Debug IP and seeing packet type

[maurice.walsh]

Hi All,

I've got a problem where an 801 is connecting via Isdn way too often to the Internet, I want to set up access lists to prevent the Isdn line opening for up wanted packets.

I'm using debug ip packet to look at info going out, but this isn't showing me the packet type i.e. ftp, DNS etc.

Is there someway I can see the packet type, this way I can build up a good access list.

Regards

Maurice Walsh

[mljohnson]

You should use "debug dialer" and "debug ip packet detail"; you can also use an access-list with the IP debug, if you want, to limit the amount of debug generated. You should disable FS on the ISDN interface.

In general, you should determine in advance what you want to be interesting (for dialing and idle timer resets), and configure your access-lists accordingly.

[ali-franks]

Hi Maurice,

You may also want to block UDP ports 137,138 &139 inbound on E0 with an ACL. These broadcasts tend to bring up the line when both servers and clients put out NetBIOS requests.

Ali