In this section:

 

The IP Policing Alarm Profile specifies the parameters to determine when alarms associated with IP policing are generated and cleared.

Command Syntax

Use following CLI syntax to configure an IP Policing Alarm Profile. Two default profiles are provided:

  • defaultSystemMajor
  • defaultSystemMinor
% set profiles system ipPolicingAlarmProfile <profile_name> 
	aclClearDuration <0-65535 seconds> 
	aclClearThreshold <0-2147483647> 
	aclSetDuration <0-65535 seconds> 
	aclSetThreshold <0-2147483647> 
	aggregateClearDuration <0-65535 seconds>
	aggregateClearThreshold <0-2147483647> 
	aggregateSetDuration <0-65535 seconds> 
	aggregateSetThreshold <0-2147483647> 
	arpClearDuration <0-65535 seconds> 
	arpClearThreshold <0-2147483647>
	arpSetDuration <0-65535 seconds> 
	arpSetThreshold <0-2147483647>
	badEthernetIpHeaderClearDuration <0-65535 seconds>
	badEthernetIpHeaderClearThreshold <0-2147483647> 
	badEthernetIpHeaderSetDuration <0-65535 seconds> 
	badEthernetIpHeaderSetThreshold <0-2147483647> 
	discardRuleClearDuration <0-65535 seconds> 
	discardRuleClearThreshold <0-2147483647> 
	discardRuleSetDuration <0-65535 seconds> 
	discardRuleSetThreshold <0-2147483647> 
	index <index #> 
	ipSecDecryptClearDuration <0-65535 seconds> 
	ipSecDecryptClearThreshold <0-2147483647> 
	ipSecDecryptSetDuration <0-65535 seconds>
	ipSecDecryptSetThreshold <0-2147483647> 
	mediaClearDuration <0-65535 seconds>
	mediaClearThreshold <0-2147483647> 
	mediaSetDuration <0-65535 seconds>
	mediaSetThreshold <0-2147483647> 
	rogueMediaClearDuration <0-65535 seconds>
	rogueMediaClearThreshold <0-2147483647> 
	rogueMediaSetDuration <0-65535 seconds> 
	rogueMediaSetThreshold <0-2147483647> 
    srtpDecryptClearDuration
    srtpDecryptClearThreshold
    srtpDecryptSetDuration
    srtpDecryptSetThreshold	
    state <disabled | enabled> 
	uFlowClearDuration <0-65535 seconds> 
	uFlowClearThreshold <0-2147483647 
	uFlowSetDuration <0-65535 seconds> 
	uFlowSetThreshold <0-2147483647>

Command Parameters

The IP Policing Alarm Profile Parameters are as shown below:

IP Policing Alarm Profile Parameters

Parameter

Length/Range

Default

Description

ipPolicingAlarmProfile

1-23

N/A

IP Policing Alarm Profile name. Two default profiles are available as starting point in creating custom profiles:

  • defaultSystemMajor
  • defaultSystemMinor

aclClearDuration

0-65535

3

Duration (in seconds) that the access control list policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

aclClearThreshold

0-2147483647

20

Specifies the threshold for the access control list policer discard rate (in pkts/sec) which may clear an alarm.

aclSetDuration

0-65535

3

Duration (in seconds) that the access control list policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

aclSetThreshold

0-2147483647

100

Specifies the threshold for the access control list policer discard rate (in pkts/sec) which may set an alarm.

aggregateClearDuration

0-65535

3

Duration (in seconds) that the aggregate policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

aggregateClearThreshold

0-2147483647

20

Specifies the threshold for the aggregate policer discard rate (in pkts/sec) which may clear an alarm.

aggregateSetDuration

0-65535

3

Duration (in seconds) that the aggregate policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

aggregateSetThreshold

0-2147483647

100

Specifies the threshold for the aggregate policer discard rate (in pkts/sec) which may set an alarm.

arpClearDuration

0-65535

3

Duration (in seconds) that the ARP policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

arpClearThreshold

0-2147483647

20

Specifies the threshold for the ARP policer discard rate (in pkts/sec) which may clear an alarm.

arpSetDuration

0-65535

3

Duration (in seconds) that the ARP policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

arpSetThreshold

0-2147483647

100

Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

badEthernetIpHeaderClearDuration

0-65535

3

Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

badEthernetIpHeaderClearThreshold

0-2147483647

20

Specifies the threshold for the bad Ethernet IP header policer discard rate (in pkts/sec) which may clear an alarm.

badEthernetIpHeaderSetDuration

0-65535

3

Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

badEthernetIpHeaderSetThreshold

0-2147483647

100

Specifies the threshold for the bad Ethernet IP header policer discard rate (in pkts/sec) which may set an alarm.

discardRuleClearDuration

0-65535

3

Duration (in seconds) that the discard rule discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

discardRuleClearThreshold

0-2147483647

10

Specifies the threshold for the discard rule discard rate (in pkts/sec) which may clear an alarm.

discardRuleSetDuration

0-65535

3

Duration (in seconds) that the discard rule discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

discardRuleSetThreshold

0-2147483647

20

Specifies the threshold for the discard rule discard rate (in pkts/sec) which may set an alarm.

index

N/A

1

This required parameter is a unique identifier of IP Policing Alarm Profile.

ipSecDecryptClearDuration

0-65535

3

Duration (in seconds) that the IPSEC decrypt policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

ipSecDecryptClearThreshold

0-2147483647

20

Specifies the threshold for the IPSEC decrypt policer discard rate (in pkts/sec) which may clear an alarm.

