10-28-2011 11:31 AM - edited 03-04-2019 02:05 PM
Please see the following policy. what happens to the rest of inbound traffics which do not match in the class microsoftDS? Are they just passing through like without any policy?
class-map microsoftDS
match access- group name microsoftDS
policy-map POLICE_microsoftDS
class microsoftDS
police 100000 4000 4000 conform-action transmit exceed-action transmit violate-action drop
ip access-list extended microsoftDS
permit tcp host 10.80.14.140 eq 445 any
permit udp host 10.80.14.140 eq 445 any
interface ATM1/ima0.1 point-to-point
service-policy input POLICE_microsoftDS
thanks.
Alison
10-28-2011 11:44 AM
Alison
Basically yes. There is a class default but unless you configure a specific action for it then with your above policy if the traffic does not match your acl it is not policed and sent through as is.
Jon
10-31-2011 10:10 AM
thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide