Prev | Current Page 156 | Next

Yusuf Bhaiji

"Network Security Technologies and Solutions"

As
the port remains in a blocked state, the traffic continues to be dropped until the traffic rate drops below the
suppression level, at which point the port resumes normal traffic forwarding.
To enable the traffic storm-control feature, use the storm-control {broadcast | multicast | unicast}
command from the global configuration mode. By default, storm-control is disabled.
The storm-control action {shutdown | trap} command is used to specify the action to be taken when a
storm is detected. By default, the storm traffic is suppressed when no action is configured.
To verify the storm-control suppression levels configured on an interface, use the show storm-control
[interface] [broadcast | multicast | unicast] command.
Protected Ports (PVLAN Edge)
In some network environments, there is a requirement for no traffic to be seen or forwarded between host(s) on
the same LAN segment, thereby preventing interhost communications. The PVLAN edge feature provisions this
isolation by creating a firewall-like barrier, thereby blocking any unicast, broadcast, or multicast traffic among
the protected ports on the switch. Note that the significance of the protected port feature is limited to the local
switch, and there is no provision in the PVLAN edge feature to isolate traffic between two "protected" ports
located on different switches.


Pages:
144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168