|
Question : Shaping and NBAR on Cisco router
|
|
We are shaping unwanted traffic on a Cisco 7204vxr with use of nbar, but is it possible to shape "unknown" traffic with use of NBAR ? any solution ?
|
Answer : Shaping and NBAR on Cisco router
|
|
You will usually want to prioritize your wanted services only. Your unknown traffic will be the in the class-default class and can be handled within that class, or even dropped (as the example below).
You will not be able to classify traffic unknown to nbar automatically though but can come close.
Example: class-map match-all known match protocol http match protocol ftp
policy-map default class known bandwidth percent 100 class class-default police 8000 conform-action drop exceed-action drop
Note, this is only going to be useful for your outbound traffic, inbound traffic will have to be handled on the remote side usually as you've already received the traffic and dropping it is a waste of bandwidth (as it has already been received).
|
|
|
|