Cisco 878 Router, URL Filtering

[akinbeslan]

Slm;

!!!!!!!!!!!!!!!!

!
class-map match-all test
match protocol http url "*google.com*"
!
!
policy-map testP
class test
drop
!


!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!


Iyi gunler

hocam bu NBAR dediginiz olay olsa gerek ? hic bilgim yok NBAR ile ilgili yapabilirmiyim bilemiyorum :S ilk once ne yapmam gerekli ?

[burner]

Slm;

Hicbirsey yapmana gerek yok sadece, yaptigim ornegin uzerine yap .... class ta protocol u config ederken zaten nbar enable oluyor, goreceksin o satirda enter yaptigin zaman crusor bir kac saniye askida kalacak...nbar feature enable oluyor...

Iyi gunler

[akinbeslan]

yani config moda a gecip class-map match-all test yazicam,sonra match protocol http url facebook.com yazicam bumudur? boyle yapinca olmadi.

[burner]

Slm;

R878#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
R878(config)#class-map test             
R878(config-cmap)#match protocol http url "*facebook.com*"
R878(config-cmap)#exit
R878(config)#policy-map testP
R878(config-pmap)#class test
R878(config-pmap-c)#drop
R878(config-pmap-c)#exit
R878(config-pmap)#exit
R878(config)#int fa0/0
R878(config-if)#service-policy input testP ---->interfaceye uyguladinmi?
R878(config-if)#end
R878#
R878#

show comutlari:

R878#sh run int fa0/0
Building configuration...

Current configuration : 111 bytes
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex auto
 speed auto
 service-policy input testP   --->hangi interfacede yaptiginiza input | output
end

R878#sh run | be class-map
class-map match-all test
 match protocol http url "*facebook.com*"
!
!
policy-map testP
 class test
   drop
!

Iyi gunler

[akinbeslan]

asbis#conf t
Enter configuration commands, one per line. End with CNTL/Z.
asbis(config)#cla
asbis(config)#class-map test
asbis(config-cmap)#mat
asbis(config-cmap)#match pro
asbis(config-cmap)#match protocol http url "*facebook.com*"
^
% Invalid input detected at '^' marker.




bende boyle oluyo :S

[burner]

slm;

ios version ne? yada sen yanlis bisiy yapiyorsun... http kismidan sonra ? isareti koyunca url opsiyonunu gorebiliyormusun?

sample;

BB3(config-cmap)#match protocol ?    
  aarp              AppleTalk ARP
  appletalk         AppleTalk
  arp               IP ARP
  bgp               Border Gateway Protocol
  bridge            Bridging
  bstun             Block Serial Tunnel
  cdp               Cisco Discovery Protocol
  citrix            Citrix Systems ICA protocol
  clns              ISO CLNS
  clns_es           ISO CLNS End System
  clns_is           ISO CLNS Intermediate System
  cmns              ISO CMNS
  compressedtcp     Compressed TCP (VJ)
  cuseeme           CU-SeeMe desktop video conference
  decnet            DECnet
  decnet_node       DECnet Node
  decnet_router-l1  DECnet Router L1
  decnet_router-l2  DECnet Router L2
  dhcp              Dynamic Host Configuration
  dlsw              Data Link Switching (Direct encapsulation only)
  dns               Domain Name Server lookup
  edonkey           eDonkey
/http     
filtering...
  http              World Wide Web traffic
  icmp              Internet Control Message
  imap              Internet Message Access Protocol
  ip                IP
  ipinip            IP in IP (encapsulation)
  ipsec             IP Security Protocol (ESP/AH)
  ipv6              IPV6
  ipx               Novell IPX
  irc               Internet Relay Chat
  kazaa2            Kazaa Version 2 
  kerberos          Kerberos
  l2tp              L2F/L2TP tunnel
  ldap              Lightweight Directory Access Protocol
  llc2              llc2
  mgcp              Media Gateway Control Protocol
  napster           Napster Traffic
  netbios           NetBIOS
  netshow           Microsoft Netshow
  nfs               Network File System
  nntp              Network News Transfer Protocol
  notes             Lotus Notes(R)
  novadigm          Novadigm EDM
  ntp               Network Time Protocol
          
BB3(config-cmap)#match protocol http ?
  c-header-field  Client general Header Field
  host            Server Host Name
  mime            Match MIME Type
  s-header-field  Server general Header Field
  url             Match URL String
  <cr>

BB3(config-cmap)#match protocol http url

Iyi gunler

[akinbeslan]

asbis(config-cmap)#match protocol ?
arp IP ARP
bridge Bridging
cdp Cisco Discovery Protocol
compressedtcp Compressed TCP (VJ)
ip IP
llc2 llc2
pppoe PPP over Ethernet
snapshot Snapshot routing support
vofr voice over Frame Relay packets




version 12.4 hocam. yanlislik nerede acaba ?

protocol http ? yapinca recognized command diyo protocol http url ? yapincada recognized command diyo..

[burner]

Slm;

Senin routerde nbar PDLM i coooook eski version...Onu cisco sitesinden yada baska biryerden download etmen gerekiyor.(registered user only), sitede bir aralar birilerine gondermistim ama bende yok su anda...siz yine site icinde bir post yapin umarim ki olan arkadaslar vardir...

Iyi gunler