RE: CEF or distributed CEF switching is required for NBAR.

I did but still I cannot show the command "service-policy input
ALLOW_CITRIX" that I have entered in the show interface command.

Best Regards,

From: Sadiq Yakasai [mailto:sadiqtanko_at_gmail.com]
Sent: Monday, May 10, 2010 2:34 PM
To: Mahmoud Nossair
Cc: Tolulope Ogunsina; ccielab_at_groupstudy.com
Subject: Re: CEF or distributed CEF switching is required for NBAR.

Enable CEF globally on the switch and try again. See how it goes?

On Mon, May 10, 2010 at 12:31 PM, Mahmoud Nossair <nossair_at_mcs.gov.sa>
wrote:

YES

Please find the show CEF interface output:

Router#show cef interface f0/0
FastEthernet0/0 is up (if_number 3)
 Corresponding hwidb fast_if_number 3
 Corresponding hwidb firstsw->if_number 3
 Internet address is 172.23.1.2/24
 ICMP redirects are always sent
 Per packet load-sharing is disabled
 IP unicast RPF check is disabled
 Inbound access list is 101
 Outbound access list is 101
 IP policy routing is disabled
 Hardware idb is FastEthernet0/0
 Fast switching type 1, interface type 18
 IP CEF switching enabled
 IP CEF Feature Fast switching turbo vector
 Input fast flags 0x1, Output fast flags 0x1
 ifindex 1(1)
 Slot 0 Slot unit 0 VC -1
 Transmit limit accumulator 0x0 (0x0)
 IP MTU 1500

Best Regards,

-----Original Message-----
From: Tolulope Ogunsina [mailto:togunsina_at_gmail.com]
Sent: Monday, May 10, 2010 2:29 PM
To: Mahmoud Nossair
Cc: ccielab_at_groupstudy.com
Subject: Re: CEF or distributed CEF switching is required for NBAR.

Is ip route-cache enabled on the interface?

On 5/10/10, Mahmoud Nossair <nossair_at_mcs.gov.sa> wrote:
> Dear Experts
>
>
>
> I have a 3660 router with "IOS (tm) 3600 Software (C3660-JS-M),
Version
> 12.2(46a), RELEASE SOFTWARE (fc1)"
>
> When I issue this command I got an error as follow:
>
>
>
> ROUTER(config)#int f0/0
>
> ROUTER(config-if)#service-policy input ALLOW_CITRIX
>
> CEF or distributed CEF switching is required for NBAR 'match protocol'
> command
>
>
>
> And the command is not showing in "show run int f0/0" even after I
issue
> this command " Router(config)#IP CEF"
>
>
>
> Any help regarding this issue.
>
>
>
>
>
> Best Regards,
>
>
> Blogs and organic groups at http://www.ccie.net
>
>
Received on Mon May 10 2010 - 14:41:54 ART