NBAR Not discovery any protocol

[anas.abdullkarim]

hi , i have asr1006 with IOS XE 

i try to use NBAR for QOS

i enable it in interface ingress traffic 

!
interface Port-channel1.27
 description ISP
 encapsulation dot1Q 27
 ip address X,X,X,X.2 255.255.255.252
 ip nbar protocol-discovery
end

but the NBAR not discovery any protocol

BNG-1#sh ip nbar protocol-discovery

 Port-channel1.27

 Last clearing of "show ip nbar protocol-discovery" counters 01:17:04


                              Input                    Output
                              -----                    ------
 Protocol                     Packet Count             Packet Count
                              Byte Count               Byte Count
                              5min Bit Rate (bps)      5min Bit Rate (bps)
                              5min Max Bit Rate (bps)  5min Max Bit Rate (bps)
 ---------------------------- ------------------------ ------------------------
 Total                        0                        0
                              0                        0
                              0                        0
                              0                        0

i have last one Nbar ver and is active

BNG-1#show ip nbar protocol-pack active
Active Protocol Pack:
  Name:                          Advanced Protocol Pack
  Version:                       47.0
  Publisher:                     Cisco Systems Inc.
  NBAR Engine Version:           34
  Creation time:                 Mon Jan 13 14:32:04 UTC 2020
  File:                          flash:pp-adv-asr1k-169.1-34-47.0.0.pack
  State:                         Active

i try create class-map with match protocal for example DNS

But is not captured any packet 

so the nbar not working 

[marce1000]

 Ref : https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/configuration/xe-3s/Enabling_Protocol_Discovery.html#GUID-2BA2DB07-F131-4FDD-BCF4-732EA87FDC51

                   - NBAR is not supported on the Port-Channel

 M.

[anas.abdullkarim]

hello , thanks for reply
1 Po1(RU) Te0/0/0(P) Te0/0/1(P) Te2/0/0(P) Te2/0/1(P)
so i can apply it in each port in EtherChannel

[Joseph W. Doherty]

Don't recall if there are differences for whatever IOS version you're running on your ASR, but for use in a policy-map class, you shouldn't need to enable NBAR protocol-discovery to match "known" (by NBAR) protocols.

Second, I recall (?) later IOSs require a feature license, or feature set, for NBAR.

[anas.abdullkarim]

BNG-1#sh license feature
Feature name             Enforcement  Evaluation  Subscription   Enabled  Righ                      tToUse
adventerprise            yes          yes         no             yes      yes                       
advipservices            yes          yes         no             no       yes                       
ipbase                   no           no          no             no       no                        
avc                      yes          yes         no             no       yes                       
broadband                no           no          no             no       no                        
broadband_4k             no           no          no             no       no                        
cube_250                 no           no          no             no       no                        
cube_250_red             no           no          no             no       no                        
cube_ent_100             no           no          no             no       no                        
cube_ent_100_red         no           no          no             no       no                        
cube_lab                 no           no          no             no       no                        
Feature name             Enforcement  Evaluation  Subscription   Enabled  Righ                      tToUse

cube_video_b2btp         no           no          no             no       no                        
cube_video_b2btp_red     no           no          no             no       no                        
firewall                 no           no          no             no       no                        
fpi                      no           no          no             no       no                        
fwnat_red                yes          yes         no             no       yes                       
gtp_addon_aic            no           no          no             no       no                        
internal_service         yes          no          no             no       no                        
ipsec                    yes          yes         no             no       yes                       
lisp                     yes          yes         no             no       yes                       
nat64_stateful_2m        no           no          no             no       no                        
otv                      yes          yes         no             no       yes                       
Feature name             Enforcement  Evaluation  Subscription   Enabled  Righ                      tToUse

sgt_fw                   no           no          no             no       no                        
sw_redundancy            yes          yes         no             no       yes                       
vpls                     yes          yes         no             no       yes                       
FoundationSuiteK9        yes          yes         no             no       yes                       
AdvUCSuiteK9             yes          yes         no             no       yes                       
CUBE-Standard            yes          yes         no             no       no                        
CUBE-Redundant           yes          yes         no             no       no                        
appxk9                   yes          yes         no             no       yes                       
securityk9               yes          yes         no             no       yes                       
uck9                     yes          yes         no             no       yes                       
OC12_wan_interface       yes          yes         no             no       yes                       
Feature name             Enforcement  Evaluation  Subscription   Enabled  Righ                      tToUse

OC3_wan_interface        yes          yes         no             no       yes                       
interface_40g            yes          no          no             no       no                        
MACSEC1G                 yes          no          no             no       no                        
MACSEC10G                yes          no          no             no       no                        
MACSEC40G                yes          no          no             no       no                        
MACSEC100G               yes          no          no             no       no            

hello 

thanks for replay