User Manual UMN:CLI
V5808
391
packets exceed the configured threshold, use the following command.
attack-guard action shutdown
[PORTS]
Shuts down the port if the amount of traffic exceeds a
high threshold.
attack-guard action trap
[PORTS]
Generates a trap message when the amount of traffic
exceeds a high threshold.
no attack-guard action
{shutdown | trap } [PORTS]
Disables the shutdown action or trap action on a port
when the attack guard function is enabled.
To display the attack guard configuration, use the following command.
Displays the attack guard configuration.
8.9.4.2 Error Guard
A packet storm may unexpectedly occur if a large number of error packets (CRC, FCS,
alignment and bad symbols) are received on a port. These packets can cause
unexpected errors of the whole network environment connected to the switch as well as
one single switch.
The V5808 provides error guard function that controls incoming error packets through the
port using the threshold. The threshold rate (%) is based on pps of 64-byte frame size
calculation within the maximum port bandwidth. If the number of incoming packets per
second exceeds the given threshold, the system shuts down the port or generates trap
messages for warning when the error guard function is enabled on this port.
To enable/disable the error guard function, use the following command.
error-guard <0-100> [PORTS]
Enables the error guard function and sets its threshold.
PORTS: port number
0-100: high rate threshold percent (default: 1%)
Disables the error guard function.
The threshold (%) rate of Error Guard is based on 64-byte frame size calculation. If the
high threshold is set to 5% for 10G Ethernet port, the V5808 monitors the error packet
count. The number of those packets exceeds 744,048 pps (=14,880,952 * 0.05), the
shutdown/trap action will be performed.
To determine the policy to take action when the incoming error packets exceed the
configured threshold, use the following command.