Storm Control over EVC

Transcription

1 This chapter describes and procedures to configure., page 1 Restrictions for, page 1 Configuring, page 2 Examples, page 3 Verification, page 5 Storm control prevents traffic on a LAN from being disrupted by a broadcast, a multicast, or a unicast storm on one of the physical interfaces. A LAN storm occurs when packets flood the LAN, creating excessive traffic, and degrading network performance. Storm-control is supported at EFP level and policing can be applied at the EFP level. Storm control is supported on port channel EVCs. When an EVC moves to the error-disable state, auto-recovery can be configured for storm control after a certain pre-determined interval. Table 1: EFPs Supported Condition Maximum Supported EFPs Both Broadcast and Multicast is applied on same EFP 128 Only Broadcast 256 Only Multicast 256 Restrictions for Storm control over EVC can be configured on connect, cross connect and bridge-domain interfaces. OL

2 Configuring Storm control is supported on port channel EVCs. Storm control over EVC can be configured only for broadcast or multicast packets, not for unicast packets. If storm control is already configured at the port level, you cannot configure storm control over EVC and vice versa. When an EVC moves to the error-disable state, auto-recovery can be configured for storm-control after a certain pre-determined interval. SNMP trap is not supported. If storm control is enabled on a port channel EVC, the configuration is applied per network processor (NP). Only 256 policer profiles are supported per network processor. QoS and storm-control share the same hardware policer resources. Configuring Perform these steps to configure storm control over EVC feature. SUMMARY STEPS 1. enable 2. configure terminal 3. interface gigabitethernet slot/port or interface tengigabitethernet slot/port or interface port-channel 4. service instance id Ethernet 5. encapsulation dot1q vlan-id 6. storm-control {{broadcast multicast} cir cir-value action shutdown 7. bridge-domain bridge-id 8. end DETAILED STEPS Step 1 Step 2 Command or Action enable Switch# enable configure terminal Purpose Enables privileged EXEC mode. Enter your password if prompted. Enters global configuration mode. Switch# configure terminal 2 OL

3 Examples Step 3 Step 4 Command or Action interface gigabitethernet slot/port or interface tengigabitethernet slot/port or interface port-channel Switch(config)# interface gigabitethernet 0/1 service instance id Ethernet Purpose Specifies the gigabit ethernet or the ten gigabit ethernet interface, or port channel to configure. slot/port Specifies the location of the interface. number Specifies the port channel interface. Creates a service instance (an instantiation of an EVC) on the interface. Step 5 Step 6 Switch(config-if)# service instance 101 ethernet encapsulation dot1q vlan-id Switch(config-if-srv)# encapsulation dot1q 100 storm-control {{broadcast multicast} cir cir-value action shutdown Switch(config-if-srv)# storm-control broadcast cir Defines the matching criteria to be used in order to map ingress dot1q frames on an interface to the appropriate service instance. Sets the storm control rate for broadcast or multicast. Enables an action for traffic storm control at the EFP level, such as, shutting down an interface. cir-value - The acceptable range is for a gigabit ethernet interface, and for a ten gigabit interface. The recommended maximum value is up to 98 percent Step 7 Step 8 bridge-domain bridge-id Switch(config-if-srv)# bridge-domain 12 end Switch(config-if-srv)# end Binds the service instance to a bridge domain instance where bridge-id is the identifier. Exits the configuration mode. Note When the ingress packets exceed the configured rate, the EVC moves to error-disable state if the action is configured as shutdown. You can configure the EVC to move to up state after a certain interval using errdisable recovery casue storm-control interval command. The accepted interval varies from 30 to seconds. Examples The following is a basic configuration example: Switch(config)# interface g0/30 Switch(config-if)# no shut Switch(config-if-srv)# encapsulation dot1q 100 Switch(config-if-srv)# storm-control broadcast cir 10m Switch(config-if-srv)# storm-control multicast cir 10m OL

4 Examples Switch(config-if-srv)# bridge-domain 12 Switch# sh running-config interface g0/30 Building configuration... Current configuration : 347 bytes! interface GigabitEthernet0/30 no ip address speed auto duplex auto negotiation auto soak link notification 0 l2protocol peer cdp lacp l2protocol forward stp vtp dtp pagp dot1x service instance 1 ethernet encapsulation dot1q 100 storm-control broadcast cir storm-control multicast cir bridge-domain 12 If action -shut is used errdisable needs to be configured. Note no storm-control action shutdown is not supported. The following example shows how to configure ERR disable: Switch(config)# interface g0/30 Switch(config-if)# no shut Switch(config-if-srv)# encapsulation dot1q 100 Switch(config-if-srv)# storm-control broadcast cir 10m Switch(config-if-srv)# storm-control multicast cir 10m Switch(config-if-srv)# storm-control action shutdown Switch(config-if-srv)# errdisable recovery cause storm-control 30 Switch(config-if-srv)# bridge-domain 12 Switch# sh running-config interface g0/30 Building configuration... Current configuration : 425 bytes! interface GigabitEthernet0/30 no ip address speed auto duplex auto negotiation auto soak link notification 0 l2protocol peer cdp lacp l2protocol forward stp vtp dtp pagp dot1x service instance 1 ethernet encapsulation dot1q 100 storm-control action shutdown storm-control broadcast cir storm-control multicast cir errdisable recovery cause storm-control 30 bridge-domain 12! 4 OL

5 Verification Verification Use the show ethernet service instance id id interface type slot/port stats command to verify the storm control over EVC configuration. Switch# show ethernet service instance id 1204 interface gigabit ethernet 2/7 stats Port maximum number of service instances: 8000 Service Instance 1204, Interface GigabitEthernet2/7 Pkts In Bytes In Pkts Out Bytes Out StormControl Discard Pkts: OL

6 Verification 6 OL