User Manual
UMN:CLI
V5824G
319
8.8
Flood Guard
Flood guard limits number of packets, how many packets can be transmitted, in
configured bandwidth, whereas Rate limit controls packets through configuring width of
bandwidth, which packets pass through. This function prevents receiving packets more
than configured amount without enlarging bandwidth.
<Rate Limit>
<Flood Guard>
Bandwidth
Control
bandwidth
Configure Rate Limit on port
1
2
3
n
:
:
n+1
n+2
Configure Flood-guard to
allow packets as many as
‘
n
’
per a second
‘
n
’
packets
allowed for
a second
Packets
over thrown
away
Fig. 8.35
Rate Limit and Flood Guard
8.8.1
MAC Flood Guard
MAC flood guard controls the number of incoming packets per second, which have the
same MAC address. Using this function, you can protect malicious attacks such as Denial
of Service (DoS) from unauthorized user.
To configure the MAC flood guard, use the following command.
Command
Mode
Description
mac-flood-guard
PORTS
<1-6000>
Bridge
Enables the MAC flood guard on a port by specifying
the number of incoming packets with the same MAC
address per second.
PORTS: port number
1-6000: the number of packets per second
no mac-flood-guard
[
PORTS
]
Disables the MAC flood guard.
To display the configured MAC flood guard, use the following command.
Command
Mode
Description
show mac-flood-guard
Enable
Global
Bridge
Shows the configured MAC flood guard.
show mac-flood-guard macs
Shows the MAC addresses blocked by the MAC flood
guard.