Cisco Nexus 3600 NX-OS Security Configuration Manual page 144

Configuring a Control Plane Policy Map
Step 5
Step 6
Step 7
Step 8
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
130
Command or Action
• police [cir] {cir-rate [rate-type]} [bc]
burst-size [burst-size-type]
• police [cir] {cir-rate [rate-type]]}
conform transmit [violate drop]
Example:
switch(config-pmap-c)# police cir
52000 bc 1000 packets
Example:
switch(config-pmap-c)# police cir
3400 kbps bc 200 kbytes
logging drop threshold [drop-count [level
syslog-level]]
Example:
switch(config-pmap-c)# logging drop
threshold 100
set cos cos-value
Example:
switch(config-pmap-c)# set cos 1
exit
Example:
switch(config-pmap-c)# exit
switch(config-pmap)#
exit
Example:
switch(config-pmap)# exit
switch(config)#
Configuring Control Plane Policing
Purpose
• 0 to 268435456 pps (for Cisco Nexus 9300 and
9500 Series and 3164Q, 31128PQ, 3232C, and
3264Q switches)
• 0 to 80000000000 bps/gbps/kbps/mbps (for Cisco
Nexus 9200 Series switches)
Beginning with Cisco NX-OS Release
Note
7.0(3)I4(1), the CIR rate range starts with 0.
In previous releases, the CIR rate range starts
with 1. A value of 0 drops the packet.
The committed burst (BC) range is as follows:
• 1 to 1073741 packets (for Cisco Nexus 9300 and
9500 Series and 3164Q, 31128PQ, 3232C, and
3264Q switches)
• 1 to 512000000 bytes/kbytes/mbytes (for Cisco
Nexus 9200 Series switches)
The conform transmit action transmits the packet.
You can specify the BC and conform action
Note
for the same CIR.
(Optional)
Specifies the threshold value for dropped packets and
generates a syslog if the drop count exceeds the
configured threshold. The range for the drop-count
argument is from 1 to 8000000000 bytes. The range
for the syslog-level argument is from 1 to 7, and the
default level is 4.
(Optional)
Specifies the 802.1Q class of service (CoS) value. The
range is from 0 to 7. The default value is 0.
Exits policy map class configuration mode.
Exits policy map configuration mode.