7210 SAS platforms support an extensive set of configurable mechanisms to protect the CPU from being flooded with control or management traffic.
The protection mechanisms are a set of configurable hardware-based filters, classification, queuing, and rate-limiting functions that drop unwanted traffic before it reaches the control processor.
In-band traffic extracted from the line cards to the control processing module (CPM) on chassis-based systems, or extracted from front-panel ports on fixed form-factor devices:
line card or fixed form-factor platform features:
ACLs filters - IPv4, IPv6, and MAC
anti-spoofing, uRPF (supported only on the 7210 SAS-K 3SFP+ 8C)
CPM features:
centralized CPU protection
out-of-band and in-band traffic:
management access filters