The icmp rate-limit enable command enables the traffic suppression function for ICMP packets.
The undo icmp rate-limit enable command disables the traffic suppression function for ICMP packets.
By default, the traffic suppression function for ICMP packets is disabled.
Attackers may send a large number of ICMP packets to attack a network. If the device sends all the received ICMP packets to the CPU for processing, a lot of CPU usage resources are occupied and other services may be abnormal. To prevent ICMP packet attacks, you can configure the device to suppress ICMP packets.
Before configuring traffic suppression for ICMP packets on an interface, run the undo icmp-reply fast command to disable the ICMP reply fast function.