Hehe. The walkthrough instructor applies the same config to another router
and it works fine - I just did the same thing and sure enough it works for
me also, but it will not work on R5. Perhaps this is some feature
interaction issue. Thanks for your help Tackack. If anyone is interested,
here's the config that works on other routers, but not lab18 R5:

class-map type access-control match-all CMACCESSCON_UDP50
 match field UDP dest-port eq 0x32
 match field ip ttl lt 3
class-map type stack match-all CMSTACK_IP-UDP
 match field IP protocol eq 0x11 next UDP
!
policy-map type access-control PMAPACCESSCON_UDP50
 class CMACCESSCON_UDP50
   drop
   log
!
policy-map type access-control PMAPACCESSCON_PARENT
 class CMSTACK_IP-UDP
  service-policy PMAPACCESSCON_UDP50
!
interface FastEthernet1/0
 service-policy type access-control input PMAPACCESSCON_PARENT
!

Cheers, Jerome
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to