Understanding the traffic flow specification of the Cisco IPS system

When a traffic analysis problem occurs, such as excessive traffic pressure, poor IPS analysis, and CPU overload, you can configure SNMP to trigger an alarm. When will the alarm be triggered, you need to configure the threshold value for the traffic notification on Cisco IPS, as shown in Figure 5.3:

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/0525211095-0.png "title =" 41.png"/>

Significance of key options:

ÜMissed packets Threshold:The alarm threshold value of the lost packet, such as the CPU load of IPS, cannot analyze the traffic. Because there are too many packets, the packet may be lost at this time, the threshold value is the percentage of dropped packets. When the lost packets reach the defined score ratio, an alarm is triggered.

ÜNotification interval:Indicates the notification interval. By default, the threshold value is checked every 30 seconds.

ÜInterface Idle Threshold:Indicates the idle threshold value of the interface. If the interface is faulty, for example

The Interface Idle Threshold has no data packet traversal before the alarm is triggered. The default value is 30 seconds.

This article is from the "unknown Christ" blog. For more information, contact the author!