How is the match protocol command used in nbar?
Within NBAR, the match protocol http c-header-field command is used to specify request messages (the “c” in the c-header-field portion of the command is for client). The match protocol http s-header-field command is used to specify response messages (the “s” in the s-header-field portion of the command is for server).
How to match DSCP values to IPv4 packets?
To match DSCP values for IPv6 packets only, the match protocol ipv6 command must also be used. Without that command, the DSCP match defaults to match both IPv4 and IPv6 packets. To match DSCP values for IPv4 packets only, use the ip keyword. Without the ip keyword the match occurs on both IPv4 and IPv6 packets.
How does Ethernet over Multiprotocol Label Switching ( EoMPLS ) work?
• Physical LAN ports that are configured to support Ethernet over Multiprotocol Label Switching (EoMPLS) The ingress traffic that is permitted or denied by a MAC ACL on an interface configured for multilayer MAC ACL QoS filtering is processed by egress interfaces as MAC-layer traffic.
How to use match interface in Flexible NetFlow?
match interface (Flexible NetFlow) To configure the input and output interfaces as key fields for a Flexible NetFlow flow record, use the match interface command in Flexible NetFlow flow record configuration mode.
How to remove ACL match criteria from class map?
Attaches the classification template to an interface. To configure the match criteria for a class map on the basis of the specified access control list (ACL), use the match access-group command in class-map configuration mode. To remove ACL match criteria from a class map, use the no form of this command.
Can a network interface be assigned to more than one zone?
An interface can be assigned to only one security zone. All traffic to and from a given interface is implicitly blocked when the interface is assigned to a zone, except traffic to and from other interfaces in the same zone, and traffic to any interface on the router.