In this section:
The IP Policing Alarm Profile specifies the parameters to determine when alarms associated with IP policing are generated and cleared.
Command Syntax
Use following CLI syntax to configure an IP Policing Alarm Profile. Two default profiles are provided:
defaultSystemMajor
defaultSystemMinor
% set profiles system ipPolicingAlarmProfile <profile_name> aclClearDuration <0-65535 seconds> aclClearThreshold <0-2147483647> aclSetDuration <0-65535 seconds> aclSetThreshold <0-2147483647> aggregateClearDuration <0-65535 seconds> aggregateClearThreshold <0-2147483647> aggregateSetDuration <0-65535 seconds> aggregateSetThreshold <0-2147483647> arpClearDuration <0-65535 seconds> arpClearThreshold <0-2147483647> arpSetDuration <0-65535 seconds> arpSetThreshold <0-2147483647> badEthernetIpHeaderClearDuration <0-65535 seconds> badEthernetIpHeaderClearThreshold <0-2147483647> badEthernetIpHeaderSetDuration <0-65535 seconds> badEthernetIpHeaderSetThreshold <0-2147483647> discardRuleClearDuration <0-65535 seconds> discardRuleClearThreshold <0-2147483647> discardRuleSetDuration <0-65535 seconds> discardRuleSetThreshold <0-2147483647> index <index #> ipSecDecryptClearDuration <0-65535 seconds> ipSecDecryptClearThreshold <0-2147483647> ipSecDecryptSetDuration <0-65535 seconds> ipSecDecryptSetThreshold <0-2147483647> mediaClearDuration <0-65535 seconds> mediaClearThreshold <0-2147483647> mediaSetDuration <0-65535 seconds> mediaSetThreshold <0-2147483647> rogueMediaClearDuration <0-65535 seconds> rogueMediaClearThreshold <0-2147483647> rogueMediaSetDuration <0-65535 seconds> rogueMediaSetThreshold <0-2147483647> srtpDecryptClearDuration srtpDecryptClearThreshold srtpDecryptSetDuration srtpDecryptSetThreshold state <disabled | enabled> uFlowClearDuration <0-65535 seconds> uFlowClearThreshold <0-2147483647 uFlowSetDuration <0-65535 seconds> uFlowSetThreshold <0-2147483647>
Command Parameters
The IP Policing Alarm Profile Parameters are as shown below:
IP Policing Alarm Profile Parameters
Parameter | Length/Range | Default | Description |
---|---|---|---|
| 1-23 | N/A | IP Policing Alarm Profile name. Two default profiles are available as starting point in creating custom profiles:
|
| 0-65535 | 3 | Duration (in seconds) that the access control list policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the access control list policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the access control list policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Specifies the threshold for the access control list policer discard rate (in pkts/sec) which may set an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the aggregate policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the aggregate policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the aggregate policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Specifies the threshold for the aggregate policer discard rate (in pkts/sec) which may set an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the ARP policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the ARP policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the ARP policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-65535 | 3 | Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the bad Ethernet IP header policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Specifies the threshold for the bad Ethernet IP header policer discard rate (in pkts/sec) which may set an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the discard rule discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 10 | Specifies the threshold for the discard rule discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the discard rule discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 20 | Specifies the threshold for the discard rule discard rate (in pkts/sec) which may set an alarm. |
| N/A | 1 | This required parameter is a unique identifier of IP Policing Alarm Profile. |
| 0-65535 | 3 | Duration (in seconds) that the IPSEC decrypt policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the IPSEC decrypt policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the IPSEC decrypt policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Specifies the threshold for the IPSEC decrypt policer discard rate (in pkts/sec) which may set an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the media policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the media policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the media policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Specifies the threshold for the media policer discard rate (in pkts/sec) which may set an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the rogue media policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the rogue media policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the rogue media policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Specifies the threshold for the rogue media policer discard rate (in pkts/sec) which may set an alarm. |
| N/A | N/A | The duration (in seconds) that the IPSEC decrypt policer discard rate must be at or below its clear threshold before an alarm is cleared. |
| N/A | N/A | The threshold for the IPSEC decrypt policer discard rate which may clear an alarm. |
| N/A | N/A | The duration (in seconds) that the IPSEC decrypt policer discard rate must be at or above its set threshold before an alarm is set. |
| N/A | N/A | The threshold for the IPSEC decrypt policer discard rate which may set an alarm. |
| N/A | enabled | Administrative state of the profile.
