Re: class-map match

The case in point had a match-all class-map in one case and a match-any
in the other. Even if entry mode does not matter in the match-any case,
I would be surprised if the match-any/match-all type changed by itself.

-Carlos

Narbik Kocharians @ 20/01/2010 14:48 -0300 dixit:
> Have a look at the logic and it will make perfect sense:
>
>
>
> In the following example, you are matching packets that are marked with
> IPP 4 AND match access-list 100, so the logic says, in order for me to
> have a classification, the packet has to match to what ever I have
> defined in the access-list AND it has to also be marked with IPP4 (since
> you used *_ip_* precedence, it has to be an IPv4 packet as well)
>
>
>
> *Class-map TST *
>
> * Match ip precedence 4*
>
> * Match access-group 100*
>
>
>
> In the following example, you are saying as long as the packet matches
> one of the following I have a classification. So the logic here is OR,
> it should match ACL 100 OR have a marking of IPP4.
>
>
>
> *Class-map match-any TST *
>
> * Match ip precedence 4*
>
> * Match access-group 100*
>
>
>
> In the following example, you are saying that I like to have a
> classification if the packet is marked with DSCP 31 OR 41, note the
> logic is correct, because as long as the packet is marked with DSCP
> value of 31 or 41 you will have a classification.
>
>
>
> *Class-map match-any TST*
>
> * Match dscp 31*
>
> * Match dscp 41*
>
>
>
> In the following example, the two match statements that you have
> configured will use an AND logic regardless of how the matches were
> configured; But since you have NOT specified the logic (match-all or
> match-any), it defaults to match-all, and because of that, the logic is
> incorrect, because a packet can NOT have two different dscp values, I
> doubt that you will match anything here.
>
>
>
> *Class-map TST*
>
> *Match dscp 31*
>
> * Match dscp 41*
>
>
>
> Now this is the correct way of configuring the above example, because
> you are saying if the packet is marked with a dscp value of 31 OR 41, i
> want to classify it.
>
>
>
> *Class-map Match-any TST*
>
> * Match dscp 31*
>
> * Match dscp 41*
>
>
>
> And if you do a show run after you configure the above example, the IOS
> will display it the proper way:
>
>
>
> *Class-map Match-any TST*
>
> * Match dscp 31 41*
>
>
>
>
>
>
>
> On Wed, Jan 20, 2010 at 9:16 AM, Carlos G Mendioroz <tron_at_huapi.ba.ar
> <mailto:tron_at_huapi.ba.ar>> wrote:
>
> Agreed,
> but they are different, and the difference will be obvious when
> you later on decide to add another line to the class.
>
> So far, I would expect them to behave almost the same, one will have
> more granular counters in show policy though ?
>
> -Carlos
>
> ALL From_NJ @ 19/01/2010 11:23 -0300 dixit:
> > This is worth a quick look up to those who said it would not match
> > anything. Multiple DSCP values on a single command line are
> allowed ...
> > Also, this is worth labbing up. Look at the show running command with
> > separate match statements and then try again with a single match
> statement.
> >
> >
> > (say this with a pirate accent) "Aye mately, tis worth a quick
> glace says
> > I. Keep yer weather eye and yer wont be caught unawares ... "
> >
> >
> http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m1.html#wp1034334
> >
> > Practice your doc cd lookup skills as well as see the command
> usage / usage
> > guidelines. ;-)
> >
> > HTH,
> >
> > Andrew
> >
> >
> > On Tue, Jan 19, 2010 at 8:27 AM, Mad_Prof Mad_Prof
> <dr3d3m3nt0_at_gmail.com <mailto:dr3d3m3nt0_at_gmail.com>>wrote:
> >
> >> class-map match-all TRANSACTIONAL_DATA
> >> match ip dscp af21 af22 af23
> >>
> >> I expect no matches for this class-map.
> >>
> >>
> >> Thanks
> >>
> >>
> >> On Tue, Jan 19, 2010 at 3:14 AM, estela Mathew
> <estelamathew_at_gmail.com <mailto:estelamathew_at_gmail.com>
> >>> wrote:
> >>> Dear's
> >>>
> >>> Its different the upper statement shld match everything and the
> lower
> >>> statement matches any 1 of that and takes action.
> >>>
> >>> Thanks,
> >>>
> >>>
> >>> On Tue, Jan 19, 2010 at 11:51 AM, Joe Astorino
> <jastorino_at_ipexpert.com <mailto:jastorino_at_ipexpert.com>
