DPI Volume PDF

ZXR10 8900 Series
10G Routing Switch

User Manual (DPI Volume)
Version 2.8.02.C
ZTE CORPORATION
ZTE Plaza, Keji Road South,
Hi-Tech Industrial Park,
Nanshan District, Shenzhen,
P. R. China
518057
Tel: (86) 755 26771900 800-9830-9830
Fax: (86) 755 26772236
URL: http://support.zte.com.cn
E-mail: doc@zte.com.cn
LEGAL INFORMATION
Copyright 2006 ZTE CORPORATION.
The contents of this document are protected by copyright laws and international treaties. Any reproduction or distribution of
this document or any portion of this document, in any form by any means, without the prior written consent of ZTE CORPO-
RATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality obligations.
All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE CORPORATION
or of their respective owners.
This document is provided as is, and all express, implied, or statutory warranties, representations or conditions are dis-
claimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose, title or non-in-
fringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on the
information contained herein.
ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the subject
matter of this document. Except as expressly provided in any written license between ZTE CORPORATION and its licensee,
the user of this document shall not acquire any license to the subject matter herein.
ZTE CORPORATION reserves the right to upgrade or make technical change to this product without further notice.
Users may visit ZTE technical support website http://ensupport.zte.com.cn to inquire related information.
The ultimate right to interpret this product resides in ZTE CORPORATION.
Revision History
Revision No. Revision Date Revision Reason

R1.0 20090610 First Release
Serial Number: sjzl20093842

Contents
About This Manual.............................................. i

What is DPI? .....................................................1
What is DPI? .................................................................. 1
DPI Applications ............................................................. 2
Configuring Signature Symbol ...........................3
Signature Symbol Overview ............................................. 3
Configuring Signature Symbol .......................................... 3
Adding Signature Symbol ............................................ 3
Setting Signature Symbol Hit-Limit-Number and
Application Type ................................................. 4
Showing Configuration of Designated Signature
Symbol ............................................................. 4
Signature Symbol Configuration Example........................... 4
Configuring Signature Entry ..............................5
Signature Entry Overview ................................................ 5
Configuring Signature Entry ............................................. 5
Configuring Signature Entry ......................................... 5
Showing Configuration of Signature Entry ...................... 6
Signature Entry Configuration Example.............................. 6
Configuring Policy .............................................7
DPI Policy Overview ........................................................ 7
Configuring Flow Pool ...................................................... 7
Configuring Parameter Upstream .................................. 7
Configuring Parameter Downstream .............................. 8
Configuring Default Upstream/Downstream
Parameters ........................................................ 8
Showing Configuration of Flow Pool ............................... 8
Flow Pool Configuration Example ...................................... 8
Configuring Sub Service ....................................9
Subservice Overview....................................................... 9
Configuring Subservice.................................................... 9
Adding Signature Symbol Sequence .............................. 9
Adding Signature Symbol Application ...........................10
Binding Flow-Pool with Current Subservice ....................10
Setting Permit/Deny Policy for Current Subservice .........10
Setting Aging Time for Current Subservice ....................11
Showing Configuration of Designated Subservice ...........11
Subservice Configuration Example ...................................11
Configuring Service ......................................... 13
Service Overview...........................................................13
Configuring Service........................................................13
Adding One Subservice to Current Service ....................13
Importing Another Subservice into One Subservice .........14
Binding Flow-Pool with Current Service .........................14
Showing Service Configuration ....................................14
Service Configuration Example ........................................14
Configuring DPI Template ............................... 17
DPI-Template Overview ..................................................17
Configuring DPI-Template ...............................................17
Binding Direction Rules to Data Flow ............................17
Binding Service Policy ................................................18
Source IP Binding Rules..............................................18
Binding Port Rules .....................................................18
Showing Configuration of DPI-Template ........................18
DPI-Template Configuration Example................................19
Glossary .......................................................... 21
About This Manual
This manual is ZXR10 8900 Series (V2.8.02.C) 10G Rout-

