Hi Tyson Will both the first one and second give the same result. I have used IP instead of L3. Just wanted to confirm.
In the lab should we use L3 or IP? With regards Kings On Sat, Feb 6, 2010 at 12:48 AM, Tyson Scott <[email protected]> wrote: > The difference between the first two is the first one is not using any > PHDF definition files. The second one is. > > > > I do not believe the last two to be the same. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Technical Instructor - IPexpert, Inc. > > Mailto: [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Classroom and Self-Study Cisco CCNA (R&S, > Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, Security & Service > Provider) Certification Training with locations throughout the United > States, Europe and Australia. Be sure to check out our online communities at > www.ipexpert.com/communities and our public website at www.ipexpert.com > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Kingsley Charles > *Sent:* Friday, February 05, 2010 1:52 PM > *To:* [email protected] > *Subject:* Re: [OSL | CCIE_Security] FPM access-control with offset > matching > > > > Can someone respond to this query. > > > > As this can't be tested, I want be sure, if the 2nd and 3rd option are > correct or wrong. > > > > With regards > > Kings > > On Fri, Feb 5, 2010 at 8:10 PM, Kingsley Charles < > [email protected]> wrote: > > Hi all > > > > The following is access-control class-map for blaster attacks. First one is > used almost everywhere. I have provided two more alternatives, please let me > know it will work. > > > > Highlighted are the differences. > > > > Router(config)# class-map type access-control match-all blaster2 > Router(config-cmap)# match field tcp dest-port eq 4444 > Router(config-cmap)# match start l3-start offset 3 size 2 eq 0x0030 > > > > Using IP instead of l3-start > > > > Router(config)# class-map type access-control match-all blaster2 > Router(config-cmap)# match field tcp dest-port eq 4444 > Router(config-cmap)# match start ip offset 3 size 2 eq 0x0030 > > Using string instead of eq > > > > Router(config)# class-map type access-control match-all blaster2 > Router(config-cmap)# match field tcp dest-port eq 4444 > Router(config-cmap)# match start l3-start offset 3 size 2 string 0x0030 > > > > > > with regards > > Kings > > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