> >>>> wrote:
> >>>> I agree with Narbik,these look functionally the same. BUT I would
> >>>> test it : ) We've all seen the AND/OR logic in a route-map do
> >>>> stranger things.
> >>>>
> >>>> On Tue, Jan 19, 2010 at 2:44 AM, Narbik Kocharians
> <narbikk_at_gmail.com <mailto:narbikk_at_gmail.com>>
> >>>> wrote:
> >>>>> They look the same to me.
> >>>>>
> >>>>> On Mon, Jan 18, 2010 at 10:54 PM, Ed Man
> <networkexpert08_at_gmail.com <mailto:networkexpert08_at_gmail.com>>
> >>>> wrote:
> >>>>>> Hi Group,
> >>>>>>
> >>>>>> Are they essentially the same? Or they are different?
> >>>>>>
> >>>>>> class-map match-all TRANSACTIONAL_DATA
> >>>>>> match ip dscp af21 af22 af23
> >>>>>>
> >>>>>> class-map match-any T_D
> >>>>>> match ip dscp af21
> >>>>>> match ip dscp af22
> >>>>>> match ip dscp af23
> >>>>>>
> >>>>>> Thanks
> >>>>>> Ed.
> >>>>>>
> >>>>>>
> >>>>>> Blogs and organic groups at http://www.ccie.net
> <http://www.ccie.net/>
> >>>>>>
> >>>>>>
> >>>
> _______________________________________________________________________
> >>>>>> Subscription information may be found at:
> >>>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>
> >>>>> --
> >>>>> Narbik Kocharians
> >>>>> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
> >>>>> www.MicronicsTraining.com <http://www.micronicstraining.com/>
> >>>>> Sr. Technical Instructor
> >>>>> YES! We take Cisco Learning Credits!
> >>>>> Training And Remote Racks available
> >>>>>
> >>>>>
> >>>>> Blogs and organic groups at http://www.ccie.net
> <http://www.ccie.net/>
> >>>>>
> >>>>>
> >>
> _______________________________________________________________________
> >>>>> Subscription information may be found at:
> >>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>
> >>>>
> >>>> --
> >>>> Regards,
> >>>>
> >>>> Joe Astorino CCIE #24347 (R&S)
> >>>> Sr. Technical Instructor - IPexpert
> >>>> Mailto: jastorino_at_ipexpert.com <mailto:jastorino_at_ipexpert.com>
> >>>> Telephone: +1.810.326.1444
> >>>> Live Assistance, Please visit: www.ipexpert.com/chat
> <http://www.ipexpert.com/chat>
> >>>> eFax: +1.810.454.0130
> >>>>
> >>>> IPexpert is a premier provider of Classroom and Self-Study
> Cisco CCNA
> >>>> (R&S, Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice,
> >>>> Security & Service Provider) Certification Training with locations
> >>>> throughout the United States, Europe and Australia. Be sure to
> check
> >>>> out our online communities at www.ipexpert.com/communities
> <http://www.ipexpert.com/communities> and our
> >>>> public website at www.ipexpert.com <http://www.ipexpert.com/>
> >>>>
> >>>>
> >>>> Blogs and organic groups at http://www.ccie.net
> <http://www.ccie.net/>
> >>>>
> >>>>
> _______________________________________________________________________
> >>>> Subscription information may be found at:
> >>>> http://www.groupstudy.com/list/CCIELab.html
> >>>
> >>> Blogs and organic groups at http://www.ccie.net
> <http://www.ccie.net/>
> >>>
> >>>
> _______________________________________________________________________
> >>> Subscription information may be found at:
> >>> http://www.groupstudy.com/list/CCIELab.html
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>
> >> --
> >> It is said that if you know your enemies and know yourself, you
> will not be
> >> imperiled in a hundred battles; if you do not know your enemies
> but do know
> >> yourself, you will win one and lose one; if you do not know your
> enemies
> >> nor
> >> yourself, you will be imperiled in every single battle.
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> <http://www.ccie.net/>
> >>
> >>
> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >
> >
>
> --
> Carlos G Mendioroz <tron_at_huapi.ba.ar <mailto:tron_at_huapi.ba.ar>>
> LW7 EQI Argentina
>
>
>
>
> --
> Narbik Kocharians
> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
> www.MicronicsTraining.com <http://www.MicronicsTraining.com>
> Sr. Technical Instructor
> YES! We take Cisco Learning Credits!
> Training And Remote Racks available

-- 
Carlos G Mendioroz  <tron_at_huapi.ba.ar>  LW7 EQI  Argentina
Blogs and organic groups at http://www.ccie.net