The Layer 3 error control feature determines how the switch disposes of Layer packets which the switch considers to be error packets:
With the Layer 3 error control feature disabled, the switch delivers all Layer 3 packets which the switch considers to be error packets (including IP packets with the options field) to the CPU for further processing;
With the Layer 3 error control feature enabled, the switch directly discards all Layer 3 packets which the switch considers to be error packets without delivering them to the CPU.
With the following command, you can enable the Layer 3 error control feature.
Table 1-1 Enable Layer 3 error control
Operation | Command | Remarks |
Enter system view | system-view | — |
Enable Layer 3 error control | system-guard l3err enable | Required Enabled by default |
In normal situations, we recommend that you enable this feature. Because the switch cannot forward error packets and IP packets with the Options field set, delivering all these packets to the CPU will affect the normal work of the CPU.
After the about-mentioned configuration, you can use the display command in any view to view the running conditions of System Guard to verify your System Guard configuration.
Table 1-2 Display System Guard
Operation | Command | Remarks |
View the status of Layer 3 error control | display system-guard l3err state | The display command can be executed in any view |
Syntax
display system-guard l3err state
View
Any view
Parameter
None
Description
Use the display system-guard l3err state command to view the status of Layer 3 error control.
Example
# View the status of Layer 3 error control.
<H3C> display system-guard l3err state
System-guard l3err status: enabled
Syntax
system-guard l3err enable
undo system-guard l3err enable
View
System view
Parameter
None
Description
Use the system-guard l3err enable command to enable Layer 3 error control.
Use the undo system-guard l3err enable command to disable Layer 3 error control.
By default, this feature is enabled.
The Layer 3 error control feature determines how the switch disposes of Layer packets which the switch considers to be error packets:
With the Layer 3 error control feature disabled, the switch delivers all Layer 3 packets which the switch considers to be error packets (including IP packets with the options field) to the CPU for further processing;
With the Layer 3 error control feature enabled, the switch directly discards all Layer 3 packets which the switch considers to be error packets without delivering them to the CPU.
In normal situations, we recommend that you enable this feature. Because the switch cannot forward error packets and IP packets with the Options field set, delivering all these packets to the CPU will affect the normal work of the CPU.
Example
# Enable Layer 3 error control.
<H3C> system-view
System View: return to User View with Ctrl+Z.
[H3C] system-guard l3err enable
