cpu-defend host-car
Function
The cpu-defend host-car command specifies the packet type to which the user-level rate limiting is applied.
By default, the user-level rate limiting can apply to ARP Request, ARP Reply, ND, DHCP Request, DHCPv6 Request, and 8021x packets, but does not apply to IGMP and HTTPS-SYN packets.
Only the S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this command.
Format
cpu-defend host-car { { arp | dhcp-request | dhcpv6-request | igmp | nd | 8021x | https-syn } * | all }
Parameters
| Parameter | Description | Value |
|---|---|---|
| arp | Applies user-level rate limiting to ARP packets. | - |
| dhcp-request | Applies user-level rate limiting to DHCP Request packets. | - |
| dhcpv6-request | Applies user-level rate limiting to DHCPv6 Request packets. | - |
| igmp | Applies user-level rate limiting to IGMP packets. | - |
| nd | Applies user-level rate limiting to ND packets. | - |
| 8021x | Applies user-level rate limiting to 8021x packets. | - |
| https-syn | Applies user-level rate limiting to HTTPS-SYN packets. | - |
| all | Applies user-level rate limiting to ARP, DHCP Request, DHCPv6 Request, IGMP, ND, 8021x, and HTTPS-SYN packets. | - |
Usage Guidelines
Usage Scenario
By default, the switch limits the rates of the ARP, ND, DHCP Request, DHCPv6 Request, and 8021x packets received from user MAC addresses, including wired and wireless users, and discards excessive packets when the packet rates exceed the rate limit. If you need to limit the rate of only IGMP and HTTPS-SYN packets or packets of the specified types, specify the packet type.
Precautions
- Before using this command, run the cpu-defend host-car enable command to enable user-level rate limiting.
- If the command is run multiple times, the user-level rate limiting applies to the packet type specified in the last command. For example, if the command specifying ARP and DHCP Request packets is run, and then the cpu-defend host-car arp command is run, the user-level rate limiting applies to only ARP packets.
- After the cpu-defend host-car all command is run, the configuration file displays cpu-defend host-car 8021x arp dhcp-request dhcpv6-request https-syn igmp nd.