Zte ZXR10 5900 Series User Manual page 189

Command
ZXR10(config-gei_1/x)#
<protocol name>< alarm-limit >
Command
ZXR10(config-gei_1/x)#
average-rate} mode <protocol name>< rate-limit >
Command
ZXR10(config-gei_1/x)#
is different according to different protocol packets, which can
be viewed by show command.
3. To configure protocol packet alarm threshold, use the following
command.
protocol-protect alarm mode
This command is also configured in the interface mode. It is
used to modify a certain protocol packet alarm threshold in
a certain physical port. When the number of specific protocol
packet exceeds this threshold in 30s, an alarm message is sent
to user. The default value is 3000.
4. To configure protocol packet passing peak/average speed, use
the following command.
protocol-protect {peak-rate |
This command is used to configure peak speed or average
speed of corresponding protocol packet on corresponding port.
The unit is pps, peak speed can be configured 100~1000 and
the default value is 300, average speed can be set 10~600 and
the default is 100.
5. To configure port type, use the following command.
protocol-protect type {nni | uni}
This command is used to configure a certain port type which is
uni or nni. The default is nni.
The above commands
pim igmp icmp arpreply arprequest udld, group mng vbase lldp,
dhcplacpbpdusnmp, nansrars.
When protocol packet is configured discard, even if uploaded to
MUX module, it will be discarded by this module, which leads to
fail to upload to platform. When control-plane-security mod-
ule find that the speed of a certain protocol packet uploading
to platform is too fast, it will send alarm to remind user that
maybe there is a certain protocol packet to attack CPU. When
seeing this alarm, user can configure protocol packet discard
or limit speed to prevent attack from CPU.
Confidential and Proprietary Information of ZTE CORPORATION
Chapter 17 Security Configuration
Function
This configures a certain
protocol packet alarm threshold
as 30s.
The alarm-limit range is
1000-18000.
Function
This configures protocol packet
passing peak/average speed.
Function
This configures the type of a
certain port is uni or nni.
supporting protocol includes:
175