CPU Protection Commands
Page 214 7450 ESS System Mangement Guide
icmp
Syntax [no] icmp
Context config>sys>security>cpu-protection> ip>included-protocols
Include extracted IPv4 ICMP packets for ip-src-monitoring. IPv4 ICMP packets will be subject to the
per-source-rate of cpu protection policies.
Default no icmp
igmp
Syntax [no] igmp
Context config>sys>security>cpu-protection> ip>included-protocols
Description Include extracted IPv4 IGMP packets for ip-src-monitoring. IPv4 IGMP packets will be subject to
the per-source-rate of cpu protection policies.
Default no igmp
link-specific-rate
Syntax link-specific-rate packet-rate-limit
no link-specific-rate
Context config>sys>security>cpu-protection
Description This command configures a link-specific rate for CPU protection. This limit is applied to all ports
within the system. The CPU will receive no more than the configured packet rate for all link level
protocols such as LACP from any one port. The measurement is cleared each second and is based on
the ingress port.
Default max (no limit)
Parameters packet-rate-limit — Specifies a packet arrival rate limit, in packets per second, for link level
protocols.
Values 1 — 65535, max (no limit)
Default 15000
policy
Syntax policy cpu-protection-policy-id [create]
no policy cpu-protection-policy-id
Context config>sys>security>cpu-protection
To Next Page
Loading...
