Configure Customized Rule of CPU Protection
Network Requirements
- Device is directly connected to PC1 and PC2.
- Configure the customized rule of the CPU protection on Device and trap the packet matching the condition to CPU for processing and enter the corresponding queue.
Network Topology
![Networking of configuring the customized rule of the CPU protection](/storage/images/Document/Maipu/security/config-customized-cpu-protection.jpg)
Figure 2–2 Networking of configuring the customized rule of the CPU protection
Configuration Steps
Step 1: Configure VLAN and add the port to the corresponding VLAN. (Omitted)
Step 2: Configure the IP address of the interface. (Omitted)
Step 3: Configure the customized rule of the CPU protection.
#Configure the customized rule and trap the IP packet with destination address 121.5.0.2 to CPU for processing, and set the COS value as 5.
Device#configure terminal
Device(config)#cpu-packet user-define 1 match ether-type ip dst-ip host 121.5.0.2
Device(config)#cpu-packet user-define 1 action trap cos 5
|
Step 4: Check the result.
#View the customized rule on Device.
Device#show cpu-packet udf-table user-define 1
ether-type: 0x0800(IPv4)
dst-ip: host 121.5.0.2
location: global
valid: yes
action: trap
CoS: 5
#When PC1 accesses PC2, the customized rule of the CPU rule takes effect and trap the IP packet with destination address 121.5.0.2 on Device to CPU for processing and enter queue 5.
![note](/storage/images/Document/Maipu/note-icon.jpg)
-
When the customized rule matches other condition and executes other modes, refer to the configuration.