There's a mobile version of our website.
Does anyone know if with a Cisco ASA it's possible to create a policy which inspects non-HTTP traffic on port 80, and then create a class-map to rate limit matching traffic?
I've seen the http-map command - however port-misuse doesn't appear to be granular enough to match traffic other than P2P and IM.
Thanks for posting, what is the final pusrpose of this configuration? If we create a class map to rate limit port 80, it will do port 80 regardless of the traffic that comes on that port? Is it for any specific l7 kind of traffic?
Let me know.
The purpose of the configuration will be to shape - but not block - non-HTTP TCP port 80 traffic. Here's an example:
Data is received on an interface, and then processed as follows
HTTP GET, POST, HEAD etc -----> class-map with priority bandwidth allocated and placed in a low latency queue.
Application X, uses TCP 80 -----> class-map fair queue (best effort)
Both class-maps to be applied to a policy-map, and then on the interface.
You cannot do that. You cannot priority queue only specific HTTP commands etc. You can block reset erc based on HHTP attributes, but for LLQ (QoS), you need to match on general criteria like (all port 80 etc).
I hope it is clear.
Login to share your discussion activity with your friends on Facebook. You can control what you share and turn off sharing anytime.
Your Facebook friends can now see that you have started this discussion
Your Facebook friends can now see that you have commented on this discussion
Your Facebook friends can now see that you have read this discussion