Optional) Configuring Rate Limit Of Dhcpv6 Messages; Checking The Configuration - Huawei S9300 Configuration Manual

S9300&S9300E Terabit Routing Switch
Configuration Guide - IP Service

5.3.4 (Optional) Configuring Rate Limit of DHCPv6 Messages

To prevent a large number of messages of clients or relay agents from attacking the device, the
S9300&S9300E can limit the rate of DHCPv6 messages to be forwarded.
Context
After rate limit of DHCPv6 messages is enabled, excessive DHCPv6 messages are discarded
when the rate of DHCPv6 messages exceeds the limit. When the number of discarded DHCPv6
messages exceeds the threshold, the S9300&S9300E supports the log function.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
dhcp enable
DHCP is enabled.
Step 3 Run:
dhcpv6 packet-rate packet-rate
Rate limit of DHCPv6 messages is enabled and the maximum transmission rate of DHCPv6
messages is set.
By default, rate limit of DHCPv6 messages is disabled on the S9300&S9300E.
Step 4 Run:
dhcpv6 packet-rate drop-alarm enable
The alarm function for DHCPv6 messages discarded when the rate of DHCPv6 messages
exceeds rate limit.
After the log function is enabled, if the number of DHCPv6 messages that pass through the
S9300&S9300E every second exceeds the rate limit, they are discarded. By default,
S9300&S9300E sends logs when the number of discarded DHCPv6 messages exceeds 100.
Step 5 Run:
dhcpv6 packet-rate drop-alarm threshold threshold
The log threshold for DHCPv6 messages discarded is set when the rate of DHCPv6 messages
exceeds rate limit.
----End

5.3.5 Checking the Configuration

This section describes how to check the configuration of DHCPv6 relay.
Prerequisites
The configurations of DHCPv6 relay are complete.
Issue 01 (2012-03-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5 DHCPv6 Configuration
108