ing Switch User Manual (DPI Volume) and applies to ZXR10
8902/8905/8908/8912 10G routing switch (V2.8.02.C).
ZXR10 8900 series 10G routing switch has the following related
manuals:
Manual Summary
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes
Routing Switch Hardware Installation installation preparation,
Manual 19-inch cabinet installation,
main device installation,
power cable connection, cable
connection and hardware
inspection.
Routing Switch Hardware Manual device functions, technical
characteristics and
parameters, working principle,
hardware structure, MCS, LIC,
power module and fan plug-in
box.
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes using
Routing Switch User Manual (Basic and operation of device,
Configuration Volume) system management,
CLI privilege ranking
configuration, port
configuration, network
protocol configuration,
DHCP configuration,
VRRP configuration,
ACL configuration, QoS
configuration, DOTIX
configuration, cluster
management configuration,
network management
configuration, IPTV
configuration, VBAS
configuration, CPU guard,
URPF configuration and UDLD
configuration.
Routing Switch User Manual (Ethernet device VLAN configuration,
Switching Volume) STP configuration, MAC
address table operation, link
aggregation configuration,
IGMP Snooping configuration,
link protection configuration,
Ethernet OAM configuration
and EPON OLT configuration.
Confidential and Proprietary Information of ZTE CORPORATION i

ZXR10 8900 Series User Manual (DPI Volume)
Manual Summary
Routing Switch User Manual (IPv4 static routing configuration,
Routing Volume) RIP configuration, OSPF
configuration, IS-IS
configuration, BGP
configuration, load balancing
configuration, multicast
routing configuration, IP/LDP
FRR configuration and BFD
configuration.
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes device
Routing Switch User Manual (MPLS MPLS configuration, MPLS
Volume) L3VPN configuration and MPLS
L2VPN configuration.
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes device
Routing Switch User Manual (IPv6 IPv6 address configuration,
Volume) IPv6 neighbor discovery
protocol configuration, IPv6
tunnel configuration, IPv6
static routing configuration,
RIPng configuration, OSPFv3
configuration, IS-ISv6
configuration and BGP+
configuration.
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes volume
Routing Switch Command Manual and section corresponding to
(Command Index Volume) each command in ZXR10 8900
series 10G routing switch.
Routing Switch Command Manual IPv6-related commands in
(IPv6 Volume) ZXR10 8900 series 10G
routing switch.
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes RIP,
Routing Switch Command Manual (IP OSPF and IS-IS-related
Routing Volume I) commands in ZXR10 8900
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes BGP,
Routing Switch Command Manual (IP route map and routing
Routing Volume II) policy-related commands
in ZXR10 8900 series 10G
routing switch.
Routing Switch Command Manual MPLS-related commands
(MPLS Volume) in ZXR10 8900 series 10G
routing switch.
Routing Switch Command Manual QoS-related commands in
(QoS Volume) ZXR10 8900 series 10G
routing switch.
Routing Switch Command Manual security configuration-related
(Security Volume) commands in ZXR10 8900
ii Confidential and Proprietary Information of ZTE CORPORATION

