Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

dealing with small packets

Hi there

My 7206VXR was hit today by a single user sending small packets in high volume. This was UDP, so WRED could not help.

is there any way to drop small packets when they exceed a certain threshold ?

I know I can match on packet length but then can risk to drop legitimate traffic.

TIA

Sam

1 REPLY

Re: dealing with small packets

Sam,

You can police traffic, to set bandwidth limit, based on the host address and packet size. You need a config like the one noted below.

class-map match-all TEST

match access-group 10

match packet length min 64 max 64

!

!

policy-map TEST

class TEST

police 100000

!

access-list 10 permit 172.16.100.100

interface FastEthernet0/0

ip address 172.16.100.1 255.255.255.0

service-policy input TEST

HTH,

Sundar

93
Views
0
Helpful
1
Replies