NBAR

[tsmarcyes]

I'm getting mixed thoughts on whether NBAR can be enabled on encrpted and tunnel interfaces. Can someone explain this? Is it just the NBAR discovery that can be enabled? Also, I'm getting mixed documentation on whether NBAR can detect AND classify non-ip traffic. Can someone verify this as well.

Thanks

[aghaznavi]

Since you are using encrypted interfaces, you must use the pre classify command and apply the service-policy to the physical interface that the encrypted tunnel leaves the router via. For more reference kindly use the following url given below,

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/dtnbarad.htm#wp1096784