PP8600 - packet rate limiter 1

[Brat2]

Hi all,

I want to surpress excesive packet attacks on my Nortel Pasport 8600 switch. Does anyone know if it is possible to rate limit not only broadcast/multicast packets?

thanks in advance,
brat

 

[anthonyanderberg]

By 'not only bcast/mcast packets' do you mean that you want to limit unicast packets as well?

CP-limit is the way to limit bcast/mcast packets, this CLI command will get you started:
config ethernet 1/1 cp-limit ?

The 8600 can also be configured to limit ARP requests, directed broadcasts, multicast learning, and other things that could be used to DoS the CPU. I'm not sure if you could rate-limit packets to the 8600s IP addresses but I'd bet you could create traffic filters to drop packets from all but a few (known secure) management addresses.