Operation Manual – 802.1x-System GuardH3C S3100 Series Ethernet Switches Chapter 5 System-Guard Configuration (For S3100-SI)5-25.2.2 Configuring System-Guard-Related ParametersTable 5-2 lists the operations to configure system-guard-related parameters, includingsystem-guard mode, checking interval, threshold (in terms of the number of thereceived packets), and controlling period. Note that the configuration takes effect onlyafter you enable the system-guard function.Table 5-2 Configure system-guard related parametersOperation Command DescriptionEnter system view system-view —Configuresystem-guard-related parameterssystem-guard moderate-limit interval-timethreshold timeoutRequiredThe default system-guard-relatedparameters are as follows.interval-time: 5 secondsthreshold: 64timeout: 60 seconds5.2.3 Enabling System-Guard on PortsTable 5-3 lists the operations to enable system-guard on ports.Table 5-3 Enable system-guard on portsOperation Command DescriptionEnter system view system-view —Enable system-guard onspecified portssystem-guard permitinterface-list RequiredNote:After system-guard is enabled on a port, if the number of packets the port received andsent to the CPU in a specified interval exceeds the specified threshold, the systemconsiders that the port is under attack and begins to limit the packet receiving rate onthe port (this function is also called inbound rate limit). if the rate of incoming packets onthe port exceeds the threshold of inbound rate limit, any service packets, includingBPDU packets, are possible to be dropped at random, which may result in statetransition of STP.
