Policer Cpu Uni - Cisco ME 3400 Command Reference Manual

Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands

policer cpu uni

Use the policer cpu uni global configuration command to enable or disable CPU protection and to
configure the CPU policing threshold for all user network interfaces (UNIs) and enhanced network
interfaces (ENIs) on the switch. Use the no form of this command to return to the default rate or to
disable CPU protection.
Syntax Description all
rate-bps
Defaults
CPU protection is enabled. The default policing threshold is 160000 b/s.
Command Modes
Global configuration
Command History Release
12.2(25)EX
12.2(50)SE
Usage Guidelines
To protect against accidental or intentional CPU overload, the switch automatically provides CPU
protection or control-plane security by dropping or rate-limiting a predefined set of Layer 2 control
packets and some Layer 3 control packets for UNIs and ENIs. The switch pre-allocates 27 control-plane
security policers for CPU protection, numbered 0 to 26. A policer of 26 means a drop policer. A policer
value of 0 to 25 means that the port uses a rate-limiting policer for the control protocol.
CPU policers are pre-allocated. You can configure only the rate-limiting threshold by using the policer
cpu uni rate-bps command. The configured threshold applies to all control protocols and all UNIs and
ENIs.
CPU protection policing uses 19 policers per port, which allows attaching a maximum of 45 ingress
policers to a port. If you need more than 45 policers on a port, you can disable CPU protection by
entering the no cpu policer uni all global configuration command before you attach a policy map with
more than 45 policers. When CPU protection is disabled, you can attach up to 64 ingress policers to a
port.
Note these limitations when you disable CPU protection:
•
OL-9640-10
policer cpu uni {all | rate-bps}
no policer cpu uni {all | rate-bps}
Enter this keyword to enable or disable CPU protection. Disabling CPU
protection allows 64 policers per port instead of 45.
Specify the CPU policing threshold in bits per second (b/s). The range is
8000 to 409500.
Modification
This command was introduced.
The all keyword was added for disabling or enabling CPU protection.
When CPU protection is disabled, you can configure a maximum of 63 policers per port (62 on every
4th port) for user-defined classes, and one for class-default for all switches. Any policy attachment
or change that causes this limit to be exceeded fails with a policer resources exceeded error message.
Cisco ME 3400 Ethernet Access Switch Command Reference
policer cpu uni
2-325