cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
985
Views
5
Helpful
5
Replies

isr 4451 appx - why there is no policy-map "drop" command?

Ruslan Moldaliev
Beginner
Beginner

hi there,

I'm trying to block torrents in my network and want to achieve this by next configuration:

Cisco_ISR(config)#class-map match-any ALL-P2P-PROTOCOLS
Cisco_ISR(config)# match protocol bittorrent

Cisco_ISR(config)#policy-map P2P- DROP

Cisco_ISR(config)#class ALL-P2P-PROTOCOLS

Cisco_ISR(config)#drop
Cisco_ISR(config)#interface gigabitEthernet 0/0
Cisco_ISR(config-if)#service-policy input P2P-DROP
thing is I can't apply "drop" command - and I don't know how to find whether it's licensing or platform issue.
thanks
5 Replies 5

Philip D'Ath
Advisor
Advisor

What software version are you running on the 4451?

ps. You can't effectively stop P2P traffic anymore.  This only catches all the older clients.  The newer clients now all use random ports and encrypted traffic streams.

hi Philip,

I'm running 3.13.2S and I believe it has 15.4(3)S4 version inside.

I just want to block usual bittorrent traffic for start, P2P needs additional investigation - thanks for the info.

I have an inkling in the back of my mind this might be related to the code version you are using.  Are you able to upgrade to something newer like 3.16.2S?

https://software.cisco.com/download/release.html?mdfid=284389362&catid=268437899&softwareid=282046477&release=3.16.2S&relind=AVAILABLE&rellifecycle=ED&reltype=latest

uhmm, I'll try it and report back.

thanks for the suggestion.

nope, it's not software version reason unfortunately. there is no such command even in suggested release by you. maybe command syntax was changed.

however I managed to block torrents in testing environment with the next configuration:

class-map match-any LIMIT-TOR
  match protocol bittorrent
  match protocol bittorrent-networking
  exit
  policy-map QOS-LIMIT-TOR-POLICY
  class LIMIT-TOR
  police cir 8000
  confirm-action drop
  exceed-action drop
  violate-action drop
  exit
  exit
  exit
  int gig 0/0/0
  ip nbar protocol-discovery
  service-policy output QOS-LIMIT-TOR-POLICY
  service-policy input QOS-LIMIT-TOR-POLICY

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: