STRM Default Application Configuration Guide
Defining Application Mappings
3
•
Since it is possible for a flow to be associated with multiple mappings, a flow is
mapped to an application ID based on the order of the file. The first mapping
that applies in the file is assigned to the flow.
•
When adding new application identification numbers, we recommend that you
apply numbers ranging between 15,000 to 20,000. Contact Juniper Networks
Customer Support for further information.
The format of the entry must resemble the following:
<New ID> <Old ID> <Source IP Address>:<Source Port> <Dest IP
Address>:<Dest Port> <Name>
Where:
•
<New ID>
specifies the application ID you wish to assign to the flow. A value of
1 indicates an unknown application. If the ID you wish to assign does not exist,
you must create the ID using the Application View in the STRM interface. For
more information, see the
STRM Administration Guide.
•
<Old ID>
specifies the default application ID of the flow, as assigned by
STRM. A value of * indicates a wildcard. For more information on the default
values, see
Chapter 2
Default Applications
.
•
<Source IP Address>
specifies the source IP address of the flow. This field
may contain either a comma separated list of addresses or CIDR values. A
value of * indicates a wildcard, which means that this field applies to all flows.
•
<Source Port>
specifies the associated port. This field may contain a comma
separated list of values or ranges specifies in the format: <lower port
number>-<upper port number>. A value of * indicates a wildcard, which means
that this field applies to all flows.
•
<Dest IP Address>
specifies the destination IP address of the flow. This field
may contain either a comma separated list of addresses or CIDR values. A
value of * indicates a wildcard, which means that this field applies to all flows.
•
<Dest Port>
specifies the associated destination source port. This field may
contain a comma separated list of values or ranges specifies in the format:
<lower port number>-<upper port number>. A value of * indicates a wildcard,
which means that this field applies to all flows.
•
<Name>
specifies a name you wish to assign to this mapping. This field is
optional.
For example, the below example maps all flows that match the IP addresses and
ports for which the Flow Collector has assigned to the Old ID of 1010 and assign
the new ID of 15000:
15000 1010 10.100.100/24,10.100.50.10:* 172.14.33.33:80,443
Step 4
Save and exit the file.
Step 5
Log-in to STRM.
Step 6
Click
Config
to access the Administration Console.
Step 7
If necessary, edit your Application View.
