Configuring AFP Configuring Application Fingerprinting
page 28-12 OmniSwitch AOS Release 7 Network Configuration Guide June 2013
• If a policy list assigned to an AFP port or assigned to a UNP associated with an AFP port does not
contain a rule with the appfp-group condition, sampled IP traffic on the port is not matched against
any REGEX signatures to determine if any QoS actions in the rule are applied to that traffic.
• The following list of QoS policy actions are supported in policy rules that use the Application Finger-
printing policy conditions:
> maximum bandwidth
> disposition drop/accept
> priority
> tos
> 802.1p
> dscp
Enabling/Disabling AFP
By default, the AFP feature is globally enabled for the switch. To disable this feature, use the app-finger-
print admin-state command with the disable option. For example:
-> app-fingerprint admin-state disable
Disabling this feature stops the AFP process but does not remove any AFP port settings or the REGEX
signature text file from the switch.
To enable AFP functionality, use the app-fingerprint admin-state command with the enable option. For
example:
-> app-fingerprint admin-state enable
When globally enabled, the AFP process is triggered only on AFP ports and link aggregates. See “Config-
uring AFP Port Modes” on page 28-17 for information about how to configure AFP ports.
Verifying the Global AFP Status
Use the show app-fingerprint configuration command to verify the global AFP status for the switch. For
example:
-> show app-fingerprint configuration
Admin-state: Enabled,
SNMP Trap: Disabled,
Signature File: app-regex.txt
Enabling/Disabling Trap Generation
Trap generation can occur whenever AFP detects a match between IP packets and application group signa-
tures. Use the app-fingerprint trap command to globally enable or disable trap generation for the switch.
For example:
-> app-fingerprint trap enable
-> app-fingerprint trap disable
By default, AFP trap generation is disabled for the switch.
Verifying the Trap Generation Status
Use the show app-fingerprint configuration command to verify the trap generation status. For example:
To Next Page
Loading...
Need help?
General