Brocade Communications Systems Brocade ICX 6650 6650 - Manual (Page 12)

xii Brocade ICX 6650 Security Configuration Guide
53-1002601-01
Chapter 11 Rate Limiting and Rate Shaping
Port-based rate limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273
How port-based fixed rate limiting works . . . . . . . . . . . . . . . . . 274
Rate limiting in hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Configuration notes for port-based fixed rate limiting. . . . . . .275
Configuring a port-based fixed rate limiting policy . . . . . . . . .275
Displaying the port-based fixed rate limiting configuration . .275
Rate shaping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
Configuration notes for rate shaping . . . . . . . . . . . . . . . . . . . . 276
Configuring outbound rate shaping for a port . . . . . . . . . . . . . 276
Configuring outbound rate shaping for a specific priority . . . .277
Configuring outbound rate shaping for a trunk port . . . . . . . .277
Displaying rate shaping configurations . . . . . . . . . . . . . . . . . .277
CPU rate-limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277
Chapter 12 DHCP
Dynamic ARP inspection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279
ARP poisoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279
Dynamic ARP Inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .280
Configuration notes and feature limitations for DAI . . . . . . . .281
Dynamic ARP inspection configuration . . . . . . . . . . . . . . . . . .282
Displaying ARP inspection status and ports . . . . . . . . . . . . . .283
Displaying the ARP table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283
DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283
How DHCP snooping works . . . . . . . . . . . . . . . . . . . . . . . . . . . .284
System reboot and the binding database . . . . . . . . . . . . . . . .285
Configuration notes and feature limitations
for DHCP snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285
Configuring DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . .285
Clearing the DHCP binding database . . . . . . . . . . . . . . . . . . . .287
Displaying DHCP snooping status and ports . . . . . . . . . . . . . .287
Displaying the DHCP snooping binding database . . . . . . . . . .287
Displaying DHCP binding entry and status. . . . . . . . . . . . . . . .287
DHCP snooping configuration example . . . . . . . . . . . . . . . . . .288
DHCP relay agent information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288
Configuration notes for DHCP option 82 . . . . . . . . . . . . . . . . .289
DHCP option 82 sub-options. . . . . . . . . . . . . . . . . . . . . . . . . . .289
DHCP option 82 configuration . . . . . . . . . . . . . . . . . . . . . . . . .291
Viewing information about DHCP option 82 processing . . . . .293
IP source guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .294
Configuration notes and feature limitations
for IP source guard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .295
Enabling IP source guard on a port . . . . . . . . . . . . . . . . . . . . .296
Defining static IP source bindings . . . . . . . . . . . . . . . . . . . . . .296
Enabling IP source guard per-port-per-VLAN . . . . . . . . . . . . . .297
Enabling IP source guard on a VE . . . . . . . . . . . . . . . . . . . . . . .297
Displaying learned IP addresses. . . . . . . . . . . . . . . . . . . . . . . .297