Cisco Cisco Packet Data Gateway (PDG)

threshold dns-learnt-ip-max-entries

Configures alarm or alert thresholds for the percentage of total DNS-learnt IP entries in relation to the ACS
DNS Snooping feature.

In 16.0 and later releases, this command has been deprecated and replaced by the threshold
dns-learnt-ipv4-max-entries and threshold dns-learnt-ipv6-max-entries commands to configure alarm
or alert thresholds for the percentage of total DNS-learnt IPv4 entries and total DNS-learnt IPv6 entries
respectively.

Important

Product

ACS

Privilege

Security Administrator, Administrator

Command Modes

Exec > Global Configuration

configure

Entering the above command sequence results in the following prompt:

[local]

host_name

(config)#

Syntax Description

threshold dns-learnt-ip-max-entries high_thresh [ clear low_thresh ]
default threshold dns-learnt-ip-max-entries

default

Configures this command with the default threshold setting.

Default: 90 percent. It is the same for both high and low thresholds.

high_thresh

Default: 90 percent

Specifies the high threshold for percentage of total DNS-learnt IP entries. When the percentage of total
DNS-learnt IP entries meets or exceeds the high threshold at the end of the polling interval, an alert or alarm
is generated.

When the percentage of total DNS-learnt IPv4 entries meets or exceeds the high threshold, the
ECSTotalDNSLearntIPv4Threshold trap is generated.

When the percentage of total DNS-learnt IPv6 entries meets or exceeds the high threshold, the
ECSTotalDNSLearntIPv6Threshold trap is generated.

Command Line Interface Reference, Modes G - H, StarOS Release 19

507

Global Configuration Mode Commands (T-threshold phspc)

threshold dns-learnt-ip-max-entries