thanks boss. U r the man! regards,
Kamran Shakil ITA NDC Operations Engineer BS(CS) MCSE CGAdmin CCDA CCNA CCNP CCDP CS-CFEDS CS-CIPCES CS-CIPCCES CS-CWALANDS CCIE-Sec. MidEast Data Systems LLC Oman Cell: + 968 95804126 Office: + 968 24576640 http://www.mynameise.com/kamranshakil77 Confidentiality Warning: "This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system." -----Original Message----- From: Tyson Scott [mailto:[email protected]] Sent: Wed 11/24/2010 8:51 AM To: Kamran Shakil; 'Mark Senteza'; [email protected] Subject: RE: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting Yes precedence 1 equals DSCP 8 or CS1 (class selector 1). So if the question said precedence one and the answer is DSCP 1 then the answer is wrong. The answer should be either precedence one or DSCP 8/CS1. My question was there to get why it was wrong with the reason not being because DSCP was chosen, it was that it was the wrong value. R1(config-cmap)#match dscp ? <0-63> Differentiated services codepoint value af11 Match packets with AF11 dscp (001010) af12 Match packets with AF12 dscp (001100) af13 Match packets with AF13 dscp (001110) af21 Match packets with AF21 dscp (010010) af22 Match packets with AF22 dscp (010100) af23 Match packets with AF23 dscp (010110) af31 Match packets with AF31 dscp (011010) af32 Match packets with AF32 dscp (011100) af33 Match packets with AF33 dscp (011110) af41 Match packets with AF41 dscp (100010) af42 Match packets with AF42 dscp (100100) af43 Match packets with AF43 dscp (100110) cs1 Match packets with CS1(precedence 1) dscp (001000) cs2 Match packets with CS2(precedence 2) dscp (010000) cs3 Match packets with CS3(precedence 3) dscp (011000) cs4 Match packets with CS4(precedence 4) dscp (100000) cs5 Match packets with CS5(precedence 5) dscp (101000) cs6 Match packets with CS6(precedence 6) dscp (110000) cs7 Match packets with CS7(precedence 7) dscp (111000) default Match packets with default dscp (000000) ef Match packets with EF dscp (101110) R1(config-cmap)# Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com -----Original Message----- From: Kamran Shakil [mailto:[email protected]] Sent: Tuesday, November 23, 2010 11:33 PM To: Tyson Scott; Mark Senteza; [email protected] Subject: RE: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting Plz correct me if i am wrong, IP Prec.= 1 (001 ) equals to DCSP = 8 (in decimal ) ( 1000 ) also provided above binary values. , well in such case I am curious also about your comments on Mark's query abt. Yusuf lab ??? regards, Kamran Shakil ITA NDC Operations Engineer BS(CS) MCSE CGAdmin CCDA CCNA CCNP CCDP CS-CFEDS CS-CIPCES CS-CIPCCES CS-CWALANDS CCIE-Sec. MidEast Data Systems LLC Oman Cell: + 968 95804126 Office: + 968 24576640 http://www.mynameise.com/kamranshakil77 Confidentiality Warning: "This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system." -----Original Message----- From: [email protected] on behalf of Tyson Scott Sent: Wed 11/24/2010 12:51 AM To: 'Mark Senteza'; [email protected] Subject: Re: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting What is the difference between DSCP 1 and precedence 1? Does it match different traffic patterns? Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Mark Senteza Sent: Tuesday, November 23, 2010 2:00 PM To: [email protected] Subject: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting Hi again all, A troubleshooting question in Yusuf Lab 2 (8.2 Troubleshooting NBAR) - I just wanted clarification on whether or not thats a typo in the solution (or probably) the question, or if it is the right solution, can somebody throw some light onto it. The question specifies Telnet traffic with IP Precedence bit set to 1. In my solution, I configured as follows class-map match-all TELNET-PREC1 match protocol telnet match ip precedence 1 vs. Yusuf's solution, which is class-map match-all drop23 match protocol telnet match ip dscp 1 His second match statement is matching on the DSCP value, whereas the question specifies IP Precedence. Is this a mistake on his part or does it come to the same thing - and if so then how ? Thanks again Mark _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
