Quantcast
Channel: IEOC - INE's Online Community
Viewing all articles
Browse latest Browse all 10744

Using ACLs to match HTTP traffic vs using NBAR - same difference ? :/

$
0
0

Going through the solution guide for QOS, I saw several occasions where HTTP traffic is sometimes matched using an extended acl matching port 80 or using match protcol http (nbar)

I know NBAR gives deeper inspection into HTTP protocol i.e it should give us basic port 80 matching funcationaliy (what extended ACLs are doing for us) and then further inspection such as looking into url pattern etc.

 

So my question is, Is there a reason why I should use Extended ACLs instead of NBAR ANYTIME we are asked to meddle with QOS for HTTP?

 

For instance take task 10.33 - they have used an extended ACL to match HTTP traffic, couldnt I have simply used NBAR under the class-map HTTP to achieve the same goal?

 

Just want to make sure I am not overlooking the obvious here??!!?? :)


Viewing all articles
Browse latest Browse all 10744

Trending Articles