Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 874 / 2620

874 ExtremeWare 7.7 Command Reference Guide
Security Commands
configure cpu-dos-protect (Port-Based)
configure cpu-dos-protect [ports <portnumber> |all] alert-threshold <pkts>
interval-time <seconds>
Description
Sets the maximum allowed limit before invoking denial of service (DoS) protection and discarding
packets.
NOTE
This command is available only on the “e” series switches.
Syntax Description
Default
All ports are disabled for DoS protection.
Usage Guidelines
Use this command to set thresholds beyond which broadcasts are blocked on specified ports. You can
also use it to identify layer 3 misses to the CPU or when too many IP multicasts are coming on a port.
Examples
The following example configures an alert threshold of 500 packets on port 8 every 3 seconds:
config cpu-dos-protect port 8 disable alert-threshold 500 interval-time 3
History
This command was first introduced in ExtremeWare 7.2e.
Platform Availability
This command is available on “e” series platforms only.
portnumber Specifies one or more port numbers. May be in the form 1, 2, 3-5.
pkts Configures the maximum number of packets, or threshold level, where packets are discarded.
Range is 50 to 20000 packets per second. Default is 150.
seconds Configures a duration in seconds. Range is 1 to 20 seconds. Default is 1 second.