Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 1070 / 2620

1070 ExtremeWare 7.7 Command Reference Guide
Security Commands
Cpu dos protect: enabled
Port L3Miss L3Err Bcast IpUnkMcast Learn Curr Int Cfg Thr Cfg Int Pass
______________________________________________________________________
1 150 150 150 150 150 1 150 13
Trusted ports: none
The output of this show command displays the following information, which can help you analyze the
type of activity coming across the port to the CPU:
• The status of DoS Protection on the port
• Layer 3 miss to the CPU
These are packets that do not have corresponding IPFDB entries on VLANs, which are enabled for
IP forwarding. Packets that are unicasted to the CPU IP are also considered in this category.
• Layer 3 error
These are IP packets with options, IPMC packets (but not class D address) with checksum errors,
and non-IP packets.
• Broadcast traffic
• IP multicast unknown
These are IPMC packets that do not have corresponding IPMC FDB entries.
• Learning packets
These are packets that do not have a corresponding FDB entries.
• Current interval
The current time interval, less than or equal to the configured interval.
• Configured alert threshold
The maximum number of packets that can be sent to the CPU. This variable is equal to the configured
interval parameter in seconds for each traffic category.
• Configured interval
• Free pass indicator (Zero in this field indicates a free pass for three intervals after the port comes
up.)
• Trusted port status
History
This command was first available in ExtremeWare 6.2.2.
This command was added to the Summit “ e ” series of switches in ExtremeWare 7.2e.
Platform Availability
This command is available on all platforms.