Configuring Rate Limit on ARP Packets based on the Destination IP Address
Context
When processing a large number of ARP packets with the same destination IP address, the CPU is overloaded and cannot process other services.
To prevent this problem, limit the rate of ARP packets based on the destination IP address. The device collects statistics on ARP packets with a specified destination IP address. If the number of received ARP packets with the specified destination IP address per second exceeds the threshold, the device discards the excess ARP packets.
Procedure
- Run system-view
The system view is displayed.
- Run arp anti-attack rate-limit destination-ip maximum maximum
Rate limit on ARP packets based on the destination IP address is configured.
By default, the maximum rate of ARP packets sent to each destination IP address is set to 500 pps, that is, a maximum of 500 ARP packets with the same destination IP address are allowed to pass through per second.
- Run commit
The configuration is committed.