Hi Kamran, class-map type inspect xyz -> This method is typically used in Zone Based Firewall scenarios , you use this when where you want to be very granular or match specific fields in the application payload e.g matching file transfer stream in P2P traffic can only be done wit L7 class maps
Another difference is that class map type inspect with the match protocol command matches traffic based on PAM table in the IOS. But class-map with match protocol uses NBAR for matching (requires more RAM ) HTH On 3/27/10, Kamran Shakil <[email protected]> wrote: > Dears, > > > > > > Well, I have been successfully blocking the P2P traffic and tested it > with my softwares in my own lab setup with available internet connection > to me using class-maps. > > > > Recently , I saw some config in a workbook saying class-map type inspect > xyz and then blocking it , well as I said above, I just made a > class-map and I didn't use inspect keyword ... > > > > In which situation would I use L7 class-map inspect , although the block > of p2p works smoothly with normal L3/L4 Class maps ... please anyone ? > explain ..thanks... > > > > > > > > > > truly, > > Kamran Shakil > > BS(CS) MCP MCSE CCNA CCDA CCNP CCDP CQS-WLANSE > > CQS-FOUNDSE CQS-IPCX CQS-UCCX > > CCIE*(Sec,inprogress) > > > > > > > > " MDS Cisco team accepts no liability for the content of this email, or > for the consequences of any actions taken on the basis of the > information provided, unless that information is subsequently confirmed > in writing. Any views or opinions presented in this email are solely > those of the author and do not necessarily represent those of the > organization. WARNING: Computer viruses can be transmitted via email. > The recipient should check this email and any attachments for the > presence of viruses. The organization accepts no liability for any > damage caused by any virus transmitted by this email. " > > [GroupStudy removed an attachment of type text/x-vcard which had a name of > Kamran Shakil.vcf] > > -- Warm Regards, Eseosa CCIE #23782 "The Christian is a person who makes it easy for others to believe in God." - Robert M. McCheyne _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
