Tacack, please paste your complete config.

With regards
Kings

On Tue, Nov 23, 2010 at 7:14 PM, Vybhav Ramachandran <[email protected]>wrote:

> Hello All,
>
> I'm facing a wierd issue.
>
> Here's my Topology
>
>                      10.1.1.0/24
> R1 (fa 0/0 ) <----------------------> (fa 0/0 ) R2
>                     .1                  .2
>
>
>
> Now i've applied an FPM policy on the fa 0/0 interface of R2 to block all
> telnet traffic headed to R2 from R1.
>
> class-map type access-control match-all FPM
>    match field TCP dest-port eq 23
>
> This fails to block the telnet session. However, i was just trying out
> various numbers and i found that "44" in place of 23 succeeds in blocking
> the telnet session.
>
> I tried this out with ICMP echo-requests as well. I tried blocking the
> echo-requests using the "type" field in the ICMP phdf , but that didn't work
> either.
>
> Does anyone know why?
>
> Cheers,
> TacACK
>
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to