Guidelines And Limitations For Traffic Storm Control - Cisco Nexus 9000 Series Configuration Manual

Configuring Traffic Storm Control
Product
Cisco
NX-OS

Guidelines and Limitations for Traffic Storm Control

Traffic storm control has the following configuration guidelines and limitations:
• You can configure traffic storm control on a port-channel interface.
• Specify the traffic storm control level as a percentage of the total interface bandwidth:
• For Cisco Nexus 9500 Series switches with 9400 Series line cards, and Cisco Nexus 9300 Series switches,
• Beginning with Cisco Nexus Release 9.2(1), the error margin is greater than 1% when you configure the
• Beginning with Cisco Nexus Release 9.2(1), you can use the percentage of port capacity or
• If you have configured a SVI for the VLAN on Cisco Nexus 9200, 9300-EX platform switches, or on
• For Cisco Nexus NFE2-enabled devices, you can use the storm control-cpu to control the number of
• Local link and hardware limitations prevent storm-control drops from being counted separately. Instead,
• Because of hardware limitations and the method by which packets of different sizes are counted, the
License Requirement
Traffic storm control requires no license. Any feature not included in a license package is
bundled with the nx-os image and is provided at no extra charge to you. For an explanation
of the Cisco NX-OS licensing scheme, see the Cisco NX-OS Licensing Guide.
• The pps range can be from 0 to 200000000.
• The optional fraction of a level can be from 0 to 99.
• 100 percent means no traffic storm control.
• 0.0 percent suppresses all traffic.
you can use the storm control CLI to specify bandwidth level either as a percentage of port capacity or
packets-per-second.
storm control packets-per-seconds as follows:
• Traffic period < 60 s
• Storm control pps <1000
This is applicable only for Cisco Nexus 9336C-FX, Cisco Nexus 93300YC-FX, and Cisco Nexus
93240YC-FX2Z switches.
packets-per-second for the Cisco Nexus 9336C-FX2, Cisco Nexus 93300YC-FX2, and Cisco Nexus
93240YC-FX2-Z switches.
the N9K-X9700-FX3 line cards, storm control broadcast does not work for ARP traffic (ARP request).
ARP packets sent to the CPU.
storm-control drops are counted with other drops in the discards counter.
traffic storm control level percentage is an approximation. Depending on the sizes of the frames that
make up the incoming traffic, the actual enforced level might differ from the configured level by several
percentage points.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Guidelines and Limitations for Traffic Storm Control
433