Filter
Top Products
DES-7200 Configuration Guide Chapter 7 CPU Protection Configuration
7-1
7 CPU Protection
Configuration
7.1 Overview
7.1.1 Function of CPU Protect
Malicious attacks often occur in networks. By forging a large number of different management
and protocol packets, these attacks make the switch too busy to deal with normal
management and protocol packets, and thus affecting the security and the switch and the
stability of the network at a large extent.
CPU Protect Policy (CPP) can effectively prevent malicious attacks in the network by packet
identification and attack packet suppression, which can:
z Reduce the influence of attack packets on the switch (CPU protection)
z Enable load balance for the packets of different priority queues.
Meanwhile, CPP offers flexible configuration of packet policies for customized configuration
based on real network environments.
7.1.2 Principles of CPU Protect
CPP adopts packet identification, packet bandwidth control, priority queue mapping and queue
scheduling to protect CPU and key packets.
z Packet Identificatioin
Packet identification classifies all the packets sent to the switch for processing, for example,
ARP, BPDU and GVRP and the alike (for details of data classification on various products,
refer to Section CPU Protect Default Value).
z Packet Bandwidth Control
Administrator can configure bandwidth for each type of packets to suppress attack packets at
high rate in the network.
z Priority Queue Mapping
Eight priority queues are supported. You can configure priority queue for each type of packets.
z Queue Scheduling