Policy map on 877 ISR

[afshan_nava]

Hi

i have a 877 with the C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(15)T13, Installed and Added a simple policy map to block certain websites...

class-map match-any WEB_CLASS

match protocol http host "*facebook*"

match protocol http host "*orkut*"

match protocol http host "*twitter*"

match protocol http host "*hi5*"

match protocol http host "*youtube*"

match protocol skype

match protocol http host "*video.google*"

!

!

policy-map OUTGOING_POLICY

class WEB_CLASS

   drop

interface Dialer0

service-policy output OUTGOING_POLICY

i have attached the detailed config...

After a reload the the the router works fine for about one day and then the internet slows down for the users.....

Pls help me.

Thanks

Afshan

[afshan_nava]

i mean the internet slows down in a way a page take 10-15min to load

[Panos Kampanakis]

There were some http inspection issues in older 12.4.15 IOS trains. We don't have enough info to decide if you are hitting one of them, so I can't give you a definite answer.

But could you try to load 12.4.24T4 or 12.4.22T5 and see if it looks better? There were http inspections enhancements and changes after 12.4.15 train.

I hope it helps.

PK

[afshan_nava]

PK

i loaded 12.4.24T4 but had no improvement. it works for sometime and then gives really wiered browsing issues..

Afshan

[Panos Kampanakis]

Please open a case to have it looked at.

PK

[afshan_nava]

I tried many IOS but finally this "c870-advipservicesk9-mz.124-15.XY3.bin" seems to be working...

it is actually a bug in the IOS, and it is on almoast every Version...

But am glad finally i got it working....

Thanks everyone