HP ProCurve 9304M Security Manual page 146

Security Guide for ProCurve 9300/9400 Series Routing Switches
Specifying Actions
For the hardware flooding actions, you can specify the number of CAM entries that can be allocated to each kind
of traffic, as well as whether to flood or drop the traffic.
Allocating CAM Entries for Hardware Flooding
To accommodate the hardware flooding/dropping actions, the device allocates Layer 2 CAM entries to match
broadcast traffic, multicast traffic, and unknown unicast traffic. These Layer 2 CAM entries exist in three sections
of Layer 2 CAM space, one section for each type of traffic. By default, each of these sections consist of 256 CAM
entries. You can optionally configure the number of CAM entries allocated for each type of traffic.
For example, to allocate 128 CAM entries for unknown-unicast flooding, enter the following command:
ProCurveRS(config)# cpupro-action hardware unknown-unicast-flooding max-entries 128
Syntax: [no] cpupro-action hardware broadcast-flooding | multicast-flooding | unknown-unicast-flooding
max-entries <entries>
Specifying Whether to Flood or Drop Traffic
When the unknown-unicast, broadcast, or multicast traffic actions are enabled, by default the device forwards the
traffic in hardware, flooding it to all ports in the VLAN. You can optionally configure the device to drop the traffic
instead.
For example, to cause unknown-unicast traffic to be dropped when the device enters exhausted mode, enter the
following command:
ProCurveRS(config)# cpupro-action hardware unknown-unicast-flooding mode drop
Syntax: [no] cpupro-action hardware broadcast-flooding | multicast-flooding | unknown-unicast-flooding
mode flood | drop
Displaying CPU Protection Information
You can display information about the conditions and actions configured on the device.
Displaying Condition Information
To display the CPU protection conditions configured on the device, enter the following command:
ProCurveRS# show l2-cpupro conditions
Condition Configuration:
01: 00000001 Atomic cpu dwm: 90, cwm: 60
02: 00000002 Atomic cam layer2 dwm: 90, cwm: 60
03: 4 Composite or(1,2)
System Condition Monitoring: Normal.
CPU Condition: Normal.
DWM:90 CWM:60 CUR:1 CNT:0
Layer 2 CAM Condition: Normal.
DWM:90 CWM:60 CUR:0 CNT:0
Syntax: show l2-cpupro conditions
Table 8.1 lists the output of the show l2-cpupro condition command.
8 - 4 June 2005