Check this statement

class-map type access-control match-all FILTER
match field TCP dest-port eq 80
match field tcp control-bits eq 2 mask 0x3D
match field tcp control-bits eq 1 mask 0x3D

Will this catch either SYN OR FIN and other bits could be set as well? Is
that right?
-- 
Bruno Fagioli (by Jaunty Jackalope)
Cisco Security Professional
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to