No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
arp anti-attack rate-limit

arp anti-attack rate-limit

Function

The arp anti-attack rate-limit command sets the maximum rate and rate limit duration of ARP packets globally or on an interface.

The undo arp anti-attack rate-limit command restores the default maximum rate and rate limit duration of ARP packets globally or on an interface.

By default, a maximum of 100 ARP packets are allowed to pass in 1 second.

Format

arp anti-attack rate-limit packet-number [ interval-value ]

undo arp anti-attack rate-limit

Parameters

Parameter

Description

Value

packet-number

Specifies the maximum rate of sending ARP packets, that is, the number of ARP packets allowed to pass through in the rate limit duration.

The value is an integer that ranges from 1 to 32768. The default value is 100.

interval-value

Specifies the rate limit duration of ARP packets.

The value is an integer that ranges from 1 to 86400, in seconds. The default value is 1 second.

Views

System view, GE interface view, MultiGE interface view, XGE interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After rate limit on ARP packets is enabled, run the arp anti-attack rate-limit command to set the maximum rate and rate limit duration of ARP packets globally or on an interface. In the rate limit duration, if the number of received ARP packets exceeds the limit, the device discards the excess ARP packets.

Prerequisites

Rate limit on ARP packets has been enabled globally or on an interface using the arp anti-attack rate-limit enable command.

Precautions

If the maximum rate and rate limit duration are set globally or on an interface at the same time, the configurations on an interface and globally take effect in descending order of priority.

Example

# Configure GE0/0/1 to allow 200 ARP packets to pass through in 10 seconds.
<Huawei> system-view
[Huawei] interface gigabitethernet 0/0/1
[Huawei-GigabitEthernet0/0/1] arp anti-attack rate-limit enable
[Huawei-GigabitEthernet0/0/1] arp anti-attack rate-limit 200 10
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 210198

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next