Enable NBAR

Cisco NBAR

Network Based Application Recognition (NBAR) is the mechanism some Cisco routers and switches use to inspect sent packets to recognize a dataflow. NBAR is useful for Quality of Service and security purposes such as dealing with malicious software that uses known ports to fake being priority traffic and detecting non-standard applications that use dynamic ports.

This topic describes how to enable NBAR devices to send NBAR data to SevOne NMS. This workflow is outside of the SevOne NMS application and may not present all of the steps your network requires to enable devices to send NBAR data. If the following instructions are not applicable for your network please reference the official Cisco documentation.

Related SevOne NMS workflows include the following.

• The Device Manager provides access to the New Device page and the Edit Device page where you enable the NBAR plugin for a device.

• The NBAR Reports page enables you to run NBAR reports.

Send NBAR Data to SevOne NMS

Perform the following steps on each interface to enable a Cisco IOS router to send NBAR data and to verify the operation.

1. Enter the following command to enable NBAR.

   router(conf-if)# ip nbar protocol-discovery

2. Enter the following command to verify the operation.

   router(conf-if)# show ip nbar protocol-discovery