Firewall Policy Storm Control
The firewall maintains
a facility to control packet storms. Storms are packet bombardments
that exceed the high threshold value configured for an interface.
During a storm, packets are throttled until the rate falls below the
configured rate, severely impacting performance for the RF Domain
manager interface. Thresholds are configured in terms of packets per
second.
To define a storm
control configuration for a Firewall policy:
-
Select the
Storm Control tab from the Firewall
Policy configuration page.
Wireless Firewall - Add/Edit - Storm Control
Screen
-
Refer to the Storm Control Settings
field to set the following:
Traffic Type |
Use the drop-down menu to define
the traffic type for which the Storm Control configuration
applies. Options include ARP, Broadcast, Multicast and
Unicast. |
Interface Type |
Use the drop-down menu to define
the interface for which the Storm Control configuration is
applied. Only the specified interface uses the defined
filtering criteria. Options include Ethernet, WLAN and Port
Channel. |
Interface Name |
Use the drop-down menu to refine
the interface selection to a specific WLAN or physical port.
This helps with threshold configuration for potentially
impacted interfaces. |
Packets per Second |
Select the check box to activate
the spinner control used for specifying the packets per
second threshold for activating the Storm Control
mechanism. |
-
Select + Add Row as needed to add
additional Storm Control configurations for other traffic types or interfaces.
Select the
Delete icon as required to remove
selected rows.
-
Refer to the Storm Control Logging
field to define how storm events are logged.
Traffic Type |
Use the drop-down menu to define
the traffic type for which the Storm Control logging
configuration applies. Options include ARP, Broadcast,
Multicast and Unicast. |
Logging |
Select the check box to activate
the spinner control used for specifying the standard log
level used if a Storm Control attack is detected. The
default log level is Warning. |
-
Select + Add Row as needed to add
additional Storm Control log entries for other interfaces.
Select the
Delete icon as required to remove
selected rows.
-
Select OK to update the Storm
Control settings.
Select Reset to revert to the last
saved configuration.