Tengo una red que debe bloquear streaming

[victor-sarria-lopez]

Necesito que mediante ACL bloquear acceso a servicios de streaming pero no logro hacer que funcione con un router/firewall ISR 4300

[Flavio Miranda]

@victor-sarria-lopez 

 The problem with ACL is that you need to know the destination and streaming have throusands and thousands of IP address which make it impossible to block

If can not install a firewall or proxy, take a look on the feature called ISR-AX which permit you use AVC and recognise application on your network. I believe you can achive your goal with that feature.

https://blogs.cisco.com/networking/cisco-isr-ax-is-now-a-part-of-the-integrated-services-router-family

[Julio E. Moisa]

Hola

Hay multiples formas de bloquear trafico, ACL, NBAR, expresiones regulares o incluso MQC. Debes ubicar los puertos de destino que deseas bloquear.

ACL

access-list 100 deny tcp any any eq 554 ! Bloquea RTSP
access-list 100 deny udp any any range 16384 32767 ! Bloquea RTP
access-list 100 permit ip any any ! Permitir todo lo demás

**Revisa si estas aplicando la ACL en la direccion correcta.

MQC - QoS

class-map match-any STREAMING
match protocol netflix
match protocol youtube
match protocol rtsp

policy-map BLOCK-STREAMING
class STREAMING
drop

interface <INTERFACE>
service-policy input BLOCK-STREAMING

NBAR

interface <INTERFACE>
ip nbar protocol-discovery