To configure a 7705 SAR security queue policy
Purpose
The security queue policy defines the queue type (Best Effort or Expedited) applied to 7705 SAR ingress traffic to deter DoS-like attacks from overwhelming the control plane, while ensuring that critical control traffic such as signaling is always serviced in a timely manner. These queues are either fixed use (each queue handles a certain type of traffic which is not user-configurable) or fixed configuration (each queue is user-configurable; you can configure the CIR/PIR rate, burst size, and buffering capacity of each queue).
Steps
1 |
Choose Policies→QoS→SROS QoS→Security Queue from the NFM-P main menu. The Security Queue Policies form opens. |
2 |
Click Create. The Security Queue Policy, Global Policy (Create) form opens. |
3 |
Configure the general parameters and click Apply. The form refreshes to enable the other tabs. |
4 |
Click on the Queue tab. Two default queues appear - Best Effort and Expedited. |
5 |
Choose a default queue and click Properties. |
6 |
Configure the MIN and MAX for the CIR (kbps), PIR (kbps), Committed Burst Size (KB), Maximum Buffer Size (KB), and Buffer Size (%), using the sliders. The sliders are operational when the checkboxes are disabled. |
7 |
Click Apply to save the policy, or click OK to save the policy and close the form. See To release and distribute a policy to release and distribute the policy to NEs. End of steps |