ZXR108900SeriesUserManual(BasicCongurationVolume)
Note:
IPv6protocolsthataresupportedbyCPUattackprotectioninclude
mld,na,ns,ra,rs,commonicmp6,bgp6,rip6,ospf6,ldptcp6,
ldpudp6,telnet6andpim6.
ConfiguringLayer2Protocol
Protection
TocongureLayer2protocolprotection,performthefollowing
steps.
Step
CommandFunction
1
ZXR10(config-if)#l2protocol-protectmode
<protocolname>{enable|disable}
ThissetsLayer2protocol
protectionfunction
2
ZXR10(config-if)#l2protocol-protectalarmmode
<protocolname><alarm-limit>
Thisconguresalarmlimitof
Layer2protocolprotection
3
ZXR10(config-if)#l2protocol-protectaverage-rate
mode<protocol-name><10-600>
Thiscongurestheaverage
rateofLayer2protocols
4
ZXR10(config-if)#l2protocol-protectpeak-rate
mode<protocol-name><100-1000>
Thisconguresthepeakrate
ofLayer2protocols
Note:
Layer2protocolsupportedbyCPUattackprotectionisLLDP .
CPUAttackProtection
ConfigurationExamples
ExampleThisexampleshowshowtoenableOSPFprotectionfunctionand
tosetalarmlimittobe2500.
ZXR10#configterminal
ZXR10(config)#intergei_1/1
ZXR10(config-if)#ipv4protocol-protectmodeospfenable
ZXR10(config-if)#ipv4protocol-protectalarmmodeospf2500
ExampleThisexampleshowshowtoenableICMP6protectionfunctionand
tosetalarmlimittobe3200.
ZXR10#configterminal
ZXR10(config)#intergei_1/1
154CondentialandProprietaryInformationofZTECORPORATION