32-5
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-06
Chapter 32 Configuring Control-Plane Security Configuring Control-Plane Security
This example shows the default policers assigned to NNIs. Most protocols have no policers assigned to
NNIs. A value of 255 means that no policer is assigned to the port for the protocol.
Switch #show platform policer cpu interface gigabitethernet 0/1
Policers assigned for CPU protection
===================================================================
Feature Policer Physical Asic
Index Policer Num
===================================================================
Gi0/1
STP 1 255 0
LACP 2 255 0
8021X 3 255 0
RSVD_STP 4 255 0
PVST_PLUS 5 255 0
CDP 6 255 0
LLDP 7 255 0
DTP 8 255 0
UDLD 9 255 0
PAGP 10 255 0
VTP 11 255 0
CISCO_L2 12 255 0
KEEPALIVE 13 255 0
CFM 14 255 0
SWITCH_MAC 15 255 0
SWITCH_ROUTER_MAC 16 255 0
SWITCH_IGMP 17 255 0
SWITCH_L2PT 18 255 0
Configuring Control-Plane Security
CPU policers are pre-allocated. You can configure only the rate-limiting threshold. The configured
threshold applies to all supported control protocols on all UNIs and ENIs. It also applies to STP, CDP,
LLDP, LACP, and PAgP when the protocol is enabled on an ENI.
Note During normal Layer 2 operation, you cannot ping the switch through a UNI or ENI. This restriction
does not apply to NNIs. See the “Using Ping” section on page 42-10 for ways to enable ping in a test
situation.
Beginning in privileged EXEC mode, follow these steps to set the threshold rate for CPU protection:
Command Purpose
Step 1 configure terminal Enter global configuration mode.
Step 2 policer cpu uni rate Configure the CPU protection policing threshold rate. The range is
from 8000 to 409500 bits per second (b/s). The default, if none is
configured, is 160000 b/s.
Note The configured rate applies to all supported and enabled
control protocols on all UNIs and ENIs
Step 3 end Return to privileged EXEC mode.
Step 4 show policer cpu uni-eni rate Verify the configured CPU policer rate.
Step 5 copy running-config startup-config (Optional) Save your entries in the configuration file.