Configure Storm Control

보통레벨 2수동 검토cisco-nxos

설명

Traffic storm control (also called traffic suppression) allows you to monitor the levels of the incoming broadcast, multicast, and unicast traffic over a 3.9-millisecond interval. During this interval, the traffic level, which is a percentage of the total available bandwidth of the port, is compared with the traffic storm control level that you configured. When the traffic exceeds the configured level, you can configure traffic storm control to perform the following optional corrective actions : Shut down-When ingress traffic exceeds the traffic storm control level that is configured on a port, traffic storm ... CIS assessment: Manual. Reported as SKIP with review instructions.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

CIS assessment: Manual. The storm control levels and measurement methods will vary depending on normal traffic in your environment. Normally the action should be "shutdown", unless the values are in the process of being determined (in which case this is normally set to "trap"). If measuring in percent, remember that these are usually 10Gbps or faster interfaces.

조치 방법

조치 방식: 가이드 또는 인프라 패치

! To set the broadcast limit in percent (multicast limit shown): interface ethernet 1/1 storm-control multicast level 10 or to set in packets per second (broadcast limit shown) storm-control broadcast level pps 8000 Configure to send SNMP trap if a broadcast limit is exceeded storm-control action trap or to place an interface into an ERR-DISABLE state if a broadcast limit is exceeded: storm-control action disable

속성

운영 체제: 모두
태그: cisco-nxosnetworkhardening
참고 자료: CIS Cisco NX-OS Benchmark v1.2.0 - 3.3.2 Configure Storm Control