Configure Cpu-Dos-Protect (Port-Based) - Extreme Networks ExtremeWare Command Reference Manual

Hide thumbs Also See for ExtremeWare:

Table of Contents

Security Commands

configure cpu-dos-protect (Port-Based)

configure cpu-dos-protect [ports <portnumber> |all] alert-threshold <pkts>

interval-time <seconds>

Sets the maximum allowed limit before invoking denial of service (DoS) protection and discarding

This command is available only on the "e" series switches.

Syntax Description

Specifies one or more port numbers. May be in the form 1, 2, 3-5.

Configures the maximum number of packets, or threshold level, where packets are discarded.

Range is 50 to 20000 packets per second. Default is 150.

Configures a duration in seconds. Range is 1 to 20 seconds. Default is 1 second.

All ports are disabled for DoS protection.

Usage Guidelines

Use this command to set thresholds beyond which broadcasts are blocked on specified ports. You can

also use it to identify layer 3 misses to the CPU or when too many IP multicasts are coming on a port.

The following example configures an alert threshold of 500 packets on port 8 every 3 seconds:

config cpu-dos-protect port 8 disable alert-threshold 500 interval-time 3

This command was first introduced in ExtremeWare 7.2e.

Platform Availability

This command is available on "e" series platforms only.

ExtremeWare 7.5 Command Reference Guide

Extremeware 7.5