13.4. CPU Traffic Limit Commands

13.4.1. cpu-traffic-limit total rate

Command Purpose

Use this command to set the total rate of all streams destined to CPU. Use the no form of this command to set the total rate to the default value.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

-

AQ-N5000

7.0

Base

-

AQ-N6000

7.0

Base

-

Command Syntax

cpu-traffic-limit total rate RATE_RANGE

no cpu-traffic-limit total rate

Parameter

Parameter Description

Parameter Value

RATE_RANGE

Rate of all streams destined to CPU in PPS

0 - 1000000

Command Mode

Global Config

Default

2048 PPS

Usage

N/A

Examples

This example shows how to configure cpu-traffic-limit total rate:

Switch# configure terminal
Switch(config)# cpu-traffic-limit total rate 3000

This example shows how to reset cpu-traffic-limit total rate:

Switch# configure terminal
Switch(config)# no cpu-traffic-limit total rate

13.4.2. cpu-traffic-limit reason rate

Command Purpose

Use this command to set the individual limit rate for the stream carried with this reason. Use the no form of this command to set the individual limit rate of the reason to its default value.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

-

AQ-N5000

7.0

Base

-

AQ-N6000

7.0

Base

-

Command Syntax

cpu-traffic-limit reason {bpdu|slow-protocol|eapol|erps|smart-link|arp|dhcp|rip|ldp|ospf|pim|vrrp|ssh|telnet|mlag|tcp|ipda|icmp-redirect|mcast-rpf-fail|macsa-mismatch|port-security-discard|vlan-security-discard|ip-mtu-fail|ip-option|cast-ttl-fail|igmp|sflow-ingress|sflow-egress|fwd-to-cpu|udld|bfd-learning|bgp|dot1x-mac-bypass|egress-ttl-fail|icmpv6|l2protocol-tunnel|loopback-detection|mirror-to-cpu|ndp|tunnel-gre-keepalive} rate RATE_RANGE

no cpu-traffic-limit reason {bpdu|slow-protocol|eapol|erps|smart-link|arp|dhcp|rip|ldp|ospf|pim|vrrp|ssh|telnet|mlag|tcp|ipda|icmp-redirect|mcast-rpf-fail|macsa-mismatch|port-security-discard|vlan-security-discard|ip-mtu-fail|ip-option|ucast-ttl-fail|igmp|sflow-ingress|sflow-egress|fwd-to-cpu|udld|bfd-learning|bgp|dot1x-mac-bypass|egress-ttl-fail|icmpv6|l2protocol-tunnel|loopback-detection|mirror-to-cpu|ndp|tunnel-gre-keepalive} rate

Parameter

Parameter Description

Parameter Value

Bpdu

Reason for BPDU protocols packets (including STP, RSTP, MSTP)

-

Slow-protocol

Reason for slow protocol packets (including EFM, LACP)

-

Eapol

Reason for Dot1x protocol packets

-

Erps

Reason for ERPS protocol packetsReason for ERPS protocol packets

-

Arp

Reason for ARP protocol packets

-

Dhcp

Reason for DHCP protocol packets

-

Rip

Reason for RIP protocol packets

-

Bgp

Reason for BGP protocol packets

-

Ldp

Reason for LDP protocol packets

-

Ospf

Reason for OSPF protocol packets

-

Pim

Reason for PIM protocol packets

-

Vrrp

Reason for VRRP protocol packets

-

Ssh

Reason for SSH protocol packets

-

Telnet

Reason for Telnet protocol packets

-

Mlag

Reason for MLAG protocol packets

-

Tcp

Reason for TCP protocol packets

-

Ipda

Reason for packets with IPDA destination to router itself

-

Icmp-redirect

Reason for redirecting ICMP

-

Mcast_rpf_fail

Reason for multi-cast packets with RPF fail

-

Macsa-mismatch

Reason for packets that are discarded for source MAC is learned from another security port

-

Port-security-discard

Reason for packets that are discarded for FDB number equals to allowed maximum number of security port

-

Vlan-security-discard

Reason for packets that are discarded for FDB number equals to allowed maximum number on the specified VLAN

-

Ip-mtu-fail

IP MTU fail

-

Ip-option

Reason for IP packets with optional fields

-

Ucast-ttl-fail

Reason for ucast IP packets with fail TTL

-

Igmp

Reason for IGMP or IGMP snooping packets

-

Sflow-ingress

Reason for SFlow sampled packets at ingress direction

-

Sflow-egress

Reason for SFlow sampled packets at egress direction

-

Fwd-to-cpu

Reason for packets forwarding to CPU

-

Udld

Reason for packets unidirectional link detection protocol

-

Bfd-learning

Reason for BFD learning packets

-

Dot1x-mac-bypass

Reason for mac auth bypass packets

-

Egress-ttl-fail

Reason for egress TTL fail packet

-

Icmpv6

Reason for ICMPv6 packet

-

L2protocol-tunnel

Reason for layer2 protocol tunnel packet

-

Loopback-detection

Reason for loopback detection packet

-

Mirror-to-cpu

Reason for mirror-to-CPU packet

-

Ndp

Reason for neighbor discovery protocol packet

-

Tunnel-gre-keepalive

Reason for tunnel GRE keepalive reply packet

-

RATE_RANGE

Individual rate of streams destined to CPU carried with the reason in kbps

0 - 1000000

Command Mode

Global Config

Default

Reason

Rate(pps)

Reason

Rate(pps)

BPDU

64

ICMP-redirect

128

Slow-protocol

128

Mcast-RPF-fail

128

EAPOL

128

MACSA-mismatch

128

ERPS

128

Port-security-discard

128

Smart-link

128

VLAN-security-discard

128

ARP

640

UDLD

128

DHCP

128

IP-MTU-fail

64

RIP

64

FWD-to-CPU

64

LDP

512

IP-option

512

OSPF

256

Ucast-TTL-fail

64

VRRP

512

IGMP

128

SSH

64

Telnet

64

MLAG

1024

TCP

64

IPDA

1024

SFlow-ingress

128

SFlow-egress

128

BFD-learning

128

Usage

SSH/Telnet/MLAG is useful when enable cpu-traffic-optimize.

