Policies against NIMDA problems.

[l.leone]

Hi everyone,

I've implemented policy based routing to figth against NIMDA; to apply theese policies on Cisco 7500

with VIP2-50 I nedeed to use Cisco IOS 12.1(7)E;

the policies provide the matching of the strings of the URL on port 80, the setting of dscp of the ip packet of the strings recognized to be dangerous, the dropping of the packets marked with route map or ACL.

The routers experienced VIP crashes and the packets were passing through them without being marked or dropped;

has someone any workaround about theese problems?

Any suggestion would be appreciated.

Laura.

[ciscomoderator]

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.