To configure a 7705 SAR security queue policy

Purpose

The security queue policy defines the queue type (Best Effort or Expedited) applied to 7705 SAR ingress traffic to deter DoS-like attacks from overwhelming the control plane, while ensuring that critical control traffic such as signaling is always serviced in a timely manner. These queues are either fixed use (each queue handles a certain type of traffic which is not user-configurable) or fixed configuration (each queue is user-configurable; you can configure the CIR/PIR rate, burst size, and buffering capacity of each queue).

Steps
 

Choose Policies→QoS→SROS QoS→Security Queue from the NFM-P main menu. The Security Queue Policies form opens.


Click Create. The Security Queue Policy, Global Policy (Create) form opens.


Configure the general parameters and click Apply. The form refreshes to enable the other tabs.


Click on the Queue tab. Two default queues appear - Best Effort and Expedited.


Choose a default queue and click Properties.


Configure the MIN and MAX for the CIR (kbps), PIR (kbps), Committed Burst Size (KB), Maximum Buffer Size (KB), and Buffer Size (%), using the sliders.

The sliders are operational when the checkboxes are disabled.


Click Apply to save the policy, or click OK to save the policy and close the form. See To release and distribute a policy to release and distribute the policy to NEs.

End of steps