Hi,

I have 2621 and IOS 12.1(5)T9 with IP/FW/IDS. the fa0/0 interface become administratively down when I add a service-policy in the interface even nobody issue the command "shutdown". everything fine if I remove the "service-policy" command from the interface.

1. message. showing this message when I add the service-policy command.

00:46:50: %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to administratively down

00:46:51: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to down

2. configuraiton. I just added the "service-policy router2" in the existing configuration.

!

class-map match-any router2

match access-group 100

!

class-map match-any http-hacks

match protocol http url "*readme.eml*"

match protocol http url "*.ida*"

match protocol http url "*cmd.exe*"

match protocol http url "*root.exe*"

!

policy-map mark-inbound-http-hacks

class http-hacks

set ip dscp 1

!

policy-map router2

class router2

bandwidth 3375

class class-default

fair-queue

!

interface FastEthernet0/0

description Ethernet to INTERNET

ip address x.x.x.x 255.255.255.248

ip access-group xxxxxx in

ip access-group 102 out

no ip proxy-arp

shutdown

speed 10

full-duplex

service-policy input mark-inbound-http-hacks

service-policy output router2

traffic-shape group 101 5999999 749992 749992 1000

!

.

Any idea or tips ?

Thanks,