D-Link DXS-3600 Series Cli Reference Manual page 1182

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
RISING-THRESHOLD
FALLING-THRESHOLD
Default
By default, Safeguard Engine is disabled.
By default, the rising threshold of CPU utilization is 50.
By default, the falling threshold of CPU utilization is 20.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
The Safeguard Engine can help the overall operability of the device by minimizing the workload of the
switch while the attack is ongoing, thus making it capable to forward essential packets over its network in
a limited bandwidth. When the CPU utilization of the switch rises over configured rising threshold, it will
enter exhausted mode. In exhausted mode, the switch limits the bandwidth of receiving ARP and
broadcast IP packets.
Example
This example shows how to enable the Safeguard Engine and configure the thresholds, which the rising
and falling threshold are 60 and 40 respectively.
Switch# configure terminal
Switch(config)# cpu-protect safeguard threshold 60 40
Switch(config)#
95-3 cpu-protect sub-interface
This command is used to configure the rate limit for traffic destined to the CPU by sub-interface types.
cpu-protect sub-interface {manage | protocol | route} pps RATE
no cpu-protect sub-interface {manage | protocol | route}
Parameters
sub-interface [manage |
protocol | route]
RATE
Default
None.
Specifies to set a percentage value of the rising CPU utilization which
will trigger the Safeguard Engine function. Once the CPU utilization
rises over the specified percentage, the Safeguard Engine mechanism
will initiate. The valid range is from 20 to 100.
Specifies to set a percentage value of the falling CPU utilization which
will trigger the Safeguard Engine function to cease. Once the CPU
utilization falls to the specified percentage, the Safeguard Engine
mechanism will shut down. The valid range is from 20 to 100.
Specifies the sub-interface type. If no sub-interface is specified then all
sub-interfaces will be configured.
Specifies the threshold value. The unit is packets per second. When
set to 0, all packets of the specified sub-interface type will be dropped.
1177