SECE/4/ARP_SMAC_SPEEDLIMIT_ALARM: OID [oid] The arp packet speed with source mac [OCTET] exceed the speed-limit value configured [INTEGER].
The rate of ARP packets with the specified source MAC address exceeds the threshold.
Alarm ID | Alarm Severity | Alarm Type |
---|---|---|
1.3.6.1.4.1.2011.5.25.165.2.2.2.15 |
Warning |
QoS Alarm(2) |
Name | Meaning |
---|---|
oid |
Indicates the MIB object ID of the alarm. |
OCTET |
Indicates the source MAC address of packets. |
INTEGER |
Indicates the alarm threshold. |
If the alarm is generated, the user traffic volume exceeds the threshold, and excess traffic will be discarded. If the traffic belongs to a service, the service of the specified source MAC address may be intermediately interrupted. If the traffic is generated by an ARP attack, the packet rate limit helps prevent bandwidth exhaustion.
Run the arp speed-limit source-mac [ mac-address ] maximum maximum command to adjust the alarm threshold for the rate of ARP packets with the specified source MAC address.
Check the ARP attack source based on the MAC address and process the attack source.