No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - Security

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document provides the basic concepts, configuration procedures, and configuration examples in different application scenarios of the network management feature supported by the device.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Dynamic CPCAR Adjustment

Configuring Dynamic CPCAR Adjustment

Context

When CPCAR values are manually set, a device cannot immediately control the rate of packets sent to the CPU when undergoing an attack. As a result, the CPU usage exceeds the acceptable range and CPU performance degrades.

After dynamic CPCAR adjustment is configured, the device periodically checks CPU usage, and automatically adjusts CPCAR values of protocol packets when the CPU usage exceeds the specified upper threshold, reducing impact on the CPU.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run cpu-defend policy policy-name

    The attack defense policy view is displayed.

  3. Run rate-adaption enable

    Dynamic CPCAR adjustment is enabled.

    By default, dynamic CPCAR adjustment is disabled.

  4. Run rate-adaption adjust-period period-value

    The interval for checking CPU usage is set.

    By default, the interval for checking CPU usage is 30 seconds.

  5. Run rate-adaption cpu-usage threshold low low-value high high-value

    The CPU usage thresholds are set. When the CPU usage exceeds the upper threshold or falls below the lower threshold, the device automatically adjusts the CPCAR values.

    By default, the lower threshold is 65% and the upper threshold is 85%.

  6. Run rate-adaption adjust-step step-value

    The dynamic CPCAR adjustment step is set.

    By default, the dynamic CPCAR adjustment step is 20%.

  7. (Optional) Run rate-adaption exception packet-type packet-type

    The protocols excluded from dynamic CPCAR adjustment are specified. The CPCAR values for these protocols are not dynamically adjusted.

    By default, the CPCAR values for all protocol packets are dynamically adjusted.

Translation
Download
Updated: 2019-08-07

Document ID: EDOC1100034077

Views: 126015

Downloads: 230

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next