RE: NBAR

From: Jihene Bouraoui (bouraoui@globalknowledge.fr)
Date: Thu Nov 14 2002 - 11:56:36 GMT-3


You can see it by using the command
Show ip nbar protocol-discovery

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Hedi Abdelkafi
Sent: vendredi 8 novembre 2002 12:04
To: Carlos G Mendioroz; GroupStudy (E-mail)
Subject: RE: NBAR

Hi,

First , thanks for your input.
As you can see in the following output CEF, is not running. 2503UP#sh ip
cef %CEF not running
Prefix Next Hop Interface

How can I check that NBAR is running ?
I created a class-map that match ip protocol and then in the policy map,
I used policing (to limit the traffic rate). When I ping, some packets
are lost (there are no traffic at all on the link, I'm in a lab). It
means that NBAR is working !!

Bye

-----Original Message-----
From: Carlos G Mendioroz [mailto:tron@huapi.ba.ar]
Sent: vendredi 8 novembre 2002 11:59
To: Hedi Abdelkafi
Cc: GroupStudy (E-mail)
Subject: Re: NBAR

AFAIK, CEF is needed but may be it is enabled by default
in the image you're running ?
Do a show ip cef to see.

How do you tell that it is working ?

Hedi Abdelkafi wrote:
> Hi,
>
> I'm trying to configure NBAR in my lab.
> I followed the DQOS course few times ago and if I look in this
> documentation it is said that the two following features must be
enabled before using NBAR :
> - CEF must be enabled,
> - ip nbar protocol-discovery command must be configured under the
interface on which you apply the policy map.
>
> If I check on Cisco'CD how to configure NBAR, CEF or ip nbar
> protocol-discovery is not mentioned at all.
>
> I configured NBAR in my lab without using CEF and ip nbar command and
> it works... fine.
>
> Who's wright ?
>

-- 
Carlos G Mendioroz  <tron@huapi.ba.ar>  LW7 EQI  Argentina


This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:23:09 GMT-3