= NBAR is not usable for any IOS FW(CBAC nor ZFW) Thanks!
R. 4. 9. 2012 v 19:41, GuardGrid <[email protected]>: > Inspect type class maps like ZBF or ip inspect for CBAC -> PAM > Classic class maps for QoS -> NBAR > > On Tue, Sep 4, 2012 at 12:58 PM, Radim Jurica <[email protected]> wrote: > Hello guys, > after reading docs and all OSL threads about PAM vs NBAR I have thought that > its clear: > > for ZBF > ip nbar port-map > for CBAC > ip port-map > > But statement in WB-Vol1-2A-2.16 for ZFW: > > > With a classic class-maps in > correlation to the MQC you > would expect to use ip nbar > port-map custom-XX. But > remember this is for firewall > features so we are using > PAM. > > and solution: > > ip port-map user-BACKUPS port tcp 9001 > ! > class-map type inspect match-all BACKUP-APP > match protocol user-BACKUPS > ! > policy-map type inspect DC->EXEC > class type inspect BACKUP-APP > inspect > > Finally, I am lost... > > > Thanks in advance for clarification. > > Radim > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
