On (2014-04-21 17:09 +0100), Phil Mayers wrote:

> Can you expand on this? Currently you can either do "platform rate-limit"
> for IP options or disable the RL and use the built-in / magic CPP class-map:

As ACL match work, you could do it in iACL and then you're only left with own
customers attacking you.
Mind you, I don't run PFC4. But amongst things I'm missing in PFC3 ACL
classification are packet size and IP options, both should be available in
PFC4.

-- 
  ++ytti
_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to