Hello Kings, Although my previous example wasn't working. I was curious about where one could use ONLY access-control class-maps .
Well, i tried using just the access-control class-map to do this. class-map type access-control access match field IP protocol eq 6 ( TCP traffic ) This *successfully blocked* all telnet traffic. *NOTE *: I have not used a stack class here. Next , i tried matching using Layer 2 ( ETHER Phdf ) and only an access-control class map. class-map type access-control access match field ETHER type eq 0x0800 ( IP Traffic ) This did *NOT *work. This only seems to work with the stack class-map. So , my observation is that, except for Layer 3, for all other layers, we need Stack class-maps to be defined prior to matching using the access-control maps. Cheers, TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
