You are here: Home > CLI Commands > Just_CLI_Topics > dpi

dpi

dpi

app <string> ports [tcp <tportlist>][udp <uportlist>]

appcategory <string> <categoryID>

custom-app <appname> <appid> [appcategory|http {hostname-param <hostname> uri-param <uri>|referer-param <referer>}|https {common-name <commonname>}]

global-bandwidth-contract {app <string>[downstream|upstream][kbits <256..2000000>|mbits <1..2000>}|appcategory <string>[downstream |upstream][kbits|mbits <value>}

proto-bundle activate <string>

Description

This command configures DPIDeep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network. and the global bandwidth contract for an application or application category for the AppRF feature, and allows network administrators to define custom applications for use with DPIDeep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network.  features.

Syntax

Parameter

Description

Range

app <string>

Name of the application for which you want to enable DPIDeep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network. . For a complete list of supported applications, issue the command show dpi application all.

tcp <tportlist>

Enables DPIDeep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network. on the selected TCPTransmission Control Protocol. TCP is a communication protocol that defines the standards for establishing and maintaining network connection for applications to exchange data. port(s). You can enter a range of ports (for example, 80-85), or enter multiple individual port numbers separated by a comma (or example, 40,44,48).

udp <uportlist>

Enables DPIDeep Packet Inspection. DPI is an advanced method of network packet filtering that is used for inspecting data packets exchanged between the devices and systems over a network. DPI functions at the Application layer of the Open Systems Interconnection (OSI) reference model and enables users to identify, categorize, track, reroute, or stop packets passing through a network. on the selected TCPTransmission Control Protocol. TCP is a communication protocol that defines the standards for establishing and maintaining network connection for applications to exchange data. port(s). You can enter a range of ports (for example, 80-85), or enter multiple individual port numbers separated by a comma (or example, 40,44,48).

appcategory

Configures an application category.

<string>

Name of the application category. Allowed characters include:

a-z

0-9

"_" and "-"

<categoryid>

Sets a unique category ID.

1-32

custom-app

Creates a new custom application.

<appname>

Name of the custom application. Allowed characters include:

a-z

0-9

"_"

<appID>

Sets a unique application ID.

1-64

appcategory

Application category name.

http

Creates a new HTTPHypertext Transfer Protocol. The HTTP is an application protocol to transfer data over the web. The HTTP protocol defines how messages are formatted and transmitted, and the actions that the w servers and browsers should take in response to various commands.-based custom application

hostname-param <hostname> uri-param <uri>

Specifies a hostname and URIUniform Resource Identifier. URI identifies the name and the location of a resource in a uniform format. to create an application based upon that server name and URIUniform Resource Identifier. URI identifies the name and the location of a resource in a uniform format.

referer-param <referer>

A referrer is the URLUniform Resource Locator. URL is a global address used for locating web resources on the Internet. of a webpage from which a link was followed.Specify a referrer to create a HTTPHypertext Transfer Protocol. The HTTP is an application protocol to transfer data over the web. The HTTP protocol defines how messages are formatted and transmitted, and the actions that the w servers and browsers should take in response to various commands. referrer-based application.

https

Create a new HTTPSHypertext Transfer Protocol Secure. HTTPS is a variant of the HTTP that adds a layer of security on the data in transit through a secure socket layer or transport layer security protocol connection.-based custom application

common-name <commonname>

Specify a CNCommon Name. CN is the primary name used to identify a certificate. to create an application based on it.

global-bandwidth-contract

Configures the global bandwidth contract for an application or application category.

256 kbps-2 gbps

app <string>

Name of the application. For a complete list of supported applications, issue the command show dpi application all.

Applications can also be user-defined. Issue the show dpi custom-app all command to view all user-defined (custom) applications.

appcategory <string>

Name of the application category. For a complete list of supported application categories, issue the command show dpi application category all.

Application categories can also be user-defined. Issue the show dpi application category user-defined all command to view all user-defined (custom) categories.

downstream

Bandwidth contract to downstream traffic.

upstream

Bandwidth contract to upstream traffic.

kbits <value>

Specifies bandwidth in kbits per second.

256-2000000 kbits

mbits <value>

Specifies bandwidth in mbits per second.

1-2000 mbits

proto-bundle activate <STRING>

After downloading a new protocol database image using the copy command, you must activate it by issuing the proto-bundle activate <string> command, where <string> is the name of the .txt protocol bundle file.

Usage Guidelines

You can configure bandwidth contracts to limit application and application categories on an application or global level.

Applications and application categories can be user-defined. Issue the show dpi custom-app all command to view all user-defined (custom) applications and the show dpi application category user-defined all command to view all user-defined categories.

Example

The following command configures a global bandwidth contract for downstream traffic:

(host) [md] (config) #dpi global-bandwidth-contract appcategory web downstream kbits 10000

Use the following commands to view global bandwidth contract configuration outputs:

(host) [md] #show dpi global-bandwidth-contract all

(host) [md] #show dpi global-bandwidth-contract application name

(host) [md] #show dpi global-bandwidth-contract appcategory name

Related Commands

Command

Description

show dpi

Displays the applications and application categories that are configured for Deep-Packet Inspection.

Command History

Release

Modification

ArubaOS 8.0.0.0

Command introduced.

Command Information

Platform

License

Command Mode

All platforms

Base operating system.

Config mode on Mobility Master.

/*]]>*/