About This Manual
Manual Summary
Routing Switch Command Manual system management, file
(Basic Configuration Volume I) management, user interface,
log statistics, FTP/TFTP server
and IPvr-related commands
routing switch.
Routing Switch Command Manual interface configuration, DHCP
(Basic Configuration Volume II) and VRRP-related commands
routing switch.
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes NAT,
Routing Switch Command Manual Time Range, stack and
(Basic Configuration Volume III) DEBUG-related commands
routing switch.
Routing Switch Command Manual network management-related
(Network Management Volume) commands in ZXR10 8900
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes MAC,
Routing Switch Command Manual VLAN, SuperVLAN, STP, link
(Ethernet Switching Volume) aggregation, VBAS, MAC PING
and UDLD-related commands
routing switch.
ZXR10 8900 Series (V2.8.02.C) 10G This manual describes VOIP
Routing Switch Command Manual and IPTV-related commands
(Voice and Video Volume) in ZXR10 8900 series 10G
routing switch.
Routing Switch Command Manual multicast protocol-related
(Multicast Volume) commands in ZXR10 8900
Commands supported by ZXR10 8900 series (V2.8.02.C) 10G
routing switch are based on uniform platform ZXROS V4.8.22.
ZXR10 8900 Series (V2.8.02.C) 10G Routing Switch User Manual
(DPI Volume) contains the following chapters:
Chapter Summary
Chapter 1 DPI This chapter describes basic concept and
Overview applications of DPI.
Chapter 2 Signature This chapter describes basic concept,
Entry Configuration configuration and configuration example of
DPI signature entry.
Chapter 3 Signature This chapter describes basic concept,
Symbol Configuration configuration and configuration example of
DPI signature symbol.
Chapter 4 Policy This chapter describes basic concept,
Configuration configuration and configuration example of
DPI policy.
Chapter 5 Sub Service This chapter describes basic concept,
DPI sub service.
Confidential and Proprietary Information of ZTE CORPORATION iii

Chapter Summary
Chapter 6 Service This chapter describes basic concept,
DPI service.
Chapter 7 DPI This chapter describes basic concept,
Template Configuration configuration and configuration example of
DPI template.
Glossary This part lists glossaries used in this manual.
iv Confidential and Proprietary Information of ZTE CORPORATION

Chapter 1
What is DPI?
Table of Contents:
What is DPI?...................................................................... 1
DPI Applications ................................................................. 2
What is DPI?
DPI Overview DPIis also called Deep Packet Inspection. To say Deep, it is com-
pared with common packet resolution layers. Common Packet
Inspection only resolves items under layer 4 in IP packet, includ-
ing source address, destination address, source port, destination
port and protocol type. DPI resolves not only these layers, but
also application layer, identifying various applications and corre-
sponding items.
The key technology of DPI is to identify various applications in
network.
Common packet inspection identifies application type through port
id. For example, if port id is detected to be 80, this application is
believed to be a common network application. However, currently
some illegal applications in network will avoid inspection and mon-
itoring by way of hiding or impersonating port id and attack net-
work acting as data flow of legal packets. In this case, such illegal
applications fail to be detected with traditional L2-L4 inspection.
DPI technology is to inspect the content of packets in application
data flow so as to verify the actual application of these packets.
DPI Technology By deploying DPI technology in IP network, system can imple-
Applications ments service identification, service control and service statistics
functions in network operation.
Service Identification
Generally, there are two ways for service identification: one is
legal service fulfilled by carrier and the other is service moni-
tored by carrier.
The former type of service can be identified by five-elements of
service traffic. For example, the address of VOD service traffic
belongs to VOD server network segment and its port is a fixed
address. System adopts ACL to identify this type of service.
As for the latter service, resolve the details of IP packet with
the service identification method mentioned above and learn
the type of service traffic through searching of key word or
service behavior statistics.
Confidential and Proprietary Information of ZTE CORPORATION 1

Service Control
After identifying service traffic with DPI technology, control ser-
vice traffic according to combination conditions of network con-
figurations, such as user, timer, bandwidth, history, traffic and
so on. There are several control ways: normal forwarding,
blocking, limiting bandwidth, traffic shaping, re-marking prior-
ity and so on.
Taking operation of services into account, service control poli-
cies are mainly configured on policy server and distributed after
users get online.
traffic statistics
DPI service statistics function is used to view service traffic
distribution in network and using of various services intuition-
istically. In this way, factors promoting service development
and influencing network operation can be detected, which pro-
vides support to optimization of network and services. For ex-
ample, this function can be used to find what services attract
more users, check if provided service level meets requirement
of user SLA (Service-Level Agreement), conduct statistics to
percent of attack traffic in network, count the number of users
using one game service, and find what servers mostly consume
network bandwidths and which users use illegal VoIP and so on.
DPI Applications
DPI card can perform DPI inspection to L3 traffic redirected to DPI
card. Identify TCP connection or UDP connection established by
each traffic, scan packets based on each connection, and finally
identify connection-based applications (such as P2P VoIP, FTP and
so on). Implement different policies (supporting rate limit, modi-
fication to tos and pri of packet and so on) to different applications
according to user configurations so as to optimize network, pro-
vide meticulous services to users based on existing network, and
increase network benefits for carrier.
DPI card, with the help of NM system, has powerful capabilities in
data record, statistics and analysis. DPI card can conduct statistics
to upstream and downstream traffic per user based on tcp or udp
connection, and record the statistics in real time. After a certain
period (user can customize the interval), DPI card automatically
up-sends the recorded statistics to remote NM system through net-
work. NM system analyses these records and conducts statistics,
so that user can know traffic distribution in current network ex-
actly. Whats more, user can view changes of network traffic and
network applications of different periods (by day, week, month and
so on) and adopt different management modes according to these
changes, so that network can provide services normally.
2 Confidential and Proprietary Information of ZTE CORPORATION

