Karthik
I may be wrong on this but I seem to recall that the match-any will stop on the first match under the class-map so I was wondering if the DMVPN was getting blocked by the “match closed-ports” entry. Thanks, *Matt Manire* *CCSP, CCNP, CCDP, MCSE* *2003 & MCSE 2000* *Information Systems Security Manager* [email protected] *t*: 817.525.1863 *f*: 817.525.1903 *m*: 817.271.9165 *First Rate* | 1903 Ascension Boulevard | Arlington, TX 76006| www.FirstRate.com <http://www.firstrate.com/> *From:* Karthik sagar [mailto:[email protected]] *Sent:* Sunday, August 12, 2012 10:45 AM *To:* Matt Manire *Cc:* Fawad Khan; [email protected]; ccie_security *Subject:* Re: [OSL | CCIE_Security] control plane Matt, I don't understand how changing the order will help. The order of 'match' entries in a class-map is immaterial. Both will give same results. The problem here is the "match-any" clause. Regards, Karthik
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
