для Cisco Cisco ASR 5700
Global Configuration Mode Commands (T-threshold phspc)
threshold dns-learnt-ipv4-max-entries ▀
Command Line Interface Reference, StarOS Release 17 ▄
5605
threshold dns-learnt-ipv4-max-entries
Configures alarm or alert thresholds for the percentage of total DNS-learnt IPv4 entries in relation to the ACS DNS
Snooping feature.
Snooping feature.
Product
ACS
Privilege
Security Administrator, Administrator
Mode
Exec > Global Configuration
configure
Entering the above command sequence results in the following prompt:
[local]host_name(config)#
Syntax
threshold dns-learnt-ipv4-max-entries high_thresh [ clear low_thresh ]
high_thresh
Specifies the high threshold for percentage of total DNS-learnt IPv4 entries. When the percentage of total
DNS-learnt IPv4 entries meets or exceeds the high threshold at the end of the polling interval, an alert or
alarm is generated.
When the percentage of total DNS-learnt IPv4 entries meets or exceeds the high threshold, the
ECSTotalDNSLearntIPv4Threshold trap is generated.
DNS-learnt IPv4 entries meets or exceeds the high threshold at the end of the polling interval, an alert or
alarm is generated.
When the percentage of total DNS-learnt IPv4 entries meets or exceeds the high threshold, the
ECSTotalDNSLearntIPv4Threshold trap is generated.
high_thresh
is an integer value from 0 through 100. When configured to 0 the threshold is disabled.
Default: 90 percent
clear low_thresh
Specifies the low threshold for percentage of total DNS-learnt IPv4 entries. When the percentage of total
DNS-learnt IPv4 entries goes below the low threshold within the polling interval, a clear alarm is generated.
When the percentage of total DNS-learnt IPv4 entries goes below the low threshold, the
ECSTotalDNSLearntIPv4ThresholdClear trap is generated.
DNS-learnt IPv4 entries goes below the low threshold within the polling interval, a clear alarm is generated.
When the percentage of total DNS-learnt IPv4 entries goes below the low threshold, the
ECSTotalDNSLearntIPv4ThresholdClear trap is generated.
low_thresh
is an integer value from 0 through 100. When configured to 0 the threshold is disabled.
Default: 90 percent
Important:
This value is ignored for the Alert model. In addition, if this value is not configured for the Alarm
model, the system assumes it is identical to the low threshold.
Usage
Use this command to configure thresholds for the percentage of total DNS-learnt IPv4 entries in relation to
the ACS DNS Snooping feature.
Alerts or alarms are triggered based on the following rules:
the ACS DNS Snooping feature.
Alerts or alarms are triggered based on the following rules:
Enter condition: Actual percentage of total DNS-learnt IPv4 entries is greater than or equal to the
specified percentage of total DNS-learnt IPv4 entries.