NBAR configuration for specific Vlan to throttle youtube

Question

I am trying to throttle http traffic for a specific network utilizing a policy-map and class-maps.  What I am trying to do is limit facebook, youtube, etc for a specific vlan but allow others to pass unmetered.  I have class-maps that match the http hosts which work fine and I have a class-map that matches the source network but I cannot seem to get it to match both at the same time.  Does anyone have a sample config that will match a source network and http host and apply a policer or priority to both?  So basically I just want to slow down youtube and facebook for the network below.
vlan IP 192.168.30.0/24
websites *youtube* *facebook* *fbcdn*
Thank you all for your support and assistance.
Mike

Answer 1

Hi ,
The policy-map works by the first match. I think that the problem is that if you have the first class-map matching all the www traffic , this class-map will match also the "unwanted vlan source". So you should deny the IP sources that you want to police. Your config should look like :
ip access-list stan ACL-VLAN30
  permit 192.168.30.0 0.0.0.255
class-map match-all ALL-SOURCES
  match no access-group name ACL-VLAN30
  match protocol http url "*facebook*" "*youtube*" "*fbcdn*"
class-map match-all POLICE-WWW
  match access-group name ACL-VLAN30
  match protocol http url "*facebook*" "*youtube*" "*fbcdn*"
Dan