Configuring AFP
Configuring Application Fingerprinting
page 28-12
OmniSwitch AOS Release 7 Network Configuration Guide
June 2013
•
If a policy list assigned to an AFP port or assigned to a UNP associated with an AFP port does not
contain a rule with the
appfp-group
condition, sampled IP traffic on the port is not matched against
any REGEX signatures to determine if any QoS actions in the rule are applied to that traffic.
•
The following list of QoS policy actions are supported in policy rules that use the Application Finger-
printing policy conditions:
>
maximum bandwidth
>
disposition drop/accept
>
priority
>
tos
>
802.1p
>
dscp
Enabling/Disabling AFP
By default, the AFP feature is globally enabled for the switch. To disable this feature, use the
command with the
disable
option. For example:
-> app-fingerprint admin-state disable
Disabling this feature stops the AFP process but does not remove any AFP port settings or the REGEX
signature text file from the switch.
To enable AFP functionality, use the
app-fingerprint admin-state
command with the
enable
option. For
example:
-> app-fingerprint admin-state enable
When globally enabled, the AFP process is triggered only on AFP ports and link aggregates. See
uring AFP Port Modes” on page 28-17
for information about how to configure AFP ports.
Verifying the Global AFP Status
Use the
show app-fingerprint configuration
command to verify the global AFP status for the switch. For
example:
-> show app-fingerprint configuration
Admin-state:
Enabled,
SNMP Trap: Disabled,
Signature File: app-regex.txt
Enabling/Disabling Trap Generation
Trap generation can occur whenever AFP detects a match between IP packets and application group signa-
tures. Use the
command to globally enable or disable trap generation for the switch.
For example:
-> app-fingerprint trap enable
-> app-fingerprint trap disable
By default, AFP trap generation is disabled for the switch.
Verifying the Trap Generation Status
Use the
show app-fingerprint configuration
command to verify the trap generation status. For example: