Configuring Source-Based Arp Suppression - Huawei Quidway S9300 Configuration Manual

4 ARP Security Configuration
Pre-configuration Tasks
Before configuring ARP suppression, complete the following task:
l
Data Preparation
To configure ARP suppression, you need the following data.
No.
1
2
3

4.5.2 Configuring Source-based ARP Suppression

Context
A user may have special requirements; therefore, you can set the suppression rate for ARP
packets with a specified source IP address different from packets with other source IP addresses.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
arp speed-limit source-ip maximum maximum
4-14
packets are sent to the security module, the security module will be impacted. In this case,
you can suppress the transmission rate of the ARP packets; the packets that exceed the
transmission rate are discarded.
Setting the parameters of the link layer protocol and the IP address of the interface and
enabling the link-layer protocol
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Data
Maximum transmission rate of the ARP
packets sent by a specified source IP address
(Optional) Source IP address and maximum
transmission rate of the ARP packets sent by
a specified source IP address
Maximum transmission rate of the ARP Miss
packets sent by a specified source IP address
(Optional) Source IP address and maximum
transmission rate of the ARP Miss packets
sent by a specified source IP address
Maximum transmission rate of the ARP
packets sent to the security module
(Optional) Alarm threshold of the number of
ARP packets discarded because they exceed
the transmission rate.
Issue 01 (2009-07-28)