All the below blocks tcp, you can check it out with telnet. class-map type access-control match-any telnet match start l3-start offset 9 size 1 eq 0x6 policy-map type access-control telnet class telnet drop
class-map type access-control match-any telnet match start IP version offset 9 size 1 eq 0x6 policy-map type access-control telnet class telnet drop class-map type access-control match-any telnet match start IP ttl offset 1 size 1 eq 0x6 policy-map type access-control telnet class telnet drop With regards Kings On Sun, Jun 12, 2011 at 1:53 AM, Bruno <[email protected]> wrote: > ha? > Is the same as match start IP version? > > > On Sat, Jun 11, 2011 at 4:09 AM, Kingsley Charles < > [email protected]> wrote: > >> >> "match l3-start is equivalent" to "match start IP version" >> >> With regards >> Kings >> >> On Sat, Jun 11, 2011 at 10:27 AM, Richard Chan <[email protected]>wrote: >> >>> For IP in Ethernet >>> >>> Is "match start l3-start" the same as "match start IP" >>> or >>> does the latter match from the start of the IP payload, skipping the IP >>> header? >>> >>> _______________________________________________ >>> For more information regarding industry leading CCIE Lab training, please >>> visit www.ipexpert.com >>> >>> Are you a CCNP or CCIE and looking for a job? Check out >>> www.PlatinumPlacement.com >>> >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > > > > -- > Bruno Fagioli (by Jaunty Jackalope) > Cisco Security Professional >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
