DGS-6604 m cpu-protect safeguard
CLI Reference Guide
130
cpu-protect safeguard
Use this command to enable and configure the threshold for Safeguard Engine.
Use the no form of this command to disable Safeguard Engine.
cpu-protect safeguard [threshold RISING-THRESHOLD FALLING-THRESHOLD]
no cpu-protect safeguard
Default By default Safeguard_Engine is disabled.
By default rising threshold of CPU utilization is 50.
By default falling threshold of CPU utilization is 20.
Command Mode Global configuration
Usage Guideline The Safeguard Engine can help the overall operability of the device by
minimizing the workload of the switch while the attack is ongoing, thus making it
capable to forward essential packets over its network in a limited bandwidth.
When the CPU utilization of the switch rises over configured rising threshold, it
will enter exhausted mode. In exhausted mode, the switch limits the bandwidth of
receiving ARP request and drop all broadcast IP packets. Regarding the way to
limit the bandwidth is project dependent.
You can use the command cpu-protect safeguard to configure the threshold
and enable the Safeguard Engine. The command no cpu-protect safeguard is
used to disable Safeguard Engine. The command no cpu-protect safeguard
will reset both the rising and falling thresholds and disable the state of Safeguard
Engine.
Example The following example shows how to configure the thresholds and enable
Safeguard Engine. The rising and falling threshold are 60 and 40 respectively.
Syntax Description
threshold Configure the utilization for the Safeguard Engine.
RISING-THRESHOLD Set a percentage value of the rising CPU utilization which will trigger the
Safeguard Engine function. Once the CPU utilization rises over the specified
percentage, the Safeguard Engine mechanism will initiate. The valid range is 20
to 100.
FALLING-
THRESHOLD
The user can set a percentage value of the falling CPU utilization which will
trigger the Safeguard Engine function to cease. Once the CPU utilization falls to
the specified percentage, the Safeguard Engine mechanism will shut down. The
valid range is 20 to 100.
Switch(config)# cpu-protect safeguard threshold 60 40
To Next Page
Loading...
