32-6
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-07
Chapter 32 Configuring Control-Plane Security
Configuring Control-Plane Security
•
If you disable CPU protection and attach a policy map with more than 45 policers, and then enable
CPU protection again, and reload, 19 policers per port are again required for CPU protection. During
reload, the policers 46 and above will reach the
policer resources exceeded
error condition and no
policers are attached to those classes.
You can configure only the rate-limiting threshold. The configured threshold applies to all supported
control protocols on all UNIs and ENIs. It also applies to STP, CDP, LLDP, LACP, and PAgP when the
protocol is enabled on an ENI.
Note
During normal Layer 2 operation, you cannot ping the switch through a UNI or ENI. This restriction
does not apply to NNIs. See the
“Using Ping” section on page 44-10
for ways to enable ping in a test
situation.
Beginning in privileged EXEC mode, follow these steps to set the threshold rate for CPU protection:
To return to the default threshold rate, use the
no
policer cpu uni
global configuration command. To
disable CPU protection, enter the
no policer cpu uni all
global configuration command, and reload the
switch.
This example shows how to set the CPU protection threshold to 10000 b/s and to verify the configuration.
Switch#
config t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#
policer cpu uni 10000
Switch(config)#
end
Switch#
show policer cpu uni-eni rate
CPU UNI/ENI port police rate = 10000 bps
This is an example of the show command output when CPU protection is disabled.
Switch#
show policer cpu uni-eni rate
CPU Protection feature is not enabled
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
policer cpu uni
rate
Configure the CPU protection policing threshold rate. The range is
from 8000 to 409500 bits per second (b/s). The default, if none is
configured, is 160000 b/s.
Note
The configured rate applies to all supported and enabled
control protocols on all UNIs and ENIs
Step 3
end
Return to privileged EXEC mode.
Step 4
show policer cpu uni-eni rate
Verify the configured CPU policer rate.
Step 5
copy running-config startup-config
(Optional) Save your entries in the configuration file.
Summary of Contents for ME 3400 Series
Page 40: ...Contents xl Cisco ME 3400 Ethernet Access Switch Software Configuration Guide OL 9639 07 ...
Page 44: ...xliv Cisco ME 3400 Ethernet Access Switch Software Configuration Guide OL 9639 07 Preface ...
Page 1138: ...Index IN 52 Cisco ME 3400 Ethernet Access Switch Software Configuration Guide OL 9639 07 ...
