F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

17
Hardware Feature com
p
atible
Firewall module Yes
U200-A No
U200-S Yes
CAUTION:
Use this function with caution, because it might consume a large amount of system resources.
After you enable subinterface rate statistics collection on an Ethernet interface, the device periodically
refreshes the rate statistics on the subinterfaces of this Ethernet interface. You can use the display
interface command to view the rate statistics.
To enable subinterface rate statistics collection on an Ethernet interface:
Ste
p
Command
Remarks
31. Enter system view. system-view N/A
32. Enter Ethernet interface view.
interface interface-type
interface-number
N/A
33. Enable subinterface rate statistics
collection on the Ethernet interface.
sub-interface rate-statistic
By default, subinterface rate
statistics collection is disabled.
376BConfiguring a Layer 2 Ethernet interface or subinterface
1074BConfiguring storm suppression
You can use the storm suppression function to limit the size of a particular type of traffic (broadcast,
multicast, or unknown unicast traffic) that can be received on a per-interface basis in Ethernet interface
view.
In interface view, you set the maximum size of broadcast, multicast or unknown unicast traffic allowed to
be received on an interface. When the broadcast, multicast, or unknown unicast traffic received on the
interface exceeds this threshold, the system discards packets until the traffic drops below this threshold.
To set storm suppression thresholds on one Ethernet interface:
Ste
p
Command
Remarks
34. Enter system view.
system-view
N/A
35. Enter Ethernet interface view.
interface interface-type
interface-number
N/A
36. Set the broadcast suppression
threshold ratio.
broadcast-suppression ratio
Optional.
By default, broadcast traffic is allowed to
pass through an interface.
37. Set the multicast suppression
threshold ratio.
multicast-suppression ratio
Optional.
By default, multicast traffic is allowed to
pass through an interface.