32-6
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-06
Chapter 32 Configuring Control-Plane Security
Monitoring Control-Plane Security
To return to the default threshold rate, use the no policer cpu uni global configuration command.
This example shows how to set the CPU protection threshold to 10000 b/s and to verify the configuration.
Switch# config t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# policer cpu uni 10000
Switch(config)# end
Switch# show policer cpu uni-eni rate
CPU UNI/ENI port police rate = 10000 bps
Monitoring Control-Plane Security
You can monitor control-plane security settings and statistics on the switch or on an interface, and you
can clear these statistics at any time. Use the privileged EXEC commands in Table 32-2 to display or
clear this information. For more information about the commands, see the command reference for this
release.
Tab le 32-2 Commands for Monitoring Control-Plane Security
Command Purpose
clear policer cpu uni-eni counters
{classification | drop}Clears all control-plane statistics per feature (classification) or all
statistics maintained by the control-plane policer (drop).
debug platform policer cpu uni-eni Enables debugging of the control-plane policer. This command displays
information messages when any changes are made to CPU protection.
show platform policer cpu {classification |
interface interface-id} Displays control-plane policer information.
• classification—show classification statistics.
• interface interface-id—show policer indexes for the specified
interface.
show policer cpu uni-eni {drop
[policer-number] | rate}Displays CPU policer information for the switch.
• drop [policer-number]—show the number of dropped frames for all
policer numbers or the specified policer number.
• rate—show the configured threshold rate for CPU policers.