Chapter 2
Configuring Signature
Symbol
Table of Contents:
Signature Symbol Overview ................................................. 3
Configuring Signature Symbol .............................................. 3
Signature Symbol Configuration Example............................... 4
Signature Symbol Overview

We describe each sub-service in certain description mode, such as
string and so on. These description modes are called signature
symbol. A signature symbol is a set of signature entries, describ-
ing a minimum independent application, such as BT/FTP/HTTP and
so on.
Symbol
Adding Signature Symbol
Step Command Function

1 ZXR10(config)#dpi This enters DPI configuration
mode.
2 ZXR10(config-dpi)#signature-symbol This enters signature symbol
<signature-symbol-id> configuration mode.
3 ZXR10(config-dpi-signature-symbol-2)#add This adds a signature entry to
signature-entry < signature-entry-id> signature symbol.

Setting Signature Symbol

Hit-Limit-Number and Application
Type

mode.
2 ZXR10(config-dpi)#signature-symbol This enters signature symbol
<signature-symbol-id> configuration mode.
3 ZXR10(config-dpi-signature-symbol-2)#set This command sets signature
hit-limit-num <hit-limit-num>protocol-type symbol hit-limit-num and
[normal|inherit] application type. It indicates
the application is confirmed
and verified only after the
hit number of this signature
symbol reaches or is above
the value of hit-limit-num;
application type being inherit
indicates this application
needs being processed by
stages and signature search is
always conducted for packets
at some stages.
Showing Configuration of Designated

Signature Symbol
Command Function
ZXR10(config)#show signature-symbol <signature-sy This shows configuration of
mbol-id> designated signature symbol.
This shows id and details of a
signature entry bound under
signature symbol.
Signature Symbol
Configuration Example
The following part is a signature symbol configuration example:
ZXR10(config)#dpi ZXR10(config-dpi)#signature-symbol 2
ZXR10(config-dpi-signature-symbol-2)#add signature-entry 2
ZXR10(config-dpi-signature-symbol-2)# set hit-limit-num 10
protocol-type inherit ZXR10(config)# show signature-symbol 2

Chapter 3
Entry
Table of Contents:
Signature Entry Overview .................................................... 5
Configuring Signature Entry ................................................. 5
Signature Entry Configuration Example.................................. 6
Signature Entry Overview

Signature symbol contains a set of signature entries. Each sig-
nature entry is a string or a series of sequential strings, which
indicates one signature entry.
Signature entry is a combination of one or more KEYs. KEY can be
classified into two types:
Static KEY: It is contained in the first 16 bytes at the fixed
location of packet. Its valid bit number must be expressed by
mask. Packet here indicates UDP packet or TCP packet. The
first 16 bytes here are the first 16 bytes of packet payload,
not including packet header (L2 header, IP header, TCP/UDP
header and so on).
Dynamic KEY: The location of such key is not fixed in the
packet. However, each key must be a specific string or a
series of sequential hexadecimal numbers. These characters
must be consecutive.
Configuring Signature Entry

Configuring Signature Entry

mode.


