[c-nsp] ip nbar

[Rubens Kuhl]

> i have some wimax base station connected to Cisco ME6524
> now the customers when connected a GRE tunnel is established between the RAS and the ASN GW
> now the ip route cache flow is not supported on the switch

Netflow is supported on the ME6524, but you will probably need to use
"ip flow ingress" or "ip flow egress" instead of the old cache flow
syntax.

> now regarding the GRE tunnel can i use the nbar protocol to manipulate the traffic or it will not be useful coz of the GRE tunnel ?

Besides probably not being capable of looking inside the GRE packets,
NBAR on ME6524 is a serious performance drop turning the ME6524 into a
7200 (and not a very fast one).


> and does the GRE tunnel protects from the broadcast ?

It does not. You will need to do some filtering at the WiMAX devices,
usually be creating service flows that have a null QoS (equivalent to
ACL drops).


Rubens