Table of Contents
Advertisement
Other Security Features
CPM Filters and Traffic Management
Alcatel-Lucent routers have traffic management and queuing hardware dedicated to protecting
the control plane.
CPM/CFM filters are supported on the following platforms: 7950 SR, 7750 SR-7/SR-12/SR-
c12, and 7710 SR-c4/SR-c12. The filters can be used to drop or accept packets, as well as
allocate dedicated hardware shaping (CPM) queues for traffic directed to the control
processors.
CPM queueing is supported on the following platforms: 7950 SR, 7750 SR-7/SR-12, and
7750 SR-c12 (not 7750 SR-1).
CPM filters and queues control all traffic going in to the CPM from IOMs/XMAs, including
all routing protocols. CPM filters apply to packets from all network and access ports, but not
to packets from a management Ethernet port. CPM packet filtering and queuing is performed
by network processor hardware using no resources on the main CPUs.
There are three filters that can be configured as part of the CPM filter policy: IP (v4) fitter,
IPv6 filter and MAC filter.
The SROS filter implementation exits the filter when the first match is found and execute the
actions according to the specified action. For this reason, entries must be sequenced correctly
from most to least explicit. When both mac-filter and ip-filter/ipv6-filter are to be applied to a
given traffic, mac-filter is applied first.
An entry of an IP(v4), IPv6, MAC CPM filters must have at least one match criteria defined to
be active. A default action can be specified for CPM filter policy that applies to each of IP,
IPv6, MAC filters that are in a no shutdown state as long as the CPM filter policy has at least
one active filter entry in any of the IP(v4), IPv6, and MAC filters.
Page 48
7950 SR OS System Management Guide
Advertisement
Table of Contents
