Hello,
on a router with IOS 12.4(11)T1 we have:
class-map match-any peer2peer match protocol fasttrack file-transfer "*" match protocol gnutella file-transfer "*"
policy-map p2p-drop class peer2peer drop
interface GigabitEthernet0/0 service-policy input p2p-drop
Now we would like to exclude two distinct ip addresses from this restriction. Is there a way to achieve this?
Regards, Christoph Gartmann
I didn't test this, but it should work...
You can nest your class-maps. Keep your match any class map and use a new match all:
class-map match-all partial_p2p match class-map peer2peer match not access-group 1
Create an access-list 1 for the ones you want to let through. Then, apply this new class to the policy map instead of the other one.
Hope that helps,
Jim
Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.