Optional) Setting The Queue Number For Protocol Packets Sent To The Cpu - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
cpu-defend policy policy-name
The attack defense policy view is displayed.
Step 3 Run:
linkup-car packet-type { bgp | ftp | ospf } cir cir-value [ cbs cbs-value ]
The rate limit for packets of BGP, FTP, or OSPF packets is set.
Step 4 Run:
car packet-type packet-type cir cir-value [ cbs cbs-value ]
The rate limit for packets sent to the CPU is set.
Step 5 Run:
deny packet-type packet-type
The action taken for the packets sent to the CPU is set to deny.
By default, the S3700 limits the rate of packets sent to the CPU. On the S3700, you can use the
display cpu-defend configuration command to view the rate limit configuration for packets
sent to the CPU. If no attack defense policy is applied to the S3700, the display cpu-defend
configuration command displays the default rate limit.
Step 6 Run:
quit
Return to the system view.
Step 7 Run:
cp-car { total | queue queue-index } speed speed-value
The maximum rate of packets sent to the CPU is set.
----End
6.3.5 (Optional) Setting the Queue Number for Protocol Packets
Sent to the CPU
The system schedules packets of queues in a polling manner according to the numbers of the
queues that packets enter, ensuring that packets in each queue are sent at a certain time.
Context
Before packets are sent to the CPU, they are sent to queues of the CPU and scheduled in queues.
Then the packets are processed by the CPU. The scheduling mode of a queue is WRR. For the
details about the scheduling mode, see Congestion Management.
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Local Attack Defense Configuration
181