display cpu-defend configuration
Format
The stack-incapable models support the following commands:
display cpu-defend configuration [ packet-type packet-type ] [ all | slot slot-id ]
Other models support the following format:
display cpu-defend configuration [ packet-type packet-type ] { all | slot slot-id | mcu }
Parameters
Parameter |
Description |
Value |
|---|---|---|
packet-type packet-type |
Specifies a packet type. |
The supported packet type depends on the device. NOTE:
The CAR configuration information about packet type IPv6 FTP is displayed when the packet type ftp is specified in the command. |
all |
Indicates all devices. |
- |
slot slot-id |
|
The value must be set according to the device configuration. |
mcu |
Indicates the main control board. |
- |
Usage Guidelines
You can run the display cpu-defend configuration command to view the rate limit of protocol packets sent to the CPU. By default, the rate limit of protocol packets in the default policy is displayed.
In a stack, you can run the cpu-defend-policy global command to bind all switches to the same attack defense policy. Then you can run the display cpu-defend configuration all command to view the same CAR configuration of all switches in the stack.
Example
<HUAWEI> display cpu-defend configuration all
Car configurations on mainboard.
----------------------------------------------------------------------
Packet Name Status Cir(Kbps) Cbs(Byte)
----------------------------------------------------------------------
arp-miss Enabled 64 12032
arp-reply Enabled 256 48128
arp-request Enabled 256 48128
bgp Enabled 384 72192
bgp4plus Enabled 256 48128
dhcpv6-reply Enabled 256 48128
dhcpv6-request Enabled 256 48128
dns Enabled 64 12032
fib-hit Enabled 64 12032
fib-miss Enabled 64 12032
ftp Enabled 512 96256
hop-limit Enabled 64 12032
http Enabled 512 96256
https Enabled 512 96256
hw-tacacs Enabled 128 24064
icmp Enabled 128 24064
icmpv6 Enabled 64 12032
igmp Enabled 256 48128
ip-cloud Enabled 128 24064
isis Enabled 256 48128
mdns-relay Enabled 256 48128
mld Enabled 256 48128
mpls-fib-hit Enabled 256 48128
mpls-ldp Enabled 512 96256
mpls-one-label Enabled 128 24064
mpls-ping Enabled 128 24064
mpls-rsvp Enabled 128 24064
mpls-ttl-expired Enabled 128 24064
mpls-vccv-ping Enabled 128 24064
nac-arp-reply Enabled 128 24064
nac-arp-request Enabled 128 24064
nac-nd Enabled 64 12032
nd Enabled 128 24064
ntp Enabled 128 24064
ospf Enabled 384 72192
ospfv3 Enabled 384 72192
pim Enabled 256 48128
pimv6 Enabled 128 24064
portal Enabled 128 24064
radius Enabled 128 24064
rip Enabled 256 48128
ripng Enabled 256 48128
snmp Enabled 128 24064
ssh Enabled 128 24064
tcp Enabled 64 12032
telnet Enabled 128 24064
ttl-expired Enabled 64 12032
vrrp Enabled 128 24064
vrrp6 Enabled 128 24064
----------------------------------------------------------------------
Linkup Information:
--------------------------------------------------------------------------------
Packet Name : ftp
Cir(Kbps)/Cbs(Byte) : 4096/770048
SIP(SMAC) : 10.1.2.1
DIP(DMAC) : 10.1.3.1
Port(S/C) : 42372/22
--------------------------------------------------------------------------------
Car configurations on slot 0.
