Hi,

I know this was discussed previously, but I cant find the thread to it.

When matching ports in a portfilter type class-map, is it recommended to
take the default setting that does a "match-all" so that you match on all
closed-ports and ports you dont want filtered.

For instance

class-map type portfilter match-all PORTS
 match closed-ports
 match not port tcp 2000
 match not port tcp 2001

Or is the correct configuration to go with "match-any"
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to