ipSecDecryptSetDuration

0-65535

3

Duration (in seconds) that the IPSEC decrypt policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

ipSecDecryptSetThreshold

0-2147483647

100

Specifies the threshold for the IPSEC decrypt policer discard rate (in pkts/sec) which may set an alarm.

mediaClearDuration

0-65535

3

Duration (in seconds) that the media policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

mediaClearThreshold

0-2147483647

20

Specifies the threshold for the media policer discard rate (in pkts/sec) which may clear an alarm.

mediaSetDuration

0-65535

3

Duration (in seconds) that the media policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

mediaSetThreshold

0-2147483647

100

Specifies the threshold for the media policer discard rate (in pkts/sec) which may set an alarm.

rogueMediaClearDuration

0-65535

3

Duration (in seconds) that the rogue media policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

rogueMediaClearThreshold

0-2147483647

20

Specifies the threshold for the rogue media policer discard rate (in pkts/sec) which may clear an alarm.

rogueMediaSetDuration

0-65535

3

Duration (in seconds) that the rogue media policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

rogueMediaSetThreshold

0-2147483647

100

Specifies the threshold for the rogue media policer discard rate (in pkts/sec) which may set an alarm.

srtpDecryptClearDuration

N/AN/A

The duration (in seconds) that the IPSEC decrypt policer discard rate must be at or below its clear threshold before an alarm is cleared.

srtpDecryptClearThreshold

N/AN/A

The threshold for the IPSEC decrypt policer discard rate which may clear an alarm. 

srtpDecryptSetDuration

N/AN/A

The duration (in seconds) that the IPSEC decrypt policer discard rate must be at or above its set threshold before an alarm is set.

srtpDecryptSetThreshold

N/AN/A The threshold for the IPSEC decrypt policer discard rate which may set an alarm.

state

N/A

enabled

Administrative state of the profile.

  • disabled
  • enabled 

uFlowClearDuration

0-65535

3

Duration (in seconds) that the micro flow policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

uFlowClearThreshold

0-2147483647

20

Specifies the threshold for the micro flow policer discard rate (in pkts/sec) which may clear an alarm.

uFlowSetDuration

0-65535

3

Duration (in seconds) that the micro flow policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

uFlowSetThreshold

0-2147483647

100

Specifies the threshold for the micro flow policer discard rate (in pkts/sec) which may set an alarm.

Command Example

defaultSystemMajor

 % show configuration profiles system ipPolicingAlarmProfile
ipPolicingAlarmProfile defaultSystemMajor {
    index                             1;
    state                             enabled;
    badEthernetIpHeaderSetThreshold   100;
    badEthernetIpHeaderClearThreshold 20;
    badEthernetIpHeaderSetDuration    3;
    badEthernetIpHeaderClearDuration  3;
    arpSetThreshold                   100;
    arpClearThreshold                 20;
    arpSetDuration                    3;
    arpClearDuration                  3;
    uFlowSetThreshold                 100;
    uFlowClearThreshold               20;
    uFlowSetDuration                  3;
    uFlowClearDuration                3;
    aclSetThreshold                   100;
    aclClearThreshold                 20;
    aclSetDuration                    3;
    aclClearDuration                  3;
    aggregateSetThreshold             100;
    aggregateClearThreshold           20;
    aggregateSetDuration              3;
    aggregateClearDuration            3;
    ipSecDecryptSetThreshold          100;
    ipSecDecryptClearThreshold        20;
    ipSecDecryptSetDuration           3;
    ipSecDecryptClearDuration         3;
    mediaSetThreshold                 100;
    mediaClearThreshold               20;
    mediaSetDuration                  3;
    mediaClearDuration                3;
    rogueMediaSetThreshold            100;
    rogueMediaClearThreshold          20;
    rogueMediaSetDuration             3;
    rogueMediaClearDuration           3;
    srtpDecryptSetThreshold           100;
    srtpDecryptClearThreshold         20;
    srtpDecryptSetDuration            3;
    srtpDecryptClearDuration          3;
}

 defaultSystemMinor:

% show profiles system ipPolicingAlarmProfile 
	defaultSystemMinor  
	ipPolicingAlarmProfile defaultSystemMinor {
    index                             2;
    state                             enabled;
    badEthernetIpHeaderSetThreshold   20;
    badEthernetIpHeaderClearThreshold 10;
    badEthernetIpHeaderSetDuration    3;
    badEthernetIpHeaderClearDuration  3;
    arpSetThreshold                   20;
    arpClearThreshold                 10;
    arpSetDuration                    3;
    arpClearDuration                  3;
    uFlowSetThreshold                 20;
    uFlowClearThreshold               10;
    uFlowSetDuration                  3;
    uFlowClearDuration                3;
    aclSetThreshold                   20;
    aclClearThreshold                 10;
    aclSetDuration                    3;
    aclClearDuration                  3;
    aggregateSetThreshold             20;
    aggregateClearThreshold           10;
    aggregateSetDuration              3;
    aggregateClearDuration            3;
    ipSecDecryptSetThreshold          20;
    ipSecDecryptClearThreshold        10;
    ipSecDecryptSetDuration           3;
    ipSecDecryptClearDuration         3;
    mediaSetThreshold                 20;
    mediaClearThreshold               10;
    mediaSetDuration                  3;
    mediaClearDuration                3;
    rogueMediaSetThreshold            20;
    rogueMediaClearThreshold          10;
    rogueMediaSetDuration             3;
    rogueMediaClearDuration           3;
    srtpDecryptSetThreshold           20;
    srtpDecryptClearThreshold         10;
    srtpDecryptSetDuration            3;
    srtpDecryptClearDuration          3;
}
[ok][2018-02-04 21:46:26]

 


  • No labels