4-46 Optimizing Converged Cisco Networks (ONT) v1.0 2006 Cisco Systems, Inc.

Configuring NBAR for Static Protocols

This topic describes the Cisco IOS commands that are required to configure NBAR to
recognize static port protocols.
2006 Cisco Systems, Inc. All rights reserved. ONT v1.04-17
Configuring NBAR for Static Protocols
Required steps:
1. Enable NBAR Protocol Discovery.
2. Configure a traffic class.
3. Configure a traffic policy.
4. Attach the traffic policy to an interface.
5. Enable PDLM if needed.

The ability of NBAR to classify traffic by protocol and then apply QoS to that traffic uses the
MQC class map match criteria. The following steps are required to successfully deploy NBAR
for static protocols:
Step 1 Enable NBAR Protocol Discovery.
Step 2 Configure a traffic class.
Step 3 Configure a traffic policy.
Step 4 Attach the traffic policy to an interface.
Step 5 Enable PDLM if needed.
The PDF files and any printed representation for this material are the property of Cisco Systems, Inc.,
for the sole use by Cisco employees for personal study. The files or printed representations may not be
used in commercial training, and may not be distributed for purposes other than individual study.

2006 Cisco Systems, Inc. Implement the DiffServ QoS Model 4-47
2006 Cisco Systems, Inc. All rights reserved. ONT v1.04-18
Configuring NBAR for Static Protocols
(Cont.)
Configures the match criteria for a class map on the basis of
the specified protocol using the MQC configuration mode.
Static protocols are recognized based on the well-known
destination port number.
A match not command can be used to specify a QoS policy
value that is not used as a match criterion; in this case, all
other values of that QoS policy become successful match
criteria.
match protocol
router(config~cmap)#

When configuring NBAR, the administrator does not need to understand how a certain protocol
works. The configuration simply requires the administrator to enter the name of the protocol
(static or stateful).
match protocol protocol-name
match protocol Parameter
Parameter Description
protocolname Name of the protocol used as a matching criterion. Supported
protocols include the following (some protocols have been
omitted; refer to Cisco IOS documentation for complete details):
aarpAppleTalk Address Resolution Protocol (ARP)
arpIP ARP
bridgebridging
cdpCisco Discovery Protocol
compressedtcpcompressed TCP
dlswdata-link switching
ipIP
ipxNovell IPX
Some protocols (static or stateful) can use additional TCP or UDP ports. Use the ip nbar port-
map command to extend the NBAR functionality for well-known protocols to new port
numbers.
To extend or enhance the list of protocols recognized by NBAR through a Cisco PDLM, use
the ip nbar pdlm global configuration command.
The PDF files and any printed representation for this material are the property of Cisco Systems, Inc.,
for the sole use by Cisco employees for personal study. The files or printed representations may not be
used in commercial training, and may not be distributed for purposes other than individual study.
4-48 Optimizing Converged Cisco Networks (ONT) v1.0 2006 Cisco Systems, Inc.
Example
HTTP is often used on other port numbers. The example shows the usage of the ip nbar port-
map command to also enable HTTP recognition on TCP port 8080.
2006 Cisco Systems, Inc. All rights reserved. ONT v1.04-19
Example
HTTP is a static protocol using a well-known port number 80. However, other
port numbers may also be in use.
The ip nbar port-mapcommand will inform the router that other ports are also
used for HTTP.

The NBAR port map is configured for HTTP for TCP ports 80 and 8080.
The class map called HTTP is used to match the HTTP protocol. The policy map called
LIMITWEBB will use the class map HTTP and set the bandwidth for HTTP traffic to 256
kbps.
The policy map is then applied as a service policy for outbound traffic on serial0/0.
The PDF files and any printed representation for this material are the property of Cisco Systems, Inc.,
for the sole use by Cisco employees for personal study. The files or printed representations may not be
used in commercial training, and may not be distributed for purposes other than individual study.