HP ProCurve 9304M Security Manual page 145

NOTE: To enable hardware flooding on virtual interfaces, see "Enabling Hardware Flooding on Virtual
Routing Interfaces" on page 8-3.
• The following command enables the HP device to automatically take actions when thresholds related to high
CPU usage are exceeded:
ProCurveRS(config)# cpupro-action quick-aging enable
Syntax: [no] cpupro-action hardware-flooding enable
Syntax: [no] cpupro-action quick-aging enable
Use the no form of the command to disable CPU protection.
Enabling Hardware Flooding on Virtual Routing Interfaces
By default, hardware flooding on virtual routing interfaces causes the device to copy packets to the CPU. You can
optionally configure the device to allow hardware flooding without copying packets to the CPU.
To globally allow hardware flooding on virtual routing interfaces and disable the device from copying packets to the
CPU, enter the following command:
ProCurveRS(config)# cpupro-action hardware ve-not-to-cpu
Syntax: [no] cpupro-action hardware ve-not-to-cpu
To allow hardware flooding on a virtual routing interface for VLAN 10 and disable the device from copying packets
to the CPU, enter the following command:
ProCurveRS(config)# vlan 10
ProCurveRS(config-vlan-10)# ve-flooding-not-to-cpu
Syntax: [no] ve-flooding-not-to-cpu
The setting for an individual VLAN overrides the global setting.
Default CPU Protection Conditions and Actions
By default, there are three CPU protection conditions defined on the device:
• Condition 1 is related to CPU usage. The declaring watermark is CPU usage at 90%, and the clearing
watermark is CPU usage at 60%.
• Condition 2 is related to Layer 2, Layer 3, or Layer 4 CAM usage. The declaring watermark is Layer 2 CAM
usage at 90%, and the clearing watermark is Layer 2 CAM usage at 60%.
• Condition 3 is a composite condition that is true If either Condition 1 or Condition 2 are true
Condition 3 is associated with the quick aging, unknown-unicast flooding, multicast flooding, and broadcast
flooding actions. This means that when condition 3 is true, these actions will take place.
Modifying Default Conditions
You can modify the default CPU protection conditions listed above.
For example, to modify the default condition for CPU utilization percentage, enter a command such as the
following:
ProCurveRS(config)# cpupro-condition sys cpu declaring 95 clearing 60
Syntax: [no] cpupro-condition sys cpu declaring <percent> clearing <percent>
To modify the default condition for Layer 2, Layer 3, or Layer 4 CAM usage percentage, enter a command such as
the following:
ProCurveRS(config)# cpupro-condition sys cam declaring 95 clearing 60
Syntax: [no] cpupro-condition sys cam declaring <percent> clearing <percent>
For each condition, the declaring watermark percentage must be higher that the clearing watermark percentage.
June 2005
Configuring CPU Protection
8 - 3