In this section:
The IP Policing Alarm Profile specifies the parameters to determine when alarms associated with IP policing are generated and cleared.
Use following CLI syntax to configure an IP Policing Alarm Profile. Two default profiles are provided:
defaultSystemMajor
defaultSystemMinor
% set profiles system ipPolicingAlarmProfile <profile_name> aclClearDuration <0-65535 seconds> aclClearThreshold <0-2147483647> aclSetDuration <0-65535 seconds> aclSetThreshold <0-2147483647> aggregateClearDuration <0-65535 seconds> aggregateClearThreshold <0-2147483647> aggregateSetDuration <0-65535 seconds> aggregateSetThreshold <0-2147483647> arpClearDuration <0-65535 seconds> arpClearThreshold <0-2147483647> arpSetDuration <0-65535 seconds> arpSetThreshold <0-2147483647> badEthernetIpHeaderClearDuration <0-65535 seconds> badEthernetIpHeaderClearThreshold <0-2147483647> badEthernetIpHeaderSetDuration <0-65535 seconds> badEthernetIpHeaderSetThreshold <0-2147483647> discardRuleClearDuration <0-65535 seconds> discardRuleClearThreshold <0-2147483647> discardRuleSetDuration <0-65535 seconds> discardRuleSetThreshold <0-2147483647> index <index #> ipSecDecryptClearDuration <0-65535 seconds> ipSecDecryptClearThreshold <0-2147483647> ipSecDecryptSetDuration <0-65535 seconds> ipSecDecryptSetThreshold <0-2147483647> mediaClearDuration <0-65535 seconds> mediaClearThreshold <0-2147483647> mediaSetDuration <0-65535 seconds> mediaSetThreshold <0-2147483647> rogueMediaClearDuration <0-65535 seconds> rogueMediaClearThreshold <0-2147483647> rogueMediaSetDuration <0-65535 seconds> rogueMediaSetThreshold <0-2147483647> srtpDecryptClearDuration srtpDecryptClearThreshold srtpDecryptSetDuration srtpDecryptSetThreshold state <disabled | enabled> uFlowClearDuration <0-65535 seconds> uFlowClearThreshold <0-2147483647 uFlowSetDuration <0-65535 seconds> uFlowSetThreshold <0-2147483647>
The IP Policing Alarm Profile Parameters are as shown below:
defaultSystemMajor
% show configuration profiles system ipPolicingAlarmProfile ipPolicingAlarmProfile defaultSystemMajor { index 1; state enabled; badEthernetIpHeaderSetThreshold 100; badEthernetIpHeaderClearThreshold 20; badEthernetIpHeaderSetDuration 3; badEthernetIpHeaderClearDuration 3; arpSetThreshold 100; arpClearThreshold 20; arpSetDuration 3; arpClearDuration 3; uFlowSetThreshold 100; uFlowClearThreshold 20; uFlowSetDuration 3; uFlowClearDuration 3; aclSetThreshold 100; aclClearThreshold 20; aclSetDuration 3; aclClearDuration 3; aggregateSetThreshold 100; aggregateClearThreshold 20; aggregateSetDuration 3; aggregateClearDuration 3; ipSecDecryptSetThreshold 100; ipSecDecryptClearThreshold 20; ipSecDecryptSetDuration 3; ipSecDecryptClearDuration 3; mediaSetThreshold 100; mediaClearThreshold 20; mediaSetDuration 3; mediaClearDuration 3; rogueMediaSetThreshold 100; rogueMediaClearThreshold 20; rogueMediaSetDuration 3; rogueMediaClearDuration 3; srtpDecryptSetThreshold 100; srtpDecryptClearThreshold 20; srtpDecryptSetDuration 3; srtpDecryptClearDuration 3; }
defaultSystemMinor:
% show profiles system ipPolicingAlarmProfile defaultSystemMinor ipPolicingAlarmProfile defaultSystemMinor { index 2; state enabled; badEthernetIpHeaderSetThreshold 20; badEthernetIpHeaderClearThreshold 10; badEthernetIpHeaderSetDuration 3; badEthernetIpHeaderClearDuration 3; arpSetThreshold 20; arpClearThreshold 10; arpSetDuration 3; arpClearDuration 3; uFlowSetThreshold 20; uFlowClearThreshold 10; uFlowSetDuration 3; uFlowClearDuration 3; aclSetThreshold 20; aclClearThreshold 10; aclSetDuration 3; aclClearDuration 3; aggregateSetThreshold 20; aggregateClearThreshold 10; aggregateSetDuration 3; aggregateClearDuration 3; ipSecDecryptSetThreshold 20; ipSecDecryptClearThreshold 10; ipSecDecryptSetDuration 3; ipSecDecryptClearDuration 3; mediaSetThreshold 20; mediaClearThreshold 10; mediaSetDuration 3; mediaClearDuration 3; rogueMediaSetThreshold 20; rogueMediaClearThreshold 10; rogueMediaSetDuration 3; rogueMediaClearDuration 3; srtpDecryptSetThreshold 20; srtpDecryptClearThreshold 10; srtpDecryptSetDuration 3; srtpDecryptClearDuration 3; } [ok][2018-02-04 21:46:26]