priority

Function

The priority command sets a priority for sending packets to the CPU.

The undo priority command deletes the configuration.

The default priority of protocol packets can be queried using the display cpu-defend statistics command.

Format

priority { user-defined-flow flow-id | index index } { high | low | middle | be | af1 | af2 | af3 | af4 | ef | cs6 | cs7 }

priority { whitelist | blacklist } { high | low | middle | be | af1 | af2 | af3 | af4 | ef | cs6 | cs7 }

priority whitelist-v6 { high | low | middle | be | af1 | af2 | af3 | af4 | ef | cs6 | cs7 }

priority { tcpsyn | fragment } { high | low | middle | be | af1 | af2 | af3 | af4 | ef | cs6 | cs7 }

undo priority { tcpsyn | fragment }

undo priority { user-defined-flow flow-id | index index }

undo priority whitelist-v6

undo priority { whitelist | blacklist }

priority { arp | bfd | bgp | dhcp | dns-client | ftp-server | ftp-client | hwtacacs | icmp | igmp | isis | lacp | ldp | lspping | msdp | ntp | ospf | pim | radius | rip | rsvp | snmp | ssh-server | ssh-client | telnet-client | telnet-server | tftp | vrrp | bpdu | telnetv6-server | telnetv6-client | tftpv6-client | icmpv6 | dnsv6 | pimv6 | sshv6-server | ospfv3 | bgpv6 | ftpv6-client | ftpv6-server | syslog | 802.1ag | arp-miss | ipv4-fib-miss | ipv4-multicast-fib-miss | ipv4-ttl-expire | ipv6-fib-miss | ipv6-nd-miss | ipv6-ttl-expire | lldp | mpls-arp-miss | mpls-ttl-expire | eapol | netstream | rs | ra | ns | na | mld | dhcpv6 | snmpv6 | web | portal | web-auth-server | diameter | openflow | http-redirect-chasten | atm-inarp | unicast-vrrp | soft-gre | traffic-behavior-log | icmp-broadcast-address-echo | mka | web-auth-serverv6 } { high | middle | low | be | af1 | af2 | af3 | af4 | ef | cs6 | cs7 }

undo priority { arp | bfd | bgp | dhcp | dns-client | ftp-server | ftp-client | hwtacacs | icmp | igmp | isis | lacp | ldp | lspping | msdp | ntp | ospf | pim | radius | rip | rsvp | snmp | ssh-server | ssh-client | telnet-client | telnet-server | tftp | vrrp | bpdu | telnetv6-server | telnetv6-client | tftpv6-client | icmpv6 | dnsv6 | pimv6 | sshv6-server | ospfv3 | bgpv6 | ftpv6-client | ftpv6-server | syslog | 802.1ag | arp-miss | ipv4-fib-miss | ipv4-multicast-fib-miss | ipv4-ttl-expire | ipv6-fib-miss | ipv6-nd-miss | ipv6-ttl-expire | lldp | mpls-arp-miss | mpls-ttl-expire | eapol | netstream | rs | ra | ns | na | mld | dhcpv6 | snmpv6 | web | portal | web-auth-server | diameter | openflow | http-redirect-chasten | atm-inarp | unicast-vrrp | soft-gre | traffic-behavior-log | icmp-broadcast-address-echo | mka | web-auth-serverv6 }

Parameters

Parameter Description Value
high

Indicates that the packets to be sent to the CPU enter a queue of a high priority.

-

middle

Indicates that the packets to be sent to the CPU enter a queue of a middle priority.

-

low

Indicates that the packets to be sent to the CPU enter a queue of a low priority.

-

be

Indicates that the packets to be sent to the CPU enter the BE queue of a low priority.

-

af1

Indicates that the packets to be sent to the CPU enter the AF1 queue of a middle priority.

-

af2

Indicates that the packets to be sent to the CPU enter the AF2 queue of a middle priority.

-

af3

Indicates that the packets to be sent to the CPU enter the AF3 queue of a middle priority.

-

af4

Indicates that the packets to be sent to the CPU enter the AF4 queue of a middle priority.

-

ef

Indicates that the packets to be sent to the CPU enter the EF queue of a middle priority.

-

cs6

Indicates that the packets to be sent to the CPU enter the CS6 queue of a high priority.

-

cs7

Indicates that the packets to be sent to the CPU enter the CS7 queue of a high priority.

-

user-defined-flow flow-id

Specifies the ID of a user-defined flow.

The value is an integer ranging from 1 to 64.

index index

Specifies the packet index.

The value is an integer ranging from 35 to 1658.

Views

Attack defense policy view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
cpu-defend write

Usage Guidelines

Usage Scenario

When queues are full of packets to be sent to the CPU, you can run the priority command to set a priority for sending packets in each queue to the CPU. In this manner, packets in the queue of a high priority are first sent to the CPU, thus saving CPU resources.

In VS mode, this command is supported only by the admin VS.

Example

# Set the priority of bgp packets to high in attack defense policy 8.
<HUAWEI> system-view
[~HUAWEI] cpu-defend policy 8
[*HUAWEI-cpu-defend-policy-8] priority bgp high
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >