Rate Limiting Arp Packets; Applying A Rate Limit To Arp Packets On An Interface - Dell PowerConnect B-RX Configuration Manual

7
Configuring ARP parameters
NOTE
The ARP request broadcast is a MAC broadcast, which means the broadcast goes only to devices
that are directly attached to the device. A MAC broadcast is not routed to other networks. However,
some routers, including the device, can be configured to reply to ARP requests from one network on
behalf of devices on another network. Refer to
NOTE
If the router receives an ARP request packet that it is unable to deliver to the final destination
because of the ARP timeout and no ARP response is received (the device knows of no route to the
destination address), the router sends an ICMP Host Unreachable message to the source.

Rate limiting ARP packets

You can limit the number of ARP packets the device accepts during each second. By default, the
software does not limit the number of ARP packets the device can receive. Since the device sends
ARP packets to the CPU for processing, if a device in a busy network receives a high number of ARP
packets in a short period of time, some CPU processing might be deferred while the CPU processes
the ARP packets.
To prevent the CPU from becoming flooded by ARP packets in a busy network, you can restrict the
number of ARP packets the device will accept each second. When you configure an ARP rate limit,
the device accepts up to the maximum number of packets you specify, but drops additional ARP
packets received during the one-second interval. When a new one-second interval starts, the
counter restarts at zero, so the device again accepts up to the maximum number of ARP packets
you specified, but drops additional packets received within the interval.
To limit the number of ARP packets the device will accept each second, enter a command such as
the following at the global CONFIG level of the CLI.
BigIron RX(config)# arp-port-rate-limit 100
This command configures the device to accept up to 100 ARP packets each second. If the device
receives more than 100 ARP packets during a one-second interval, the device drops the additional
ARP packets during the remainder of that one-second interval.
Syntax: [no] arp-port- rate-limit <num>
The <num> parameter specifies the number of ARP packets and can be from 0 – 30,000. If you
specify 0, the device will not accept any ARP packets.

Applying a rate limit to ARP packets on an interface

To prevent the CPU from becoming flooded by ARP packets in a busy network, you can restrict the
number of ARP packets an interface will accept each second. When ARP rate limit is configured on
an interface, the interface will accept up to the maximum number of packets you specify, but drops
additional ARP packets received during the one-second interval. When a new one-second interval
starts, the counter restarts at zero, so the interface again accepts up to the maximum number of
ARP packets you specified, but drops additional packets received within the interval. This feature is
disabled by default.
Configuration notes
•
188
When configuring ARP rate limiting globally, interfcae level ARP rate-limiting gets removed.
"Enabling proxy ARP" on page 190.
BigIron RX Series Configuration Guide
53-1002253-01