Finally , something worked !!!!
R1#show policy-map type access-control interface fa0/0
FastEthernet0/0
Service-policy access-control input: FPM-IF-PM
Class-map: IP-ICMP-STACK-CM (match-all)
15 packets, 1710 bytes
5 minute offered rate 0 bps
Match: field IP protocol eq 1 next ICMP
Service-policy access-control : ICMP-FILTER-PM
Class-map: ICMP-FILTER-CM (match-all)
5 packets, 570 bytes
5 minute offered rate 0 bps
Match: start ICMP payload-start offset 20 size 2 eq 0xFFFF
drop
Class-map: class-default (match-any)
10 packets, 1140 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0 bps, drop rate 0 bps
Match: any
R2#ping 10.13.0.3 data FFFF
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.13.0.3, timeout is 2 seconds:
Packet has data pattern 0xFFFF
.....
Success rate is 0 percent (0/5)
NOTE: i have not used string here. directly matched the byte number 21 and
22 to 0xFFFF. No luck with string yet.
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
