topic Re: Policy map on 877 ISR in Network Security

Policy map on 877 ISR

afshan_nava — Mon, 11 Mar 2019 19:18:18 GMT

i have a 877 with the C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(15)T13, Installed and Added a simple policy map to block certain websites...

class-map match-any WEB_CLASS

match protocol http host "*facebook*"

match protocol http host "*orkut*"

match protocol http host "*twitter*"

match protocol http host "*hi5*"

match protocol http host "*youtube*"

match protocol skype

match protocol http host "*video.google*"

policy-map OUTGOING_POLICY

class WEB_CLASS

drop

interface Dialer0

service-policy output OUTGOING_POLICY

i have attached the detailed config...

After a reload the the the router works fine for about one day and then the internet slows down for the users.....

Pls help me.

Thanks

Afshan

Re: Policy map on 877 ISR

afshan_nava — Sun, 05 Dec 2010 13:14:04 GMT

i mean the internet slows down in a way a page take 10-15min to load

Re: Policy map on 877 ISR

Panos Kampanakis — Mon, 06 Dec 2010 16:53:14 GMT

There were some http inspection issues in older 12.4.15 IOS trains. We don't have enough info to decide if you are hitting one of them, so I can't give you a definite answer.

But could you try to load 12.4.24T4 or 12.4.22T5 and see if it looks better? There were http inspections enhancements and changes after 12.4.15 train.

I hope it helps.

Re: Policy map on 877 ISR

afshan_nava — Tue, 21 Dec 2010 12:49:02 GMT

i loaded 12.4.24T4 but had no improvement. it works for sometime and then gives really wiered browsing issues..

Afshan

Re: Policy map on 877 ISR

Panos Kampanakis — Tue, 21 Dec 2010 14:20:58 GMT

Please open a case to have it looked at.

Re: Policy map on 877 ISR

afshan_nava — Wed, 16 Feb 2011 13:25:10 GMT

I tried many IOS but finally this "c870-advipservicesk9-mz.124-15.XY3.bin" seems to be working...

it is actually a bug in the IOS, and it is on almoast every Version...

But am glad finally i got it working....

Thanks everyone