No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Security

S7700 and S9700 V200R011C10

This document describes the configurations of Security, including ACL, reflective ACL, local attack defense, MFF, attack defense, traffic suppression and storm control, ARP security, port security, DHCP snooping, ND snooping, PPPoE+, IPSG, SAVI, URPF, keychain, separating the management plane from the service plane, security risks.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring Dynamic CPCAR Adjustment for Protocol Packets

(Optional) Configuring Dynamic CPCAR Adjustment for Protocol Packets

Context

If the default CPCAR settings cannot meet the changing requirements for the upper limit of the packet sending rate, the dynamic CPCAR adjustment function can meet these requirements.

If the default CIR value of a protocol has never been modified, a device with this function enabled can dynamically adjust the default CIR value for the protocol packets based on service scale (for example, number of dynamic ARP entries) and CPU usage to meet various service requirements. For details, see Table 3-6 and Table 3-7.

Table 3-6  Default CPCAR adjustment for ARP packets
Number of ARP Entries Adjusted Default CPCAR
Less than or equal to 512 Unchanged
More than 512 and less than or equal to 1024 128 kbit/s on the MPU and LPU (remain unchanged if the default CIR on the MPU and LPU is larger than 128 kbit/s)
More than 1024 and less than or equal to 3072 256 kbit/s on the MPU and LPU
More than 3072 and less than or equal to 4096 512 kbit/s on the MPU and LPU
More than 4096 768 kbit/s on the MPU and 512 kbit/s on the LPU
Table 3-7  Default CPCAR adjustment for OSPF packets
Number of OSPF Links (Number of OSPF Neighbors x Number of LSAs) Adjusted Default CPCAR
Less than or equal to 350000 Unchanged. 512 kbit/s on the MPU and 256 kbit/s on the LPU
More than 350000 and less than or equal to 420000 768 kbit/s on the MPU and 384 kbit/s on the LPU
More than 420000 and less than or equal to 630000 1024 kbit/s on the MPU and 512 kbit/s on the LPU
More than 630000 1536 kbit/s on the MPU and 768 kbit/s on the LPU
NOTE:

When the number of entries increases, the CIR value is automatically increased. If the CPU is overloaded, the CIR value is decreased.

The device dynamically adjusts the default CIR value of OSPF or ARP protocol packets only when the function is enabled globally and on OSPF or ARP protocol packets.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run cpu-defend dynamic-car enable

    The dynamic CPCAR adjustment function is enabled globally for protocol packets.

    By default, the dynamic CPCAR adjustment function is enabled globally.

  3. Run cpu-defend dynamic-car ospf enable

    Or cpu-defend dynamic-car arp enable

    The dynamic CPCAR adjustment function is enabled for OSPF or ARP.

    By default, the dynamic CPCAR adjustment function is disabled for OSPF and ARP.

Translation
Download
Updated: 2019-04-01

Document ID: EDOC1000178319

Views: 145753

Downloads: 78

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next