06-07-2007 06:20 AM - edited 03-03-2019 05:20 PM
Hello, i cant with my current configuration to match the citrix traffic incoming (interface gi 0/0), this router is 2821. IP cef is enable. When i do the command:
sh ip nbar protocol-discovery int gi0/0 (result in the attachement). Always Citrix zero. The version of PDLM is 10.
Thanks a lot for your help.
06-07-2007 08:02 AM
David,
Try adding this command:
ip nbar pdlm flash:citrix.pdlm
Please rate helpful posts.
Dave
06-07-2007 08:24 AM
This order has been entered. The router says me that my pdlm is more recent.
06-07-2007 08:52 AM
David,
So the PDLM is in the IOS. Your config looks correct. I have this running on 7206s, and it matches correctly on the ICA tags.
Is your Citrix implementation using port 1494 or 2598 session reliability? I do not think Citrix NBAR supports 2598, but I need to find out, because we are heading that way.
I would build an access list to check this out.
access-list 101 permit tcp any eq 1494 any
access-list 101 permit tcp any any eq 1494
access-list 101 permit tcp any eq 2598 any
access-list 101 permit tcp any any eq 2598
access-list 101 permit ip any any
Apply this inbound on your interface:
ip access-group 101 in
Then show access-list 101 and look for hits.
Dave
06-07-2007 08:27 AM
try matching with ACL.
06-08-2007 05:22 AM
I have tried to do that with acl, so I saw well that I used the port 1494 in TCP, Is there one or more commands in my configuration could prevent the match nbar.
Thanks a lot for your help
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide