Thanks for clearing this up Tyson. I've been running around the internet to find DSCP values and their relation to IP Precedence values, but even Google didnt know what I was talking about !!
In his solution guide, Yusuf does mention that the IP Precedence should be set to 1, so it was most likely a solution error. Still it did get me to thinking about DSCP an IP Precedence values. Mark On Tue, Nov 23, 2010 at 8:58 PM, Kamran Shakil <[email protected]>wrote: > > thanks boss. U r the man! > > regards, > > Kamran Shakil > ITA NDC Operations Engineer > BS(CS) MCSE CGAdmin CCDA CCNA > CCNP CCDP CS-CFEDS CS-CIPCES > CS-CIPCCES CS-CWALANDS CCIE-Sec. > MidEast Data Systems LLC Oman > Cell: + 968 95804126 > Office: + 968 24576640 > http://www.mynameise.com/kamranshakil77 > > Confidentiality Warning: > "This message and any attachments are intended only for the use of the > intended recipient(s), are confidential, and may be privileged. If you are > not the intended recipient, you are hereby notified that any review, > retransmission, conversion to hard copy, copying, circulation or other use > of all or any portion of this message and any attachments is strictly > prohibited. If you are not the intended recipient, please notify the sender > immediately by return e-mail, and delete this message and any attachments > from your system." > > > > -----Original Message----- > From: Tyson Scott [mailto:[email protected]] > Sent: Wed 11/24/2010 8:51 AM > To: Kamran Shakil; 'Mark Senteza'; [email protected] > Subject: RE: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting > > Yes precedence 1 equals DSCP 8 or CS1 (class selector 1). > > So if the question said precedence one and the answer is DSCP 1 then the > answer is wrong. The answer should be either precedence one or DSCP 8/CS1. > My question was there to get why it was wrong with the reason not being > because DSCP was chosen, it was that it was the wrong value. > > R1(config-cmap)#match dscp ? > <0-63> Differentiated services codepoint value > af11 Match packets with AF11 dscp (001010) > af12 Match packets with AF12 dscp (001100) > af13 Match packets with AF13 dscp (001110) > af21 Match packets with AF21 dscp (010010) > af22 Match packets with AF22 dscp (010100) > af23 Match packets with AF23 dscp (010110) > af31 Match packets with AF31 dscp (011010) > af32 Match packets with AF32 dscp (011100) > af33 Match packets with AF33 dscp (011110) > af41 Match packets with AF41 dscp (100010) > af42 Match packets with AF42 dscp (100100) > af43 Match packets with AF43 dscp (100110) > cs1 Match packets with CS1(precedence 1) dscp (001000) > cs2 Match packets with CS2(precedence 2) dscp (010000) > cs3 Match packets with CS3(precedence 3) dscp (011000) > cs4 Match packets with CS4(precedence 4) dscp (100000) > cs5 Match packets with CS5(precedence 5) dscp (101000) > cs6 Match packets with CS6(precedence 6) dscp (110000) > cs7 Match packets with CS7(precedence 7) dscp (111000) > default Match packets with default dscp (000000) > ef Match packets with EF dscp (101110) > > R1(config-cmap)# > > Regards, > > Tyson Scott - CCIE #13513 R&S, Security, and SP > Managing Partner / Sr. Instructor - IPexpert, Inc. > Mailto: [email protected] > Telephone: +1.810.326.1444, ext. 208 > Live Assistance, Please visit: www.ipexpert.com/chat > eFax: +1.810.454.0130 > > IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, > Audio Tools, Online Hardware Rental and Classroom Training for the Cisco > CCIE (R&S, Voice, Security & Service Provider) certification(s) with > training locations throughout the United States, Europe, South Asia and > Australia. Be sure to visit our online communities at > www.ipexpert.com/communities and our public website at www.ipexpert.com > > > -----Original Message----- > From: Kamran Shakil [mailto:[email protected]] > Sent: Tuesday, November 23, 2010 11:33 PM > To: Tyson Scott; Mark Senteza; [email protected] > Subject: RE: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting > > > Plz correct me if i am wrong, IP Prec.= 1 (001 ) equals to DCSP = > 8 (in decimal ) ( 1000 ) > > also provided above binary values. , well in such case I am curious also > about your comments on Mark's query abt. Yusuf lab ??? > > > > regards, > > Kamran Shakil > ITA NDC Operations Engineer > BS(CS) MCSE CGAdmin CCDA CCNA > CCNP CCDP CS-CFEDS CS-CIPCES > CS-CIPCCES CS-CWALANDS CCIE-Sec. > MidEast Data Systems LLC Oman > Cell: + 968 95804126 > Office: + 968 24576640 > http://www.mynameise.com/kamranshakil77 > > Confidentiality Warning: > "This message and any attachments are intended only for the use of the > intended recipient(s), are confidential, and may be privileged. If you are > not the intended recipient, you are hereby notified that any review, > retransmission, conversion to hard copy, copying, circulation or other use > of all or any portion of this message and any attachments is strictly > prohibited. If you are not the intended recipient, please notify the sender > immediately by return e-mail, and delete this message and any attachments > from your system." > > > > -----Original Message----- > From: [email protected] on behalf of Tyson Scott > Sent: Wed 11/24/2010 12:51 AM > To: 'Mark Senteza'; [email protected] > Subject: Re: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting > > What is the difference between DSCP 1 and precedence 1? Does it match > different traffic patterns? > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Managing Partner / Sr. Instructor - IPexpert, Inc. > > Mailto: [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, > Audio Tools, Online Hardware Rental and Classroom Training for the Cisco > CCIE (R&S, Voice, Security & Service Provider) certification(s) with > training locations throughout the United States, Europe, South Asia and > Australia. Be sure to visit our online communities at > www.ipexpert.com/communities and our public website at www.ipexpert.com > <http://www.ipexpert.com/> > > > > From: [email protected] > [mailto:[email protected]] On Behalf Of Mark > Senteza > Sent: Tuesday, November 23, 2010 2:00 PM > To: [email protected] > Subject: [OSL | CCIE_Security] Yusuf Lab 2 NBAR Troubleshooting > > > > Hi again all, > > A troubleshooting question in Yusuf Lab 2 (8.2 Troubleshooting NBAR) - I > just wanted clarification on whether or not thats a typo in the solution > (or > probably) the question, or if it is the right solution, can somebody throw > some light onto it. > > The question specifies Telnet traffic with IP Precedence bit set to 1. > > In my solution, I configured as follows > > class-map match-all TELNET-PREC1 > match protocol telnet > match ip precedence 1 > > vs. Yusuf's solution, which is > > class-map match-all drop23 > match protocol telnet > match ip dscp 1 > > His second match statement is matching on the DSCP value, whereas the > question specifies IP Precedence. Is this a mistake on his part or does it > come to the same thing - and if so then how ? > > Thanks again > > Mark > > > > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
