H3C Technologies H3C S12500-X Series Switches - Manual (Page 24)

17
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable the VTEP to drop
VXLAN packets that fail UDP
checksum check. vxlan invalid-udp-checksum discard
By default, the VTEP does not
check the UDP checksum of
VXLAN packets.
3. Enable the VTEP to drop
VXLAN packets that have
802.1Q VLAN tags in the
inner Ethernet header.
vxlan invalid-vlan-tag discard
By default, the VTEP does not
check the inner Ethernet header
for 802.1Q VLAN tags.
Enabling ARP flood suppression
Use ARP flood suppression to reduce ARP request broadcasts.
The aging timer is fixed at 25 minutes for ARP flood suppression entries. If the suppression table is full,
the VTEP stops learning new entries. For the VTEP to learn new entries, you must wait old entries to age
out, or use the reset arp suppression command to clear the table.
If the flooding disable command is configured, set the MAC aging timer to a higher value than the aging
timer for ARP flood suppression entries on all VTEPs. This setting prevents the traffic blackhole that occurs
when a MAC address entry ages out before its ARP flood suppression entry ages out.
To set the MAC aging timer, use the mac-address timer command.
When you configure ARP flood suppression on a multicast-mode VXLAN, follow these restrictions and
guidelines:
• Make sure ARP flood suppression is enabled or disabled across the VXLAN.
• Do not enable ARP flood suppression if the VXLAN contains third-party VTEPs.
To enable ARP flood suppression:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter VSI view. vsi vsi-name N/A
3. Enable ARP flood suppression. arp suppression enable
By default, ARP flood
suppression is disabled.
Configuring VXLAN packet statistics
Step Command Remarks
1. Enter system view. system-view N/A