No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Security

S1720, S2700, S5700, and S6720 V200R011C10

This document describes the configurations of Security, including ACL, local attack defense, MFF, attack defense, traffic suppression and storm control, ARP security, Port security, DHCP snooping, ND snooping, PPPoE+, IPSG, SAVI, URPF, keychain, MPAC, separating the management plane from the service plane, security risks, PKI.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Traffic Suppression in a VLAN

Configuring Traffic Suppression in a VLAN

Context

Excess broadcast packets will cause broadcast storms. You can configure traffic suppression for a specified type of packet in a VLAN to limit the rate of these packets.

NOTE:

After traffic suppression is configured in a VLAN, the number of packets that can be transmitted per second in the VLAN depends on the method to calculate the packet length. By default, the device calculates the 20-byte inter-frame gap and preamble. That is, the device calculates the actual packet length plus 20-byte inter-frame gap and preamble.

On the S1720GFR, S1720GW, S1720GWR, S1720X, S1720GW-E, S1720GWR-E, S1720X-E, S2720EI, S2750EI, S5720SI, S5720S-SI, S5730SI, S5730S-EI, S5710-X-LI, S5720LI, S5720S-LI, S5700LI, S5700S-LI, S6720LI, S6720S-LI, S6720SI, and S6720S-SI, if inbound traffic policing on an interface, broadcast traffic suppression in a VLAN, and inbound flow-based traffic policing are configured simultaneously and packets match two or three of the rate limiting rules, the system applies the rules in the following order: inbound traffic policing on interface, broadcast traffic suppression in the VLAN, and inbound flow-based traffic policing (descending order of priority). For example, if packets match both the inbound traffic policing rule on an interface and broadcast traffic suppression rule in a VLAN, the inbound traffic policing rule on the interface takes effect. For details on how to configure the inbound traffic policing on an interface and inbound flow-based traffic policing, see Configuring Inbound Interface-based Rate Limiting and Configuring MQC to Implement Traffic Policing in "Traffic Policing, Traffic Shaping, and Interface-based Rate Limiting" in the S1720, S2700, S5700, and S6720 V200R011C10 Configuration Guide - QoS.

Pre-configuration Tasks

Before configuring traffic suppression in a VLAN, configure link layer protocol parameters for interfaces in the VLAN to ensure that the link layer protocol status on the interfaces is Up.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run vlan vlan-id

    The VLAN view is displayed.

  3. Run broadcast-suppression threshold-value

    The broadcast suppression rate is configured in the VLAN.

Translation
Download
Updated: 2019-03-28

Document ID: EDOC1000178177

Views: 222940

Downloads: 720

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next