Displaying and Maintaining ARP Configuration 579Configuring ARP SourceSuppressionBy setting the maximum numbers of ARP packets of different types that can besent to the CPU in a unit of time, you can protect the CPU from being attacked byillegal ARP packets.Displaying andMaintaining ARPConfigurationAfter the above configuration, execute the display command in any view todisplay and verify the ARP configuration.Execute the reset command in user view to clear ARP entries.Configure the maximum ARPpacket receive rate on theportarp rate-limit rate OptionalBy default, the maximum ARPpacket receive rate on a portis 15pps.Configure the port stateauto-recovery intervalarp protective-downrecover interval timeOptional300 seconds by default.Configure the port as atrusted port for ARP packetrate limitarp rate-limit trust OptionalBy default, the port is anuntrusted port.Table 457 Configure the ARP packet rate limit functionOperation Command DescriptionTable 458 Configure ARP source suppressionOperation Command DescriptionEnter system view system-view -Configure the maximumnumber of ARP packetsof a type that can be sentto the CPU in a unit oftimearp source-suppressionlimit { total | local |through } limit-valueOptionalThe default value varies with the typeof ARP packets■ When total is adopted, thedefault value is 100.■ When local is adopted, thedefault value is 3.■ When through is adopted, thedefault value is 3.
