ipv6 nd ns send rate-limit (interface view)

Function

The ipv6 nd ns send rate-limit command configures a rate limit for sending ND NS messages on an interface, that is, the maximum number of ND NS messages that can be sent per second.

The undo ipv6 nd ns send rate-limit command restores the default configuration.

By default, the rate limit for sending ND NS messages is not configured on an interface, and ND NS messages are sent at a globally configured rate limit.

Format

ipv6 nd ns send rate-limit rate-limit

undo ipv6 nd ns send rate-limit rate-limit

Parameters

Parameter Description Value
rate-limit rate-limit

Specifies a rate limit for sending ND NS messages on an interface.

The value is an integer, in messages/second. The value ranges from 1 to 1000.

Views

100ge sub-interface view, 100GE interface view, 10GE sub-interface view, 10GE interface view, 200GE sub-interface view, 25GE sub-interface view, 25GE interface view, 400GE sub-interface view, 400GE interface view, 40GE sub-interface view, 40GE interface view, 50GE sub-interface view, 50GE interface view, Eth-Trunk sub-interface view, Eth-Trunk interface view, FlexE interface view, GE optical interface view, GE sub-interface view, GE interface view, GE electrical interface view, Global VE sub-interface view, PW-VE sub-interface view, PW-VE interface view, VBDIF interface view, VE sub-interface view, VLANIF interface view, Management interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
nd write

Usage Guidelines

Usage Scenario

If a device is attacked, it receives a large number of messages within a short period. As a result, the device consumes many CPU resources to learn and respond to ND entries, affecting the processing of other services. To resolve this issue, configure a rate limit for sending ND NS messages on the corresponding interface. After the configuration is complete, the device counts the number of ND NS messages sent per period. If the number exceeds the configured limit, the device delays scheduling or ignores excess ND NS messages.

Example

# Set a rate limit for sending NS messages to 550 messages/second.
<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet 0/1/0
[~HUAWEI-GigabitEthernet0/1/0] ipv6 enable
[*HUAWEI-GigabitEthernet0/1/0] ipv6 nd ns send rate-limit 550
Parent Topic: IPv6 ND Configuration Commands
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >