Dos Protection Default Configuration - Cisco 7604 Configuration Manual
Ios software configuration guide
Hide thumbs
Also See for 7604:
- Configuration manual (742 pages) ,
- Installation manual (324 pages) ,
- User manual (98 pages)
Table of Contents
Advertisement
Chapter 36
Configuring Denial of Service Protection
Table 36-2 IPv6 Rate Limiters (continued)
Rate Limiter
Starg-bridge
Starg-M-bridge
You can configure rate limiters for IPv6 multicast traffic using one of the following methods:
•
•
•
This example shows how to set the rate limiters for the IPv6 multicast packets from a directly connected
source:
Router(config)# mls rate-limit multicast ipv6 connected 1500 20
This example shows how to configure a direct association of the rate limiters for a traffic class:
Router(config)# mls rate-limit multicast ipv6 default-drop 1000 20
This example shows how to configure the static sharing of a rate limiter with another preconfigured rate
limiter:
Router(config)# mls rate-limit multicast ipv6 route-cntl share default-drop
This example shows how to enable dynamic sharing for the route control rate limiter:
Router(config)# mls rate-limit multicast ipv6 route-cntl share auto
DoS Protection Default Configuration
Table 36-3
OL-4266-08
Direct association of the rate limiters for a traffic class—Select a rate and associate the rate with a
rate limiter. This example shows how to pick a rate of 1000 pps and 20 packets per burst and
associate the rate with the default-drop rate limiter:
Router(config)# mls rate-limit multicast ipv6 default-drop 1000 20
Static sharing of a rate limiter with another preconfigured rate limiter—When there are not enough
adjacency-based rate limiters available, you can share a rate limiter with an already configured rate
limiter (target rate limiter). This example shows how to share the route-cntl rate limiter with the
default-drop target rate limiter:
Router(config)# mls rate-limit multicast ipv6 route-cntl share default-drop
If the target rate limiter is not configured, a message is displayed that indicates that the target rate
limiter must be configured for it to be shared with other rate limiters.
Dynamic sharing of rate limiters—If you are not sure about which rate limiter to share with, use the
share auto keywords to enable dynamic sharing. When you enable dynamic sharing, the system
selects a preconfigured rate limiter and shares the given rate limiter with the preconfigured rate
limiter. This example shows how to choose dynamic sharing for the route-cntrl rate limiter:
Router(config)# mls rate-limit multicast ipv6 route-cntl share auto
shows the DoS protection default configuration for the PFC3 hardware-based rate limiters.
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
Traffic Classes to be Rate Limited
* (*, G/128) SM
* SM non-rpf traffic when (*, G) exists
* (*, G/m) SM
* (*, FF/8)
* SM non-rpf traffic when (*, G) doesn't exist
DoS Protection Default Configuration
36-21
- Quick Links:
- Supported Hardware and Software
Hide quick links:
Advertisement
Chapters
Table of Contents
