![]() The existing Enhanced Subscriber Management (ESM) host lockout mechanism can be enabled on aĭynamic services data trigger capture-sap. Using a lockout mechanism to protect the RADIUS infrastructure from overload because of permanent failing authentications of Python script errors. configureĭynamic service data trigger rate limiting in the control plane (frames dropped at the CPM)Īn overall rate limit of dynamic service data triggers limits the number of frames that come from the different IOMs to an acceptable rate for the control plane to handle.Ĭontrol plane rate-limiting for dynamic service data triggers is always enabled and has no configuration options. In the example below, frames withĮncap 1/1/4:1214.20 is dropped by the VID filter. This can be achieved by applying ingress MAC filters of type VID with theĬapture-sap command. It guarantees fairness between different encapsulation while limiting the frame rate sent to the control plane.īlocking VLANs from authenticating (frames dropped at the IOM) This throttling mechanism is always enabled and has no configuration options. ![]() The per-hash result is that a maximum of 1 frame is forwarded to the control plane. The number of data trigger packets sent to the control plane via the ingress forwarding complex is rate-limited based on a hash using the sap ID, outer tag, and inner tag as the key. Mechanisms are required to prevent overload conditions.Ĭapture-sap data trigger packet throttling (frames dropped at IOM) As a dynamic services data trigger capture-sap potentially forward all validĮthernet frames for authentication to the control plane, control plane protection
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |