Maipu Administration Guide

Combination of Error-Disable and Storm Suppression

Network Requirements

PC accesses IP Network through Device. On Device, the storm suppression and Error-Disable functions have been enabled.
If a port of a device receives a large number of broadcast packets, you can disable the port via Error-Disable, and Error-Disable can re-enable the port according to the policy.

Network Topology

Networking for Combination of Error-Disable and Storm Suppression

Figure 11-1 Networking for Combination of Error-Disable and Storm Suppression

Configuration Steps

Step 1:Configure a VLAN, and configure the link type of the ports.

#On Device, create VLAN2.

Device#configure terminal
Device(config)#vlan 2
Device(config-vlan2)#exit

#On Device, configure the link type of port gigabitethernet0/1 to Access and allow services of VLAN2 to pass.

Device(config)#interface gigabitethernet 0/1
Device(config-if-gigabitethernet0/1)#switchport mode access
Device(config-if-gigabitethernet0/1)#switchport access vlan 2
Device(config-if-gigabitethernet0/1)#exit

Step 2: Configure the storm suppression function.

#On port gigabitethernet0/1 of Device, enable the storm suppression function, and the pps mode is used to suppress broadcast packets, and the suppression rate is 20pps. During the storm, shut down the port.

Device(config)#interface gigabitethernet 0/1
Device(config-if-gigabitethernet0/1)#storm-control action shutdown
Device(config-if-gigabitethernet0/1)#storm-control broadcast pps 20
Device(config-if-gigabitethernet0/1)#exit

Step 3: Configure the Error-Disable function.

#Enable the storm suppression recovery function in Error-Disable, and set the recovery time to 30 seconds.

Device(config)#errdisable recovery cause storm-control
Device(config)#errdisable recovery interval 30

Step 4: Check the result.

#Query the configuration related to Error-Disable.

Device#show errdisable recovery 
Error disable auto recovery config
interval:30 seconds 
ErrDisable Reason      Timer Status 
------------------     -----------------   
bpduguard              Disabled
dai                    Disabled
dhcp-snooping          Disabled
eips-udld              Disabled
l2pt                   Disabled
link-flap              Enabled
loopback-detect        Disabled
oam                    Disabled
port-security          Disabled
storm-control          Enabled
ulfd                   Disabled
transceiver-power-low  Disabled

#When PC sends a large number of broadcast packets, port gigabitethernet0/1 is closed, and the following information is printed:

Nov 24 2014 15:37:13: %STORM_CONTROL-3: A storm detected on interface gigabitethernet0/1, ActionType:shutdown, StormType: broadcast storm
Nov 24 2014 15:37:13: %PORTMGR-LINEPROTO_DOWN-3: Line protocol on interface gigabitethernet0/1, changed state to down

#Query the status of port gigabitethernet0/1.

Device#show interface gigabitethernet 0/1 
gigabitethernet0/1 configuration information 
        Description      :  
        Status           : Enabled 
        Link             : Down (Err-disabled) 
        Set Speed        : Auto 
        Act Speed        : Unknown 
        Set Duplex       : Auto 
        Act Duplex       : Unknown 
        Set Flow Control : Off 
        Act Flow Control : Off 
        Mdix             : Auto 
        Mtu              : 1824 
        Port mode        : LAN 
        Port ability     : 10M FD, 100M FD,1000M FD 
        Link Delay       : No Delay 
        Storm Control    : Unicast Pps 1500 
        Storm Control    : Broadcast Pps 20 
        Storm Control    : Multicast Pps 1500 
        Storm Action     : Shutdown 
        Port Type        : Nni 
        Pvid             : 2 
        Set Medium       : Copper 
        Act Medium       : Copper 
        Mac Address        0001.7a54.5ca5

#After 30s, enable the port gigabitethernet0/1and print the following prompt information.

Nov 24 2014 15:37:43: %PORTMGR-AUTO_RECOVERY-5: auto recovery timer expired on interface gigabitethernet0/1, module: STROM CONTROL ACTION.
Nov 24 2014 15:37:45: %PORTMGR-LINEPROTO_UP-5: Line protocol on interface gigabitethernet0/1, changed state to up.