No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Security

S1720, S2700, S5700, and S6720 V200R011C10

This document describes the configurations of Security, including ACL, local attack defense, MFF, attack defense, traffic suppression and storm control, ARP security, Port security, DHCP snooping, ND snooping, PPPoE+, IPSG, SAVI, URPF, keychain, MPAC, separating the management plane from the service plane, security risks, PKI.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring Dynamic CPCAR Adjustment for Protocol Packets

(Optional) Configuring Dynamic CPCAR Adjustment for Protocol Packets

Context

If the default CPCAR settings cannot meet the changing requirements for the upper limit of the packet sending rate, the dynamic CPCAR adjustment function can meet these requirements.

If the default CIR value of a protocol has never been modified, a device with this function enabled can dynamically adjust the default CIR value for the protocol packets based on service scale (for example, number of dynamic ARP entries) and CPU usage to meet various service requirements. For details, see Table 3-8.

Table 3-8  Default CPCAR adjustment for ARP packets
Number of ARP Entries Adjusted Default CPCAR
Less than or equal to 512 Unchanged
More than 512 and less than or equal to 1024 128 kbit/s (remain unchanged if the default CIR is larger than 128 kbit/s)
More than 1024 and less than or equal to 3072 256 kbit/s
More than 3072 and less than or equal to 4096 512 kbit/s
More than 4096 512 kbit/s
NOTE:

When the number of entries increases, the CIR value is automatically increased. If the CPU is overloaded, the CIR value is decreased.

The device dynamically adjusts the default CIR value of ARP protocol packets only when the function is enabled globally and on ARP protocol packets.

This function is only supported by S5720HI, S5720EI, S5720SI, S5720S-SI, S5730SI, S5730S-EI, S6720LI, S6720S-LI, S6720SI, S6720S-SI, S6720S-EI, and S6720EI.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run cpu-defend dynamic-car enable

    The dynamic CPCAR adjustment function is enabled globally for protocol packets.

    By default, the dynamic CPCAR adjustment function is enabled globally.

  3. Run cpu-defend dynamic-car arp enable

    The dynamic CPCAR adjustment function is enabled for ARP.

    By default, the dynamic CPCAR adjustment function is disabled for ARP.

Translation
Download
Updated: 2019-09-23

Document ID: EDOC1000178177

Views: 233320

Downloads: 750

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next