Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 616 / 943

Configuration Guide CPU Protection Configuration
CPU Protection Configuration
Overview
Function of CPU Protect
Malicious attacks towards the switch CPU often occur in the network
environment, and such attacks cause too high CPU utilization on the switch and
abnormal operation of it. Ruijie switch provides CPP function to reduce the CPU
load and protect the normal operation.
CPP configuration helps adjust the parameters such as bandwidth, priority level,
for the most detailed management.
Caution
The CPP (CPU Protect Policy) is a means to enhance switch security. With
the CPP, the processor and channel bandwidth resource of the switch are
protected to ensure the normal forwarding of the packets and normal running
of the protocols.
Operating Principles of CPU Protect
The packets to be sent to the CPU of the supervisor engine are classified
according to their L2, L3 and L4 information. The types of packets are different
for L2 and L3 switches.
The CPU ports have eight priority queues. You can configure the queue for
each type of packet and the hardware can automatically send the packets of the
type to the specified queue according to your configuration. To ensure that the
protocol packets with different opriority values can be sent to the CPU in time,
poll scheduling algorithm is adopted. The scheduling weight of each queue are
the same in the poll scheduling algorithm.
The switch provides a protection method to control the bandwidth and priority
for each type of packets sent to the CPU. You can configure the maximum rate
and priority for each type of packet sent to the CPU port in packets per second
(PPS).
Configuring CPU Protect
The following sections describe how to configure CPU Protect.

Configuring the Bandwidth for Each Type of Packet

Configuring the Priority for Each Type of Packet