The difference between the first two is the first one is not using any PHDF definition files. The second one is.
I do not believe the last two to be the same. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Technical Instructor - IPexpert, Inc. Mailto: <mailto:[email protected]> [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: <http://www.ipexpert.com/chat> www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Classroom and Self-Study Cisco CCNA (R&S, Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, Security & Service Provider) Certification Training with locations throughout the United States, Europe and Australia. Be sure to check out our online communities at <http://www.ipexpert.com/communities> www.ipexpert.com/communities and our public website at <http://www.ipexpert.com> www.ipexpert.com From: [email protected] [mailto:[email protected]] On Behalf Of Kingsley Charles Sent: Friday, February 05, 2010 1:52 PM To: [email protected] Subject: Re: [OSL | CCIE_Security] FPM access-control with offset matching Can someone respond to this query. As this can't be tested, I want be sure, if the 2nd and 3rd option are correct or wrong. With regards Kings On Fri, Feb 5, 2010 at 8:10 PM, Kingsley Charles <[email protected]> wrote: Hi all The following is access-control class-map for blaster attacks. First one is used almost everywhere. I have provided two more alternatives, please let me know it will work. Highlighted are the differences. Router(config)# class-map type access-control match-all blaster2 Router(config-cmap)# match field tcp dest-port eq 4444 Router(config-cmap)# match start l3-start offset 3 size 2 eq 0x0030 Using IP instead of l3-start Router(config)# class-map type access-control match-all blaster2 Router(config-cmap)# match field tcp dest-port eq 4444 Router(config-cmap)# match start ip offset 3 size 2 eq 0x0030 Using string instead of eq Router(config)# class-map type access-control match-all blaster2 Router(config-cmap)# match field tcp dest-port eq 4444 Router(config-cmap)# match start l3-start offset 3 size 2 string 0x0030 with regards Kings
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
