Hello,
on a router with IOS 12.4(11)T1 we have:
class-map match-any peer2peer match protocol fasttrack file-transfer "*" match protocol gnutella file-transfer "*"
policy-map p2p-drop class peer2peer drop
interface GigabitEthernet0/0 service-policy input p2p-drop
Now we would like to exclude two distinct ip addresses from this restriction. Is there a way to achieve this?
Regards, Christoph Gartmann
I didn't test this, but it should work...
You can nest your class-maps. Keep your match any class map and use a new match all:
class-map match-all partial_p2p match class-map peer2peer match not access-group 1
Create an access-list 1 for the ones you want to let through. Then, apply this new class to the policy map instead of the other one.
Hope that helps,
Jim
Have something to add? Share your thoughts — no account required.
Ask the community — no account required