No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

ME60 Troubleshooting Guide V1.0 (VRPv8)

This document provides the maintenance guide of the device, including daily maintenance, emergence maintenance, and typical troubleshooting.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
ARP VLAN CAR Troubleshooting

ARP VLAN CAR Troubleshooting

This section provides the troubleshooting flowchart and procedure for ARP VLAN CAR.

Common Causes

This fault is commonly caused by one of the following:

  • ARP VLAN CAR does not take effect.

  • CP CAR does not take effect.

Troubleshooting Procedure

Procedure

  1. Check whether a large number of ARP packets are received to determine whether the ARP attacks are prevented.

    Run the display arp rate-limit interface interface-type interface-number command in any view to check the rate-limit value of ARP packets configured on an interface.

    <HUAWEI> display arp rate-limit interface gigabitethernet 0/1/0   Interface: GigabitEthernet0/1/0      arp rate-limit: 1000 

    Run the display arp packet statistics [ slot slot-id ] command to check statistics on ARP packets. Check the ARP Pkt Received field in the display arp rate-limit interface interface-type interface-number command output. If the value of the field is larger than the configured rate-limit value of ARP packets, the device suffers an ARP attack. It indicates that ARP VLAN CAR does not take effect and needs to be re-configured. Go to step 2.

    If the rate-limit value of ARP packets is too high, change it to a proper value.

    <HUAWEI> display arp packet statistics ARP Pkt Received:   sum     23 ARP-Miss Msg Received:   sum      0 ARP Learnned Count:   sum      8 ARP Pkt Discard For Limit:   sum      5 ARP Pkt Discard For SpeedLimit:   sum      0 ARP Pkt Discard For Other:   sum     10 ARP-Miss Msg Discard For SpeedLimit:   sum      0 ARP-Miss Msg Discard For Other:   sum      0 

  2. Reconfigure ARP VLAN CAR. Check whether ARP attacks occur.

    NOTE:

    For detailed information about ARP VLAN CAR configuration, refer to "ARP Security Configuration" in the Configuration - Security.

    If the fault persists, go to Step 3.

  3. Reconfigure CP CAR. Check whether ARP attacks occur.

    NOTE:

    For detailed information about CP CAR configuration, refer to "Configuring Local Attack Defense" in the Configuration - Security.

    If the fault persists, go to Step 4.

  4. Collect the log, alarm, and configuration information, and contact Huawei technical support personnel.

Relevant Alarms and Logs

None

Translation
Download
Updated: 2019-06-11

Document ID: EDOC1000175918

Views: 13782

Downloads: 257

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next