Configuring the Alarm Function for Packet Discarding

You can set the interval for checking the number of discarded packets and the alarm threshold for the packet discarding rate.

Context

To view the status of a device that drops too many packets, configure the alarm function for packet discarding. When the alarm function is enabled, the router checks the number of the packets dropped within a specified time period. If the number of dropped packets reaches or exceeds the set alarm threshold, an alarm is reported.

In VS mode, this feature is supported only by the admin VS.

Procedure

Run system-view
The system view is displayed.
Run cpu-defend policy policy-number
The attack defense policy view is displayed.
Run alarm drop-rate { application-apperceive | blacklist | index index | ma-defend | tcpip-defend | tcpip-defend-v6 | total-packet | user-defined-flow flow-id | whitelist | whitelist-v6 | urpf | ttl-expired-loop } enable
The alarm for the discarding of the packets sent to the CPU is enabled.
Run alarm drop-rate { application-apperceive | index index | tcpip-defend | tcpip-defend-v6 | user-defined-flow flow-id | whitelist | whitelist-v6 | urpf } { threshold threshold-value | interval interval-value | speed-threshold speed-value } ^*
The alarm threshold of discarding the packets to be sent to the CPU is set.
Run alarm drop-rate ttl-expired-loop { threshold ttl-expired-loop-threshold-value | interval ttl-expired-loop-interval-value }
The alarm parameters are configured for TTL timeout loop detection.
Run commit
The configuration is committed.

The configured alarm threshold and intervals still take effect after the undo alarm drop-rate enable and then alarm drop-rate enable commands are used.