Contents

Configuring APR·· 1

About APR· 1

PBAR· 1

Configuring PBAR· 1

Configuring application groups· 2

Enabling application statistics on an interface· 2

Display and maintenance commands for APR· 2

Configuring APR

About APR

The application recognition (APR) feature recognizes application protocols of packets for features such as QoS, ASPF, and bandwidth management.

APR uses the following methods to recognize an application protocol:

·     Port-based application recognition (PBAR).

·     Network-based application recognition (NBAR).

Only PBAR is supported in the current software version.

PBAR

PBAR maps a port to an application protocol and recognizes packets of the application protocol according to the port-protocol mapping.

PBAR supports the following port-protocol mappings:

·     Predefined—An application protocol uses the port defined by the system.

·     User-defined—An application protocol uses the port defined by the user.

Configuring PBAR

1.     Enter system view.

system-view

2.     Configure a port mapping.

Choose the options to configure as needed:

¡     Configure a general port mapping:

port-mapping application application-name port port-number [ protocol protocol-name ]

¡     Configure an ACL-based host-port mapping:

port-mapping application application-name port port-number [ protocol protocol-name ] acl [ ipv6 ] acl-number

¡     Configure a subnet-based host-port mapping:

port-mapping application application-name port port-number [ protocol protocol-name ] subnet { ip ipv4-address { mask-length | mask } | ipv6 ipv6-address prefix-length }

¡     Configure an IP address-based host-port mapping:

port-mapping application application-name port port-number [ protocol protocol-name ] host { ip | ipv6 } start-ip-address [ end-ip-address ]

By default, all application protocols are mapped to well-known ports.

If the specified application protocol does not exist, the system first creates the protocol.

Configuring application groups

1.     Enter system view.

system-view

2.     Create an application group and enter its view.

app-group group-name

3.     (Optional.) Configure the description of the application group.

description text

By default, the description is "User-defined application group".

4.     Add application protocols to the group.

Choose the options to configure as needed:

¡     Copy all application protocols from another group to the group.

copy app-group group-name

Execute this command multiple times to copy application protocols from multiple groups to the current group.

¡     Add an application protocol to the group.

include application application-name

By default, an application group does not contain any application protocols.

Enabling application statistics on an interface

About this task

When the application statistics feature is enabled on an interface, the device separately counts the number of packets or bytes that the interface has received or sent for each application protocol. It also calculates the transmission rates of the interface for these protocols.

To display application statistics, use the display application statistics command.

Restrictions and guidelines

The application statistics feature consumes a large amount of system memory. When the system generates an alarm for lack of memory, disable the application statistics feature on all interfaces.

Procedure

1.     Enter system view.

system-view

2.     Enter Layer 3 interface view.

interface interface-type interface-number

3.     Enable application statistics on the interface.

application statistics enable [ inbound | outbound ]

By default, this feature is disabled.

You can enable the application statistics feature in both the inbound and outbound directions of the interface.

Display and maintenance commands for APR

Execute display commands in any view and reset commands in user view.