No relevant resource is found in the selected language.
Your browser version is too early. Some functions of the website may be unavailable. To obtain better user experience, upgrade the browser to the latest version.
CloudEngine 12800 and 12800E V200R005C10 Configuration Guide - Security
This document describes the configurations of Security, including AAA, 802.1x Authentication, ACL, TCAM ACL Customization, local attack defense, Microsegmentation, MFF, attack defense, traffic suppression and storm control, ARP security, Port security, MACsec, DHCP snooping, IPSG, URPF, SSL, Keychain and FIPS.
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Traffic Suppression
Traffic Suppression
Figure 9-1 Networking diagram of traffic suppression
Traffic suppression can be configured in
a VLAN on a Layer 2 network device to limit the rates of broadcast
packets, multicast packets, and
unknown unicast packets in the VLAN.
Switch A is connected to a Layer
2 network and a router. To limit the rates of broadcast, multicast, and unknown unicast packets
forwarded by the Layer 2 network, configure traffic suppression on
the Layer 2 Ethernet interface 10GE1/0/1 of Switch A.
You can also configure Switch A to block the outgoing broadcast, multicast, and unknown unicast packets
on 10GE1/0/1 to ensure Layer 2 network security.