05-25-2020 06:24 PM
I would like to create a Class Map Policy that will allow URL traffic. The ACL extended do not filter URL traffic, only IP address traffic. This class-map policy can do URL filter but I am finding instruction on how to drop traffic but not allow URL traffic. I need instructions on how to allow URL traffic using class-map policies.
05-25-2020 06:27 PM
05-25-2020 08:15 PM
I might have resolved my own problem. I was using drop instead on pass on the class-map policy.
class-map type inspect match-any allow
match protocol icmp
!
policy-map type inspect allow-policy
class type inspect allow
pass
zone security INSIDE
zone security OUTSIDE
zone-pair security OUTSIDE_TO_INSIDE source INSIDE destination OUTSIDE
service-policy type inspect allow-policy
!
!
interface FastEthernet0/0
description INSIDE
ip address 172.25.1.254 255.255.255.0
zone-member security INSIDE
duplex auto
speed auto
!
interface FastEthernet0/1
description OUTSIDE
ip address 192.168.87.254 255.255.255.0
zone-member security OUTSIDE
duplex auto
speed auto
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide