Configuring Source-Based Arp Suppression - Huawei Quidway S9300 Configuration Manual

4 ARP Security Configuration
No.
1
2
3

4.5.2 Configuring Source-based ARP Suppression

Context
A user may have special requirements; therefore, you can set the suppression rate for ARP
packets with a specified source IP address different from packets with other source IP addresses.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
arp speed-limit source-ip maximum maximum
The suppression rate of ARP packets is set.
Step 3 (Optional) Run:
arp speed-limit source-ip ip-address maximum maximum
The suppression rate of ARP packets with a specified source IP address is set.
After the preceding configurations are complete, the suppression rate of ARP packets with a
specified source IP address is the value specified by maximum in step 3, and the suppression
rate of ARP packets with other source IP addresses is the value specified by maximum in step
2.
If the suppression rate of ARP packets is set to 0, it indicates that ARP packets are not suppressed.
By default, the suppression rate of ARP packets is 5 pps.
----End
4-16 Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Data
Maximum transmission rate of the ARP
packets sent by a specified source IP address
(Optional) Source IP address and maximum
transmission rate of the ARP packets sent by
a specified source IP address
Maximum transmission rate of the ARP Miss
packets sent by a specified source IP address
(Optional) Source IP address and maximum
transmission rate of the ARP Miss packets
sent by a specified source IP address
Maximum transmission rate of the ARP
packets sent to the security module
(Optional) Alarm threshold of the number of
ARP packets discarded because they exceed
the transmission rate.
Issue 06 (2010–01–08)