ZyXEL Communications XS3800-28, User Manual, Page: 599 / 789

Chapter 81 Error-Disable
XS3800-28 User’s Guide
599
81.3 CPU Protection Setup
Use this screen to limit the maximum number of control packets (ARP, BPDU and/or IGMP) that the
Switch can receive or transmit on a port. Click
SECURITY > Errdisable > CPU Protection to display the
screen as shown.
Note: After you configure this screen, make sure you also enable error detection for the
specific control packets in the SECURITY > Errdisable > Errdisable Detect screen.
SLOT This field appears only in Stacking mode. Click the drop-down list to choose the slot number of
the Switch in a stack.
Port This field displays the port number. In Stacking mode, the first number represents the slot ID and
the second is the port number. Please note that the default stacking ports (the last four ports of
your Switch) cannot be configured. They are reserved for stacking only.
Cause This displays the type of the control packet received on the port or the feature enabled on the
port and causing the Switch to take the specified action.
Active This field displays whether the control packets (ARP, BPDU, and/or IGMP) on the port is being
detected or not. It also shows whether loop guard, anti-arp scanning, BPDU guard or ZULD is
enabled on the port.
Mode This field shows the action that the Switch takes for the cause.
• inactive-port – The Switch disables the port.
• inactive-reason – The Switch drops all the specified control packets (such as BPDU) on the
port.
• rate-limitation – The Switch drops the additional control packets the ports has to handle in
every one second.
Rate This field displays how many control packets this port can receive or transmit per second. It can
be adjusted in
CPU Protection . 0 means no rate limit.
Status This field displays the errdisable status.
• Forwarding : The Switch is forwarding packets. Rate-limitation mode is always in Forwarding
status.
• Err-disable : The Switch disables the port on which the control packets are received
( inactive-port ) or drops specified control packets on the port ( inactive-reason ).
Recovery
Time Left
(secs)
This field displays the time (seconds) left before the ports becomes active of Errdisable
Recovery.
Total
Dropped
This field displays the total packet number dropped by this port where the packet rate exceeds
the rate of mode rate-limitation.
Table 319 SECURITY > Errdisable > Errdisable Status (continued)
LABEL DESCRIPTION