Examples

This example shows how to configure individual rate for BPDU PDU:

Switch# configure terminal
Switch(config)# cpu-traffic-limit reason bpdu rate 300

This example shows how to reset individual rate for BPDU PDU:

Switch# configure terminal
Switch(config)# no cpu-traffic-limit reason bpdu rate

Related Commands

show cpu traffic-limit

13.4.3. cpu-traffic-limit reason class

Command Purpose

Use this command to set the priority class for the stream carried with the reason. Use the no form of this command to set the priority class of the reason to its default value.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

-

AQ-N5000

7.0

Base

-

AQ-N6000

7.0

Base

-

Command Syntax

cpu-traffic-limit reason {bpdu|slow-protocol|eapol|erps|smart-link|arp|dhcp|rip|ldp|ospf|pim|vrrp|ssh|telnet|mlag|tcp|ipda|icmp-redirect|mcast-rpf-fail|macsa-mismatch|port-security-discard|vlan-security-discard|ip-mtu-fail|ip-option|ucast-ttl-fail|igmp|sflow-ingress|sflow-egress|fwd-to-cpu|udld|bfd-learning|bgp|dot1x-mac-bypass|egress-ttl-fail|icmpv6| l2protocol-tunnel|loopback-detection|mirror-to-cpu|ndp|tunnel-gre-keepalive} class CLASS_RANGE

no cpu-traffic-limit reason {bpdu|slow-protocol|eapol|erps|smart-link|arp|dhcp|rip|ldp|ospf|pim|vrrp|ssh|telnet|mlag|tcp|ipda|icmp-redirect|mcast-rpf-fail|macsa-mismatch|port-security-discard|vlan-security-discard|ip-mtu-fail|ip-option|ucast-ttl-fail|igmp|sflow-ingress|sflow-egress|fwd-to-cpu|udld|bfd-learning|bgp|dot1x-mac-bypass|egress-ttl-fail|icmpv6|l2protocol-tunnel|loopback-detection|mirror-to-cpu|ndp|tunnel-gre-keepalive} class

Parameter

Parameter Description

Parameter Value

CLASS_RANGE

Priority of the stream carried with this reason. Reason with class 3 has the highest priority.

0 - 3

Command Mode

Global Config

Default

Reason

class

Reason

class

Bpdu

3

ICMP-redirect

0

Slow-protocol

1

Mcast-RPF-fail

1

Eapol

0

MACSA-mismatch

0

Erps

2

Port-security-discard

0

Smart-link

2

VLAN-security-discard

0

Arp

1

UDLD

3

Dhcp

0

MTU-dontfrag

0

Rip

1

MTU-frag

0

Ldp

1

SFlow-ingress

0

Ospf

1

IP-option

0

Pim

1

Ucast-TTL-fail

0

Igmp

2

SSH

3

Telnet

3

MLAG

1

Tcp

2

IPDA

0

Igmp

2

MLD

2

Sflow-egress

0

Dot1x-mac-bypass

2

Fwd-to-cpu

0

BFD-learning

1

Usage

The reason with the highest priority class will get preference treatment when dealing with scheduling. SSG/Telnet/MLAG is useful when enable cpu-traffic-optimize.

Examples

This example shows how to configure priority class for BPDU:

Switch# configure terminal
Switch(config)# cpu-traffic-limit reason bpdu class 3

Related Commands

show cpu traffic-limit

13.4.4. show cpu traffic-limit

Command Purpose

Use this command to show the CPU traffic-limit configurations.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

-

AQ-N5000

7.0

Base

-

AQ-N6000

7.0

Base

-

Command Syntax

show cpu traffic-limit

Command Mode

Privileged EXEC

Default

None

Usage

None

Examples

This example shows CPU traffic-limit configurations:

DUT2# show cpu traffic-limit
reason rate (pps) class
dot1x-mac-bypass 64 2
bpdu 64 3
slow-protocol 256 1
eapol 128 0
erps 128 3
smart-link 128 2
udld 128 3
loopback-detection 64 3
arp 256 1
dhcp 128 0
rip 64 1
ldp 512 1
ospf 256 1
pim 128 1
bgp 256 1
vrrp 512 1
ndp 64 2
icmpv6 64 2
ssh 64 3
telnet 64 3
mlag 1000 1
tcp 64 2
ipda 1000 0
icmp-redirect 128 0
mcast-rpf-fail 128 1
macsa-mismatch 128 0
port-security-discard 128 0
vlan-security-discard 128 0
egress-ttl-fail 64 0
ip-mtu-fail 64 0
bfd-learning 128 1
ptp 512 2
ip-option 512 0
tunnel-gre-keepalive 64 0
ucast-ttl-fail 64 0
igmp 128 2
sflow-ingress 128 0
sflow-egress 128 0
fwd-to-cpu 64 0
l2protocol-tunnel 1000 0
mirror-to-cpu 1000 0
Total rate: 2048 (pps)

Related Commands

cpu-traffic-limit total rate

cpu-traffic-limit reason rate