Application Identification Configuration Guidelines - JUNOS 9.5 Services Interfaces Configuration Guide

To configure application identification services (APPID), include the application-identification statement at the [edit services] hierarchy level:

            
               [edit services]
               application-identification {
               
                  
                     application application-name {
                     
                     disable;
                     
                     idle-timeout seconds;
                     
                     index number;
                     
                     session-timeout seconds;
                     
                     type type;
                     
                     type-of-service service-type;
                     
                     
                        
                           port-mapping {
                           
                              
                                 port-range {
                                 
                                 tcp (port | range);
                                 
                                 udp (port | range);
                                 
                                 }
                              
                           
                           disable;
                           
                           }
                        
                     
                     }
                  
               
               
                  
                     application-group group-name {
                     
                     
                        
                           application-groups {
                           
                           name [application-group-name];
                           
                           }
                        
                     
                     
                        
                           applications {
                           
                           name [application-name];
                           
                           }
                        
                     
                     index number;
                     
                     disable;
                     
                     }
                  
               
               application-system-cache-timeout seconds;
               
               max-checked-bytes bytes;
               
               min-checked-bytes bytes;
               
               no-application-identification;
               
               no-application-system-cache;
               
               no-clear-application-system-cache;
               
               no-signature-based;
               
               
                  
                     profile profile-name {
                     
                     [ rule-set rule-set-name ];
                     
                     }
                  
               
               
                  
                     rule rule-name {
                     
                     
                        
                           address address-name {
                           
                           
                              
                                 destination {
                                 
                                 ip address</prefix-length>;
                                 
                                 
                                    
                                       port-range {
                                       
                                       tcp [ ports-and-port-ranges ];
                                       
                                       udp [ ports-and-port-ranges ];
                                       
                                       }
                                    
                                 
                                 }
                              
                           
                           
                              
                                 source {
                                 
                                 ip address</prefix-length>;
                                 
                                 
                                    
                                       port-range {
                                       
                                       tcp [ ports-and-port-ranges ];
                                       
                                       udp [ ports-and-port-ranges ];
                                       
                                       }
                                    
                                 
                                 }
                              
                           
                           order number;
                           
                           }
                        
                     
                     application application-name;
                     
                     disable;
                     
                     }
                  
               
               
                  
                     rule-set rule-set-name {
                     
                     rule application-rule-name;
                     
                     }
                  
               
               
                  
                     traceoptions {
                     file filename <files number> <match regex> <size size> <world-readable | no-world-readable>;
                     
                     flag flag;
                     
                     no-remote-trace;
                     }
                  
               
               }