Distributed CPU Protection Commands
Page 224 7450 ESS System Mangement Guide
dynamic-enforcement-policer-pool
Syntax [no] dynamic-enforcement-policer-pool number-of-policers
Context config>dist-cpu-protection
Description This command reserves a set of policers for use as dynamic enforcement policers for the Distributed
CPU Protection (DCP) feature. Policers are allocated from this pool and instantiated as per-object-
per-protocol dynamic enforcement policers after a local monitor is triggered for an object (such as a
SAP or Network Interface). Any change to this configured value automatically clears the high water
mark, timestamp, and failed allocation counts as seen under “show card x fp y dist-cpu-protection”
and in the tmnxFpDcpDynEnfrcPlcrStatTable in the TIMETRA-CHASSIS-MIB. Decreasing this
value to below the currently used/allocated number causes all dynamic policers to be returned to the
free pool (and traffic returns to the local monitors).
Default 0
Parameters number-of-policers — specifies the number of policers to be reserved.
Values 0, 1000..32k
exceed-action
Syntax exceed-action {discard [hold-down seconds] | low-priority [hold-down seconds] |
none}
Context config>system>security>dist-cpu-protection>policy>static-policer
config>system>security>dist-cpu-protection>policy>protocol>dynamic-parameters
Description This command controls the action performed upon the extracted control packets when the configured
policer rates are exceeded.
Default none
Parameters discard — Discards packets that are non-conformant.
low-priority — Marks packets that are non-conformant as low-priority. If there is congestion in the
control plane of the SR OS router then unmarked control packets are given preferential
treatment.
hold-down seconds — (optional) When the parameter is specified, it causes the following “hold-
down” behavior.
When SR OS software detects that an enforcement policer has marked or discarded one or more
packets (software may detect this some time after the packets are actually discarded), and an
optional hold-down seconds value has been specified for the exceed-action, then the policer
will be set into a “mark-all” or “drop-all” mode that cause the following:
- the policer state to be updated as normal
- all packets to be marked (if the action is “low-priority”) or dropped (action = discard)
regardless of the results of the policing decisions/actions/state.
To Next Page
Loading...
