< Home

SECE_1.3.6.1.4.1.2011.5.25.165.2.2.2.15 hwArpSourceMacSpeedLimitAlarm

Description

SECE/4/ARP_SMAC_SPEEDLIMIT_ALARM: OID [oid] The arp packet speed with source mac [OCTET] exceed the speed-limit value configured [INTEGER].

The rate of ARP packets with the specified source MAC address exceeds the threshold.

Attribute

Alarm ID Alarm Severity Alarm Type

1.3.6.1.4.1.2011.5.25.165.2.2.2.15

Warning

QoS Alarm(2)

Parameters

Name Meaning

oid

Indicates the MIB object ID of the alarm.

OCTET

Indicates the source MAC address of packets.

INTEGER

Indicates the alarm threshold.

Impact on the System

If the alarm is generated, the user traffic volume exceeds the threshold, and excess traffic will be discarded. If the traffic belongs to a service, the service of the specified source MAC address may be intermediately interrupted. If the traffic is generated by an ARP attack, the packet rate limit helps prevent bandwidth exhaustion.

Possible Causes

  • Cause 1: The user sets a low alarm threshold for the rate of ARP packets with the specified source MAC address.
  • Cause 2: The user of that specified source MAC address sends ARP attack packets.

Procedure

  1. Cause 1: The user sets a low alarm threshold for the rate of ARP packets with the specified source MAC address.

    Run the arp speed-limit source-mac [ mac-address ] maximum maximum command to adjust the alarm threshold for the rate of ARP packets with the specified source MAC address.

  2. Cause 2: The user of that specified source MAC address sends ARP attack packets.

    Check the ARP attack source based on the MAC address and process the attack source.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >