Configuration Guide NFPP Commands
21 NFPP Commands
21.1 arp-guard attack-threshold
Use this command to set the global attack threshold. When the packet rate exceeds the attack
threshold, the attack occurs.
Use the no or default form of this command to restore the default setting.
arp-guard attack-threshold { per-src-ip | per-src-mac | per-port } pps
no arp-guard attack-threshold { per-src-ip | per-src-mac | per-port }
default arp-guard attack-threshold { per-src-ip | per-src-mac | per-port }
Sets the attack threshold for each source IP address.
Sets the attack threshold for each source MAC address.
Sets the attack threshold for each port.
Sets the attack threshold, in the range from 1 to 19,999 in unit of pps.
The default value varies with products. For details, see the Configuration Guide.
The attack threshold shall be equal to or greater than the rate-limit threshold.
The following example sets the global attack threshold.
Ruijie(config)# nfpp
Ruijie(config-nfpp)# arp-guard attack-threshold per-src-ip 2
Ruijie(config-nfpp)# arp-guard attack-threshold per-src-mac 3
Ruijie(config-nfpp)# arp-guard attack-threshold per-port 50
Displays the rate-limit threshold and attack
threshold.
show nfpp arp-guard summary
Displays the configuration.
show nfpp arp-guard hosts
Displays the monitored host.
clear nfpp arp-guard hosts
Clears the isolated host.