Contents
Network-Based Application Recognition (NBAR) includes a feature called Protocol Discovery. Protocol discovery provides an easy way to discover the application protocol packets that are passing through an interface. When you configure NBAR, the first task is to enable protocol discovery.
This module contains concepts and tasks for enabling the Protocol Discovery feature.
Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the Feature Information Table at the end of this document.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
Before enabling Protocol Discovery, read the information in the "Classifying Network Traffic Using NBAR" module.
NBAR protocol discovery does not support the following:
Note |
In the NBAR context, asymmetric flows are the flows in which different packets of the flow go through different routers, for reasons such as load balancing implementation or asymmetric routing where packets flow through different routes to different directions. |
"%NBAR_HA-5-NBAR_INFO: NBAR sync DONE!"
NBAR is not supported on the following logical interfaces:
Note |
You cannot use NBAR to classify output traffic on a WAN link where tunneling or encryption is used. Therefore, you should configure NBAR on other interfaces of the router (such as a LAN link) to perform input classification before the traffic is switched to the WAN link. |
The Protocol Discovery feature of NBAR provides an easy way of discovering the application protocols passing through an interface so that appropriate QoS features can be applied.
NBAR determines which protocols and applications are currently running on your network. Protocol discovery provides an easy way of discovering the application protocols that are operating on an interface so that appropriate QoS features can be applied. With protocol discovery, you can discover any protocol traffic that is supported by NBAR and obtain statistics that are associated with that protocol.
Protocol discovery maintains the following per-protocol statistics for enabled interfaces:
These statistics can be used when you define classes and traffic policies (sometimes known as policy maps) for each traffic class. The traffic policies (policy maps) are used to apply specific QoS features and functionality to the traffic classes.
In Cisco IOS XE Release 2.4 and earlier releases, there is no limit on the number of interfaces on which protocol discovery can be enabled.
The table below provides the details of the protocol discovery supported interface and the release number.
Table 1 | Release and Protocol Discovery Interface Support |
Release |
Number of Interfaces Supported with Protocol Discovery |
---|---|
Cisco IOS XE Release 2.5 |
128 |
Cisco IOS XE Release 2.6 |
256 |
Cisco IOS XE Release 2.7 |
32 |
Cisco IOS XE Release 3.2S |
32 |
Cisco IOS XE Release 3.3S |
32 |
In Cisco IOS XE Release 3.3S and later releases, NBAR supports the following classification:
Note |
The NBAR Protocol Discovery MIB is not supported for the ip nbar protocol-discovery ipv4 and ip nbar protocol-discovery ipv6 commands. |
In the following sample configuration, protocol discovery is enabled on Fast Ethernet interface 1/1/1:
Router> enable
Router# configure terminal
Router(config)# interface fastethernet1/1/1
Router(config-if)# ip nbar protocol-discovery
Router(config-if)# end
In the following sample configuration, protocol discovery is enabled on Fast Ethernet interface 1/1/2 for IPv6 packets:
Router> enable
Router# configure terminal
Router(config)# interface fastethernet1/1/2
Router(config-if)# ip nbar protocol-discovery ipv6
Router(config-if)# end
In the following sample configuration, protocol discovery is enabled on Fast Ethernet interface 1/1/2 for IPv6 packets. Later, the protocol discovery is enabled for IPv4 packets and this does not require the no form for the ipv6 keyword.
Router> enable
Router# configure terminal
Router(config)# interface fastethernet1/1/2
Router(config-if)# ip nbar protocol-discovery ipv6
Router(config-if)# ip nbar protocol-discovery ipv4
Router(config-if)# end
The following sample output from the show ip nbar protocol-discovery command displays the five most active protocols on the Fast Ethernet interface 2/0/1:
Router# show ip nbar protocol-discovery top-n 5
FastEthernet2/0/1
Input Output
----- ------
Protocol Packet Count Packet Count
Byte Count Byte Count
30sec Bit Rate (bps) 30sec Bit Rate (bps)
30sec Max Bit Rate (bps) 30sec Max Bit Rate (bps)
--------------------------- ------------------------ ------------------------
rtp 3272685 3272685
242050604 242050604
768000 768000
2002000 2002000
gnutella 513574 513574
118779716 118779716
383000 383000
987000 987000
ftp 482183 482183
37606237 37606237
121000 121000
312000 312000
http 144709 144709
32351383 32351383
105000 105000
269000 269000
netbios 96606 96606
10627650 10627650
36000 36000
88000 88000
unknown 1724428 1724428
534038683 534038683
2754000 2754000
4405000 4405000
Total 6298724 6298724
989303872 989303872
4213000 4213000
8177000 8177000
Related Topic |
Document Title |
---|---|
Cisco IOS commands |
|
QoS commands: complete command syntax, command modes, command history, defaults, usage guidelines, and examples |
Cisco IOS Quality of Service Solutions Command Reference |
Concepts and information about NBAR |
"Classifying Network Traffic Using NBAR" module |
MQC |
"Applying QoS Features Using the MQC" module |
Description |
Link |
---|---|
The Cisco Support and Documentation website provides online resources to download documentation, software, and tools. Use these resources to install and configure the software and to troubleshoot and resolve technical issues with Cisco products and technologies. Access to most tools on the Cisco Support and Documentation website requires a Cisco.com user ID and password. |
The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required.
Table 2 | Feature Information for Enabling Protocol Discovery |
Feature Name |
Releases |
Feature Information |
---|---|---|
Protocol Discovery |
Cisco IOS XE 2.1 Cisco IOS XE 3.3S |
This feature was introduced on Cisco ASR 1000 Series Routers. The following sections provide information about this feature: The following commands were introduced: ip nbar protocol discovery, show ip nbar protocol discovery. |
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.