H3C Technologies H3C SecPath F1000-E - Manual (Page 659)

1
P2P Traffic Control
P2P Traffic Control Overview
P2P is a technology used for directly exchanging data or services between personal computers. It has
been widely used for content (such as audio and video) file sharing, representing a large amount of
bandwidth on the Internet. To prevent aggressive bandwidth use of P2P traffic from impacting other
services, P2P traffic control is introduced to identify and limit P2P traffic.
P2P traffic control blocks or rate-limits P2P traffic according to the signatures of P2P traffic. It consists of
two parts: P2P identification and traffic control.
• P2P identification: This is done by comparing traffic against P2P traffic signatures. A signature file
with the .mtd extension will be provided to users. After the signature file is loaded on a device, the
device inspects traffic against the signatures in the file. If a signature is hit, the traffic is considered
as P2P traffic.
• Traffic control: The traffic control function of QoS is used to block or rate limit the identified P2P
traffic. For eMule and eDonkey traffic, only the block action is supported.
P2P identification and QoS traffic control work in conjunction to implement the P2P traffic control
function.
Configuring P2P Traffic Control
Configuration Task List
Perform the following tasks in Table 1 to configure P2P traffic control.
Table 1 P2P traffic control configuration task list
Task Remarks
Loading Signature Files
Required
Load a file containing the signature information to the
device.
No signature file is loaded by default.
Note that only the signature file last loaded takes
effect if multiple signature files exist in the device.
Enabling Protocol Identification
Required
Enable P2P protocol identification function in the
specified security zone.
Not enabled by default.
Configuring Protocol Groups
Required
Create a protocol group and add P2P protocols to be
identified in the group.
By default, no protocol group exists.