DGS-6604
m
cpu-protect sub-interface
CLI Reference Guide
135
cpu-protect sub-interface
Use this command to configure the rate-limit for traffic destined to CPU by sub-
interface type.
cpu-protect sub-interface {manage | protocol | route} pps
RATE
no cpu-protect sub-interface {manage | protocol | route}
Default
none
Command Mode
Global Configuration
Usage Guideline
The reasons of packets are destined to CPU can be classified into three groups:
manage
,
protocol
and
route
. The sub-interface is a logical interface, which
handles the CPU received packets by different groups. Generally speaking, the
protocol packets should have higher priority to make sure the functions work
normally. CPU usually does not involve in the routing packets. In few cases, such
as leaning new IP address or default route is not specified, some packets will be
sent to CPU for software routing. The user can use this command to limit the rate
of routed packets to avoid CPU spending too much time for routing packets. The
classification of each protocol type lists at Table 1. When the no-form of this
command is configured, the related counter will reset to zero.
Example
The following example shows how to set rate limit of manage packet group, and
set threshold to 1000 packets per seconds.
The following example shows how to remove rate-limit of management traffic.
Verifying the settings by
show cpu-protect sub-interface
command.
Syntax Description
RATE
Specify the threshold. the unit is packets per second. The valid range is project
dependent. When set to 0, all packets of the specified sub-interface type will be
dropped. The max
RATE
is 2000
Switch(config)# cpu-protect sub-interface manage pps 1000
Switch#
Switch(config)# no cpu-protect sub-interface manage
Switch#