2 ZXR10(config-dpi)#signature-entry <signature-e This enters signature entry
ntry-id> configuration mode.
3 ZXR10(config-dpi-signature-entry-2)#set content This sets content of the
<string> signature entry.
Showing Configuration of Signature

Entry
Command Function
ZXR10(config)#show signature-entry <signature-entr This shows configuration of a
y-id> signature entry.
Signature Entry
Configuration Example
The following part shows a signature entry configuration example:
ZXR10(config)#dpi ZXR10(config-dpi)#signature-entry 2
ZXR10(config-dpi-signature-entry-2)#set content
0xabcd(0xffffffff000000000000000000000000)+0x1234+0x5678
ZXR10(config)#show signature-entry 2

Chapter 4
Configuring Policy
Table of Contents:
DPI Policy Overview ............................................................ 7
Configuring Flow Pool.......................................................... 7
Flow Pool Configuration Example .......................................... 8
DPI Policy Overview

DPI policy can also be described as application + policy. That is,
implement different policies for different applications. This com-
bination is called DPI policy. In entry flow-pool, upstream/down-
stream rate-limit policy is configured.
Configuring Flow Pool

Configuring Parameter Upstream

mode.
2 ZXR10(config-dpi)#flow-pool <flow-pool-id> This enters flow pool
configuration mode.
3 ZXR10(config-dpi-flow-pool-2)#upstream-rate-li This configures parameter
mit <limit-rate> cbs <cbs-bytes> ebs <ebs-bytes> upstream of flow pool.
limit-rate: It is rate limit, in
kbps.
cbs: It is committed burst
size, in bytes.
ebs: It is excess burst size,
in bytes.

Configuring Parameter Downstream

mode.
2 ZXR10(config-dpi)#flow-pool <flow-pool-id> This enters flow pool
configuration mode.
3 ZXR10(config-dpi-flow-pool-2)#downstream This configures parameter
-rate-limit <limit-rate> cbs <cbs-bytes> ebs downstream of flow pool.
<ebs-bytes>
Configuring Default Upstream/Downs

tream Parameters

mode.
2 ZXR10(config-dpi)#default-flow-pool {downs This configures parameters
tream | upstream} rate-limit <limit-rate> cbs upstream and downstream of
<cbs-bytes> ebs <ebs-bytes> default flow pool (flow pool
1).
Showing Configuration of Flow Pool
Command Function
ZXR10(config)#show flow-pool <flow-pool-id> This shows configuration of flow
pool.
Flow Pool Configuration

Example
The following part shows a flow pool configuration example:
ZXR10(config)#dpi ZXR10(config-dpi)#flow-pool 2
ZXR10(config-dpi-flow-pool-2)# upstream-rate-limit 100 cbs
3000 ebs 3000 ZXR10(config-dpi-flow-pool-2)#
downstream-rate-limit 200 cbs 3000 ebs 3000

Chapter 5
Configuring Sub Service
Table of Contents:
Subservice Overview........................................................... 9
Configuring Subservice........................................................ 9
Subservice Configuration Example .......................................11
Subservice Overview
Subservice describes one type of service contained in the service.
Each subservice contains one or more signature-symbol relations,
and each signature-symbol relation is made up of a signature-sym-
bol serial number (separated by slash, such as 1/2/3/4). Each
subservice is only bound with one flow-pool. Other policies can
also be bound. At present, policies action and aging-time are sup-
ported.
Configuring Subservice
Adding Signature Symbol Sequence

mode.
2 ZXR10(config-dpi)#subservice <subservice-id> To enter subservice
configuration mode, execute
the following commands:
3 ZXR10(config-dpi-subservice-2)#add signature-sy This command adds signature
mbol <signature-symbol-id-relation>[relation-name] symbol sequence for current
subservice and meanwhile
names this sequence as
relation-name.

