[nsp] QoS and NBAR

[francisv@dagupan.com]

Hi,

I'm trying to limit clients running P2P apps, belonging to a certain IP
block, from saturating a 2Mbps leased line. I'm using NBAR and PDLM files to
do this.

I'm thinking that this would require multiple class-maps like:

class-map match-all napster
  match protocol napster
  match access-group <ACL containing IP>

And repeating the process for each P2P application. Is there a better way of
doing this? I'm thinking of:

class-map match-any entertainment-apps
  match protocol napster
  match protocol gnutella
  match protocol fasttrack

policy-map POLICE-TRAFFIC
  class entertainment-apps
     police 64000 2000 2000 conform-action transmit exceed-action drop

interface Serial1/4
 description E1 (2Mbps) to client
 bandwidth 2048
 service-policy input POLICE-TRAFFIC
 service-policy output POLICE-TRAFFIC

But where do I match the IP address? Will this work?

class-map match-any entertainment-apps
  match protocol napster
  match protocol gnutella
  match protocol fasttrack

class-map match-all clients-running-p2p
  match class-map entertainment-apps
  match <ACL containing IP>

And then using the class-map clients-running-p2p for the policy map.

---
 francis a. vidal [bitstop network services] | http://www.bitstop.ph
 streaming media + web hosting               | http://www.keystone.ph
 v(02)330-2871,(02)330-2872; f(02)330-2873   | http://www.kuro.ph