1-20
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring Port-Based Traffic Control
Configuring Protocol Storm Protection
Note Excess packets are dropped on no more than two virtual ports.
Virtual port error disabling is not supported for EtherChannel and Flexlink interfaces
Default Protocol Storm Protection Configuration
Protocol storm protection is disabled by default. When it is enabled, auto-recovery of the virtual port is
disabled by default.
Enabling Protocol Storm Protection
Beginning in privileged EXEC mode, follow these steps to configure protocol storm protection.
This example shows how to configure protocol storm protection to drop incoming DHCP traffic on
DHCP when it exceeds 35 packets per second.
Switch# configure terminal
Switch(config)# psp dhcp pps 35
To disable protocol storm protection for a specific protocol, use the no psp {arp | dhcp | igmp}
privileged EXEC command.
To disable error-disable detection for protocol storm protection, use the no errdisable detect cause psp
global configuration command.
To manually re-enable an error-disabled virtual port, use the errdisable recovery cause psp global
configuration command.
To disable auto-recovery of error-disabled ports, use the no errdisable recovery cause psp global
configuration command.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
psp {arp | dhcp | igmp} pps value Configure protocol storm protection for ARP, IGMP, or DHCP.
For value, specify the threshold value for the number of packets per
second. If the traffic exceeds this value, protocol storm protection
is enforced. The range is from 5 to 50 packets per second.
Step 3
errdisable detect cause psp (Optional) Enable error-disable detection for protocol storm
protection. If this feature is enabled, the virtual port is error
disabled. If this feature is disabled, the port drops excess packets
without error disabling the port.
Step 4
errdisable recovery interval time (Optional) Configure an auto-recovery time (in seconds) for
error-disabled virtual ports. When a virtual port is error-disabled,
the switch auto-recovers after this time. The range is from 30 to
86400 seconds.
Step 5
end Return to privileged EXEC mode.
Step 6
show psp config {arp | dhcp | igmp} Verify your entries.
To Next Page
Loading...
General