Adding Signature Symbol Application

mode.
2 ZXR10(config-dpi)#subservice <subservice-id> This enters subservice
configuration mode.
3 ZXR10(config-dpi-subservice-2)#add protocol This adds one signature
<protocol-name> symbol application for current
subservice.
Binding Flow-Pool with Current

Subservice

mode.
configuration mode.
3 ZXR10(config-dpi-subservice-2)#bind flow-pool This binds flow-pool with
<flow-pool-id> current subservice
Setting Permit/Deny Policy for

Current Subservice

mode.
configuration mode.
3 ZXR10(config-dpi-subservice-2)#action This sets permit/deny policy
{permit|deny} for current subservice.

Chapter 5 Configuring Sub Service
Setting Aging Time for Current

Subservice

mode.
configuration mode.
3 ZXR10(config-dpi-subservice-2)#aging-time This sets aging time for
<time> current subservice.
Showing Configuration of Designated

Subservice
Command Function
ZXR10(config)#show subservice <subservice-id> This shows configuration of
designated subservice.
Subservice Configuration
Example
The following part shows a subservice configuration example:
ZXR10(config)#dpi ZXR10(config-dpi)#subservice 2
ZXR10(config-dpi-subservice-2)#add signature-symbol
1/2/3/4 XXXX
ZXR10(config-dpi-subservice-2)# add protocol HTTP
ZXR10(config-dpi-subservice-2)# bind flow-pool 2
ZXR10(config-dpi-subservice-2)# action permit
ZXR10(config-dpi-subservice-2)# aging-time 10
ZXR10(config)# show subservice 2

This page is intentionally blank.

Chapter 6
Configuring Service
Table of Contents:
Service Overview...............................................................13
Configuring Service............................................................13
Service Configuration Example ............................................14
Service Overview
Service represents the service level assigned by network adminis-
trator. One service is composed of a set of sub services. The same
one service can be bound on multiple interfaces and different ser-
vices can be bound with the same sub service. Import subservice
can be configured under service (that is add another subservice
into one subservice and the two must be in the same one service)
and each service can be bound with only one flow-pool.
Configuring Service
Adding One Subservice to Current
Service

mode.
2 ZXR10(config-dpi)#service<service-id> This enters service
configuration mode.
3 ZXR10(config-dpi-service-2)#add subservice This adds one subservice to
<subservice-id> current service.

Importing Another Subservice into

One Subservice

mode.
configuration mode.
3 ZXR10(config-dpi-service-2)#import subservice This imports another
<subservice-id> im_subservice <im_subservice-id> subservice into one
subservice.
Binding Flow-Pool with Current

Service

mode.
configuration mode.
3 ZXR10(config-dpi-service-2)#bind flow-pool This binds flow-pool with
<flow-pool-id> current service and uses it as
default policy of this service.
Showing Service Configuration
Command Function
ZXR10(config)#show service <service-id> This shows service
configuration. It also shows
added subservices and bound
flowpool-id under this service.
Service Configuration
Example
The following part shows a service configuration example:

Chapter 6 Configuring Service
ZXR10(config)#dpi ZXR10(config-dpi)#service 2
ZXR10(config-dpi-service-2)#add subservice 2
ZXR10(config-dpi-service-2)# bind flow-pool 12
ZXR10(config)# show service 2


Chapter 7
Configuring DPI
Template
Table of Contents:
DPI-Template Overview ......................................................17
Configuring DPI-Template ...................................................17
DPI-Template Configuration Example....................................19
DPI-Template Overview
Configure related rules under DPI-template node. Each sip (source
ip)/port/vlan can only be bound with one service and the same one
service can be bound to different sips/ports/vlans meanwhile.
Configuring DPI-Template
Binding Direction Rules to Data Flow

mode.
2 ZXR10(config-dpi)#dpi-template <template-id > This enters dpi-template
configuration mode.
3 ZXR10(config-dpi-template-2)#bind slot <slot-id> This redirects traffic
in DPI-template to
corresponding DPI card.
Slot id is the slot number
where DPI card locates.

