The ARP packet rate(309pps) exceeded the rate limit(50pps) on interface GigabitEthernet1/0/4 in the last 60 seconds.
日志频繁报错,不止发生在这一个接口,其余大部分接口,只是报错频率不同,
我查了论坛,说是有ARP超过限制的速度,我全二层网络,交换机下联全是接入交换机和摄像机,请问是哪里出了问题,如何排查?
display current-configuration
#
version 5.20, Release 2220P02
#
#
#
irf mac-address persistent timer
irf auto-update enable
undo irf link-delay
#
domain default enable system
#
telnet server enable
#
password-recovery enable
#
vlan 1
#
vlan 100
#
vlan 152
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
#
stp enable
#
interface Bridge-Aggregation1
port access vlan 100
#
interface NULL0
#
interface Vlan-interface1
ip address dhcp-alloc client-identifier mac Vlan-interface1
#
interface Vlan-interface2
ip address 30.0.0.5 255.255.255.0
#
interface Vlan-interface100
ip address 192.168.100.1 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/3
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/4
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/5
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/6
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/7
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/8
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/9
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/10
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/11
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/12
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/13
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/14
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/15
port link-mode bridge
port access vlan 100
flow-interval 5
port link-aggregation group 1
#
interface GigabitEthernet1/0/16
port link-mode bridge
port access vlan 100
flow-interval 5
port link-aggregation group 1
#
interface GigabitEthernet1/0/17
port link-mode bridge
port link-type trunk
port trunk permit vlan all
shutdown
flow-interval 5
#
interface GigabitEthernet1/0/18
port link-mode bridge
port link-type trunk
port trunk permit vlan all
shutdown
flow-interval 5
#
interface GigabitEthernet1/0/19
port link-mode bridge
port link-type trunk
port trunk permit vlan all
shutdown
flow-interval 5
#
interface GigabitEthernet1/0/20
port link-mode bridge
port link-type trunk
port trunk permit vlan all
shutdown
flow-interval 5
#
interface GigabitEthernet1/0/21
port link-mode bridge
port access vlan 152
shutdown
flow-interval 5
#
interface GigabitEthernet1/0/22
port link-mode bridge
port access vlan 152
flow-interval 5
#
interface GigabitEthernet1/0/23
port link-mode bridge
port access vlan 152
flow-interval 5
#
interface GigabitEthernet1/0/24
port link-mode bridge
port link-type trunk
port trunk permit vlan all
flow-interval 5
#
interface GigabitEthernet1/0/25
port link-mode bridge
port access vlan 100
flow-interval 5
#
interface GigabitEthernet1/0/26
port link-mode bridge
port access vlan 100
flow-interval 5
#
interface GigabitEthernet1/0/27
port link-mode bridge
port access vlan 100
flow-interval 5
#
interface GigabitEthernet1/0/28
port link-mode bridge
port access vlan 100
flow-interval 5
#
interface GigabitEthernet1/0/29
port link-mode bridge
port access vlan 100
flow-interval 5
#
interface GigabitEthernet1/0/30
port link-mode bridge
port access vlan 100
shutdown
flow-interval 5
#
interface GigabitEthernet1/0/31
port link-mode bridge
port access vlan 100
shutdown
flow-interval 5
#
interface GigabitEthernet1/0/32
port link-mode bridge
port access vlan 100
shutdown
flow-interval 5
#
ip route-static 0.0.0.0 0.0.0.0 192.168.100.254
#
load xml-configuration
#
load tr069-configuration
#
user-interface aux 0
user-interface vty 0 4
authentication-mode scheme
user-interface vty 5 15
#
return
全二层网络,上联核心交换机,联接入交换机,最底端全是摄像机等设备
(0)
肯定是有arp攻击或者IP扫描,可以在接口下配置arp限速
(0)
接入交换机端口上大部分是摄像机,少量门禁,无PC,只有汇聚交换机上有监控的Linux服务器和少量PC客户端,不会有IP扫描的情况。
接入交换机端口上大部分是摄像机,少量门禁,无PC,只有汇聚交换机上有监控的Linux服务器和少量PC客户端,不会有IP扫描的情况。
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
在网络的监控平台,有丢包,虽然不多,但偶有卡顿