Zte ZXR10 2928E - 4.34 PP Configuration

Chapter4ServiceConguration
CommandFunction
zte(cfg)#setsflowcollector-address<A.B.C.D>[udp-port<1-65535>]
SetstheIPaddressofansFlow
collector.
zte(cfg)#setsflowversion<number>
SetstheformatversionofsFlow
samplingpackets.
zte(cfg)#setsflow{ingress|egress}{enable|disable}
EnablesordisablesthesFlowfunction
onaningressoranegress.
zte(cfg)#setsflow{ingress|egress}reload-mode{continue|cpu}
SetsthereloadingmodeonansFlow
ingressoregress.
zte(cfg)#setsflowingresssample-mode{all|forward}
SetsthesamplingmodeonansFlow
ingressoregress.
zte(cfg)#setsflow{ingress|egress}port<portlist>packet-sampleoffDisablesport-basedsFlowsampling.
zte(cfg)#setsflow{ingress|egress}port<portlist>packet-sampleon
frequency<2-16000000>[time-range<word>]
Enablesport-basedsFlowsamplingor
associateswithatimerange.
zte(cfg)#clearsflowconfig[{agent|collector}]ClearssFlowcongurationonports.
zte(cfg)#clearsflowstatisticClearsstatisticsinformationonports.
showsflow(allcongurationmodes)DisplaysallsFlowconguration.
4.34PPConguration
PPOverview
ProtocolProtect(PP)maintainsandmonitorstherateofpacketsforwardedtotheCPU,
thuspreventingvirusesorspitefulattackstotheswitch.Inthisway,theswitchprovides
self-protectionabilityandensuresnetworksecurity.
PPtakesthefollowingmeasures:limitingtheratesofrelatedservices,lteringunsuitable
packets,sendingalarmswhentherearepacketssentatanabnormalrate,andreminding
NMSthattheremaybepacketsattackingtheCPU.
Toenhanceexibilityandcompatibilityoftheswitch,PPprovidesthefunctionofconguring
priorityusersfortheprotocolpacketssentbytheswitch.
ConguringPP
ThePPcongurationincludesthefollowingcommands:
CommandFunction
zte(cfg)#createprotocol-protectmac-droprule<1-128>src-mac
<HH.HH.HH.HH.HH.HH>mask<HH.HH.HH.HH.HH.HH>
Createamacdroprule.
4-123
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential