In this section:

 

The IP Policing Alarm Profile specifies the parameters to determine when alarms associated with IP policing are generated and cleared.

Command Syntax

Use following CLI syntax to configure an IP Policing Alarm Profile. Two default profiles are provided:

  • defaultSystemMajor
  • defaultSystemMinor
% set profiles system ipPolicingAlarmProfile <profile_name> 
	aclClearDuration <0-65535 seconds> 
	aclClearThreshold <0-2147483647> 
	aclSetDuration <0-65535 seconds> 
	aclSetThreshold <0-2147483647> 
	aggregateClearDuration <0-65535 seconds>
	aggregateClearThreshold <0-2147483647> 
	aggregateSetDuration <0-65535 seconds> 
	aggregateSetThreshold <0-2147483647> 
	arpClearDuration <0-65535 seconds> 
	arpClearThreshold <0-2147483647>
	arpSetDuration <0-65535 seconds> 
	arpSetThreshold <0-2147483647>
	badEthernetIpHeaderClearDuration <0-65535 seconds>
	badEthernetIpHeaderClearThreshold <0-2147483647> 
	badEthernetIpHeaderSetDuration <0-65535 seconds> 
	badEthernetIpHeaderSetThreshold <0-2147483647> 
	discardRuleClearDuration <0-65535 seconds> 
	discardRuleClearThreshold <0-2147483647> 
	discardRuleSetDuration <0-65535 seconds> 
	discardRuleSetThreshold <0-2147483647> 
	index <index #> 
	ipSecDecryptClearDuration <0-65535 seconds> 
	ipSecDecryptClearThreshold <0-2147483647> 
	ipSecDecryptSetDuration <0-65535 seconds>
	ipSecDecryptSetThreshold <0-2147483647> 
	mediaClearDuration <0-65535 seconds>
	mediaClearThreshold <0-2147483647> 
	mediaSetDuration <0-65535 seconds>
	mediaSetThreshold <0-2147483647> 
	rogueMediaClearDuration <0-65535 seconds>
	rogueMediaClearThreshold <0-2147483647> 
	rogueMediaSetDuration <0-65535 seconds> 
	rogueMediaSetThreshold <0-2147483647> 
	state <disabled | enabled> 
	uFlowClearDuration <0-65535 seconds> 
	uFlowClearThreshold <0-2147483647 
	uFlowSetDuration <0-65535 seconds> 
	uFlowSetThreshold <0-2147483647>

Command Parameters

The IP Policing Alarm Profile Parameters are as shown below:

IP Policing Alarm Profile Parameters

Parameter

Length/Range

Default

Description

ipPolicingAlarmProfile

1-23

N/A

IP Policing Alarm Profile name. Two default profiles are available as starting point in creating custom profiles:

  • defaultSystemMajor
  • defaultSystemMinor

aclClearDuration

0-65535

3

Duration (in seconds) that the access control list policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

aclClearThreshold

0-2147483647

20

Specifies the threshold for the access control list policer discard rate (in pkts/sec) which may clear an alarm.

aclSetDuration

0-65535

3

Duration (in seconds) that the access control list policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

aclSetThreshold

0-2147483647

100

Specifies the threshold for the access control list policer discard rate (in pkts/sec) which may set an alarm.

aggregateClearDuration

0-65535

3

Duration (in seconds) that the aggregate policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

aggregateClearThreshold

0-2147483647

20

Specifies the threshold for the aggregate policer discard rate (in pkts/sec) which may clear an alarm.

aggregateSetDuration

0-65535

3

Duration (in seconds) that the aggregate policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

aggregateSetThreshold

0-2147483647

100

Specifies the threshold for the aggregate policer discard rate (in pkts/sec) which may set an alarm.

arpClearDuration

0-65535

3

Duration (in seconds) that the ARP policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

arpClearThreshold

0-2147483647

20

Specifies the threshold for the ARP policer discard rate (in pkts/sec) which may clear an alarm.

arpSetDuration

0-65535

3

Duration (in seconds) that the ARP policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

arpSetThreshold

0-2147483647

100

Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

badEthernetIpHeaderClearDuration

0-65535

3

Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

badEthernetIpHeaderClearThreshold

0-2147483647

20

Specifies the threshold for the bad Ethernet IP header policer discard rate (in pkts/sec) which may clear an alarm.

badEthernetIpHeaderSetDuration

0-65535

3

Duration (in seconds) that the bad Ethernet IP header policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

badEthernetIpHeaderSetThreshold

0-2147483647

100

Specifies the threshold for the bad Ethernet IP header policer discard rate (in pkts/sec) which may set an alarm.

discardRuleClearDuration

0-65535

3

Duration (in seconds) that the discard rule discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

discardRuleClearThreshold

0-2147483647

10

Specifies the threshold for the discard rule discard rate (in pkts/sec) which may clear an alarm.

discardRuleSetDuration

0-65535

3

Duration (in seconds) that the discard rule discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

discardRuleSetThreshold

0-2147483647

20

Specifies the threshold for the discard rule discard rate (in pkts/sec) which may set an alarm.

index

N/A

1

This required parameter is a unique identifier of IP Policing Alarm Profile.

ipSecDecryptClearDuration

0-65535

3

Duration (in seconds) that the IPSEC decrypt policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

ipSecDecryptClearThreshold

0-2147483647

20

Specifies the threshold for the IPSEC decrypt policer discard rate (in pkts/sec) which may clear an alarm.

ipSecDecryptSetDuration

0-65535

3

Duration (in seconds) that the IPSEC decrypt policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

ipSecDecryptSetThreshold

0-2147483647

100

Specifies the threshold for the IPSEC decrypt policer discard rate (in pkts/sec) which may set an alarm.

mediaClearDuration

0-65535

3

Duration (in seconds) that the media policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

mediaClearThreshold

0-2147483647

20

Specifies the threshold for the media policer discard rate (in pkts/sec) which may clear an alarm.

mediaSetDuration

0-65535

3

Duration (in seconds) that the media policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

mediaSetThreshold

0-2147483647

100

Specifies the threshold for the media policer discard rate (in pkts/sec) which may set an alarm.

rogueMediaClearDuration

0-65535

3

Duration (in seconds) that the rogue media policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

rogueMediaClearThreshold

0-2147483647

20

Specifies the threshold for the rogue media policer discard rate (in pkts/sec) which may clear an alarm.

rogueMediaSetDuration

0-65535

3

Duration (in seconds) that the rogue media policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

rogueMediaSetThreshold

0-2147483647

100

Specifies the threshold for the rogue media policer discard rate (in pkts/sec) which may set an alarm.

state

N/A

enabled

Administrative state of the profile.

  • disabled
  • enabled 

uFlowClearDuration

0-65535

3

Duration (in seconds) that the micro flow policer discard rate (in pkts/sec) must be at or below its clear threshold before an alarm is cleared.

uFlowClearThreshold

0-2147483647

20

Specifies the threshold for the micro flow policer discard rate (in pkts/sec) which may clear an alarm.

uFlowSetDuration

0-65535

3

Duration (in seconds) that the micro flow policer discard rate (in pkts/sec) must be at or above its set threshold before an alarm is set.

uFlowSetThreshold

0-2147483647

100

Specifies the threshold for the micro flow policer discard rate (in pkts/sec) which may set an alarm.

Command Example

defaultSystemMajor

 % show profiles system ipPolicingAlarmProfile 
	defaultSystemMajor  
	index 1;  
	state enabled; 
	badEthernetIpHeaderSetThreshold 100;  
	badEthernetIpHeaderClearThreshold 20;  
	badEthernetIpHeaderSetDuration 3;  
	badEthernetIpHeaderClearDuration 3;  
	arpSetThreshold 100;  
	arpClearThreshold 20;  
	arpSetDuration 3;  
	arpClearDuration 3;  
	uFlowSetThreshold 100;  
	uFlowClearThreshold 20;  
	uFlowSetDuration 3;  
	uFlowClearDuration 3;  
	aclSetThreshold 100;  
	aclClearThreshold 20;  
	aclSetDuration 3;  
	aclClearDuration 3;  
	aggregateSetThreshold 100;  
	aggregateClearThreshold 20;  
	aggregateSetDuration 3;  
	aggregateClearDuration 3;  
	ipSecDecryptSetThreshold 100;  
	ipSecDecryptClearThreshold 20;  
	ipSecDecryptSetDuration 3;  
	ipSecDecryptClearDuration 3;  
	mediaSetThreshold 100;  
	mediaClearThreshold 20;  
	mediaSetDuration 3;  
	mediaClearDuration 3;  
	rogueMediaSetThreshold 100;  
	rogueMediaClearThreshold 20;  
	rogueMediaSetDuration 3;  
	rogueMediaClearDuration 3;  
	discardRuleSetThreshold 20;  
	discardRuleClearThreshold 10;  
	discardRuleSetDuration 3;  
	discardRuleClearDuration 3;

 defaultSystemMinor:

% show profiles system ipPolicingAlarmProfile 
	defaultSystemMinor  
	index 1; 
	state enabled;  
	badEthernetIpHeaderSetThreshold 100; 
	badEthernetIpHeaderClearThreshold 20;  
	badEthernetIpHeaderSetDuration 3;  
	badEthernetIpHeaderClearDuration 3; 
	arpSetThreshold 100; 
	arpClearThreshold 20;  
	arpSetDuration 3;  
	arpClearDuration 3;  
	uFlowSetThreshold 20;  
	uFlowClearThreshold 10;  
	uFlowSetDuration 3;  
	uFlowClearDuration 3;  
	aclSetThreshold 100;  
	aclClearThreshold 20;  
	aclSetDuration 3;  
	aclClearDuration 3;  
	aggregateSetThreshold 100;  
	aggregateClearThreshold 20;  
	aggregateSetDuration 3;  
	aggregateClearDuration 3;  
	ipSecDecryptSetThreshold 100;  
	ipSecDecryptClearThreshold 20;  
	ipSecDecryptSetDuration 3;  
	ipSecDecryptClearDuration 3;  
	mediaSetThreshold 100;  
	mediaClearThreshold 20;  
	mediaSetDuration 3;  
	mediaClearDuration 3;  
	rogueMediaSetThreshold 100;  
	rogueMediaClearThreshold 20;  
	rogueMediaSetDuration 3;  
	rogueMediaClearDuration 3;  
	discardRuleSetThreshold 20;  
	discardRuleClearThreshold 10; 
	discardRuleSetDuration 3;  
	discardRuleClearDuration 3;
  • No labels