Using an IPS Sensor, we can dynamically apply rate limiting/policing on a router interface, based on a signature match or an event action over-ride, which is generated on the sensor appliance. Ok, I know there is no Sensor Appliance in the RS lab, but what if we need to trigger a rate limit of specific traffic, destined to a router, based on current conditions on that router, such as transmit or receive loads on an interface.
This is a job for, da dada dahhh: Embedded Event Manager (EEM). In this example we will create a service policy which we will apply to the control plane based on a interface threshold being exceeded. Full labs on Embedded Event Manager can be found in our RS v5 Vol1 workbook in “System Management“. Let’s break down the individual steps, first for the control plane policing policy, and then the EEM to apply it. Read the rest of this entry »