Binding Service Policy

mode.
configuration mode.
3 ZXR10(config-dpi-template-2)#bind service This binds service policy in
<service-id > current DPI-template.
Source IP Binding Rules

mode.
configuration mode.
3 ZXR10(config-dpi-template-2)#bind sip-addr This binds source IP rules in
<ip-address><net-mask> service <service-id > current DPI-template.
Binding Port Rules

mode.
configuration mode.
3 ZXR10(config-dpi-template-2)#bind switchport This binds port rules in current
<slot-id >/< port-id > service <service-id> DPI-template.
Showing Configuration of
DPI-Template
Command Function
ZXR10(config)#show dpi-template <template-id> This shows configuration of
dpi-template.

Chapter 7 Configuring DPI Template
DPI-Template Configuration
Example
The following part shows a DPI-template configuration example:
ZXR10(config)#dpi ZXR10(config-dpi)# dpi-template 2
ZXR10(config-dpi-template-2)# bind slot 4
ZXR10(config-dpi-template-2)# bind service 2
ZXR10(config-dpi-template-2)# bind sip-addr 1.1.1.1
255.255.255.0 service 10
ZXR10(config-dpi-template-2)# bind switchport 1/12
service 20
ZXR10(config)# show dpi-template 2


Glossary
ACL - Access Control List

DPI - Deep Packet Inspection
FTP - File Transfer Protocol
SLA - Service Level Agreement
TCP - Transmission Control Protocol
UDP - User Datagram Protocol
VOD - Video On Demand
VoIP - Voice over Internet Protocol

DPI Volume PDF

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

DPI Volume PDF

Încărcat de

Drepturi de autor:

Formate disponibile

ZXR10 8900 Series

10G Routing Switch

Copyright 2006 ZTE CORPORATION.

The ultimate right to interpret this product resides in ZTE CORPORATION.

Revision No. Revision Date Revision Reason

Serial Number: sjzl20093842

About This Manual.............................................. i

This manual is ZXR10 8900 Series (V2.8.02.C) 10G Rout-

Confidential and Proprietary Information of ZTE CORPORATION i

ii Confidential and Proprietary Information of ZTE CORPORATION

Confidential and Proprietary Information of ZTE CORPORATION iii

iv Confidential and Proprietary Information of ZTE CORPORATION

Confidential and Proprietary Information of ZTE CORPORATION 1

2 Confidential and Proprietary Information of ZTE CORPORATION

Signature Symbol Overview

Step Command Function

Confidential and Proprietary Information of ZTE CORPORATION 3

Setting Signature Symbol

Step Command Function

Showing Configuration of Designated

4 Confidential and Proprietary Information of ZTE CORPORATION

Signature Entry Overview

Configuring Signature Entry

Step Command Function

Confidential and Proprietary Information of ZTE CORPORATION 5

Step Command Function

Showing Configuration of Signature

6 Confidential and Proprietary Information of ZTE CORPORATION

DPI Policy Overview

Configuring Flow Pool

Step Command Function

Confidential and Proprietary Information of ZTE CORPORATION 7

Configuring Parameter Downstream

Step Command Function

Configuring Default Upstream/Downs

Step Command Function

Showing Configuration of Flow Pool

Flow Pool Configuration

8 Confidential and Proprietary Information of ZTE CORPORATION

Configuring Sub Service

Step Command Function

Confidential and Proprietary Information of ZTE CORPORATION 9

Adding Signature Symbol Application

Step Command Function

Binding Flow-Pool with Current

Step Command Function

Setting Permit/Deny Policy for

Step Command Function

10 Confidential and Proprietary Information of ZTE CORPORATION

Setting Aging Time for Current

Step Command Function

Showing Configuration of Designated

Confidential and Proprietary Information of ZTE CORPORATION 11

This page is intentionally blank.

12 Confidential and Proprietary Information of ZTE CORPORATION

Step Command Function

Confidential and Proprietary Information of ZTE CORPORATION 13

Importing Another Subservice into

Step Command Function

Binding Flow-Pool with Current

Step Command Function

Showing Service Configuration

14 Confidential and Proprietary Information of ZTE CORPORATION