Security
7450 ESS System Mangement Guide Page 43
soon as this command is entered into the configuration. These MPs will not be able to receive
any ingress ETH-CFM frames because squelching is processed before ETH-CFM extraction.
CPU Protection Extensions for ETH-CFM are still required in the model above because the
Subscriber ME (6) and the Test ME (5) are entering the network across an untrusted
connection, the UNI. ETH-CFM squelching and CPU Protection for ETH-CFM can be
configured on the same SAP or binding. Squelching is first in the process order followed by
CPU Protection for ETH-CFM.
MPs configured to support primary VLAN are not subjected to the squelch function. Primary
VLAN based MPs, supported only on Ethernet SAPs, are extractions that take into
consideration an additional VLAN beyond the SAP configuration.
The difference in the two protection mechanisms is shown in the Table 5. CPU Protection is
used to control access to the CPU resources when processing is required. Squelching is
required when the operator is protecting the ETH-CFM architecture from external sources.
As well as including the squelching information under the show service service-id all, display
output the squelch-ingress-level key has been added to the sap-using and sdp-using show
commands.
show service sap-using squelch-ingress-levels
===============================================================================
ETH-CFM Squelching
===============================================================================
PortId SvcId Squelch Level
-------------------------------------------------------------------------------
6/1/1:100.* 1 0 1 2 3 4 5 6 7
Table 5: CPU PRotection and Squelching
Description CPU Protection Extension for
ETH-CFM
ETH-CFM Squelching
Ingress Filtering Yes Yes
Egress Filtering Yes No
Granularity Specified Level AND OpCode Level (At and below)
Rate Configurable Rate (includes
0=drop all)
Silent Drop
Primary VLAN
Support
Rate shared with SAP delineation Not exposed to squelch
Extraction Requires MEP or MIP to extract No MEP or MIP required
To Next Page
Loading...
