7210 SAS platforms support an extensive set of configurable mechanisms to protect the CPU from being flooded with control or management traffic.
These protection mechanisms are a set of configurable hardware-based filters, classification, queuing, and rate-limiting functions that drop unwanted traffic before it reaches the control processor:
In-band traffic extracted from line cards to the control processing module (CPM) on chassis-based systems, or extracted from front-panel ports on fixed form-factor devices:
Line card or fixed form-factor platform features:
ACLs filters: IPv4, IPv6, and MAC
Distributed CPU protection (supported only on the 7210 SAS-R6 and 7210 SAS-R12)
CPM features:
Centralized CPU protection
Out-band and in-band traffic: management access filters