----------------------------------------------------------------------
Packet Name Status Cir(Kbps) Cbs(Byte) Queue Port-Type
----------------------------------------------------------------------
8021x Disabled 128 24064 3 NA
arp-mff Disabled 64 12032 3 NA
arp-miss Enabled 64 12032 3 NA
arp-reply Enabled 128 24064 3 UNI
arp-request Enabled 128 24064 3 UNI
bfd Disabled 64 12032 5 NNI
bgp Enabled 256 48128 5 NA
bgp4plus Enabled 128 24064 5 NA
bpdu-tunnel Disabled 64 12032 5 NA
cdp Disabled 128 24064 5 NA
dhcp-client Enabled 512 96256 3 NNI
dhcp-server Enabled 512 96256 3 UNI
dhcpv6-reply Enabled 256 48128 3 NNI
dhcpv6-request Enabled 256 48128 3 UNI
dldp Disabled 128 24064 5 NA
dns Enabled 64 12032 5 NA
easy-operation Disabled 128 24064 3 NA
eoam-1ag Disabled 256 48128 5 NA
eoam-1ag-lblt Disabled 128 24064 5 NA
eoam-3ah Disabled 64 12032 5 NA
erps-port Disabled 64 12032 5 NA
fib-hit Enabled 64 12032 3 NA
fib-miss Disabled 64 12032 3 UNI
ftp Enabled 64 12032 3 NA
gre-keepalive Enabled 64 12032 5 NA
gvrp Disabled 128 24064 5 NA
hop-limit Enabled 64 12032 2 NNI
http Enabled 64 12032 3 NA
https Enabled 64 12032 3 NA
hw-tacacs Enabled 64 12032 3 NNI
icmp Enabled 128 24064 3 UNI
icmp-ttl-expired Disabled 0 0 3 UNI
icmpv6 Enabled 64 12032 3 NNI
igmp Enabled 128 24064 3 NA
ip-cloud Disabled 64 12032 3 NA
ipsec-ah Disabled 256 48128 5 NA
ipsec-esp Disabled 256 48128 5 NA
isis Disabled 256 48128 5 NNI
lacp Disabled 128 24064 7 NA
ldt Enabled 64 12032 5 NA
lldp Disabled 128 24064 5 NA
lnp Enabled 128 24064 5 NA
loopbacktest Disabled 64 12032 5 NA
mad Disabled 128 24064 5 NA
mdns-relay Disabled 256 48128 5 NA
mld Disabled 128 24064 3 NNI
mpls-fib-hit Enabled 128 24064 5 NA
mpls-ldp Enabled 256 48128 5 NA
mpls-one-label Enabled 128 24064 3 NA
mpls-ping Enabled 64 12032 5 NA
mpls-rsvp Enabled 128 24064 5 NA
mpls-ttl-expired Enabled 128 24064 5 NA
mpls-vccv-ping Disabled 128 24064 3 NA
nac-arp-reply Disabled 64 12032 3 NA
nac-arp-request Disabled 64 12032 3 NA
nac-dhcp Disabled 256 48128 3 NA
nac-dhcpv6 Disabled 256 48128 3 NA
nac-nd Disabled 64 12032 3 NA
nd Enabled 64 12032 5 UNI
ntdp Enabled 128 24064 5 NA
ntp Enabled 64 12032 5 NNI
ospf Disabled 256 48128 5 NNI
ospf-hello Disabled 256 48128 5 NNI
ospfv3 Disabled 256 48128 5 NNI
pim Enabled 128 24064 5 NNI
pimv6 Disabled 64 12032 5 NNI
portal Enabled 64 12032 3 NNI
pppoe Disabled 128 24064 3 NA
radius Enabled 64 12032 3 NNI
rip Disabled 128 24064 5 NNI
ripng Disabled 256 48128 5 NNI
rrpp Disabled 64 12032 5 NA
sep-global Disabled 128 24064 5 NA
sep-port Disabled 128 24064 5 NA
smart-link Disabled 64 12032 5 NA
snmp Enabled 128 24064 3 NNI
ssh Enabled 64 12032 5 NNI
stp Disabled 64 12032 5 NA
tcp Enabled 64 12032 3 NA
telnet Enabled 64 12032 5 NA
ttl-expired Enabled 64 12032 2 NA
udp-helper Disabled 64 12032 3 NA
vbst Disabled 64 12032 5 NA
vbst-trunk Disabled 64 12032 5 NA
vcmp Enabled 128 24064 3 NA
vpls-igmp Disabled 64 12032 3 NA
vrrp Disabled 64 12032 5 NA
vrrp6 Disabled 64 12032 5 NA
y1731 Disabled 256 48128 5 NA
----------------------------------------------------------------------
Linkup Information:
--------------------------------------------------------------------------------
Packet Name : ftp
Cir(Kbps)/Cbs(Byte) : 4096/770048
SIP(SMAC) : 10.1.2.1
DIP(DMAC) : 10.1.3.1
Port(S/C) : 42372/22
--------------------------------------------------------------------------------
The preceding information is an example. The displayed packet type depends on the actual situation.
Item |
Description |
|---|---|
Car configurations on slot 0 |
CAR configuration of a stack with a specified ID. |
Car configurations on mainboard |
CAR configurations on the device. |
Packet Name |
Packet type. |
Status |
Protocol packet status:
|
Cir(Kbps) |
Committed Information Rate (CIR), in kbit/s. To set the CIR value, run the car and linkup-car commands. |
Cbs(Byte) |
Committed burst size (CBS), in bytes. To configure the CBS value, run the car and linkup-car commands. |
Queue |
Queue that protocol packets are sent to. |
Port-Type |
Port type. The value can be UNI, NNI, or ENI. To configure the port type, run the port type and port-type commands. |
Linkup Information |
Information about the protocol connection.
NOTE:
This information is displayed only when association of protocols is triggered. For the S2720-EI, S5720I-SI, S5720-LI, S5720S-LI, S5720S-SI, S5720-SI, S5730S-EI, S5730-SI, S6720-LI, S6720S-LI, S6720S-SI, and S6720-SI, the linkup information about packet type http is displayed when the packet type fib-hit is specified in the command. |
SIP(SMAC) |
Source IP address or source MAC address. |
DIP(DMAC) |
Destination IP address or destination MAC address. |
Port(S/C) |
Source/Destination port number. |