help with nbar

[baloo247]

NBAR is not supported on the following logical interfaces:

•Fast EtherChannel

•Interfaces where tunneling or encryption is used

Note   NBAR cannot be used to classify output traffic on a WAN link where tunneling or encryption is used. Therefore, NBAR should be configured on other interfaces on the router (such as a LAN link) to perform input classification before the traffic is switched to the WAN link for output.

However, NBAR Protocol Discovery is supported on interfaces where tunneling or encryption is used. You can enable Protocol Discovery directly on the tunnel or on the interface where encryption is performed to gather key statistics on the various applications that are traversing the interface. The input statistics also show the total number of encrypted/tunneled packets received in addition to the per-protocol breakdowns.


--------------------

the above is from the cisco site. If Nbar isnt supported on FE does the first line refer to configuring on a nonfast ethernet interface?

The second bit about tunnelling and encryption, if it's not support why do they put the second paragraph? please explain it a bit to me as I am confused, thanks.

[baloo247]

ignore me ... i  missread etherchannel for ethernet, and I now understand the encryption bit. i believe it means that it's supported to give basic bytes in/out stats only.

Thanks
Bal