Blocking unwanted websites on Cisco 891F

[bienrukundo1]

Hello,

Could you help me to block websites like youtube and facebook on Cisco 891F router for the whole network.

Thank you.

[Mark Malone]

Yes if it has the correct license you can use ip inspect which is capable of that

https://supportforums.cisco.com/document/81561/basic-url-filter-using-cbac

[bienrukundo1]

Hello,

I have to tried to put all commands in my router but it did not take effect.

I wanted to apply it on the grobal internet to my GigabitEthernet8 interface where the router takes connectivity from the fiber optic.

If possible you can give me more advice.

Thank you.

[Mark Malone]

did not take effect in what way ? not supported ? showed errors ?

Theres another way needs to be on WAN ip interface use class map instead of CBAC

R1(config)#class-map match-any BLOCKED
R1(config-cmap)#match protocol http host "*youtube.com*"
R1(config-cmap)#exit
R1(config)#policy-map DROP
R1(config-pmap)#class BLOCKED
R1(config-pmap-c)#drop
R1(config-pmap-c)#exit

R1(config)#interface G0/8
R1(config-if)#service-policy output DROP

[bienrukundo1]

Here is what I have done but still I am able to access youtube

UTAB(config)#class-map match-any BLOCKED
UTAB(config-cmap)#match protocol http host "*youtube.com*"
UTAB(config-cmap)#exit
UTAB(config)#policy-map DROP
UTAB(config-pmap)#class BLOCKED
UTAB(config-pmap-c)#drop
UTAB(config-pmap-c)#exit
UTAB(config-pmap)#exit
UTAB(config)#interface GigabitEthernet8
UTAB(config-if)#service-policy output DROP
UTAB(config-if)#exit
UTAB(config)#exit
UTAB#wr
Building configuration...
[OK]

The interface information is like this:

interface GigabitEthernet8
description == Uplink ==
ip address 197.243.38.50 255.255.255.252
ip nat outside
ip inspect Webfilter out
ip virtual-reassembly in
duplex auto
speed auto
service-policy output DROP
!