Alcatel-Lucent 7450 System Management Manual page 227

trol traffic that is flooded in an R-VPLS instance and also extracted to the CPM such as ARP, ISIS
and VRRP. Centralized per SAP/interface cpu-protection can be employed to rate limit or mark this
traffic if desired.
Explanatory notes for some of the protocols:
"no protocol x" means packets of protocol x are not monitored and not enforced (although they do
count in the fp protocol queue) on the objects to which this dist-cpu-protection policy is assigned,
although the packets will be treated as part of the all-unspecified protocol if the all-unspecified proto-
col is created in the policy.
Default none
Parameters names — Signifies protocol name.
enforcement
Syntax enforcement {static policer-name | dynamic {mon-policer-name | local-mon-bypass}}
Context config>system>security>dist-cpu-protection>policy>protocols
7450 ESS System Mangement Guide
• bfd-cpm: includes all bfd handled on the CPM including cpm-np type, single hop and multi-hop,
and MPLS-TP CC and CV bfd
• dhcp: includes dhcp for IPv4 and IPv6
• eth-cfm: 802.1ag and includes Y.1731. Eth-cfm packets on port and LAG based facility MEPs
are not included (but packets on Tunnel MEPs are).
• icmp: includes IPv4 and IPv6 ICMP except Neighbor Discovery which is classified as a separate
protocol 'ndis'
• isis: includes isis used for SPBM
• ldp: includes ldp and t-ldp
• mpls-ttl: MPLS packets that are extracted due to an expired mpls ttl field
• ndis: IPv6 Neighbor Discovery
• ospf: includes all OSPFv2 and OSPFv3 packets.
• pppoe-pppoa: includes PADx, LCP, PAP/CHAP and NCPs
• all-unspecified: a special 'protocol'. When configured, this treats all extracted control packets
that are not explicitly created in the dist-cpu-protection policy as a single aggregate flow (or "vir-
tual protocol"). It lumps together "all the rest of the control traffic" to allow it to be rate limited
as one flow. It includes all control traffic of all protocols that are extracted and sent to the CPM
(even protocols that cannot be explicitly configured with the distributed cpu protection feature).
Control packets that are both forwarded and copied for extraction are not included. If an operator
later explicitly configures a protocol, then that protocol is suddenly no longer part of the "all-
unspecified" flow. The "all-unspecified" protocol must be explicitly configured in order to oper-
ate.
Values arp|dhcp|http-redirect|icmp|igmp|mld|ndis|pppoe-pppoa|all-unspecified|mpls-
ttl|bfd-cpm|bgp|eth-cfm|isis|ldp|ospf|pim|rsvp.
Security
Page 227