Using NBAR for an IP Range

[kmattes]

Hi all:

I've got a 3725 infront of our PIXs (e0/0) and a T3 on on the other side.

I want to use NBAR to filter out all the P2P crap thats been going around on our network..

BUT ;-)

I only want to be using NBAR for a specific source range of IPs... not for all the traffic coming through the interface... (as you can guess, I don't want to cut myself off. hahaha)

Anyone have any ideas how to pull this stunt off...

Thanks In Advance!

Kev

[Georg Pauwen]

Hello Kev,

you could try a class which has to match both the protocol and an access list:

class-map match-all HTTP

match protocol http

match ip address 101

In the access list, you could specify the range of IP addresses you want this policy to be implemented for.

Don't forget to turn on cef globally (ip cef) for this to work...:)

Regards,

Georg

www.solutionfinders.nl