I just had a chance to enable NBAR2 on a 2900 router and want to share my findings. I always thought it is a simple activation but it turned out to require a few things. Here are a few things I learnt.
  1. First you need a Data license otherwise only limit set of protocol will show up when you try to do "match protocol" (ie. NBAR1).
  2. The base image/license gives you Basic protocol pack. If you need the 2000+ protocol or to install protocol pack to support newer protocols, you need the Advance Protocol Pack. Data license will convert Basic to Advance protocol pack automatically.
  3. When I tried to install an advance protocol pack, the router was complaining about insufficient dynamic memory and stopped parsing the package. I had to upgrade the mem from 512 (default) to 1G to make the router happy so I would say always do minimum 1G of RAM when dealing with NBAR2.
  4. Both Data license and AVC are RTU now on the recent IOS. But for correct entitlement, AX license bundle should be purchased, which includes Data license, AVC, and WAAS sessions.
  5. AX license bundle by itself is not the same as if you buy it with the router bundle. The one with router bundle has Security license, which the standalone AX license does not have. That's why when you buy a standalone AX with a router separately, it is cheaper than the router-AX bundle.