5-2Table 5-2 Configure system-guard related parametersOperation Command DescriptionEnter system view system-view —Configuresystem-guard-relatedparameterssystem-guard moderate-limit interval-timethreshold timeoutRequiredThe default system-guard-relatedparameters are as follows.interval-time: 5 secondsthreshold: 64timeout: 60 secondsEnabling System-Guard on PortsTable 5-3 lists the operations to enable system-guard on ports.Table 5-3 Enable system-guard on portsOperation Command DescriptionEnter system view system-view —Enable system-guard onspecified portssystem-guard permitinterface-list RequiredAfter system-guard is enabled on a port, if the number of packets the port received and sent to the CPUin a specified interval exceeds the specified threshold, the system considers that the port is under attackand begins to limit the packet receiving rate on the port (this function is also called inbound rate limit). ifthe rate of incoming packets on the port exceeds the threshold of inbound rate limit, any service packets,including BPDU packets, are possible to be dropped at random, which may result in state transition ofSTP.Displaying and Maintaining the System-Guard FunctionAfter the above configuration, you can display and verify your configuration by performing the operationlisted in Table 5-4.Table 5-4 Display and debug the system-guard functionOperation Command DescriptionDisplay system-guardconfiguration display system-guard config This command can beexecuted in any view.
