No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE20E-S2 V800R010C10SPC500 Configuration Guide - Security 01

This is NE20E-S2 V800R010C10SPC500 Configuration Guide - Security
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Interface-based CAR

Configuring Interface-based CAR

When an access device is under attack, you can configure interface-based CAR to restrict the rate at which all or specific packets are sent to the CPU to protect the CPU against attacks.

Usage Scenario

When an access device is under attack, to protect the CPU against attacks, configure interface-based CAR to restrict the rate at which all or specific protocol packets are sent to the CPU.

Prerequisites

None

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number

    The interface view is displayed.

  3. Run cp-rate-limit enhance { port | { dhcp | dhcpv6 | icmp | icmpv6 } } cir cir-value [ cbs cbs-value ]

    The rate at which all or specific protocol packets are sent to the CPU is restricted.

Checking the Configurations

After configuring interface-based CAR, check the configurations.

Run the display cp-rate-limit enhance command to check statistics about interface-based CAR on the board in slot 1.

<HUAWEI> display cp-rate-limit enhance port slot 1 verbose
[Slot 1]
Interface: GigabitEthernet0/1/1
PeVid(Vid): NA 
CeVid: NA 
ProtocolType: port 
PassBytes(byte): 0 
PassByteRate(kbps): 0 
DropBytes(byte): 0 
DropByteRate(kbps): 0 
PassPackets(packet): 0 
PassPacketRate(pps): 0 
DropPackets(packet): 0 
DropPacketRate(pps): 0 
Translation
Download
Updated: 2019-01-02

Document ID: EDOC1100055397

Views: 19650

Downloads: 39

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next