Ruijie Networks RG-S2600E Series, Справочное руководство CLI

Страница: 826 / 1191

S2600E CLI Reference Guide Chapter 15 NFPP Configuration Commands
attack-threshold-pps
Set the attack threshold with the
valid range of [1, 9999].
Default
Settings
By default, the rate-limit threshold and the attack threshold
are not configured.
Command
mode Interface configuration mode.
Usage
guidelines
The attack threshold value shall be equal to or greater
than the rate-limit threshold.
For ND snooping, the port is classified into untrusted port
and trusted port. The untrusted port connects to the host
and the trusted port connects to the gateway. The rate-limt
threshold for the trusted port shall higher than the one for
the untrusted port because the traffic of the trusted port
generally is higher than the traffic of the untrusted port.
For the trusted port with ND snooping enabled, ND
snooping advertises ND guard to set the rate-limit
threshold and attack threshold for the three categories of
packets as 800pps and 900pps respectively.
Examples
Ruijie(config)# interface G 0/1
Ruijie(config-if)# nfpp nd-guard policy per-port ns-na 50
100
Ruijie(config-if)# nfpp nd-guard policy per-port rs 10 20
Ruijie(config-if)# nfpp nd-guard policy per-port
ra-redirect 10 20
Command Description
nd-guard
attack-threshold
Set the global attack threshold.
nd-guard
rate-limit
Set the global rate-limit threshold.
Related
commands
show nfpp
nd-guard
summary
Show the configurations.