Go CCIE Go!! - A Cisco Certified Internetwork Expert

Hi Ali,
First off, your class map is “match-all” so u match only if u have gif and jpg and jpeg at a same time!!
So u need to do it in “OR” base, u could change either class-map type to “match-any” or your matching strategy.(yours not gonna work)
Second , you need to match base on “URL” not mime, since if u would match “JPEG” mime ,your configuration would be
” match protocol http mime image/Jpeg” and this would match all jpeg,jpg,jpe,jfif,pjpeg, and pjp types.
Also u could not say ” match protocol http mime image/Jpg” , Jpg is not a mime type.
So u need to have statement like this ” match protocol http url “*JPG|*GIF|*JPEG” . or if u want to match them separately u have to use “match-any” class-map type.
Third, u can only apply “ONE” policy map per direction to intrface, so you should do it this way:
Class-map IMAGE match-all match protocol http url “*JPG|*GIF|JPEG” match protocol url “www.youtube.com”
Class-map URL match-all match protocol url “www.youtube.com”
Policy-map RESTRICT class URL police 115000 class IMAGE drop
your current configuration means you police class URL and class IMAGE which was already dropped by 115000!!! Although it may work but I prefer to separate class maps.
Forth, u should apply it inbound.
HTH,
On Sat, Sep 13, 2008 at 6:25 AM, Ali Mousawi wrote:
> Hello, > > Task: Police Traffic from www.youtube.com to 512000kbp and drop all images > (jpeg,jpg or gif) from this website. > > My Solution is: > > ########################### > class-map URL > match protocol http url www.youtube.com > > class-map IMAGES > match protocol http mime “*jpg” > match protocol http mime “*jpeg” > match protocol http mime “*gif” > > policy-map DROP_IMAGES > class IMAGES > drop > > policy-map POLICE > class URL > police 512000 > service-policy DROP_IMAGES > ############################### > > Any comments on the above solution? > How can I test if this solution is working? > > Regards > Ali > > > Blogs and organic groups at http://www.ccie.net > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html > > > > > > > >
— Sirus Moghadasian CCIE #21862 (R&S)
Blogs and organic groups at http://www.ccie.net