Ipswitch WhatsUp Gold User Guide - Ipswitch Documentation Server

Ipswitch WhatsUp Gold User Guide
About Network Based Application Recognition (NBAR)
Network Based Application Recognition (NBAR) is an application classification engine used to
recognize a wide variety of applications. It can detect both Web-based and client-server
applications.
NBAR identifies applications and protocols in Layer 4 to layer 7 using the following
information:
Static TCP and UDP port numbers
Non UDP or TCP IP protocols
Dynamically assigned TCP and UDP port numbers
Sub-port classification
Deep packet inspection
Protocol Discovery is a NBAR feature that collects application and protocol statistics for each
interface based on the results of the application identification. Flow Monitor collects these
statistics from the interface using Simple Network Management Protocol (SNMP) to poll the
NBAR PD Management Information Base (MIB) where these statistics are stored.
The Protocol Discovery feature captures key statistics associated with each protocol in a
network. These statistics can be used to define traffic classes and QoS policies for each traffic
class.
Configuring NBAR on a Cisco device
You must enable NBAR on each interface from which you want to collect application
statistics. The following example describes how to enable NBAR on an interface.
To enable NBAR on an interface:
1 Enter the privileged EXEC mode, then the global configuration mode.
Router> enable
Router# configure terminal
2 Enable Cisco Express Forwarding (cef).
Router(config)# ip cef
3 Enter the interface configuration mode for the interface on which you want to enable
NBAR.
Router(config)# interface FastEthernet 0/1
4 Initiate NBAR protocol discovery on the interface.
Router(config-if)# ip nbar protocol-discovery
5 Exit the interface configuration mode.
Router(config-if)# exit
983