can any one suggest how i can alternatively achieve routing non essential traffic to a secondary link based on NBAR/Classifications and not hard ACLS

Router(config)# class-map match-any mediaCM          
Router(config-cmap)# match protocol http url "**"
Router(config)# policy-map MediaPM                         
Router(config-pmap)# class MEDIACM
Router(config-pmap-c)# set ip dscp 10
Router(config-pmac-c)# exit
Router(config)# interface ethernet1
Router(config-if)# service-policy input MediaPM         
Router(config-if)# exit
Router(config)# ip access-list MarkedTraffic
Router(config-ext-nacl)# permit ip any any dscp 10
Router(config-ext-nacl)# exit
Router(config)# route-map ToSecondaryLink 10                     
Router(config-route-map)# match ip address MarkedTraffic
Router(config-route-map)# set interface Dialer1
Router(config-route-map)# exit
Router(config)# interface ethernet1 (-FACES our Network)
Router(config-if)# ip policy route-map ToSecondaryLink

Thanks Folks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Tharak Abraham Fri, 08/06/2010 - 04:43
User Badges:
  • Bronze, 100 points or more


The service policy for your non essential traffic should be set outbound.

i.e service-policy output MediaPM

Could you try with local policy routing for the second link ?

cadet alain Mon, 11/29/2010 - 12:36
User Badges:
  • Purple, 4500 points or more


show policy-map interface while surfing this site will show you if your packets are matching.



This Discussion