|
| 0-65535 | 3 | Duration (in seconds) that the micro flow policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared. |
| 0-2147483647 | 20 | Specifies the threshold for the micro flow policer discard rate (in pkts/sec) which may clear an alarm. |
| 0-65535 | 3 | Duration (in seconds) that the micro flow policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set. |
| 0-2147483647 | 100 | Specifies the threshold for the micro flow policer discard rate (in pkts/sec) which may set an alarm. |
Command Example
defaultSystemMajor
% show configuration profiles system ipPolicingAlarmProfile ipPolicingAlarmProfile defaultSystemMajor { index 1; state enabled; badEthernetIpHeaderSetThreshold 100; badEthernetIpHeaderClearThreshold 20; badEthernetIpHeaderSetDuration 3; badEthernetIpHeaderClearDuration 3; arpSetThreshold 100; arpClearThreshold 20; arpSetDuration 3; arpClearDuration 3; uFlowSetThreshold 100; uFlowClearThreshold 20; uFlowSetDuration 3; uFlowClearDuration 3; aclSetThreshold 100; aclClearThreshold 20; aclSetDuration 3; aclClearDuration 3; aggregateSetThreshold 100; aggregateClearThreshold 20; aggregateSetDuration 3; aggregateClearDuration 3; ipSecDecryptSetThreshold 100; ipSecDecryptClearThreshold 20; ipSecDecryptSetDuration 3; ipSecDecryptClearDuration 3; mediaSetThreshold 100; mediaClearThreshold 20; mediaSetDuration 3; mediaClearDuration 3; rogueMediaSetThreshold 100; rogueMediaClearThreshold 20; rogueMediaSetDuration 3; rogueMediaClearDuration 3; srtpDecryptSetThreshold 100; srtpDecryptClearThreshold 20; srtpDecryptSetDuration 3; srtpDecryptClearDuration 3; }
defaultSystemMinor:
% show profiles system ipPolicingAlarmProfile defaultSystemMinor ipPolicingAlarmProfile defaultSystemMinor { index 2; state enabled; badEthernetIpHeaderSetThreshold 20; badEthernetIpHeaderClearThreshold 10; badEthernetIpHeaderSetDuration 3; badEthernetIpHeaderClearDuration 3; arpSetThreshold 20; arpClearThreshold 10; arpSetDuration 3; arpClearDuration 3; uFlowSetThreshold 20; uFlowClearThreshold 10; uFlowSetDuration 3; uFlowClearDuration 3; aclSetThreshold 20; aclClearThreshold 10; aclSetDuration 3; aclClearDuration 3; aggregateSetThreshold 20; aggregateClearThreshold 10; aggregateSetDuration 3; aggregateClearDuration 3; ipSecDecryptSetThreshold 20; ipSecDecryptClearThreshold 10; ipSecDecryptSetDuration 3; ipSecDecryptClearDuration 3; mediaSetThreshold 20; mediaClearThreshold 10; mediaSetDuration 3; mediaClearDuration 3; rogueMediaSetThreshold 20; rogueMediaClearThreshold 10; rogueMediaSetDuration 3; rogueMediaClearDuration 3; srtpDecryptSetThreshold 20; srtpDecryptClearThreshold 10; srtpDecryptSetDuration 3; srtpDecryptClearDuration 3; } [ok][2018-02-04 21:46:26]