No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CLI-based Configuration Guide - Security

AR500, AR510, and AR530 V200R007

This document describes the configurations of Security, including AAA, DAA,NAC, BRAS Access, ACL, Firewall, Deep Security Defense, Local Attack Defense;Attack Defense, Traffic Suppression, ARP Security, Port Security, DHCP Snooping, IPSG, URPF, PKI, SSL, HTTPS, Keychain, separating the management plane from the service plane, security risks.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Dynamic CPCAR Adjustment

Configuring Dynamic CPCAR Adjustment


When CPCAR values are manually set, a device cannot immediately control the rate of packets sent to the CPU when undergoing an attack. As a result, the CPU usage exceeds the acceptable range and CPU performance degrades.

After dynamic CPCAR adjustment is configured, the device periodically checks CPU usage, and automatically adjusts CPCAR values of protocol packets when the CPU usage exceeds the specified upper threshold, reducing impact on the CPU.


  1. Run:


    The system view is displayed.

  2. Run:

    cpu-defend policy policy-name

    The attack defense policy view is displayed.

  3. Run:

    rate-adaption enable

    Dynamic CPCAR adjustment is enabled.

    By default, dynamic CPCAR adjustment is disabled.

  4. Run:

    rate-adaption adjust-period period-value

    The interval for checking CPU usage is set.

    By default, the interval for checking CPU usage is 30 seconds.

  5. Run:

    rate-adaption cpu-usage threshold low low-value high high-value

    The CPU usage thresholds are set. When the CPU usage exceeds the upper threshold or falls below the lower threshold, the device automatically adjusts the CPCAR values.

    By default, the lower threshold is 65% and the upper threshold is 85%.

  6. Run:

    rate-adaption adjust-step step-value

    The dynamic CPCAR adjustment step is set.

    By default, the dynamic CPCAR adjustment step is 20%.

  7. (Optional) Run:

    rate-adaption exception packet-type packet-type

    The protocols excluded from dynamic CPCAR adjustment are specified. The CPCAR values for these protocols are not dynamically adjusted.

    By default, the CPCAR values for all protocol packets are dynamically adjusted.

Updated: 2019-05-25

Document ID: EDOC1000097287

Views: 13527

Downloads: 40

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next