Chapter 11

Rate Limiting and Rate Shaping

 

 

Port-based rate limiting

273

 

How port-based fixed rate limiting works

274

 

Rate limiting in hardware

274

 

Configuration notes for port-based fixed rate limiting

275

 

Configuring a port-based fixed rate limiting policy

275

 

Displaying the port-based fixed rate limiting configuration . .

275

Rate shaping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276 Configuration notes for rate shaping . . . . . . . . . . . . . . . . . . . . 276 Configuring outbound rate shaping for a port . . . . . . . . . . . . . 276 Configuring outbound rate shaping for a specific priority . . . .277 Configuring outbound rate shaping for a trunk port . . . . . . . .277 Displaying rate shaping configurations . . . . . . . . . . . . . . . . . .277

CPU rate-limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277

Chapter 12

DHCP

 

 

Dynamic ARP inspection

279

 

ARP poisoning

279

 

Dynamic ARP Inspection

280

 

Configuration notes and feature limitations for DAI

281

 

Dynamic ARP inspection configuration

282

 

Displaying ARP inspection status and ports

283

 

Displaying the ARP table

283

DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283 How DHCP snooping works . . . . . . . . . . . . . . . . . . . . . . . . . . . .284 System reboot and the binding database . . . . . . . . . . . . . . . .285 Configuration notes and feature limitations

for DHCP snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285 Configuring DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . .285 Clearing the DHCP binding database . . . . . . . . . . . . . . . . . . . .287 Displaying DHCP snooping status and ports . . . . . . . . . . . . . .287 Displaying the DHCP snooping binding database . . . . . . . . . .287 Displaying DHCP binding entry and status. . . . . . . . . . . . . . . .287 DHCP snooping configuration example . . . . . . . . . . . . . . . . . .288

DHCP relay agent information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288 Configuration notes for DHCP option 82 . . . . . . . . . . . . . . . . .289 DHCP option 82 sub-options. . . . . . . . . . . . . . . . . . . . . . . . . . .289 DHCP option 82 configuration . . . . . . . . . . . . . . . . . . . . . . . . .291 Viewing information about DHCP option 82 processing . . . . .293

IP source guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .294 Configuration notes and feature limitations

for IP source guard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .295 Enabling IP source guard on a port . . . . . . . . . . . . . . . . . . . . .296 Defining static IP source bindings . . . . . . . . . . . . . . . . . . . . . .296 Enabling IP source guard per-port-per-VLAN . . . . . . . . . . . . . .297 Enabling IP source guard on a VE . . . . . . . . . . . . . . . . . . . . . . .297 Displaying learned IP addresses. . . . . . . . . . . . . . . . . . . . . . . .297

xii

Brocade ICX 6650 Security Configuration Guide

 

53-1002601-01

Page 12
Image 12
Brocade Communications Systems 6650 Port-based rate limiting, How port-based fixed rate limiting works, ARP poisoning