When ARP throttle is enabled in
filter
mode, the switch drops all ARP packet traffic received from blacklisted
devices while continuing to perform the above three
monitor
actions.
Example
Configure the switch to drop ARP packet traffic received from blacklisted devices.
switch(config)# ip arp-throttle remediation-mode filter
ip arp-throttle aging-time
Configures the time in seconds that a blacklisted device remains on the blacklist. (Default: 300 seconds.) If the
switch is configured to filter ARP packets as described above, then the ARP packets received from blacklisted
devices are dropped.
Syntax
ip arp-throttle aging-time <1–86400>
Example
Configure the switch to reinstate blacklisted clients after 600 seconds on the blacklist.
switch(config)# ip arp-throttle aging-time 600
ip arp-throttle threshold
Specifies the number of ARP packets per five-second period that the switch can receive from another device.
(Default: 30.) Exceeding this rate places the source device on the blacklist. If the switch is configured to filter ARP
packets as described for
remediation mode
(page yy), then the ARP packets received from blacklisted devices
are dropped.
Syntax
ip arp-throttle threshold <1 – 1024>
Example
Configure the switch to blacklist a client from which it receives more than eight ARP packets in a five second
period.
switch(config)#ip arp-throttle threshold 8
ip arp-throttle exclude-mac
Excludes traffic from a device having the specified MAC address from ARP packet monitoring and filtering, and
adds the MAC address to the Excluded MAC List in the output for the
show ip arp-throttle
command (page xx).
You can exclude up to ten MAC addresses.
Syntax
[no] ip arp-throttle exclude-mac <
MAC-addr
[
MAC-addr
...
MAC-addr
]]>
Options
no
Chapter 5 Routing Basics
135
