ECS2020 Series CLI Reference Guide-R04

11 CPU Guard

11.1

Configuration CPU Guard

Configuring each type of packet bandwidth can suppress high-speed attack packets in the network.

cpu-protect

{[

cpu

]}{

bandwidth

}pps_vaule

cpu-protect {[sub-interface]}{[Message_type]}pps pps_value

Cpu Port Bandwidth 1000pps

Cpu Protect Manage Bandwidth 500pps

Cpu Protect Route Bandwidth 200pps

Cpu Protect Protocol Bandwidth 500pps

Global configuration mode

Configures each type of packet bandwidth to inhibit a high rate of attack packets in the

network.

Set the total bandwidth of the cpu:

ECS2020-10P(config)# cpu-protect cpu bandwidth 4000

Set the bandwidth of manage packets:

ECS2020-10P(config)# cpu-protect sub-interface manage pps 600

Parameter

Default

Mode

Usage

Example

Parameter

Description

cpu bandwidth

Set cpu bandwidth (pps)

Sub_interface

Set the type of cpu protected packets

cpu bandwidth pps_value

Set the total bandwidth of the cpu, in the range of

64-4000

message_type

The message types include:manage, protocol, route

Message_type] pps pps_value

Set the bandwidth of each type of packet, in the

range of 1 to 4000