Chapter 29
Configuring Control-Plane Security
This example shows how to set the CPU protection threshold to 10000 bps and to verify the
configuration.
Switch# config t
Enter configuration commands, one per line.
Switch(config)# policer cpu uni 10000
Switch(config)# end
Switch# show policer cpu uni rate
CPU UNI port police rate = 10000 bps
Monitoring Control-Plane Security
You can monitor control-plane security settings and statistics on the switch or on an interface, and you
can clear these statistics at any time. Use the privileged EXEC commands in
clear this information. For more information about the commands, see the command reference for this
release.
Table 29-2
Commands for Monitoring Control-Plane Security
Command
clear policer cpu uni counters {classification |
drop}
debug platform policer cpu uni
show platform policer cpu {classification |
interface interface-id}
show policer cpu uni {drop [policer-number] |
rate}
78-17058-01
End with CNTL/Z.
Purpose
Clears all control-plane statistics per feature (classification) or all
statistics maintained by the control-plane policer (drop).
Enables debugging of the control-plane policer. This command displays
information messages when any changes are made to CPU protection.
Displays control-plane policer information.
classification—show classification statistics.
•
interface interface-id—show policer indexes for the specified
•
interface.
Displays CPU policer information for the switch.
drop [policer-number]—show the number of dropped frames for all
•
policer numbers or the specified policer number.
rate—show the configured threshold rate for CPU policers.
•
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
Monitoring Control-Plane Security
Table 29-2
to display or
29-5