All pastes #34622 Raw Edit

Q

public text v1 · immutable
#34622 ·published 2005-12-22 18:48 UTC
rendered paste body
!
class-map match-any p2p
  match protocol fasttrack file-transfer "*"
  match protocol gnutella file-transfer "*"
  match protocol kazaa2 file-transfer "*"
  match protocol napster
  match protocol bittorrent
  match protocol edonkey
  match protocol directconnect
  match protocol winmx
!
policy-map p2p
  class p2p
   police cir 8000 bc 1000 be 1000
     conform-action transmit
     exceed-action drop
     violate-action drop
!
access-list 109 deny   53 any any
access-list 109 deny   55 any any
access-list 109 deny   77 any any
access-list 109 deny   pim any any
access-list 109 deny   tcp any any eq 135
access-list 109 deny   udp any any eq 135
access-list 109 deny   tcp any any range 137 139
access-list 109 deny   udp any any range netbios-ns netbios-ss
access-list 109 deny   tcp any any eq 445
access-list 109 deny   tcp any any eq 593
access-list 109 permit ip any any
!
interface FastEthernet0/0
 ip address ip.ip.ip.ip 255.255.255.240 secondary
 ip address ip.ip.ip.ip 255.255.255.240
 ip access-group 109 in
 no ip redirects
 no ip unreachables
 ip nbar protocol-discovery
 no ip mroute-cache
 duplex full
 no keepalive
*service-policy input p2p
*service-policy output p2p
 no cdp enable
!