Block P2P Traffic on a Cisco IOS Router using NBAR
Block P2P Traffic on a Cisco IOS Router using NBAR In the following example, well use NBAR to block P2P traffic on our routers Gigabit interface. Create a class-map to match the protocols to be blocked. Create a policy-map to specify what should be done with the traffic. Apply the policy to the user-facing (incoming) interface. conf t !--- IP CEF should be enabled at first to block P2P traffic. !--- P2P traffic cannot be blocked when IPC CEF is disabled. ip cef ! !--- Configure the class map named p2p to match the P2P protocols !--- to be blocked with this class map p2p. class-map match-any p2p !--- Mention the P2P protocols to be blocked in order to block the !--- P2P traffic flow between the required networks. edonkey, !--- fasttrack, gnutella, kazaa2, skype are some of the P2P !--- protocols used for P2P traffic flow. This example !--- blocks these protocols. ! match protocol edonkey match protocol fasttrack match protocol gnutella match protocol kazaa2 match protocol winmx match pr...