Cpm Filters And Traffic Management - Alcatel-Lucent 7450 System Management Manual

Security

CPM Filters and Traffic Management

Alcatel-Lucent routers have traffic management and queuing hardware dedicated to protecting
the control plane.
CPM/CFM filters are supported on the following platforms: 7950 XRS, 7750 SR-7/SR-12/
SR-c12, and 7710 SR-c4/SR-c12. The filters can be used to drop or accept packets, as well as
allocate dedicated hardware shaping (CPM) queues for traffic directed to the control
processors.
Users can allocate dedicated CPM hardware queues for certain traffic designated to the CPUs
and can set the corresponding rate-limit for the queues. CPM queueing is supported on the
following platforms: 7950 XRS, 7750 SR-7/SR-12, and 7750 SR-c12 (not 7750 SR-1).CPM
filters and CPM queueing are supported on 7450 ESS-6/ESS-7/ESS-12 (not ESS-1).
CPM filters and queues control all traffic going in to the CPM from IOMs/XMAs, including
all routing protocols. CPM filters apply to packets from all network and access ports, but not
to packets from a management Ethernet port. CPM packet filtering and queuing is performed
by network processor hardware using no resources on the main CPUs. CPM filters and queues
are not configurable on one-slot chassis.
There are three filters that can be configured as part of the CPM filter policy: IP (v4) fitter,
IPv6 filter and MAC filter.
The SROS filter implementation exits the filter when the first match is found and execute the
actions according to the specified action. For this reason, entries must be sequenced correctly
from most to least explicit. When both mac-filter and ip-filter/ipv6-filter are to be applied to a
given traffic, mac-filter is applied first.
An entry of an IP(v4), IPv6, MAC CPM filters must have at least one match criteria defined to
be active. A default action can be specified for CPM filter policy that applies to each of IP,
IPv6, MAC filters that are in a no shutdown state as long as the CPM filter policy has at least
one active filter entry in any of the IP(v4), IPv6, and MAC filters.
7450 ESS System Mangement Guide Page 55