dealing with small packets

[cisco_lad2004]

Hi there

My 7206VXR was hit today by a single user sending small packets in high volume. This was UDP, so WRED could not help.

is there any way to drop small packets when they exceed a certain threshold ?

I know I can match on packet length but then can risk to drop legitimate traffic.

TIA

Sam

[sundar.palaniappan]

Sam,

You can police traffic, to set bandwidth limit, based on the host address and packet size. You need a config like the one noted below.

class-map match-all TEST

match access-group 10

match packet length min 64 max 64

!

!

policy-map TEST

class TEST

police 100000

!

access-list 10 permit 172.16.100.100

interface FastEthernet0/0

ip address 172.16.100.1 255.255.255.0

service-policy input TEST

HTH,

Sundar