arp anti-attack rate-limit
Function
The arp anti-attack rate-limit command sets the maximum rate and rate limit duration of ARP packets globally or on an interface.
The undo arp anti-attack rate-limit command restores the default maximum rate and rate limit duration of ARP packets globally or on an interface.
By default, a maximum of 100 ARP packets are allowed to pass in 1 second.
Parameters
Parameter |
Description |
Value |
|---|---|---|
packet-number |
Specifies the maximum rate of sending ARP packets, that is, the number of ARP packets allowed to pass through in the rate limit duration. |
The value is an integer that ranges from 1 to 32768. The default value is 100. |
interval-value |
Specifies the rate limit duration of ARP packets. |
The value is an integer that ranges from 1 to 86400, in seconds. The default value is 1 second. |
Views
System view, GE interface view, XGE interface view, Eth-Trunk interface view, port group view, 40GE interface view
Usage Guidelines
Usage Scenario
After rate limit on ARP packets is enabled, run the arp anti-attack rate-limit command to set the maximum rate and rate limit duration of ARP packets globally or on an interface. In the rate limit duration, if the number of received ARP packets exceeds the limit, the device discards the excess ARP packets.
Prerequisites
Rate limit on ARP packets has been enabled globally or on an interface using the arp anti-attack rate-limit enable command.
Precautions
If the maximum rate and rate limit duration are set globally or on an interface at the same time, the configurations on an interface and globally take effect in descending order of priority.
