sitesec
CpmCpuProtection

The object defines global DoS Protection parameters.



public class CpmCpuProtection

Properties
cpmProtAllowShamLinkPackets Specifies whether OSPF sham-link traffic will be allowed over VPRN transport tunnels.

type=boolean
default=false
Displayed(tab/group)=Allow Sham Links (NE DoS Protection)

cpmProtBlockPimTunneled Specifies whether to block extraction and processing of arriving PIM packets inside a tunnel on a network interface.

type=boolean
default=false
Displayed(tab/group)=Block PIM Tunneled (NE DoS Protection)

cpmProtDropUncfgdProtocolMsg Specifies the administrative state of the protocol protection facility.

type=netw.AdministrativeState
default=tmnxInService
Displayed(tab/group)=Protection Administrative State (NE DoS Protection)

cpmProtLinkRateLimit Specifies the link-specific packet arrival rate limit to be applied to link-level protocols.

type=long
default=-1
minimum=-1
maximum=65535
units=pps
Displayed(tab/group)=Link Rate Limit (NE DoS Protection)

cpmProtPortOverallRateLimit Specifies the per-port packet arrival rate limit to be applied to all protocol messages that are to be processed by the CPM.

type=long
default=15000
minimum=-1
maximum=65535
units=pps
Displayed(tab/group)=Port Overall Rate Limit (NE DoS Protection)

cpmProtPortRateActionLowPrio Specifies whether to mark packets as low-priority when port-overall-rate-limit specified by cpmProtPortOverallRateLimit is exceeded

type=boolean
default=false
Displayed(tab/group)=Action Low Priority (NE DoS Protection)

ipSrcMonDhcp Specifies whether DHCP protocol should be included for monitoring of source IP.

type=generic.TruthValue
default=true
Displayed(tab/group)=IP Src Monitor DHCP (NE DoS Protection)

ipSrcMonGtp Specifies whether GTP protocol should be included for monitoring of source IP.

type=generic.TruthValue
default=false
Displayed(tab/group)=IP Src Monitor GTP (NE DoS Protection)

ipSrcMonIcmp Specifies whether ICMP protocol should be included for monitoring of source IP.

type=generic.TruthValue
default=false
Displayed(tab/group)=IP Src Monitor ICMP (NE DoS Protection)

ipSrcMonIgmp Specifies whether IGMP protocol should be included for monitoring of source IP.

type=generic.TruthValue
default=false
Displayed(tab/group)=IP Src Monitor IGMP (NE DoS Protection)

  
Properties inherited from ManagedObject
actionMask, children-Set, deploymentState, isFaultSquelched, name, objectFullName, selfAlarmed
 
Supported Network Elements
7750 SR Supported for all versions
  • Excluded chassis types: 7750-SRa4, 7750-SRa8, 7750-SRc12, 7750-SRc4, 7750 SR-1e, 7750 SR-2e, 7750 SR-3e
7705 SAR Gen 2
7705 SAR Hm
7450 ESS
DC VSC
DC 7850
DC 210
DC VSA8
7950 XRS
Product Specifics
7450 ESS 20.0
7450 ESS 21.0
7450 ESS 22.0
7450 ESS 23.0
7450 ESS 24.0
7450 ESS 25.0
7705 SAR Gen 2 25.0
7705 SAR Hm 20.0
7705 SAR Hm 21.0
7705 SAR Hm 22.0
7705 SAR Hm 23.0
7705 SAR Hm 24.0
7705 SAR Hm 25.0
7750 SR 20.0
7750 SR 21.0
7750 SR 22.0
7750 SR 23.0
7750 SR 24.0
7750 SR 25.0
7950 XRS 20.0
7950 XRS 21.0
7950 XRS 22.0
7950 XRS 23.0
7950 XRS 24.0
7950 XRS 25.0
DC 210 20.5
DC 210 5.0
DC 210 6.0
DC 7850 20.0
DC 7850 5.0
DC 7850 6.0
DC VSA8 5.0
DC VSA8 6.0
DC VSC 20.0
DC VSC 5.0
DC VSC 6.0