Re: [OSL | CCIE_Security] Port Filter for Control Plane

2012-04-25 Thread Kingsley Charles
For port-filter always use match-all. With regards Kings On Wed, Apr 25, 2012 at 6:22 AM, Mike Rojas mike_c...@hotmail.com wrote: Hi All, I have the following question, Class Map type port-filter match-any CLOSED-PORTS (id 1) Match not port tcp 3020 Match not port udp 3020

Re: [OSL | CCIE_Security] Port Filter for Control Plane

2012-04-25 Thread Aous SAlloum
Match not thing matching by the matching criteria don't match the class map 2012/4/25 Mike Rojas mike_c...@hotmail.com Hi All, I have the following question, Class Map type port-filter match-any CLOSED-PORTS (id 1) Match not port tcp 3020 Match not port udp 3020 Match not

[OSL | CCIE_Security] Port Filter for Control Plane

2012-04-24 Thread Mike Rojas
Hi All, I have the following question, Class Map type port-filter match-any CLOSED-PORTS (id 1) Match not port tcp 3020 Match not port udp 3020 Match not port udp 3040 Match not port tcp 3040 Match closed-ports Prot Local Address Foreign