Alcatel-Lucent 7950 SR, System Management Manual, Page: 193 / 462

Security
7950 SR OS System Management Guide Page 193
entry
Syntax entry < entry > levels < levels > opcodes < opcodes > rate < packet-rate-limit >
no entry
Context config>sys>security>cpu-protection>eth-cfm>
Description
Builds the specific match and rate criteria. Up to ten entries may exist in up to four CPU protection
policies.
The no form of the command reverses the match and rate criteria configured.
Default no entry
Parameters rate — Specifies a packet rate limit in frames per second, where a ‘0’ means drop all.
Values 1 —100
level — Specifies a domain level.
Values all Wildcard entry level
range 0 —7: within specified range, multiple ranges allowed
number 0 ... 7: specific level number, may be combined with range
opcode — Specifies an operational code that identifies the application.
Values range 0 —255: within specified range, multiple ranges allowed
number 0 .. .255: specific level number, may be combined with range
out-profile-rate
Syntax out-profile-rate packet-rate-limit
no out-profile-rate
Context config>sys>security>cpu-protection>policy
Description This command applies a packet arrival rate limit for the entire SAP/interface, above which packets
will be market as discard eligible. The rate defined is a global rate limit for the interface regardless of
the number of traffic flows. It is a per-SAP/interface rate.
The no form of the command sets out-profile-rate parameter back to the default value.
Default
3000 for cpu-protection-policy-id 1-253
6000 for cpu-protection-policy-id 254 (default access interface policy)
3000 for cpu-protection-policy-id 255 (default network interface policy)
Parameters
packet-rate-limit — Specifies a packet arrival rate limit in packets per second.
Values
1 — 65535, max (max indicates no limit)