packet-type
Function
The packet-type command sets the rate limit for packets sent to the CPU.
The undo packet-type command restores the default rate limit for packets sent to the CPU.
By default, the default rate limit in the default attack defense policy is used to limit the packets sent to the CPU.
Format
packet-type packet-type rate-limit rate-value { wired | wireless }
undo packet-type packet-type rate-limit { wired | wireless }
Parameters
Parameter |
Description |
Value |
|---|---|---|
packet-type |
Specifies the protocol type. |
The supported packet type depends on the device. |
rate-limit rate-value |
Specifies the rate limit of protocol packets. |
The value is an integer that ranges from 1 to 4294967295, in pps. |
| wired | Indicates non-CAPWAP-encapsulated packets. |
- |
| wireless | Indicates CAPWAP-encapsulated packets. |
- |
Usage Guidelines
Usage Scenario
After an attack defense policy is created, if the device receives attack packets of a specified protocol or a large number of packets sent to the CPU, configure rate limit for the protocol packets in the attack defense policy. The device then limits the rate of these packets to protect the CPU.
By default, the device applies the rate limit defined in the default attack defense policy to protocol packets. You can also create an attack defense policy and run the packet-type command to set the rate limit of protocol packets. The configured rate limit overrides the default rate limit defined in the default attack defense policy.
Prerequisites
An attack defense policy has been created using the cpu-defend policy command.
Precautions
If you run the packet-type command with the same value of packet-type in the same attack defense policy view multiple times, only the latest configuration takes effect.
If the packet-type and deny commands are executed on the same type of protocol packets, the deny command takes effect.
